温馨提示:APP静态检测会有结果不完整的现象,如有疑问或建议, 可加入我们的微信群讨论

APP图标



下载APP

文件信息

文件名 dy_new_official_7rmm5ech2_5.1.1.apk
文件大小 36.74MB
MD5值 eeb7a98a723d239caf55cd0062f8a566
SHA1值 9f05fd7e5de0021ed5d312e9e56799759835f475
SHA256值 1e189fb9acef846bbd2bba715b61df4283fdbc6483b6ff49fcf38c51ff7cd659

APK信息

APK名称 抖阴
包名 com.wechat.novembertwentythree_1209
主活动 com.niming.weipa.ui.splash.SplashActivity
安卓版本名称 5.1.1
域名线索 43 条
查看
URL线索 50 条
查看
邮箱线索 2 条
查看
手机号线索 2 条
查看

域名线索

域名 查询域名 ip 地区 查询地区
mcgw.alipay.com 220.181.135.237 China - Beijing
www.u-dictionary.com 8.219.113.187 Singapore - Singapore
www.openssl.org 104.71.138.221 Japan - Tokyo
m.youdao.com 103.74.50.105 China - Guangdong
mobilegw.alipaydev.com 110.75.132.131 China - Zhejiang
m.alipay.com 203.209.245.120 China - Zhejiang
mdc.html5.qq.com 175.27.9.46 China - Beijing
wappaygw.alipay.com 220.181.135.237 China - Beijing
github.com 20.205.243.166 United States of America - Washington
pms.mb.qq.com 109.244.173.227 China - Beijing
h5.m.taobao.com 220.181.135.232 China - Beijing
cfg.imtt.qq.com 175.27.12.246 China - Beijing
mobilegw.aaa.alipay.net 没有ip信息 没有地区信息
g6gsyybak.scen1napib.com 13.35.49.7 Japan - Tokyo
mobilegw.stable.alipay.net 没有ip信息 没有地区信息
mobilegw.alipay.com 203.209.245.77 China - Zhejiang
updateinfo.youdao.com 103.74.50.116 China - Guangdong
openapi.youdao.com 103.74.50.131 China - Guangdong
argus.agoralab.co 106.14.163.9 China - Zhejiang
soft.tbs.imtt.qq.com 220.194.122.241 China - Tianjin
schemas.android.com 没有ip信息 没有地区信息
debugx5.qq.com 175.27.9.46 China - Beijing
www.qq.com 175.27.8.138 China - Beijing
api.telegram.org 31.13.94.41 Argentina - Ciudad Autonoma de Buenos Aires
loggw-exsdk.alipay.com 110.76.3.2 China - Zhejiang
tbsrecovery.imtt.qq.com 109.244.244.237 China - Beijing
nb036x.corp.youdao.com 没有ip信息 没有地区信息
bak.dya9agvmst9v4g825a.com 没有ip信息 没有地区信息
mqqad.html5.qq.com 0.0.0.1 - - -
xml.apache.org 151.101.2.132 United States of America - California
mclient.alipay.com 220.181.135.237 China - Beijing
openapi-sg.youdao.com 103.74.50.132 China - Guangdong
pagead2.googlesyndication.com 220.181.174.166 China - Beijing
dyfire-01.firebaseio.com 34.120.160.131 United States of America - Missouri
debugtbs.qq.com 175.27.9.46 China - Beijing
fanyi-test.youdao.com 103.74.50.134 China - Guangdong
bak.dy4x6w27j8wzrue3n4.com 没有ip信息 没有地区信息
app.8dy.me 154.92.16.97 Hong Kong - Hong Kong
mobilegw-1-64.test.alipay.net 没有ip信息 没有地区信息
www.potato.im 157.240.20.8 Germany - Hessen
render.alipay.com 220.181.135.244 China - Beijing
app.dylite.ipx.mx 没有ip信息 没有地区信息
log.tbs.qq.com 109.244.244.37 China - Beijing

URL线索

URL信息 Url所在文件
https://github.com/ReactiveX/RxJava/wiki/Plugins
io/reactivex/z.java
https://github.com/ReactiveX/RxJava/wiki/Plugins
io/reactivex/j.java
https://github.com/ReactiveX/RxJava/wiki/Plugins
io/reactivex/q.java
https://github.com/ReactiveX/RxJava/wiki/Plugins
io/reactivex/a.java
https://github.com/ReactiveX/RxJava/wiki/Plugins
io/reactivex/i0.java
https://github.com/ReactiveX/RxJava/wiki/What's-different-in-2.0
io/reactivex/exceptions/UndeliverableException.java
https://github.com/ReactiveX/RxJava/wiki/Error-Handling
io/reactivex/exceptions/OnErrorNotImplementedException.java
http://localhost/
retrofit2/r.java
http://xml.apache.org/xslt
com/blankj/utilcode/util/LogUtils.java
http://schemas.android.com/apk/res/android
com/flyco/tablayout/SlidingTabLayout.java
http://schemas.android.com/apk/res/android
com/flyco/tablayout/CommonTabLayout.java
http://schemas.android.com/apk/res/android
com/flyco/tablayout/SegmentTabLayout.java
http://app.dylite.ipx.mx
com/niming/weipa/a.java
http://app.8dy.me
com/niming/weipa/a.java
http://www.qq.com
com/niming/weipa/d/c.java
http://app.8dy.me
com/niming/weipa/base/BaseActivity.java
http://www.qq.com
com/niming/weipa/utils/t.java
https://api.telegram.org/bot743083118:AAFcQa9POAvUhMcS2_AGFR6BKBf_nj_vGbE/sendMessage
com/niming/weipa/utils/l.java
http://app.8dy.me
com/niming/weipa/utils/CommonExtKt.java
http://www.qq.com
com/niming/weipa/c/a.java
https://api.telegram.org/bot743083118:AAFcQa9POAvUhMcS2_AGFR6BKBf_nj_vGbE/sendMessage
com/niming/weipa/e/b.java
http://g6gsyybak.scen1napib.com
com/niming/weipa/e/c.java
http://bak.dy4x6w27j8wzrue3n4.com
com/niming/weipa/e/c.java
http://bak.dya9agvmst9v4g825a.com
com/niming/weipa/e/c.java
http://app.dylite.ipx.mx
com/niming/weipa/e/c.java
https://github.com/danikula/AndroidVideoCache/issues/134.
com/danikula/videocache/m.java
https://github.com/danikula/AndroidVideoCache/issues/43.
com/danikula/videocache/k.java
https://github.com/danikula/AndroidVideoCache/issues.
com/danikula/videocache/k.java
https://github.com/danikula/AndroidVideoCache/issues/88.
com/danikula/videocache/k.java
http://www.u-dictionary.com/home/word/%s/from/
com/youdao/sdk/app/h.java
http://m.youdao.com/dict?le=%s&q=%s
com/youdao/sdk/app/h.java
http://updateinfo.youdao.com/update?
com/youdao/sdk/app/a.java
http://openapi-sg.youdao.com/log
com/youdao/sdk/app/other/e.java
http://openapi.youdao.com/log
com/youdao/sdk/app/other/e.java
http://openapi-sg.youdao.com
com/youdao/sdk/ydonlinetranslate/other/g.java
http://openapi.youdao.com
com/youdao/sdk/ydonlinetranslate/other/g.java
http://fanyi-test.youdao.com/translate_a?q=
com/youdao/sdk/ydonlinetranslate/other/g.java
http://openapi-sg.youdao.com
com/youdao/sdk/ydonlinetranslate/other/e.java
http://openapi.youdao.com
com/youdao/sdk/ydonlinetranslate/other/e.java
http://openapi-sg.youdao.com
com/youdao/sdk/ydonlinetranslate/other/b.java
http://nb036x.corp.youdao.com:8681
com/youdao/sdk/ydonlinetranslate/other/b.java
https://github.com/lingochamp/FileDownloader/wiki/filedownloader.properties
com/liulishuo/filedownloader/services/a.java
https://render.alipay.com/p/s/i?scheme=%s
com/alipay/sdk/app/OpenAuthTask.java
https://wappaygw.alipay.com/service/rest.htm
com/alipay/sdk/app/PayTask.java
http://wappaygw.alipay.com/service/rest.htm
com/alipay/sdk/app/PayTask.java
https://mclient.alipay.com/service/rest.htm
com/alipay/sdk/app/PayTask.java
http://mclient.alipay.com/service/rest.htm
com/alipay/sdk/app/PayTask.java
https://mclient.alipay.com/home/exterfaceAssign.htm
com/alipay/sdk/app/PayTask.java
http://mclient.alipay.com/home/exterfaceAssign.htm
com/alipay/sdk/app/PayTask.java
https://mclient.alipay.com/cashier/mobilepay.htm
com/alipay/sdk/app/PayTask.java
http://mclient.alipay.com/cashier/mobilepay.htm
com/alipay/sdk/app/PayTask.java
https://mobilegw.alipay.com/mgw.htm
com/alipay/apmobilesecuritysdk/b/a.java
http://mobilegw.aaa.alipay.net/mgw.htm
com/alipay/apmobilesecuritysdk/b/a.java
http://mobilegw-1-64.test.alipay.net/mgw.htm
com/alipay/apmobilesecuritysdk/b/a.java
http://mobilegw.stable.alipay.net/mgw.htm
com/alipay/apmobilesecuritysdk/b/a.java
https://github.com/yyued/SVGAPlayer-Android
com/slzhibo/library/ui/view/widget/svga/SVGAParser.java
https://www.potato.im/p/androids
com/slzhibo/library/ui/view/dialog/WebViewDialog.java
https://www.potato.im/p/androids
com/slzhibo/library/ui/activity/home/WebViewActivity.java
https://log.tbs.qq.com/ajax?c=pu&v=2&k=
com/tencent/smtt/utils/m.java
https://log.tbs.qq.com/ajax?c=pu&tk=
com/tencent/smtt/utils/m.java
https://log.tbs.qq.com/ajax?c=dl&k=
com/tencent/smtt/utils/m.java
https://cfg.imtt.qq.com/tbs?v=2&mk=
com/tencent/smtt/utils/m.java
https://log.tbs.qq.com/ajax?c=ul&v=2&k=
com/tencent/smtt/utils/m.java
https://mqqad.html5.qq.com/adjs
com/tencent/smtt/utils/m.java
https://log.tbs.qq.com/ajax?c=ucfu&k=
com/tencent/smtt/utils/m.java
https://tbsrecovery.imtt.qq.com/getconfig
com/tencent/smtt/utils/m.java
https://soft.tbs.imtt.qq.com/17421/tbs_res_imtt_tbs_DebugPlugin_DebugPlugin.tbs
com/tencent/smtt/utils/d.java
https://pms.mb.qq.com/rsp204
com/tencent/smtt/sdk/l.java
https://debugtbs.qq.com
com/tencent/smtt/sdk/WebView.java
https://debugx5.qq.com
com/tencent/smtt/sdk/WebView.java
https://debugtbs.qq.com?10000\
com/tencent/smtt/sdk/WebView.java
https://mdc.html5.qq.com/d/directdown.jsp?channel_id=50079
com/tencent/smtt/sdk/stat/MttLoader.java
https://mdc.html5.qq.com/mh?channel_id=50079&u=
com/tencent/smtt/sdk/stat/MttLoader.java
https://mdc.html5.qq.com/d/directdown.jsp?channel_id=11041
com/tencent/smtt/sdk/ui/dialog/d.java
https://mdc.html5.qq.com/d/directdown.jsp?channel_id=11047
com/tencent/smtt/sdk/ui/dialog/d.java
https://pagead2.googlesyndication.com/pagead/gen_204?id=gmob-apps
e/c/a/a/b/a/b.java
https://h5.m.taobao.com/mlapp/olist.html
e/a/b/d/a.java
https://mobilegw.alipay.com/mgw.htm
e/a/b/c/a.java
https://mobilegw.alipaydev.com/mgw.htm
e/a/b/c/a.java
https://mcgw.alipay.com/sdklog.do
e/a/b/c/a.java
https://loggw-exsdk.alipay.com/loggw/logUpload.do
e/a/b/c/a.java
http://m.alipay.com/?action=h5quit
e/a/b/c/a.java
https://wappaygw.alipay.com/home/exterfaceAssign.htm?
e/a/b/c/a.java
https://mclient.alipay.com/home/exterfaceAssign.htm?
e/a/b/c/a.java
https://dyfire-01.firebaseio.com
Mogua Engine V1
http://argus.agoralab.co/vosdk/public/report?speaker=%u&listener=%u&venderID=%s&channelName=%s
lib/armeabi-v7a/libagora-rtc-sdk.so
http://argus.agoralab.co/vosdk/public/report?listener=%u&venderID=%s&channelName=%s
lib/armeabi-v7a/libagora-rtc-sdk.so
http://sQUIC
lib/armeabi-v7a/libagora-rtc-sdk.so
http://s
lib/armeabi-v7a/libsaturn.so
http://www.openssl.org/support/faq.html
lib/armeabi-v7a/libfqffmpeg.so

邮箱线索

邮箱地址 所在文件
danikula@gmail.com
com/danikula/videocache/k.java
ffmpeg-devel@ffmpeg.org
lib/armeabi-v7a/libfqplayer.so

手机线索

代码反编译

AndroidManifest配置 查看
Java源代码 查看 -- 下载

签名证书

APK已签名
v1 签名: True
v2 签名: True
v3 签名: True
找到 1 个唯一证书
主题: C=00, ST=pp, L=pp, O=xsl, OU=xsl, CN=xsl
签名算法: rsassa_pkcs1v15
有效期自: 2019-03-05 03:33:31+00:00
有效期至: 2069-02-20 03:33:31+00:00
发行人: C=00, ST=pp, L=pp, O=xsl, OU=xsl, CN=xsl
序列号: 0x7f494ee4
哈希算法: sha256
md5值: 2c1be98a39dc70e7b4b111127b3ba5de
sha1值: 24bcecac061c7701f2c4bf078ae8eb384211d78a
sha256值: 67f76e5d217a30a91b5a08f96cff949dce57718e5f1607bec24a4c191ae8aae0
sha512值: df46ef6eab567df40d81750ca824454899bdff3a556ac3d50747ef2b7b86f9fc50205742144cceff67c3b8b3b345408e0489bb9d80c644dcab9ac8463ca2f317
公钥算法: rsa
密钥长度: 2048
指纹: da5f6dfaa4dd7458e4d7b1883469ab5a9f32f2e16636e0179ffdb463559304a1

硬编码敏感信息

"anonymous_user" : "老湿"
"be_gesture_password" : "密码锁"
"firebase_database_url" : "https://dyfire-01.firebaseio.com"
"fq_anchor_auth_success_tips" : "恭喜您,通过了主播认证"
"fq_auth_helper_download_tips" : "为了方便您获得极致的开播体验, 请下载独立开播助手"
"fq_fast_auth_login" : "授权登录"
"fq_hd_gift_password" : "礼物口令"
"fq_my_live_search_key_desc" : "搜索 <font color=#ff5252>%1$s</font>"
"fq_no_operation_authority" : "无操作权限"
"fq_no_operation_authority_tips" : "您当前没有开启并设置付费直播间的权限,详情请咨询管理员。"
"fq_nobility_open_buy_user" : "<font color=#878787>购买用户:</font>%1$s"
"fq_not_login_user" : "未登录用户"
"fq_pk_total_session" : "总PK场次"
"fq_pk_victory_session" : "获胜场次"
"fq_private_car" : "私有"
"fq_private_car_buy_tips" : "私有座驾,您暂不符合购买条件"
"fq_secret" : "私密"
"google_api_key" : "AIzaSyAPpyowD_8PwYOJXOupAv2XaiI_aflJCfc"
"google_crash_reporting_api_key" : "AIzaSyAPpyowD_8PwYOJXOupAv2XaiI_aflJCfc"
"fq_anchor_auth_success_tips" : "恭喜您,通过了主播认证"
"fq_auth_helper_download_tips" : "为了方便您获得极致的开播体验, 请下载独立开播助手"
"fq_fast_auth_login" : "授权登录"
"fq_hd_gift_password" : "礼物口令"
"fq_my_live_search_key_desc" : "Search <font color=#ff5252>%1$s</font>"
"fq_no_operation_authority" : "无操作权限"
"fq_no_operation_authority_tips" : "您当前没有开启并设置付费直播间的权限,详情请咨询管理员。"
"fq_nobility_open_buy_user" : "<font color=#878787>User purchase:</font>%1$s"
"fq_not_login_user" : "Unlogged user"
"fq_pk_total_session" : "总PK场次"
"fq_pk_victory_session" : "获胜场次"
"fq_private_car" : "私有"
"fq_private_car_buy_tips" : "Private car, you do not meet the purchase conditions"
"fq_secret" : "Private"
"fq_anchor_auth_success_tips" : "恭喜您,通过了主播认证"
"fq_auth_helper_download_tips" : "为了方便您获得极致的开播体验, 请下载独立开播助手"
"fq_fast_auth_login" : "授权登录"
"fq_hd_gift_password" : "礼物口令"
"fq_my_live_search_key_desc" : "搜索 <font color=#ff5252>%1$s</font>"
"fq_no_operation_authority" : "无操作权限"
"fq_no_operation_authority_tips" : "您当前没有开启并设置付费直播间的权限,详情请咨询管理员。"
"fq_nobility_open_buy_user" : "<font color=#878787>购买用户:</font>%1$s"
"fq_not_login_user" : "未登录用户"
"fq_pk_total_session" : "总PK场次"
"fq_pk_victory_session" : "获胜场次"
"fq_private_car" : "私有"
"fq_private_car_buy_tips" : "私有座驾,您暂不符合购买条件"
"fq_secret" : "私密"
"fq_anchor_auth_success_tips" : "恭喜您,通过了主播认证"
"fq_auth_helper_download_tips" : "为了方便您获得极致的开播体验, 请下载独立开播助手"
"fq_fast_auth_login" : "授权登录"
"fq_hd_gift_password" : "礼物口令"
"fq_my_live_search_key_desc" : "検索 <font color=#ff5252>%1$s</font>"
"fq_no_operation_authority" : "无操作权限"
"fq_no_operation_authority_tips" : "您当前没有开启并设置付费直播间的权限,详情请咨询管理员。"
"fq_nobility_open_buy_user" : "<font color=#878787>购买用户:</font>%1$s"
"fq_not_login_user" : "未登录用户"
"fq_pk_total_session" : "总PK场次"
"fq_pk_victory_session" : "获胜场次"
"fq_private_car" : "私有"
"fq_private_car_buy_tips" : "私有座驾,您暂不符合购买条件"
"fq_secret" : "密密"
"fq_anchor_auth_success_tips" : "恭喜您,通过了主播认证"
"fq_auth_helper_download_tips" : "为了方便您获得极致的开播体验, 请下载独立开播助手"
"fq_fast_auth_login" : "授权登录"
"fq_hd_gift_password" : "礼物口令"
"fq_my_live_search_key_desc" : "수색 <font color=#ff5252>%1$s</font>"
"fq_no_operation_authority" : "无操作权限"
"fq_no_operation_authority_tips" : "您当前没有开启并设置付费直播间的权限,详情请咨询管理员。"
"fq_nobility_open_buy_user" : "<font color=#878787>购买用户:</font>%1$s"
"fq_not_login_user" : "未登录用户"
"fq_pk_total_session" : "总PK场次"
"fq_pk_victory_session" : "获胜场次"
"fq_private_car" : "私有"
"fq_private_car_buy_tips" : "私有座驾,您暂不符合购买条件"
"fq_secret" : "사적인"
"fq_anchor_auth_success_tips" : "恭喜您,通过了主播认证"
"fq_auth_helper_download_tips" : "为了方便您获得极致的开播体验, 请下载独立开播助手"
"fq_fast_auth_login" : "授权登录"
"fq_hd_gift_password" : "礼物口令"
"fq_my_live_search_key_desc" : "搜索 <font color=#ff5252>%1$s</font>"
"fq_no_operation_authority" : "无操作权限"
"fq_no_operation_authority_tips" : "您当前没有开启并设置付费直播间的权限,详情请咨询管理员。"
"fq_nobility_open_buy_user" : "<font color=#878787>购买用户:</font>%1$s"
"fq_not_login_user" : "未登录用户"
"fq_pk_total_session" : "总PK场次"
"fq_pk_victory_session" : "获胜场次"
"fq_private_car" : "私有"
"fq_private_car_buy_tips" : "私有座驾,您暂不符合购买条件"
"fq_secret" : "私密"

加壳分析

第三方插件

危险动作

向手机申请的权限 是否危险 类型 详细情况
android.permission.VIBRATE 正常 可控震源 允许应用程序控制振动器
android.permission.SYSTEM_ALERT_WINDOW 危险 显示系统级警报 允许应用程序显示系统警报窗口。恶意应用程序可以接管手机的整个屏幕
com.qti.permission.PROFILER 未知 调用了未知的操作
android.permission.INTERNET 正常 互联网接入 允许应用程序创建网络套接字
android.permission.READ_EXTERNAL_STORAGE 危险 读取外部存储器内容 允许应用程序从外部存储读取
android.permission.WRITE_EXTERNAL_STORAGE 危险 读取/修改/删除外部存储内容 允许应用程序写入外部存储
android.permission.CAMERA 危险 拍照和录像 允许应用程序用相机拍照和录像。这允许应用程序收集相机随时看到的图像
android.permission.WAKE_LOCK 正常 防止手机睡眠 允许应用程序防止手机进入睡眠状态
android.permission.FLASHLIGHT 正常 控制手电筒 允许应用程序控制手电筒
android.permission.ACCESS_FINE_LOCATION 危险 精细定位(GPS) 访问精细位置源,例如手机上的全球定位系统,如果可用。恶意应用程序可以使用它来确定您的位置,并可能消耗额外的电池电量
android.permission.RECORD_AUDIO 危险 录音 允许应用程序访问音频记录路径
android.permission.READ_PHONE_STATE 危险 读取电话状态和身份 允许应用访问设备的电话功能。具有此权限的应用程序可以确定此电话的电话号码和序列号,呼叫是否处于活动状态,呼叫所连接的号码等
android.permission.ACCESS_NETWORK_STATE 正常 查看网络状态 允许应用程序查看所有网络的状态
android.permission.REQUEST_INSTALL_PACKAGES 危险 允许应用程序请求安装包。 恶意应用程序可以利用它来尝试诱骗用户安装其他恶意软件包。
android.permission.EXPAND_STATUS_BAR 正常 展开/折叠状态栏 允许应用程序展开或折叠状态栏
android.permission.RECEIVE_BOOT_COMPLETED 正常 开机时自动启动 允许应用程序在系统完成启动后立即启动。这可能会使启动手机需要更长的时间,并允许应用程序通过始终运行来减慢整个手机的速度
android.permission.FOREGROUND_SERVICE 正常 允许常规应用程序使用 Service.startForeground。
android.permission.ACCESS_WIFI_STATE 正常 查看Wi-Fi状态 允许应用程序查看有关 Wi-Fi 状态的信息
android.permission.BLUETOOTH 正常 创建蓝牙连接 允许应用程序连接到配对的蓝牙设备
android.permission.CHANGE_NETWORK_STATE 正常 更改网络连接 允许应用程序更改网络连接状态。
android.permission.MODIFY_AUDIO_SETTINGS 正常 更改您的音频设置 允许应用程序修改全局音频设置,例如音量和路由
android.permission.ACCESS_COARSE_LOCATION 危险 粗定位 访问粗略位置源,例如移动网络数据库,以确定大概的电话位置(如果可用)。恶意应用程序可以使用它来确定您的大致位置
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE 未知 调用了未知的操作
com.google.android.c2dm.permission.RECEIVE 合法 C2DM 权限 云到设备消息传递的权限
android.permission.MOUNT_UNMOUNT_FILESYSTEMS 危险 装载和卸载文件系统 允许应用程序为可移动存储安装和卸载文件系统