读取文件加载链接库文件删除文件写入文件写入 sdcard 隐私行为 获取安装应用列表获取当前连接的 Wifi 热点信息获取用户 ID 查询上次位置信息查询 Wifi 热点扫描结果获得当前运行的程序列表获取设备 ID 定位移动终端 服务行为 启动服务获取运行 service 广播行为 注册广播接收器发

Transcription

1 文件检测评级 : 高度风险 文件名称 : 微商伙伴 3.0S_02.apk 基本信息 文件名称 : MD5 值 : 微商伙伴 3.0S_02.apk 2a8530cf7bb05ee966a912c ad 文件大小 : 51.73MB 上传时间 : :11:36 包名 : com.tencent.mo 最低运行环境 : Android 4.0.3, 版权 : 图标 : 危险行为 行为描述 :root 权限检测 详情信息 :/system/bin/su 行为描述 : 定位移动终端 详情信息 :null 网络行为 访问网络获取网络状态信息发送网络数据访问 URL 初始化 URI 监听手机 SIM 卡或者移动网络信息接收网络数据初始化 URL 文件行为 创建文件缓冲区读取一行数据 腾讯公司版权所有 1 / 10

2 读取文件加载链接库文件删除文件写入文件写入 sdcard 隐私行为 获取安装应用列表获取当前连接的 Wifi 热点信息获取用户 ID 查询上次位置信息查询 Wifi 热点扫描结果获得当前运行的程序列表获取设备 ID 定位移动终端 服务行为 启动服务获取运行 service 广播行为 注册广播接收器发送广播调用 Intent 的 setaction 其他行为 传递附加信息读取 SharedPreferences 初始化新进程解析通用资源标识符类加载设置 SharedPreferences 添加 View 初始化 Intent 创建新进程 root 权限检测定时任务循环任务查询 App 共享数据 文件列表 文件名 META-INF/MANIFEST.MF 校验码 0x27c59bd7 腾讯公司版权所有 2 / 10

3 META-INF/ SF 0x994b2cab META-INF/ RSA 0xb6dc7994 AndroidManifest.xml 0x172f512d assets/wnnote.zip 0x95d25c2d assets/address 0x47f5cebf assets/art_emoji/manifest.xml 0x assets/avatar/default_hd_avatar.png 0x3b964de6 assets/avatar/default_meishiapp.png 0xd79ba864 assets/avatar/default_nor_avatar.png 0xec24fe96 assets/b7c9a7fd-851e df-8ab7c0b02787.sec 0x502092b8 assets/channel.ini 0x6e75375f assets/chatting/default_chat.xml 0x9d8c94ee assets/chatting/purecolor_chat.xml 0x1be9c700 assets/chatting/reserved_chat.xml 0x32ce3964 assets/config.conf 0xac9f4883 assets/config/ address.xml 0x52d107cd assets/config/bank_logo.xml 0x83e19ed0 assets/country_code.txt 0x77c19d71 assets/custom_emoji/manifest.xml 0xe67566a8 assets/default_poi_categories.dat 0x67fb9e2e assets/doc/default/andorid-chs_1.jpg 0xae7e193c assets/doc/default/andorid-chs_3.jpg 0x57ae9637 assets/doc/default/bakchat_privacy.htm 0x89e7121d assets/doc/default/chs-2v.jpg 0xd58297cb assets/doc/default/mig_wifi_service_terms_chs.html 0xc1e2d0c4 assets/doc/default/network_warning.htm 0xfb29cb25 assets/doc/default/oauth_network_error.html 0x479e5ee4 assets/doc/default/qqsync_intro.htm 0x8d4897a5 assets/doc/default/qqsync_privacy.htm 0x802c3267 assets/doc/default/wx_feedback_index.html 0x2a9f1616 assets/doc/default/wx_wifi_faq.html 0x14792fa2 assets/doc/default/wx_wifi_service_terms_chs.html 0xf7f84abd assets/doc/en/andorid-en_1.jpg 0x32f26ae4 assets/doc/en/andorid-en_3.jpg 0xb3d6bf75 assets/doc/en/bakchat_privacy.htm 0x188a3fe7 assets/doc/en/en-2v.jpg 0x5aadd931 腾讯公司版权所有 3 / 10

4 assets/doc/en/mig_wifi_service_terms_en.html 0x55fca60f assets/doc/en/network_warning.htm 0xb3e87731 assets/doc/en/oauth_network_error.html 0x7e9747b7 assets/doc/en/qqsync_intro.htm 0x3dd143fa assets/doc/en/qqsync_privacy.htm 0xca476f62 assets/doc/en/wx_wifi_faq.html 0x d assets/doc/en/wx_wifi_service_terms_en.html 0x3cdf0480 assets/doc/zh-tw/network_warning.htm 0x302309f0 assets/doc/zh-tw/oauth_network_error.html 0x551f5fea assets/doc/zh-tw/qqsync_intro.htm 0x47ecad5f assets/doc/zh-tw/qqsync_privacy.htm 0x assets/emoji_config.conf 0x757d24d2 assets/emoji_template.zip 0x5cd959ba Activities 活动名类型.ui.LauncherUI android.intent.action.ma1n.ui.launcherui com.tencent.mo.action.bizshortcut.ui.launcherui android.intent.category.launcher.ui.launcherui android.intent.category.multiwindow_launcher.ui.launcherui.ui.tools.multistagecityselectui com.tencent.mo.action.get_adress.ui.tools.multistagecityselectui.ui.tools.shareimgui android.intent.action.send.ui.tools.shareimgui android.intent.action.send_multiple.ui.tools.shareimgui.ui.tools.addfavoriteui android.intent.action.send.ui.tools.addfavoriteui android.intent.action.send_multiple.ui.tools.addfavoriteui.ui.tools.sharetotimelineui android.intent.action.send.ui.tools.sharetotimelineui android.intent.action.send_multiple.ui.tools.sharetotimelineui.ui.tools.sharescreenimgui.ui.tools.sharescreenimgui.ui.intractivity android.intent.action.main.ui.intractivity com.tencent.mo.action.bizshortcut 腾讯公司版权所有 4 / 10

5 .ui.intractivity android.intent.category.launcher.ui.intractivity android.intent.category.multiwindow_launcher.ui.intractivity.ui.tools.sharescreentotimelineui.ui.tools.sharescreentotimelineui.plugin.base.stub.wxcustomschemeentryactivity.plugin.base.stub.wxcustomschemeentryactivity.plugin.base.stub.wxcustomschemeentryactivity android.intent.category.browsable com.tencent.mo.plugin.gwallet.gwalletui com.tencent.mo.gwallet.action_pay_request com.tencent.mo.plugin.gwallet.gwalletui com.tencent.mo.gwallet.action_query_request com.tencent.mo.plugin.gwallet.gwalletui.plugin.game.ui.gamemd5checkui com.tencent.mo.game.md5check.plugin.game.ui.gamemd5checkui.plugin.setting.ui.qrcode.getqrcodeinfoui.plugin.setting.ui.qrcode.getqrcodeinfoui.plugin.setting.ui.qrcode.getqrcodeinfoui android.intent.category.browsable.plugin.accountsync.ui.contactssyncui.plugin.accountsync.ui.contactssyncui com.tencent.mo.login.action_login.plugin.accountsync.ui.contactssyncui.ui.account.voiceactionactivity com.google.android.voicesearch.send_message_to_con TACTS.ui.account.VoiceActionActivity com.google.android.voicesearch.test_send_message_to _CONTACTS.ui.account.VoiceActionActivity.plugin.nfc_open.ui.NfcWebViewUI android.nfc.action.tech_discovered.plugin.wallet_index.ui.walletopenfingerprintpayredirect UI com.action.fingerprint.open.plugin.wallet_index.ui.walletopenfingerprintpayredirect UI.plugin.webview.ui.tools.QQCallbackUI.plugin.webview.ui.tools.QQCallbackUI.plugin.webview.ui.tools.QQCallbackUI android.intent.category.browsable 启动方式名称信息 cn.bmob.push.pushreceiver 开机启动服务腾讯公司版权所有 5 / 10

6 cn.bmob.push.pushreceiver 屏幕解锁启动服务 cn.bmob.push.pushreceiver 网络连接改变时启动服务 com.tencent.mo.ui.mypushmessagereceiver cn.bmob.push.pushnotifyreceiver cn.bmob.push.pushnotifyreceiver com.tencent.mo.booter.bluetoothstatereceiver com.tencent.mo.booter.bluetoothreceiver com.tencent.mo.booter.bluetoothreceiver com.tencent.mo.booter.installreceiver com.tencent.mo.booter.mmreceivers$exdeviceprocessr 开机启动服务 eceiver com.tencent.mo.plugin.backup.bakpcmodel.bakchatpcm grnorify com.tencent.mo.plugin.backup.bakpcmodel.bakchatpcm grnorify com.tencent.mo.booter.mmreceivers$bootreceiver 开机启动服务 com.tencent.mo.booter.mmreceivers$connectionreceiv 网络连接改变时启动服务 er com.tencent.mo.plugin.base.stub.wxentryactivity$entry Receiver com.tencent.mo.plugin.base.stub.wxentryactivity$entry Receiver com.tencent.mo.plugin.auto.service.mmautomessagehe ardreceiver com.tencent.mo.plugin.auto.service.mmautomessagere plyreceiver com.tencent.mo.plugin.gcm.modelgcm.gcmbroadcastre ceiver 腾讯公司版权所有 6 / 10

7 com.tencent.mo.plugin.gcm.modelgcm.gcmbroadcastre ceiver com.tencent.mo.pluginsdk.model.downloader.filedownl oadreceiver 权限列表 许可名称 信息 com.tencent.mo.plugin.permission.read com.tencent.mo.plugin.permission.write com.tencent.mo.permission.mm_message com.huawei.authentication.hw_access_auth_service android.permission.access_network_state 读取网络状态 (2G 或 3G) android.permission.access_coarse_location 获取粗略的位置 ( 通过 wifi 基站) android.permission.access_fine_location 获取精确的位置 ( 通过 GPS) android.permission.camera 访问照相机设备 android.permission.get_tasks 获取有关当前或最近运行的任务信息 android.permission.internet 连接网络 (2G 或 3G) android.permission.modify_audio_settings 修改声音设置 android.permission.receive_boot_completed 接收开机启动广播 android.permission.record_audio 录音 ( 使用 AudioRecord) android.permission.read_contacts 读取联系人信息 android.permission.read_sms 读取短信 android.permission.vibrate 允许设备震动 android.permission.wake_lock 手机屏幕关闭后后台进程仍运行 android.permission.write_external_storage 写外部存储器 ( 如 :SD 卡 ) android.permission.write_contacts 写入联系人信息 android.permission.write_settings 读写系统设置项 com.android.launcher.permission.install_shortcut 创建快捷方式 删除快捷方式 com.android.launcher.permission.uninstall_shortcut com.android.launcher.permission.read_settings 读取快捷方式信息 com.tencent.mo.location.permission.send_view android.permission.bluetooth 连接蓝牙设备 android.permission.bluetooth_admin 搜寻蓝牙设备 android.permission.broadcast_sticky 发送持久广播 android.permission.system_alert_window 显示系统窗口 腾讯公司版权所有 7 / 10

8 android.permission.change_wifi_state 改变 WIFI 连接状态 android.permission.get_package_size 获取应用大小 android.permission.download_without_notificati ON android.permission.nfc 允许 NFC 通讯 com.huawei.android.launcher.permission.change_bad GE android.permission.write_app_badge android.permission.access_wifi_state 读取 wifi 网络状态 android.permission.read_phone_state 读取电话状态 android.permission.receive_user_present com.android.vending.billing com.tencent.mo.ext.permission.read com.tencent.mo.ext.permission.write android.permission.use_fingerprint android.permission.get_accounts 访问账户列表 android.permission.manage_accounts 管理账户 android.permission.authenticate_accounts 验证账户 android.permission.read_sync_settings 读取同步设置 android.permission.write_sync_settings 写入同步设置 android.permission.read_profile 读取个人配置文件 com.google.android.c2dm.permission.receive com.tencent.mo.permission.c2d_message com.android.alarm.permission.set_alarm 设置闹铃提醒 服务列表 名称 cn.bmob.push.lib.service.pushservice cn.bmob.push.lib.service.pushnotifyserv ice com.tencent.mo.booter.notifyreceiver$ NotifyService com.tencent.mo.booter.notifyreceiver$ NotifyService$InnerService com.tencent.mo.modelfriend.addrbook Observer$AddrBookService 腾讯公司版权所有 8 / 10

9 com.tencent.mo.plugin.backup.bakpcmo del.bakchatpcusbservice com.tencent.mo.booter.coreservice com.tencent.mo.booter.coreservice$inn erservice com.tencent.mo.booter.cache.cacheser vice com.tencent.mo.plugin.gallery.stub.gall erystubservice com.tencent.mo.plugin.exdevice.service. ExDeviceService com.tencent.mo.plugin.accountsync.mo del.accountauthenticatorservice com.tencent.mo.plugin.accountsync.mo del.contactssyncservice com.tencent.mo.modelvoiceaction.voice ActionService com.tencent.mo.plugin.wear.model.serv ice.weardatalayerservice com.tencent.mo.plugin.notification.ui.fa ilsendmsgnotification$failsendnormal MsgNotificationService com.tencent.mo.plugin.notification.ui.fa ilsendmsgnotification$failsendsnsmsgn otificationservice com.tencent.mo.plugin.webview.stub.w ebviewstubservice com.tencent.mo.plugin.talkroom.compo nent.talkroomservice com.tencent.mo.sandbox.monitor.excep tionmonitorservice com.tencent.mo.sandbox.updater.updat erservice com.tencent.mo.pluginsdk.model.downl oader.filedownloadservice com.tencent.tmassistantsdk.downloadse 腾讯公司版权所有 9 / 10

10 Powered by TCPDF ( 腾讯哈勃分析系统 rvice.tmassistantdownloadsdkservice com.tencent.mo.remoteservice.remotes ervice com.tencent.mo.crash.crashuploaderse rvice Providers 名字 信息 com.tencent.mo.plugin.base.stub.mmpluginprovider com.tencent.mo.plugin.base.stub.wxcommprovider com.tencent.mo.plugin.gwallet.gwalletqueryprovider com.tencent.mo.plugin.ext.provider.extcontentprovider Base com.tencent.mo.plugin.ext.provider.extcontrolprovider Msg com.tencent.mo.plugin.ext.provider.extcontrolproviders earchcontact com.tencent.mo.plugin.ext.provider.extcontrolprovidern earby com.tencent.mo.plugin.ext.provider.extcontrolproviders NS com.tencent.mo.plugin.ext.provider.extcontrolprovidera ccountsync com.tencent.mo.plugin.ext.provider.extcontrolprovidere ntry com.tencent.mo.sdk.platformtools.multiprocesssharedpr eferences 漏洞风险列表 ContentProvider 暴露风险 Activity 暴露风险 Service 暴露风险自定义权限滥用风险 BroadcastReceiver 暴露风险 腾讯公司版权所有 10 / 10