Catatan bukti berkas Dana Game

Berkas

Perintah: sha256sum danagame_apk.apk (GNU coreutils 9.4)

fa3914c19e8a8a29cab9c6d35cf18d76dccbab61a9f686071925df32dccd0cd9  danagame_apk.apk

Ukuran unduhan: 45.567.335 byte.

Identitas dari aapt

Alat: Android Asset Packaging Tool, v0.2-9420752. Perintah: aapt dump badging danagame_apk.apk

package: name='com.danagame.app' versionCode='1000' versionName='1.0.3' platformBuildVersionName='13' platformBuildVersionCode='33' compileSdkVersion='33' compileSdkVersionCodename='13'
sdkVersion:'21'
targetSdkVersion:'35'
application-label:'DanaGame'
launchable-activity: name='com.google.firebase.MessagingUnityPlayerActivity'
native-code: 'arm64-v8a' 'armeabi-v7a'

Cuplikan di atas memotong daftar label bahasa. Semua label yang dicetak aapt pada pemeriksaan ini juga berbunyi DanaGame.

Izin yang dideklarasikan

Perintah: aapt dump permissions danagame_apk.apk

uses-permission: name='android.permission.INTERNET'
uses-permission: name='android.permission.ACCESS_NETWORK_STATE'
uses-permission: name='com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE'
uses-permission: name='com.google.android.gms.permission.AD_ID'
uses-permission: name='android.permission.POST_NOTIFICATIONS'
uses-permission: name='android.permission.CAMERA'
uses-permission: name='android.permission.RECEIVE_BOOT_COMPLETED'
uses-permission: name='com.danagame.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION'
uses-permission: name='android.permission.WAKE_LOCK'
uses-permission: name='com.google.android.c2dm.permission.RECEIVE'
uses-permission: name='android.permission.ACCESS_ADSERVICES_ATTRIBUTION'
uses-permission: name='android.permission.ACCESS_ADSERVICES_AD_ID'
uses-permission: name='com.danagame.app.permission.C2D_MESSAGE'
uses-permission: name='android.permission.READ_EXTERNAL_STORAGE'
uses-permission: name='android.permission.WRITE_EXTERNAL_STORAGE'
uses-permission: name='android.permission.READ_MEDIA_IMAGES'
uses-permission: name='android.permission.READ_MEDIA_VIDEO'
uses-permission: name='android.permission.READ_MEDIA_AUDIO'
uses-permission: name='android.permission.READ_PHONE_STATE'

Dua nama di atas juga didefinisikan sebagai permission milik paket itu sendiri (DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION dan C2D_MESSAGE). Itu izin internal, bukan dialog yang diminta ke pengguna. Karena aplikasi tidak dipasang, tidak ada catatan izin yang diberikan pada waktu berjalan.

Cleartext dan kamera

Perintah: aapt dump xmltree danagame_apk.apk AndroidManifest.xml

A: android:usesCleartextTraffic(0x010104ec)=(type 0x12)0xffffffff
E: uses-feature
  A: android:name="android.hardware.camera"
  A: android:required=(type 0x12)0x0

Nilai 0xffffffff pada atribut boolean di keluaran aapt ini berarti cleartext diizinkan. Nilai 0x0 pada required berarti fitur kamera tidak wajib, meskipun izin CAMERA dideklarasikan.

Sertifikat

apksigner 0.9. Perintah: apksigner verify --print-certs danagame_apk.apk

Signer #1 certificate DN: O=DefaultCompany
Signer #1 certificate SHA-256 digest: 78579cabf7cb3b1c1c810dbdc328b04635337029286750e6ef78af6026a438f1
Signer #1 certificate SHA-1 digest: e2ae99c5cae0b758668fbf7d38c134c3e15b7963

keytool (OpenJDK 21.0.12.1). Perintah: keytool -printcert -jarfile danagame_apk.apk

Owner: O=DefaultCompany
Issuer: O=DefaultCompany
Serial number: 5a9985ab
Valid from: Tue Feb 20 13:33:06 UTC 2024 until: Wed Feb 07 13:33:06 UTC 2074
Signature algorithm name: SHA1withRSA (weak)
SHA256: 78:57:9C:AB:F7:CB:3B:1C:1C:81:0D:BD:C3:28:B0:46:35:33:70:29:28:67:50:E6:EF:78:AF:60:26:A4:38:F1

Subjek sertifikat hanya bertuliskan O=DefaultCompany. Itu bukan nama badan hukum yang bisa ditelusuri dari keluaran ini.