完美世界.apk分析结果

温馨提示：APP静态检测会有结果不完整的现象，如有疑问或建议，可加入我们的微信群讨论

APP图标

下载APP

文件信息

文件名 wanmeishijie (1).apk
文件大小 136.36MB
MD5值 473da7f773eaf5ea7cb8ba48af7dfdf5
SHA1值 579aae56dbf055f06bd948bb54fe171b5057caeb
SHA256值 9a5cc5dff3593f547cb6a742c4aee2f34ecd8e2fde89e887d9f999122efdd2cf

APK信息

APK名称完美世界
包名 com.urus.xingjizhengba6677788
主活动 org.cocos2dx.javascript.AppActivity
安卓版本名称 1.0.0

域名线索 27 条

查看

URL线索 20 条

查看

邮箱线索 6 条

查看

手机号线索 1 条

查看

域名线索

域名	ip	地区
www.cocos.com	218.11.0.24	China - Hebei
www.khronos.org	159.65.181.57	United States of America - New Jersey
dualstack-arestapi.amap.com	106.11.43.113	China - Beijing
github.com	20.205.243.166	Singapore - Singapore
eligrey.com	104.236.163.66	United States of America - California
cgicol.amap.com	110.253.188.148	China - Hebei
dom.spec.whatwg.org	165.227.248.76	United States of America - New Jersey
adiu.amap.com	110.253.189.147	China - Hebei
h.trace.qq.com	113.56.189.246	China - Hubei
astat.bugly.cros.wr.pvp.net	170.106.118.26	United States of America - California
purl.eligrey.com	104.236.163.66	United States of America - California
heycam.github.io	185.199.111.153	United States of America - Pennsylvania
crbug.com	216.239.32.29	United States of America - California
www.apple.com	221.194.154.187	China - Hebei
android.bugly.qq.com	124.95.225.146	China - Liaoning
lbs.amap.com	110.253.188.148	China - Hebei
cdn.jsdelivr.net	151.101.89.229	United States of America - California
www.w3.org	104.18.23.19	United States of America - California
astat.bugly.qcloud.com	119.28.121.133	Singapore - Singapore
www.openssl.org	34.49.79.89	United States of America - California
open.weixin.qq.com	116.128.171.214	China - Shanghai
dualstack-a.apilocate.amap.com	106.11.43.81	China - Beijing
apilocate.amap.com	106.11.43.81	China - Beijing
long.open.weixin.qq.com	112.65.193.150	China - Shanghai
abroad.apilocate.amap.com	59.82.44.11	China - Shanghai
restsdk.amap.com	106.11.43.113	China - Beijing
www.saxproject.org	204.68.111.100	United States of America - California

URL线索

URL信息	Url所在文件
https://h.trace.qq.com/kv	com/tencent/bugly/proguard/ad.java
https://astat.bugly.qcloud.com/rqd/async	com/tencent/bugly/proguard/ac.java
https://astat.bugly.cros.wr.pvp.net/:8180/rqd/async	com/tencent/bugly/proguard/ac.java
https://android.bugly.qq.com/rqd/async	com/tencent/bugly/crashreport/common/strategy/StrategyBean.java
https://long.open.weixin.qq.com/connect/l/qrconnect?f=json&uuid=%s	com/tencent/mm/opensdk/diffdev/a/c.java
https://open.weixin.qq.com/connect/sdk/qrconnect?appid=%s&noncestr=%s&timestamp=%s&scope=%s&signature=%s	com/tencent/mm/opensdk/diffdev/a/b.java
https://adiu.amap.com/ws/device/adius	com/amap/api/a/a/bf.java
http://cgicol.amap.com/collection/collectData?src=baseCol&ver=v74&	com/amap/api/a/a/cw.java
http://restsdk.amap.com	com/amap/api/a/a/r.java
https://restsdk.amap.com/v3/iasdkauth	com/amap/api/a/a/i.java
https://dualstack-arestapi.amap.com/v3/iasdkauth	com/amap/api/a/a/i.java
https://restsdk.amap.com/sdk/compliance/params	com/amap/api/a/a/ao.java
http://restsdk.amap.com/sdk/compliance/params	com/amap/api/a/a/ao.java
http://lbs.amap.com/api/android-location-sdk/guide/utilities/errorcode/	com/amap/api/location/a.java
http://abroad.apilocate.amap.com/mobile/binary	com/b/a/a/g/a.java
http://dualstack-arestapi.amap.com/v3/geocode/regeo	com/b/a/a/g/c.java
http://restsdk.amap.com/v3/geocode/regeo	com/b/a/a/g/c.java
http://apilocate.amap.com/mobile/binary	com/b/a/a/h/c.java
http://dualstack-a.apilocate.amap.com/mobile/binary	com/b/a/a/h/c.java
http://abroad.apilocate.amap.com/mobile/binary	com/b/a/a/h/c.java
http://abroad.apilocate.amap.com/mobile/binary	com/b/a/a/h/i.java
http://eligrey.com	摸瓜V2引擎
https://github.com/dsamarin	摸瓜V2引擎
https://github.com/eligrey/Blob.js/blob/master/LICENSE.md	摸瓜V2引擎
http://purl.eligrey.com/github/Blob.js/blob/master/Blob.js	摸瓜V2引擎
https://dom.spec.whatwg.org/	摸瓜V2引擎
https://heycam.github.io/webidl/	摸瓜V2引擎
https://github.com/taylorhakes	摸瓜V2引擎
https://github.com/taylorhakes/promise-polyfill/blob/master/LICENSE	摸瓜V2引擎
https://cdn.jsdelivr.net/npm/promise-polyfill@8/dist/polyfill.js	摸瓜V2引擎
http://www.cocos.com	摸瓜V2引擎
https://www.khronos.org/registry/OpenGL/extensions/ARB/ARB_texture_float.txt	摸瓜V2引擎
http://www.saxproject.org/apidoc/org/xml/sax/helpers/DefaultHandler.html	摸瓜V2引擎
http://www.saxproject.org/apidoc/org/xml/sax/ContentHandler.html	摸瓜V2引擎
http://www.saxproject.org/apidoc/org/xml/sax/ErrorHandler.html	摸瓜V2引擎
http://www.saxproject.org/apidoc/org/xml/sax/ext/LexicalHandler.html	摸瓜V2引擎
http://www.saxproject.org/apidoc/org/xml/sax/ext/DeclHandler.html	摸瓜V2引擎
http://www.saxproject.org/apidoc/org/xml/sax/ext/EntityResolver2.html	摸瓜V2引擎
http://www.saxproject.org/apidoc/org/xml/sax/DTDHandler.html	摸瓜V2引擎
http://www.cocos.com	摸瓜V2引擎
https://www.cocos.com/	摸瓜V2引擎
http://www.apple.com/DTDs/PropertyList-1.0.dtd	lib/arm64-v8a/libcocos2djs.so
https://www.openssl.org/docs/faq.html	lib/arm64-v8a/libcocos2djs.so
https://crbug.com/v8/8520	lib/arm64-v8a/libcocos2djs.so
http://www.apple.com/DTDs/PropertyList-1.0.dtd	lib/armeabi-v7a/libcocos2djs.so
https://www.openssl.org/docs/faq.html	lib/armeabi-v7a/libcocos2djs.so
https://crbug.com/v8/8520	lib/armeabi-v7a/libcocos2djs.so
http://www.apple.com/DTDs/PropertyList-1.0.dtd	lib/x86/libcocos2djs.so
https://www.openssl.org/docs/faq.html	lib/x86/libcocos2djs.so
https://crbug.com/v8/8520	lib/x86/libcocos2djs.so

邮箱线索

邮箱地址	所在文件
uv@3.yɓ	摸瓜V2引擎
zno@ɛp.rk	摸瓜V2引擎
.@u.kl	摸瓜V2引擎
tu@q.hy	摸瓜V2引擎
x@r.w9r	摸瓜V2引擎
nql@_.jk	摸瓜V2引擎
0@hha.n2	摸瓜V2引擎
۰ntм@1.䳻zi	摸瓜V2引擎
ey@zp_ɍ-.msk	摸瓜V2引擎
fjg@03q.hl	摸瓜V2引擎
.h1@tx.myftgb	摸瓜V2引擎
cocos@cocoss-macbook-pro.local	lib/arm64-v8a/libcocos2djs.so
cocos@cocoss-macbook-pro.local	lib/armeabi-v7a/libcocos2djs.so
cocos@cocoss-macbook-pro.local	lib/x86/libcocos2djs.so

手机线索

手机号	所在文件
13678334460	摸瓜V2引擎
15184865043	摸瓜V2引擎
18788071615	摸瓜V2引擎
18725272309	摸瓜V2引擎
13108554429	摸瓜V2引擎
13618828948	摸瓜V2引擎

代码反编译

AndroidManifest配置查看

Java源代码查看 -- 下载

APK文件会员可下载

签名证书

APK已签名
v1 签名: True
v2 签名: True
v3 签名: False
找到 1 个唯一证书
主题: CN=xingjizhengba6677788
签名算法: rsassa_pkcs1v15
有效期自: 2025-05-12 14:55:02+00:00
有效期至: 2050-05-06 14:55:02+00:00
发行人: CN=xingjizhengba6677788
序列号: 0x467f9231
哈希算法: sha256
md5值: 6358d46da69cacf0e8c1a796db171b34
sha1值: d92bcd1287cd873db3993b783fbf172c5c3863ec
sha256值: 1a8bdeaf5bc04ccbfab7cb031df3cac81120154e0984076e5125e46f2ac4a73d
sha512值: be8770c0296d53ee333a2f967e95129f5973fafe2f183048f27599b3bcfda6ce1201e997c7596cd34bc4be422619b7f57c64772c740e8ba5882d75ecf05ca2bb
公钥算法: rsa
密钥长度: 2048
指纹: 07332f7d53aad3cbbf2f4de47f03c326f03105c767bf8caced3711f89b885f0f

硬编码敏感信息

"amap_key" : "0441ab33a64e493795126de18aba376c"

加壳分析

会员可查看

第三方插件

会员可查看

危险动作

向手机申请的权限	是否危险	类型	详细情况
android.permission.INTERNET	正常	互联网接入	允许应用程序创建网络套接字
android.permission.ACCESS_NETWORK_STATE	正常	查看网络状态	允许应用程序查看所有网络的状态
android.permission.ACCESS_WIFI_STATE	正常	查看Wi-Fi状态	允许应用程序查看有关 Wi-Fi 状态的信息
android.permission.READ_PHONE_STATE	危险	读取电话状态和身份	允许应用访问设备的电话功能。具有此权限的应用程序可以确定此电话的电话号码和序列号,呼叫是否处于活动状态,呼叫所连接的号码等
android.permission.VIBRATE	正常	可控震源	允许应用程序控制振动器
android.permission.ACCESS_FINE_LOCATION	危险	精细定位（GPS）	访问精细位置源,例如手机上的全球定位系统,如果可用。恶意应用程序可以使用它来确定您的位置,并可能消耗额外的电池电量
android.permission.ACCESS_COARSE_LOCATION	危险	粗定位	访问粗略位置源,例如移动网络数据库,以确定大概的电话位置（如果可用）。恶意应用程序可以使用它来确定您的大致位置