安全分析报告： Perfume Of Love v2.14.9

安全分数


安全分数 39/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

24

用户/设备跟踪器


调研结果

高危 12
中危 31
信息 2
安全 2
关注 10

高危 基本配置不安全地配置为允许到所有域的明文流量。 

Scope:
*

高危 基本配置配置为信任用户安装的证书。 

Scope:
*

高危 域配置不安全地配置为允许明文流量到达范围内的这些域。 

Scope:
127.0.0.1

高危 应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文 

应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-block-cipher-mode

Files:
com/inmobi/media/ih.java, line(s) 41,54

高危 WebView域控制不严格漏洞 

WebView域控制不严格漏洞


Files:
com/adcolony/sdk/b1.java, line(s) 665,653
com/chartboost/sdk/impl/s1.java, line(s) 47,44
com/ironsource/sdk/utils/d.java, line(s) 32,27
com/mbridge/msdk/foundation/webview/BrowserView.java, line(s) 158,154
com/mbridge/msdk/mbsignalcommon/base/BaseWebView.java, line(s) 97,93
com/onevcat/uniwebview/UniWebView.java, line(s) 213,208,209,210,211,212,213,214,215,216,217,218,219,220,221,336,458,462,507
com/unity3d/services/core/webview/WebView.java, line(s) 23,18
com/vungle/warren/ui/view/WebSettingsUtils.java, line(s) 13,7

高危 已启用远程WebView调试 

已启用远程WebView调试
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
com/fyber/inneractive/sdk/web/d.java, line(s) 319,10
com/ironsource/mediationsdk/testSuite/e/b.java, line(s) 110,8,9
com/onesignal/WebViewManager.java, line(s) 451,10
com/tapjoy/TapjoyLog.java, line(s) 63,7

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击 

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
bolts/WebViewAppLinkResolver.java, line(s) 124,6,7
com/applovin/impl/adview/b.java, line(s) 519,14
com/applovin/impl/sdk/e/q.java, line(s) 110,4
com/bytedance/sdk/component/widget/SSWebView.java, line(s) 343,19,20
com/chartboost/sdk/impl/c2.java, line(s) 34,5,6
com/chartboost/sdk/impl/s1.java, line(s) 33,6
com/fyber/inneractive/sdk/activities/InneractiveInternalBrowserActivity.java, line(s) 139,14
com/fyber/inneractive/sdk/config/r.java, line(s) 29,4
com/hyprmx/android/sdk/webview/f.java, line(s) 143,13,14
com/mbridge/msdk/click/h.java, line(s) 116,13,14
com/mbridge/msdk/mbbanner/common/bridge/BannerExpandDialog.java, line(s) 164,14
com/mbridge/msdk/mbbanner/common/c/c.java, line(s) 277,13
com/mbridge/msdk/video/bt/module/MBridgeBTWebView.java, line(s) 286,13
com/mbridge/msdk/video/module/MBridgeAlertWebview.java, line(s) 93,6
com/mbridge/msdk/video/module/MBridgeH5EndCardView.java, line(s) 392,17
com/tapjoy/TJAdUnit.java, line(s) 369,422,993,27,28
com/unity3d/services/core/webview/WebViewApp.java, line(s) 269,9,348,377,383,389

高危 启用了调试配置。生产版本不能是可调试的 

启用了调试配置。生产版本不能是可调试的
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
com/unity/purchasing/BuildConfig.java, line(s) 2,4

高危 不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击 

不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#webview-server-certificate-verification

Files:
com/onevcat/uniwebview/UniWebViewClient.java, line(s) 250,215

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/bytedance/sdk/component/c/a.java, line(s) 31,47
com/fyber/inneractive/sdk/player/exoplayer2/extractor/hls/a.java, line(s) 28
com/ironsource/mediationsdk/utils/IronSourceAES.java, line(s) 69,136

高危 该文件是World Writable。任何应用程序都可以写入文件 

该文件是World Writable。任何应用程序都可以写入文件
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
com/ironsource/mediationsdk/utils/IronSourceUtils.java, line(s) 483

高危 应用程序包含隐私跟踪程序 

此应用程序有多个24隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危 应用程序存在Janus漏洞 

应用程序使用了v1签名方案进行签名，如果只使用v1签名方案，那么它就容易受到安卓5.0-8.0上的Janus漏洞的攻击。在安卓5.0-7.0上运行的使用了v1签名方案的应用程序，以及同时使用了v2/v3签名方案的应用程序也同样存在漏洞。

中危 基本配置配置为信任系统证书。 

Scope:
*

中危 应用程序可以安装在有漏洞的已更新 Android 版本上 

Android 5.1-5.1.1, [minSdk=22]
该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。

中危 应用程序数据可以被备份 

[android:allowBackup=true]
这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。

中危 Content Provider (com.facebook.FacebookContentProvider) 未被保护。 

[android:exported=true]
发现 Content Provider与设备上的其他应用程序共享，因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.facebook.unity.FBUnityAppLinkActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.facebook.unity.FBUnityDeepLinkingActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此使其对设备上的任何其他应用程序都可访问。

中危 Broadcast Receiver (com.onesignal.FCMBroadcastReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity (com.onesignal.NotificationOpenedActivityHMS) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此使其对设备上的任何其他应用程序都可访问。

中危 Broadcast Receiver (com.onesignal.NotificationDismissReceiver) 未被保护。 

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此使其对设备上的任何其他应用程序都可访问。

中危 Broadcast Receiver (com.onesignal.BootUpReceiver) 未被保护。 

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此使其对设备上的任何其他应用程序都可访问。

中危 Broadcast Receiver (com.onesignal.UpgradeReceiver) 未被保护。 

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.onesignal.NotificationOpenedReceiver) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.onesignal.NotificationOpenedReceiverAndroid22AndOlder) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.facebook.CustomTabActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此使其对设备上的任何其他应用程序都可访问。

中危 Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (io.huq.hsa.job.HIDeviceInformationSubmissionJob) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (androidx.work.impl.background.systemjob.SystemJobService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 高优先级的Intent (999) 

[android:priority]
通过设置一个比另一个Intent更高的优先级，应用程序有效地覆盖了其他请求。

中危 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/apm/insight/i.java, line(s) 9
com/applovin/exoplayer2/h/z.java, line(s) 4
com/applovin/impl/b/m.java, line(s) 16
com/appsflyer/internal/AFa1vSDK.java, line(s) 16
com/bytedance/sdk/component/e/a/f/c.java, line(s) 10
com/bytedance/sdk/component/f/c/e.java, line(s) 17
com/bytedance/sdk/component/utils/a.java, line(s) 6
com/bytedance/sdk/openadsdk/c/i.java, line(s) 19
com/fyber/inneractive/sdk/config/global/s.java, line(s) 12
com/fyber/inneractive/sdk/player/exoplayer2/upstream/cache/i.java, line(s) 22
com/hyprmx/android/sdk/vast/a.java, line(s) 6
com/inmobi/media/ay.java, line(s) 9
com/inmobi/media/bm.java, line(s) 5
com/ironsource/mediationsdk/utils/e.java, line(s) 6
com/lite/apks/up.java, line(s) 34
com/mbridge/msdk/dycreator/baseview/rewardpopview/MBAcquireRewardPopView.java, line(s) 25
com/mbridge/msdk/playercommon/exoplayer2/source/ShuffleOrder.java, line(s) 4
com/mbridge/msdk/playercommon/exoplayer2/trackselection/RandomTrackSelection.java, line(s) 6
com/mbridge/msdk/playercommon/exoplayer2/upstream/cache/CachedContentIndex.java, line(s) 21
com/mbridge/msdk/thrid/okhttp/OkHttpClient.java, line(s) 30
com/mbridge/msdk/thrid/okhttp/internal/ws/RealWebSocket.java, line(s) 29
com/mbridge/msdk/thrid/okhttp/internal/ws/WebSocketWriter.java, line(s) 11
com/onesignal/OSUtils.java, line(s) 33
com/smaato/sdk/core/ub/errorreporter/Report.java, line(s) 11
com/unity/androidnotifications/UnityNotificationManager.java, line(s) 33
com/unity3d/services/core/request/metrics/SDKMetrics.java, line(s) 9
com/yahoo/sketches/quantiles/ItemsSketch.java, line(s) 11

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
com/adcolony/sdk/n.java, line(s) 5,136
com/adcolony/sdk/o.java, line(s) 6,266
com/adcolony/sdk/p.java, line(s) 6,37
com/apm/insight/e/b/a.java, line(s) 4,36
com/apm/insight/e/b/b.java, line(s) 5,41
com/bykv/vk/openvk/component/video/a/b/b/d.java, line(s) 4,5,13
com/bytedance/sdk/component/e/a/a/a/b.java, line(s) 8,56
com/bytedance/sdk/component/e/a/a/a/d.java, line(s) 5,6,63
com/bytedance/sdk/openadsdk/core/f.java, line(s) 8,9,259
com/gameanalytics/sdk/store/GAStore.java, line(s) 5,6,62
com/inmobi/media/hj.java, line(s) 6,127
com/ironsource/adqualitysdk/sdk/i/id.java, line(s) 6,7,178
com/ironsource/b/a.java, line(s) 6,7,144
com/ironsource/environment/f.java, line(s) 6,7,24
com/mbridge/msdk/foundation/db/BatchReportDao.java, line(s) 6,69
com/mbridge/msdk/foundation/db/b.java, line(s) 6,93
com/mbridge/msdk/foundation/db/e.java, line(s) 6,292
com/mbridge/msdk/foundation/db/g.java, line(s) 4,48
com/mbridge/msdk/foundation/db/n.java, line(s) 5,34
com/mbridge/msdk/foundation/db/p.java, line(s) 5,301
com/mbridge/msdk/foundation/download/database/DatabaseHelper.java, line(s) 6,43
com/onesignal/OneSignalDbHelper.java, line(s) 7,8,9,10,11,505
com/onesignal/outcomes/data/OSOutcomeTableProvider.java, line(s) 3,4,15
com/smaato/sdk/core/kpi/KpiDBHelper.java, line(s) 6,7,100
com/tapjoy/internal/f.java, line(s) 5,51
com/tapjoy/internal/gk.java, line(s) 6,55
com/vungle/warren/persistence/DatabaseHelper.java, line(s) 9,10,78
com/vungle/warren/persistence/Repository.java, line(s) 7,964

中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
bolts/MeasurementEvent.java, line(s) 18,19
com/applovin/impl/mediation/b/a/a.java, line(s) 36
com/applovin/impl/sdk/n.java, line(s) 810
com/applovin/mediation/ads/MaxAdView.java, line(s) 184,172
com/applovin/mediation/ads/MaxAppOpenAd.java, line(s) 66,54
com/applovin/mediation/ads/MaxInterstitialAd.java, line(s) 90,78
com/applovin/mediation/ads/MaxRewardedAd.java, line(s) 117,105
com/applovin/mediation/ads/MaxRewardedInterstitialAd.java, line(s) 85,73
com/applovin/mediation/nativeAds/MaxNativeAdLoader.java, line(s) 97,91
com/applovin/sdk/AppLovinSdk.java, line(s) 237
com/applovin/sdk/AppLovinSdkSettings.java, line(s) 90
com/applovin/sdk/AppLovinWebViewActivity.java, line(s) 18
com/bykv/vk/openvk/component/video/a/b/i.java, line(s) 207
com/bytedance/sdk/openadsdk/activity/TTDelegateActivity.java, line(s) 129
com/gameanalytics/sdk/Consts.java, line(s) 3,4
com/gameanalytics/sdk/http/GAHTTPApi.java, line(s) 123
com/gameanalytics/sdk/state/GAState.java, line(s) 180,190
com/inmobi/commons/core/configs/AdConfig.java, line(s) 94
com/inmobi/media/be.java, line(s) 15
com/ironsource/adapters/adcolony/AdColonyAdapter.java, line(s) 380
com/ironsource/adapters/admob/AdMobAdapter.java, line(s) 244,249,239,189,64,65,66
com/ironsource/adapters/applovin/AppLovinAdapter.java, line(s) 563,46,47
com/ironsource/adapters/chartboost/ChartboostAdapter.java, line(s) 481
com/ironsource/adapters/facebook/FacebookAdapter.java, line(s) 661,671
com/ironsource/adapters/fyber/FyberAdapter.java, line(s) 618,46
com/ironsource/adapters/hyprmx/HyprMXAdapter.java, line(s) 126,42
com/ironsource/adapters/inmobi/InMobiAdapter.java, line(s) 129,45
com/ironsource/adapters/ironsource/IronSourceAdapter.java, line(s) 79,47,46,770,277
com/ironsource/adapters/mintegral/MintegralAdapter.java, line(s) 718,57,58,60,63,64
com/ironsource/adapters/pangle/PangleAdapter.java, line(s) 712,57,58,61,63,62,65,66
com/ironsource/adapters/smaato/SmaatoAdapter.java, line(s) 90,61
com/ironsource/adapters/supersonicads/SupersonicAdsAdapter.java, line(s) 67,385,203
com/ironsource/adapters/tapjoy/TapjoyAdapter.java, line(s) 198,252,348,457,79
com/ironsource/adapters/unityads/UnityAdsAdapter.java, line(s) 599,612,107
com/ironsource/adapters/vungle/VungleAdapter.java, line(s) 598
com/ironsource/mediationsdk/C1326c.java, line(s) 223,338
com/ironsource/mediationsdk/C1338o.java, line(s) 36
com/ironsource/mediationsdk/C1344u.java, line(s) 42
com/ironsource/mediationsdk/server/ServerURL.java, line(s) 24,49
com/ironsource/mediationsdk/utils/IronSourceConstants.java, line(s) 90,101
com/ironsource/mediationsdk/y.java, line(s) 1732,1717
com/mbridge/msdk/MBridgeConstans.java, line(s) 13,53
com/mbridge/msdk/click/b/a.java, line(s) 34
com/mbridge/msdk/foundation/db/l.java, line(s) 33,81,67
com/mbridge/msdk/foundation/download/core/DownloadCommon.java, line(s) 20
com/mbridge/msdk/foundation/download/core/DownloaderReporter.java, line(s) 13
com/mbridge/msdk/foundation/entity/CampaignEx.java, line(s) 38
com/mbridge/msdk/foundation/entity/m.java, line(s) 404,419,489,508,527,560,590,617,628,649,659,677,688,708,720,759,775,446,461,792
com/mbridge/msdk/playercommon/exoplayer2/drm/DefaultDrmSessionManager.java, line(s) 29
com/mbridge/msdk/video/dynview/moffer/MOfferModel.java, line(s) 116
com/onesignal/FCMBroadcastReceiver.java, line(s) 16
com/onesignal/NotificationBundleProcessor.java, line(s) 19,18
com/onesignal/OSEmailSubscriptionState.java, line(s) 5
com/onesignal/OSInAppMessageController.java, line(s) 26
com/onesignal/OSInAppMessageLocationPrompt.java, line(s) 5
com/onesignal/OSInAppMessagePrompt.java, line(s) 20
com/onesignal/OSInAppMessagePushPrompt.java, line(s) 5
com/onesignal/OSInAppMessageRepository.java, line(s) 20
com/onesignal/OSNotification.java, line(s) 450
com/onesignal/OSNotificationController.java, line(s) 8,9
com/onesignal/OSPermissionState.java, line(s) 5,6
com/onesignal/OSSMSSubscriptionState.java, line(s) 5
com/onesignal/OSSubscriptionState.java, line(s) 7
com/onesignal/OneSignalHmsEventBridge.java, line(s) 11,12
com/onesignal/OneSignalNotificationManager.java, line(s) 17
com/onesignal/OneSignalRemoteParams.java, line(s) 14
com/onesignal/UserState.java, line(s) 409
com/onesignal/UserStateSynchronizer.java, line(s) 23,22,33,34
com/onesignal/WebViewManager.java, line(s) 153,154,155,148
com/smaato/sdk/core/mvvm/model/imagead/Extension.java, line(s) 10,13,14,11,12
com/smaato/sdk/core/mvvm/model/imagead/ImageAdResponseParser.java, line(s) 53,55,54,56,61,57,60,62,58,59
com/smaato/sdk/core/violationreporter/AutoValue_Report.java, line(s) 152
com/tapjoy/TapjoyConstants.java, line(s) 56,59
com/unity/androidnotifications/UnityNotificationManager.java, line(s) 49,51
com/unity/androidnotifications/UnityNotificationUtilities.java, line(s) 27,26
com/unity3d/ads/metadata/InAppPurchaseMetaData.java, line(s) 13
com/unity3d/services/ads/gmascar/utils/ScarConstants.java, line(s) 3,4,5,7,8
com/unity3d/services/core/configuration/ExperimentObject.java, line(s) 6,7
com/unity3d/services/core/device/reader/DeviceInfoReaderFilterProvider.java, line(s) 9,10
com/unity3d/services/core/device/reader/JsonStorageKeyNames.java, line(s) 3,5,6,8,9,10,7,11,4,12,13,14
com/unity3d/services/core/properties/SdkProperties.java, line(s) 25
com/vungle/warren/log/LogManager.java, line(s) 24,25,26,27
com/vungle/warren/log/LogSender.java, line(s) 21,22
com/vungle/warren/model/Cookie.java, line(s) 20,21
io/huq/handset_assistant/BuildConfig.java, line(s) 33

中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/apm/insight/entity/d.java, line(s) 17
com/apm/insight/l/w.java, line(s) 37,87,98
com/apm/insight/nativecrash/c.java, line(s) 715
com/bytedance/sdk/openadsdk/n/aa.java, line(s) 591,603
com/dikra/diskutils/DiskUtils.java, line(s) 55
com/fyber/inneractive/sdk/network/i0.java, line(s) 55
com/fyber/inneractive/sdk/util/n.java, line(s) 214
com/fyber/inneractive/sdk/web/h.java, line(s) 797
com/hyprmx/android/sdk/overlay/p.java, line(s) 59
com/hyprmx/android/sdk/utility/t0.java, line(s) 45
com/inmobi/media/ir.java, line(s) 243,252,310,319
com/ironsource/environment/h.java, line(s) 514,323
com/ironsource/mediationsdk/utils/f.java, line(s) 156,282
com/ironsource/sdk/utils/SDKUtils.java, line(s) 287
com/mbridge/msdk/foundation/same/report/b/a.java, line(s) 83
com/mbridge/msdk/foundation/tools/aa.java, line(s) 49,57,91,116,139
com/onevcat/uniwebview/UniWebViewFileChooserHandler.java, line(s) 444,568,435
com/onevcat/uniwebview/UniWebViewFileDownloader.java, line(s) 73
com/tapjoy/TapjoyCache.java, line(s) 48,49,50
com/unity3d/services/core/cache/CacheDirectory.java, line(s) 32
com/vungle/warren/VungleApiClient.java, line(s) 748
com/vungle/warren/persistence/CacheManager.java, line(s) 52,54
com/vungle/warren/persistence/Repository.java, line(s) 987,988
com/vungle/warren/utility/platform/AndroidPlatform.java, line(s) 86

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞 

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
bolts/WebViewAppLinkResolver.java, line(s) 114,89
com/bytedance/sdk/component/adexpress/d/e.java, line(s) 157,107
com/fyber/inneractive/sdk/web/s.java, line(s) 359,351
com/inmobi/media/q.java, line(s) 1252,1247
com/ironsource/mediationsdk/testSuite/e/b.java, line(s) 118,115,117
com/onesignal/WebViewManager.java, line(s) 388,387
com/unity3d/services/ads/webplayer/WebPlayerView.java, line(s) 87,71
com/unity3d/services/core/webview/WebView.java, line(s) 73,46

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
com/hyprmx/android/sdk/overlay/p.java, line(s) 60
com/mbridge/msdk/playercommon/exoplayer2/util/Util.java, line(s) 816
com/onevcat/uniwebview/UniWebViewFileChooserHandler.java, line(s) 446,568
com/tapjoy/internal/ie.java, line(s) 83
ms/bd/o/Pgl/pblg.java, line(s) 26

中危 MD5是已知存在哈希冲突的弱哈希 

MD5是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/apm/insight/l/v.java, line(s) 119
com/appsflyer/internal/AFb1ySDK.java, line(s) 59
com/bytedance/sdk/component/d/c/c/c.java, line(s) 14
com/bytedance/sdk/component/utils/e.java, line(s) 39,77
com/fyber/inneractive/sdk/player/cache/h.java, line(s) 536
com/hyprmx/android/sdk/preload/d.java, line(s) 72,320,483,550,602,707,1246
com/hyprmx/android/sdk/utility/y0.java, line(s) 137
com/ironsource/mediationsdk/utils/IronSourceUtils.java, line(s) 410
com/ironsource/sdk/controller/w.java, line(s) 23
com/ironsource/sdk/utils/SDKUtils.java, line(s) 208
com/mbridge/msdk/foundation/download/resource/MBResourceManager.java, line(s) 72
com/mbridge/msdk/foundation/tools/u.java, line(s) 18
com/smaato/sdk/core/mvvm/model/video/Md5Digester.java, line(s) 24

中危 SHA-1是已知存在哈希冲突的弱哈希 

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/adcolony/sdk/d1.java, line(s) 27
com/adcolony/sdk/z0.java, line(s) 521
com/applovin/impl/sdk/utils/StringUtils.java, line(s) 31
com/applovin/impl/sdk/utils/n.java, line(s) 158
com/appsflyer/internal/AFb1ySDK.java, line(s) 30
com/bytedance/sdk/openadsdk/core/e/a.java, line(s) 142
com/chartboost/sdk/impl/z0.java, line(s) 22,39
com/fyber/inneractive/sdk/player/cache/h.java, line(s) 523
com/ironsource/adqualitysdk/sdk/i/jq.java, line(s) 15
com/ironsource/sdk/utils/SDKUtils.java, line(s) 82
com/tapjoy/internal/cb.java, line(s) 8
com/unity3d/services/core/device/Device.java, line(s) 491

中危 IP地址泄露 

IP地址泄露


Files:
com/applovin/mediation/adapters/NimbusMediationAdapter.java, line(s) 31
com/bytedance/sdk/openadsdk/BuildConfig.java, line(s) 8
com/bytedance/sdk/openadsdk/api/BuildConfig.java, line(s) 7
com/ironsource/adapters/ironsource/IronSourceAdapter.java, line(s) 52,467
com/ironsource/adapters/supersonicads/SupersonicAdsAdapter.java, line(s) 29,147,227
com/ironsource/mediationsdk/config/VersionInfo.java, line(s) 12
com/ironsource/mediationsdk/utils/IronSourceUtils.java, line(s) 60,449
com/ironsource/mediationsdk/y.java, line(s) 182
com/smaato/sdk/core/dns/DiDns.java, line(s) 14
com/smaato/sdk/core/locationaware/DnsLookupImpl.java, line(s) 20

中危 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
AppLovin广告SDK的 "applovin.sdk.key" : "THee_9m95T8nHx1SV1trTfV7_x4c2zEaEuED1_M7TVurRvHxw9mOpFWpBbPDTepnW1_T1LfZsTOHRfDMqzmcDG"
AdMob广告平台的 "com.google.android.gms.ads.APPLICATION_ID" : "ca-app-pub-3137017834535338~8280007203"
"USERNAME" : "用户名"
"AUTH_REQUIRE_TITLE" : "需要授权"
"PASSWORD" : "пароль"
"PASSWORD" : "Lösenord"
"USERNAME" : "用戶名"
"USERNAME" : "ユーザー名"
"PASSWORD" : "パスワード"
"USERNAME" : "Användarnamn"
"PASSWORD" : "Password"
"google_api_key" : "AIzaSyB9x0cYD_df_yk4cy6VSX3fVhbqYNFKUa0"
"google_crash_reporting_api_key" : "AIzaSyB9x0cYD_df_yk4cy6VSX3fVhbqYNFKUa0"
"AUTH_REQUIRE_TITLE" : "認証が必要です"
"PASSWORD" : "암호"
"USERNAME" : "Brugernavn"
"com_facebook_device_auth_instructions" : "<b>facebook.com/device</b>にアクセスして、上記のコードを入力してください。"
"USERNAME" : "Gebruikersnaam"
"PASSWORD" : "Senha"
"com.google.firebase.crashlytics.unity_version" : "2021.3.21f1"
"AUTH_REQUIRE_TITLE" : "需要授權"
"dyStrategy.privateAddress" : "privateAddress"
"PASSWORD" : "密碼"
"PASSWORD" : "Passwort"
"USERNAME" : "Username"
"PASSWORD" : "密码"
"USERNAME" : "Nutzername"
"com_facebook_device_auth_instructions" : "访问<b>facebook.com/device</b>并输入上方显示的验证码。"
"fiverocks_app_key" : ""
"PASSWORD" : "Wachtwoord"
"PASSWORD" : "Adgangskode"
"PASSWORD" : "Contraseña"
9c742544c8f7bf1d0b0002da23e75133bdbca974
8a3c4b262d721acd49a4bf97d5213199c86fa2b9
iVBORw0KGgoAAAANSUhEUgAAABAAAAAaCAYAAAC+aNwHAAAAAXNSR0IArs4c6QAAAPZJREFUOBFjYCAdWAG1PADiCUDMBMQkAReg6i9A/B+KZ5Ki2w+o+AeSZpAhF4g1IBKo8Dea5utAvjQxBqQCFf1F03wOyBclRnMRmkaQs48CsQAxmuuxaN4DFOMmRnMPFs0bgWLshDSD4hUUNbBogtHLgGIshDSDFCzFonkWUIxgggE5bQMWzX1AMYIAFCi7gRjmXBjdSFAnVMFOLJqLidUM8hvIRooALi80kGIqRYEIs4iiaIQZQlFCghkConuBGBadMJqopIxsSD0WQ4jOTDCDcGVnfpgCYmiKChSYBdiKtGtASaKKNJghFBWqMEMoKtZhhqBULADcM3nkekaNxwAAAABJRU5ErkJggg==
h7KsLkfPW+xUhoPwJ7JgY7K0DkeAWrfXYN==
eb321fa50173a95c041b0389a565b006
C38FB23A402222A0C17D34A92F971D1F
XThCVgADKYpdOEJWAAMpijdExKKDLYCp1GNXWw
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
c56fb7d591ba6704df047fd98f535372fea00211
LdxThdi1WBKUL75ULBPBD+QqJk2MWrfXYN==
Y7c14Z2TDbv/Y+xgHFeXDrcshBPUYFT=
7bf3a1e7bbd31e612eda3310c2cdb8075c43c6b5
FFE391E0EA186D0734ED601E4E70E3224B7309D48E2075BAC46D8C667EAE7212
d79bfac645e9a792d4d5f17bb1ce637e
c682b8144a8dd52bc1ad63
fd71964ced204df586b63b9d8fa3198a
E3F9E1E0CF99D0E56A055BA65E241B3399F7CEA524326B0CDD6EC1327ED0FDC1
936dcbdd57fe235fd7cf61c2e93da3c4
3BAF59A2E5331C30675FAB35FF5FFF0D116142D3D4664F1C3CB804068B40614F
92762936dcbdd57fe235fd7cf61c2e93da3c4
iVBORw0KGgoAAAANSUhEUgAAAAgAAAANCAYAAACUwi84AAAAAXNSR0IArs4c6QAAAHlJREFUGBljZsAOBIHCu4FYC5u0GFDwAhD/B+IN6ApkgAI3oJIrgTQrsgJlIOc+VHIukGZCltQGcp5BJScCaUZkSWMg5w1UshlZAsa+A5XcCRNApwmaANKA7IYJQD6KG2Am4vUFTBHecIApQglJrHYBVYLiYhMQnwAAeiYfS1LRd+4AAAAASUVORK5CYII=
026ae9c9824b3e483fa6c71fa88f57ae27816141
DFK/HrQgJ+zQW+xUhoPwJ7JgY7K0DkeAWrfXYN==
DFKwWgtuDkKwLZPwD+z8H+N/xj26Vjcdx5KyVj5GxVN=
LdxThdi1WBKUL75ULBPwJ7JgY7K0DkeAWrfXYN==
0781feb2-bf4b-4ff8-be68-9149e288a420
h7KsLkfPW+xUhoPBD+QqJk2MWrfXYN==
83d508d01db531b4cf4843d2e41348ed
iVBORw0KGgoAAAANSUhEUgAAAA0AAAANCAYAAABy6+R8AAAAAXNSR0IArs4c6QAAAHtJREFUKBWVkksKwCAMREOh99+3y97GU3iTdp6tRcUoBgbJfEgCmpkF4RA2YVTo+PDbKdzCJXhBeHR8BJMxE71gGah0T/B4hqVqDbvY0QZfrF41ip3d+geZkAO89MMqV4xyTieVAW6Z3tQG6CmP94U319dXfwT+pb9HIDwrxDUcBOiFBQAAAABJRU5ErkJggg==
258EAFA5-E914-47DA-95CA-C5AB0DC85B11
DkPtYdQTLkfAW+xUhoPwJ7JgY7K0DkeAWrfXYN==
5eb5a37e-b458-11e3-ac11-000c2940e62c
HSrCHRtOan6wp2kwOIGJC1RDtuSrF2mWVbio2aBcMHX9KF3iTJ1lLSzCKP1ZSo5yNolPNw1kCTtWpxELFF4ah1
b2f7f966-d8cc-11e4-bed1-df8f05be55ba
DFK/HrQgJ+zQW+xUhoPBD+QqJk2MWrfXYN==
DFKwWgtuDkKwLZPwD+z8H+N/xj26Vjcdx5KanjKnxVN=
9b8f518b086098de3d77736f9458a3d2f6f95a37
cc2751449a350f668590264ed76692694a80308a
bb2cf0647ba654d7228dd3f9405bbc6a
a95f9a5fa454417814759bf265bfa2311545f508
2438bce1ddb7bd026d5ff89f598b3b5e5bb824b3
DFKwWgtuDkKwLZPwD+z8H+N/xjQZxVfV+T2SZVe6V2xS5c5n
a4b7452e2ed8f5f191058ca7bbfd26b0d3214bfc
df6b721c8b4d3b6eb44c861d4415007e5a35fc95
0000016742C00BDA259000000168CE0F13200000016588840DCE7118A0002FBF1C31C3275D78
FBA3AF4E7757D9016E953FB3EE4671CA2BD9AF725F9A53D52ED4A38EAAA08901

信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
bitter/jnibridge/JNIBridge.java, line(s) 63
bolts/MeasurementEvent.java, line(s) 60,72
com/a/a/a/a/e/c.java, line(s) 17,10
com/adcolony/sdk/AdColonyAppOptions.java, line(s) 286,292
com/adcolony/sdk/g0.java, line(s) 57,75,79,275,63,175,69
com/adcolony/sdk/s0.java, line(s) 59,122
com/apm/insight/b/j.java, line(s) 47
com/apm/insight/h/a.java, line(s) 45
com/apm/insight/k/k.java, line(s) 68
com/apm/insight/l/q.java, line(s) 43,25,31,37,7,19,13,49
com/applovin/exoplayer2/l/q.java, line(s) 27,67,37,57
com/applovin/impl/adview/activity/b/f.java, line(s) 642
com/applovin/impl/sdk/a/f.java, line(s) 75
com/applovin/impl/sdk/f.java, line(s) 107,109
com/applovin/impl/sdk/nativeAd/AppLovinMediaView.java, line(s) 158
com/applovin/impl/sdk/v.java, line(s) 45,67,97,63,101,71,105,75,93
com/appsflyer/AFLogger.java, line(s) 49,81,144,47,13,70,63
com/appsflyer/internal/AFa1dSDK.java, line(s) 151,178,183,152,166,173,179,186
com/appsflyer/internal/AFa1tSDK.java, line(s) 84
com/appsflyer/internal/AFd1aSDK.java, line(s) 18,21
com/appsflyer/internal/AFd1eSDK.java, line(s) 20
com/appsflyer/internal/AFd1iSDK.java, line(s) 76
com/appsflyer/internal/AFd1kSDK.java, line(s) 73,78
com/appsflyer/internal/AFd1mSDK.java, line(s) 13
com/appsflyer/internal/AFd1pSDK.java, line(s) 94,92,171,90,161
com/appsflyer/internal/AFd1qSDK.java, line(s) 38
com/appsflyer/internal/AFe1lSDK.java, line(s) 67,76
com/appsflyer/internal/AFe1wSDK.java, line(s) 70
com/appsflyer/internal/AFe1zSDK.java, line(s) 101
com/appsflyer/share/LinkGenerator.java, line(s) 165
com/bykv/vk/openvk/component/video/a/b/b.java, line(s) 132,101,110,144,181
com/bykv/vk/openvk/component/video/a/b/d.java, line(s) 71,197,203,52,111,128,175,211,383,411,421,215,233,238,243,314
com/bykv/vk/openvk/component/video/a/b/e.java, line(s) 54,62
com/bykv/vk/openvk/component/video/a/b/f.java, line(s) 89,147,159,267
com/bykv/vk/openvk/component/video/a/b/g.java, line(s) 49,65,72,98,102,124,132,137,150,158,245,278,313,376,59,192,208,321,439,479,148,223,453
com/bykv/vk/openvk/component/video/a/c/a.java, line(s) 260,265,272,279,284,289,311,318,100,135,211,342,358
com/bykv/vk/openvk/component/video/api/f/c.java, line(s) 34,41,80,87,60,67,48,74
com/bytedance/sdk/component/a/i.java, line(s) 32,33,13,19,25,26
com/bytedance/sdk/component/adexpress/a/b/d.java, line(s) 93
com/bytedance/sdk/component/adexpress/d/a.java, line(s) 70,78
com/bytedance/sdk/component/d/b/a.java, line(s) 66,74,85,95
com/bytedance/sdk/component/d/c/a/a/a.java, line(s) 94
com/bytedance/sdk/component/d/c/a/a/b.java, line(s) 21,37,61,73,81,136,151,192
com/bytedance/sdk/component/d/c/b.java, line(s) 28
com/bytedance/sdk/component/d/c/c.java, line(s) 210
com/bytedance/sdk/component/e/a/c/c.java, line(s) 17,81,65,33,97,49,113
com/bytedance/sdk/component/f/b/a.java, line(s) 359,549
com/bytedance/sdk/component/f/d/a.java, line(s) 14,9
com/bytedance/sdk/component/f/d/d.java, line(s) 25,19
com/bytedance/sdk/component/f/d/e.java, line(s) 20
com/bytedance/sdk/component/g/d.java, line(s) 95,106,108,96
com/bytedance/sdk/component/utils/HomeWatcherReceiver.java, line(s) 23,26,28,34,40
com/bytedance/sdk/component/utils/l.java, line(s) 59,71,82,162,179,190,92,102,43,118,135,146
com/bytedance/sdk/openadsdk/activity/TTAppOpenAdActivity.java, line(s) 501,186,333
com/bytedance/sdk/openadsdk/api/factory/SDKTypeConfig.java, line(s) 8,13
com/bytedance/sdk/openadsdk/component/e.java, line(s) 183,203,212
com/bytedance/sdk/openadsdk/component/reward/a/f.java, line(s) 143
com/bytedance/sdk/openadsdk/component/reward/a/i.java, line(s) 28
com/bytedance/sdk/openadsdk/component/reward/a/l.java, line(s) 323,425,430
com/bytedance/sdk/openadsdk/component/reward/a/n.java, line(s) 343,576,515,928,689,719,754
com/bytedance/sdk/openadsdk/component/reward/b/b.java, line(s) 224,244
com/bytedance/sdk/openadsdk/component/reward/n.java, line(s) 88
com/bytedance/sdk/openadsdk/component/reward/view/d.java, line(s) 217
com/bytedance/sdk/openadsdk/component/view/OpenScreenAdVideoExpressView.java, line(s) 200,209
com/bytedance/sdk/openadsdk/core/model/m.java, line(s) 113
com/bytedance/sdk/openadsdk/core/q.java, line(s) 1026
com/bytedance/sdk/openadsdk/core/settings/b.java, line(s) 43,67,147
com/bytedance/sdk/openadsdk/core/settings/i.java, line(s) 36
com/bytedance/sdk/openadsdk/core/settings/k.java, line(s) 42,45
com/bytedance/sdk/openadsdk/core/settings/l.java, line(s) 38,57,71,85,107,152
com/bytedance/sdk/openadsdk/core/settings/n.java, line(s) 661,667,683,124,391,709
com/bytedance/sdk/openadsdk/core/w.java, line(s) 1075,1525
com/bytedance/sdk/openadsdk/core/widget/f.java, line(s) 153,158
com/bytedance/sdk/openadsdk/n/aa.java, line(s) 904,909
com/bytedance/sdk/openadsdk/n/d.java, line(s) 26
com/bytedance/sdk/openadsdk/n/x.java, line(s) 25
com/chartboost/sdk/Analytics.java, line(s) 77,91,102,127,144
com/chartboost/sdk/Chartboost.java, line(s) 46,109
com/chartboost/sdk/ads/Banner.java, line(s) 90
com/chartboost/sdk/ads/Interstitial.java, line(s) 71
com/chartboost/sdk/ads/Rewarded.java, line(s) 71
com/chartboost/sdk/impl/a.java, line(s) 198
com/chartboost/sdk/impl/a0.java, line(s) 85
com/chartboost/sdk/impl/a1.java, line(s) 201,229,311,197
com/chartboost/sdk/impl/c0.java, line(s) 32
com/chartboost/sdk/impl/d5.java, line(s) 223
com/chartboost/sdk/impl/i5.java, line(s) 25
com/chartboost/sdk/impl/l2.java, line(s) 138
com/chartboost/sdk/impl/q1.java, line(s) 55,319,325,343,367,371,375,393,405,412,418,415
com/chartboost/sdk/impl/s.java, line(s) 171
com/chartboost/sdk/impl/s3.java, line(s) 18,27,64,36,45,54
com/chartboost/sdk/impl/u3.java, line(s) 142,429,448
com/chartboost/sdk/internal/Networking/NetworkHelper.java, line(s) 13
com/chartboost/sdk/view/CBImpressionActivity.java, line(s) 86
com/coreplugins/apploudspeaker/Broadcast.java, line(s) 20,28
com/coreplugins/attachmentmail/MailAttachmentManager.java, line(s) 23
com/coreplugins/devicesettings/DeviceLocation.java, line(s) 32,84
com/fyber/inneractive/sdk/external/InneractiveAdManager.java, line(s) 527
com/fyber/inneractive/sdk/flow/a.java, line(s) 26
com/fyber/inneractive/sdk/logger/a.java, line(s) 10,18,20,28,40,42,50,64,57
com/fyber/inneractive/sdk/network/d0.java, line(s) 156
com/fyber/inneractive/sdk/player/exoplayer2/audio/MediaCodecAudioRenderer.java, line(s) 131,136,147,337
com/fyber/inneractive/sdk/player/exoplayer2/audio/c.java, line(s) 738
com/fyber/inneractive/sdk/player/exoplayer2/extractor/mkv/a.java, line(s) 523,526,706,982
com/fyber/inneractive/sdk/player/exoplayer2/extractor/mp4/d.java, line(s) 292,1132,1146
com/fyber/inneractive/sdk/player/exoplayer2/extractor/mp4/e.java, line(s) 80,90,101,116,134,144,154
com/fyber/inneractive/sdk/player/exoplayer2/extractor/mp4/f.java, line(s) 232,267,187,538
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ogg/j.java, line(s) 312
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ts/d.java, line(s) 121
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ts/k.java, line(s) 358
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ts/l.java, line(s) 60
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ts/o.java, line(s) 44,47,104
com/fyber/inneractive/sdk/player/exoplayer2/extractor/wav/a.java, line(s) 80
com/fyber/inneractive/sdk/player/exoplayer2/extractor/wav/c.java, line(s) 38,59,62
com/fyber/inneractive/sdk/player/exoplayer2/g.java, line(s) 39,126
com/fyber/inneractive/sdk/player/exoplayer2/h.java, line(s) 101,487,492,497,887
com/fyber/inneractive/sdk/player/exoplayer2/mediacodec/a.java, line(s) 41,50
com/fyber/inneractive/sdk/player/exoplayer2/mediacodec/b.java, line(s) 379
com/fyber/inneractive/sdk/player/exoplayer2/mediacodec/d.java, line(s) 336,338,141
com/fyber/inneractive/sdk/player/exoplayer2/metadata/id3/g.java, line(s) 131,135,143,163,179,361,446,451,460
com/fyber/inneractive/sdk/player/exoplayer2/source/chunk/b.java, line(s) 12,14
com/fyber/inneractive/sdk/player/exoplayer2/text/cea/a.java, line(s) 37
com/fyber/inneractive/sdk/player/exoplayer2/upstream/cache/i.java, line(s) 220
com/fyber/inneractive/sdk/player/exoplayer2/upstream/o.java, line(s) 207,222,303,218
com/fyber/inneractive/sdk/player/exoplayer2/upstream/x.java, line(s) 177,183,195
com/fyber/inneractive/sdk/player/exoplayer2/util/b.java, line(s) 33,76
com/fyber/inneractive/sdk/player/exoplayer2/util/i.java, line(s) 198
com/fyber/inneractive/sdk/player/exoplayer2/video/MediaCodecVideoRenderer.java, line(s) 303,220,230,239,242,245,261,268,271,274,494,576
com/gameanalytics/sdk/errorreporter/GameAnalyticsExceptionReportService.java, line(s) 26
com/gameanalytics/sdk/logging/GALogger.java, line(s) 92,88,95,90
com/gameanalytics/sdk/validators/GAValidator.java, line(s) 312,320,328,336
com/hyprmx/android/sdk/activity/HyprMXBaseFullScreenWebViewController.java, line(s) 124
com/hyprmx/android/sdk/activity/HyprMXBaseViewController.java, line(s) 240,242,270,272,281,790,1122,1152,1157,1185,1259,1303
com/hyprmx/android/sdk/activity/HyprMXNoOffersActivity.java, line(s) 53,103,46
com/hyprmx/android/sdk/activity/HyprMXOfferViewerActivity.java, line(s) 57,94,106,134,159,178,60
com/hyprmx/android/sdk/activity/HyprMXRequiredInformationActivity.java, line(s) 133,294,351,500,667,671,688,342
com/hyprmx/android/sdk/activity/HyprMXVastViewController.java, line(s) 1028,1266,1277,1290,1633,1700,1718,956,1017,1036,1154,1168,1200,1214,1261,1428,1573
com/hyprmx/android/sdk/activity/HyprMXWebTrafficViewController.java, line(s) 115,214,409,487,491,784,950,965,1010,1028,1065,1126,1128,1149,1171,1189,1196,1198,1236,1275,697,1260,228,841,1164
com/hyprmx/android/sdk/activity/e0.java, line(s) 103,146
com/hyprmx/android/sdk/activity/f.java, line(s) 42
com/hyprmx/android/sdk/activity/g.java, line(s) 39
com/hyprmx/android/sdk/activity/i.java, line(s) 35
com/hyprmx/android/sdk/activity/l.java, line(s) 173,62,70,80,88,98,105,119,127,135,143,151,159,167,181,184
com/hyprmx/android/sdk/activity/l0.java, line(s) 71
com/hyprmx/android/sdk/activity/m0.java, line(s) 36,63
com/hyprmx/android/sdk/activity/o.java, line(s) 62,76
com/hyprmx/android/sdk/activity/r.java, line(s) 35
com/hyprmx/android/sdk/activity/s.java, line(s) 38
com/hyprmx/android/sdk/activity/t.java, line(s) 45,81
com/hyprmx/android/sdk/analytics/e.java, line(s) 53,69
com/hyprmx/android/sdk/analytics/h.java, line(s) 65,98,114,117,120,67
com/hyprmx/android/sdk/analytics/i.java, line(s) 174,199,248
com/hyprmx/android/sdk/analytics/n.java, line(s) 119,120,150,151,303,329
com/hyprmx/android/sdk/api/data/a.java, line(s) 138,146
com/hyprmx/android/sdk/api/data/b.java, line(s) 147
com/hyprmx/android/sdk/api/data/f.java, line(s) 54
com/hyprmx/android/sdk/api/data/r.java, line(s) 76
com/hyprmx/android/sdk/banner/HyprMXBannerView.java, line(s) 180,291,385,394,434,294,302,313
com/hyprmx/android/sdk/banner/m.java, line(s) 371
com/hyprmx/android/sdk/banner/o.java, line(s) 40
com/hyprmx/android/sdk/bus/c.java, line(s) 67
com/hyprmx/android/sdk/bus/i.java, line(s) 239,248
com/hyprmx/android/sdk/calendar/a.java, line(s) 60,288,292,296,100,225
com/hyprmx/android/sdk/core/HyprMX.java, line(s) 89,99,79
com/hyprmx/android/sdk/core/e.java, line(s) 646,1206,1275,1287,791,806,819,1202,1284,1297,1303,1310,1382,1596,1610,1613,1041
com/hyprmx/android/sdk/core/g.java, line(s) 51
com/hyprmx/android/sdk/core/h.java, line(s) 45,46
com/hyprmx/android/sdk/core/js/c.java, line(s) 52,98,223,59,102,144,151,173,227
com/hyprmx/android/sdk/core/l.java, line(s) 312,318,368,378,97,150,358
com/hyprmx/android/sdk/core/q.java, line(s) 266,72
com/hyprmx/android/sdk/core/t.java, line(s) 54
com/hyprmx/android/sdk/footer/FooterFragment.java, line(s) 84
com/hyprmx/android/sdk/footer/b.java, line(s) 75,127
com/hyprmx/android/sdk/header/e.java, line(s) 44
com/hyprmx/android/sdk/initialization/a.java, line(s) 447,362,268
com/hyprmx/android/sdk/initialization/f.java, line(s) 338
com/hyprmx/android/sdk/model/e.java, line(s) 61
com/hyprmx/android/sdk/model/f.java, line(s) 137
com/hyprmx/android/sdk/network/b.java, line(s) 42
com/hyprmx/android/sdk/network/c.java, line(s) 41
com/hyprmx/android/sdk/network/e.java, line(s) 115,165,133
com/hyprmx/android/sdk/om/a.java, line(s) 88
com/hyprmx/android/sdk/om/b.java, line(s) 193,201,212,217,229,132,168,183
com/hyprmx/android/sdk/om/e.java, line(s) 46
com/hyprmx/android/sdk/om/f.java, line(s) 67,104
com/hyprmx/android/sdk/om/i.java, line(s) 75
com/hyprmx/android/sdk/om/j.java, line(s) 22,50,63,76,89,102,115,134,157,28,56,69,82,95,108,121,139,143,162,166
com/hyprmx/android/sdk/om/k.java, line(s) 59,112,117,127,140,164,174,177
com/hyprmx/android/sdk/overlay/HyprMXBrowserActivity.java, line(s) 182,257
com/hyprmx/android/sdk/overlay/j.java, line(s) 480,521,538
com/hyprmx/android/sdk/overlay/k.java, line(s) 40
com/hyprmx/android/sdk/overlay/n.java, line(s) 162,186,204,208
com/hyprmx/android/sdk/overlay/p.java, line(s) 87,122,84
com/hyprmx/android/sdk/p002assert/DefaultThreadAssert.java, line(s) 60
com/hyprmx/android/sdk/placement/b.java, line(s) 118,149,186
com/hyprmx/android/sdk/placement/c.java, line(s) 50,82
com/hyprmx/android/sdk/powersavemode/DefaultPowerSaveModeListener.java, line(s) 60,88,126,165,187,193,170,198
com/hyprmx/android/sdk/preload/d.java, line(s) 112,411,870,919,935,1205,1206,1208,1326,1362,150,163,872,937
com/hyprmx/android/sdk/preload/f.java, line(s) 89,71
com/hyprmx/android/sdk/preload/g.java, line(s) 53,93,75
com/hyprmx/android/sdk/preload/i.java, line(s) 77,103,69,128
com/hyprmx/android/sdk/preload/k.java, line(s) 41,56
com/hyprmx/android/sdk/preload/p.java, line(s) 137,407,81,215,352,400,574,582,588,605,620,636,737
com/hyprmx/android/sdk/preload/r.java, line(s) 41
com/hyprmx/android/sdk/preload/s.java, line(s) 63,74
com/hyprmx/android/sdk/preload/t.java, line(s) 18
com/hyprmx/android/sdk/preload/v.java, line(s) 301,601,615,652
com/hyprmx/android/sdk/presentation/d.java, line(s) 13
com/hyprmx/android/sdk/presentation/e.java, line(s) 119,463
com/hyprmx/android/sdk/tracking/c.java, line(s) 97
com/hyprmx/android/sdk/utility/HyprMXLog.java, line(s) 233,240,65,97,130,141,235,251,231,237,228
com/hyprmx/android/sdk/utility/c0.java, line(s) 51
com/hyprmx/android/sdk/utility/e.java, line(s) 32,38,44
com/hyprmx/android/sdk/utility/e0.java, line(s) 141,98
com/hyprmx/android/sdk/utility/g.java, line(s) 73
com/hyprmx/android/sdk/utility/i.java, line(s) 109,119
com/hyprmx/android/sdk/utility/j0.java, line(s) 18
com/hyprmx/android/sdk/utility/l0.java, line(s) 82,114
com/hyprmx/android/sdk/utility/m.java, line(s) 51,58,65
com/hyprmx/android/sdk/utility/s0.java, line(s) 22,31,42
com/hyprmx/android/sdk/utility/t0.java, line(s) 56
com/hyprmx/android/sdk/utility/u0.java, line(s) 76
com/hyprmx/android/sdk/utility/v0.java, line(s) 46
com/hyprmx/android/sdk/utility/w.java, line(s) 56,77,118
com/hyprmx/android/sdk/utility/w0.java, line(s) 23,31,74,78,95
com/hyprmx/android/sdk/utility/x.java, line(s) 87,103,116,137
com/hyprmx/android/sdk/utility/y0.java, line(s) 134,258,165,212,256
com/hyprmx/android/sdk/utility/z0.java, line(s) 62
com/hyprmx/android/sdk/vast/c.java, line(s) 318,333
com/hyprmx/android/sdk/webview/f.java, line(s) 86,109,126,142,244,260,321,332
com/hyprmx/android/sdk/webview/i.java, line(s) 93
com/hyprmx/android/sdk/webview/n.java, line(s) 742,790,828,848,876,919,709,713,929
com/iab/omid/library/adcolony/d/c.java, line(s) 17,10
com/iab/omid/library/applovin/utils/d.java, line(s) 17,10
com/iab/omid/library/fyber/utils/d.java, line(s) 17,10
com/iab/omid/library/inmobi/d/c.java, line(s) 17,10
com/iab/omid/library/ironsrc/utils/d.java, line(s) 17,10
com/iab/omid/library/jungroup/d/b.java, line(s) 7
com/iab/omid/library/mmadbridge/utils/d.java, line(s) 17,10
com/iab/omid/library/smaato/utils/c.java, line(s) 17,10
com/iab/omid/library/vungle/d/c.java, line(s) 17,10
com/inmobi/media/h.java, line(s) 65
com/inmobi/media/ih.java, line(s) 45
com/inmobi/media/ij.java, line(s) 16,21,25,28,50,54,11,44
com/ironsource/a/b.java, line(s) 42
com/ironsource/adapters/adcolony/AdColonyAdapter.java, line(s) 320,98,121,139,149,160,172,186,218,228,239,251,264,338,356,368,380,396,407,419,436
com/ironsource/adapters/adcolony/AdColonyBannerAdListener.java, line(s) 27,44,56,68,74,86
com/ironsource/adapters/adcolony/AdColonyInterstitialAdListener.java, line(s) 24,41,53,66,78,84
com/ironsource/adapters/adcolony/AdColonyRewardedVideoAdListener.java, line(s) 26,43,55,68,80,91,103
com/ironsource/adapters/admob/AdMobAdapter.java, line(s) 307,178,189,199,208,327,382
com/ironsource/adapters/admob/banner/AdMobBannerAdListener.java, line(s) 26,64,76,88,100
com/ironsource/adapters/admob/banner/AdMobBannerAdapter.java, line(s) 140,60,107,161,213,286
com/ironsource/adapters/admob/banner/AdMobNativeBannerAdListener.java, line(s) 30,69,81,93,105
com/ironsource/adapters/admob/interstitial/AdMobInterstitialAdLoadListener.java, line(s) 25
com/ironsource/adapters/admob/interstitial/AdMobInterstitialAdShowListener.java, line(s) 20,42,55,67
com/ironsource/adapters/admob/interstitial/AdMobInterstitialAdapter.java, line(s) 47,100,115
com/ironsource/adapters/admob/rewardedvideo/AdMobRewardedVideoAdLoadListener.java, line(s) 25
com/ironsource/adapters/admob/rewardedvideo/AdMobRewardedVideoAdShowListener.java, line(s) 22,44,56,68,80
com/ironsource/adapters/admob/rewardedvideo/AdMobRewardedVideoAdapter.java, line(s) 44,70,125,141
com/ironsource/adapters/applovin/AppLovinAdapter.java, line(s) 593,175,246,297,322,342,373,394,408,440,461,518,549,563,577,585
com/ironsource/adapters/applovin/AppLovinBannerListener.java, line(s) 31,61,77,83,89,101,113,125,131
com/ironsource/adapters/applovin/AppLovinInterstitialListener.java, line(s) 26,45,60,73,82,94,100
com/ironsource/adapters/applovin/AppLovinRewardedVideoListener.java, line(s) 28,40,58,70,82,94,109,121,127,133,139
com/ironsource/adapters/chartboost/ChartboostAdapter.java, line(s) 128,228,286,309,321,351,371,383,413,433,450,467,481,497,503,655
com/ironsource/adapters/chartboost/ChartboostBannerAdListener.java, line(s) 35,67,73,79,91
com/ironsource/adapters/chartboost/ChartboostInterstitialAdListener.java, line(s) 30,51,57,70,83,98
com/ironsource/adapters/chartboost/ChartboostRewardedVideoAdListener.java, line(s) 31,53,59,72,84,99,111
com/ironsource/adapters/facebook/FacebookAdapter.java, line(s) 136,179,208,262,282,290,296,335,386,424,452,508,544,577,602,661,693,704,788,802
com/ironsource/adapters/facebook/FacebookBannerAdListener.java, line(s) 28,47,58,70
com/ironsource/adapters/facebook/FacebookInterstitialAdListener.java, line(s) 25,42,64,70,88,100,117,134,140,146
com/ironsource/adapters/facebook/FacebookRewardedVideoAdListener.java, line(s) 25,42,65,83,95,108,125
com/ironsource/adapters/fyber/FyberAdapter.java, line(s) 133,157,233,287,315,345,376,402,430,462,485,511,539,575,605,618,650,696
com/ironsource/adapters/fyber/FyberBannerAdListener.java, line(s) 29,65,87,99,111,123,135,141,147,153
com/ironsource/adapters/fyber/FyberInterstitialAdListener.java, line(s) 27,45,73,86,98,105,123,129
com/ironsource/adapters/fyber/FyberRewardedVideoAdListener.java, line(s) 33,51,78,92,110,122,128,134,146,158,170
com/ironsource/adapters/hyprmx/HyprMXAdapter.java, line(s) 357,114,126,135,230,243,289,302,332,384,406,493,499,505,633
com/ironsource/adapters/hyprmx/HyprMxBannerListener.java, line(s) 26,49,65,77,89,101
com/ironsource/adapters/hyprmx/HyprMxInterstitialListener.java, line(s) 82,25,38,50,66,95
com/ironsource/adapters/hyprmx/HyprMxRewardedVideoListener.java, line(s) 92,110,24,36,48,60,76
com/ironsource/adapters/inmobi/InMobiAdapter.java, line(s) 180,215,275,347,396,487,532,117,129,143,167,249,257,265,297,381,388,432,459,478,586,743,752
com/ironsource/adapters/inmobi/InMobiBannerListener.java, line(s) 27,57,69,81,93,105
com/ironsource/adapters/inmobi/InMobiInterstitialListener.java, line(s) 34,64,70,76,89,100,112,118
com/ironsource/adapters/inmobi/InMobiRewardedVideoListener.java, line(s) 30,61,67,73,86,97,109,115,127
com/ironsource/adapters/ironsource/IronSourceAdapter.java, line(s) 450,516,583,596,609,628,642,655,794,819,164,208,233,264,297,323,338,349,358,370,432,474,483,493,501,528,536,695,744,770,802
com/ironsource/adapters/ironsource/IronSourceBannerListener.java, line(s) 26,32,38,44,52,73
com/ironsource/adapters/ironsource/IronSourceInterstitialListener.java, line(s) 23,29,36,46,55,61,67,74,81,88,95
com/ironsource/adapters/ironsource/IronSourceRewardedVideoListener.java, line(s) 25,32,39,49,58,64,70,81,92,99,106
com/ironsource/adapters/mintegral/MintegralAdapter.java, line(s) 220,368,488,621,718,885
com/ironsource/adapters/mintegral/MintegralBannerListener.java, line(s) 32
com/ironsource/adapters/mintegral/MintegralInterstitialListener.java, line(s) 52,96
com/ironsource/adapters/mintegral/MintergralRewardedVideoListener.java, line(s) 52,92,110
com/ironsource/adapters/pangle/PangleAdapter.java, line(s) 232,712
com/ironsource/adapters/pangle/PangleBannerAdListener.java, line(s) 49
com/ironsource/adapters/pangle/PangleInterstitialAdListener.java, line(s) 51
com/ironsource/adapters/pangle/PangleRewardedVideoAdListener.java, line(s) 52,99,111
com/ironsource/adapters/smaato/SmaatoAdapter.java, line(s) 235,90,100,119,133,243
com/ironsource/adapters/smaato/SmaatoBannerListener.java, line(s) 24,41,57,69,81
com/ironsource/adapters/supersonicads/SupersonicAdsAdapter.java, line(s) 99,177,196,221,233,306,342,351,364,385,412
com/ironsource/adapters/tapjoy/TapjoyAdapter.java, line(s) 544,122,126,115,198,252,281,303,348,377,399,427,445,457,473,484,500,525
com/ironsource/adapters/tapjoy/TapjoyInterstitialAdListener.java, line(s) 28,45,69,81,94,106,118,124,130,136,142
com/ironsource/adapters/tapjoy/TapjoyRewardedVideoAdListener.java, line(s) 28,45,69,82,95,107,119,132,144,150,156
com/ironsource/adapters/unityads/UnityAdsAdapter.java, line(s) 237,292,310,318,324,342,368,399,417,425,431,449,468,498,529,548,563,588,599,612,625,631,650
com/ironsource/adapters/unityads/UnityAdsBannerListener.java, line(s) 25,64,76
com/ironsource/adapters/unityads/UnityAdsInterstitialListener.java, line(s) 58,94,26,66,101,113
com/ironsource/adapters/unityads/UnityAdsRewardedVideoListener.java, line(s) 61,95,26,67,102,114
com/ironsource/adapters/vungle/VungleAdapter.java, line(s) 122,162,213,267,301,310,324,349,375,405,419,465,495,526,583,598,615,625,643,690
com/ironsource/adapters/vungle/VungleBannerLoadListener.java, line(s) 27,59
com/ironsource/adapters/vungle/VungleBannerPlayListener.java, line(s) 37,49,61,73
com/ironsource/adapters/vungle/VungleInterstitialLoadListener.java, line(s) 19,32
com/ironsource/adapters/vungle/VungleInterstitialPlayListener.java, line(s) 35,46,58,70,82
com/ironsource/adapters/vungle/VungleRewardedVideoLoadListener.java, line(s) 19,32
com/ironsource/adapters/vungle/VungleRewardedVideoPlayListener.java, line(s) 31,43,55,67,79,91
com/ironsource/adqualitysdk/sdk/i/ic.java, line(s) 229,237,247,251,272,298
com/ironsource/adqualitysdk/sdk/i/o.java, line(s) 249,265,123,126,133,136
com/ironsource/b/a.java, line(s) 77,120
com/ironsource/d/b.java, line(s) 121
com/ironsource/environment/a.java, line(s) 136,185,36,320
com/ironsource/environment/e.java, line(s) 92,188,200,205,206
com/ironsource/environment/k.java, line(s) 66
com/ironsource/lifecycle/a/a.java, line(s) 71
com/ironsource/mediationsdk/AbstractAdapter.java, line(s) 321
com/ironsource/mediationsdk/AbstractC1324a.java, line(s) 36,47
com/ironsource/mediationsdk/AbstractC1337n.java, line(s) 58
com/ironsource/mediationsdk/C.java, line(s) 77,124
com/ironsource/mediationsdk/C1327d.java, line(s) 204,219,122,234
com/ironsource/mediationsdk/C1329f.java, line(s) 348,418,432
com/ironsource/mediationsdk/C1334k.java, line(s) 29,53,68,92,107,120,132,147,171,186,210,225,249
com/ironsource/mediationsdk/C1335l.java, line(s) 60
com/ironsource/mediationsdk/C1339p.java, line(s) 37,50,76
com/ironsource/mediationsdk/C1340q.java, line(s) 52
com/ironsource/mediationsdk/C1343t.java, line(s) 39,63,78,103,118,143,166,190,209,233,248,272,287,311
com/ironsource/mediationsdk/C1346w.java, line(s) 61,86
com/ironsource/mediationsdk/D.java, line(s) 352
com/ironsource/mediationsdk/E.java, line(s) 51,68,108
com/ironsource/mediationsdk/G.java, line(s) 153,782,112,125,205,289,314,371,384,436,573,665,688,764,808,828,909
com/ironsource/mediationsdk/I.java, line(s) 115,151,170,206,225,293,313,327,62,74,101,365,428,420
com/ironsource/mediationsdk/IronSource.java, line(s) 135,81,450,122,629
com/ironsource/mediationsdk/J.java, line(s) 400
com/ironsource/mediationsdk/M.java, line(s) 434
com/ironsource/mediationsdk/P.java, line(s) 48
com/ironsource/mediationsdk/Q.java, line(s) 39,63,78,107,121,146,161,186,206,239,267,291,306,331
com/ironsource/mediationsdk/R.java, line(s) 85,110,132
com/ironsource/mediationsdk/W.java, line(s) 90,135
com/ironsource/mediationsdk/adunit/a/a.java, line(s) 31,133,145,160,172,184
com/ironsource/mediationsdk/adunit/adapter/utility/AdInfo.java, line(s) 95
com/ironsource/mediationsdk/adunit/c/c.java, line(s) 137,173,251
com/ironsource/mediationsdk/adunit/c/c/d.java, line(s) 26,52
com/ironsource/mediationsdk/adunit/c/d.java, line(s) 48
com/ironsource/mediationsdk/adunit/c/e.java, line(s) 361,98,173,276,616,721,785
com/ironsource/mediationsdk/adunit/d/a/a.java, line(s) 123
com/ironsource/mediationsdk/adunit/d/a/b.java, line(s) 42
com/ironsource/mediationsdk/adunit/d/a/c.java, line(s) 157,300,382
com/ironsource/mediationsdk/adunit/e/a.java, line(s) 74,146
com/ironsource/mediationsdk/bidding/a.java, line(s) 30
com/ironsource/mediationsdk/bidding/d.java, line(s) 44,64
com/ironsource/mediationsdk/demandOnly/a.java, line(s) 10
com/ironsource/mediationsdk/demandOnly/b.java, line(s) 370,76,110,138,170,228,325,334,378,401,424,432,486,511,517
com/ironsource/mediationsdk/demandOnly/g.java, line(s) 95
com/ironsource/mediationsdk/events/b.java, line(s) 248,258
com/ironsource/mediationsdk/impressionData/ImpressionData.java, line(s) 105
com/ironsource/mediationsdk/impressionData/a.java, line(s) 73
com/ironsource/mediationsdk/integration/IntegrationHelper.java, line(s) 198,50,77,84,99,104,125,139,143,157,162,215,220,291,301,313,324,43,56,61,80,95,102,116,122,135,153,160,186,209,210,213,218,305,316,322,63,311
com/ironsource/mediationsdk/logger/a.java, line(s) 29,24,22,26
com/ironsource/mediationsdk/utils/IronSourceAES.java, line(s) 74
com/ironsource/mediationsdk/utils/IronSourceUtils.java, line(s) 149,528
com/ironsource/mediationsdk/utils/f.java, line(s) 335
com/ironsource/mediationsdk/utils/g.java, line(s) 82,104
com/ironsource/mediationsdk/y.java, line(s) 1859,459,461,469,471,1669,1692,1603,1717,708
com/ironsource/mediationsdk/z.java, line(s) 503
com/ironsource/sdk/a/d.java, line(s) 38
com/ironsource/sdk/b/b.java, line(s) 34,61,100
com/ironsource/sdk/c/c.java, line(s) 118,190
com/ironsource/sdk/controller/A.java, line(s) 336,344,423,1023,1128,1148,1179,1199,1223,1243,1271,1291,1319,1485,1505,2220,2754,2757,2759,2769,2777,2791,2800,2803,1974
com/ironsource/sdk/f/a.java, line(s) 54
com/ironsource/sdk/service/Connectivity/a.java, line(s) 50
com/ironsource/sdk/service/Connectivity/e.java, line(s) 82,96
com/ironsource/sdk/service/d.java, line(s) 47
com/ironsource/sdk/utils/Logger.java, line(s) 11,17,23,29,39,47,52,58,64,70
com/ironsource/unity/androidbridge/AndroidBridge.java, line(s) 671
com/koushikdutta/quack/JavaMethodObject.java, line(s) 89
com/koushikdutta/quack/JavaObject.java, line(s) 219
com/mbridge/msdk/dycreator/a/a.java, line(s) 77,80,92,94
com/mbridge/msdk/dycreator/baseview/MBScrollView.java, line(s) 103
com/mbridge/msdk/dycreator/baseview/extview/MBExtAcquireRewardPopView.java, line(s) 62
com/mbridge/msdk/dycreator/baseview/extview/MBExtFeedBackView.java, line(s) 63
com/mbridge/msdk/dycreator/baseview/extview/MBExtMBridgeBaitClickView.java, line(s) 62
com/mbridge/msdk/dycreator/baseview/extview/MBExtMBridgeTextView.java, line(s) 68
com/mbridge/msdk/dycreator/bus/BackgroundPoster.java, line(s) 39
com/mbridge/msdk/dycreator/bus/EventBus.java, line(s) 280,447,450,455,196,225,241
com/mbridge/msdk/dycreator/e/g.java, line(s) 10
com/mbridge/msdk/foundation/same/b/e.java, line(s) 34
com/mbridge/msdk/foundation/same/report/b/a.java, line(s) 149
com/mbridge/msdk/foundation/tools/u.java, line(s) 20
com/mbridge/msdk/foundation/tools/x.java, line(s) 34,62,69,41,48,55
com/mbridge/msdk/playercommon/exoplayer2/DefaultRenderersFactory.java, line(s) 94,123,129,131,136,141,145
com/mbridge/msdk/playercommon/exoplayer2/ExoPlayerImpl.java, line(s) 64,277,208
com/mbridge/msdk/playercommon/exoplayer2/ExoPlayerImplInternal.java, line(s) 268,273,278,666,735,153
com/mbridge/msdk/playercommon/exoplayer2/MediaPeriodHolder.java, line(s) 167
com/mbridge/msdk/playercommon/exoplayer2/SimpleExoPlayer.java, line(s) 195,669
com/mbridge/msdk/playercommon/exoplayer2/audio/DefaultAudioSink.java, line(s) 493,521,1036,1045,1050
com/mbridge/msdk/playercommon/exoplayer2/drm/ClearKeyUtil.java, line(s) 44
com/mbridge/msdk/playercommon/exoplayer2/drm/DefaultDrmSession.java, line(s) 242,252
com/mbridge/msdk/playercommon/exoplayer2/drm/DefaultDrmSessionManager.java, line(s) 194
com/mbridge/msdk/playercommon/exoplayer2/extractor/mkv/MatroskaExtractor.java, line(s) 1633,1641,1764,1922
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp3/VbriSeeker.java, line(s) 62
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp3/XingSeeker.java, line(s) 38
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp4/AtomParsers.java, line(s) 281,390
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp4/FragmentedMp4Extractor.java, line(s) 899,1051
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp4/MetadataUtil.java, line(s) 139,152,163,178,196,210,225,234,274
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp4/PsshAtomUtil.java, line(s) 66,81
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp4/TrackEncryptionBox.java, line(s) 64
com/mbridge/msdk/playercommon/exoplayer2/extractor/ogg/VorbisUtil.java, line(s) 131
com/mbridge/msdk/playercommon/exoplayer2/extractor/ts/AdtsReader.java, line(s) 191
com/mbridge/msdk/playercommon/exoplayer2/extractor/ts/H265Reader.java, line(s) 235
com/mbridge/msdk/playercommon/exoplayer2/extractor/ts/Id3Reader.java, line(s) 54
com/mbridge/msdk/playercommon/exoplayer2/extractor/ts/PesReader.java, line(s) 56,59,127
com/mbridge/msdk/playercommon/exoplayer2/extractor/wav/WavHeaderReader.java, line(s) 28,55,61,77
com/mbridge/msdk/playercommon/exoplayer2/mediacodec/MediaCodecInfo.java, line(s) 158,162,175
com/mbridge/msdk/playercommon/exoplayer2/mediacodec/MediaCodecRenderer.java, line(s) 252
com/mbridge/msdk/playercommon/exoplayer2/mediacodec/MediaCodecUtil.java, line(s) 146,288,293,176,383,388,395,402,412,424,429,434,439
com/mbridge/msdk/playercommon/exoplayer2/metadata/id3/Id3Decoder.java, line(s) 82,98,103,113,123,229,262,320,325,344
com/mbridge/msdk/playercommon/exoplayer2/offline/DownloadManager.java, line(s) 298,350
com/mbridge/msdk/playercommon/exoplayer2/offline/DownloadService.java, line(s) 164,171,182,360
com/mbridge/msdk/playercommon/exoplayer2/source/chunk/BaseMediaChunkOutput.java, line(s) 29
com/mbridge/msdk/playercommon/exoplayer2/source/chunk/ChunkSampleStream.java, line(s) 304
com/mbridge/msdk/playercommon/exoplayer2/source/chunk/ChunkedTrackBlacklistUtil.java, line(s) 19,21
com/mbridge/msdk/playercommon/exoplayer2/text/cea/Cea708Decoder.java, line(s) 208,240,252,271,285,314,318,322,424,561,575
com/mbridge/msdk/playercommon/exoplayer2/text/cea/CeaUtil.java, line(s) 23
com/mbridge/msdk/playercommon/exoplayer2/text/dvb/DvbParser.java, line(s) 147
com/mbridge/msdk/playercommon/exoplayer2/text/ssa/SsaDecoder.java, line(s) 139,144,149,158
com/mbridge/msdk/playercommon/exoplayer2/text/subrip/SubripDecoder.java, line(s) 38,66,69
com/mbridge/msdk/playercommon/exoplayer2/text/ttml/TtmlDecoder.java, line(s) 75,86,149,160,225,229,232,235,239,242,451,460,469,598
com/mbridge/msdk/playercommon/exoplayer2/text/webvtt/WebvttCue.java, line(s) 128
com/mbridge/msdk/playercommon/exoplayer2/text/webvtt/WebvttCueParser.java, line(s) 89,92,180,253,310,363
com/mbridge/msdk/playercommon/exoplayer2/upstream/DefaultDataSource.java, line(s) 118
com/mbridge/msdk/playercommon/exoplayer2/upstream/DefaultHttpDataSource.java, line(s) 317,334,434,329
com/mbridge/msdk/playercommon/exoplayer2/upstream/Loader.java, line(s) 194,200,212,244
com/mbridge/msdk/playercommon/exoplayer2/upstream/cache/CachedRegionTracker.java, line(s) 64
com/mbridge/msdk/playercommon/exoplayer2/upstream/cache/SimpleCache.java, line(s) 310
com/mbridge/msdk/playercommon/exoplayer2/util/AtomicFile.java, line(s) 30,85
com/mbridge/msdk/playercommon/exoplayer2/util/EventLogger.java, line(s) 370,374
com/mbridge/msdk/playercommon/exoplayer2/util/NalUnitUtil.java, line(s) 236
com/mbridge/msdk/playercommon/exoplayer2/util/Util.java, line(s) 851,865
com/mbridge/msdk/playercommon/exoplayer2/video/DummySurface.java, line(s) 148,154
com/mbridge/msdk/playercommon/exoplayer2/video/MediaCodecVideoRenderer.java, line(s) 149,179,710,716
com/mbridge/msdk/video/module/MBridgeBaseView.java, line(s) 81,86
com/mbridge/msdk/widget/FeedbackRadioGroup.java, line(s) 40
com/onesignal/AndroidSupportV4Compat.java, line(s) 25
com/onesignal/JobIntentService.java, line(s) 185,187,236
com/onesignal/OneSignal.java, line(s) 1092,1098,1119,1094,1090,1096
com/onesignal/shortcutbadger/ShortcutBadger.java, line(s) 59,121,130,58,92,99,120,105
com/onevcat/uniwebview/Logger.java, line(s) 97,93
com/smaato/sdk/core/AndroidsInjector.java, line(s) 75
com/smaato/sdk/core/Config.java, line(s) 84,98
com/smaato/sdk/core/SmaatoInstance.java, line(s) 87
com/smaato/sdk/core/SmaatoSdk.java, line(s) 100,202,321,451,79
com/smaato/sdk/core/ad/KeyValuePairs.java, line(s) 23,26,58,77,80,85
com/smaato/sdk/core/browser/SmaatoSdkBrowserActivity.java, line(s) 48
com/smaato/sdk/core/gdpr/tcfv2/TCModel.java, line(s) 79,92,137,169,182,195,270,278,286,294,302,310,322,334,346,358,370,382
com/smaato/sdk/core/gdpr/tcfv2/encoder/Base64Converter.java, line(s) 35
com/smaato/sdk/core/gdpr/tcfv2/encoder/field/FixedVectorEncoder.java, line(s) 33
com/smaato/sdk/core/gdpr/tcfv2/encoder/field/IntEncoder.java, line(s) 21
com/smaato/sdk/core/gdpr/tcfv2/encoder/field/LangEncoder.java, line(s) 23
com/smaato/sdk/core/gdpr/tcfv2/encoder/field/PurposeRestrictionVectorEncoder.java, line(s) 65
com/smaato/sdk/core/gdpr/tcfv2/encoder/field/VendorVectorEncoder.java, line(s) 61
com/smaato/sdk/core/gdpr/tcfv2/encoder/segment/CoreTCEncoder.java, line(s) 58,69,75
com/smaato/sdk/core/gdpr/tcfv2/encoder/segment/OOBVendorsEncoder.java, line(s) 67
com/smaato/sdk/core/gdpr/tcfv2/encoder/segment/PublisherTCEncoder.java, line(s) 56
com/smaato/sdk/core/linkhandler/LinkHandler.java, line(s) 107
com/smaato/sdk/core/log/LoggerFactory.java, line(s) 30
com/smaato/sdk/core/openmeasurement/BaseOMViewabilityTracker.java, line(s) 28,33,44,53,62,71
com/smaato/sdk/core/openmeasurement/OMImageViewabilityTracker.java, line(s) 47
com/smaato/sdk/core/openmeasurement/OMWebViewViewabilityTracker.java, line(s) 31
com/smaato/sdk/core/remoteconfig/GenericRemoteConfig.java, line(s) 79
com/smaato/sdk/core/util/Intents.java, line(s) 29
com/smaato/sdk/core/util/Threads.java, line(s) 163
com/smaato/sdk/core/webview/WebViewHelperUtil.java, line(s) 31
com/smaato/sdk/richmedia/util/ViewUtils.java, line(s) 30
com/tapjoy/HmacSignature.java, line(s) 33,62
com/tapjoy/TJAdUnit.java, line(s) 140,151,166,220,275,364,450,562,893,934,975,979,992,996,1128,1142,1158,178,246,254,424,428,757,804,399,411,729,783,1009,1023,1048,793,815,387,444,610
com/tapjoy/TJAdUnitActivity.java, line(s) 39,46,65,181,187,209,223,234,242,250,267,123,142,128
com/tapjoy/TJAdUnitJSBridge.java, line(s) 81,93,98,120,181,432,487,503,649,699,755,774,777,813,876,879,890,901,910,913,918,1035,1037,1043,1048,1051,1067,1088,1109,64,595,604,628,1242,61,276,311,325,339,364,426,441,576,1064,1085,1106
com/tapjoy/TJAppSetId.java, line(s) 18,23
com/tapjoy/TJCorePlacement.java, line(s) 134,159,332,439,449,572,576,375,388,392,476,166,237,308,312,317,427,470,493,521,551,253
com/tapjoy/TJCurrency.java, line(s) 48,66,118,121,124,128,154,162,166,192,197,201,107,157,195
com/tapjoy/TJEventOptimizer.java, line(s) 37,76,104,71,89,32,45
com/tapjoy/TJInstallReferrer.java, line(s) 21,26,31,41,45,47,51,59,64,68,73,78,83,95,106,110,113,115,117,134,137,146,149,158,169,179,188,201
com/tapjoy/TJPlacement.java, line(s) 122,256,270,181,95,166,266,285,98,188,192
com/tapjoy/TJPlacementManager.java, line(s) 147,154,117,121
com/tapjoy/TJSplitWebView.java, line(s) 248,470,475,511,493,549
com/tapjoy/TJWebViewJSInterface.java, line(s) 27,31,56,85,132,140,82
com/tapjoy/Tapjoy.java, line(s) 202
com/tapjoy/TapjoyAdIdClient.java, line(s) 30
com/tapjoy/TapjoyAppSettings.java, line(s) 23,32,38,42,50,55,63,67,83,93,68
com/tapjoy/TapjoyCache.java, line(s) 56,74,78,94,105,129,156,161,186,189,261,262,263,264,306,320,376,58,86,90,114,121,123,147,173,382,403
com/tapjoy/TapjoyCacheMap.java, line(s) 33,56
com/tapjoy/TapjoyCachedAssetData.java, line(s) 101,116
com/tapjoy/TapjoyConnectCore.java, line(s) 243,245,738,742,745,1132,1141,1179,1180,1194,1289,1309,1315,1320,1356,1363,1384,1418,205,209,235,239,667,701,716,748,769,1099,1105,1128,1183,1199,1221,1240,1249,1259,1269,1605,571,624,625,627,629,630,631,685,791,1214,1293,1352,1368,1381,1415,1454,1581,1597,981,987,1058,1063,1097,1103,710,824,827,875
com/tapjoy/TapjoyGpsHelper.java, line(s) 21,23,24,33,35,40,41,44,58
com/tapjoy/TapjoyLog.java, line(s) 62
com/tapjoy/TapjoyURLConnection.java, line(s) 164,173,64,81,141,170,56,84,85,86,88,90,104,105,106,150,151,152,154,156
com/tapjoy/TapjoyUtil.java, line(s) 117,118,119,161,169,83,325,340
com/tapjoy/internal/dp.java, line(s) 17,10
com/tapjoy/internal/es.java, line(s) 34,37,40,43,50,64,81,85,95,110
com/tapjoy/internal/eu.java, line(s) 81,87,139,145,158,164,192,198,222,606,126,134,56,75,111,597
com/tapjoy/internal/fn.java, line(s) 36,46
com/tapjoy/internal/fo.java, line(s) 37,54
com/tapjoy/internal/fs.java, line(s) 33
com/tapjoy/internal/gc.java, line(s) 141,143
com/tapjoy/internal/gd.java, line(s) 29
com/tapjoy/internal/hg.java, line(s) 125
com/tapjoy/internal/hp.java, line(s) 128
com/tapjoy/internal/jv.java, line(s) 45,59,63
com/unity/androidnotifications/UnityNotificationBackgroundThread.java, line(s) 170
com/unity/androidnotifications/UnityNotificationManager.java, line(s) 346,467,470,577,611
com/unity/androidnotifications/UnityNotificationUtilities.java, line(s) 74,90,93,136,161,164,217,220,366,372,487,493,529,531,577,579,553,557,562
com/unity3d/ads/UnityAdsBaseOptions.java, line(s) 17
com/unity3d/ads/metadata/InAppPurchaseMetaData.java, line(s) 62,77,81
com/unity3d/ads/metadata/MetaData.java, line(s) 72,81
com/unity3d/player/f.java, line(s) 13,16
com/unity3d/player/n.java, line(s) 140
com/unity3d/services/UnityServices.java, line(s) 29,60,67,70,80,85,98,114,90,92,102,41
com/unity3d/services/ads/UnityAdsImplementation.java, line(s) 43,133
com/unity3d/services/ads/adunit/AdUnitActivity.java, line(s) 427,429,49,112,134,156,179,217,348,393,184
com/unity3d/services/ads/adunit/AdUnitViewHandlerFactory.java, line(s) 21
com/unity3d/services/ads/adunit/VideoPlayerHandler.java, line(s) 32,50
com/unity3d/services/ads/api/AdUnit.java, line(s) 76,79,82,85,108,418,424,476,480,485,489,99,112,117,122,154,244,332,348,377,384
com/unity3d/services/ads/api/VideoPlayer.java, line(s) 56,74,92,110,128,164
com/unity3d/services/ads/api/WebPlayer.java, line(s) 132
com/unity3d/services/ads/configuration/AdsModuleConfiguration.java, line(s) 47,58,66
com/unity3d/services/ads/gmascar/adapters/ScarAdapterFactory.java, line(s) 62
com/unity3d/services/ads/gmascar/bridges/AdapterStatusBridge.java, line(s) 25,34
com/unity3d/services/ads/gmascar/bridges/InitializeListenerBridge.java, line(s) 25,48
com/unity3d/services/ads/gmascar/bridges/mobileads/MobileAdsBridge.java, line(s) 34
com/unity3d/services/ads/gmascar/bridges/mobileads/MobileAdsBridgeLegacy.java, line(s) 41
com/unity3d/services/ads/gmascar/finder/GMAInitializer.java, line(s) 48
com/unity3d/services/ads/gmascar/finder/ScarVersionFinder.java, line(s) 34,50
com/unity3d/services/ads/token/AsyncTokenStorage.java, line(s) 173,203
com/unity3d/services/ads/token/NativeTokenGenerator.java, line(s) 40
com/unity3d/services/ads/video/VideoPlayerView.java, line(s) 52,88,91,112,155,161,215,226,253
com/unity3d/services/ads/webplayer/WebPlayerView.java, line(s) 63,163,200,204,298,311,323,336,357,419
com/unity3d/services/banners/BannerView.java, line(s) 109
com/unity3d/services/banners/UnityBanners.java, line(s) 134
com/unity3d/services/core/api/Cache.java, line(s) 178,192,42,114,131,158,197,207
com/unity3d/services/core/api/DeviceInfo.java, line(s) 200,219,233,286,294,322,496
com/unity3d/services/core/api/Intent.java, line(s) 90,106,129,166,180
com/unity3d/services/core/api/Request.java, line(s) 32,44,62,74,91,103
com/unity3d/services/core/api/Sdk.java, line(s) 16,42,97,109,79,91,85
com/unity3d/services/core/broadcast/BroadcastEventReceiver.java, line(s) 35
com/unity3d/services/core/cache/CacheDirectory.java, line(s) 43,47,54,92,95,100,104,113,115,36,57,118
com/unity3d/services/core/cache/CacheThread.java, line(s) 30
com/unity3d/services/core/cache/CacheThreadHandler.java, line(s) 48,145,148,152,625,628,632,255,332,344,365,389,410,434,455,479,500,524,545,569,590
com/unity3d/services/core/configuration/ConfigurationReader.java, line(s) 39
com/unity3d/services/core/configuration/ConfigurationRequestFactory.java, line(s) 38
com/unity3d/services/core/configuration/EnvironmentCheck.java, line(s) 20,39,23,26,29,32,42
com/unity3d/services/core/configuration/ExperimentObject.java, line(s) 31
com/unity3d/services/core/configuration/ExperimentsReader.java, line(s) 31
com/unity3d/services/core/configuration/InitializationNotificationCenter.java, line(s) 65
com/unity3d/services/core/configuration/InitializeEventsMetricSender.java, line(s) 67,84,107,122,130,151
com/unity3d/services/core/configuration/InitializeThread.java, line(s) 189,197,220,412,427,503,535,633,645,665,61,70,477,512,515,542,545,585,619,669,733,826,332,419,455,807
com/unity3d/services/core/configuration/PrivacyConfigurationLoader.java, line(s) 28
com/unity3d/services/core/connectivity/ConnectivityMonitor.java, line(s) 111,127,153,100,145
com/unity3d/services/core/device/AdvertisingId.java, line(s) 176,48,58
com/unity3d/services/core/device/Device.java, line(s) 321,327,340,350,380,396,405,493,600,613,628,127
com/unity3d/services/core/device/OpenAdvertisingId.java, line(s) 167,56,63
com/unity3d/services/core/device/Storage.java, line(s) 35,39,69
com/unity3d/services/core/device/reader/DeviceInfoReaderCompressor.java, line(s) 39,43
com/unity3d/services/core/device/reader/DeviceInfoReaderExtended.java, line(s) 45
com/unity3d/services/core/domain/task/InitializeStateConfig$doWork$2.java, line(s) 54
com/unity3d/services/core/domain/task/InitializeStateCreate$doWork$2.java, line(s) 54,60,78
com/unity3d/services/core/domain/task/InitializeStateCreateWithRemote$doWork$2.java, line(s) 54,59,77
com/unity3d/services/core/domain/task/InitializeStateError$doWork$2.java, line(s) 51
com/unity3d/services/core/domain/task/InitializeStateLoadCache$doWork$2.java, line(s) 56,63
com/unity3d/services/core/domain/task/InitializeStateLoadCache.java, line(s) 86
com/unity3d/services/core/domain/task/InitializeStateLoadConfigFile$doWork$2.java, line(s) 56,64
com/unity3d/services/core/domain/task/InitializeStateLoadWeb$doWork$2.java, line(s) 103,79
com/unity3d/services/core/domain/task/InitializeStateNetworkError$doWork$2.java, line(s) 52
com/unity3d/services/core/domain/task/InitializeStateNetworkError.java, line(s) 48,66
com/unity3d/services/core/domain/task/InitializeStateReset$doWork$2.java, line(s) 63
com/unity3d/services/core/extensions/TaskExtensionsKt.java, line(s) 200
com/unity3d/services/core/log/DeviceLog.java, line(s) 180,220,227
com/unity3d/services/core/misc/JsonFlattener.java, line(s) 38
com/unity3d/services/core/misc/JsonStorage.java, line(s) 62,56,65,74,86,122,142,160,166
com/unity3d/services/core/misc/JsonStorageAggregator.java, line(s) 23
com/unity3d/services/core/misc/Utilities.java, line(s) 137,47,68,107,113,118,131
com/unity3d/services/core/misc/ViewUtilities.java, line(s) 17,26
com/unity3d/services/core/preferences/AndroidPreferences.java, line(s) 18,30,42,54,66
com/unity3d/services/core/properties/ClientProperties.java, line(s) 66,83,95,97
com/unity3d/services/core/properties/SdkProperties.java, line(s) 217,219,138
com/unity3d/services/core/reflection/GenericBridge.java, line(s) 31,38,57,72,81,87,94,100
com/unity3d/services/core/request/WebRequest.java, line(s) 260,152,160,166
com/unity3d/services/core/request/WebRequestRunnable.java, line(s) 34,38,81
com/unity3d/services/core/request/WebRequestThread.java, line(s) 44,157,171
com/unity3d/services/core/request/metrics/MetricCommonTags.java, line(s) 126
com/unity3d/services/core/request/metrics/MetricSender.java, line(s) 52,71,73,75,86,88,91
com/unity3d/services/core/request/metrics/MetricSenderWithBatch.java, line(s) 39
com/unity3d/services/core/request/metrics/SDKMetrics.java, line(s) 19,28,73,88,93
com/unity3d/services/core/sensorinfo/SensorInfoListener.java, line(s) 50
com/unity3d/services/core/timer/BaseTimer.java, line(s) 143
com/unity3d/services/core/webview/WebView.java, line(s) 82,28,108,112
com/unity3d/services/core/webview/WebViewApp.java, line(s) 115,134,155,184,379,384,147,177,218,256,272,307,361,392,394,396
com/unity3d/services/core/webview/WebViewUrlBuilder.java, line(s) 25
com/unity3d/services/core/webview/bridge/Invocation.java, line(s) 54
com/unity3d/services/core/webview/bridge/NativeCallback.java, line(s) 44
com/unity3d/services/core/webview/bridge/WebViewBridge.java, line(s) 100
com/unity3d/services/core/webview/bridge/WebViewBridgeInterface.java, line(s) 10,26
com/unity3d/services/core/webview/bridge/WebViewCallback.java, line(s) 55
com/unity3d/services/store/core/StoreLifecycleListener.java, line(s) 54
com/unity3d/services/store/gpbl/bridges/CommonJsonResponseBridge.java, line(s) 37
com/unity3d/services/store/gpbl/bridges/PurchaseBridge.java, line(s) 36
com/vungle/warren/AdActivity.java, line(s) 132,210,212,230,248
com/vungle/warren/AdEventListener.java, line(s) 95,54,66
com/vungle/warren/AdLoader.java, line(s) 484,528,550,618,679,807,1089,1137,1404,467,601,607,767,877,1241,1285,1298,1309,1388,1420,534,1167,1179,527,1483
com/vungle/warren/AdvertisementPresentationFactory.java, line(s) 497,501,181,203,210,240,286,291,302,310,313,380,385,396,403,467,491
com/vungle/warren/Banners.java, line(s) 28,33,36,41,52,96,110
com/vungle/warren/CacheBustManager.java, line(s) 27
com/vungle/warren/NativeAd.java, line(s) 230,198,193,332
com/vungle/warren/NativeAdLayout.java, line(s) 90,107,120,129,149,158,164,171,184,192,207
com/vungle/warren/Plugin.java, line(s) 25,28
com/vungle/warren/SessionTracker.java, line(s) 181,186,108,266
com/vungle/warren/Vungle.java, line(s) 166,171,453,485,1165,150,175,376,427,494,517,525,546,559,562,567,576,618,680,717,780,822,840,865,884,914,928,946,956,966,976,987,1090,1096,1144,1155,710
com/vungle/warren/VungleApiClient.java, line(s) 232,368,545,327,347,371,374,387,733,750,403,862,865,871
com/vungle/warren/VungleBanner.java, line(s) 37,46,64,89,96,107,130,133,158,198
com/vungle/warren/VungleJobRunner.java, line(s) 78
com/vungle/warren/VungleLogger.java, line(s) 52,89,98,112,74,81,41,30,63
com/vungle/warren/analytics/VungleAnalytics.java, line(s) 67,72,43,44,47,49,52,98
com/vungle/warren/downloader/AssetDownloader.java, line(s) 122,171,223,303,317,330,396,404,411,412,425,455,544,597,614,615,685,733,767,769,799,877,903,911,939,976,1014,1055,1074,1097,1136,1183,1205,1229,1237,1262,1276,1289,1316,1337,1358,1371,1405,1407,1423,1442,1479,1493,1495,1522,1541,1565,1567,1581,1641,1661,1674,1799,1834,1845,1860,1883,1895,1902,1937,1940,1944,1947,1977,1980,1984,1988,1999,2000,2002,2007,2122,2127,2154,2175,2181,2240,2252,2284,2316,153,387,535,588,676,724,790,868,929,967,1005,1046,1127,1174,1220,1253,1325,1682,2022,2077,2288,316
com/vungle/warren/downloader/CleverCache.java, line(s) 68,73,88,96,130,134,140,155,161,176,186,200,218
com/vungle/warren/log/BaseFilePersistor.java, line(s) 71,184
com/vungle/warren/log/LogManager.java, line(s) 163,168,212,217,226
com/vungle/warren/log/LogPersister.java, line(s) 78,57,138,82,93,122
com/vungle/warren/log/LogSender.java, line(s) 43,79
com/vungle/warren/model/Advertisement.java, line(s) 852
com/vungle/warren/model/Placement.java, line(s) 90
com/vungle/warren/network/OkHttpCall.java, line(s) 41,57
com/vungle/warren/persistence/CacheManager.java, line(s) 207
com/vungle/warren/persistence/FutureResult.java, line(s) 41,56,37,52,60
com/vungle/warren/persistence/GraphicDesigner.java, line(s) 65,85
com/vungle/warren/persistence/Repository.java, line(s) 240,243,540,992,1000,1006,1015,1021,1031,1040,266,309,357,777,664
com/vungle/warren/tasks/CacheBustJob.java, line(s) 81,121,143,153,178,48,75,84,87,169,171,195,46
com/vungle/warren/tasks/CleanupJob.java, line(s) 39,51,77,79,96,87,65
com/vungle/warren/tasks/JobInfo.java, line(s) 110
com/vungle/warren/tasks/SendReportsJob.java, line(s) 47,56
com/vungle/warren/tasks/runnable/JobRunnable.java, line(s) 39,48,50,56,41,61,63
com/vungle/warren/ui/JavascriptBridge.java, line(s) 22
com/vungle/warren/ui/presenter/LocalAdPresenter.java, line(s) 213,600,605,612
com/vungle/warren/ui/presenter/MRAIDAdPresenter.java, line(s) 178,482,539,603
com/vungle/warren/ui/presenter/NativeAdPresenter.java, line(s) 138,149,173,200,214,225,283,120,125
com/vungle/warren/ui/view/BaseAdView.java, line(s) 64,69
com/vungle/warren/ui/view/FullAdWidget.java, line(s) 264,321,331
com/vungle/warren/ui/view/LocalAdView.java, line(s) 195,127,152
com/vungle/warren/ui/view/NativeAdView.java, line(s) 83
com/vungle/warren/ui/view/VungleBannerView.java, line(s) 80,223,227
com/vungle/warren/ui/view/VungleWebClient.java, line(s) 67,106,184,69,210,211,221,222,232,233,258,296
com/vungle/warren/utility/ActivityManager.java, line(s) 285
com/vungle/warren/utility/CookieUtil.java, line(s) 19
com/vungle/warren/utility/ExternalRouter.java, line(s) 23,22,39
com/vungle/warren/utility/FileUtility.java, line(s) 186,227,238,246,103,107
com/vungle/warren/utility/ImageLoader.java, line(s) 44,46,71
com/vungle/warren/utility/ImpressionTracker.java, line(s) 64,69
com/vungle/warren/utility/NetworkProvider.java, line(s) 139,82
com/vungle/warren/utility/UnzipUtility.java, line(s) 131
com/vungle/warren/utility/VungleUrlUtility.java, line(s) 13
com/vungle/warren/utility/platform/AndroidPlatform.java, line(s) 108,133,136,141,192,121
com/yasirkula/unity/NativeShare.java, line(s) 27,121
io/huq/hsa/debug/HILogger.java, line(s) 26,27
org/fmod/FMODAudioDevice.java, line(s) 72
org/fmod/a.java, line(s) 76

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/bytedance/sdk/openadsdk/common/h.java, line(s) 5,83
com/smaato/sdk/core/browser/BrowserPresenter.java, line(s) 4,185
com/unity3d/player/UnityPlayer.java, line(s) 8,1337

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
com/inmobi/media/dm.java, line(s) 68,71
com/mbridge/msdk/thrid/okhttp/internal/Util.java, line(s) 610,609,608,608

安全 此应用程序可能具有Root检测功能 

此应用程序可能具有Root检测功能
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
com/apm/insight/nativecrash/c.java, line(s) 522,522,522,522,522
com/bytedance/sdk/openadsdk/n/aa.java, line(s) 615,616
com/gameanalytics/sdk/GAPlatform.java, line(s) 340,348,344,348,348,348,348,76,334

关注 应用程序可能与位于OFAC制裁国家 (Hong Kong) 的服务器 (init.supersonicads.com) 通信。 

{'ip': '54.192.18.70', 'country_short': 'HK', 'country_long': 'Hong Kong', 'region': 'Hong Kong', 'city': 'Hong Kong', 'latitude': '22.285521', 'longitude': '114.157692'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (firebase-settings.crashlytics.com) 通信。 

{'ip': '180.163.150.34', 'country_short': 'CN', 'country_long': 'China', 'region': 'Shanghai', 'city': 'Shanghai', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (www.linkedin.com) 通信。 

{'ip': '52.130.75.155', 'country_short': 'CN', 'country_long': 'China', 'region': 'Shanghai', 'city': 'Shanghai', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (Hong Kong) 的服务器 (sdk-hb-cfg.smaato.net) 通信。 

{'ip': '54.192.18.88', 'country_short': 'HK', 'country_long': 'Hong Kong', 'region': 'Hong Kong', 'city': 'Hong Kong', 'latitude': '22.285521', 'longitude': '114.157692'}

关注 应用程序可能与位于OFAC制裁国家 (Hong Kong) 的服务器 (i.l.inmobicdn.net) 通信。 

{'ip': '152.199.39.108', 'country_short': 'HK', 'country_long': 'Hong Kong', 'region': 'Hong Kong', 'city': 'Hong Kong', 'latitude': '22.285521', 'longitude': '114.157692'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (googleads.g.doubleclick.net) 通信。 

{'ip': '180.163.150.38', 'country_short': 'CN', 'country_long': 'China', 'region': 'Shanghai', 'city': 'Shanghai', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (app-measurement.com) 通信。 

{'ip': '180.163.151.161', 'country_short': 'CN', 'country_long': 'China', 'region': 'Shanghai', 'city': 'Shanghai', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (Hong Kong) 的服务器 (ws.tapjoyads.com) 通信。 

{'ip': '13.225.103.112', 'country_short': 'HK', 'country_long': 'Hong Kong', 'region': 'Hong Kong', 'city': 'Hong Kong', 'latitude': '22.285521', 'longitude': '114.157692'}

关注 应用程序可能与位于OFAC制裁国家 (Hong Kong) 的服务器 (sdk-files.smaato.net) 通信。 

{'ip': '54.192.18.21', 'country_short': 'HK', 'country_long': 'Hong Kong', 'region': 'Hong Kong', 'city': 'Hong Kong', 'latitude': '22.285521', 'longitude': '114.157692'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (pagead2.googlesyndication.com) 通信。 

{'ip': '180.163.151.166', 'country_short': 'CN', 'country_long': 'China', 'region': 'Shanghai', 'city': 'Shanghai', 'latitude': '31.224333', 'longitude': '121.468948'}

安全评分: ( Perfume Of Love 2.14.9)