安全分析报告： 多多买菜司机 v7.2.0

安全分数


安全分数 48/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

2

用户/设备跟踪器


调研结果

高危 4
中危 26
信息 2
安全 2
关注 23

高危 基本配置不安全地配置为允许到所有域的明文流量。 

Scope:
*

高危 使用弱加密算法 

使用弱加密算法
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/xunmeng/pinduoduo/basekit/http/dns/m/a.java, line(s) 41,60

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击 

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
meco/webkit/WebView.java, line(s) 840,408
mecox/provider/impl/a/b.java, line(s) 1620,36,102,201,206,211,216,221,226,231,236,242,247,252,258,263,268,273,278,283,288,293,298,304,309,314,430,440,465,470,475,480,500,505,510,515,520,530,553,1466
mecox/webkit/WebView.java, line(s) 452,112

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/xunmeng/pinduoduo/vita/patch/inner/a.java, line(s) 80
com/xunmeng/tms/map/r/c.java, line(s) 31

中危 基本配置配置为信任系统证书。 

Scope:
*

中危 Service (com.xunmeng.tms.goldfinger.PddAccessibilityService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_ACCESSIBILITY_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity (com.xunmeng.tms.wxapi.WXPayEntryActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.vivo.push.sdk.service.CommandClientService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity设置了TaskAffinity属性 

(com.xunmeng.pinduoduo.apm.crash.activity.EmptyActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Broadcast Receiver (com.xunmeng.pinduoduo.push.xiaomi.XiaomiPushReceiver) 未被保护。 

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.xiaomi.mipush.sdk.PushMessageHandler) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.xiaomi.xmsf.permission.MIPUSH_RECEIVE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity (com.xiaomi.mipush.sdk.NotificationClickedActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.huawei.hms.support.api.push.service.HmsMsgService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Content Provider (com.huawei.hms.support.api.push.PushProvider) 未被保护。 

[android:exported=true]
发现 Content Provider与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.xunmeng.pinduoduo.push.oppo.OppoPushService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.coloros.mcs.permission.SEND_MCS_MESSAGE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (com.xunmeng.pinduoduo.push.oppo.OppoAppPushService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.heytap.mcs.permission.SEND_MCS_MESSAGE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (com.xunmeng.pinduoduo.push.vivo.VivoPushReceiver) 未被保护。 

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity设置了TaskAffinity属性 

(com.jarvan.fluwx.wxapi.FluwxWXEntryActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性 

(com.xunmeng.tms.wxapi.WXEntryActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity-Alias (com.xunmeng.tms.wxapi.WXEntryActivity) 未被保护。 

[android:exported=true]
发现 Activity-Alias与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
com/huawei/remoteLoader/client/ARTargetLibraryInfo.java, line(s) 8
com/xunmeng/basiccomponent/titan/AbstractTitanInterface.java, line(s) 8
com/xunmeng/basiccomponent/titan/RequestChannelSelector.java, line(s) 14
com/xunmeng/basiccomponent/titan/Titan.java, line(s) 74,75,85,86
com/xunmeng/basiccomponent/titan/api/TitanApiRequest.java, line(s) 123
com/xunmeng/basiccomponent/titan/api/helper/ApiNetChannelSelector.java, line(s) 18,19
com/xunmeng/basiccomponent/titan/profiler/LongLinkBackGroundStatusMonitor.java, line(s) 19
com/xunmeng/basiccomponent/titan/service/NetLogRecordConfig.java, line(s) 10
com/xunmeng/mbasic/storage/kvstore/e.java, line(s) 53,59,80,121,127,133,139,21,86,91,96,101,106,111
com/xunmeng/pinduoduo/arch/config/internal/ab/a.java, line(s) 33
com/xunmeng/pinduoduo/arch/config/internal/abexp/AbExpTrackConfigModel.java, line(s) 223
com/xunmeng/pinduoduo/arch/config/internal/abexp/e.java, line(s) 79
com/xunmeng/pinduoduo/arch/vita/inner/AutoDownloadCompHelper.java, line(s) 49
com/xunmeng/pinduoduo/arch/vita/utils/SafeUtils.java, line(s) 16
com/xunmeng/pinduoduo/basekit/http/dns/DnsConfigInfo.java, line(s) 238
com/xunmeng/pinduoduo/bridge/Constants$ExpAbItem.java, line(s) 41
com/xunmeng/pinduoduo/common_upgrade/f/b.java, line(s) 65,91
com/xunmeng/pinduoduo/common_upgrade/upgrade/bean/PatchExpInfo.java, line(s) 25
com/xunmeng/pinduoduo/g/a/a/b.java, line(s) 404
com/xunmeng/pinduoduo/k/j/e/b.java, line(s) 31
com/xunmeng/pinduoduo/o/b.java, line(s) 222
com/xunmeng/tms/utils/q.java, line(s) 59
meco/util/SoftInputHelper.java, line(s) 25
org/jcodec/containers/mxf/model/KLV.java, line(s) 56
top/kikt/imagescanner/core/entity/OrderByCond.java, line(s) 50

中危 MD5是已知存在哈希冲突的弱哈希 

MD5是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
am_okdownload/f/c.java, line(s) 249
com/xunmeng/pinduoduo/apm/common/utils/b.java, line(s) 268
com/xunmeng/pinduoduo/apm/common/utils/d.java, line(s) 170
com/xunmeng/pinduoduo/arch/config/internal/h.java, line(s) 38,54
com/xunmeng/pinduoduo/arch/vita/utils/VitaUtils.java, line(s) 151
com/xunmeng/pinduoduo/basekit/commonutil/b.java, line(s) 28,47
com/xunmeng/pinduoduo/common_upgrade/i/b.java, line(s) 18
com/xunmeng/pinduoduo/g/a/d/j.java, line(s) 39
com/xunmeng/pinduoduo/k/e/e.java, line(s) 43
com/xunmeng/pinduoduo/k/j/e/e.java, line(s) 10
com/xunmeng/pinduoduo/pddmap/MapYamlLoader.java, line(s) 272
com/xunmeng/pinduoduo/s/a/b/b.java, line(s) 27,40
com/xunmeng/pinduoduo/secure/e.java, line(s) 1093
com/xunmeng/pinduoduo/secure/i/f.java, line(s) 30
com/xunmeng/tms/map/r/c.java, line(s) 51
h/k/b/b/m.java, line(s) 249
org/jcodec/common/tools/MD5.java, line(s) 23
xmg/mobilebase/kenit/loader/shareutil/SharePatchFileUtil.java, line(s) 301,565

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
com/jarvan/fluwx/io/ImagesIOIml.java, line(s) 101
com/xunmeng/pinduoduo/t/e/d.java, line(s) 566
org/jcodec/testing/TestTool.java, line(s) 30,31,32

中危 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/ryanheise/just_audio/AudioPlayer.java, line(s) 61
com/xunmeng/ddmc/apm_impl/ApmApiImpl.java, line(s) 28
com/xunmeng/pinduoduo/apm/crash/core/a.java, line(s) 28
com/xunmeng/pinduoduo/app_lego/v8/preload/y0.java, line(s) 10
com/xunmeng/pinduoduo/arch/config/internal/g.java, line(s) 24
com/xunmeng/pinduoduo/arch/config/internal/l/c.java, line(s) 14
com/xunmeng/pinduoduo/arch/config/u/g.java, line(s) 44
com/xunmeng/pinduoduo/arch/vita/VitaManagerImpl.java, line(s) 76
com/xunmeng/pinduoduo/g/a/d/c.java, line(s) 15
com/xunmeng/pinduoduo/lego/v8/list/f.java, line(s) 7
com/xunmeng/pinduoduo/lego/v8/utils/f.java, line(s) 13
com/xunmeng/pinduoduo/o/b.java, line(s) 43
com/xunmeng/pinduoduo/o/d/a.java, line(s) 13
com/xunmeng/tms/appinfo_stat/b.java, line(s) 7
com/xunmeng/tms/base/util/x.java, line(s) 17
com/xunmeng/tms/c/a.java, line(s) 7
com/xunmeng/tms/location/report/LocationReportService.java, line(s) 20
com/xunmeng/tms/scan/sdk/uploadscan/c.java, line(s) 5
xmg/mobilebase/kenit/loader/shareutil/ShareLoadReport.java, line(s) 19

中危 IP地址泄露 

IP地址泄露


Files:
com/huawei/hiar/BuildConfig.java, line(s) 9
com/xunmeng/basiccomponent/titan/jni/DataStructure/StGslbConfig.java, line(s) 51,93,121,51,93,121,51,93,121,51,93,121
com/xunmeng/basiccomponent/titan/util/IpStackHelper.java, line(s) 58
com/xunmeng/mbasic/network/p/d.java, line(s) 287
com/xunmeng/pinduoduo/basekit/http/dns/DnsConfigInfo.java, line(s) 101,100
com/xunmeng/pinduoduo/basekit/http/dns/HttpDns.java, line(s) 36,48,60,37,49,61,38,50,62,39,51,63,40,52,64,41,53,65,42,54,66,43,55,67
com/xunmeng/pinduoduo/push/hms/HuaweiHmsPushChannel.java, line(s) 201
com/xunmeng/tms/app/provider/k.java, line(s) 69,69,69,67,64,69
com/xunmeng/tms/helper/l/d.java, line(s) 6
com/xunmeng/tms/helper/l/f.java, line(s) 6,4,8,7
l/b/d/c.java, line(s) 51
m/a/c/d/b/a.java, line(s) 237
meco/util/MecoComponentUtil.java, line(s) 17
org/jcodec/containers/mxf/MXFCodec.java, line(s) 49,57,41,47,52,53,44,56,40,59,42,43,39,62,45,55,51,60,46,65,66,67,61
org/jcodec/containers/mxf/MXFConst.java, line(s) 87,36,56,86,51,57,72,73,68,69,55,60,52,67,66,62,74,71,70,76,77,78,79,80,81,82,83,84,85,75,35,61,34
xmg/mobilebase/kenit/loader/BuildConfig.java, line(s) 7
xmg/mobilebase/kenit/loader/shareutil/ShareConstants.java, line(s) 143
xmg/mobilebase/kenit/loader/shareutil/ShareKenitInternals.java, line(s) 442,443,745

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
am_okdownload/f/j/c.java, line(s) 8,9,67
com/tencent/wcdb/database/SQLiteDatabase.java, line(s) 4,474
com/tencent/wcdb/room/db/WCDBDatabase.java, line(s) 6,162
com/xunmeng/mbasic/report/h/f/a.java, line(s) 7,8,9,183
com/xunmeng/mbasic/report/h/f/b.java, line(s) 5,6,17
h/h/a/c.java, line(s) 7,633
h/k/b/b/s/b.java, line(s) 4,5,23

中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/mr/flutter/plugin/filepicker/b.java, line(s) 237
com/mr/flutter/plugin/filepicker/c.java, line(s) 102
com/xunmeng/pinduoduo/secure/i/b.java, line(s) 171,172
com/xunmeng/pinduoduo/sensitive_api/storage/c.java, line(s) 119,120
com/xunmeng/tms/base/util/p.java, line(s) 376,555,557
com/xunmeng/tms/l/d/c.java, line(s) 6
com/xunmeng/tms/u/h0/c.java, line(s) 314
h/a/imagegallerysaver/ImageGallerySaverPlugin.java, line(s) 61
h/d/a/a/b.java, line(s) 33,36
h/i/a/a.java, line(s) 193
top/kikt/imagescanner/core/utils/DBUtils.java, line(s) 717,1019

中危 SHA-1是已知存在哈希冲突的弱哈希 

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/xunmeng/pinduoduo/q/f/b.java, line(s) 64
com/xunmeng/pinduoduo/q/g/c.java, line(s) 85
i/a/a/packageinfo/PackageInfoPlugin.java, line(s) 130
xmg/mobilebase/kenit/android/dex/i.java, line(s) 395

中危 应用程序包含隐私跟踪程序 

此应用程序有多个2隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
vivo推送的=> "com.vivo.push.app_id" : "105514192"
vivo推送的=> "local_iv" : "MzMsMzQsMzUsMzYsMzcsMzgsMzksNDAsNDEsMzIsMzgsMzcsMzYsMzUsMzQsMzMsI0AzNCwzMiwzMywzNywzMywzNCwzMiwzMywzMywzMywzNCw0MSwzNSwzNSwzMiwzMiwjQDMzLDM0LDM1LDM2LDM3LDM4LDM5LDQwLDQxLDMyLDM4LDM3LDMzLDM1LDM0LDMzLCNAMzQsMzIsMzMsMzcsMzMsMzQsMzIsMzMsMzMsMzMsMzQsNDEsMzUsMzIsMzIsMzI"
vivo推送的=> "com.vivo.push.api_key" : "096e20ee4bd426d0b6d5a36510cddc16"
华为HMS Core 应用ID的=> "com.huawei.hms.client.appid" : "appid=108429397"
CBB9C44D84B8043E1050EA31A69F514955D7BFD2E2C6B49301019AD61D9F5058
C57A3ACBE8C06BA1988A83485BF326F2448775379849DE01CA43571AF357E74B
5CBF6FB81FD417EA4128CD6F8172A3C9402094F74AB2ED3A06B4405D04F30B19
c0a6f4dc63a24bfdcf54ef2a6a082a0a72de35803e2ff5ff527ae5d87206dfd5
15f0ba00a3ac7af3ac884c072b1011a077bd77c097f40164b2f8598abd83860c
6507e161d6cf099baba4650abea05983
a040929a02ce53b4acf4f2ffc6981ce4496f755e6d45fe0b2a692bcd52523f36
e23d4a036d7b70e9f595b1422079d2b91edfbb1fb651a0633eaa8a9dc5f80703
B478B812250DF878635C2AA7EC7D155EAA625EE82916E2CD294361886CD1FBD4
70a73f7f376b60074248904534b11482d5bf0e698ecc498df52577ebf2e93b9a
79e427d3e63c40adb1ed4380675845e0
Y29tLmFsaWJhYmEuYW5kcm9pZC5yaW1ldA==
f356bea244b7a91eb35d53ca9ad7864ace018e2d35d5f8f96ddf68a6f41aa474
56C77128D98C18D91B4CFDFFBC25EE9103D4758EA2ABAD826A90F3457D460EB4
6639D13CAB85DF1AD9A23C443B3A60901E2B138D456FA71183578108884EC6BF
7d05ebb682339f8c9451ee094eebfefa7953a114edb2f44949452fab7d2fc185
c3846bf24b9e93ca64274c0ec67c1ecc5e024ffcacd2d74019350e81fe546ae4
2245023265AE4CF87D02C8B6BA991139
D95FEA3CA4EEDCE74CD76E75FC6D1FF62C441F0FA8BC77F034B19E5DB258015D
2cabeafe37d06ca22aba7391c0033d25982952c453647349763a3ab5ad6ccf69
F2A7A9465BD586E2C20FE329B4C06B4E
3c4fb0b95ab8b30032f432b86f535fe172c185d0fd39865837cf36187fa6f428
e7ffcde74b3ee6c00714cc1f75bfd3b6
302D7B1D081AD80D5C79B0A470F02EC8
06c1b874-8556-449e-8262-1d2b26d84eb9
bc104f15a48be709dca542a7e1d4b9df6f054527e802eaa92d595444258afe71
ebc5570c29018c4d67b1aa127baf12f703b4611ebc17b7dab5573894179b93fa
5c58468d55f58e497e743982d2b50010b6d165374acf83a7d4a32db768c4408e
96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
Y29tLmdyZWVucG9pbnQuYW5kcm9pZC5tYzEwMDg2LmFjdGl2aXR5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f3afd9e4479a14ba6c2d58cefa2a4dc3046329f3
FABCF5197CDD7F458AC33832D3284021DB2425FD6BEA7A2E69B7486E8F51F9CC
cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b
EB04CF5EB1F39AFA762F2BB120F296CBA520C1B97DB1589565B81CB9A17B7244
Y29tLnNzLmFuZHJvaWQuYXJ0aWNsZS5saXRl
fd73dad31c644ff1b43bef0ccdda96710b9cd9875eca7e31707af3e96d522bbd
cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
C7BA6567DE93A798AE1FAA791E712D378FAE1F93C4397FEA441BB7CBE6FD5995
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
b0bfd52bb0d7d9bd92bf5d4dc13da255c02c542f378365ea893911f55e55f23c
6c61dac3a2def031506be036d2a6fe401994fbd13df9c8d466599274c446ec98
nmDYVF3FN8VKfyoAKS1vRQlXKslPf45oQSOgIWbC/jsQz+tp4etnJ98VUtKNm4Vsq
91e2f5788d5810eba7ba58737de1548a8ecacd014598bc0b143e041b17052552
Y29tLnNzLmFuZHJvaWQudWdjLmF3ZW1lLmxpdGU=
F96F23F4C3E79C077A46988D5AF5900676A0F039CB645DD17549B216C82440CE
17f1d6df84885437a313558b4b20e39f
b676f2eddae8775cd36cb0f63cd1d4603961f49e6265ba013a2f0307b6d0b804
52f0e1c4e58ec629291b60317f074671b85d7ea80d5b07273463534b32b40234
49e7a442acf0ea6287050054b52564b650e4f49e42e348d6aa38e039e957b1c1
n9gYOvk2nZYrb8Aa6l9ORhE2qSQ0qn2t3FUtGS7AbL0THfOY+7EoV1R4KCKz+Cfi1
E17890EE09A3FBF4F48B9C414A17D637B7A50647E9BC752322727FCC1742A911
Y29tLmh1bmFudHYuaW1nby5hY3Rpdml0eQ==
27d848e5-22ad-459e-98cd-259d068d50d1
2ce1cb0bf9d2f9e102993fbe215152c3b2dd0cabde1c68e5319b839154dbb7f5
d40e9c86cd8fe468c1776959f49ea774fa548684b6c406f3909261f4dce2575c
B0B1730ECBC7FF4505142C49F1295E6EDA6BCAED7E2C68C5BE91B5A11001F024
62dd0be9b9f50a163ea0f8e75c053b1eca57ea55c8688f647c6881f2c8357b95
738d09cc17c177ebadb85b001c8c386b
27995829FE6A7515C1BFE848F9C4761DB16C225929257BF40D0894F29EA8BAF2
0ED3FFAB6C149C8B4E71058E8668D429ABFDA681C2FFF508207641F0D751A3E5
8560f91c3624daba9570b5fea0dbe36ff11a8323be9486854fb3f34a5571198d
319AF0A7729E6F89269C131EA6A3A16FCD86389FDCAB3C47A4A675C161A3F974
568d6905a2c88708a4b3025190edcfedb1974a606a13c6e5290fcb2ae63edab5
30d0895a9a448a262091635522d1f52010b5867acae12c78ef958fd4f4389f2f
0C258A12A5674AEF25F28BA7DCFAECEEA348E541E6F5CC4EE63B71B361606AC3
16af57a9f676b0ab126095aa5ebadef22ab31119d644ac95cd4b93dbf3f26aeb
CBB5AF185E942A2402F9EACBC0ED5BB876EEA3C1223623D00447E4F3BA554B65
37D51006C512EAAB626421F1EC8C92013FC5F82AE98EE533EB4619B8DEB4D06C
13e6deb3-efec-4e83-8904-376b1c12ae90
43df5774b03e7fef5fe40d931a7bedf1bb2e6b42738c4e6d3841103d3aa7f339
d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
70B922BFDA0E3F4A342E4EE22D579AE598D071CC5EC9C30F123680340388AEA5
63343ABFB89A6A03EBB57E9B3F5FA7BE7C4F5C756F3017B3A8C488C3653E9179
CB627D18B58AD56DDE331A30456BC65C601A4E9B18DEDCEA08E7DAAA07815FF0
e75e72ed9f560eec6eb4800073a43fc3ad19195a392282017895974a99026b6c
B0AB0254BD58EB87EAEE3172BA49FEFB
3B222E566711E992300DC0B15AB9473DAFDEF8C84D0CEF7D3317B4C1821D1436
2bee8eae1ac52f9766352c9d05b62a1c
31ad6648f8104138c738f39ea4320133393e3a18cc02296ef97c2ac9ef6731d0
85a0dd7dd720adb7ff05f83d542b209dc7ff4528f7d677b18389fea5e5c49e86
F008733EC500DC498763CC9264C6FCEA40EC22000E927D053CE9C90BFA046CB2
047D00CE52551DCEDC5F847B0665E022
8fe4fb0af93a4d0d67db0bebb23e37c71bf325dcbcdd240ea04daf58b47e1840
1ba5b2aa8c65401a82960118f80bec4f62304d83cec4713a19c39c011ea46db4
785264333748DC23BDD5874BBE44306F
cecddc905099d8dadfc5b1d209b737cbe2c18cfb2c10c0ff0bcf0d3286fc1aa2
C766A9BEF2D4071C863A31AA4920E813B2D198608CB7B7CFE21143B836DF09EA
8ad2eb58-fb06-4036-956a-da63b55fceae
1793927a0614549789adce2f8f34f7f0b66d0f3ae3a3b84d21ec15dbba4fadc7
4ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a
9ACFAB7E43C8D880D06B262A94DEEEE4B4659989C3D0CAF19BAF6405E41AB7DF
063e4afac491dfd332f3089b8542e94617d893d7fe944e10a7937ee29d9693c0
2605875AFCC176B2D66DD66A995D7F8D5EBB86CE120D0E7E9E7C6EF294A27D4C
A1A86D04121EB87F027C66F53303C28E5739F943FC84B38AD6AF009035DD9457
513b2cecb810d4cde5dd85391adfc6c2dd60d87bb736d2b521484aa47a0ebef6
c1b48299aba5208fe9630ace55ca68a03eda5a519c8802a0d3a673be8f8e557d
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH8q0+dtUWGu9l13gywI
55926084ec963a64b96e2abe01ce0ba86a64fbfebcc7aab5afc155b37fd76066
ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99
187EF4436122D1CC2F40DC2B92F0EBA0
5a885db19c01d912c5759388938cafbbdf031ab2d48e91ee15589b42971d039c
dd6936fe21f8f077c123a1a521c12224f72255b73e03a7260693e8a24b0fa389
C2B9B042DD57830E7D117DAC55AC8AE19407D38E41D88F3215BC3A890444A050
179fbc148a3dd00fd24ea13458cc43bfa7f59c8182d783a513f6ebec100c8924
bfd88fe1101c41ae3e801bf8be56350ee9bad1a6b9bd515edc5c6d5b8711ac44
e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd2
caf2d46106404bf09bb47c8ca2d301a1
3c5f81fea5fab82c64bfa2eaecafcde8e077fc8620a7cae537163df36edbf378
c45d7bb08e6d67e62e4235110b564e5f78fd92ef058c840aea4e6455d7585c60
3417bb06cc6007da1b961c920b8ab4ce3fad820e4aa30b9acbc4a74ebdcebc65
f1c1b50ae5a20dd8030ec9f6bc24823dd367b5255759b4e71b61fce9f7375d73
fbd0c7ee-3317-4833-b569-8712f982a190
92D8092EE77BC9208F0897DC05271894E63EF27933AE537FB983EEF0EAE3EEC8
4200f5043ac8590ebb527d209ed1503029fbcbd41ca1b506ec27f15ade7dac69
e2a7d9862974a2898eb828192992cb78
04048028bf1f2864d48f9ad4d83294366a828856553f3b14303f90147f5d40ef
0376ab1d54c5f9803ce4b2e201a0ee7eef7b57b636e8a93c9b8d4860c96f5fa7
136335439334a7698016a0d324de72284e079d7b5220bb8fbd747816eebebaca
7e37cb8b4c47090cab36551ba6f45db840680fba166a952db100717f43053fc2
Y29tLnRlbmNlbnQuYW5kcm9pZC5xcWRvd25sb2FkZXI=
23804203CA45D8CDE716B8C13BF3B448457FA06CC10250997FA01458317C41E5
A22DBA681E97376E2D397D728AAE3A9B6296B9FDBA60BC2E11F647F2C675FB37
6FDB3F76C8B801A75338D8A50A7C02879F6198B57E594D318D3832900FEDCD79
507941C74460A0B47086220D4E9932572AB5D1B5BBCB8980AB1CB17651A844D2
0c2cd63df7806fa399ede809116b575bf87989f06518f9808c860503178baf66
4d2491414cfe956746ec4cefa6cf6f72e28a1329432f9d8a907ac4cb5dadc15a
8D722F81A9C113C0791DF136A2966DB26C950A971DB46B4199F4EA54B78BFB9F
Y29tLmVnLmFuZHJvaWQuQWxpcGF5R3Bob25l
d40264e6-6873-470e-ac32-4071848d3de0
88ef81de202eb018452e43f864725cea5fbd1fc2d9d205730709c5d8b8690f46
e35d28419ed02025cfa69038cd623962458da5c695fbdea3c22b0bfb25897092
6a71f85cb8731717f2a069a2ee384a1e
41C923866AB4CAD6B7AD578081582E020797A6CBDF4FFF78CE8396B38937D7F5
5d56499be4d2e08bcfcad08a3e38723d50503bde706948e42f55603019e528ae
9a114025197c5bb95d94e63d55cd43790847b646b23cdf11ada4a00eff15fb48
a48a29f53aca41e3bceb108252bdfeb6
44b545aa8a25e65a73ca15dc27fc36d24c1cb9953a066539b11582dc487b4833
8327BC8C9D69947B3DE3C27511537267F59C21B9FA7B613FAFBCCD53B7024000
152A402BFCDF2CD548054D2275B39C7FCA3EC0978078B0F0EA76E561A6C7433E
353FEA5DEB6FEC2344FC91D32FAD995E
46edc3689046d53a453fb3104ab80dcaec658b2660ea1629dd7e867990648716
edf7ebbca27a2a384d387b7d4010c666e2edb4843e4c29b4ae1d5b9332e6b24d
8a866fd1b276b57e578e921c65828a2bed58e9f2f288054134b7f1f4bfc9cc74
B7C36231706E81078C367CB896198F1E3208DD926949DD8F5709A410F75B6292
7F671B7BCFC947F3A8D3DDA5BAA60712
2a575471e31340bc21581cbd2cf13e158463203ece94bcf9d3cc196bf09a5472
69DDD7EA90BB57C93E135DC85EA6FCD5480B603239BDC454FC758B2A26CF7F79
aa06b79a-32e2-4b31-81bc-00262e20a3aa
21DB20123660BB2ED418205DA11EE7A85A65E2BC6E55B5AF7E7899C8A266D92E
AE4457B40D9EDA96677B0D3C92D57B5177ABD7AC1037958356D1E094518BE5F2
0a81ec5a929777f145904af38d5d509f66b5e2c58fcdb531058b0e17f3f0b41b
2e7bf16cc22485a7bbe2aa8696750761b0ae39be3b2fe9d0cc6d4ef73491425c
6dc47172e01cbcb0bf62580d895fe2b8ac9ad4f873801e0c10b9c837d21eb177
46fbf3806441d4790c7bdfa771acb8a5
D97761EAA60E040D2C542B03958DAB46
bd71fdf6da97e4cf62d1647add2581b07d79adf8397eb4ecba9c5e8488821423
02ed0eb28c14da45165c566791700d6451d7fb56f0b2ab1d3b8eb070e56edff5
0753e940378c1bd5e3836e395daea5cb839e5046f1bd0eae1951cf10fec7c965
Y29tLnNvaHUuaW5wdXRtZXRob2Quc29nb3U=
5a2fc03f0c83b090bbfa40604b0988446c7636183df9846e17101a447fb8efd6
2A99F5BC1174B73CBB1D620884E01C34E51CCB3978DA125F0E33268883BF4158
bec94911c2955676db6c0a550986d76e3ba005667c442c9762b4fbb773de228c
nxet6jhZrYKOTnN7FAQudsUv8TPOL6tViJ5ZFPJpsD/8QBcTCIFk1EhNAII9jjIpl
18ce6cfe7bf14e60b2e347b8dfe868cb31d02ebb3ada271569f50343b46db3a4
8ecde6884f3d87b1125ba31ac3fcb13d7016de7f57cc904fe1cb97c6ae98196e
Y29tLmFuanVrZS5hbmRyb2lkLmFwcA==
73c176434f1bc6d5adf45b0e76e727287c8de57616c1e6e6141a2b2cbc7d8e4c
3e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c
a9c9478351684c388b62d750ed67ec73
5edb7ac43b82a06a8761e8d7be4979ebf2611f7dd79bf91c1c6b566a219ed766
5cc3d78e4e1d5e45547a04e6873e64f90cf9536d1ccc2ef800f355c4c5fd70fd
bfff8fd04433487d6a8aa60c1a29767a9fc2bbb05e420f713a13b992891d3893
9D190B2E314566685BE8A889E27AA8C7D7AE1D8AADDBA3C1ECF9D24863CD34B9
824C6AA7A0C65328B9844CE714B96B8E
2a60276ca9d059a29d4494f8dc6cac6e
eaa962c4fa4a6bafebe415196d351ccd888d4f53f3fa8ae6d7c466a94e6042bb
ca42dd41745fd0b81eb902362cf9d8bf719da1bd1b1efc946f5b4c99f42c1b9e
EF3CB417FC8EBF6F97876C9E4ECE39DE1EA5FE649141D1028B7D11C0B2298CED
f611297f5472b4433df52891dc5d6705
f9e67d336c51002ac054c632022d66dda2e7e3fff10ad061ed31d8bbb410cfb2
15d5b8774619ea7d54ce1ca6d0b0c403e037a917f131e8a04e1e6b7a71babce5
45140b3247eb9cc8c5b4f0d7b53091f73292089e6e5a63e2749dd3aca9198eda
35487fb4bd08cdf78302b2059dd5c287
0D83B611B648A1A75EB8558400795375CAD92E264ED8E9D7A757C1F5EE2BB22D
22a2c1f7bded704cc1e701b5f408c310880fe956b5de2a4a44f99c873a25a7c8
7431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf
6CC05041E6445E74696C4CFBC9F80F543B7EABBB44B4CE6F787C6A9971C42F17
2399561127a57125de8cefea610ddf2fa078b5c8067f4e828290bfb860e84b3c
6b9c08e86eb0f767cfad65cd98b62149e5494a67f5845e7bd1ed019f27b86bd6
eec5496b988ce98625b934092eec2908bed0b0f316c2d4730c84eaf1f3d34881
Y29tLmhhcHB5ZWxlbWVudHMuQW5kcm9pZEFuaW1hbA==

信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
am_okdownload/f/c.java, line(s) 141,150,201,71
am_okdownload/f/g/e.java, line(s) 129
com/baseflow/permissionhandler/j.java, line(s) 19
com/baseflow/permissionhandler/n.java, line(s) 55,75,79,144,202,208,213
com/baseflow/permissionhandler/o.java, line(s) 277,281,286
com/baseflow/permissionhandler/p.java, line(s) 77
com/huawei/hiar/ARConfigBase.java, line(s) 243,361,375,384,413,427,450
com/huawei/hiar/ARFrame.java, line(s) 166,191,225,188
com/huawei/hiar/ARPlane.java, line(s) 117,125
com/huawei/hiar/ARServiceProxy.java, line(s) 93,110,133,141,167,170,177,256,264,268,100,127,143,185,194,212,232,182,222,228,382
com/huawei/hiar/ARSession.java, line(s) 60,189,192,195,198,201,204,338,342,388,395
com/huawei/hiar/ARVideoSource.java, line(s) 32,44,87
com/huawei/hiar/ArCallbackThread.java, line(s) 61,38,44,55,80
com/huawei/hiar/HuaweiArApkImpl.java, line(s) 23
com/huawei/hiar/utils/CheckSignature.java, line(s) 22,26,30,50,68,92
com/huawei/hiar/utils/CommonUtil.java, line(s) 32
com/huawei/remoteLoader/client/ARDynamiteClient.java, line(s) 125,71,74,85,89,94,102,106,133,169,180,183,206,212,66,77,100,109,154,191,69,82,115
com/huawei/remoteLoader/client/ARRemoteLibraryLoader.java, line(s) 69,36
com/jarvan/fluwx/b/a.java, line(s) 49
com/jarvan/fluwx/handlers/FluwxRequestHandler.java, line(s) 62,125
com/jarvan/fluwx/handlers/WXAPiHandler.java, line(s) 78,85,134,174,181
com/jarvan/fluwx/io/ByteArrayToFileKt$saveToLocal$2.java, line(s) 83
com/jarvan/fluwx/io/WeChatNetworkFile$readByteArray$2.java, line(s) 64
com/jarvan/fluwx/wxapi/FluwxWXEntryActivity.java, line(s) 66
com/mr/flutter/plugin/filepicker/b.java, line(s) 85,103,108,131,238,254,275
com/mr/flutter/plugin/filepicker/c.java, line(s) 149,269,44,89,210,212,216,261,264,222,144
com/pauldemarco/flutter_blue/FlutterBluePlugin.java, line(s) 376,386,471
com/ryanheise/just_audio/AudioPlayer.java, line(s) 1136,1138,1140,1142,1146
com/tencent/wcdb/AbstractCursor.java, line(s) 127
com/tencent/wcdb/BulkCursorToCursorAdaptor.java, line(s) 117,145,34,54,157
com/tencent/wcdb/DatabaseUtils.java, line(s) 132,168,609,689,700
com/tencent/wcdb/DefaultDatabaseErrorHandler.java, line(s) 26,32,67
com/tencent/wcdb/database/SQLiteAsyncQuery.java, line(s) 37,48
com/tencent/wcdb/database/SQLiteConnection.java, line(s) 167,692
com/tencent/wcdb/database/SQLiteConnectionPool.java, line(s) 122,163,306,318,334,152,360,248,688
com/tencent/wcdb/database/SQLiteCursor.java, line(s) 95,151
com/tencent/wcdb/database/SQLiteDatabase.java, line(s) 238,586,657,787,415,419
com/tencent/wcdb/database/SQLiteDebug.java, line(s) 75,131
com/tencent/wcdb/database/SQLiteDirectCursor.java, line(s) 66,130,171
com/tencent/wcdb/database/SQLiteDirectQuery.java, line(s) 82
com/tencent/wcdb/database/SQLiteOpenHelper.java, line(s) 64,112
com/tencent/wcdb/database/SQLiteQuery.java, line(s) 27
com/tencent/wcdb/database/SQLiteQueryBuilder.java, line(s) 224
com/tencent/wcdb/repair/DBDumpUtil.java, line(s) 112,211,262,77,88,265,277,281,39
com/xunmeng/basiccomponent/titan/internal/TitanSoManager.java, line(s) 29,55
com/xunmeng/basiccomponent/titan/jni/TitanLogic.java, line(s) 107,590,1492,1472
com/xunmeng/basiccomponent/titan/service/TitanNative.java, line(s) 60
com/xunmeng/mbasic/XlogApiImpl.java, line(s) 153,157,158,159
com/xunmeng/mbasic/permission/rxpermission/RxPermissionsFragment.java, line(s) 46,56
com/xunmeng/mbasic/remoteconfig/RemoteConfigApiImpl.java, line(s) 337
com/xunmeng/mbasic/upgrade/o.java, line(s) 31
com/xunmeng/mbasic/upgrade/p.java, line(s) 18
com/xunmeng/mbasic/upgrade/q.java, line(s) 38
com/xunmeng/pinduoduo/apm/common/e/f.java, line(s) 26
com/xunmeng/pinduoduo/apm/e/a.java, line(s) 17
com/xunmeng/pinduoduo/app_lego/v8/preload/LegoV8LoadManager.java, line(s) 278,58,442,458,485,516,632
com/xunmeng/pinduoduo/app_lego/v8/preload/h1.java, line(s) 122
com/xunmeng/pinduoduo/app_lego/v8/preload/j1.java, line(s) 78,82,86
com/xunmeng/pinduoduo/app_lego/v8/preload/z0.java, line(s) 76
com/xunmeng/pinduoduo/arch/foundation/Foundation.java, line(s) 121,125,86
com/xunmeng/pinduoduo/arch/vita/fs/lock/ReadWriteLockBySemaphore.java, line(s) 104,124
com/xunmeng/pinduoduo/bridge/c.java, line(s) 60
com/xunmeng/pinduoduo/k/d/a.java, line(s) 347,579
com/xunmeng/pinduoduo/k/d/b.java, line(s) 639
com/xunmeng/pinduoduo/k/e/e.java, line(s) 200,204,96,100,108
com/xunmeng/pinduoduo/k/e/j.java, line(s) 44,40
com/xunmeng/pinduoduo/k/f/e.java, line(s) 7
com/xunmeng/pinduoduo/k/f/g.java, line(s) 32,170,190,47,175,195,210,72,180,200,147,185,205
com/xunmeng/pinduoduo/k/g/b.java, line(s) 43
com/xunmeng/pinduoduo/k/j/a/i0.java, line(s) 322,327,332,338
com/xunmeng/pinduoduo/k/j/a/o.java, line(s) 1930,2081
com/xunmeng/pinduoduo/k/j/a/t.java, line(s) 442,447,452,458
com/xunmeng/pinduoduo/k/j/b/b.java, line(s) 111,116
com/xunmeng/pinduoduo/k/j/b/b0.java, line(s) 56,122,126,211,213,221,226,237,246,262
com/xunmeng/pinduoduo/k/j/b/x.java, line(s) 451,706,873
com/xunmeng/pinduoduo/k/j/b/z.java, line(s) 72
com/xunmeng/pinduoduo/lego/v8/canvas/LegoCanvasView.java, line(s) 53
com/xunmeng/pinduoduo/lego/v8/canvas/a.java, line(s) 443
com/xunmeng/pinduoduo/lego/v8/utils/a.java, line(s) 126,188
com/xunmeng/pinduoduo/lego/v8/view/InternalLegoView.java, line(s) 288,308
com/xunmeng/pinduoduo/lego/v8/view/b.java, line(s) 139
com/xunmeng/pinduoduo/lego/v8/view/i/b.java, line(s) 84,90
com/xunmeng/pinduoduo/m2/core/BaseTValue.java, line(s) 305,675,949,1223
com/xunmeng/pinduoduo/m2/core/e0/g.java, line(s) 356
com/xunmeng/pinduoduo/m2/core/j.java, line(s) 1883,1897,2470
com/xunmeng/pinduoduo/m2/core/o.java, line(s) 20,57
com/xunmeng/pinduoduo/m2/m2function/M2DomFunctions.java, line(s) 205
com/xunmeng/pinduoduo/m2/m2function/M2Error.java, line(s) 49,106,127
com/xunmeng/pinduoduo/m2/m2function/M2Jni.java, line(s) 14,17
com/xunmeng/pinduoduo/m2/m2function/j.java, line(s) 140
com/xunmeng/pinduoduo/m2/m2function/t.java, line(s) 470,483,768,782,804,806,895
com/xunmeng/pinduoduo/oaid/ImplLoader.java, line(s) 79,82
com/xunmeng/pinduoduo/oaid/b/c.java, line(s) 27
com/xunmeng/pinduoduo/oaid/b/e.java, line(s) 9,34,59,84,14,39,64,89,19,44,69,94,24,49,74,99,29,54,79,104
com/xunmeng/pinduoduo/oaid/b/j.java, line(s) 12
com/xunmeng/pinduoduo/oaid/b/k.java, line(s) 22
com/xunmeng/pinduoduo/pddmap/j.java, line(s) 22
com/xunmeng/pinduoduo/push/hms/HuaweiHmsPushChannel.java, line(s) 202
com/xunmeng/pinduoduo/secure/SecureNative.java, line(s) 34
com/xunmeng/pinduoduo/threadpool/HandlerBuilder.java, line(s) 108,113,118
com/xunmeng/pinduoduo/threadpool/p.java, line(s) 235,241,246
com/xunmeng/pinduoduo/volantis/kenithelper/PDDKenitResultService.java, line(s) 55,23,29,38,43,57
com/xunmeng/pinduoduo/volantis/kenithelper/b.java, line(s) 45,59,67,76,40,41,61,64,69,72,74
com/xunmeng/pinduoduo/xlog/XlogUpload.java, line(s) 106
com/xunmeng/pinduoduo/xlog/XlogUploadCommandListener.java, line(s) 35,41,46
com/xunmeng/pinduoduo/xlog/XlogUploadManager.java, line(s) 138,132,207,214,394,403,411,422,446,454,475,485,496,521
com/xunmeng/pinduoduo/xlog/g.java, line(s) 117
com/xunmeng/router/AbsRouter.java, line(s) 223,170,248
com/xunmeng/router/MatcherRegistry.java, line(s) 69
com/xunmeng/router/RealRouter.java, line(s) 177,291,293,295,317,344,352,362,364,366,408,512,538,558,581,599,628,52,115,119,122,129,332,386,421,424,510,545,546,556,588,592,597,635,639,104
com/xunmeng/router/Router.java, line(s) 54,70,78
com/xunmeng/router/matcher/AbsExplicitMatcher.java, line(s) 30,40
com/xunmeng/tms/app/n.java, line(s) 20,45,70,95,25,50,75,100,30,55,80,105,35,60,85,110,40,65,90,115
com/xunmeng/tms/camera_plugin/camerax_v2/PlatformWithCameraXView.java, line(s) 496
com/xunmeng/tms/goldfinger/test/AccessibilityTestReceiver.java, line(s) 57
com/xunmeng/tms/j/a.java, line(s) 15,26,32,46
com/xunmeng/tms/p/i/misc/e.java, line(s) 120,129
com/xunmeng/tms/t/j.java, line(s) 41,46,49,62,36
h/a/flutterimagecompress/exif/b.java, line(s) 77
h/a/flutterimagecompress/g/a.java, line(s) 20
h/a/imagegallerysaver/ImageGallerySaverPlugin.java, line(s) 179
h/h/a/c.java, line(s) 289,339,436,498,514,555,561,572,594,598,624,641,725,765,774,800,813,866,958,966,343,748,769,981
h/h/a/d.java, line(s) 84,95
h/k/c/d/b.java, line(s) 88
h/k/c/d/d/a.java, line(s) 16,56,94,132,162,24,64,101,142,32,72,108,152,40,80,115,48,88,122,172
h/k/e/a/a/c.java, line(s) 393,398,387
h/k/e/a/a/d.java, line(s) 221,267,411,225
h/k/e/a/c/c.java, line(s) 42
in/srain/cube/views/ptr/g/a.java, line(s) 15
k/a/j.java, line(s) 90,203,43,62,72,114,127,170,186,196
k/a/k.java, line(s) 70,58,72,73
k/a/l.java, line(s) 14,16,23,27,30,31,13
k/a/m.java, line(s) 109,132,164,174,220,249,321,360,465,493,558,618,646,51,61,100,415,455,460,478,497,511,522,541,553,574,616,642,686,48,81,126,196,206,273,284,307,344,394,669
k/a/q.java, line(s) 8,13,18
k/a/r.java, line(s) 17,20
l/a/a.java, line(s) 40,44,156,38,46,57,62,68,77,84,90,104,109,112,119,121,134,139,142,148,181,166,174
l/a/b.java, line(s) 65,24,31,38,43,46,49,55,62,73,79,83
l/b/a.java, line(s) 29,32,24
l/b/c.java, line(s) 241,244,247,258,261,264,527,537,423,445,457,473,515,491
l/b/d/a.java, line(s) 13,18,24,29,35,40
l/b/d/c.java, line(s) 172,344,158,168,180,190,192,195,199,206,215,226,236,238,258,351,363,377,88,176,244,262,284,292,305,371,383,391
l/e/a.java, line(s) 26,56,83,110,114,120,133,24,52,64,79,81,124,147
m/a/c/d/b/a.java, line(s) 66,239,179,237,71,176,253
m/a/c/d/b/b.java, line(s) 18,23
m/a/c/d/b/c.java, line(s) 24
m/a/c/d/b/d.java, line(s) 119,123,130,134,139,143,155,159,163,167,181,185,189,195,203,209,213,219,223,233,240,244,247,292,296,62,80,103,149,226,267,258,261,264
m/a/c/d/c/a.java, line(s) 125,130,135,140,152,170,188,193,143,148,153,156
m/a/c/d/d/a.java, line(s) 61,117,119,122
m/a/c/d/e/c.java, line(s) 47,21,45
m/a/c/d/e/d.java, line(s) 106,193,32,42,61,72,75,84,91,95,100,118,122,183,188
m/a/c/d/e/e.java, line(s) 69,192,226,308,440,452,290,306,426,456,574,97,109,119,139,143,151,158,170,175,186,198,210,215,220,232,237,346,462,564,569
m/a/c/d/e/f.java, line(s) 57,64,201,340,343,386,45,80,89,94,103,110,115,120,136,140,164,204,213,216,224,255,271,299,319,373,379,389
m/a/c/d/e/g.java, line(s) 29,35,41,51,63,69,75,100,106,116,120,124,136,45,83,94,130
m/a/c/d/f/a.java, line(s) 33,37,45,54,76,78,20,27,29,39,42,47,50,52,62,72,74,85,90,96,102,108,113,131,149,136
m/a/c/d/f/b.java, line(s) 47,21,26,32,40,46,55,64
meco/core/component/DirMecoComponent.java, line(s) 49,78,89,125,40,45,51,76,118
meco/core/component/FlatMecoComponent.java, line(s) 133,134,48,124,128,139
meco/core/component/MecoComponent.java, line(s) 233,274,297,372,398,406,419,55,67,81,122,127,225,230,268,321,368,425,59,90,153,174,187,198,204,213,431,437,442,448
meco/core/component/MecoComponentConfig.java, line(s) 113,133,79,83,101,176,179
meco/core/dex/MecoBroadcastManager.java, line(s) 15,26
meco/core/dex/a.java, line(s) 188,450,128,191,524,539,565,575,585,595,606,629,116,138,151,272,360,427,430,441,444,542,550,553,559,569,579,589,627,375,422,487,499,547,623
meco/core/dex/b.java, line(s) 18,23
meco/core/fs/d.java, line(s) 43,168,139,158,164
meco/core/pkg/MecoPackage.java, line(s) 68,122,48,56,104,108,112,128,63
meco/core/pkg/b.java, line(s) 26,16,40,45,51
meco/core/utils/MecoCoreUtil.java, line(s) 35,38,41,44,24
meco/core/utils/a.java, line(s) 13,24,27,36,40,43,46
meco/core/utils/c.java, line(s) 50,28,44,38,46
meco/core/utils/e.java, line(s) 23,26,29,32,35,44,47
meco/core/utils/f.java, line(s) 26
meco/core/utils/g.java, line(s) 65,72,63,36
meco/core/utils/h.java, line(s) 15
meco/delegate/MecoReflectDelegate.java, line(s) 66,24,27,35,38,45,52,55,63,79,93,102,109,114,119,129,137
meco/logger/AndroidLogImpl.java, line(s) 11,51,89,127,19,59,96,137,27,67,103,147,35,75,110,157,43,83,117,167
meco/logger/MChromiumLog.java, line(s) 8,75,129,174,17,66,84,120,138,183,35,93,147,192,48,102,156,201,57,111,165,210
meco/logger/MecoShell.java, line(s) 28,41,54,72,85,98
meco/statistic/idkey/DummyReporter.java, line(s) 15,20
meco/statistic/idkey/IDKeyReport.java, line(s) 18,23,28,33
meco/statistic/idkey/impl/ChromiumVersionCoverageReport.java, line(s) 14
meco/statistic/kv/info/KVInfo.java, line(s) 105,124
meco/statistic/kv/info/MecoCoverInfo.java, line(s) 31
meco/util/HiddenApiBypassUtil.java, line(s) 19,32,49,54
meco/util/MecoRenderLongTaskManager.java, line(s) 60
meco/util/PathHelper.java, line(s) 30
meco/util/PreloadHelper.java, line(s) 27
meco/util/ResourceUtil.java, line(s) 26,20,22,24,34
meco/util/SoftInputHelper.java, line(s) 70,73,93,111,117,122,125,136,140,145,147
meco/util/SystemUAUtils.java, line(s) 36,54,19,21,27,40,48,61
meco/util/ViewRootImplHelper.java, line(s) 31,34,37,25,21,46,53
meco/webkit/JsDialogHelper.java, line(s) 113
meco/webkit/LegacyErrorStrings.java, line(s) 52
meco/webkit/WebView.java, line(s) 371,161,167,744,893,896,157,173,196,199,202,215,218,221,242,250,272,274,276,311,314,317,1268
meco/webkit/WebViewDelegate.java, line(s) 54,56,58,68,164,166,168,170,36,45,79,88,97,106,115,124,133,142,155,178,186,190,194,200,203,216,225,232,234,247,249,251
meco/webkit/WebViewFactory.java, line(s) 36,122,137,148,33,101,145
mecox/provider/impl/a/a.java, line(s) 1147,1354,1342,1351
mecox/provider/impl/a/b.java, line(s) 1156,1159,1162,1192,1195,1198,1208,1211,1214,1472,360,369,378,387,396,405,583,592,656,715,734,743,757,816,825,913,987,1006,1020,1039,1118,1127,1379,1386,1414,1428,1516,1525,1579,1741,1747,1825,1880,1957,1986
mecox/webkit/WebView.java, line(s) 114
org/greenrobot/eventbus/f.java, line(s) 28,34
org/jcodec/api/transcode/Transcoder.java, line(s) 287
org/jcodec/api/transcode/filters/DumpMvFilter.java, line(s) 21,35,38,45,49,76,77,78,79
org/jcodec/audio/Audio.java, line(s) 73,75
org/jcodec/codecs/mpeg12/FixHLSTimestamps.java, line(s) 14
org/jcodec/codecs/mpeg12/HLSFixPMT.java, line(s) 26,27,68
org/jcodec/codecs/mpeg12/HLSRelocatePMT.java, line(s) 39
org/jcodec/codecs/mpeg12/MTSMediaInfo.java, line(s) 83
org/jcodec/codecs/mpeg12/TimestampUtil.java, line(s) 90,92
org/jcodec/codecs/png/PNGDecoder.java, line(s) 339
org/jcodec/codecs/prores/ProresDecoder.java, line(s) 370
org/jcodec/codecs/prores/ProresToThumb.java, line(s) 94
org/jcodec/codecs/vpx/VPXMacroblock.java, line(s) 467,730
org/jcodec/codecs/vpx/vp9/InterModeInfo.java, line(s) 856
org/jcodec/codecs/vpx/vp9/ModeInfo.java, line(s) 129
org/jcodec/codecs/vpx/vp9/Residual.java, line(s) 180
org/jcodec/common/ArrayUtil.java, line(s) 255,279
org/jcodec/common/tools/Debug.java, line(s) 11,19,22,30,33,40,42,48,54,62,65,75
org/jcodec/common/tools/WavMerge.java, line(s) 14
org/jcodec/common/tools/WavSplit.java, line(s) 55
org/jcodec/containers/flv/FLVReader.java, line(s) 270
org/jcodec/containers/flv/FLVTool.java, line(s) 453,497,74,77,83,140,218,221,227,228,231,232,239,241,242,244
org/jcodec/containers/flv/FLVTrackDemuxer.java, line(s) 175,189
org/jcodec/containers/mkv/CuesFactory.java, line(s) 80,107,79
org/jcodec/containers/mkv/MKVParser.java, line(s) 124
org/jcodec/containers/mkv/MKVType.java, line(s) 381
org/jcodec/containers/mkv/SeekHeadFactory.java, line(s) 91,98,60
org/jcodec/containers/mkv/boxes/EbmlMaster.java, line(s) 31
org/jcodec/containers/mkv/boxes/MkvBlock.java, line(s) 251
org/jcodec/containers/mkv/boxes/MkvSegment.java, line(s) 26
org/jcodec/containers/mps/MPSDemuxer.java, line(s) 199
org/jcodec/containers/mps/MPSDump.java, line(s) 88,92,100,102,135,144,158,190,217,221,239,243,247,251,255,263,267
org/jcodec/containers/mps/MTSDump.java, line(s) 68,93,107,142,144,146,150,152,155,158
org/jcodec/containers/mps/MTSPktDump.java, line(s) 51,53,66,90,92,97,99
org/jcodec/containers/mps/MTSReplacePid.java, line(s) 55,67,96
org/jcodec/containers/mps/index/MPSIndexer.java, line(s) 38
org/jcodec/containers/mps/index/MTSIndexer.java, line(s) 25
org/jcodec/containers/mps/index/MTSRandomAccessDemuxerMain.java, line(s) 36
org/jcodec/containers/mxf/model/WaveAudioDescriptor.java, line(s) 129
org/jcodec/movtool/ChangeTimescale.java, line(s) 41,46
org/jcodec/movtool/Cut.java, line(s) 40
org/jcodec/movtool/Flatten.java, line(s) 59
org/jcodec/movtool/MetadataEditorMain.java, line(s) 152,129,131,141,143,188
org/jcodec/movtool/MovDump.java, line(s) 59,60,85,90,101
org/jcodec/movtool/Paste.java, line(s) 59
org/jcodec/movtool/QTEdit.java, line(s) 56,64,68,73,80,81,82,84
org/jcodec/movtool/QTRefEdit.java, line(s) 31,39,43,48,53,57,62,66,67,68,70
org/jcodec/movtool/SetPAR.java, line(s) 50
org/jcodec/movtool/Strip.java, line(s) 43
org/jcodec/movtool/Undo.java, line(s) 61,62,77,68
org/jcodec/movtool/WebOptimize.java, line(s) 32
org/jcodec/testing/TestTool.java, line(s) 41,105,138,139
org/jcodec/testing/VerifyTool.java, line(s) 36,40,43,51
pcrash/c.java, line(s) 8,23,13,18
top/kikt/imagescanner/core/PhotoManager.java, line(s) 315
top/kikt/imagescanner/core/utils/Android30DbUtils.java, line(s) 466,471,505,509,514,528
top/kikt/imagescanner/core/utils/AndroidQDBUtils.java, line(s) 435,440,474,478,483,497
top/kikt/imagescanner/core/utils/DBUtils.java, line(s) 529,534,548
top/kikt/imagescanner/util/d.java, line(s) 13,19,25,31
xmg/mobilebase/kenit/entry/DefaultApplicationLike.java, line(s) 20,25,30,35,40,45
xmg/mobilebase/kenit/lib/service/AbstractResultService.java, line(s) 27,39,44
xmg/mobilebase/kenit/lib/service/DefaultKenitResultService.java, line(s) 16,19,26,44
xmg/mobilebase/kenit/lib/service/KenitPatchService.java, line(s) 37,63,68,143,114,118,121,131,136,57
xmg/mobilebase/kenit/lib/util/a.java, line(s) 12,16,20,24
xmg/mobilebase/kenit/lib/util/b.java, line(s) 67,70
xmg/mobilebase/kenit/lib/util/c.java, line(s) 53,132,203,181,128,146,150,154,161,168,172,176,190,199,208,214,224
xmg/mobilebase/kenit/loader/AppInfoChangedBlocker.java, line(s) 81,33,72,76,78,37,66
xmg/mobilebase/kenit/loader/KenitArkHotLoader.java, line(s) 99,105,89,84
xmg/mobilebase/kenit/loader/KenitDexLoader.java, line(s) 245,275,292,305,97,119,126,175,190,209,229,235,240,252,267,170,219
xmg/mobilebase/kenit/loader/KenitDexOptimizer.java, line(s) 465,543,90,112,125,179,319,386,389,462,472,496,516,596,611,614,618,673,684,696,702,707,718,266,277,337,383,458,663,670,687,711
xmg/mobilebase/kenit/loader/KenitLoader.java, line(s) 131,319,356,55,60,66,72,78,101,108,149,155,162,169,176,205,214,221,225,227,244,249,269,282,293,297,304,312,349
xmg/mobilebase/kenit/loader/KenitMemClassLoader.java, line(s) 90,196,228
xmg/mobilebase/kenit/loader/KenitResourceLoader.java, line(s) 50,70,81,85,74,78
xmg/mobilebase/kenit/loader/KenitResourcePatcher.java, line(s) 47,62,43,144,56
xmg/mobilebase/kenit/loader/KenitUncaughtHandler.java, line(s) 31,33,38,50
xmg/mobilebase/kenit/loader/NewClassLoaderInjector.java, line(s) 27,67,77,99,70
xmg/mobilebase/kenit/loader/SystemClassLoaderAdder.java, line(s) 85,89,120,124,126,129,43,241,247,268,74,109,175
xmg/mobilebase/kenit/loader/hotplug/ComponentHotplug.java, line(s) 103,45,81
xmg/mobilebase/kenit/loader/hotplug/IncrementComponentManager.java, line(s) 439,56
xmg/mobilebase/kenit/loader/hotplug/handler/MHMessageHandler.java, line(s) 73,107,115,87,92,98
xmg/mobilebase/kenit/loader/hotplug/handler/PMSInterceptHandler.java, line(s) 54,57,103,106,29,78,38,70,87
xmg/mobilebase/kenit/loader/hotplug/interceptor/Interceptor.java, line(s) 29
xmg/mobilebase/kenit/loader/hotplug/interceptor/KenitHackInstrumentation.java, line(s) 82,77,109
xmg/mobilebase/kenit/loader/hotplug/interceptor/ServiceBinderInterceptor.java, line(s) 89
xmg/mobilebase/kenit/loader/shareutil/ShareFileLockHelper.java, line(s) 30,35
xmg/mobilebase/kenit/loader/shareutil/ShareIntentUtil.java, line(s) 48,60,124,136,148,160
xmg/mobilebase/kenit/loader/shareutil/ShareKenitBackGroundManager.java, line(s) 72,86
xmg/mobilebase/kenit/loader/shareutil/ShareKenitInternals.java, line(s) 249,585,588,591,96,118,141,159,317,380,401,645,448,522,524,526,528,530,532,710,747,443,454,752
xmg/mobilebase/kenit/loader/shareutil/ShareKenitLog.java, line(s) 39,47,66,143,55,74,82
xmg/mobilebase/kenit/loader/shareutil/ShareLoadReport.java, line(s) 137,151,198,233,243,254,289,296,299,305,315,345,353,374,384
xmg/mobilebase/kenit/loader/shareutil/SharePatchFileUtil.java, line(s) 43,66,162,460,528,539,550,598,30,32,41,59,88,109,119,457,206
xmg/mobilebase/kenit/loader/shareutil/SharePatchInfo.java, line(s) 219,298,307,96,106,113,139,170,185,194,259
xmg/mobilebase/kenit/loader/shareutil/ShareReflectUtil.java, line(s) 20
xmg/mobilebase/kenit/loader/shareutil/ShareSecurityCheck.java, line(s) 34,106,116,129

信息 应用程序可以写入应用程序目录。敏感信息应加密 

应用程序可以写入应用程序目录。敏感信息应加密


Files:
com/xunmeng/tms/p/i/misc/LegoMiscImpl.java, line(s) 437,437

安全 此应用程序可能具有Root检测功能 

此应用程序可能具有Root检测功能
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
com/xunmeng/pinduoduo/apm/common/utils/c.java, line(s) 71,55,59,59,59,59,59,59
com/xunmeng/pinduoduo/basekit/commonutil/AppUtils.java, line(s) 20,20,20,20,20
pcrash/k.java, line(s) 16,16,16,16,16

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
com/xunmeng/mbasic/network/n/a.java, line(s) 39,37
com/xunmeng/pinduoduo/pdddiinterface/network/c/d/b.java, line(s) 39,34

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (aomedia.org) 通信。 

{'ip': '115.223.49.23', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (driver.pinduoduo.com) 通信。 

{'ip': '81.69.68.235', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (commimg.pddpic.com) 通信。 

{'ip': '115.223.49.23', 'country_short': 'CN', 'country_long': '中国', 'region': 'i\x07Siguiri\x0fSiguldas novads\x05Siirt\x07Sikasso\x06Sikkim\x04Sila\x07Siliana\x08Silistra\x06Simiyu\x08Sinajana\x07Sinaloa\x05Sindh\tSing Buri\tSingapore\x08', 'city': '宿迁', 'latitude': '33.933334', 'longitude': '118.283333'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (cfg.pddpic.com) 通信。 

{'ip': '180.101.153.117', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (funimg.pddpic.com) 通信。 

{'ip': '81.69.68.235', 'country_short': 'CN', 'country_long': '中国', 'region': '湖南', 'city': '衡阳', 'latitude': '26.888060', 'longitude': '112.614998'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (resolver.msg.xiaomi.net) 通信。 

{'ip': '180.101.153.117', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (pmmtk-a.pinduoduo.com) 通信。 

{'ip': '115.223.49.23', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (mstatic.pinduoduo.com) 通信。 

{'ip': '180.101.153.117', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (tc.pinduoduo.com) 通信。 

{'ip': '180.101.153.117', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (apm.hutaojie.com) 通信。 

{'ip': '180.101.153.117', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (file.hutaojie.com) 通信。 

{'ip': '42.192.253.100', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (apm.pinduoduo.com) 通信。 

{'ip': '180.101.153.117', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (cdl.pddpic.com) 通信。 

{'ip': '81.69.68.235', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '温州', 'latitude': '27.999420', 'longitude': '120.666817'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (ddmc.pinduoduo.com) 通信。 

{'ip': '180.101.153.117', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (dl-test.pddpic.com) 通信。 

{'ip': '180.101.153.117', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '常州', 'latitude': '31.783331', 'longitude': '119.966667'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (api.pinduoduo.com) 通信。 

{'ip': '81.69.104.49', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (dashif.org) 通信。 

{'ip': '61.160.148.90', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (ccdn.yangkeduo.com) 通信。 

{'ip': '58.222.37.105', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (ccdn.pddpic.com) 通信。 

{'ip': '58.222.37.105', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (meta.pinduoduo.com) 通信。 

{'ip': '118.26.252.220', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (cn.register.xmpush.xiaomi.com) 通信。 

{'ip': '118.26.252.220', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (file.pinduoduo.com) 通信。 

{'ip': '81.69.152.219', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (apiv2.hutaojie.com) 通信。 

{'ip': '42.192.253.100', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

安全评分: ( 多多买菜司机 7.2.0)