安全分析报告: Picsart v24.6

安全分数


安全分数 45/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

14

用户/设备跟踪器


调研结果

高危 9
中危 45
信息 3
安全 3
关注 11

高危 已启用远程WebView调试

已启用远程WebView调试
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
com/applovin/impl/adview/d.java, line(s) 101,8
com/applovin/impl/adview/y.java, line(s) 19,6
com/fyber/inneractive/sdk/web/d.java, line(s) 369,7

高危 应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式,因为它对相同的明文块[UNK]产生相同的密文

应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式,因为它对相同的明文块[UNK]产生相同的密文
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-block-cipher-mode

Files:
com/inmobi/media/x2.java, line(s) 204
com/inmobi/media/y3.java, line(s) 25

高危 WebView域控制不严格漏洞

WebView域控制不严格漏洞


Files:
com/applovin/impl/adview/y.java, line(s) 17,14
com/picsart/jedi/presentation/view/webview/JediWebView.java, line(s) 109,106
com/picsart/studio/picsart/profile/activity/WebViewActivity.java, line(s) 293,292,293,294
myobfuscated/vj2/a.java, line(s) 99,92,133

高危 该文件是World Writable。任何应用程序都可以写入文件

该文件是World Writable。任何应用程序都可以写入文件
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
botX/mod/p/C0084.java, line(s) 22
myobfuscated/jh2/a.java, line(s) 195

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
com/applovin/impl/adview/b.java, line(s) 414,14
com/applovin/impl/sdk/e/s.java, line(s) 94,4
com/braze/ui/inappmessage/views/InAppMessageHtmlBaseView.java, line(s) 375,17
com/fyber/inneractive/sdk/activities/InneractiveInternalBrowserActivity.java, line(s) 200,12
com/fyber/inneractive/sdk/config/r.java, line(s) 29,4

高危 该文件是World Readable。任何应用程序都可以读取文件

该文件是World Readable。任何应用程序都可以读取文件
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
botX/mod/p/C0084.java, line(s) 23
com/appsflyer/internal/AFb1vSDK.java, line(s) 259

高危 默认情况下,调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知,ECB模式很弱,因为它导致相同明文块的密文相同

默认情况下,调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知,ECB模式很弱,因为它导致相同明文块的密文相同
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-block-cipher-mode

Files:
botX/mod/p/C0084.java, line(s) 105

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/fyber/inneractive/sdk/player/exoplayer2/extractor/hls/a.java, line(s) 38
myobfuscated/tv/a.java, line(s) 59

高危 应用程序包含隐私跟踪程序

此应用程序有多个14隐私跟踪程序。跟踪器可以跟踪设备或用户,是终端用户的隐私问题。

中危 应用程序存在Janus漏洞

应用程序使用了v1签名方案进行签名,如果只使用v1签名方案,那么它就容易受到安卓5.0-8.0上的Janus漏洞的攻击。在安卓5.0-7.0上运行的使用了v1签名方案的应用程序,以及同时使用了v2/v3签名方案的应用程序也同样存在漏洞。

中危 应用程序可以安装在有漏洞的已更新 Android 版本上

Android 6.0-6.0.1, [minSdk=23]
该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。

中危 应用程序数据可以被备份

[android:allowBackup=true]
这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。

中危 Activity (com.picsart.deeplink.DeepLinkActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.picsart.studio.editor.video.VideoNewActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.picsart.studio.editor.blooper.BlooperActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.socialin.android.photo.picsinphoto.MainActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Broadcast Receiver (com.amazon.device.iap.ResponseReceiver) 未被保护。

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.socialin.android.preference.PreferencesActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Broadcast Receiver (com.picsart.studio.widget.PicsartAppWidgetProvider) 未被保护。

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Broadcast Receiver (com.picsart.studio.common.NetworkStateReceiver) 未被保护。

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.kakao.sdk.auth.AuthCodeHandlerActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (jp.line.android.sdk.activity.LineAuthCompleteActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.dropbox.core.android.AuthActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Content Provider (com.facebook.FacebookContentProvider) 未被保护。

[android:exported=true]
发现 Content Provider与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.snapchat.kit.sdk.SnapKitActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.picsart.pinterest.PinterestAuthActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.linecorp.linesdk.auth.internal.LineAuthenticationCallbackActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.picsart.video.blooper.BlooperActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.picsart.analytics.settings.preview.ui.PAPreviewActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.facebook.CustomTabActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护, 但是应该检查权限的保护级别。

Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity设置了TaskAffinity属性

(com.braze.push.NotificationTrampolineActivity)
如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名

中危 Service (androidx.work.impl.background.systemjob.SystemJobService) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity (androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.picsart.jedi.presentation.deeplink.AuthActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Broadcast Receiver (androidx.profileinstaller.ProfileInstallReceiver) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (com.google.android.play.core.assetpacks.AssetPackExtractionService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.amazon.aps.ads.activity.ApsInterstitialActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 Activity (com.amazon.device.ads.DTBInterstitialActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

中危 应用程序使用不安全的随机数生成器

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/applovin/exoplayer2/h/z.java, line(s) 4
com/applovin/impl/b/m.java, line(s) 15
com/appsflyer/internal/AFb1hSDK.java, line(s) 21
com/appsflyer/internal/AFc1fSDK.java, line(s) 20
com/braze/support/IntentUtils.java, line(s) 12
com/dropbox/core/android/AuthActivity.java, line(s) 15
com/dropbox/core/c.java, line(s) 23
com/fyber/inneractive/sdk/config/global/s.java, line(s) 13
com/fyber/inneractive/sdk/player/exoplayer2/upstream/cache/i.java, line(s) 21
com/inmobi/media/a1.java, line(s) 24
com/inmobi/media/f.java, line(s) 11
com/inmobi/media/f2.java, line(s) 4
com/inmobi/media/i9.java, line(s) 29
com/inmobi/media/w9.java, line(s) 11
com/picsart/appstart/items/SignatureCheckInit.java, line(s) 11
com/picsart/chooser/panel/image/ImageListView.java, line(s) 19
com/picsart/create/selection/factory/CanvasEffectLoader.java, line(s) 27
com/picsart/create/selection/factory/SketchEffectLoader.java, line(s) 38
com/picsart/masker/BrushViewModel.java, line(s) 43
com/picsart/picore/temp/RandomXS128.java, line(s) 3
com/picsart/studio/apiv3/model/card/Card.java, line(s) 23
com/picsart/studio/brushlib/brush/c.java, line(s) 8
com/picsart/studio/brushlib/brush/g.java, line(s) 8
com/picsart/studio/brushlib/brush/k.java, line(s) 12
com/picsart/studio/editor/tools/addobjects/core/ItemPositioningUtilsKt.java, line(s) 90
myobfuscated/bj2/b.java, line(s) 3
myobfuscated/bl2/a.java, line(s) 8
myobfuscated/bl2/b.java, line(s) 3
myobfuscated/cf2/n.java, line(s) 3
myobfuscated/cl2/a.java, line(s) 3
myobfuscated/df2/c.java, line(s) 7
myobfuscated/jf2/d.java, line(s) 9
myobfuscated/jf2/f.java, line(s) 8
myobfuscated/nq2/b.java, line(s) 5
myobfuscated/nq2/c.java, line(s) 4
myobfuscated/o7/a.java, line(s) 9
myobfuscated/o7/b.java, line(s) 6
myobfuscated/of/i.java, line(s) 51
myobfuscated/ph/a.java, line(s) 16
myobfuscated/ph/c.java, line(s) 13
myobfuscated/ph/d.java, line(s) 19
myobfuscated/qp/a.java, line(s) 10
myobfuscated/qq2/c0.java, line(s) 4
myobfuscated/sc0/j.java, line(s) 19
myobfuscated/v2/t.java, line(s) 87
myobfuscated/vm1/c.java, line(s) 3

中危 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等

文件可能包含硬编码的敏感信息,如用户名、密码、密钥等
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
coil/memory/MemoryCache.java, line(s) 77
com/amazon/device/ads/DTBAdInterstitial.java, line(s) 14
com/amazon/device/ads/DTBAdLoader.java, line(s) 5,6,8,7,9
com/amazon/device/ads/DTBAdRequest.java, line(s) 46
com/amazon/device/ads/DTBMetricsConfiguration.java, line(s) 19,20,21
com/amazon/device/ads/DtbConstants.java, line(s) 62,7,13,9,10,11,12,65,66
com/amazon/device/ads/DtbDeviceData.java, line(s) 24,25,26,27,28,29,30,31,32,33,34,35,36
com/amazon/device/ads/DtbDeviceRegistration.java, line(s) 25,26,27,29,30
com/applovin/impl/mediation/c/a/a.java, line(s) 36
com/applovin/mediation/ads/MaxAdView.java, line(s) 184,172
com/applovin/mediation/ads/MaxAppOpenAd.java, line(s) 74,62
com/applovin/mediation/ads/MaxInterstitialAd.java, line(s) 97,85
com/applovin/mediation/ads/MaxRewardedAd.java, line(s) 128,116
com/applovin/mediation/ads/MaxRewardedInterstitialAd.java, line(s) 92,80
com/applovin/mediation/nativeAds/MaxNativeAdLoader.java, line(s) 103,97
com/applovin/sdk/AppLovinSdk.java, line(s) 256
com/applovin/sdk/AppLovinSdkSettings.java, line(s) 166
com/applovin/sdk/AppLovinWebViewActivity.java, line(s) 24
com/beautify/studio/impl/blemishFix/history/FadeSavedData.java, line(s) 51
com/braze/configuration/BrazeConfig.java, line(s) 471,471
com/bumptech/glide/load/engine/g.java, line(s) 90
com/inmobi/commons/core/configs/AdConfig.java, line(s) 422
com/inmobi/media/k0.java, line(s) 18
com/inmobi/unification/sdk/model/Initialization/TimeoutConfigurations.java, line(s) 64,49
com/picsart/NotificationSettings.java, line(s) 78
com/picsart/analytics/SettingsGetFieldError.java, line(s) 16
com/picsart/auth/signup/entity/model/MagicLinkBranchData.java, line(s) 86
com/picsart/comments/impl/suggestion/b.java, line(s) 61
com/picsart/detection/data/service/MaskCacheServiceImpl.java, line(s) 119,310,349
com/picsart/editor/data/service/bitmap/BitmapCacheServiceImpl.java, line(s) 115,269
com/picsart/growth/entities/NotificationSettings.java, line(s) 88,89
com/picsart/home/FeedUiModel.java, line(s) 376
com/picsart/image/Prompt.java, line(s) 99
com/picsart/jedi/auth/thirdparty/model/OauthRequest.java, line(s) 94
com/picsart/jedi/context/UserInfo.java, line(s) 75
com/picsart/payment/impl/subscription/ui/ShopSubscribeActivity.java, line(s) 91
com/picsart/sharesheet/api/ShareTargetData.java, line(s) 322
com/picsart/studio/apiv3/model/NotificationSettings.java, line(s) 181,182
com/picsart/studio/apiv3/model/ReplayConfigKt.java, line(s) 8
com/picsart/studio/apiv3/model/ReplayHistoryCardConfig.java, line(s) 223
com/picsart/studio/apiv3/model/SearchAnalyticsHelper.java, line(s) 325
com/picsart/studio/apiv3/model/Settings.java, line(s) 33
com/picsart/studio/editor/video/addobject/VideoEditorItemEditorNavCoordinatorImpl.java, line(s) 63
com/picsart/user/model/User.java, line(s) 228
com/snapchat/kit/sdk/core/security/SecretKeyFactory.java, line(s) 21
com/vk/api/sdk/VKApiCredentials.java, line(s) 45
com/vk/api/sdk/a.java, line(s) 245
com/vungle/ads/internal/task/CleanupJob.java, line(s) 24
io/jsonwebtoken/JwsHeader.java, line(s) 7
myobfuscated/ak1/c.java, line(s) 83
myobfuscated/b6/d.java, line(s) 35
myobfuscated/bs1/c.java, line(s) 55
myobfuscated/c10/a.java, line(s) 54
myobfuscated/c10/d.java, line(s) 69
myobfuscated/c10/k.java, line(s) 81
myobfuscated/dd0/d.java, line(s) 177,229
myobfuscated/eh1/a.java, line(s) 77
myobfuscated/gy0/f.java, line(s) 39
myobfuscated/is1/d.java, line(s) 58
myobfuscated/j01/b.java, line(s) 73
myobfuscated/k30/a.java, line(s) 36
myobfuscated/k52/g.java, line(s) 61
myobfuscated/kd0/j.java, line(s) 75
myobfuscated/li1/y0.java, line(s) 57
myobfuscated/lj1/c.java, line(s) 364
myobfuscated/lw1/h.java, line(s) 84
myobfuscated/my0/k.java, line(s) 27
myobfuscated/nf/v0.java, line(s) 137
myobfuscated/of/h.java, line(s) 239
myobfuscated/p91/l.java, line(s) 31
myobfuscated/qm0/f.java, line(s) 59
myobfuscated/qm0/g.java, line(s) 42
myobfuscated/qm0/w.java, line(s) 115
myobfuscated/r0/n0.java, line(s) 27
myobfuscated/ri0/a.java, line(s) 92
myobfuscated/sm1/b.java, line(s) 87
myobfuscated/td/d.java, line(s) 85
myobfuscated/u00/a.java, line(s) 55
myobfuscated/u00/b.java, line(s) 63
myobfuscated/vw1/i.java, line(s) 76
myobfuscated/w/b.java, line(s) 11
myobfuscated/wf/c.java, line(s) 49
myobfuscated/xq1/b.java, line(s) 51
myobfuscated/y91/c.java, line(s) 42
myobfuscated/yj0/e.java, line(s) 54
myobfuscated/zd2/i.java, line(s) 96
myobfuscated/zf/c.java, line(s) 35
myobfuscated/zf/m.java, line(s) 73

中危 IP地址泄露

IP地址泄露


Files:
com/applovin/mediation/adapters/NimbusMediationAdapter.java, line(s) 28
com/applovin/mediation/adapters/amazonadmarketplace/BuildConfig.java, line(s) 9
com/applovin/mediation/adapters/facebook/BuildConfig.java, line(s) 9
com/applovin/mediation/adapters/google/BuildConfig.java, line(s) 9
com/applovin/mediation/adapters/inmobi/BuildConfig.java, line(s) 9
com/applovin/mediation/adapters/inneractive/BuildConfig.java, line(s) 9
com/applovin/mediation/adapters/vungle/BuildConfig.java, line(s) 9
myobfuscated/eq2/b.java, line(s) 5
myobfuscated/hq2/b.java, line(s) 41,75
myobfuscated/iq2/b.java, line(s) 21
myobfuscated/iv/c.java, line(s) 48
myobfuscated/jq2/g.java, line(s) 80,95

中危 MD5是已知存在哈希冲突的弱哈希

MD5是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/braze/support/StringUtils.java, line(s) 87
com/fyber/inneractive/sdk/player/cache/h.java, line(s) 470
com/picsart/analytics/drm/a.java, line(s) 37
com/picsart/common/util/HardwareUtils.java, line(s) 172
com/picsart/editor/data/service/online/OnlineToolResourceProviderImpl.java, line(s) 126
com/picsart/imagebrowser/domain/BrowserFileDownloadUseCase$bind$3$1.java, line(s) 71
com/picsart/search/domain/SearchFileDownloadUseCase$bind$3$1.java, line(s) 72
com/socialin/android/preference/VersionPreference.java, line(s) 84
myobfuscated/d42/k.java, line(s) 102
myobfuscated/jy/e.java, line(s) 89
myobfuscated/sr/e.java, line(s) 112
myobfuscated/vi2/e.java, line(s) 192
myobfuscated/yj/h.java, line(s) 38
myobfuscated/ym1/f.java, line(s) 36

中危 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据

应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/beautify/studio/impl/common/extension/a.java, line(s) 228
com/beautify/studio/impl/relight/RelightFragment$initDetection$1.java, line(s) 208,210
com/fyber/inneractive/sdk/network/l0.java, line(s) 29
com/fyber/inneractive/sdk/util/p.java, line(s) 208
com/fyber/inneractive/sdk/web/i.java, line(s) 595
com/inmobi/media/o3.java, line(s) 96,99,181,184
com/picsart/CoreModulesKt.java, line(s) 267
com/picsart/common/util/FileUtils.java, line(s) 332,453
com/picsart/createflow/c.java, line(s) 580
com/picsart/device/DeviceInfoRepoImpl$getAvailableExternalMemorySize$2.java, line(s) 47,46
com/picsart/draw/history/service/StorageServiceImpl$getDrawingExternalLegacyFolder$2.java, line(s) 39
com/picsart/draw/service/a.java, line(s) 99,112,55
com/picsart/editor/common/EditorCommonModuleKt.java, line(s) 1282
com/picsart/editor/data/repo/bitmap/BitmapExportRepoImpl.java, line(s) 414
com/picsart/export/impl/external/media/ExternalStorageMediaExportImpl.java, line(s) 55
com/picsart/export/save/RealBitmapToGallerySaveManager$saveToGallery$2.java, line(s) 66
com/picsart/jedi/download/DownloadRepoImpl$startDownload$2.java, line(s) 127
com/picsart/jedi/download/DownloadRepoImpl.java, line(s) 149
com/picsart/service/share/SaveImageServiceImpl.java, line(s) 80
com/picsart/studio/brushlib/brush/BrushHistory.java, line(s) 54
com/picsart/studio/editor/tool/dispersion/Tutorials.java, line(s) 39
com/picsart/studio/editor/tool/drawing/a.java, line(s) 691,1071,1378,1633
com/picsart/studio/editor/tool/drawing/b.java, line(s) 80
com/picsart/studio/sociallibs/util/SaveToGalleryUtilsKt$saveToGallery$2.java, line(s) 113,113
com/socialin/android/photo/draw/DrawingActivity.java, line(s) 3185,3386
com/socialin/android/photo/draw/DrawingActivityNew.java, line(s) 2061
com/socialin/android/photo/effectsnew/genai/GenAiLoadingDialog.java, line(s) 164
com/socialin/android/preference/PrefFragment.java, line(s) 779
myobfuscated/ah2/j2.java, line(s) 38
myobfuscated/ah2/v.java, line(s) 50
myobfuscated/be/b.java, line(s) 160
myobfuscated/cc2/a.java, line(s) 143
myobfuscated/dk0/e.java, line(s) 25
myobfuscated/dr1/o.java, line(s) 27
myobfuscated/me0/j.java, line(s) 146
myobfuscated/of/i.java, line(s) 425,437
myobfuscated/pj2/a.java, line(s) 185
myobfuscated/su1/g.java, line(s) 26,29
myobfuscated/tk/g.java, line(s) 47,47
myobfuscated/tq1/c.java, line(s) 64,179
myobfuscated/tr/e0.java, line(s) 36
myobfuscated/vm1/g.java, line(s) 17
myobfuscated/vm1/h.java, line(s) 83
myobfuscated/yz1/d.java, line(s) 385

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
com/amazon/device/ads/DTBMetricsConfiguration.java, line(s) 243
com/amazon/device/ads/WebResourceService.java, line(s) 109
myobfuscated/b4/a.java, line(s) 1141
myobfuscated/yz1/d.java, line(s) 795

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
com/inmobi/media/i3.java, line(s) 6,102
com/picsart/shopNew/lib_shop/utils/a.java, line(s) 6,7,332
com/socialin/android/photo/database/PicsartProvider.java, line(s) 10,11,12,57
myobfuscated/ao/b.java, line(s) 5,6,24
myobfuscated/ao/c.java, line(s) 7,34
myobfuscated/c9/d.java, line(s) 7,185
myobfuscated/hi1/d.java, line(s) 8,471
myobfuscated/mp/b.java, line(s) 6,45
myobfuscated/mp/f.java, line(s) 7,8,81
myobfuscated/sn/e.java, line(s) 4,26
myobfuscated/tn/n.java, line(s) 5,6,187
myobfuscated/tn/p.java, line(s) 3,8
myobfuscated/tn/q.java, line(s) 3,8
myobfuscated/tn/r.java, line(s) 3,8
myobfuscated/tn/s.java, line(s) 3,8
myobfuscated/tn/t.java, line(s) 3,8
myobfuscated/tn/u.java, line(s) 4,5,43
myobfuscated/w7/a.java, line(s) 4,53
myobfuscated/x7/f.java, line(s) 3,35
myobfuscated/x7/v.java, line(s) 6,76
myobfuscated/yg2/a.java, line(s) 3,4,13

中危 SHA-1是已知存在哈希冲突的弱哈希

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/amazon/device/ads/DtbDeviceData.java, line(s) 75
com/applovin/impl/sdk/utils/StringUtils.java, line(s) 74
com/applovin/impl/sdk/utils/o.java, line(s) 94
com/bugsnag/android/b.java, line(s) 59
com/fyber/inneractive/sdk/player/cache/h.java, line(s) 457
myobfuscated/dk/d.java, line(s) 26
myobfuscated/ft/a.java, line(s) 69
myobfuscated/kt/m.java, line(s) 70
myobfuscated/tv/a.java, line(s) 58
myobfuscated/yj/j.java, line(s) 65,109

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
com/fyber/inneractive/sdk/web/r.java, line(s) 459,451
com/inmobi/media/eb.java, line(s) 1153,1099

中危 此应用可能包含硬编码机密信息

从应用程序中识别出以下机密确保这些不是机密或私人信息
AdMob广告平台的 "com.google.android.gms.ads.APPLICATION_ID" : "ca-app-pub-1876933753768597~4673452713"
Line-SDK的 "line_channel_id" : "1462207286"
Bugsnag-SDK的 "com.bugsnag.android.API_KEY" : "1d6f7a7ea6858f535c5ee2303a19f040"
AppLovin广告SDK的 "applovin.sdk.key" : "@string/applovin_sdk_key"
"profile_incorrect_password" : "パスワードが正しくありません"
"com_braze_image_lru_cache_image_url_key" : "com_braze_image_lru_cache_image_url_key"
"profile_private" : "Անձնական"
"profile_private" : "私人"
"remix_number_private" : "(%sخصوصی)"
"preference_key_notifications_enable_fte_used" : "notifications_enable_fte_used"
"padrive_unable_to_invite_user" : "ユーザーを招待できません"
"registration_add_username" : "請添加一個用戶名"
"profile_unblock_user" : "您可以隨時前往此用戶的個人資料頁面並取消屏蔽其賬號。。"
"preference_key_notifications_enable_user_tag" : "notifications_enable_user_tag"
"internal_components_username" : "ชื่อผู้ใช้:"
"profile_private" : "Prywatne"
"profile_incorrect_password" : "密码不正确"
"preference_key_notifications_enable_photo_viewed" : "notifications_enable_photo_viewed"
"choosers_font_certificate" : "フォント証明書"
"profile_private" : "निजी"
"shop_picsart_user" : "Picsart-Benutzer"
"registration_pick_you_username" : "請選擇一個用戶名!"
"mmedia_app_key" : "98865"
"com_braze_firebase_cloud_messaging_sender_id" : "1076413845392"
"profile_reporting_user" : "このユーザーを報告する理由"
"google_api_key" : "AIzaSyAyM0pK-60U20IVraOzIldFFPE5Nsy6cvA"
"registration_add_password" : "请添加密码"
"profile_report_user" : "รายงานผู้ใช้"
"gen_block_user" : "Заблокировать"
"profile_report_user" : "Laporkan"
"internal_components_username" : "ユーザー名:"
"preference_key_notifications_enable_challenges" : "notifications_challenges"
"registration_add_password" : "パスワードを追加してください"
"profile_private_posts_go_here" : "私人帖子在這裡"
"profile_authentication_not_completed" : "アカウントの認証を完了できませんでした。再度お試しください。"
"internal_components_username" : "Username:"
"padrive_unable_to_invite_user" : "ไม่สามารถเชิญผู้ใช้ได้"
"profile_set_password" : "设置密码"
"profile_private" : "Privado"
"registration_pick_you_username" : "ユーザー名を選ぼう!"
"profile_private" : "ব্যক্তিগত"
"profile_incorrect_password" : "密碼不正確"
"profile_reporting_user" : "您为什么举报此用户?"
"growth_authenticate" : "Autenticar"
"profile_you_blocked_user" : "您已屏蔽%s"
"preference_key_notifications_enable_system" : "notifications_enable_system"
"profile_private" : "ส่วนตัว"
"shop_picsart_user" : "Picsart美易用户"
"maps_api_key" : "0f7l2mGu8DncAhmAz_e8oyhJcdTnfu_n8hycTNQ"
"profile_private" : "Privato"
"growth_authenticate" : "Authentifizieren"
"profile_edit_remixed_posted_privately" : "มีการรีมิกซ์ผลงานของคุณและโพสต์แบบส่วนตัว"
"gen_block_user" : "ユーザーをブロック"
"unblock_user" : "ブロックを解除"
"gen_block_user" : "ป้องกันผู้ใช้"
"unblock_user" : "Odblokuj"
"growth_authenticate" : "Autentica"
"growth_authenticate" : "Նույնականացում"
"share_saved_private" : "已保存至仅自己可见收藏夹。"
"internal_components_username" : "Benutzername:"
"preference_key_notifications_enable_pa_promotions" : "notifications_push_pa_promotions"
"profile_private" : "非公開"
"choosers_font_certificate" : "ใบรับรองฟอนต์"
"share_saving_private" : "บันทึกในคอลเลกชันส่วนตัวของคุณ"
"profile_edit_remixed_posted_privately" : "您的作品被再次合成
且被發布"
"share_saving_private" : "保存至仅自己可见收藏夹。"
"preference_key_notifications_enable_email" : "notifications_email"
"com_facebook_device_auth_instructions" : "<b>facebook.com/device</b>にアクセスして、上記のコードを入力してください。"
"growth_secure_password" : "設置密碼保護您的賬號"
"unblock_user" : "解除锁定"
"preference_key_notifications_enable_stickers" : "notifications_push_fte_stickers"
"registration_add_username" : "ユーザー名を追加してください"
"profile_private" : "Özel"
"growth_authenticate" : "مصادقة"
"preference_key_notifications_enable_save" : "notifications_save"
"profile_private_posts_go_here" : "โพสแบบส่วนตัวไปที่นี่"
"profile_block_user" : "屏蔽%s?"
"profile_report_user" : "ユーザーを報告"
"growth_authenticate" : "認証する"
"profile_unblock_user" : "คุณปลดล็อกผู้ใช้รายนี้ได้ทุกเมื่อโดยไปที่โปรไฟล์ของบุคคลดังกล่าว"
"pinterest_secret" : "95cf6aee6554991520ee29a65d29cd0afa0da42c"
"google_crash_reporting_api_key" : "AIzaSyAyM0pK-60U20IVraOzIldFFPE5Nsy6cvA"
"profile_private" : "Privé"
"kii_app_key" : "0f0440e8f2470a9321f8a7bc554a518e"
"growth_authenticate" : "Authenticate"
"profile_edit_remixed_posted_privately" : "您的作品被再次合成
且被发布"
"growth_authenticate" : "Authentifier"
"profile_private" : "Privat"
"growth_authenticate" : "验证"
"preference_key_notifications_enable_shop_purchased" : "notifications_enable_shop"
"profile_set_password" : "設置密碼"
"unblock_user" : "Débloquer"
"padrive_unable_to_invite_user" : "无法邀请用户"
"preference_key_notifications_enable_messaging" : "notifications_enable_messaging"
"com_braze_api_key" : "260aaa4e-e2ad-46eb-b881-4fa669a45d89"
"profile_unblock_user" : "このユーザーのプロフィールにアクセスして、いつでもブロックを解除できます"
"profile_incorrect_password" : "รหัสผ่านไม่ถูกต้อง"
"onboarding_email_username" : "电子邮件或用户名"
"ethyca_is_allowed_key" : "isAllowed"
"growth_secure_password" : "パスワードで安全を確保してください"
"profile_set_password" : "Définir"
"profile_reporting_user" : "您為什麼舉報此用戶?"
"onboarding_email_username" : "メールアドレスまたはユーザー名"
"profile_reporting_user" : "เหตุใดคุณจึงรายงานผู้ใช้รายนี้"
"unblock_user" : "Unblock"
"choosers_font_certificate" : "Schrift-Zertifikat"
"share_saving_private" : "非公開コレクションに保存中"
"growth_authenticate" : "Uwierzytelnij"
"growth_authenticate" : "Autentificar"
"profile_you_blocked_user" : "%sをブロックしました"
"growth_authenticate" : "প্রমাণীকরণ"
"growth_secure_password" : "设置密码保护您的账号"
"registration_add_password" : "請添加密碼"
"preference_key_notifications_enable_mention" : "notifications_enable_mention"
"unblock_user" : "เลิกบล็อก"
"preference_key_notifications_enable_fte_stickers" : "notifications_app_fte_stickers"
"profile_private" : "Private"
"unblock_user" : "Разблокировка"
"shop_picsart_user" : "Picsart用戶"
"profile_set_password" : "パスワード設定"
"gen_block_user" : "屏蔽用戶"
"profile_authentication_not_completed" : "抱歉,您的账号身份验证无法完成。请重试。"
"profile_private_posts_go_here" : "私人帖子在这里"
"growth_authenticate" : "Autentikasi"
"profile_private" : "شخصي"
"internal_components_username" : "用户名:"
"choosers_font_certificate" : "字體認證"
"profile_private" : "شخصی"
"profile_report_user" : "报告用户"
"registration_add_password" : "กรุณาใส่รหัสผ่าน"
"profile_set_password" : "ตั้งรหัสผ่าน"
"com_braze_image_is_read_tag_key" : "com_appboy_image_is_read_tag_key"
"onboarding_email_username" : "อีเมลหรือชื่อผู้ใช้"
"internal_components_username" : "用戶名:"
"padrive_unable_to_invite_user" : "無法邀請用戶"
"registration_add_username" : "กรุณาเพิ่มชื่อผู้ใช้"
"preference_key_notifications_enable_comments" : "notifications_enable_comments"
"com_braze_image_resize_tag_key" : "com_appboy_image_resize_tag_key"
"registration_add_username" : "请添加一个用户名"
"growth_secure_password" : "รักษาความปลอดภัยด้วยรหัสผ่าน"
"unblock_user" : "Desbloquear"
"growth_authenticate" : "인증"
"profile_private" : "비공개"
"share_saved_private" : "บันทึกในคอลเลกชันส่วนตัวของคุณแล้ว"
"profile_block_user" : "%sをブロックしますか?"
"share_saved_private" : "非公開コレクションに保存されました"
"gen_block_user" : "屏蔽用户"
"share_saving_private" : "保存至僅自己可見收藏夾。"
"firebase_database_url" : "https://api-project-1076413845392.firebaseio.com"
"profile_report_user" : "報告用戶"
"share_saved_private" : "已保存至僅自己可見收藏夾。"
"preference_key_notifications_enable_friend_joined" : "notifications_enable_friend_joined"
"remix_edit_posted_privately" : "มีการรีมิกซ์ผลงานนี้และโพสต์แบบเป็นส่วนตัว"
"onboarding_email_username" : "電子郵件或用戶名"
"profile_private_posts_go_here" : "非公開投稿はこちら"
"profile_private" : "Pribadi"
"applovin_sdk_key" : "UWfqLopngRJM8DuxFW0QHBai_oSHXuzOK68Wu9dkLD3TGzyc6Ribgrpq9hXI9tNFp-oaN9gPFdgpV0R_E4USKr"
"registration_pick_you_username" : "请选择一个用户名!"
"preference_key_notifications_enable_likes" : "notifications_enable_likes"
"profile_private" : "Скрытое"
"registration_pick_you_username" : "มาเลือกชื่อผู้ใช้กันเถอะ!"
"preference_key_notifications_enable_follow" : "notifications_enable_follow"
"growth_authenticate" : "驗證"
"unblock_user" : "解除鎖定"
"choosers_font_certificate" : "字体认证"
"unblock_user" : "Sblocca"
"profile_unblock_user" : "您可以随时前往此用户的个人资料页面并取消屏蔽其账号。"
"profile_authentication_not_completed" : "抱歉,您的賬號身份驗證無法完成。請重試。"
"growth_authenticate" : "ตรวจสอบสิทธิ์"
a23456789012345bcdef
07A11B09A76B562144418FF3FF8C2570B8
07B6882CAAEFA84F9554FF8428BD88E246D2782AE2
985BD3ADBAD4D696E676875615175A21B43A97E3
0405F939258DB7DD90E1934F8C70B0DFEC2EED25B8557EAC9C80E2E198F8CDBECD86B1205303676854FE24141CB98FE6D4B20D02B4516FF702350EDDB0826779C813F0DF45BE8112F4
047B6AA5D85E572983E6FB32A7CDEBC14027B6916A894D3AEE7106FE805FC34B44
6b9e819a73766e2ca24d983923728b8c
9ba48cba5ebcb9b6bd33b92830b2a2e0e192f10a
0307AF69989546103D79329FCC3D74880F33BBE803CB
f906ca85-fd92-43f4-bca4-f940316415d5
D35E472036BC4FB7E13C785ED201E065F98FCFA6F6F40DEF4F92B9EC7893EC28FCD412B1F1B32E24
010090512DA9AF72B08349D98A5DD4C7B0532ECA51CE03E2D10F3B7AC579BD87E909AE40A6F131E9CFCE5BD967
03F7061798EB99E238FD6F1BF95B48FEEB4854252B
662C61C430D84EA4FE66A7733D0B76B7BF93EBC4AF2F49256AE58101FEE92B04
E95E4A5F737059DC60DFC7AD95B3D8139515620C
E95E4A5F737059DC60DF5991D45029409E60FC09
7BC382C63D8C150C3C72080ACE05AFA0C2BEA28E4FB22787139165EFBA91F90F8AA5814A503AD4EB04A8C7DD22CE2826
F1FD178C0B3AD58F10126DE8CE42435B3961ADBCABC8CA6DE8FCF353D86E9C03
040060F05F658F49C1AD3AB1890F7184210EFD0987E307C84C27ACCFB8F9F67CC2C460189EB5AAAA62EE222EB1B35540CFE902374601E369050B7C4E42ACBA1DACBF04299C3460782F918EA427E6325165E9EA10E3DA5F6C42E9C55215AA9CA27A5863EC48D8E0286B
fe0e87005b4e83761908c5131d552a850b3f58b749c37cf5b84d6768
EE353FCA5428A9300D4ABA754A44C00FDFEC0C9AE4B1A1803075ED967B7BB73F
3d84f26c12238d7b4f3d516613c1759033b1a5800175d0b1
1854BEBDC31B21B7AEFC80AB0ECD10D5B1B3308E6DBF11C1
My0oeSI1IzInbyA+LVFaW2wiNSokPAMiMipOLS4=
0228F9D04E900069C8DC47A08534FE76D2B900B7D7EF31F5709F200C4CA205
71169be7330b3038edb025f1d0f9
AADD9DB8DBE9C48B3FD4E6AE33C9FC07CB308DB3B3C9D20ED6639CCA703308717D4D9B009BC66842AECDA12AE6A380E62881FF2F2D82C68528AA6056583A48F0
2580F63CCFE44138870713B1A92369E33E2135D266DBB372386C400B
10B7B4D696E676875615175137C8A16FD0DA2211
e9026ffd475a1a3691e6b2ce637a9b92aab1073ebf53a67c5f2583be8a804ecb
010092537397ECA4F6145799D62B0A19CE06FE26AD
VWXSiEBZJdNuP1RrAXEwy91AtMa8c8P8iNRoSFffic
0481AEE4BDD82ED9645A21322E9C4C6A9385ED9F70B5D916C1B43B62EEF4D0098EFF3B1F78E2D0D48D50D1687B93B97D5F7C6D5047406A5E688B352209BCB9F8227DDE385D566332ECC0EABFA9CF7822FDF209F70024A57B1AA000C55B881F8111B2DCDE494A5F485E5BCA4BD88A2763AED1CA2B2FA8F0540678CD1E0F3AD80892
02F40E7E2221F295DE297117B7F3D62F5C6A97FFCB8CEFF1CD6BA8CE4A9A18AD84FFABBD8EFA59332BE7AD6756A66E294AFD185A78FF12AA520E4DE739BACA0C7FFEFF7F2955727A
00E8BEE4D3E2260744188BE0E9C723
3EE30B568FBAB0F883CCEBD46D3F3BB8A2A73513F5EB79DA66190EB085FFA9F492F375A97D860EB4
A9FB57DBA1EEA9BC3E660A909D838D726E3BF623D52620282013481D1F6E5377
0340340340340340340340340340340340340340340340340340340323C313FAB50589703B5EC68D3587FEC60D161CC149C1AD4A91
22123dc2395a05caa7423daeccc94760a7d462256bd56916
HSrCHRtOan6wp2kwOIGJC1RDtuSrF2mWVbio2aBcMHX9KF3iTJ1lLSzCKP1ZSo5yNolPNw1kCTtWpxELFF4ah1
0400FAC9DFCBAC8313BB2139F1BB755FEF65BC391F8B36F8F8EB7371FD558B01006A08A41903350678E58528BEBF8A0BEFF867A7CA36716F7E01F81052
36DF0AAFD8B8D7597CA10520D04B
07A526C63D3E25A256A007699F5447E32AE456B50E
D7C134AA264366862A18302575D1D787B09F075797DA89F57EC8C0FC
64210519e59c80e70fa7e9ab72243049feb8deecc146b9b1
044BA30AB5E892B4E1649DD0928643ADCD46F5882E3747DEF36E956E97
0667ACEB38AF4E488C407433FFAE4F1C811638DF20
6b8cf07d4ca75c88957d9d67059037a4
2af8be322db74207f3fc2ab314988e65
00E4E6DB2995065C407D9D39B8D0967B96704BA8E9C90B
040D9029AD2C7E5CF4340823B2A87DC68C9E4CE3174C1E6EFDEE12C07D58AA56F772C0726F24C6B89E4ECDAC24354B9E99CAA3F6D3761402CD
005DDA470ABE6414DE8EC133AE28E9BBD7FCEC0AE0FFF2
fc85305e8a8381a0211589186f213bb7
046B17D1F2E12C4247F8BCE6E563A440F277037D812DEB33A0F4A13945D898C2964FE342E2FE1A7F9B8EE7EB4A7C0F9E162BCE33576B315ECECBB6406837BF51F5
340E7BE2A280EB74E2BE61BADA745D97E8F7C300
0123456789ABCDEFabcdef
127971af8721782ecffa3
072546B5435234A422E0789675F432C89435DE5242
B3312FA7E23EE7E4988E056BE3F82D19181D9C6EFE8141120314088F5013875AC656398D8A2ED19D2A85C8EDD3EC2AEF
04026EB7A859923FBC82189631F8103FE4AC9CA2970012D5D46024804801841CA44370958493B205E647DA304DB4CEB08CBBD1BA39494776FB988B47174DCA88C7E2945283A01C89720349DC807F4FBF374F4AEADE3BCA95314DD58CEC9F307A54FFC61EFC006D8A2C9D4979C0AC44AEA74FBEBBB9F772AEDCB620B01A7BA7AF1B320430C8591984F601CD4C143EF1C7A3
04B70E0CBD6BB4BF7F321390B94A03C1D356C21122343280D6115C1D21BD376388B5F723FB4C22DFE6CD4375A05A07476444D5819985007E34
3086d221a7d46bcde86c90e49284eb15
DB7C2ABF62E35E668076BEAD2088
kE8NxsVH0F7bICFmP1pmq3067gAuxxIUzC7MsoUc2OPkXQx40
038D16C2866798B600F9F08BB4A8E860F3298CE04A5798
F1FD178C0B3AD58F10126DE8CE42435B3961ADBCABC8CA6DE8FCF353D86E9C00
0432C4AE2C1F1981195F9904466A39C9948FE30BBFF2660BE1715A4589334C74C7BC3736A2F4F6779C59BDCEE36B692153D0A9877CC62A474002DF32E52139F0A0
eyJzdWIiOiJhdXRoLXNlcnZpY2UtYW5kcm9pZCIsImF1ZCI6ImF1dGgtc2VydmljZS1hbmRyb2lkIiwibmJmIjoxNjg3NDI5ODI4LCJzY29wZSI6W10sImlhdCI6MTY4NzQ0MDYyOCwiaXNzIjoiaHR0cHM6Ly9wYS1hdXRob3JpemF0aW9uLXNlcnZlci5zdGFnZS5waWNzYXJ0LnRvb2xzL2FwaS9vYXV0aDIiLCJqdGkiOiJlZmJkYmM4MC02NTZiLTQxNTEtYTc0ZC0zNjU1OTgwNjg4ZTcifQ
617fab6832576cbbfed50d99f0249c3fee58b94ba0038c7ae84c8c832f2c
0091A091F03B5FBA4AB2CCF49C4EDD220FB028712D42BE752B2C40094DBACDB586FB20
0021A5C2C8EE9FEB5C4B9A753B7B476B7FD6422EF1F3DD674761FA99D6AC27C8A9A197B272822F6CD57A55AA4F50AE317B13545F
80354046167495784620
7d7374168ffe3471b60a857686a19475d3bfa2ff
A9FB57DBA1EEA9BC3E660A909D838D726E3BF623D52620282013481D1F6E5374
01AF286BCA1AF286BCA1AF286BCA1AF286BCA1AF286BC9FB8F6B85C556892C20A7EB964FE7719E74F490758D3B
0713612DCDDCB40AAB946BDA29CA91F73AF958AFD9
1E589A8595423412134FAA2DBDEC95C8D8675E58
0202F9F87B7C574D0BDECF8A22E6524775F98CDEBDCB
BB8E5E8FBC115E139FE6A814FE48AAA6F0ADA1AA5DF91985
00FD0D693149A118F651E6DCE6802085377E5F882D1B510B44160074C1288078365A0396C8E681
4230017757A767FAE42398569B746325D45313AF0766266479B75654E65F
c469684435deb378c4b65ca9591e2a5763059a2e
71169be7330b3038edb025f1
4D696E676875615175985BD3ADBADA21B43A97E2
1C97BEFC54BD7A8B65ACF89F81D4D4ADC565FA45
F1FD178C0B3AD58F10126DE8CE42435B53DC67E140D2BF941FFDD459C6D655E1
023809B2B7CC1B28CC5A87926AAD83FD28789E81E2C9E3BF10
7fffffffffffffffffffffff800000cfa7e8594377d414c03821bc582063
8CB91E82A3386D280F5D6F7E50E641DF152F7109ED5456B412B1DA197FB71123ACD3A729901D1A71874700133107EC50
ffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551
0095E9A9EC9B297BD4BF36E059184F
00C9BB9E8927D4D64C377E2AB2856A5B16E3EFB7F61D4316AE
0429A0B6A887A983E9730988A68727A8B2D126C44CC2CC7B2A6555193035DC76310804F12E549BDB011C103089E73510ACB275FC312A5DC6B76553F0CA
0401F481BC5F0FF84A74AD6CDF6FDEF4BF6179625372D8C0C5E10025E399F2903712CCF3EA9E3A1AD17FB0B3201B6AF7CE1B05
ad2f8aa834cf57e662e2496925e1dc5b
030024266E4EB5106D0A964D92C4860E2671DB9B6CC5
2AA058F73A0E33AB486B0F610410C53A7F132310
D6031998D1B3BBFEBF59CC9BBFF9AEE1
c56fb7d591ba6704df047fd98f535372fea00211
ae25b6792fb9515ec95e278aaa248d70
7F519EADA7BDA81BD826DBA647910F8C4B9346ED8CCDC64E4B1ABD11756DCE1D2074AA263B88805CED70355A33B471EE
003088250CA6E7C7FE649CE85820F7
74D59FF07F6B413D0EA14B344B20A2DB049B50C3
026108BABB2CEEBCF787058A056CBE0CFE622D7723A289E08A07AE13EF0D10D171DD8D
3DF91610A83441CAEA9863BC2DED5D5AA8253AA10A2EF1C98B9AC8B57F1117A72BF2C7B9E7C1AC4D77FC94CADC083E67984050B75EBAE5DD2809BD638016F723
04B8266A46C55657AC734CE38F018F2192
0370F6E9D04D289C4E89913CE3530BFDE903977D42B146D539BF1BDE4E9C92
033C258EF3047767E7EDE0F1FDAA79DAEE3841366A132E163ACED4ED2401DF9C6BDCDE98E8E707C07A2239B1B097
469A28EF7C28CCA3DC721D044F4496BCCA7EF4146FBF25C9
6b8cf07d4ca75c88957d9d670591
04161FF7528B899B2D0C28607CA52C5B86CF5AC8395BAFEB13C02DA292DDED7A83
85E25BFE5C86226CDB12016F7553F9D0E693A268
7D5A0975FC2C3057EEF67530417AFFE7FB8055C126DC5C6CE94A4B44F330B5D9
32010857077C5431123A46B808906756F543423E8D27877578125778AC76
0443BD7E9AFB53D8B85289BCC48EE5BFE6F20137D10A087EB6E7871E2A10A599C710AF8D0D39E2061114FDD05545EC1CC8AB4093247F77275E0743FFED117182EAA9C77877AAAC6AC7D35245D1692E8EE1
4E13CA542744D696E67687561517552F279A8C84
6C01074756099122221056911C77D77E77A777E7E7E77FCB
03eea2bae7e1497842f2de7769cfe9c989c072ad696f48034a
10E723AB14D696E6768756151756FEBF8FCB49A9
020A601907B8C953CA1481EB10512F78744A3205FD
72145780123602202909
0101D556572AABAC800101D556572AABAC8001022D5C91DD173F8FB561DA6899164443051D
9YRoYfX9yw6Bi2zMq4sYXK76wQmZJhrI1lMzWee
048BD2AEB9CB7E57CB2C4B482FFC81B7AFB9DE27E1E3BD23C23A4453BD9ACE3262547EF835C3DAC4FD97F8461A14611DC9C27745132DED8E545C1D54C72F046997
pY7LCtCafpjN0D7eKzBR1OGJzzc4dTq7Kegb0HrSPMH76g
04188DA80EB03090F67CBF20EB43A18800F4FF0AFD82FF101207192B95FFC8DA78631011ED6B24CDD573F977A11E794811
31a92ee2029fd10d901b113e990710f0d21ac6b6
E87579C11079F43DD824993C2CEE5ED3
04A3E8EB3CC1CFE7B7732213B23A656149AFA142C47AAFBC2B79A191562E1305F42D996C823439C56D7F7B22E14644417E69BCB6DE39D027001DABE8F35B25C9BE
7CBBBCF9441CFAB76E1890E46884EAE321F70C0BCB4981527897504BEC3E36A62BCDFA2304976540F6450085F2DAE145C22553B465763689180EA2571867423E
eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ijk3MjFiZTM2LWIyNzAtNDlkNS05NzU2LTlkNTk3Yzg2YjA1MSJ9
0403F0EBA16286A2D57EA0991168D4994637E8343E3600D51FBC6C71A0094FA2CDD545B11C5C0C797324F1
FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632551
046AB1E344CE25FF3896424E7FFE14762ECB49F8928AC0C76029B4D5800374E9F5143E568CD23F3F4D7C0D4B1E41C8CC0D1C6ABD5F1A46DB4C
9162fbe73984472a0a9d0590
114ca50f7a8e2f3f657c1108d9d44cfd8
0236B3DAF8A23206F9C4F299D7B21A9C369137F2C84AE1AA0D
036768ae8e18bb92cfcf005c949aa2c6d94853d0e660bbf854b1c9505fe95a
0409487239995A5EE76B55F9C2F098A89CE5AF8724C0A23E0E0FF77500
383359682e42a5c755229f7be1840add
D7C134AA264366862A18302575D1D787B09F075797DA89F57EC8C0FF
C302F41D932A36CDA7A3463093D18DB78FCE476DE1A86294
c9440919514f3516e971972ea6edbcb8
3045AE6FC8422F64ED579528D38120EAE12196D5
6277101735386680763835789423207666416083908700390324961279
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
000E0D4D696E6768756151750CC03A4473D03679
FFFFFFFE0000000075A30D1B9038A115
04640ECE5C12788717B9C1BA06CBC2A6FEBA85842458C56DDE9DB1758D39C0313D82BA51735CDB3EA499AA77A7D6943A64F7A3F25FE26F06B51BAA2696FA9035DA5B534BD595F5AF0FA2C892376C84ACE1BB4E3019B71634C01131159CAE03CEE9D9932184BEEF216BD71DF2DADF86A627306ECFF96DBB8BACE198B61E00F8B332
790408F2EEDAF392B012EDEFB3392F30F4327C0CA3F31FC383C422AA8C16
77E2B07370EB0F832A6DD5B62DFC88CD06BB84BE
0418DE98B02DB9A306F2AFCD7235F72A819B80AB12EBD653172476FECD462AABFFC4FF191B946A5F54D8D0AA2F418808CC25AB056962D30651A114AFD2755AD336747F93475B7A1FCA3B88F2B6A208CCFE469408584DC2B2912675BF5B9E582928
13D56FFAEC78681E68F9DEB43B35BEC2FB68542E27897B79
040369979697AB43897789566789567F787A7876A65400435EDB42EFAFB2989D51FEFCE3C80988F41FF883
2E45EF571F00786F67B0081B9495A3D95462F5DE0AA185EC
5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b
020ffa963cdca8816ccc33b8642bedf905c3d358573d3f27fbbd3b3cb9aaaf
BDB6F4FE3E8B1D9E0DA8C0D40FC962195DFAE76F56564677
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
004D696E67687561517512D8F03431FCE63B88F4
64395760248758320702
044A96B5688EF573284664698968C38BB913CBFC8223A628553168947D59DCC912042351377AC5FB32
00FDFB49BFE6C3A89FACADAA7A1E5BBC7CC1C2E5D831478814
64210519E59C80E70FA7E9AB72243049FEB8DEECC146B9B1
BDB6F4FE3E8B1D9E0DA8C0D46F4C318CEFE4AFE3B6B8551F
5AC635D8AA3A93E7B3EBBD55769886BC651D06B0CC53B0F63BCE3C3E27D2604B
0108B39E77C4B108BED981ED0E890E117C511CF072
0401A57A6A7B26CA5EF52FCDB816479700B3ADC94ED1FE674C06E695BABA1D
255705fa2a306654b1f4cb03d6a750a30c250102d4988717d9ba15ab6d3e
7167EFC92BB2E3CE7C8AAAFF34E12A9C557003D7C73A6FAF003F99F6CC8482E540F7
aa433a25330f98cea53554af9a2975f1
E95E4A5F737059DC60DFC7AD95B3D8139515620F
027B680AC8B8596DA5A4AF8A19A0303FCA97FD7645309FA2A581485AF6263E313B79A2F5
04AA87CA22BE8B05378EB1C71EF320AD746E1D3B628BA79B9859F741E082542A385502F25DBF55296C3A545E3872760AB73617DE4A96262C6F5D9E98BF9292DC29F8F41DBD289A147CE9DA3113B5F0B8C00A60B1CE1D7E819D7A431D7C90EA0E5F
1053CDE42C14D696E67687561517533BF3F83345
0402FE13C0537BBC11ACAA07D793DE4E6D5E5C94EEE80289070FB05D38FF58321F2E800536D538CCDAA3D9
7830A3318B603B89E2327145AC234CC594CBDD8D3DF91610A83441CAEA9863BC2DED5D5AA8253AA10A2EF1C98B9AC8B57F1117A72BF2C7B9E7C1AC4D77FC94CA
D7C134AA264366862A18302575D0FB98D116BC4B6DDEBCA3A5A7939F
7B425ED097B425ED097B425ED097B425ED097B425ED097B4260B5E9C7710C864
26DC5C6CE94A4B44F330B5D9BBD77CBF958416295CF7E1CE6BCCDC18FF8C07B6
eff7bbae-0ab8-4913-9d7a-47f2fefc616a
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
02197B07845E9BE2D96ADB0F5F3C7F2CFFBD7A3EB8B6FEC35C7FD67F26DDF6285A644F740A2614
51DEF1815DB5ED74FCC34C85D709
AADD9DB8DBE9C48B3FD4E6AE33C9FC07CB308DB3B3C9D20ED6639CCA70330870553E5C414CA92619418661197FAC10471DB1D381085DDADDB58796829CA90069
3086d221a7d46bcde86c90e49284eb153dab
0100FAF51354E0E39E4892DF6E319C72C8161603FA45AA7B998A167B8F1E629521
pzWpqxDC+GNf91je/VA1tax3AienevVvTuXIaszb7UhVCzU2D1kPoYN6ar9sjBO4
68A5E62CA9CE6C1C299803A6C1530B514E182AD8B0042A59CAD29F43
0400D9B67D192E0367C803F39E1A7E82CA14A651350AAE617E8F01CE94335607C304AC29E7DEFBD9CA01F596F927224CDECF6C
ZMZyMEzlJTKRS37lSUEG1kK1PCRktki9QuEy2MAFof554tojb1e4SDX2rHjIqnqwHv1S7CDpS1Dd
itaHqFSrVr2Mn1rRTREtFfE6bPbOBU0O82Me2Js3LmuTrJwH40hwbEJ9S9vcZFLl9U
4B337D934104CD7BEF271BF60CED1ED20DA14C08B3BB64F18A60888D
00E0D2EE25095206F5E2A4F9ED229F1F256E79A0E2B455970D8D0D865BD94778C576D62F0AB7519CCD2A1A906AE30D
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
a4b7452e2ed8f5f191058ca7bbfd26b0d3214bfc
b3fb3400dec5c4adceb8655d4c94
04925BE9FB01AFC6FB4D3E7D4990010F813408AB106C4F09CB7EE07868CC136FFF3357F624A21BED5263BA3A7A27483EBF6671DBEF7ABB30EBEE084E58A0B077AD42A5A0989D1EE71B1B9BC0455FB0D2C3
sha256/uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc=
04C0A0647EAAB6A48753B033C56CB0F0900A2F5C4853375FD614B690866ABD5BB88B5F4828C1490002E6773FA2FA299B8F
040356DCD8F2F95031AD652D23951BB366A80648F06D867940A5366D9E265DE9EB240F
0163F35A5137C2CE3EA6ED8667190B0BC43ECD69977702709B
62a1b22cd095777b9ae08a1250c2764d
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
2866537B676752636A68F56554E12640276B649EF7526267
eyJzdWIiOiJhdXRoLXNlcnZpY2UtYW5kcm9pZCIsImF1ZCI6ImF1dGgtc2VydmljZS1hbmRyb2lkIiwibmJmIjoxNjg3NDI5ODI4LCJzY29wZSI6W10sImlhdCI6MTY4NzQ0MDYyOCwiaXNzIjoiaHR0cHM6Ly9wYS1hdXRob3JpemF0aW9uLXNlcnZlci5zdGFnZS5waWNzYXJ0LnRvb2xzL2FwaS9vYXV0aDIiLCJqdGkiOiJiNGRjNTUzMC1jMTM4LTQzMGYtYWI2NS1hMzI0NmViYzA1ZTcifQ
04B6B3D4C356C139EB31183D4749D423958C27D2DCAF98B70164C97A2DD98F5CFF6142E0F7C8B204911F9271F0F3ECEF8C2701C307E8E4C9E183115A1554062CFB
040081BAF91FDF9833C40F9C181343638399078C6E7EA38C001F73C8134B1B4EF9E150
D09E8800291CB85396CC6717393284AAA0DA64BA
0400C6858E06B70404E9CD9E3ECB662395B4429C648139053FB521F828AF606B4D3DBAA14B5E77EFE75928FE1DC127A2FFA8DE3348B3C1856A429BF97E7E31C2E5BD66011839296A789A3BC0045C8A5FB42C7D1BD998F54449579B446817AFBD17273E662C97EE72995EF42640C550B9013FAD0761353C7086A272C24088BE94769FD16650
00F50B028E4D696E676875615175290472783FB1
6b143994-2d7a-4bfa-ad23-a34de6096c22
630258ff0ac22400fd592033d2661d47
041D1C64F068CF45FFA2A63A81B7C13F6B8847A3E77EF14FE3DB7FCAFE0CBD10E8E826E03436D646AAEF87B2E247D4AF1E8ABE1D7520F9C2A45CB1EB8E95CFD55262B70B29FEEC5864E19C054FF99129280E4646217791811142820341263C5315
96341f1138933bc2f503fd44
021085E2755381DCCCE3C1557AFA10C2F0C0C2825646C5B34A394CBCFA8BC16B22E7E789E927BE216F02E1FB136A5F
60dcd2104c4cbc0be6eeefc2bdd610739ec34e317f9b33046c9e4788
eur6S9IbyZellV4nVU2QjyW61EkYFxnF1Adg0SMaUEys8UifK5Ss3LKH
02120FC05D3C67A99DE161D2F4092622FECA701BE4F50F4758714E8A87BBF2A658EF8C21E7C5EFE965361F6C2999C0C247B0DBD70CE6B7
B4E134D3FB59EB8BAB57274904664D5AF50388BA
D35E472036BC4FB7E13C785ED201E065F98FCFA5B68F12A32D482EC7EE8658E98691555B44C59311
53139271650575456422
8CB91E82A3386D280F5D6F7E50E641DF152F7109ED5456B31F166E6CAC0425A7CF3AB6AF6B7FC3103B883202E9046565
5037EA654196CFF0CD82B2C14A2FCF2E3FF8775285B545722F03EACDB74B
C302F41D932A36CDA7A3462F9E9E916B5BE8F1029AC4ACC1
0066647EDE6C332C7F8C0923BB58213B333B20E9CE4281FE115F7D8F90AD
04B199B13B9B34EFC1397E64BAEB05ACC265FF2378ADD6718B7C7C1961F0991B842443772152C9E0AD
FFE391E0EA186D0734ED601E4E70E3224B7309D48E2075BAC46D8C667EAE7212
71FE1AF926CF847989EFEF8DB459F66394D90F32AD3F15E8
12511cfe811d0f4e6bc688b4d
AADD9DB8DBE9C48B3FD4E6AE33C9FC07CB308DB3B3C9D20ED6639CCA703308717D4D9B009BC66842AECDA12AE6A380E62881FF2F2D82C68528AA6056583A48F3
883423532389192164791648750360308885314476597252960362792450860609699839
04A1455B334DF099DF30FC28A169A467E9E47075A90F7E650EB6B7A45C7E089FED7FBA344282CAFBD6F7E319F7C0B0BD59E2CA4BDB556D61A5
bb85691939b869c1d087f601554b96b80cb4f55b35f433c2
4A8C7DD22CE28268B39B55416F0447C2FB77DE107DCD2A62E880EA53EEB62D57CB4390295DBC9943AB78696FA504C11
115792089210356248762697446949407573530086143415290314195533631308867097853951
28E9FA9E9D9F5E344D5A9E4BCF6509A7F39789F515AB8F92DDBCBD414D940E93
C49D360886E704936A6678E1139D26B7819F7E90
0289FDFBE4ABE193DF9559ECF07AC0CE78554E2784EB8C1ED1A57A
04009D73616F35F4AB1407D73562C10F00A52830277958EE84D1315ED31886
0000016742C00BDA259000000168CE0F13200000016588840DCE7118A0002FBF1C31C3275D78
36966400788225189766
043B4C382CE37AA192A4019E763036F4F5DD4D7EBB938CF935318FDCED6BC28286531733C3F03C4FEE
2438bce1ddb7bd026d5ff89f598b3b5e5bb824b3
5uMMHgqN4R2xY96u90vToxJGXUa66oljPPm2DDj8DH
044AD5F7048DE709AD51236DE65E4D4B482C836DC6E410664002BB3A02D4AAADACAE24817A4CA3A1B014B5270432DB27D2
0257927098FA932E7C0A96D3FD5B706EF7E5F5C156E16B7E7C86038552E91D
A335926AA319A27A1D00896A6773A4827ACDAC73
1A827EF00DD6FC0E234CAF046C6A5D8A85395B236CC4AD2CF32A0CADBDC9DDF620B0EB9906D0957F6C6FEACD615468DF104DE296CD8F
cc2751449a350f668590264ed76692694a80308a
002757A1114D696E6768756151755316C05E0BD4
04017232BA853A7E731AF129F22FF4149563A419C26BF50A4C9D6EEFAD612601DB537DECE819B7F70F555A67C427A8CD9BF18AEB9B56E0C11056FAE6A3
E3F9E1E0CF99D0E56A055BA65E241B3399F7CEA524326B0CDD6EC1327ED0FDC1
00BDDB97E555A50A908E43B01C798EA5DAA6788F1EA2794EFCF57166B8C14039601E55827340BE
e4437ed6010e88286f547fa90abfe4c42212
040503213F78CA44883F1A3B8162F188E553CD265F23C1567A16876913B0C2AC245849283601CCDA380F1C9E318D90F95D07E5426FE87E45C0E8184698E45962364E34116177DD2259
00FC1217D4320A90452C760A58EDCD30C8DD069B3C34453837A34ED50CB54917E1C2112D84D164F444F8F74786046A
10C0FB15760860DEF1EEF4D696E676875615175D
0620048D28BCBD03B6249C99182B7C8CD19700C362C46A01
cc22d6dfb95c6b25e49c0d6364a4e5980c393aa21668d953
eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjAxOTY5NmUwLTA0ZDctNGRhMS05YzBhLWM3NDRjMjY5ODc5MCJ9
B99B99B099B323E02709A4D696E6768756151751
D2C0FB15760860DEF1EEF4D696E6768756151754
0101BAF95C9723C57B6C21DA2EFF2D5ED588BDD5717E212F9D
A9FB57DBA1EEA9BC3E660A909D838D718C397AA3B561A6F7901E0E82974856A7
e8b4011604095303ca3b8099982be09fcb9ae616
9b8f518b086098de3d77736f9458a3d2f6f95a37
df6b721c8b4d3b6eb44c861d4415007e5a35fc95
60cf17073fd14ad7054a307fa4c01595
24B7B137C8A14D696E6768756151756FD0DA2E5C
6127C24C05F38A0AAAF65C0EF02C
0479BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798483ADA7726A3C4655DA4FBFC0E1108A8FD17B448A68554199C47D08FFB10D4B8
8CB91E82A3386D280F5D6F7E50E641DF152F7109ED5456B412B1DA197FB71123ACD3A729901D1A71874700133107EC53
6A941977BA9F6A435199ACFC51067ED587F519C5ECB541B8E44111DE1D40
9b64acf0ce7eba025334ec55391bebc8
04015D4860D088DDB3496B0C6064756260441CDE4AF1771D4DB01FFE5B34E59703DC255A868A1180515603AEAB60794E54BB7996A70061B1CFAB6BE5F32BBFA78324ED106A7636B9C5A7BD198D0158AA4F5488D08F38514F1FDF4B4F40D2181B3681C364BA0273C706
5363ad4cc05c30e0a5261c028812645a122e22ea20816678df02967c1b23bd72
3045AE6FC8422f64ED579528D38120EAE12196D5
6A91174076B1E0E19C39C031FE8685C1CAE040E5C69A28EF
2472E2D0197C49363F1FE7F5B6DB075D52B6947D135D8CA445805D39BC345626089687742B6329E70680231988
c39c6c3b3a36d7701b9c71a1f5804ae5d0003f4
04DB4FF10EC057E9AE26B07D0280B7F4341DA5D1B1EAE06C7D9B2F2F6D9C5628A7844163D015BE86344082AA88D95E2F9D
03E5A88919D7CAFCBF415F07C2176573B2
B4050A850C04B3ABF54132565044B0B7D7BFD8BA270B39432355FFB4
5EEEFCA380D02919DC2C6558BB6D8A5D
0217C05610884B63B9C6C7291678F9D341
6b016c3bdcf18941d0d654921475ca71a9db2fb27d1d37796185c2942c0a
37a6259cc0c1dae299a7866489dff0bd
520883949DFDBC42D3AD198640688A6FE13F41349554B49ACC31DCCD884539816F5EB4AC8FB1F1A6
00C8619ED45A62E6212E1160349E2BFA844439FAFC2A3FD1638F9E
401028774D7777C7B7666D1366EA432071274F89FF01E718
VvIBKmTktRlagx9EOjcGvxQqxul8Q5EenQR0v725SncMdEtpt6arWsC0UwnYzcOuleyGnX
A7F561E038EB1ED560B3D147DB782013064C19F27ED27C6780AAF77FB8A547CEB5B4FEF422340353
0051953EB9618E1C9A1F929A21A0B68540EEA2DA725B99B315F3B8B489918EF109E156193951EC7E937B1652C0BD3BB1BF073573DF883D2C34F1EF451FD46B503F00
e43bb460f0b80cc0c0b075798e948060f8321b7d
sha256/8ca6Zwz8iOTfUpc8rkIPCgid1HQUT+WAbEIAZOFZEik=
04721403987746157087
027d29778100c65a1da1783716588dce2b8b4aee8e228f1896
06d00671-b964-45e8-b63c-f44df2a0a28c
099350f2-0d0c-471b-8e59-907c819b0300
7A556B6DAE535B7B51ED2C4D7DAA7A0B5C55F380
BD71344799D5C7FCDC45B59FA3B9AB8F6A948BC5
C302F41D932A36CDA7A3463093D18DB78FCE476DE1A86297
03188da80eb03090f67cbf20eb43a18800f4ff0afd82ff1012
DB7C2ABF62E35E7628DFAC6561C5
b8adf1378a6eb73409fa6c9c637ba7f5
1243ae1b4d71613bc9f780a03690e
036b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296
Ia113CdQB0WCLE5fkCxwJGqQFbS4lmpWgfg8iv5cypA2SOg
040303001D34B856296C16C0D40D3CD7750A93D1D2955FA80AA5F40FC8DB7B2ABDBDE53950F4C0D293CDD711A35B67FB1499AE60038614F1394ABFA3B4C850D927E1E7769C8EEC2D19037BF27342DA639B6DCCFFFEB73D69D78C6C27A6009CBBCA1980F8533921E8A684423E43BAB08A576291AF8F461BB2A8B3531D2F0485C19B16E2F1516E23DD3C1A4827AF1B8AC15B
8a3c4b262d721acd49a4bf97d5213199c86fa2b9
sha256/O4rGMvpV1NfGyWRRTZ6v92jubDQNBdwlK+E35oZJ9qo=
103FAEC74D696E676875615175777FC5B191EF30
7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee
043AE9E58C82F63C30282E1FE7BBF43FA72C446AF6F4618129097E2C5667C2223A902AB5CA449D0084B7E5B3DE7CCC01C9
a5c71f6aff54eb34c826d952c285eaf0650b4259c83ae598962681a6429b63f6
FBA3AF4E7757D9016E953FB3EE4671CA2BD9AF725F9A53D52ED4A38EAAA08901
00689918DBEC7E5A0DD6DFC0AA55C7
3BAF59A2E5331C30675FAB35FF5FFF0D116142D3D4664F1C3CB804068B40614F
659EF8BA043916EEDE8911702B22
0452DCB034293A117E1F4FF11B30F7199D3144CE6DFEAFFEF2E331F296E071FA0DF9982CFEA7D43F2E
00C9517D06D5240D3CFF38C74B20B6CD4D6F9DD4D9
DB7C2ABF62E35E668076BEAD208B
5667676A654B20754F356EA92017D946567C46675556F19556A04616B567D223A5E05656FB549016A96656A557
04BED5AF16EA3F6A4F62938C4631EB5AF7BDBCDBC31667CB477A1A8EC338F94741669C976316DA6321
03375D4CE24FDE434489DE8746E71786015009E66E38A926DD
0017858FEB7A98975169E171F77B4087DE098AC8A911DF7B01
10D9B4A3D9047D8B154359ABFB1B7F5485B04CEB868237DDC9DEDA982A679A5A919B626D4E50A8DD731B107A9962381FB5D807BF2618
0238af09d98727705120c921bb5e9e26296a3cdcf2f35757a0eafd87b830e7
c49d360886e704936a6678e1139d26b7819f7e90
sha256/WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18=
D35E472036BC4FB7E13C785ED201E065F98FCFA6F6F40DEF4F92B9EC7893EC28FCD412B1F1B32E27
4099B5A457F9D69F79213D094C4BCD4D4262210B

信息 应用程序记录日志信息,不得记录敏感信息

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
com/amazon/aps/shared/analytics/APSEvent.java, line(s) 45,114,153
com/amazon/device/ads/AdRegistration.java, line(s) 239,345,356,689,710,756,675,731,324,328,339,342,255
com/amazon/device/ads/DTBAdMRAIDBannerController.java, line(s) 703
com/amazon/device/ads/DTBAdMRAIDController.java, line(s) 167,245,308,461,489,492,512,515,528,532,535,669
com/amazon/device/ads/DTBAdMRAIDExpandedController.java, line(s) 94
com/amazon/device/ads/DTBAdMRAIDInterstitialController.java, line(s) 48,178,206
com/amazon/device/ads/DTBAdNetworkInfo.java, line(s) 21
com/amazon/device/ads/DTBAdRequest.java, line(s) 285,288,290,341,343,350,432,434,439,444,451,454,489,510,512,518,521,528,554,772,774,989,283,352,614,730,843,347,542,645,716,719,968,122,155,394,617,631
com/amazon/device/ads/DTBAdResponse.java, line(s) 230,340
com/amazon/device/ads/DTBAdUtil.java, line(s) 56,177,180,253,361,364,395,412,415,418,421,424,427,432
com/amazon/device/ads/DTBInterstitialActivity.java, line(s) 63
com/amazon/device/ads/DTBMetricReport.java, line(s) 80,156
com/amazon/device/ads/DTBMetricsConfiguration.java, line(s) 163,232,255,275,290,69,104,132
com/amazon/device/ads/DTBMetricsProcessor.java, line(s) 61,66,69,72,84,77,81,83,87
com/amazon/device/ads/DTBTimeTrace.java, line(s) 61,41,53,64,77,87,112
com/amazon/device/ads/DtbAdRequestParamsBuilder.java, line(s) 104,73,190
com/amazon/device/ads/DtbAdvertisingInfo.java, line(s) 12,19,26,29,42,41
com/amazon/device/ads/DtbCommonUtils.java, line(s) 132,135,138,141,144,147,233,236,239,242,245,248,260,320,120,100
com/amazon/device/ads/DtbDebugProperties.java, line(s) 89,99,133,138,141,144,149,155,161,171
com/amazon/device/ads/DtbDeviceData.java, line(s) 96,101,136,138,183,199,163
com/amazon/device/ads/DtbDeviceRegistration.java, line(s) 140,149,161,185,253,356,399,423,430,433,132,138,200,206,410,457,506,511,103,106,166,169,197,218,222,237,241,320,341,351,376,379,407,482
com/amazon/device/ads/DtbFireOSServiceAdapter.java, line(s) 23,25,36,40
com/amazon/device/ads/DtbGeoLocation.java, line(s) 44,84,89,93,96,98,101,67,71
com/amazon/device/ads/DtbGooglePlayServices.java, line(s) 66
com/amazon/device/ads/DtbGooglePlayServicesAdapter.java, line(s) 49,52,55
com/amazon/device/ads/DtbHttpClient.java, line(s) 45,79,85,97,106,157,158,168,171
com/amazon/device/ads/DtbLog.java, line(s) 29,38,47,56,68,77,85,92,101,111,15,152,161,189,198
com/amazon/device/ads/DtbMetrics.java, line(s) 28,30,39,42,45,51,54,59,70,72,177
com/amazon/device/ads/DtbOmSdkSessionManager.java, line(s) 110,226,77,86,202,217
com/amazon/device/ads/DtbPackageNativeData.java, line(s) 24,40
com/amazon/device/ads/DtbSharedPreferences.java, line(s) 501,302
com/amazon/device/ads/DtbThreadService.java, line(s) 21,29
com/amazon/device/ads/WebResourceService.java, line(s) 101
com/applovin/exoplayer2/l/q.java, line(s) 35,53,41,47
com/applovin/impl/sdk/a/f.java, line(s) 51
com/applovin/impl/sdk/x.java, line(s) 16,107,63,103,22,111,32,99
com/appsflyer/internal/AFb1vSDK.java, line(s) 3037,3038,3042
com/appsflyer/internal/AFc1qSDK.java, line(s) 322
com/appsflyer/internal/AFf1hSDK.java, line(s) 82,116
com/appsflyer/internal/AFf1jSDK.java, line(s) 161
com/appsflyer/internal/AFf1kSDK.java, line(s) 68,111
com/appsflyer/internal/AFg1jSDK.java, line(s) 46,90,55,48,52,50
com/appsflyer/internal/c.java, line(s) 42
com/beautify/studio/impl/autoComponent/OnlineToolComponent$executeTools$2$resultImage$1.java, line(s) 67
com/beautify/studio/impl/common/aiToolsExecution/viewModel/OnlineToolExecutionViewModel$executeOnline$1.java, line(s) 67
com/braze/support/BrazeLogger.java, line(s) 382,384,396,388,390,407,409,394,400,402
com/bugsnag/android/internal/a.java, line(s) 55
com/bumptech/glide/a.java, line(s) 99,117,122,131,140,189,106,60,98,105,110,116,121,130,137,188,197,111,61
com/bumptech/glide/load/engine/DecodeJob.java, line(s) 252,300,398
com/bumptech/glide/load/engine/GlideException.java, line(s) 194
com/bumptech/glide/load/engine/e.java, line(s) 22,156
com/bumptech/glide/load/engine/i.java, line(s) 61,98,51,60,97,52
com/bumptech/glide/load/resource/bitmap/DefaultImageHeaderParser.java, line(s) 153,160,252,262,276,286,308,332,339,345,349,352,355,364,152,159,251,261,273,285,307,327,338,344,348,351,354,363
com/bumptech/glide/load/resource/bitmap/VideoDecoder.java, line(s) 182,205,234,181,204,233
com/bumptech/glide/load/resource/bitmap/a.java, line(s) 109,467,801,108,424,466,493,550,640,669,688,703,714,749,768,779,800,819,830,445,503,578
com/bumptech/glide/request/SingleRequest.java, line(s) 554,26,326,420
com/dropbox/core/android/AuthActivity.java, line(s) 51,69,236
com/fyber/inneractive/sdk/external/InneractiveAdManager.java, line(s) 364
com/fyber/inneractive/sdk/flow/a.java, line(s) 28
com/fyber/inneractive/sdk/logger/a.java, line(s) 10,18,20,28,40,42,50,57,64
com/fyber/inneractive/sdk/network/f0.java, line(s) 136
com/fyber/inneractive/sdk/player/exoplayer2/audio/MediaCodecAudioRenderer.java, line(s) 101,351,364,375
com/fyber/inneractive/sdk/player/exoplayer2/audio/c.java, line(s) 623
com/fyber/inneractive/sdk/player/exoplayer2/extractor/mkv/a.java, line(s) 469,492,674,938
com/fyber/inneractive/sdk/player/exoplayer2/extractor/mp4/d.java, line(s) 156,308
com/fyber/inneractive/sdk/player/exoplayer2/extractor/mp4/e.java, line(s) 40,64,76,127,137,147
com/fyber/inneractive/sdk/player/exoplayer2/extractor/mp4/f.java, line(s) 408,472,429,725
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ogg/j.java, line(s) 227
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ts/d.java, line(s) 113
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ts/l.java, line(s) 47
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ts/o.java, line(s) 41,44
com/fyber/inneractive/sdk/player/exoplayer2/extractor/wav/a.java, line(s) 44
com/fyber/inneractive/sdk/player/exoplayer2/extractor/wav/c.java, line(s) 38,59,65
com/fyber/inneractive/sdk/player/exoplayer2/g.java, line(s) 40,112
com/fyber/inneractive/sdk/player/exoplayer2/h.java, line(s) 172,985,1218,1223,1228
com/fyber/inneractive/sdk/player/exoplayer2/mediacodec/a.java, line(s) 45,77
com/fyber/inneractive/sdk/player/exoplayer2/mediacodec/b.java, line(s) 622
com/fyber/inneractive/sdk/player/exoplayer2/mediacodec/d.java, line(s) 331,334,250
com/fyber/inneractive/sdk/player/exoplayer2/metadata/id3/g.java, line(s) 161,188,234,239,460,470,506
com/fyber/inneractive/sdk/player/exoplayer2/source/chunk/b.java, line(s) 12,16
com/fyber/inneractive/sdk/player/exoplayer2/text/cea/a.java, line(s) 36
com/fyber/inneractive/sdk/player/exoplayer2/upstream/cache/i.java, line(s) 147
com/fyber/inneractive/sdk/player/exoplayer2/upstream/o.java, line(s) 131,146,333,142
com/fyber/inneractive/sdk/player/exoplayer2/upstream/x.java, line(s) 142,154,160
com/fyber/inneractive/sdk/player/exoplayer2/util/b.java, line(s) 34,78
com/fyber/inneractive/sdk/player/exoplayer2/video/MediaCodecVideoRenderer.java, line(s) 403,320,330,339,342,345,368,371,374,585,667
com/iab/omid/library/amazon/utils/d.java, line(s) 17,10
com/iab/omid/library/applovin/publisher/b.java, line(s) 30,32
com/iab/omid/library/applovin/utils/d.java, line(s) 17,10,24
com/iab/omid/library/fyber/publisher/b.java, line(s) 29,31
com/iab/omid/library/fyber/utils/d.java, line(s) 17,10
com/iab/omid/library/inmobi/utils/c.java, line(s) 17,10
com/iab/omid/library/vungle/publisher/b.java, line(s) 32,34
com/iab/omid/library/vungle/utils/d.java, line(s) 17,10
com/inmobi/media/c7.java, line(s) 31,38,54,59,79,84,25,50,19,45
com/inmobi/media/d0.java, line(s) 41,47
com/inmobi/media/e6.java, line(s) 1633
com/inmobi/media/f3.java, line(s) 75
com/inmobi/media/h0.java, line(s) 16,10
com/inmobi/media/x2.java, line(s) 209
com/inmobi/media/y3.java, line(s) 32
com/inmobi/media/ya.java, line(s) 26,30
com/inmobi/media/z.java, line(s) 31
com/kakao/sdk/auth/AuthCodeClient$resultReceiver$1.java, line(s) 33
com/kakao/sdk/auth/AuthCodeClient.java, line(s) 185,200
com/kakao/sdk/auth/TalkAuthCodeActivity.java, line(s) 110,130,137
com/kakao/sdk/auth/TokenManager.java, line(s) 76,102,106,122,126,131,192
com/kakao/sdk/common/util/SdkLog.java, line(s) 37
com/kakao/sdk/network/ApiFactory.java, line(s) 41
com/kakao/sdk/user/UserApiClient.java, line(s) 190
com/koushikdutta/async/AsyncServer.java, line(s) 397,160,281,359
com/koushikdutta/async/b.java, line(s) 71
com/picsart/ads/SplashHouseAdActivity.java, line(s) 228
com/picsart/analytics/SettingsProvider$Companion$preConnectSettings$1.java, line(s) 53
com/picsart/analytics/debug/components/experiments/ExperimentsActivity$saveVariantSettings$1.java, line(s) 58
com/picsart/analytics/settings/preview/AppPreview$requireExperiment$1.java, line(s) 43,105
com/picsart/analytics/settings/preview/AppPreviewUseCase$subscribeToMiddleware$2.java, line(s) 36
com/picsart/analytics/settings/preview/ui/AppPreviewFloatingButtonView$render$1.java, line(s) 58
com/picsart/analytics/settings/preview/ui/AppPreviewFloatingButtonView.java, line(s) 80
com/picsart/appstart/items/MiscItemsInit.java, line(s) 48
com/picsart/appstart/items/PaAnalyticsInit.java, line(s) 291
com/picsart/appstart/items/SettingsCallbackInit$showAppliedState$1.java, line(s) 66
com/picsart/archive/impl/ArchiverServiceImpl$pack$2.java, line(s) 57,74,79,84
com/picsart/archive/impl/ArchiverServiceImpl$unpack$2.java, line(s) 65,73,78,103
com/picsart/auth/impl/signin/domain/usecase/UserGrantedUseCaseImpl$invoke$2.java, line(s) 65
com/picsart/auth/impl/social/presentation/SocialSignInFragment.java, line(s) 508
com/picsart/base/BaseFragment.java, line(s) 49,70,78,86,95,103,111,119,127,135,144
com/picsart/chooser/albumsapi/presenter/AlbumChooserBaseViewModel$loadSubAlbums$2.java, line(s) 49
com/picsart/chooser/albumsapi/presenter/AlbumChooserBaseViewModel$requestLogin$1.java, line(s) 44
com/picsart/chooser/half/font/premium/packages/premium/data/LoadPremiumFontPackagesRepoImpl$invoke$4.java, line(s) 44
com/picsart/chooser/half/font/premium/packages/purchased/data/LoadPurchasedFontPackagesRepoImpl$invoke$3.java, line(s) 42
com/picsart/chooser/half/font/service/DiscoverFontsFromSettingsServiceImpl.java, line(s) 227
com/picsart/chooser/media/albums/media/domain/AlbumsMediaInteractorImpl$downloadItem$2.java, line(s) 38
com/picsart/chooser/media/albums/media/domain/AlbumsMediaInteractorImpl$loadIcons$1.java, line(s) 40
com/picsart/chooser/media/albums/media/domain/AlbumsMediaInteractorImpl$loadMedias$1$9.java, line(s) 60
com/picsart/chooser/media/albums/media/service/InstagramPhotosServiceImpl$loadPhotos$1.java, line(s) 70,125
com/picsart/chooser/media/albums/media/service/ProjectsServiceImpl$deleteProject$2.java, line(s) 34
com/picsart/chooser/media/albums/media/service/ProjectsServiceImpl$load$2.java, line(s) 38
com/picsart/chooser/media/albums/presenter/AlbumChooserViewModel$loadAlbums$2.java, line(s) 41
com/picsart/chooser/media/albums/presenter/SingleAlbumViewModel$loadAlbums$1.java, line(s) 41
com/picsart/chooser/media/backgrounds/data/BackgroundChooserRepoImpl$loadBackgrounds$1$installedOwnedItems$1.java, line(s) 44
com/picsart/chooser/media/backgrounds/data/BackgroundChooserRepoImpl$loadBackgrounds$1$installedOwnedItems$2$1.java, line(s) 43
com/picsart/chooser/media/backgrounds/data/BackgroundChooserRepoImpl$loadBackgrounds$1$ownedNotInstalledItems$1.java, line(s) 44
com/picsart/chooser/media/backgrounds/data/BackgroundChooserRepoImpl$loadBackgrounds$1.java, line(s) 68
com/picsart/chooser/media/backgrounds/presenter/BackgroundChooserViewModel$installPackage$1.java, line(s) 59
com/picsart/chooser/media/backgrounds/presenter/BackgroundChooserViewModel$load$2.java, line(s) 45
com/picsart/chooser/media/backgrounds/presenter/BackgroundChooserViewModel$refreshColorItems$1.java, line(s) 40
com/picsart/chooser/media/backgrounds/presenter/BackgroundChooserViewModel$refreshRecentItems$1.java, line(s) 40
com/picsart/chooser/media/backgrounds/presenter/BackgroundChooserViewModel$submitChooserResult$2.java, line(s) 39
com/picsart/chooser/media/challenge/ChallengeMediaChooserViewModel$loadIcons$1.java, line(s) 38
com/picsart/chooser/media/multy/added/MultiItemsViewModel.java, line(s) 66
com/picsart/chooser/media/multy/presenter/MultiChooserBaseViewModel$loadAddedItems$2.java, line(s) 37
com/picsart/chooser/media/replay/ReplayMediaChooserViewModel.java, line(s) 84
com/picsart/chooser/media/scanner/service/QRScannerServiceImpl.java, line(s) 97
com/picsart/chooser/replay/collections/items/presenter/CollectionReplaysViewModel.java, line(s) 77,143
com/picsart/chooser/replay/discover/presenter/DiscoverReplaysViewModel.java, line(s) 77,143
com/picsart/chooser/replay/discover/tags/presenter/TagReplaysViewModel.java, line(s) 73,139
com/picsart/chooser/replay/recent/presenter/RecentReplaysViewModel.java, line(s) 78,144
com/picsart/common/exif/ExifBuilder.java, line(s) 74,114,122,136,144,152
com/picsart/common/exif/a.java, line(s) 16,40
com/picsart/common/util/FileUtils.java, line(s) 75,195,199,216,237,292,446,523,566,410
com/picsart/core/memory/service/MemoryInfoNotifierService.java, line(s) 115
com/picsart/coroutine/flow/FlowChannelExtKt.java, line(s) 51,53
com/picsart/create/selection/factory/SketchEffectLoader.java, line(s) 116,167
com/picsart/createflow/dolphin3/presenter/album/CfAlbumChooserViewModel$loadAlbums$2.java, line(s) 42
com/picsart/createflow/dolphin3/presenter/component/replay/ReplayComponent.java, line(s) 256
com/picsart/createflow/dolphin3/presenter/helpers/provider/LocalReplayProvider$getReplayItem$3$1.java, line(s) 40
com/picsart/editor/data/repo/pds/StorageContainerBitmap$readData$2.java, line(s) 45
com/picsart/editor/data/repo/pds/StorageContainerBitmap$writeData$2.java, line(s) 47
com/picsart/editor/data/repo/pds/StorageContainerBitmap.java, line(s) 32
com/picsart/effect/core/ApplyAndSaveApi$applyAction$1.java, line(s) 43
com/picsart/growth/braze/impl/gcm/BrazeInAppMessageManagerListener.java, line(s) 188,192
com/picsart/jedi/presentation/container/ContainerFragment.java, line(s) 82,84
com/picsart/jedi/presentation/view/webview/JediWebChromeClient.java, line(s) 332
com/picsart/maintabs/deepLink/nonTab/deepLinkWithArguments/ImageReportHandler$handleImageReportHook$1.java, line(s) 56
com/picsart/maintabs/utils/ImageUriHelper.java, line(s) 336,348,366,373
com/picsart/oauth2/domain/usecase/TokenUseCaseImpl$revokeToken$1.java, line(s) 63
com/picsart/pasocial/common/SocialWrapper$getFcmToken$2.java, line(s) 60,67
com/picsart/payment/impl/subscription/data/SubscriptionRepoImpl$prefetchProductInfo$2.java, line(s) 49,63,78
com/picsart/payment/impl/subscription/data/SubscriptionRepoImpl.java, line(s) 571
com/picsart/payment/impl/subscription/ui/ShopSubscribeActivity.java, line(s) 576
com/picsart/picore/cppbind/ExceptionHandler.java, line(s) 26
com/picsart/picore/ve/MediaCodecHelper.java, line(s) 39,58,53
com/picsart/picore/ve/OutputPlugin.java, line(s) 87,90,98,127,328,332,335,372,383,421,613,628,658,74,77,150,348,402,468,496,621,637,676,229,263
com/picsart/picore/x/RXImageView.java, line(s) 143,251,270,277
com/picsart/pieffects/EffectsContext.java, line(s) 106
com/picsart/pieffects/effect/PencilEffect.java, line(s) 118
com/picsart/pitools/facedetection/FaceDetectionManager.java, line(s) 28,35,50,61,62,70,80,54,56
com/picsart/replay/file/packaging/a.java, line(s) 87
com/picsart/replay/file/packaging/general/structure/v2/conversion/v.java, line(s) 113
com/picsart/settings/models/maintab/MainTabsConfigDeserializer.java, line(s) 123
com/picsart/settings/models/maintab/RealMainTabsConfigManager$Companion$updateCachedConfigFile$1.java, line(s) 88
com/picsart/settings/models/maintab/RealMainTabsConfigManager$loadConfigFromCachedFile$2.java, line(s) 82
com/picsart/spaces/impl/presenter/spaceitempage/viewmodel/SpaceViewModel$updateHeader$1.java, line(s) 91
com/picsart/storage/AppStateLifecycleObserver.java, line(s) 106
com/picsart/studio/a.java, line(s) 100
com/picsart/studio/ads/SubscriptionPaUserGrantedDescrypter.java, line(s) 109
com/picsart/studio/apiv3/user/ProfileActionsKt.java, line(s) 172,179
com/picsart/studio/apiv3/util/AnalyticUtils.java, line(s) 232
com/picsart/studio/brushlib/overlay/ImageOverlay.java, line(s) 316
com/picsart/studio/bugsnag/a.java, line(s) 130
com/picsart/studio/dropbox/DropboxManager$isLoggedIn$2.java, line(s) 61
com/picsart/studio/editor/history/json/EditorActionDeserializer.java, line(s) 455
com/picsart/studio/editor/home/MainFragment$validateMiniApp$3.java, line(s) 131
com/picsart/studio/editor/main/viewmodel/EditorActivityViewModel$loadEditorProject$1.java, line(s) 90
com/picsart/studio/editor/tool/border/BorderFragment.java, line(s) 527
com/picsart/studio/editor/tool/crop/StandaloneCropToolActivity.java, line(s) 83
com/picsart/studio/editor/tool/selection/SelectionFragment.java, line(s) 609
com/picsart/studio/editor/tool/stretch/a.java, line(s) 595
com/picsart/studio/editor/tools/addobjects/core/ItemPositioningUtilsKt$processShapeData$5.java, line(s) 37
com/picsart/studio/editor/tools/addobjects/fragments/adjust/AddObjectSupportFragment.java, line(s) 504
com/picsart/studio/editor/tools/addobjects/items/RasterItem.java, line(s) 346
com/picsart/studio/editor/tools/addobjects/text/ui/adapter/a.java, line(s) 109
com/picsart/studio/editor/tools/addobjects/text/ui/fragments/AddTextFragment$observeStylesClicks$1.java, line(s) 48
com/picsart/studio/editor/tools/addobjects/text/ui/fragments/AddTextFragment$setResultFromMiniApp$1$1.java, line(s) 81,83
com/picsart/studio/editor/tools/addobjects/text/ui/viewmodels/AddTextEditViewModel$loadPresets$3.java, line(s) 42
com/picsart/studio/editor/tools/addobjects/text/ui/viewmodels/AddTextFragmentViewModel$loadPresets$3.java, line(s) 42
com/picsart/studio/editor/tools/addobjects/viewmodels/ItemFragmentViewModel$loadSubToolsConfig$1.java, line(s) 35
com/picsart/studio/editor/tools/addobjects/viewmodels/ShapeItemViewModel$loadShapes$1.java, line(s) 34
com/picsart/studio/editor/tools/layers/LayersViewModel$loadImageBorderConfigs$3.java, line(s) 35
com/picsart/studio/editor/tools/layers/LayersViewModel$loadShapeBorderConfigs$3.java, line(s) 35
com/picsart/studio/editor/tools/layers/LayersViewModel$loadStickerBorderConfigs$3.java, line(s) 35
com/picsart/studio/editor/tools/layers/helper/LayersMiniAppHelper.java, line(s) 179,197
com/picsart/studio/editor/tools/templates/BackgroundFragmentViewModel.java, line(s) 286
com/picsart/studio/editor/tools/templates/TemplateWrapperFragmentViewModel$loadImageBorderConfigs$3.java, line(s) 36
com/picsart/studio/editor/tools/templates/TemplateWrapperFragmentViewModel$loadShapeBorderConfigs$3.java, line(s) 36
com/picsart/studio/editor/tools/templates/TemplateWrapperFragmentViewModel$loadStickerBorderConfigs$3.java, line(s) 36
com/picsart/studio/editor/tools/templates/toolhelpers/ItemToolBaseHelper.java, line(s) 1131
com/picsart/studio/editor/video/main/ProjectRepo.java, line(s) 330
com/picsart/studio/editor/video/main/VideoMainViewModel$awaitRestoreComplete$2.java, line(s) 50,56
com/picsart/studio/editor/video/music/AiMusicFragment$awaitNoNetworkDismissing$2.java, line(s) 46
com/picsart/studio/editor/video/music/AiMusicFragment$awaitStateChangeFromStopped$2.java, line(s) 39
com/picsart/studio/editor/video/music/AiMusicFragment$awaitVideoAnimationEnd$2.java, line(s) 39
com/picsart/studio/editor/video/music/AiMusicFragment$onViewCreated$8$3$1$1.java, line(s) 118,225
com/picsart/studio/editor/video/music/AiMusicFragment.java, line(s) 299,336
com/picsart/studio/editor/video/music/MusicSourcesFragment$awaitFragmentToBeResumed$2.java, line(s) 38
com/picsart/studio/editor/video/music/MusicSourcesFragment.java, line(s) 203
com/picsart/studio/editor/video/music/ProjectVolumeControlFragment$handlePanelsHidingIfTrim$1.java, line(s) 80
com/picsart/studio/editor/video/music/mixer/AudioMixer$awaitAudioFormat$2.java, line(s) 43
com/picsart/studio/editor/video/music/mixer/AudioMixer$awaitProcessing$2.java, line(s) 43
com/picsart/studio/editor/video/music/mixer/AudioMixer$awaitToStart$2.java, line(s) 43
com/picsart/studio/editor/video/music/recorder/AudioRecorder$awaitData$2.java, line(s) 43
com/picsart/studio/editor/video/music/recorder/RecordMuxer$runMuxer$1.java, line(s) 54,67
com/picsart/studio/editor/video/music/recorder/a.java, line(s) 178
com/picsart/studio/editor/video/transcoder/export/Exporter$awaitAudioTrackAdding$2.java, line(s) 43
com/picsart/studio/editor/video/transcoder/export/Exporter$awaitMuxingStarted$2.java, line(s) 43
com/picsart/studio/editor/video/transcoder/preview/PreviewPlayer$play$3.java, line(s) 79
com/picsart/studio/editor/video/transcoder/preview/PreviewPlayer$resume$1.java, line(s) 89,162
com/picsart/studio/picsart/profile/activity/SimplePhotoActivity.java, line(s) 48
com/picsart/studio/reusableviews/mediaView/MediaView.java, line(s) 485
com/picsart/studio/share/domain/aiImage/RealAiMediaManager$addMetadataToMediaFile$2.java, line(s) 70
com/picsart/studio/share/domain/aiImage/RealAiMediaManager$getMediaPromptAndStyleInfo$2.java, line(s) 60,83
com/picsart/studio/share/domain/aiImage/RealAiMediaManager$makeTheAiMediaPublic$1.java, line(s) 57
com/picsart/studio/share/domain/aiImage/RealAiMediaManager.java, line(s) 61,82
com/picsart/upload/work/UploadManagerImpl$upload$1.java, line(s) 102
com/picsart/userProjects/internal/RealAppStartCloudInitManager.java, line(s) 161,192
com/picsart/userProjects/internal/cloudProject/edit/manager/projectFile/RealProjectFileManager.java, line(s) 327,573
com/picsart/userProjects/internal/cloudProject/uploadWorker/manager/sync/ProjectsSingleFileSyncManager$syncProjectsNames$2.java, line(s) 49
com/picsart/userProjects/internal/cloudProject/uploadWorker/manager/sync/ProjectsSingleFileSyncManager$updateProjectsErrorStateToNonSynced$2.java, line(s) 51
com/picsart/userProjects/internal/cloudProject/uploadWorker/manager/sync/ProjectsSingleFileSyncManager.java, line(s) 457,474,492,507
com/picsart/userProjects/internal/cloudProject/uploadWorker/manager/sync/RealProjectsSyncManager$syncProjectsNames$2.java, line(s) 49
com/picsart/userProjects/internal/cloudProject/uploadWorker/manager/sync/RealProjectsSyncManager$updateProjectsErrorStateToNonSynced$2.java, line(s) 51
com/picsart/userProjects/internal/cloudProject/uploadWorker/manager/sync/RealProjectsSyncManager.java, line(s) 360,377,395,410
com/picsart/userProjects/internal/launcher/editor/RealEditorLauncher.java, line(s) 353
com/picsart/userProjects/internal/projectEditorActions/projectEditorActionMenu/CloudProjectActionMenuViewModel$getCurrentProjectMetadata$2.java, line(s) 56
com/picsart/userProjects/internal/projectEditorActions/rename/RealCloudProjectRenameManager$renameFile$2.java, line(s) 120
com/picsart/userProjects/internal/projectsExporter/launcher/RealProjectsExporterLauncher.java, line(s) 195
com/picsart/userProjects/internal/storageInfo/repository/RealStorageUsageRepository$updateCachedStorageUsageInfo$1.java, line(s) 61
com/picsart/userProjects/internal/storageInfo/repository/RealStorageUsageRepository.java, line(s) 49
com/picsart/videomusic/AiMusicViewModel$filterAiMusicCategoriesAsync$1.java, line(s) 56
com/socialin/android/photo/draw/VideoPreviewActivity.java, line(s) 46,47
com/socialin/android/photo/effectsnew/fragment/EffectFragment.java, line(s) 3258,3271
com/socialin/android/preference/PrefFragment.java, line(s) 796
com/vk/api/sdk/internal/VKInitProvider.java, line(s) 42
com/vk/api/sdk/ui/VKWebViewAuthActivity.java, line(s) 175,206
com/vungle/ads/BannerView.java, line(s) 160,217,224
com/vungle/ads/VungleAds.java, line(s) 103,106
com/vungle/ads/internal/AdInternal.java, line(s) 208
com/vungle/ads/internal/VungleInitializer.java, line(s) 175,369,373,188,317,366,376
com/vungle/ads/internal/load/BaseAdLoader.java, line(s) 230,238,671
com/vungle/ads/internal/network/VungleApiClient.java, line(s) 558,255,405,733,736,742
com/vungle/ads/internal/omsdk/NativeOMTracker.java, line(s) 63
com/vungle/ads/internal/presenter/MRAIDPresenter.java, line(s) 188,193,433,819,828,346,406,624,605,612,662,672,692,701,722,730,743,760,767,777,781
com/vungle/ads/internal/presenter/NativeAdPresenter.java, line(s) 366
com/vungle/ads/internal/task/CleanupJob.java, line(s) 98
com/vungle/ads/internal/util/UnzipUtility.java, line(s) 54
data/GoogleBillingServiceImpl$onBillingSetupFinished$1.java, line(s) 70,75,93,125
myobfuscated/a0/a.java, line(s) 167
myobfuscated/a3/e.java, line(s) 30
myobfuscated/a3/f.java, line(s) 64
myobfuscated/a3/g0.java, line(s) 33
myobfuscated/a3/l.java, line(s) 43
myobfuscated/a3/w.java, line(s) 80,67,86
myobfuscated/a32/c.java, line(s) 28
myobfuscated/ad0/i.java, line(s) 672,776,245,248
myobfuscated/ag/i.java, line(s) 144,174,145,175
myobfuscated/ag/j.java, line(s) 48,60,159,212,47,59,83,89,96,155,171,177,195,207,214,87,104,140,175,196
myobfuscated/ap/a.java, line(s) 69
myobfuscated/aw/e.java, line(s) 59,98
myobfuscated/aw/h.java, line(s) 41,47,63,77
myobfuscated/az1/d.java, line(s) 52,92,126,138
myobfuscated/b0/b.java, line(s) 28
myobfuscated/b20/a.java, line(s) 32,41,49,57,66,74,82,90,98,106,115
myobfuscated/b3/a.java, line(s) 152,219
myobfuscated/b4/a.java, line(s) 293,1075,1087,1092,1301,1382,1431,1623,1671,1747,1902,1907,1913,1931,1941,1952,1956,2048,2162,2308,2386,2403,2419,2426,2588,2787,2837,2857,2871,2905,2941,2950,2987,3008,3032,3098,3244,3247,3284,3308,3312,3327,3338,3346,3375,3389,3397,3402,3468,3488,3493,3497,638,646,689,701,713,725,737,749,761,773,780,791,803,79,786,1613,1633,1641,1874,1877,1880,1985,1993,2274,2762,3159
myobfuscated/b4/b.java, line(s) 49
myobfuscated/b5/c.java, line(s) 44,50
myobfuscated/b8/a.java, line(s) 153,142
myobfuscated/bb0/a.java, line(s) 21
myobfuscated/bg/d.java, line(s) 52,58,96,106,53,97,59,107
myobfuscated/bg/i.java, line(s) 82,67
myobfuscated/bq1/a.java, line(s) 23
myobfuscated/c01/a.java, line(s) 29,34
myobfuscated/c01/f.java, line(s) 41,46
myobfuscated/c1/e.java, line(s) 26
myobfuscated/c6/p.java, line(s) 28
myobfuscated/c6/r.java, line(s) 43
myobfuscated/cg/a.java, line(s) 91,90
myobfuscated/ci1/c.java, line(s) 15
myobfuscated/cj2/a.java, line(s) 48,53,46,50
myobfuscated/cm/f.java, line(s) 83
myobfuscated/cm/n.java, line(s) 56
myobfuscated/cp1/c.java, line(s) 142
myobfuscated/cs/a.java, line(s) 254,262,73,82,224
myobfuscated/cs/c.java, line(s) 15
myobfuscated/cs/f.java, line(s) 83
myobfuscated/cs/j.java, line(s) 31
myobfuscated/cs/n.java, line(s) 44,56,61,64,68,86,110,144
myobfuscated/cs/q.java, line(s) 25
myobfuscated/cu/k.java, line(s) 94
myobfuscated/cu/m.java, line(s) 100,83
myobfuscated/d00/m.java, line(s) 27
myobfuscated/d3/g.java, line(s) 143,165,173
myobfuscated/d3/l.java, line(s) 33,55
myobfuscated/d4/c.java, line(s) 140
myobfuscated/d4/d.java, line(s) 156
myobfuscated/d4/f0.java, line(s) 12
myobfuscated/d5/a.java, line(s) 63
myobfuscated/d7/b.java, line(s) 137,166
myobfuscated/d8/a.java, line(s) 424,159,160,197,198
myobfuscated/dg/c.java, line(s) 16,15
myobfuscated/dg/d.java, line(s) 41,40
myobfuscated/dg/g.java, line(s) 73,72
myobfuscated/dg/w.java, line(s) 68,69
myobfuscated/dg/x.java, line(s) 60,65,72,83,61,66,73,84
myobfuscated/dg/y.java, line(s) 36,35
myobfuscated/di1/l.java, line(s) 496
myobfuscated/dk0/h.java, line(s) 411,414
myobfuscated/dp/a.java, line(s) 511,113,120,124,128,454,466
myobfuscated/dp/c.java, line(s) 63
myobfuscated/dr1/f.java, line(s) 386
myobfuscated/dr1/o.java, line(s) 24
myobfuscated/ds/a0.java, line(s) 95,101,107
myobfuscated/dv/d.java, line(s) 20
myobfuscated/dv/e.java, line(s) 36,74,96,128,143,153
myobfuscated/dz1/d.java, line(s) 11
myobfuscated/e/b.java, line(s) 138
myobfuscated/e02/c.java, line(s) 40
myobfuscated/e3/h.java, line(s) 36,41
myobfuscated/e3/i.java, line(s) 40
myobfuscated/e3/j.java, line(s) 51
myobfuscated/e3/k.java, line(s) 39
myobfuscated/e3/l.java, line(s) 48,216
myobfuscated/e3/q.java, line(s) 86
myobfuscated/e4/a.java, line(s) 175
myobfuscated/e61/e.java, line(s) 86
myobfuscated/em1/b.java, line(s) 69,77,84,102
myobfuscated/em1/c.java, line(s) 92,95,98,128,131,134
myobfuscated/eo/b.java, line(s) 40
myobfuscated/eo/o.java, line(s) 83
myobfuscated/ep/a.java, line(s) 65,68,331
myobfuscated/f02/u.java, line(s) 204
myobfuscated/f2/i.java, line(s) 91
myobfuscated/f2/r.java, line(s) 306
myobfuscated/fg/f.java, line(s) 70,71
myobfuscated/fj2/a.java, line(s) 302
myobfuscated/fj2/b.java, line(s) 180,185,146
myobfuscated/fk2/b.java, line(s) 109,127
myobfuscated/fp/c.java, line(s) 1184,98,113,130,255,258,260,271,288,291,293,304,381,384,1112,1123
myobfuscated/fp/d.java, line(s) 247
myobfuscated/fs/a.java, line(s) 137,124
myobfuscated/ft/a.java, line(s) 62,73
myobfuscated/fy/c.java, line(s) 10
myobfuscated/g02/d.java, line(s) 47
myobfuscated/g4/a.java, line(s) 30
myobfuscated/g41/b.java, line(s) 82,92
myobfuscated/g7/c.java, line(s) 18
myobfuscated/g81/a.java, line(s) 39
myobfuscated/gg/c.java, line(s) 46,45,55,85,86
myobfuscated/gg/d.java, line(s) 25,26
myobfuscated/gg/j.java, line(s) 20,24,21,25
myobfuscated/gg/k.java, line(s) 51,54,52,55
myobfuscated/gg/o.java, line(s) 53,58,63,68,73,88,100,54,59,64,69,74,101,89
myobfuscated/gg/s.java, line(s) 72,81,88,73,82,89,90,91,94
myobfuscated/gj2/b.java, line(s) 153,160,258,260,618,623,303,509,549,637,707,828,962,1025,1115,1191,1314,120,494,611,884,1262
myobfuscated/gp/a.java, line(s) 143,148
myobfuscated/gv/c.java, line(s) 37
myobfuscated/gv/d.java, line(s) 54
myobfuscated/gy0/z.java, line(s) 34
myobfuscated/h1/e.java, line(s) 214
myobfuscated/h1/n.java, line(s) 153
myobfuscated/h20/k.java, line(s) 93,101
myobfuscated/h4/e.java, line(s) 232,245,235,256
myobfuscated/h5/a.java, line(s) 30
myobfuscated/hf/b.java, line(s) 20
myobfuscated/hj2/b.java, line(s) 57,77,53,73,81
myobfuscated/ho1/d.java, line(s) 70
myobfuscated/hp/e.java, line(s) 467,545,610,626,631,635,710,895
myobfuscated/i3/k.java, line(s) 26,30,34
myobfuscated/i3/r.java, line(s) 31
myobfuscated/i5/h.java, line(s) 76
myobfuscated/i5/v.java, line(s) 45
myobfuscated/i5/y0.java, line(s) 18
myobfuscated/i7/f.java, line(s) 22,27,11
myobfuscated/ij2/d.java, line(s) 43
myobfuscated/io/a.java, line(s) 127
myobfuscated/ir/d.java, line(s) 118
myobfuscated/iv/a.java, line(s) 248
myobfuscated/j5/d.java, line(s) 193,196
myobfuscated/j5/h.java, line(s) 783,786
myobfuscated/je0/h.java, line(s) 181
myobfuscated/je0/j.java, line(s) 124
myobfuscated/jm1/b.java, line(s) 63
myobfuscated/jo/d.java, line(s) 1705,1744,2017,2499,2600,2637,3011,3178,3182
myobfuscated/jr/a.java, line(s) 19
myobfuscated/ju1/a.java, line(s) 74
myobfuscated/jy/e.java, line(s) 148,151
myobfuscated/k/c.java, line(s) 55
myobfuscated/k/j.java, line(s) 23,37,48
myobfuscated/k9/f.java, line(s) 70
myobfuscated/kg/a.java, line(s) 59,121,138,144,149,67,122,139,145,150
myobfuscated/kg/d.java, line(s) 16,17
myobfuscated/kg/j.java, line(s) 52,53
myobfuscated/kn/b.java, line(s) 212,214
myobfuscated/ko/d.java, line(s) 170,251
myobfuscated/kt/b0.java, line(s) 172,177,180,219,209,213,61,61
myobfuscated/kt/c0.java, line(s) 34,47,86,136,33,33,46,46,85,148,157,172,180
myobfuscated/kt/e.java, line(s) 19,24
myobfuscated/kt/f0.java, line(s) 26,25
myobfuscated/kt/g.java, line(s) 366,944,365,392,422,456,496,542,594,663,726,820,934,1055,1165,1288,148,169,205,237,251,259,267,277,287,303,305,355,359,361,604,829,939
myobfuscated/kt/h.java, line(s) 102,101
myobfuscated/kt/h0.java, line(s) 49,53,61,74,91,119,143,99,104,127,48,52,60,73,88,118,142
myobfuscated/kt/i.java, line(s) 25,24
myobfuscated/kt/j.java, line(s) 36,50,35,49,27,47
myobfuscated/kt/l.java, line(s) 40
myobfuscated/kt/m.java, line(s) 84,95,78
myobfuscated/kt/n.java, line(s) 46,24,27,37,45,38
myobfuscated/kt/o.java, line(s) 90,101,34,89,74,82,98
myobfuscated/kt/p.java, line(s) 82,71,101
myobfuscated/kt/q.java, line(s) 41,54,69,88
myobfuscated/kt/v.java, line(s) 35,45,34,44
myobfuscated/kt/w.java, line(s) 30
myobfuscated/kt/x.java, line(s) 31,41,75,72,111,30,30,40,40,74,84,89,92
myobfuscated/kt/y.java, line(s) 17
myobfuscated/l32/a.java, line(s) 111
myobfuscated/l4/a.java, line(s) 164,169,176,180,195,203
myobfuscated/l81/c.java, line(s) 24
myobfuscated/lj2/e.java, line(s) 82,127
myobfuscated/lk/c.java, line(s) 380,345
myobfuscated/lo/b.java, line(s) 88,496,595
myobfuscated/lo/e.java, line(s) 256,351
myobfuscated/lo/f.java, line(s) 19,26,56,66,78,88
myobfuscated/lo/h.java, line(s) 56
myobfuscated/lo/l.java, line(s) 58
myobfuscated/lp2/a.java, line(s) 41,47,49,43,45
myobfuscated/lr/g.java, line(s) 310
myobfuscated/lr1/d.java, line(s) 57
myobfuscated/ls/e.java, line(s) 69,267,276,197
myobfuscated/m3/a.java, line(s) 278
myobfuscated/m3/b.java, line(s) 43
myobfuscated/m3/g0.java, line(s) 1036,997,1035,423
myobfuscated/m3/i0.java, line(s) 37,48
myobfuscated/m3/s.java, line(s) 28,41,88,150,201,220,244
myobfuscated/m3/w0.java, line(s) 327,346,72,84,91,100,45,318
myobfuscated/mg/n.java, line(s) 103,145,190,104,146,191
myobfuscated/mg/p.java, line(s) 19,18
myobfuscated/mk2/e.java, line(s) 147,137
myobfuscated/mm1/f.java, line(s) 57
myobfuscated/mo/i.java, line(s) 288
myobfuscated/mq1/d.java, line(s) 78
myobfuscated/nf/g0.java, line(s) 38,53,43,48,33,28,58
myobfuscated/nf/o0.java, line(s) 140
myobfuscated/nf/z0.java, line(s) 25
myobfuscated/nj2/a.java, line(s) 53
myobfuscated/nl/c.java, line(s) 74
myobfuscated/nn/i.java, line(s) 36,39,43,47,79,82,85,88,91
myobfuscated/no/f.java, line(s) 258
myobfuscated/no/l.java, line(s) 155,190,210,217,295,324,335
myobfuscated/no/o.java, line(s) 34
myobfuscated/no/t.java, line(s) 54,59,102
myobfuscated/np/b.java, line(s) 70
myobfuscated/np/l.java, line(s) 22,63,76,88,111
myobfuscated/o20/r.java, line(s) 76
myobfuscated/o4/c.java, line(s) 121,140,216
myobfuscated/o4/e.java, line(s) 137,168,206,214
myobfuscated/o7/a.java, line(s) 34,51,58,67
myobfuscated/oe0/e.java, line(s) 112
myobfuscated/oj/e.java, line(s) 167,172,177
myobfuscated/oj/p.java, line(s) 113
myobfuscated/oj/y.java, line(s) 134,137,142
myobfuscated/oo/a.java, line(s) 265
myobfuscated/oo/c.java, line(s) 37
myobfuscated/op/e.java, line(s) 1768,1839
myobfuscated/op/k.java, line(s) 157
myobfuscated/os0/a.java, line(s) 39
myobfuscated/ov/a.java, line(s) 171
myobfuscated/ov/d.java, line(s) 56
myobfuscated/p/f.java, line(s) 99,150,162,172,352
myobfuscated/p02/n.java, line(s) 153
myobfuscated/pe0/h.java, line(s) 284
myobfuscated/pj2/a.java, line(s) 80,100,123,125,130,187,112
myobfuscated/pj2/c.java, line(s) 37
myobfuscated/pq/h.java, line(s) 44
myobfuscated/py/f.java, line(s) 20
myobfuscated/py/g.java, line(s) 36
myobfuscated/q2/c.java, line(s) 199
myobfuscated/q2/o.java, line(s) 57
myobfuscated/q3/e.java, line(s) 239,254,259,264,281
myobfuscated/q3/f.java, line(s) 72
myobfuscated/q3/n.java, line(s) 19,18
myobfuscated/q4/c.java, line(s) 25
myobfuscated/q5/h.java, line(s) 48,51
myobfuscated/qg/h.java, line(s) 38,93,94,39
myobfuscated/qj2/a.java, line(s) 49,38
myobfuscated/qn/a.java, line(s) 9,16,8,15
myobfuscated/r/a0.java, line(s) 103
myobfuscated/r/e0.java, line(s) 41,56,75,98,279
myobfuscated/r/g.java, line(s) 184
myobfuscated/r/h0.java, line(s) 97,251,370,176,183,336,347,376,389,403
myobfuscated/r/i0.java, line(s) 25
myobfuscated/r/p.java, line(s) 116,125,189,225
myobfuscated/r/q0.java, line(s) 96,168
myobfuscated/r/t0.java, line(s) 21
myobfuscated/r/y.java, line(s) 391,156,161,168,304,374
myobfuscated/r3/b.java, line(s) 35
myobfuscated/r7/a.java, line(s) 107,109,116,84,92,122,129,152,159
myobfuscated/r7/b.java, line(s) 16,19
myobfuscated/r7/c.java, line(s) 25,32,38,55,68,70,73
myobfuscated/rs/d.java, line(s) 46,50,56,59,81
myobfuscated/rs/i.java, line(s) 59
myobfuscated/s5/h.java, line(s) 19,26,33,40,47
myobfuscated/sa/c.java, line(s) 277
myobfuscated/sc0/a.java, line(s) 55
myobfuscated/sd0/a.java, line(s) 81,90,155
myobfuscated/sm/a.java, line(s) 118
myobfuscated/sn/a.java, line(s) 92,91
myobfuscated/sr0/a.java, line(s) 19,21
myobfuscated/su1/g.java, line(s) 44,48,60,64
myobfuscated/sy1/b.java, line(s) 39,76
myobfuscated/t3/c.java, line(s) 303
myobfuscated/t5/i0.java, line(s) 40
myobfuscated/t7/c0.java, line(s) 47
myobfuscated/t7/j0.java, line(s) 50,66,74,169
myobfuscated/tf/g.java, line(s) 290,291
myobfuscated/tf/h.java, line(s) 82,81
myobfuscated/tj/e.java, line(s) 84,94,102,126
myobfuscated/tj2/c.java, line(s) 62
myobfuscated/tj2/d.java, line(s) 56,65,67,73,58,78
myobfuscated/tj2/j.java, line(s) 159
myobfuscated/tn/n.java, line(s) 93,92
myobfuscated/to2/h.java, line(s) 79,79
myobfuscated/u2/a.java, line(s) 98,104
myobfuscated/u2/c.java, line(s) 70,72
myobfuscated/u2/d.java, line(s) 110,112
myobfuscated/u2/e.java, line(s) 146,148
myobfuscated/u4/b.java, line(s) 19,21
myobfuscated/u4/b0.java, line(s) 31
myobfuscated/u4/f.java, line(s) 399,317
myobfuscated/u4/k.java, line(s) 28
myobfuscated/u4/q.java, line(s) 54,76
myobfuscated/u4/w.java, line(s) 125
myobfuscated/ud0/j.java, line(s) 39,46,52,60,72
myobfuscated/ud0/k.java, line(s) 29
myobfuscated/ud0/l.java, line(s) 38
myobfuscated/ug/a.java, line(s) 45,46
myobfuscated/ui2/b.java, line(s) 77
myobfuscated/uj/b.java, line(s) 35
myobfuscated/uj/c.java, line(s) 88,104
myobfuscated/uj2/a.java, line(s) 226,228,324,192
myobfuscated/uj2/e.java, line(s) 275,429,460,315,329,431,86,343
myobfuscated/uo/a.java, line(s) 286,327,399,401,537,546,596
myobfuscated/uo2/d.java, line(s) 43
myobfuscated/uy1/j.java, line(s) 40
myobfuscated/v/a.java, line(s) 102,106
myobfuscated/v2/e.java, line(s) 371
myobfuscated/v2/f.java, line(s) 394,78,217,569
myobfuscated/v2/g.java, line(s) 29,67
myobfuscated/v2/h.java, line(s) 130,135
myobfuscated/v2/j.java, line(s) 156,476
myobfuscated/v2/k.java, line(s) 129,343,351,399,402,403,404,408
myobfuscated/v2/l.java, line(s) 177,184
myobfuscated/v2/n.java, line(s) 918
myobfuscated/v2/t.java, line(s) 144,373,445,538,551
myobfuscated/v6/u.java, line(s) 66
myobfuscated/vf/d.java, line(s) 181,208,178,207
myobfuscated/vf/e.java, line(s) 149,166,171,148,165,170,190
myobfuscated/vj2/a.java, line(s) 252
myobfuscated/w/e.java, line(s) 56
myobfuscated/w/j.java, line(s) 23,33,43,52,61,70,79
myobfuscated/w1/o.java, line(s) 136
myobfuscated/w2/b.java, line(s) 210,89
myobfuscated/w2/g.java, line(s) 73
myobfuscated/w3/b.java, line(s) 45,62,84
myobfuscated/w3/c.java, line(s) 25,53
myobfuscated/w3/e.java, line(s) 106
myobfuscated/w4/i.java, line(s) 393,511,513
myobfuscated/w4/j.java, line(s) 64,67
myobfuscated/w4/n.java, line(s) 165,212
myobfuscated/wj/d.java, line(s) 53
myobfuscated/wj2/a.java, line(s) 99
myobfuscated/wj2/d.java, line(s) 52,28,51
myobfuscated/wj2/e.java, line(s) 58,70,74,164,176,185,269
myobfuscated/wj2/g.java, line(s) 72,83,85
myobfuscated/wj2/i.java, line(s) 23,30,37,48,55
myobfuscated/wj2/j.java, line(s) 66
myobfuscated/wl1/a.java, line(s) 13
myobfuscated/wn2/h.java, line(s) 384
myobfuscated/xf/b.java, line(s) 46,45
myobfuscated/xf/h.java, line(s) 38,83,147,37,82,86,91,97,146,94,98
myobfuscated/xf/i.java, line(s) 47,46
myobfuscated/xl1/b.java, line(s) 861
myobfuscated/xn/c.java, line(s) 153
myobfuscated/xr1/a.java, line(s) 59
myobfuscated/y70/b.java, line(s) 22
myobfuscated/yf/a.java, line(s) 90,137,172,89,136,171
myobfuscated/yj/c.java, line(s) 114,86
myobfuscated/yj/e.java, line(s) 90
myobfuscated/yj/g.java, line(s) 59
myobfuscated/yj/h.java, line(s) 73
myobfuscated/yk/d.java, line(s) 110
myobfuscated/yr/e.java, line(s) 40,30,46,52,39,45,51,57,58,63,64
myobfuscated/yr/o.java, line(s) 60,64,135,138,141,167,180,189,201,56,88,128,164
myobfuscated/yr/r.java, line(s) 85,95,111,126,129,137,138,118
myobfuscated/yz1/d.java, line(s) 221,225,231,252,259,268,295,319,414,420,427,440,507,691,703,719,736,747,755,761,767,778,819,1005,1053,115,120,126,131,138,149,156,542,547,560,565,570,575,582,596,603
myobfuscated/z/b.java, line(s) 187,212
myobfuscated/z4/a.java, line(s) 59
myobfuscated/zf/e.java, line(s) 136,137
myobfuscated/zn/a.java, line(s) 85
myobfuscated/zo/a.java, line(s) 251
myobfuscated/zo/b.java, line(s) 364,314,299,384,411,416

信息 应用程序可以写入应用程序目录。敏感信息应加密

应用程序可以写入应用程序目录。敏感信息应加密


Files:
bo/app/e.java, line(s) 99,99
bo/app/e1.java, line(s) 66
bo/app/e7.java, line(s) 195,198
bo/app/j0.java, line(s) 234,237,234,237
bo/app/k0.java, line(s) 161,161
bo/app/l.java, line(s) 231,234
bo/app/l0.java, line(s) 27,27
bo/app/m1.java, line(s) 182,185,188
bo/app/m5.java, line(s) 28,28
bo/app/m6.java, line(s) 546,546
bo/app/q4.java, line(s) 77,77
bo/app/s1.java, line(s) 127,127
bo/app/u0.java, line(s) 260
bo/app/u4.java, line(s) 63,63
bo/app/u6.java, line(s) 558
bo/app/w3.java, line(s) 68,68
bo/app/x6.java, line(s) 202
bo/app/y.java, line(s) 429,432,429,432
bo/app/z0.java, line(s) 24,24
com/braze/configuration/RuntimeAppConfigurationProvider.java, line(s) 66,66
com/braze/managers/BrazeGeofenceManager.java, line(s) 604
com/kakao/sdk/common/model/ApplicationContextInfo.java, line(s) 45,45
myobfuscated/ck/b.java, line(s) 31,31
myobfuscated/fx/b0.java, line(s) 36
myobfuscated/fx/f0.java, line(s) 25,25
myobfuscated/fx/l0.java, line(s) 34
myobfuscated/fx/m0.java, line(s) 41,41
myobfuscated/oj/a.java, line(s) 15,15
myobfuscated/oj/f.java, line(s) 12,12
myobfuscated/oj/q.java, line(s) 12,12
myobfuscated/oj/y.java, line(s) 119,119
myobfuscated/wj/g.java, line(s) 30,30

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/picsart/analytics/debug/components/experiments/AnalyticsSettingsActivity.java, line(s) 5,175
com/picsart/studio/editor/tool/text2image/history/Text2ImageHistoryFragment.java, line(s) 4,143
myobfuscated/an1/o.java, line(s) 6,272
myobfuscated/qr0/d.java, line(s) 4,18

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
com/dropbox/core/http/SSLConfig.java, line(s) 131,130,128
com/inmobi/media/pa.java, line(s) 102,106
com/kakao/sdk/network/ApiFactory.java, line(s) 84,84
com/picsart/jedi/communication/localServer/impl/HttpServerServiceImpl$listenFlow$1$1.java, line(s) 83,78,80,80
myobfuscated/e41/b.java, line(s) 38,33
myobfuscated/lf2/b.java, line(s) 51,29,68
myobfuscated/to2/c.java, line(s) 81,80,79
myobfuscated/to2/d.java, line(s) 106,95,113,104,104
myobfuscated/to2/g.java, line(s) 79,78,77,77
myobfuscated/to2/h.java, line(s) 234,221,232,232

安全 此应用程序可能具有Root检测功能

此应用程序可能具有Root检测功能
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
com/bugsnag/android/RootDetector.java, line(s) 24,24,24
myobfuscated/yr/g0.java, line(s) 34

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (upload.meiease.cn) 通信。

{'ip': '58.222.45.176', 'country_short': 'CN', 'country_long': 'China', 'region': 'Jiangsu', 'city': 'Taizhou', 'latitude': '32.493328', 'longitude': '119.910629'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (meiease.cn) 通信。

{'ip': '124.221.161.236', 'country_short': 'CN', 'country_long': 'China', 'region': 'Beijing', 'city': 'Beijing', 'latitude': '39.907501', 'longitude': '116.397232'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (pagead2.googlesyndication.com) 通信。

{'ip': '180.163.150.166', 'country_short': 'CN', 'country_long': 'China', 'region': 'Shanghai', 'city': 'Shanghai', 'latitude': '31.224333', 'longitude': '121.469139'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (app-measurement.com) 通信。

{'ip': '180.163.150.33', 'country_short': 'CN', 'country_long': 'China', 'region': 'Shanghai', 'city': 'Shanghai', 'latitude': '31.224333', 'longitude': '121.469139'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (api.meiease.cn) 通信。

{'ip': '61.170.98.123', 'country_short': 'CN', 'country_long': 'China', 'region': 'Shanghai', 'city': 'Shanghai', 'latitude': '31.224333', 'longitude': '121.469139'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (obj.meiease.cn) 通信。

{'ip': '81.69.184.44', 'country_short': 'CN', 'country_long': 'China', 'region': 'Beijing', 'city': 'Beijing', 'latitude': '39.907501', 'longitude': '116.397232'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (pastatic.meiease.cn) 通信。

{'ip': '58.222.38.254', 'country_short': 'CN', 'country_long': 'China', 'region': 'Jiangsu', 'city': 'Taizhou', 'latitude': '32.493328', 'longitude': '119.910629'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (googleads.g.doubleclick.net) 通信。

{'ip': '180.163.150.166', 'country_short': 'CN', 'country_long': 'China', 'region': 'Shanghai', 'city': 'Shanghai', 'latitude': '31.224333', 'longitude': '121.469139'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (www.linkedin.com) 通信。

{'ip': '52.131.37.152', 'country_short': 'CN', 'country_long': 'China', 'region': 'Beijing', 'city': 'Beijing', 'latitude': '39.907501', 'longitude': '116.397232'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (ai.meiease.cn) 通信。

{'ip': '81.69.184.44', 'country_short': 'CN', 'country_long': 'China', 'region': 'Beijing', 'city': 'Beijing', 'latitude': '39.907501', 'longitude': '116.397232'}

关注 应用程序可能与位于OFAC制裁国家 (China) 的服务器 (itunes.apple.com) 通信。

{'ip': '58.220.72.156', 'country_short': 'CN', 'country_long': 'China', 'region': 'Jiangsu', 'city': 'Yangzhou', 'latitude': '32.397221', 'longitude': '119.435829'}

安全评分: ( Picsart 24.6)