At least one step of the analysis has failed, we have been notified. Don't worry, the devil is in the details.
Something seems to be broken? Contact us!
0/61
Threat
keepass2android.keepass2android
Keepass2Android
Analyzed on 2021-11-15T09:35:43.418397
14
permissions
50
activities
5
services
3
receivers
22
domains
File sums
| MD5 | 2385e9f8a2f1e925c7857c22a2dc24a6 | |
| SHA1 | 2eab08259379d7bcda80325661e981353cfb55ba | |
| SHA256 | 4b5c6c8575efd660ef2baf8c3cd24afc40c520e8ce93d54d3762e34e8221b694 | |
| Size | 27.51MB |
APKiD
Information computed with APKiD.
| /tmp/tmpoeeb6517!classes.dex | |
| anti_vm |
|
| compiler |
|
| /tmp/tmpoeeb6517!classes2.dex | |
| anti_vm |
|
| compiler |
|
SSdeep
Information computed with ssdeep.
| APK file | 393216:c8zJr3d6h2d8fw55OuOOjbm62r6uaMaBJqVfVk0IMeqFqT5C3pdzg:bV387wyunl2hmrq5VksrBzzg | |
| Manifest | 768:SE4/F6bxw04YM/pUQtgkz/KJ3yNMABJhphmKX/cUBqpRjasKcmp+saK3L0vRSPLh:… | |
| classes.dex | 49152:S7oe3kuPXb+ZwrMYeNvYVBNCQ+R/NQzpHlWn1D33oB3VmZPKoK62FMlbJPPw+V4… | |
| classes2.dex | 49152:7RuhhpPsf6UUi0fbfAnU3nsXdjBMS5C7GwHwjZMkO9aQHT90bdTOx1JASGATLUV… |
Dexofuzzy
Information computed with Dexofuzzy.
APK details
Information computed with AndroGuard and Pithus.
Certificate details
Information computed with AndroGuard.
File Analysis
Information computed with MobSF.
| Findings | Files |
|---|---|
| Certificate/Key files hardcoded inside the app. |
okhttp3/internal/publicsuffix/NOTICE |
Findings | Files |
| Hardcoded Keystore found. |
com/google/api/client/googleapis/google.jks |
Manifest analysis
Information computed with MobSF.
| Low | App has a Network Security Configuration[android:networkSecurityConfig=@xml/network_security_config] The Network Security Configuration feature lets apps customize their network security settings in a safe, declarative configuration file without modifying app code. These settings can be configured for specific domains and for a specific app. |
| Medium | Application Data can be Backed up[android:allowBackup=true] This flag allows anyone to backup your application data via adb. It allows users who have enabled USB debugging to copy application data off of the device. |
| High | Activity (crc648316b0a9aa8cfd61.BrowserTabActivity) is not Protected.An intent-filter exists. An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported. |
| High | Activity (com.dropbox.core.android.AuthActivity) is not Protected.An intent-filter exists. An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported. |
| High | Service (keepass2android.softkeyboard.KP2AKeyboard) is Protected by a permission, but the protection level of the permission should be checked.Permission: android.permission.BIND_INPUT_METHOD [android:exported=true] A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission. |
| High | Activity (keepass2android.softkeyboard.InputLanguageSelection) is not Protected.An intent-filter exists. An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported. |
| High | Activity (crc64dd09b2a2e58bb27d.SelectCurrentDbActivity) is not Protected.An intent-filter exists. An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported. |
| High | Activity (crc64dd09b2a2e58bb27d.ConfigureChildDatabasesActivity) is not Protected.An intent-filter exists. An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported. |
| High | Activity (crc64dd09b2a2e58bb27d.AboutActivity) is not Protected.An intent-filter exists. An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported. |
| High | Activity (crc64dd09b2a2e58bb27d.BiometricSetupActivity) is not Protected.An intent-filter exists. An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported. |
| High | Activity (crc64dd09b2a2e58bb27d.ExportDatabaseActivity) is not Protected.An intent-filter exists. An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported. |
| High | Activity (crc64dd09b2a2e58bb27d.NfcOtpActivity) is not Protected.An intent-filter exists. An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported. |
| High | Activity (crc64dd09b2a2e58bb27d.PluginDetailsActivity) is not Protected.An intent-filter exists. An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported. |
| High | Broadcast Receiver (crc64dd09b2a2e58bb27d.PluginHost) is not Protected.An intent-filter exists. A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported. |
| High | Activity (crc64dd09b2a2e58bb27d.PluginListActivity) is not Protected.An intent-filter exists. An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported. |
| High | Activity (crc64dd09b2a2e58bb27d.QueryCredentialsActivity) is not Protected.An intent-filter exists. An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported. |
| High | Activity (crc64dd09b2a2e58bb27d.KeePass) is not Protected.An intent-filter exists. An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported. |
| High | Activity (crc64dd09b2a2e58bb27d.GroupActivity) is not Protected.An intent-filter exists. An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported. |
| High | Activity (crc64dd09b2a2e58bb27d.ShareUrlResults) is not Protected.An intent-filter exists. An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported. |
| High | Content Provider (crc64dd09b2a2e58bb27d.AttachmentContentProvider) is not Protected. [android:exported=true] A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. |
| High | Service (keepass2android.services.Kp2aAutofillService) is Protected by a permission, but the protection level of the permission should be checked.Permission: android.permission.BIND_AUTOFILL_SERVICE [android:exported=true] A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission. |
| Low | Activity (crc64eca491f9dcf7457b.SearchResults) is Protected by a permission.Permission: keepass2android.keepass2android.permission.KP2aInternalSearchprotectionLevel: signature[android:exported=true] An Activity is found to be exported, but is protected by permission. |
| High | Activity (androidx.biometric.DeviceCredentialHandlerActivity) is not Protected. [android:exported=true] An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. |
| High | Service (com.google.android.gms.auth.api.signin.RevocationBoundService) is Protected by a permission, but the protection level of the permission should be checked.Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true] A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission. |
Browsable activities
Information computed with MobSF.
| crc648316b0a9aa8cfd61.BrowserTabActivity |
Hosts: auth Schemes: msal8374f801-0f55-407d-80cc-9a04fe86d9b2:// |
| com.dropbox.core.android.AuthActivity |
Schemes: db-i8shu7v1hgh7ynt:// db-ax0268uydp1ya57:// |
| crc64dd09b2a2e58bb27d.SelectCurrentDbActivity |
Hosts: * Schemes: content:// file:// Mime types: application/octet-stream application/* */* text/plain |
| crc64dd09b2a2e58bb27d.NfcOtpActivity |
Hosts: my.yubico.com keepass2android.crocoll.net Schemes: https:// |
Main Activity
Information computed with AndroGuard.
|
Activities
Information computed with AndroGuard.
|
Receivers
Information computed with AndroGuard.
|
Services
Information computed with AndroGuard.
|
Sample timeline
| Oldest file found in APK | Jan. 1, 1980, midnight |
| Latest file found in APK | Jan. 1, 1980, 1 a.m. |
| Certificate valid not before | March 9, 2013, 5:23 a.m. |
| First submission on VT | Nov. 15, 2021, 5:26 a.m. |
| Last submission on VT | Nov. 15, 2021, 5:26 a.m. |
| Upload on Pithus | Nov. 15, 2021, 9:35 a.m. |
| Certificate valid not after | Feb. 13, 2113, 5:23 a.m. |
Similar samples
Information computed by Pithus.
VirusTotal
| Score | 0/61 |
| Report | https://www.virustotal.com/gui/file/4b5c6c8575efd660ef2baf8c3cd24afc40c520e8ce93d54d3762e34e8221b694/detection |
NIAP analysis
Information computed with MobSF.
| FCS_RBG_EXT.1.1 | The application implement DRBG functionality for its cryptographic operations. Random Bit Generation Services |
| FCS_STO_EXT.1.1 | The application does not store any credentials to non-volatile memory. Storage of Credentials |
| FCS_CKM_EXT.1.1 | The application implement asymmetric key generation. Cryptographic Key Generation Services |
| FDP_DEC_EXT.1.1 | The application has access to ['network connectivity']. Access to Platform Resources |
| FDP_DEC_EXT.1.2 | The application has access to no sensitive information repositories. Access to Platform Resources |
| FDP_NET_EXT.1.1 | The application has user/application initiated network communications. Network Communications |
| FDP_DAR_EXT.1.1 | The application implement functionality to encrypt sensitive data in non-volatile memory. Encryption Of Sensitive Application Data |
| FMT_MEC_EXT.1.1 | The application invoke the mechanisms recommended by the platform vendor for storing and setting configuration options. Supported Configuration Mechanism |
| FTP_DIT_EXT.1.1 | The application does encrypt some transmitted data with HTTPS/TLS/SSH between itself and another trusted IT product. Protection of Data in Transit |
| FCS_RBG_EXT.2.1 FCS_RBG_EXT.2.2 |
The application perform all deterministic random bit generation (DRBG) services in accordance with NIST Special Publication 800-90A using Hash_DRBG. The deterministic RBG is seeded by an entropy source that accumulates entropy from a platform-based DRBG and a software-based noise source, with a minimum of 256 bits of entropy at least equal to the greatest security strength (according to NIST SP 800-57) of the keys and hashes that it will generate. Random Bit Generation from Application |
| FCS_CKM.1.1(3) FCS_CKM.1.2(3) |
A password/passphrase shall perform [Password-based Key Derivation Functions] in accordance with a specified cryptographic algorithm.. Password Conditioning |
| FCS_COP.1.1(1) | The application perform encryption/decryption not in accordance with FCS_COP.1.1(1), AES-ECB mode is being used. Cryptographic Operation - Encryption/Decryption |
| FCS_COP.1.1(2) | The application perform cryptographic hashing services not in accordance with FCS_COP.1.1(2) and uses the cryptographic algorithm RC2/RC4/MD4/MD5. Cryptographic Operation - Hashing |
| FCS_COP.1.1(3) | The application perform cryptographic signature services (generation and verification) in accordance with a specified cryptographic algorithm RSA schemes using cryptographic key sizes of 2048-bit or greater. Cryptographic Operation - Signing |
| FCS_COP.1.1(4) | The application perform keyed-hash message authentication with cryptographic algorithm ['HMAC-SHA1'] . Cryptographic Operation - Keyed-Hash Message Authentication |
| FCS_HTTPS_EXT.1.1 | The application implement the HTTPS protocol that complies with RFC 2818. HTTPS Protocol |
| FCS_HTTPS_EXT.1.2 | The application implement HTTPS using TLS. HTTPS Protocol |
| FCS_HTTPS_EXT.1.3 | The application notify the user and not establish the connection or request application authorization to establish the connection if the peer certificate is deemed invalid. HTTPS Protocol |
| FIA_X509_EXT.1.1 | The application invoked platform-provided functionality to validate certificates in accordance with the following rules: ['The certificate path must terminate with a trusted CA certificate', 'RFC 5280 certificate validation and certificate path validation']. X.509 Certificate Validation |
| FIA_X509_EXT.2.1 | The application use X.509v3 certificates as defined by RFC 5280 to support authentication for HTTPS , TLS. X.509 Certificate Authentication |
Code analysis
Information computed with MobSF.
Map computed by Pithus.
Network analysis
Information computed with MobSF.
| High | Base config is insecurely configured to permit clear text traffic to all domains. Scope: ['*'] |
| Medium | Base config is configured to trust system certificates. Scope: ['*'] |
| High | Base config is configured to trust user installed certificates. Scope: ['*'] |
Domains analysis
Information computed with MobSF.
URL analysis
Information computed with MobSF.
|
https://login.live.com/ https://login.live.com/oauth20_authorize.srf https://login.live.com/oauth20_desktop.srf https://login.live.com/oauth20_logout.srf https://login.live.com/oauth20_token.srf Defined in com/microsoft/services/msa/MicrosoftOAuthConfig.java |
|
|
https://login.live.com/ https://login.live.com/oauth20_authorize.srf https://login.live.com/oauth20_desktop.srf https://login.live.com/oauth20_logout.srf https://login.live.com/oauth20_token.srf Defined in com/microsoft/services/msa/MicrosoftOAuthConfig.java |
|
|
https://login.live.com/ https://login.live.com/oauth20_authorize.srf https://login.live.com/oauth20_desktop.srf https://login.live.com/oauth20_logout.srf https://login.live.com/oauth20_token.srf Defined in com/microsoft/services/msa/MicrosoftOAuthConfig.java |
|
|
https://login.live.com/ https://login.live.com/oauth20_authorize.srf https://login.live.com/oauth20_desktop.srf https://login.live.com/oauth20_logout.srf https://login.live.com/oauth20_token.srf Defined in com/microsoft/services/msa/MicrosoftOAuthConfig.java |
|
|
https://login.live.com/ https://login.live.com/oauth20_authorize.srf https://login.live.com/oauth20_desktop.srf https://login.live.com/oauth20_logout.srf https://login.live.com/oauth20_token.srf Defined in com/microsoft/services/msa/MicrosoftOAuthConfig.java |
|
|
https://apis.live.net/v5.0 Defined in com/microsoft/services/msa/Config.java |
|
|
https://www.dropbox.com/upgrade?oqa=upeaoq Defined in com/dropbox/core/android/DbxOfficialAppConnector.java |
|
|
https://my.pcloud.com/oauth2/authorize https://oauth2redirect Defined in com/pcloud/sdk/AuthorizationActivity.java |
|
|
https://api.pcloud.com Defined in com/pcloud/sdk/internal/RealApiServiceBuilder.java |
|
|
https://github.com/OneDrive/onedrive-sdk-android/issues Defined in com/onedrive/sdk/http/OneDriveFatalServiceException.java |
|
|
https://login.microsoftonline.com/common/oauth2/ https://login.microsoftonline.com/common/oauth2/authorize https://login.microsoftonline.com/common/oauth2/desktop https://login.microsoftonline.com/common/oauth2/logout https://login.microsoftonline.com/common/oauth2/token Defined in com/onedrive/sdk/authentication/MicrosoftOAuthConfig.java |
|
|
https://login.microsoftonline.com/common/oauth2/ https://login.microsoftonline.com/common/oauth2/authorize https://login.microsoftonline.com/common/oauth2/desktop https://login.microsoftonline.com/common/oauth2/logout https://login.microsoftonline.com/common/oauth2/token Defined in com/onedrive/sdk/authentication/MicrosoftOAuthConfig.java |
|
|
https://login.microsoftonline.com/common/oauth2/ https://login.microsoftonline.com/common/oauth2/authorize https://login.microsoftonline.com/common/oauth2/desktop https://login.microsoftonline.com/common/oauth2/logout https://login.microsoftonline.com/common/oauth2/token Defined in com/onedrive/sdk/authentication/MicrosoftOAuthConfig.java |
|
|
https://login.microsoftonline.com/common/oauth2/ https://login.microsoftonline.com/common/oauth2/authorize https://login.microsoftonline.com/common/oauth2/desktop https://login.microsoftonline.com/common/oauth2/logout https://login.microsoftonline.com/common/oauth2/token Defined in com/onedrive/sdk/authentication/MicrosoftOAuthConfig.java |
|
|
https://login.microsoftonline.com/common/oauth2/ https://login.microsoftonline.com/common/oauth2/authorize https://login.microsoftonline.com/common/oauth2/desktop https://login.microsoftonline.com/common/oauth2/logout https://login.microsoftonline.com/common/oauth2/token Defined in com/onedrive/sdk/authentication/MicrosoftOAuthConfig.java |
|
|
https://api.onedrive.com/v1.0 Defined in com/onedrive/sdk/authentication/MSAAccountInfo.java |
|
|
https://onedrive.live.com/picker/accountchooser?ru=https://localhost:777&load_login=false Defined in com/onedrive/sdk/authentication/DisambiguationDialog.java |
|
|
https://api.office.com/discovery/v2.0/me/Services https://api.office.com/discovery/ https://login.windows.net/common/oauth2/authorize Defined in com/onedrive/sdk/authentication/ADALAuthenticator.java |
|
|
https://api.office.com/discovery/v2.0/me/Services https://api.office.com/discovery/ https://login.windows.net/common/oauth2/authorize Defined in com/onedrive/sdk/authentication/ADALAuthenticator.java |
|
|
https://api.office.com/discovery/v2.0/me/Services https://api.office.com/discovery/ https://login.windows.net/common/oauth2/authorize Defined in com/onedrive/sdk/authentication/ADALAuthenticator.java |
|
|
https://github.com/AzureAD/azure-activedirectory-library-for-android Defined in com/onedrive/sdk/authentication/adal/BrokerPermissionsChecker.java |
|
|
https://www.googleapis.com/auth/drive Defined in keepass2android/javafilestorage/GoogleDriveFileStorage.java |
|
|
http://xmlpull.org/v1/doc/features.html#process-namespaces Defined in keepass2android/javafilestorage/webdav/PropfindXmlParser.java |
|
|
https://api.onedrive.com/v1.0 Defined in keepass2android/javafilestorage/onedrive/MyMSAAccountInfo.java |
|
|
http://www.haibison.com Defined in group/pals/android/lib/ui/filechooser/utils/E.java |
|
|
www.close-cut.de) http://www.spstudio.at) https://icons8.com/icon/5570/Picture. https://github.com/PhilippC/keepass2android/issues http://crowdin.net/project/keepass2android http://www.close-cut.de), https://philipp.crocoll.net/donate.php?lang=%1$s&app=%2$s http://. https://github.com/PhilippC/keepass2android https://openintents.googlecode.com/files/FileManager-2.0.2.apk http://). http://www.spstudio.at)のデザインです https://icons8.com/icon/5570/Picture http://, www.close-cut.de)! http://www.spstudio.at)! www.close-cut.de)에게 http://www.spstudio.at)의 http://www. http://www.spstudio). https://. Defined in Android String Resource |
|
|
www.close-cut.de) http://www.spstudio.at) https://icons8.com/icon/5570/Picture. https://github.com/PhilippC/keepass2android/issues http://crowdin.net/project/keepass2android http://www.close-cut.de), https://philipp.crocoll.net/donate.php?lang=%1$s&app=%2$s http://. https://github.com/PhilippC/keepass2android https://openintents.googlecode.com/files/FileManager-2.0.2.apk http://). http://www.spstudio.at)のデザインです https://icons8.com/icon/5570/Picture http://, www.close-cut.de)! http://www.spstudio.at)! www.close-cut.de)에게 http://www.spstudio.at)의 http://www. http://www.spstudio). https://. Defined in Android String Resource |
|
|
www.close-cut.de) http://www.spstudio.at) https://icons8.com/icon/5570/Picture. https://github.com/PhilippC/keepass2android/issues http://crowdin.net/project/keepass2android http://www.close-cut.de), https://philipp.crocoll.net/donate.php?lang=%1$s&app=%2$s http://. https://github.com/PhilippC/keepass2android https://openintents.googlecode.com/files/FileManager-2.0.2.apk http://). http://www.spstudio.at)のデザインです https://icons8.com/icon/5570/Picture http://, www.close-cut.de)! http://www.spstudio.at)! www.close-cut.de)에게 http://www.spstudio.at)의 http://www. http://www.spstudio). https://. Defined in Android String Resource |
|
|
www.close-cut.de) http://www.spstudio.at) https://icons8.com/icon/5570/Picture. https://github.com/PhilippC/keepass2android/issues http://crowdin.net/project/keepass2android http://www.close-cut.de), https://philipp.crocoll.net/donate.php?lang=%1$s&app=%2$s http://. https://github.com/PhilippC/keepass2android https://openintents.googlecode.com/files/FileManager-2.0.2.apk http://). http://www.spstudio.at)のデザインです https://icons8.com/icon/5570/Picture http://, www.close-cut.de)! http://www.spstudio.at)! www.close-cut.de)에게 http://www.spstudio.at)의 http://www. http://www.spstudio). https://. Defined in Android String Resource |
|
|
www.close-cut.de) http://www.spstudio.at) https://icons8.com/icon/5570/Picture. https://github.com/PhilippC/keepass2android/issues http://crowdin.net/project/keepass2android http://www.close-cut.de), https://philipp.crocoll.net/donate.php?lang=%1$s&app=%2$s http://. https://github.com/PhilippC/keepass2android https://openintents.googlecode.com/files/FileManager-2.0.2.apk http://). http://www.spstudio.at)のデザインです https://icons8.com/icon/5570/Picture http://, www.close-cut.de)! http://www.spstudio.at)! www.close-cut.de)에게 http://www.spstudio.at)의 http://www. http://www.spstudio). https://. Defined in Android String Resource |
|
|
www.close-cut.de) http://www.spstudio.at) https://icons8.com/icon/5570/Picture. https://github.com/PhilippC/keepass2android/issues http://crowdin.net/project/keepass2android http://www.close-cut.de), https://philipp.crocoll.net/donate.php?lang=%1$s&app=%2$s http://. https://github.com/PhilippC/keepass2android https://openintents.googlecode.com/files/FileManager-2.0.2.apk http://). http://www.spstudio.at)のデザインです https://icons8.com/icon/5570/Picture http://, www.close-cut.de)! http://www.spstudio.at)! www.close-cut.de)에게 http://www.spstudio.at)의 http://www. http://www.spstudio). https://. Defined in Android String Resource |
|
|
www.close-cut.de) http://www.spstudio.at) https://icons8.com/icon/5570/Picture. https://github.com/PhilippC/keepass2android/issues http://crowdin.net/project/keepass2android http://www.close-cut.de), https://philipp.crocoll.net/donate.php?lang=%1$s&app=%2$s http://. https://github.com/PhilippC/keepass2android https://openintents.googlecode.com/files/FileManager-2.0.2.apk http://). http://www.spstudio.at)のデザインです https://icons8.com/icon/5570/Picture http://, www.close-cut.de)! http://www.spstudio.at)! www.close-cut.de)에게 http://www.spstudio.at)의 http://www. http://www.spstudio). https://. Defined in Android String Resource |
|
|
https://docs.microsoft.com/xamarin/ios/internals/limitations#reverse-callbacks file:///%s file:/// Defined in lib/armeabi-v7a/libmonosgen-2.0.so |
|
|
https://code.google.com/p/android/issues/detail?id=63929 Defined in lib/armeabi-v7a/libmonodroid.so |
|
|
https://docs.microsoft.com/xamarin/ios/internals/limitations#reverse-callbacks file:///%s file:/// Defined in lib/arm64-v8a/libmonosgen-2.0.so |
|
|
https://code.google.com/p/android/issues/detail?id=63929 Defined in lib/arm64-v8a/libmonodroid.so |
Permissions analysis
Information computed with MobSF.
Threat analysis
Information computed with Quark-Engine.
| Confidence:
|
Start another application from current application |
| Confidence:
|
Load external class |
| Confidence:
|
Implicit intent(view a web page, make a phone call, etc.) |
| Confidence:
|
Find a method from given class name, usually for reflection |
| Confidence:
|
Start a web server |
| Confidence:
|
Method reflection |
| Confidence:
|
Load class from given class name |
| Confidence:
|
Retrieve data from broadcast |
| Confidence:
|
Read sensitive data(SMS, CALLLOG, etc) |
| Confidence:
|
Implicit intent(view a web page, make a phone call, etc.) via setData |
| Confidence:
|
Connect to a URL and get the response code |
| Confidence:
|
Send notification |
| Confidence:
|
Monitor the broadcast action events (BOOT_COMPLETED) |
| Confidence:
|
Get last known location of the device |
| Confidence:
|
Get calendar information |
| Confidence:
|
Deletes media specified by a content URI(SMS, CALL_LOG, File, etc.) |
| Confidence:
|
Get location of the device |
| Confidence:
|
Method reflection |
| Confidence:
|
Query data from URI (SMS, CALLLOGS) |
| Confidence:
|
Get the time of current location |
| Confidence:
|
Initialize class object dynamically |
| Confidence:
|
Connect to a URL and set request method |
| Confidence:
|
Get specific method from other Dex files |
| Confidence:
|
Read file and put it into a stream |
| Confidence:
|
Get declared method from given method name |
| Confidence:
|
Open a file from given absolute path of the file |
| Confidence:
|
Get absolute path of the file and store in string |
| Confidence:
|
Check if the given file path exist |
| Confidence:
|
Get resource file from res/raw directory |
Behavior analysis
Information computed with MobSF.
Control flow graphs analysis
Information computed by Pithus.
The application probably opens socket
The application probably loads JS-capable web views
The application probably dynamically loads code
- com/google/android/gms/dynamic/RemoteCreator
- com/google/android/gms/dynamite/DynamiteModule
- com/google/android/gms/dynamite/DynamiteModule
- kotlin/coroutines/jvm/internal/ModuleNameRetriever
- org/apache/commons/logging/LogFactory
- com/google/android/gms/security/ProviderInstaller
- com/google/android/gms/common/wrappers/InstantApps
- com/google/android/gms/dynamite/DynamiteModule