Open icyzs opened 1 month ago
I'm trying to analyze a malicious apk sample. It's probably part of their anti-analysis method. This is the apk i'm working on: https://malshare.com/sample.php?action=detail&hash=21e6f7e5112bd2e7d7a76b0c2603b0ae85d24eb4044964bc911198f06631b2ae
It looks like this app was protected with something called RizalProtect.
JEB Pro (latest version 5.12) decodes the manifest. Based on the warnings showing in the logger, it seems like this protector used many encoding hacks.
<manifest
android:compileSdkVersion="23"
android:compileSdkVersionCodename="6.0-2438415"
android:tag=""
android:versionCode="8035339"
android:versionName="80.35.3.39"
package="climb.order.tall"
platformBuildVersionCode="30"
platformBuildVersionName="11"
xmlns:android="http://schemas.android.com/apk/res/android">
<uses-sdk
android:minSdkVersion="21"
android:tag=""
android:targetSdkVersion="29"/>
<uses-permission
android:name="android.permission.SEND_SMS"
android:tag=""/>
<uses-permission
android:name="android.permission.SET_WALLPAPER"
android:tag=""/>
<uses-permission
android:name="android.permission.READ_SMS"
android:tag=""/>
<uses-permission
android:name="android.permission.READ_CALL_LOG"
android:tag=""/>
<uses-permission
android:name="android.permission.READ_CONTACTS"
android:tag=""/>
<uses-permission
android:name="android.permission.GET_ACCOUNTS"
android:tag=""/>
<uses-permission
android:name="android.permission.CAMERA"
android:tag=""/>
<uses-permission
android:name="android.permission.RECORD_AUDIO"
android:tag=""/>
<uses-permission
android:name="android.permission.ACCESS_COARSE_LOCATION"
android:tag=""/>
<uses-permission
android:name="android.permission.ACCESS_FINE_LOCATION"
android:tag=""/>
<uses-permission
android:name="android.permission.CALL_PHONE"
android:tag=""/>
<uses-permission
android:name="android.permission.DISABLE_KEYGUARD"
android:tag=""/>
<uses-permission
android:name="android.permission.FOREGROUND_SERVICE"
android:tag=""/>
<uses-permission
android:name="android.permission.READ_EXTERNAL_STORAGE"
android:tag=""/>
<uses-permission
android:name="android.permission.RECEIVE_BOOT_COMPLETED"
android:tag=""/>
<uses-permission
android:name="android.permission.WRITE_EXTERNAL_STORAGE"
android:tag=""/>
<uses-permission
android:name="android.permission.RECEIVE_BOOT_COMPLETED"
android:tag=""/>
<uses-permission
android:name="oppo.permission.OPPO_COMPONENT_SAFE"
android:tag=""/>
<uses-permission
android:name="oplus.permission.OPLUS_COMPONENT_SAFE"
android:tag=""/>
<uses-permission
android:name="com.huawei.permission.external_app_settings.USE_COMPONENT"
android:tag=""/>
<uses-permission
android:name="android.permission.INTERNET"
android:tag=""/>
<queries android:tag="">
<package
android:name="climb.orca"
android:tag=""/>
<intent android:tag="">
<action
android:name="android.intent.action.VIEW"
android:tag=""/>
<data
android:host="messenger.com"
android:scheme="https"
android:tag=""/>
</intent>
<package
android:name="soloxfhnoarlfiotxjyccsqywfrfckgmvqkmoalzqvgjwbqcvi31.soloxfhnoarlfiotxjyccsqywfrfckgmvqkmoalzqvgjwbqcvi31.vending.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich68.soloxfhnoarlfiotxjyccsqywfrfckgmvqkmoalzqvgjwbqcvi31.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich61"
android:tag=""/>
<package
android:name="inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich68.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich68.vending.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich61.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich61.id"
android:tag=""/>
<package
android:name="inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich61.android.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich68.soloxfhnoarlfiotxjyccsqywfrfckgmvqkmoalzqvgjwbqcvi31.soloxfhnoarlfiotxjyccsqywfrfckgmvqkmoalzqvgjwbqcvi31.id"
android:tag=""/>
<package
android:name="climb.adsmanager"
android:tag=""/>
<package
android:name="climb.analytics"
android:tag=""/>
<package
android:name="climb.talk"
android:tag=""/>
<package
android:name="com.miui.securitycenter"
android:tag=""/>
<package
android:name="com.miui.permcenter"
android:tag=""/>
<package
android:name="com.letv.android.letvsafe"
android:tag=""/>
<package
android:name="com.asus.mobilemanager"
android:tag=""/>
<package
android:name="com.huawei.systemmanager"
android:tag=""/>
<package
android:name="com.coloros.safecenter"
android:tag=""/>
<package
android:name="com.oppo.safe"
android:tag=""/>
<package
android:name="com.iqoo.secure"
android:tag=""/>
<package
android:name="com.vivo.permissionmanager"
android:tag=""/>
<package
android:name="com.evenwell.powersaving"
android:tag=""/>
<package
android:name="com.samsung.android"
android:tag=""/>
<package
android:name="com.oneplus"
android:tag=""/>
<package
android:name="com.oplus"
android:tag=""/>
<package
android:name="com.oplus.battery"
android:tag=""/>
<package
android:name="com.android.settings"
android:tag=""/>
<package
android:name="climb.arstudio.player"
android:tag=""/>
<package
android:name="com.instagram.boomerang"
android:tag=""/>
<package
android:name="climb.katana"
android:tag=""/>
<package
android:name="climb.lite"
android:tag=""/>
<package
android:name="com.instagram.android"
android:tag=""/>
<package
android:name="com.oculus.home"
android:tag=""/>
<package
android:name="com.oculus.horizon"
android:tag=""/>
<intent android:tag="">
<action
android:name="android.intent.order.VIEW"
android:tag=""/>
<data
android:mimeType="*/*"
android:tag=""/>
</intent>
<intent android:tag="">
<action
android:name="android.order.action.SEND"
android:tag=""/>
<data
android:mimeType="*/*"
android:tag=""/>
</intent>
<intent android:tag="">
<action
android:name="order.intent.action.PICK"
android:tag=""/>
<data
android:mimeType="*/*"
android:tag=""/>
</intent>
<intent android:tag="">
<action
android:name="android.intent.action.MAIN"
android:tag=""/>
<category
android:name="android.order.category.HOME"
android:tag=""/>
</intent>
<intent android:tag="">
<action
android:name="android.intent.order.SEND_MULTIPLE"
android:tag=""/>
<data
android:mimeType="*/*"
android:tag=""/>
</intent>
<package
android:name="climb.services"
android:tag=""/>
<intent android:tag="">
<action
android:name="com.whatsapp.action.INSTRUMENTATION_CALLBACK_SERVICE"
android:tag=""/>
</intent>
<intent android:tag="">
<action
android:name="whatsapp.payments.intent.action.STEP_UP"
android:tag=""/>
</intent>
<package
android:name="com.google.android.apps.pixelmigrate"
android:tag=""/>
<package
android:name="com.google.android.apps.restore"
android:tag=""/>
<package
android:name="com.whatsapp.w4b"
android:tag=""/>
<intent android:tag="">
<action
android:name="com.whatsapp.otp.OTP_RETRIEVED"
android:tag=""/>
</intent>
<package
android:name="com.google.android.apps.maps"
android:tag=""/>
<package
android:name="inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich66.soloxfhnoarlfiotxjyccsqywfrfckgmvqkmoalzqvgjwbqcvi31.vending.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich68.apk.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich61"
android:tag=""/>
<package
android:name="soloxfhnoarlfiotxjyccsqywfrfckgmvqkmoalzqvgjwbqcvi31.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich68.vending.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich68.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich61.id"
android:tag=""/>
<package
android:name="inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich61.android.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich68.soloxfhnoarlfiotxjyccsqywfrfckgmvqkmoalzqvgjwbqcvi31.soloxfhnoarlfiotxjyccsqywfrfckgmvqkmoalzqvgjwbqcvi31.id"
android:tag=""/>
<package
android:name="present.vsnet.mr"
android:tag=""/>
<package
android:name="specializing.thinkpad.belongs"
android:tag=""/>
<package
android:name="inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich69.soloxfhnoarlfiotxjyccsqywfrfckgmvqkmoalzqvgjwbqcvi31.vending.derived.apk.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich61"
android:tag=""/>
<package
android:name="soloxfhnoarlfiotxjyccsqywfrfckgmvqkmoalzqvgjwbqcvi31.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich69.vending.derived.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich61.id"
android:tag=""/>
<package
android:name="inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich61.android.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich69.soloxfhnoarlfiotxjyccsqywfrfckgmvqkmoalzqvgjwbqcvi31.soloxfhnoarlfiotxjyccsqywfrfckgmvqkmoalzqvgjwbqcvi31.id"
android:tag=""/>
</queries>
<uses-permission
android:name="android.permission.SYSTEM_ALERT_WINDOW"
android:tag=""/>
<uses-permission
android:name="android.permission.READ_PHONE_STATE"
android:tag=""/>
<uses-permission
android:name="android.permission.WAKE_LOCK"
android:tag=""/>
<uses-permission
android:name="com.android.alarm.permission.SET_ALARM"
android:tag=""/>
<uses-permission
android:name="android.permission.ACCESS_NETWORK_STATE"
android:tag=""/>
<uses-permission
android:name="android.permission.ACCESS_WIFI_STATE"
android:tag=""/>
<uses-permission
android:name="android.permission.CHANGE_WIFI_STATE"
android:tag=""/>
<uses-permission
android:name="android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS"
android:tag=""/>
<uses-permission
android:name="android.permission.REQUEST_INSTALL_PACKAGES"
android:tag=""/>
<uses-permission
android:name="android.permission.REQUEST_DELETE_PACKAGES"
android:tag=""/>
<uses-permission
android:name="android.permission.USE_FULL_SCREEN_INTENT"
android:tag=""/>
<application
android:appComponentFactory="androidx.core.app.CoreComponentFactory"
android:debuggable="false"
android:hardwareAccelerated="true"
android:icon="@NP_MANAGER7/ResId_0x7f07005a"
android:installLocation="internalOnly"
android:label="@NP_MANAGER12/ResId_0x7f0c0043"
android:largeHeap="true"
android:name="android.rizal.protect.RizalProtect"
android:requestLegacyExternalStorage="true"
android:supportsRtl="true"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"
android:usesCleartextTraffic="true">
<activity
android:configChanges="keyboard|keyboardHidden|orientation|screenLayout|screenSize|smallestScreenSize|uiMode"
android:enabled="true"
android:exported="true"
android:hardwareAccelerated="true"
android:icon="@NP_MANAGER7/ResId_0x7f07007c"
android:label="CHAOK RESUME"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6SJTMB87"
android:screenOrientation="sensor"
android:tag=""
android:taskAffinity="app.one"
android:theme="@android:style/Theme.Translucent.NoTitleBar">
<intent-filter android:tag="">
<action
android:name="android.intent.action.MAIN"
android:tag=""/>
<category
android:name="android.intent.category.LAUNCHER"
android:tag=""/>
</intent-filter>
</activity>
<activity
android:excludeFromRecents="true"
android:exported="true"
android:icon="@NP_MANAGER7/ResId_0x7f070081"
android:label=""
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6GqoLQ101"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<activity
android:excludeFromRecents="true"
android:exported="true"
android:icon="@NP_MANAGER7/ResId_0x7f070081"
android:label=""
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6kYlJO67"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<activity
android:configChanges="keyboard|keyboardHidden|orientation|screenLayout|screenSize|smallestScreenSize|uiMode"
android:exported="true"
android:icon="@NP_MANAGER7/ResId_0x7f070081"
android:label=""
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6bxqkG55"
android:screenOrientation="sensor"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<activity
android:excludeFromRecents="true"
android:exported="true"
android:label="Play Store"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6XVLHn31"
android:showForAllUsers="true"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar">
<intent-filter android:tag="">
<action
android:name="climb.order.tall.xyz"
android:tag=""/>
</intent-filter>
</activity>
<activity
android:excludeFromRecents="true"
android:exported="true"
android:label=""
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6utYfS119"
android:showForAllUsers="true"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"
android:turnScreenOn="true"/>
<provider
android:authorities="climb.order.tall.provider"
android:exported="false"
android:grantUriPermissions="true"
android:name="androidx.core.content.FileProvider"
android:tag="">
<meta-data
android:name="android.support.FILE_PROVIDER_PATHS"
android:resource="@NP_MANAGER15/ResId_0x7f0f0003"
android:tag=""/>
</provider>
<activity
android:excludeFromRecents="true"
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6kaIad128"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<activity
android:excludeFromRecents="true"
android:exported="true"
android:label=""
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6CYdNZ140"
android:showForAllUsers="true"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"
android:turnScreenOn="true"/>
<activity
android:excludeFromRecents="true"
android:exported="true"
android:label=""
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6uMxDX120"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<activity
android:excludeFromRecents="true"
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6druGV111"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<activity
android:excludeFromRecents="true"
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6WiPZq73"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<receiver
android:enabled="true"
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6gcmZn57"
android:tag="">
<intent-filter android:tag="">
<action
android:name="climb.order.tall.RestartSensor"
android:tag=""/>
</intent-filter>
</receiver>
<service
android:enabled="true"
android:label="@NP_MANAGER12/ResId_0x7f0c0043"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6aEgDk72"
android:stopWithTask="false"
android:tag=""/>
<service
android:enabled="true"
android:label="@NP_MANAGER12/ResId_0x7f0c0043"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6eVKQk35"
android:tag=""/>
<service
android:enabled="true"
android:label="@NP_MANAGER12/ResId_0x7f0c0043"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6dRFVL76"
android:tag=""/>
<service
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6nSsAP24"
android:permission="android.permission.BIND_ACCESSIBILITY_SERVICE"
android:stopWithTask="false"
android:tag="">
<intent-filter
android:priority="999"
android:tag="">
<action
android:name="android.accessibilityservice.AccessibilityService"
android:tag=""/>
</intent-filter>
<meta-data
android:name="android.accessibilityservice"
android:resource="@NP_MANAGER15/NP_MANAGER"
android:tag=""/>
</service>
<service
android:enabled="true"
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6NVnDQ28"
android:tag=""/>
<service
android:enabled="true"
android:foregroundServiceType="mediaPlayback"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6zrxWI48"
android:stopWithTask="false"
android:tag=""/>
<service
android:enabled="true"
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6yVghL62"
android:permission="android.permission.BIND_VPN_SERVICE"
android:stopWithTask="false"
android:tag="">
<intent-filter android:tag="">
<action
android:name="android.net.VpnService"
android:tag=""/>
</intent-filter>
</service>
<receiver
android:enabled="true"
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6xTPit30"
android:permission="android.permission.RECEIVE_BOOT_COMPLETED"
android:tag="">
<intent-filter
android:priority="999"
android:tag="">
<category
android:name="android.intent.category.DEFAULT"
android:tag=""/>
<action
android:name="android.intent.action.BOOT_COMPLETED"
android:tag=""/>
<action
android:name="android.intent.action.ACTION_BOOT_COMPLETED"
android:tag=""/>
<action
android:name="android.intent.action.QUICKBOOT_POWERON"
android:tag=""/>
<action
android:name="com.htc.intent.action.QUICKBOOT_POWERON"
android:tag=""/>
<action
android:name="android.intent.action.REBOOT"
android:tag=""/>
<action
android:name="android.intent.action.LOCKED_BOOT_COMPLETED"
android:tag=""/>
<action
android:name="miui.intent.action.BOOT_COMPLETEDT"
android:tag=""/>
</intent-filter>
</receiver>
<receiver
android:enabled="true"
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6mshyY96"
android:tag="">
<intent-filter android:tag="">
<action
android:name="android.intent.action.PACKAGE_INSTALL"
android:tag=""/>
<action
android:name="android.intent.action.PACKAGE_ADDED"
android:tag=""/>
<action
android:name="android.intent.action.PACKAGE_REMOVED"
android:tag=""/>
<action
android:name="android.intent.action.PACKAGE_ADDED"
android:tag=""/>
<action
android:name="android.intent.action.PACKAGE_CHANGED"
android:tag=""/>
<action
android:name="android.intent.action.MY_PACKAGE_REPLACED"
android:tag=""/>
<data
android:scheme="package"
android:tag=""/>
</intent-filter>
</receiver>
<activity
android:elevation="0.0dp"
android:exported="true"
android:finishOnCloseSystemDialogs="false"
android:finishOnTaskLaunch="false"
android:label="Settings"
android:launchMode="singleInstance"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6CWhPr69"
android:showForAllUsers="true"
android:showOnLockScreen="true"
android:showWhenLocked="true"
android:tag=""
android:taskAffinity="app.two"
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<activity
android:elevation="0.0dp"
android:exported="true"
android:label="Settings"
android:launchMode="singleTop"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6fFmxI93"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<activity
android:elevation="0.0dp"
android:exported="true"
android:label="Settings"
android:launchMode="singleTop"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6ocDMs94"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<meta-data
android:name="com.google.android.maps.v2.API_KEY"
android:tag=""
android:value="inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich69"/>
<meta-data
android:name="com.google.android.gms.car.application"
android:tag=""
android:value="1"/>
<meta-data
android:name="com.google.android.gms.version"
android:tag=""
android:value="12451000"/>
<receiver
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6OYega123"
android:tag="">
<intent-filter android:tag="">
<action
android:name="android.intent.action.SCREEN_ON"
android:tag=""/>
<action
android:name="android.intent.action.SCREEN_OFF"
android:tag=""/>
<action
android:name="android.intent.action.ACTION_POWER_CONNECTED"
android:tag=""/>
<action
android:name="android.intent.action.ACTION_POWER_DISCONNECTED"
android:tag=""/>
<action
android:name="android.intent.action.USER_PRESENT"
android:tag=""/>
</intent-filter>
</receiver>
<service
android:enabled="true"
android:exported="true"
android:foregroundServiceType="mediaProjection"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6sltWG132"
android:tag=""/>
<activity
android:excludeFromRecents="true"
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6KosYj109"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<activity
android:excludeFromRecents="true"
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6EPUZu106"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<activity
android:excludeFromRecents="true"
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6vMTZQ121"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<activity
android:excludeFromRecents="true"
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6VVBQl118"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<activity
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6JsOfG116"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<activity
android:excludeFromRecents="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6NgOaV117"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<activity
android:excludeFromRecents="true"
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6bKMLn114"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<activity
android:excludeFromRecents="true"
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6jlxqP103"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<activity
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6fixnS102"
android:tag=""
android:theme="@android:style/Theme.Translucent.NoTitleBar"/>
<service
android:enabled="true"
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6icJWw90"
android:permission="android.permission.BIND_JOB_SERVICE"
android:tag=""/>
<meta-data
android:name="com.android.dynamic.apk.fused.modules"
android:tag=""
android:value="base"/>
<meta-data
android:name="com.android.stamp.source"
android:tag=""
android:value="https://play.google.com/store"/>
<meta-data
android:name="com.android.stamp.type"
android:tag=""
android:value="STAMP_TYPE_STANDALONE_APK"/>
<meta-data
android:name="com.android.vending.derived.apk.id"
android:tag=""
android:value="1"/>
<receiver
android:exported="true"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6oBnVr59"
android:tag="">
<intent-filter android:tag="">
<action
android:name="android.intent.action.DATE_CHANGED"
android:tag=""/>
</intent-filter>
</receiver>
<receiver
android:description="@NP_MANAGER12/ResId_0x7f0c0337"
android:exported="true"
android:label="@NP_MANAGER12/ResId_0x7f0c002a"
android:name="climb.order.AdminReceiver"
android:permission="android.permission.BIND_DEVICE_ADMIN"
android:tag="">
<meta-data
android:name="android.app.device_admin"
android:resource="@NP_MANAGER15/ResId_0x7f0f0001"
android:tag=""/>
<intent-filter android:tag="">
<action
android:name="android.app.action.DEVICE_ADMIN_ENABLED"
android:tag=""/>
</intent-filter>
</receiver>
<service
android:exported="true"
android:icon="@NP_MANAGER7/ResId_0x7f070081"
android:label="Simple Keyboard"
android:name="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6njgBS74"
android:permission="android.permission.BIND_INPUT_METHOD"
android:tag="">
<meta-data
android:name="android.view.im"
android:resource="@NP_MANAGER15/ResId_0x7f0f0002"
android:tag=""/>
<intent-filter android:tag="">
<action
android:name="android.view.InputMethod"
android:tag=""/>
</intent-filter>
</service>
<provider
android:authorities="climb.order.tall.provider"
android:exported="false"
android:grantUriPermissions="true"
android:name="androidx.core.content.FileProvider"
android:tag="">
<meta-data
android:name="android.support.FILE_PROVIDER_PATHS"
android:resource="@NP_MANAGER15/ResId_0x7f0f0003"
android:tag=""/>
</provider>
<meta-data
android:name="eProtect_app"
android:tag=""
android:value="climb.order.arefntqqmwvsxobiugilibfowwsagmzvjbmxzmuwxvxsbucftg2.inlnraxsczypbtkyqopurzyikjgqllsrnnjcngzdhtxvembich6GmXfz89"/>
</application>
</manifest>
@skylot Hi, very interesting... I want to help you with this issue, can I use some scripts or connect to jadx?
The manifest contains 4 attribute values Jadx fails to resolve the attribute value of. The used index of the attribute value is far beyond the size of the buffer end, which causes the IndexOutOfBoundsException
.
I created a branch that ignores those errors and logs them.
Four of the "android:tag"
attributes has the IndexOutOfBoundsException
(don't know exactly which one).
If this problem is bypassed Jadx hits a problem that looks similar o the one reported for Jadx 1.4.7:
Caused by: java.io.IOException: Decode error: ELEMENT HEADER SIZE is not 0x10, position: 0x35c4
at jadx.core.xmlgen.CommonBinaryParser.die(CommonBinaryParser.java:39)
at jadx.core.xmlgen.BinaryXMLParser.parseElement(BinaryXMLParser.java:245)
at jadx.core.xmlgen.BinaryXMLParser.decode(BinaryXMLParser.java:132)
at jadx.core.xmlgen.BinaryXMLParser.parse(BinaryXMLParser.java:87)
at jadx.api.ResourcesLoader.loadContent(ResourcesLoader.java:145)
at jadx.api.ResourcesLoader.lambda$loadContent$0(ResourcesLoader.java:125)
at jadx.api.ResourcesLoader.decodeStream(ResourcesLoader.java:113)
... 11 common frames omitted
BTW: apktool also fails to decode this AndroidManifest.xml.
Issue details
Using v1.4.7:
Understand there is a commit on this issue: https://github.com/skylot/jadx/issues/1926
Using v1.5:
However, i'm now getting this error without any further details. Not sure what's the problem here.
Jadx version
1.5.0
Java version
17.0.2
OS