File Information
File name dy_new_official_7rmm5ech2_5.1.1.apkSize 36.74MB
MD5 eeb7a98a723d239caf55cd0062f8a566
SHA1 9f05fd7e5de0021ed5d312e9e56799759835f475
SHA256 1e189fb9acef846bbd2bba715b61df4283fdbc6483b6ff49fcf38c51ff7cd659
APK Information
App name 抖阴Package name com.wechat.novembertwentythree_1209
Main activity com.niming.weipa.ui.splash.SplashActivity
Version 5.1.1
Domain Clues
| Domain | Domain query | IP | Location | Location query |
|---|---|---|---|---|
| g6gsyybak.scen1napib.com | 104.21.93.52 | United States of America - California | ||
| m.alipay.com | 203.209.245.120 | China - Zhejiang | ||
| mobilegw-1-64.test.alipay.net | No information | No locations | ||
| app-measurement.com | 114.250.64.33 | China - Beijing | ||
| openapi.youdao.com | 220.197.31.39 | China - Jiangsu | ||
| mobilegw.alipay.com | 203.209.247.65 | China - Zhejiang | ||
| h5.m.taobao.com | 125.39.135.146 | China - Tianjin | ||
| api.telegram.org | 108.160.170.52 | United States of America - California | ||
| loggw-exsdk.alipay.com | 110.76.3.2 | China - Zhejiang | ||
| fanyi-test.youdao.com | 220.197.31.44 | China - Jiangsu | ||
| argus.agoralab.co | 106.14.163.9 | China - Shanghai | ||
| soft.tbs.imtt.qq.com | 119.167.147.86 | China - Shandong | ||
| nb036x.corp.youdao.com | No information | No locations | ||
| app.dylite.ipx.mx | No information | No locations | ||
| wappaygw.alipay.com | 123.125.216.192 | China - Beijing | ||
| bak.dy4x6w27j8wzrue3n4.com | No information | No locations | ||
| debugtbs.qq.com | 60.29.240.122 | China - Tianjin | ||
| render.alipay.com | 125.39.135.56 | China - Tianjin | ||
| www.qq.com | 221.198.70.47 | China - Tianjin | ||
| debugx5.qq.com | 60.29.240.122 | China - Tianjin | ||
| mobilegw.stable.alipay.net | No information | No locations | ||
| www.u-dictionary.com | 8.219.113.187 | Singapore - Singapore | ||
| schemas.android.com | No information | No locations | ||
| mobilegw.alipaydev.com | 110.75.132.131 | China - Zhejiang | ||
| pagead2.googlesyndication.com | 114.250.67.38 | China - Beijing | ||
| www.potato.im | 66.220.149.18 | United States of America - California | ||
| xml.apache.org | 151.101.2.132 | United States of America - California | ||
| www.openssl.org | 34.49.79.89 | United States of America - California | ||
| pms.mb.qq.com | 60.28.172.238 | China - Tianjin | ||
| tbsrecovery.imtt.qq.com | 60.28.172.40 | China - Tianjin | ||
| bak.dya9agvmst9v4g825a.com | No information | No locations | ||
| cfg.imtt.qq.com | 60.28.172.238 | China - Tianjin | ||
| updateinfo.youdao.com | 220.197.31.39 | China - Jiangsu | ||
| mdc.html5.qq.com | 116.130.223.178 | China - Beijing | ||
| mobilegw.aaa.alipay.net | No information | No locations | ||
| mqqad.html5.qq.com | 0.0.0.1 | - - - | ||
| app.8dy.me | 0.0.0.0 | - - - | ||
| mcgw.alipay.com | 123.125.216.191 | China - Beijing | ||
| dyfire-01.firebaseio.com | 34.120.206.254 | United States of America - Missouri | ||
| openapi-sg.youdao.com | 220.197.31.39 | China - Jiangsu | ||
| m.youdao.com | 220.197.31.37 | China - Jiangsu | ||
| github.com | 20.205.243.166 | Singapore - Singapore | ||
| mclient.alipay.com | 125.39.135.57 | China - Tianjin | ||
| log.tbs.qq.com | 124.95.231.218 | China - Liaoning |
URL Clues
Email Clues
| Emails | File path |
|---|---|
|
danikula@gmail.com |
com/danikula/videocache/k.java |
|
ffmpeg-devel@ffmpeg.org |
lib/armeabi-v7a/libfqplayer.so |
Phone Clues
| Phones | File path |
|---|---|
|
17179869184 |
com/tomato/ijk/media/player/IjkMediaMeta.java |
|
17179869184 |
tv/danmaku/ijk/media/player/i.java |
Signature Certificate
APK已签名
v1 签名: True
v2 签名: True
v3 签名: True
找到 1 个唯一证书
主题: C=00, ST=pp, L=pp, O=xsl, OU=xsl, CN=xsl
签名算法: rsassa_pkcs1v15
有效期自: 2019-03-05 03:33:31+00:00
有效期至: 2069-02-20 03:33:31+00:00
发行人: C=00, ST=pp, L=pp, O=xsl, OU=xsl, CN=xsl
序列号: 0x7f494ee4
哈希算法: sha256
md5值: 2c1be98a39dc70e7b4b111127b3ba5de
sha1值: 24bcecac061c7701f2c4bf078ae8eb384211d78a
sha256值: 67f76e5d217a30a91b5a08f96cff949dce57718e5f1607bec24a4c191ae8aae0
sha512值: df46ef6eab567df40d81750ca824454899bdff3a556ac3d50747ef2b7b86f9fc50205742144cceff67c3b8b3b345408e0489bb9d80c644dcab9ac8463ca2f317
公钥算法: rsa
密钥长度: 2048
指纹: da5f6dfaa4dd7458e4d7b1883469ab5a9f32f2e16636e0179ffdb463559304a1Leaked Information
"anonymous_user" : "老湿"
"be_gesture_password" : "密码锁"
"firebase_database_url" : "https://dyfire-01.firebaseio.com"
"fq_anchor_auth_success_tips" : "恭喜您，通过了主播认证"
"fq_auth_helper_download_tips" : "为了方便您获得极致的开播体验，
请下载独立开播助手"
"fq_fast_auth_login" : "授权登录"
"fq_hd_gift_password" : "礼物口令"
"fq_no_operation_authority" : "无操作权限"
"fq_no_operation_authority_tips" : "您当前没有开启并设置付费直播间的权限，详情请咨询管理员。"
"fq_nobility_open_buy_user" : "<font color=#878787>购买用户：</font>%1$s"
"fq_not_login_user" : "未登录用户"
"fq_pk_total_session" : "总PK场次"
"fq_pk_victory_session" : "获胜场次"
"fq_private_car" : "私有"
"fq_private_car_buy_tips" : "私有座驾，您暂不符合购买条件"
"fq_secret" : "私密"
"google_api_key" : "AIzaSyAPpyowD_8PwYOJXOupAv2XaiI_aflJCfc"
"google_crash_reporting_api_key" : "AIzaSyAPpyowD_8PwYOJXOupAv2XaiI_aflJCfc"
"fq_anchor_auth_success_tips" : "恭喜您，通过了主播认证"
"fq_auth_helper_download_tips" : "为了方便您获得极致的开播体验，
请下载独立开播助手"
"fq_fast_auth_login" : "授权登录"
"fq_hd_gift_password" : "礼物口令"
"fq_no_operation_authority" : "无操作权限"
"fq_no_operation_authority_tips" : "您当前没有开启并设置付费直播间的权限，详情请咨询管理员。"
"fq_nobility_open_buy_user" : "<font color=#878787>User purchase：</font>%1$s"
"fq_not_login_user" : "Unlogged user"
"fq_pk_total_session" : "总PK场次"
"fq_pk_victory_session" : "获胜场次"
"fq_private_car" : "私有"
"fq_private_car_buy_tips" : "Private car, you do not meet the purchase conditions"
"fq_secret" : "Private"
"fq_anchor_auth_success_tips" : "恭喜您，通过了主播认证"
"fq_auth_helper_download_tips" : "为了方便您获得极致的开播体验，
请下载独立开播助手"
"fq_fast_auth_login" : "授权登录"
"fq_hd_gift_password" : "礼物口令"
"fq_no_operation_authority" : "无操作权限"
"fq_no_operation_authority_tips" : "您当前没有开启并设置付费直播间的权限，详情请咨询管理员。"
"fq_nobility_open_buy_user" : "<font color=#878787>购买用户：</font>%1$s"
"fq_not_login_user" : "未登录用户"
"fq_pk_total_session" : "总PK场次"
"fq_pk_victory_session" : "获胜场次"
"fq_private_car" : "私有"
"fq_private_car_buy_tips" : "私有座驾，您暂不符合购买条件"
"fq_secret" : "私密"
"fq_anchor_auth_success_tips" : "恭喜您，通过了主播认证"
"fq_auth_helper_download_tips" : "为了方便您获得极致的开播体验，
请下载独立开播助手"
"fq_fast_auth_login" : "授权登录"
"fq_hd_gift_password" : "礼物口令"
"fq_no_operation_authority" : "无操作权限"
"fq_no_operation_authority_tips" : "您当前没有开启并设置付费直播间的权限，详情请咨询管理员。"
"fq_nobility_open_buy_user" : "<font color=#878787>购买用户：</font>%1$s"
"fq_not_login_user" : "未登录用户"
"fq_pk_total_session" : "总PK场次"
"fq_pk_victory_session" : "获胜场次"
"fq_private_car" : "私有"
"fq_private_car_buy_tips" : "私有座驾，您暂不符合购买条件"
"fq_secret" : "密密"
"fq_anchor_auth_success_tips" : "恭喜您，通过了主播认证"
"fq_auth_helper_download_tips" : "为了方便您获得极致的开播体验，
请下载独立开播助手"
"fq_fast_auth_login" : "授权登录"
"fq_hd_gift_password" : "礼物口令"
"fq_no_operation_authority" : "无操作权限"
"fq_no_operation_authority_tips" : "您当前没有开启并设置付费直播间的权限，详情请咨询管理员。"
"fq_nobility_open_buy_user" : "<font color=#878787>购买用户：</font>%1$s"
"fq_not_login_user" : "未登录用户"
"fq_pk_total_session" : "总PK场次"
"fq_pk_victory_session" : "获胜场次"
"fq_private_car" : "私有"
"fq_private_car_buy_tips" : "私有座驾，您暂不符合购买条件"
"fq_secret" : "사적인"
"fq_anchor_auth_success_tips" : "恭喜您，通过了主播认证"
"fq_auth_helper_download_tips" : "为了方便您获得极致的开播体验，
请下载独立开播助手"
"fq_fast_auth_login" : "授权登录"
"fq_hd_gift_password" : "礼物口令"
"fq_no_operation_authority" : "无操作权限"
"fq_no_operation_authority_tips" : "您当前没有开启并设置付费直播间的权限，详情请咨询管理员。"
"fq_nobility_open_buy_user" : "<font color=#878787>购买用户：</font>%1$s"
"fq_not_login_user" : "未登录用户"
"fq_pk_total_session" : "总PK场次"
"fq_pk_victory_session" : "获胜场次"
"fq_private_car" : "私有"
"fq_private_car_buy_tips" : "私有座驾，您暂不符合购买条件"
"fq_secret" : "私密"
Shells Analysis
Plugins Analysis
Dangerous Actions
| Permissions | Is Dangerous | Category | Information |
|---|---|---|---|
| android.permission.VIBRATE | Normal | 可控震源 | 允许应用程序控制振动器 |
| android.permission.SYSTEM_ALERT_WINDOW | Dangerous | 显示系统级警报 | 允许应用程序显示系统警报窗口。恶意应用程序可以接管手机的整个屏幕 |
| com.qti.permission.PROFILER | unknown | unknown | |
| android.permission.INTERNET | Normal | 互联网接入 | 允许应用程序创建网络套接字 |
| android.permission.READ_EXTERNAL_STORAGE | Dangerous | 读取外部存储器内容 | 允许应用程序从外部存储读取 |
| android.permission.WRITE_EXTERNAL_STORAGE | Dangerous | 读取/修改/删除外部存储内容 | 允许应用程序写入外部存储 |
| android.permission.CAMERA | Dangerous | 拍照和录像 | 允许应用程序用相机拍照和录像。这允许应用程序收集相机随时看到的图像 |
| android.permission.WAKE_LOCK | Normal | 防止手机睡眠 | 允许应用程序防止手机进入睡眠状态 |
| android.permission.FLASHLIGHT | Normal | 控制手电筒 | 允许应用程序控制手电筒 |
| android.permission.ACCESS_FINE_LOCATION | Dangerous | 精细定位（GPS） | 访问精细位置源,例如手机上的全球定位系统,如果可用。恶意应用程序可以使用它来确定您的位置,并可能消耗额外的电池电量 |
| android.permission.RECORD_AUDIO | Dangerous | 录音 | 允许应用程序访问音频记录路径 |
| android.permission.READ_PHONE_STATE | Dangerous | 读取电话状态和身份 | 允许应用访问设备的电话功能。具有此权限的应用程序可以确定此电话的电话号码和序列号,呼叫是否处于活动状态,呼叫所连接的号码等 |
| android.permission.ACCESS_NETWORK_STATE | Normal | 查看网络状态 | 允许应用程序查看所有网络的状态 |
| android.permission.REQUEST_INSTALL_PACKAGES | Dangerous | 允许应用程序请求安装包。 | 恶意应用程序可以利用它来尝试诱骗用户安装其他恶意软件包。 |
| android.permission.EXPAND_STATUS_BAR | Normal | 展开/折叠状态栏 | 允许应用程序展开或折叠状态栏 |
| android.permission.RECEIVE_BOOT_COMPLETED | Normal | 开机时自动启动 | 允许应用程序在系统完成启动后立即启动。这可能会使启动手机需要更长的时间,并允许应用程序通过始终运行来减慢整个手机的速度 |
| android.permission.FOREGROUND_SERVICE | Normal | 允许常规应用程序使用 Service.startForeground。 | |
| android.permission.ACCESS_WIFI_STATE | Normal | 查看Wi-Fi状态 | 允许应用程序查看有关 Wi-Fi 状态的信息 |
| android.permission.BLUETOOTH | Normal | 创建蓝牙连接 | 允许应用程序连接到配对的蓝牙设备 |
| android.permission.CHANGE_NETWORK_STATE | Normal | 更改网络连接 | 允许应用程序更改网络连接状态。 |
| android.permission.MODIFY_AUDIO_SETTINGS | Normal | 更改您的音频设置 | 允许应用程序修改全局音频设置,例如音量和路由 |
| android.permission.ACCESS_COARSE_LOCATION | Dangerous | 粗定位 | 访问粗略位置源,例如移动网络数据库,以确定大概的电话位置（如果可用）。恶意应用程序可以使用它来确定您的大致位置 |
| com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE | unknown | unknown | |
| com.google.android.c2dm.permission.RECEIVE | signature | C2DM 权限 | 云到设备消息传递的权限 |
| android.permission.MOUNT_UNMOUNT_FILESYSTEMS | Dangerous | 装载和卸载文件系统 | 允许应用程序为可移动存储安装和卸载文件系统 |