安全分析报告： One Manager v1.9.8.0

安全分数


安全分数 39/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

19

用户/设备跟踪器


调研结果

高危 12
中危 23
信息 4
安全 3
关注 13

高危 基本配置不安全地配置为允许到所有域的明文流量。 

Scope:
*

高危 基本配置配置为绕过证书固定。 

Scope:
*

高危 基本配置配置为信任用户安装的证书。 

Scope:
*

高危 基本配置配置为绕过证书固定。 

Scope:
*

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击 

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
com/applovin/impl/adview/b.java, line(s) 327,14
com/applovin/impl/sdk/e/s.java, line(s) 98,4
com/fyber/inneractive/sdk/activities/InneractiveInternalBrowserActivity.java, line(s) 165,12
com/fyber/inneractive/sdk/config/r.java, line(s) 32,4
com/mbridge/msdk/advanced/signal/NativeAdvancedExpandDialog.java, line(s) 214,15
com/mbridge/msdk/click/m.java, line(s) 197,14,15
com/mbridge/msdk/mbbanner/common/c/d.java, line(s) 702,14
com/mbridge/msdk/mbbanner/common/communication/BannerExpandDialog.java, line(s) 210,15
com/mbridge/msdk/nativex/view/BaseMBMediaView.java, line(s) 520,2352,23,24
com/mbridge/msdk/splash/signal/SplashExpandDialog.java, line(s) 214,15
com/mbridge/msdk/video/bt/module/MBridgeBTWebView.java, line(s) 361,13
com/mbridge/msdk/video/module/MBridgeAlertWebview.java, line(s) 83,6
com/mbridge/msdk/video/module/MBridgeH5EndCardView.java, line(s) 745,17
com/unity3d/services/core/webview/WebViewApp.java, line(s) 394,10,55,61,75,112
sg/bigo/ads/controller/f/c.java, line(s) 121,10
sg/bigo/ads/core/mraid/c.java, line(s) 599,18,19

高危 应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文 

应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-block-cipher-mode

Files:
com/inmobi/media/x2.java, line(s) 188
com/inmobi/media/x3.java, line(s) 51

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/fyber/inneractive/sdk/player/exoplayer2/extractor/hls/a.java, line(s) 33
com/ironsource/mediationsdk/utils/IronSourceAES.java, line(s) 59,108

高危 默认情况下，调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知，ECB模式很弱，因为它导致相同明文块的密文相同 

默认情况下，调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知，ECB模式很弱，因为它导致相同明文块的密文相同
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-block-cipher-mode

Files:
com/trustlook/sdk/cloudscan/CloudUtil.java, line(s) 47,60

高危 不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击 

不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#webview-server-certificate-verification

Files:
com/yandex/mobile/ads/impl/d40.java, line(s) 50,42
com/yandex/mobile/ads/impl/k2.java, line(s) 95,93

高危 该文件是World Writable。任何应用程序都可以写入文件 

该文件是World Writable。任何应用程序都可以写入文件
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
com/ironsource/mediationsdk/utils/IronSourceUtils.java, line(s) 471
com/mbridge/msdk/mbbid/common/b.java, line(s) 84
com/trustlook/sdk/data/DataUtils.java, line(s) 36

高危 已启用远程WebView调试 

已启用远程WebView调试
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
com/applovin/impl/adview/d.java, line(s) 222,9
com/fyber/inneractive/sdk/web/d.java, line(s) 218,7
com/ironsource/sdk/controller/t.java, line(s) 338,23,24

高危 应用程序包含隐私跟踪程序 

此应用程序有多个19隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危 基本配置配置为信任系统证书。 

Scope:
*

中危 应用程序已启用明文网络流量 

[android:usesCleartextTraffic=true]
应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。

中危 应用程序数据可以被备份 

[android:allowBackup=true]
这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。

中危 Broadcast Receiver (com.one.manager.receiver.NotificationCancelReceiver) 未被保护。 

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.one.manager.service.NotificationChangeService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_NOTIFICATION_LISTENER_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity (com.facebook.CustomTabActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Content Provider (com.yandex.metrica.PreloadInfoContentProvider) 未被保护。 

[android:exported=true]
发现 Content Provider与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Content Provider (io.appmetrica.analytics.internal.PreloadInfoContentProvider) 未被保护。 

[android:exported=true]
发现 Content Provider与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (androidx.work.impl.background.systemjob.SystemJobService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (androidx.profileinstaller.ProfileInstallReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
com/apm/insight/e/b/a.java, line(s) 4,40
com/apm/insight/e/b/b.java, line(s) 5,39
com/applovin/exoplayer2/a/d.java, line(s) 4,36
com/applovin/exoplayer2/a/l.java, line(s) 4,38
com/applovin/exoplayer2/a/v.java, line(s) 7,89
com/applovin/impl/mediation/debugger/ui/a/h.java, line(s) 4,39
com/bykv/vk/openvk/component/video/a/b/b/d.java, line(s) 4,5,14
com/bykv/vk/openvk/preload/geckox/a/b.java, line(s) 6,7,58
com/inmobi/media/i3.java, line(s) 5,107
com/ironsource/a3.java, line(s) 6,7,56
com/ironsource/b3.java, line(s) 6,7,21
com/mbridge/msdk/e/b.java, line(s) 4,5,23
com/mbridge/msdk/foundation/db/BatchReportDao.java, line(s) 6,82
com/mbridge/msdk/foundation/db/b.java, line(s) 6,83
com/mbridge/msdk/foundation/db/c.java, line(s) 5,39
com/mbridge/msdk/foundation/db/f.java, line(s) 6,91
com/mbridge/msdk/foundation/db/h.java, line(s) 4,19
com/mbridge/msdk/foundation/download/database/DatabaseHelper.java, line(s) 6,83
com/monetization/ads/exo/offline/a.java, line(s) 5,6,262
com/trustlook/sdk/database/DBHelper.java, line(s) 4,5,48
com/trustlook/sdk/database/DataSource.java, line(s) 6,7,559
com/trustlook/sdk/database/SimplifiedAppDAO.java, line(s) 8,9,132
com/trustlook/sdk/database/SimplifiedAppDBHelper.java, line(s) 5,6,23
com/yandex/div/storage/database/AndroidDatabaseOpenHelper.java, line(s) 5,6,7,95
com/yandex/div/storage/database/ClosableSqlCompiler.java, line(s) 4,31
com/yandex/div/storage/database/DatabaseOpenHelper.java, line(s) 4,26
com/yandex/metrica/impl/ob/A9.java, line(s) 3,11
com/yandex/metrica/impl/ob/AbstractC2314r8.java, line(s) 5,127
com/yandex/metrica/impl/ob/B9.java, line(s) 3,12
com/yandex/metrica/impl/ob/C1892a9.java, line(s) 4,11
com/yandex/metrica/impl/ob/C1917b9.java, line(s) 3,9
com/yandex/metrica/impl/ob/C1942c9.java, line(s) 3,9
com/yandex/metrica/impl/ob/C1967d9.java, line(s) 3,9
com/yandex/metrica/impl/ob/C1992e9.java, line(s) 3,8
com/yandex/metrica/impl/ob/C2017f9.java, line(s) 3,11
com/yandex/metrica/impl/ob/C2042g9.java, line(s) 3,11
com/yandex/metrica/impl/ob/C2067h9.java, line(s) 3,10
com/yandex/metrica/impl/ob/C2082i.java, line(s) 7,145
com/yandex/metrica/impl/ob/C2092i9.java, line(s) 6,24
com/yandex/metrica/impl/ob/C2116j9.java, line(s) 3,9
com/yandex/metrica/impl/ob/C2141k9.java, line(s) 6,21
com/yandex/metrica/impl/ob/C2166l9.java, line(s) 3,9
com/yandex/metrica/impl/ob/C2191m9.java, line(s) 3,10
com/yandex/metrica/impl/ob/C2216n9.java, line(s) 3,9
com/yandex/metrica/impl/ob/C2241o9.java, line(s) 3,9
com/yandex/metrica/impl/ob/C2266p9.java, line(s) 3,10
com/yandex/metrica/impl/ob/C2291q9.java, line(s) 3,12
com/yandex/metrica/impl/ob/C2315r9.java, line(s) 3,12
com/yandex/metrica/impl/ob/C2339s8.java, line(s) 6,62
com/yandex/metrica/impl/ob/C2340s9.java, line(s) 3,9
com/yandex/metrica/impl/ob/C2364t8.java, line(s) 7,8,222
com/yandex/metrica/impl/ob/C2390u9.java, line(s) 3,13
com/yandex/metrica/impl/ob/C2415v9.java, line(s) 3,9
com/yandex/metrica/impl/ob/C2445w9.java, line(s) 3,13
com/yandex/metrica/impl/ob/C2470x9.java, line(s) 3,11
com/yandex/metrica/impl/ob/C2495y9.java, line(s) 3,11
com/yandex/metrica/impl/ob/C2520z9.java, line(s) 3,12
com/yandex/metrica/impl/ob/C8.java, line(s) 4,27
com/yandex/metrica/impl/ob/Q8.java, line(s) 3,9
com/yandex/metrica/impl/ob/R8.java, line(s) 3,9
com/yandex/metrica/impl/ob/S8.java, line(s) 3,9
com/yandex/metrica/impl/ob/T8.java, line(s) 3,9
com/yandex/metrica/impl/ob/U8.java, line(s) 3,10
com/yandex/metrica/impl/ob/V8.java, line(s) 3,9
com/yandex/metrica/impl/ob/W8.java, line(s) 3,9
com/yandex/metrica/impl/ob/X8.java, line(s) 3,9
com/yandex/metrica/impl/ob/Y8.java, line(s) 3,10
com/yandex/metrica/impl/ob/Z8.java, line(s) 3,10
com/yandex/mobile/ads/impl/jf1.java, line(s) 6,7,24
com/yandex/mobile/ads/impl/ji.java, line(s) 5,33
com/yandex/mobile/ads/impl/si.java, line(s) 6,7,399
com/yandex/mobile/ads/impl/zm1.java, line(s) 6,15
io/appmetrica/analytics/coreutils/internal/db/DBUtils.java, line(s) 5,49
io/appmetrica/analytics/impl/A2.java, line(s) 5,285
io/appmetrica/analytics/impl/H3.java, line(s) 6,49
io/appmetrica/analytics/impl/K3.java, line(s) 7,8,205
io/appmetrica/analytics/impl/N3.java, line(s) 3,10
io/appmetrica/analytics/impl/O3.java, line(s) 3,10
io/appmetrica/analytics/impl/P3.java, line(s) 3,10
io/appmetrica/analytics/impl/Q3.java, line(s) 3,10
io/appmetrica/analytics/impl/R3.java, line(s) 3,10
io/appmetrica/analytics/impl/S3.java, line(s) 3,10
io/appmetrica/analytics/impl/T3.java, line(s) 3,14
io/appmetrica/analytics/impl/U3.java, line(s) 3,14
o2/j.java, line(s) 3,40
o2/l.java, line(s) 4,24
o2/m.java, line(s) 4,5,121
o2/o.java, line(s) 4,5,223
sg/bigo/ads/common/e/a/b.java, line(s) 4,5,31

中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
com/applovin/impl/mediation/c/a/a.java, line(s) 41
com/applovin/mediation/AppLovinUtils.java, line(s) 28
com/applovin/mediation/ads/MaxAdView.java, line(s) 141,131
com/applovin/mediation/ads/MaxAppOpenAd.java, line(s) 66,56
com/applovin/mediation/ads/MaxInterstitialAd.java, line(s) 75,65
com/applovin/mediation/ads/MaxRewardedAd.java, line(s) 93,83
com/applovin/mediation/ads/MaxRewardedInterstitialAd.java, line(s) 70,60
com/applovin/mediation/nativeAds/MaxNativeAdLoader.java, line(s) 71,66
com/applovin/sdk/AppLovinSdk.java, line(s) 181
com/applovin/sdk/AppLovinSdkSettings.java, line(s) 179
com/applovin/sdk/AppLovinWebViewActivity.java, line(s) 26
com/hjq/permissions/StartActivityManager.java, line(s) 11
com/inmobi/commons/core/configs/AdConfig.java, line(s) 430
com/inmobi/media/k0.java, line(s) 15
com/inmobi/unification/sdk/model/Initialization/TimeoutConfigurations.java, line(s) 65,52
com/ironsource/adapters/ironsource/IronSourceAdapter.java, line(s) 88,58,57,714,479
com/ironsource/adapters/ironsource/IronSourceLoadParameters.java, line(s) 57,60
com/ironsource/adapters/supersonicads/SupersonicAdsAdapter.java, line(s) 73,216,397
com/ironsource/mediationsdk/adquality/AdQualityBridgeKt.java, line(s) 8
com/ironsource/mediationsdk/adunit/adapter/utility/AdOptionsPosition.java, line(s) 12
com/ironsource/mediationsdk/c.java, line(s) 247,396
com/ironsource/mediationsdk/p.java, line(s) 3159,3140
com/ironsource/mediationsdk/server/ServerURL.java, line(s) 29,55
com/ironsource/mediationsdk/utils/IronSourceConstants.java, line(s) 94,105
com/mbridge/msdk/MBridgeConstans.java, line(s) 16,51
com/mbridge/msdk/foundation/db/m.java, line(s) 63,75,31
com/mbridge/msdk/foundation/download/core/DownloadCommon.java, line(s) 21
com/mbridge/msdk/foundation/download/core/DownloaderReporter.java, line(s) 16
com/mbridge/msdk/foundation/entity/CampaignEx.java, line(s) 41
com/mbridge/msdk/foundation/entity/n.java, line(s) 120,133,207,511,670,255,691,197,228,594,237,157,266,723,604
com/mbridge/msdk/foundation/same/report/e.java, line(s) 99
com/mbridge/msdk/foundation/same/report/o.java, line(s) 400
com/mbridge/msdk/playercommon/exoplayer2/drm/DefaultDrmSessionManager.java, line(s) 31
com/mbridge/msdk/video/dynview/moffer/MOfferModel.java, line(s) 118
com/unity3d/ads/core/configuration/AlternativeFlowReader.java, line(s) 9
com/unity3d/ads/core/configuration/GameServerIdReader.java, line(s) 9
com/unity3d/ads/core/data/datasource/AndroidMediationDataSource.java, line(s) 11,15
com/unity3d/ads/metadata/InAppPurchaseMetaData.java, line(s) 13
com/unity3d/services/ads/gmascar/utils/ScarConstants.java, line(s) 4,5,6,7,9,10
com/unity3d/services/core/configuration/ExperimentObject.java, line(s) 7,8
com/unity3d/services/core/device/reader/DeviceInfoReaderFilterProvider.java, line(s) 12,13
com/unity3d/services/core/device/reader/JsonStorageKeyNames.java, line(s) 4,6,7,8,10,11,12,13,9,14,5,15,16,17
com/unity3d/services/core/properties/SdkProperties.java, line(s) 28
com/vungle/ads/internal/task/CleanupJob.java, line(s) 13
com/yandex/metrica/impl/ob/C4.java, line(s) 112
com/yandex/metrica/impl/ob/X4.java, line(s) 45
com/yandex/metrica/impl/ob/vo.java, line(s) 18
io/appmetrica/analytics/impl/C2914w.java, line(s) 18
io/appmetrica/analytics/impl/T1.java, line(s) 111
sg/bigo/ads/api/AdConfig.java, line(s) 10
sg/bigo/ads/common/g/a.java, line(s) 63

中危 IP地址泄露 

IP地址泄露


Files:
com/applovin/mediation/BuildConfig.java, line(s) 4
com/applovin/mediation/adapters/GoogleAdManagerMediationAdapter.java, line(s) 1203
com/applovin/mediation/adapters/GoogleMediationAdapter.java, line(s) 1363
com/applovin/mediation/adapters/NimbusMediationAdapter.java, line(s) 30
com/applovin/mediation/adapters/bytedance/BuildConfig.java, line(s) 10
com/applovin/mediation/adapters/facebook/BuildConfig.java, line(s) 10
com/applovin/mediation/adapters/google/BuildConfig.java, line(s) 10
com/applovin/mediation/adapters/googleadmanager/BuildConfig.java, line(s) 10
com/applovin/mediation/adapters/ironsource/BuildConfig.java, line(s) 10
com/applovin/mediation/adapters/mintegral/BuildConfig.java, line(s) 10
com/applovin/mediation/adapters/unityads/BuildConfig.java, line(s) 10
com/applovin/mediation/adapters/vungle/BuildConfig.java, line(s) 10
com/applovin/mediation/adapters/yandex/BuildConfig.java, line(s) 10
com/mbridge/msdk/advanced/view/a.java, line(s) 59
sg/bigo/ads/controller/c/l.java, line(s) 300
sg/bigo/ads/core/player/a/d.java, line(s) 336,340,347

中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/apm/insight/entity/d.java, line(s) 20
com/apm/insight/l/w.java, line(s) 53,64,95
com/apm/insight/nativecrash/c.java, line(s) 483
com/fyber/inneractive/sdk/network/l0.java, line(s) 56
com/fyber/inneractive/sdk/util/p.java, line(s) 328
com/fyber/inneractive/sdk/web/i.java, line(s) 934
com/inmobi/media/n3.java, line(s) 98,101,188,191
com/ironsource/o3.java, line(s) 350,213,508
com/ironsource/sdk/utils/SDKUtils.java, line(s) 283
com/ironsource/t4.java, line(s) 183,188
com/mbridge/msdk/foundation/same/report/b/d.java, line(s) 150
com/mbridge/msdk/foundation/tools/ag.java, line(s) 99,56,67,80,108
com/one/manager/code/ext/FileExtKt.java, line(s) 94
com/one/manager/image/compressor/CompreUtils.java, line(s) 66,87,123,132
com/one/manager/ui/model/PhotoClearViewModel$getPhotoClearList$1.java, line(s) 83,83
com/pgl/ssdk/ces/e.java, line(s) 385
com/trustlook/sdk/cloudscan/CloudScanClient.java, line(s) 212,652
com/trustlook/sdk/ngsescan/FileUtils.java, line(s) 430,595,767
com/unity3d/ads/core/data/datasource/AndroidDynamicDeviceInfoDataSource.java, line(s) 427
com/unity3d/ads/core/domain/AndroidGetCacheDirectoryUseCase$initialize$2.java, line(s) 59
com/unity3d/services/core/cache/CacheDirectory.java, line(s) 54
com/vungle/ads/internal/platform/b.java, line(s) 193
com/yandex/mobile/ads/impl/oz.java, line(s) 7
sg/bigo/ads/common/utils/p.java, line(s) 61,99
sg/bigo/ads/core/mraid/h.java, line(s) 345

中危 SHA-1是已知存在哈希冲突的弱哈希 

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/applovin/impl/sdk/utils/StringUtils.java, line(s) 78
com/applovin/impl/sdk/utils/p.java, line(s) 389
com/fyber/inneractive/sdk/player/cache/h.java, line(s) 580
com/ironsource/sdk/utils/SDKUtils.java, line(s) 95
com/pgl/ssdk/ces/e.java, line(s) 225
com/trustlook/sdk/cloudscan/CloudScanClient.java, line(s) 1988,2211
com/trustlook/sdk/cloudscan/PopulatePkgInfoTask.java, line(s) 33
com/trustlook/sdk/data/PkgInfo.java, line(s) 87
com/unity3d/ads/core/data/datasource/AndroidStaticDeviceInfoDataSource.java, line(s) 231
com/unity3d/services/core/device/Device.java, line(s) 176
com/yandex/metrica/impl/ob/P.java, line(s) 54
e4/a.java, line(s) 70
h4/q.java, line(s) 89
io/appmetrica/analytics/impl/C2950y1.java, line(s) 56

中危 MD5是已知存在哈希冲突的弱哈希 

MD5是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/apm/insight/l/v.java, line(s) 244
com/bykv/vk/openvk/component/video/api/f/b.java, line(s) 21
com/bykv/vk/openvk/preload/geckox/utils/g.java, line(s) 14
com/fyber/inneractive/sdk/player/cache/h.java, line(s) 593
com/ironsource/mediationsdk/utils/IronSourceUtils.java, line(s) 415
com/ironsource/sdk/utils/SDKUtils.java, line(s) 200
com/mbridge/msdk/foundation/download/core/OkHTTPFileDownloadTask.java, line(s) 100
com/mbridge/msdk/foundation/download/resource/MBResourceManager.java, line(s) 92
com/mbridge/msdk/foundation/tools/SameMD5.java, line(s) 47,61,102
com/mbridge/msdk/foundation/tools/aa.java, line(s) 21,34
com/trustlook/sdk/cloudscan/CloudScanClient.java, line(s) 749
com/trustlook/sdk/cloudscan/CloudUtil.java, line(s) 197
com/yandex/div/storage/templates/TemplatesContainer.java, line(s) 53
com/yandex/metrica/impl/ob/C2403um.java, line(s) 49
com/yandex/metrica/impl/ob/C2508ym.java, line(s) 88
io/appmetrica/analytics/impl/C2542a.java, line(s) 19,31
io/appmetrica/analytics/impl/I4.java, line(s) 39
r0/g.java, line(s) 38
sg/bigo/ads/common/utils/m.java, line(s) 53
t5/d.java, line(s) 51
y5/a.java, line(s) 133
z/e.java, line(s) 34

中危 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/apm/insight/i.java, line(s) 9
com/applovin/exoplayer2/h/z.java, line(s) 4
com/applovin/impl/b/m.java, line(s) 17
com/fyber/inneractive/sdk/config/global/s.java, line(s) 13
com/fyber/inneractive/sdk/player/exoplayer2/upstream/cache/i.java, line(s) 21
com/hjq/permissions/PermissionFragment.java, line(s) 17
com/inmobi/media/a1.java, line(s) 25
com/inmobi/media/f.java, line(s) 11
com/inmobi/media/f2.java, line(s) 4
com/inmobi/media/h9.java, line(s) 29
com/inmobi/media/u9.java, line(s) 12
com/ironsource/w3.java, line(s) 5
com/mbridge/msdk/dycreator/baseview/rewardpopview/MBAcquireRewardPopView.java, line(s) 27
com/mbridge/msdk/playercommon/exoplayer2/source/ShuffleOrder.java, line(s) 4
com/mbridge/msdk/playercommon/exoplayer2/trackselection/RandomTrackSelection.java, line(s) 6
com/mbridge/msdk/playercommon/exoplayer2/upstream/cache/CachedContentIndex.java, line(s) 21
com/mbridge/msdk/thrid/okhttp/OkHttpClient.java, line(s) 29
com/mbridge/msdk/thrid/okhttp/internal/ws/RealWebSocket.java, line(s) 28
com/mbridge/msdk/thrid/okhttp/internal/ws/WebSocketWriter.java, line(s) 10
com/unity3d/services/core/configuration/Configuration.java, line(s) 23
com/yandex/metrica/impl/ob/Bm.java, line(s) 4
com/yandex/mobile/ads/impl/dc1.java, line(s) 4
com/yandex/mobile/ads/impl/dm1.java, line(s) 10
com/yandex/mobile/ads/impl/hc1.java, line(s) 14
com/yandex/mobile/ads/impl/ls.java, line(s) 10
sg/bigo/ads/ad/interstitial/multi_img/view/IconListView.java, line(s) 13
sg/bigo/ads/common/utils/k.java, line(s) 9
sg/bigo/ads/common/utils/m.java, line(s) 7
y8/a.java, line(s) 7
y8/b.java, line(s) 3
z8/a.java, line(s) 3

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞 

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
com/fyber/inneractive/sdk/web/r.java, line(s) 378,370
com/inmobi/media/cb.java, line(s) 3308,3255
com/ironsource/kc.java, line(s) 108,105,107
com/unity3d/services/ads/webplayer/WebPlayerView.java, line(s) 334,318
com/unity3d/services/core/webview/WebView.java, line(s) 195,134

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
coil/decode/h.java, line(s) 56
com/mbridge/msdk/playercommon/exoplayer2/util/Util.java, line(s) 187
com/yandex/div/core/view2/divs/DivGifImageBinder.java, line(s) 84

中危 可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息 

可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-6

Files:
com/ironsource/od.java, line(s) 31,33
com/mbridge/msdk/foundation/webview/BrowserView.java, line(s) 181,178
com/mbridge/msdk/mbsignalcommon/base/BaseWebView.java, line(s) 86,83
com/unity3d/services/core/webview/WebView.java, line(s) 120,134
com/vungle/ads/internal/ui/view/MRAIDAdWidget.java, line(s) 88,84
sg/bigo/ads/ad/interstitial/a/a/c.java, line(s) 287,293

中危 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
AdMob广告平台的=> "com.google.android.gms.ads.APPLICATION_ID" : "ca-app-pub-6068075967962508~3204333900"
凭证信息=> "com.trustlook.ApiKey" : "6ef076a9397bc6b75f0249853bbae90461709ee499e80b7ad2077887"
"anythink_myoffer_feedback_violation_of_laws" : "Illegal"
"com.google.firebase.crashlytics.mapping_file_id" : "ab0766355b7d4797b6143bea6d729f59"
"dyStrategy.privateAddress" : "privateAddress"
"google_api_key" : "AIzaSyDTg3ggQw9TdHKox-4g_5DISTlyuLcnHss"
"google_crash_reporting_api_key" : "AIzaSyDTg3ggQw9TdHKox-4g_5DISTlyuLcnHss"
"one_authorized" : "authorized"
"yandex_mobileads_age_restricted_user" : "com.yandex.mobile.ads.AGE_RESTRICTED_USER"
"one_authorized" : "autorizado"
"one_authorized" : "diotorisasi"
"one_authorized" : "autorisiert"
"one_authorized" : "geautoriseerd"
"one_authorized" : "yetkili"
"one_authorized" : "autorizado"
"one_authorized" : "autorizzato"
"one_authorized" : "dibenarkan"
GgAdzxUzIopIaMADJlas7l6ID6jQKO85Qw4OeOHwUEo=
GgAdzxUzIopIaMADJlas7tRoVmc59AJ6AJI1g8y1qCg=
y6ZFQPFAelcnHhDlySZDqxCrJArIqP/5jjNUVRJHx24=
GgAdzxUzIopIaMADJlas7pxCpTUOmWPqSUk0sd7BFDE=
DFKwWgtuDkKwLZPwD+z8H+N/xj26Vjcdx5KyVj5GxVN=
c56fb7d591ba6704df047fd98f535372fea00211
9978a0b828014a11aaf7d79d54ac97c2
Y7c14Z2TDbv/Y+xgHFeXDrcshBPUYFT=
20799a27-fa80-4b36-b2db-0f8141f24180
T01YLnFjb20udmlkZW8uZGVjb2Rlci52cDg=
a4b7452e2ed8f5f191058ca7bbfd26b0d3214bfc
v7eUg2iIyprzckQ3JRmVlnmTB5EOIrZgFvRWRhUTuF46ZyidwF9e+7zG+KhcJCvK9AO/oI0oTVOreiGvpdHe3Q==
GgAdzxUzIopIaMADJlas7t7P/+Bavd4ueqnd9URnIFg=
T01YLmFtbG9naWMuYXZjLmRlY29kZXIuYXdlc29tZS5zZWN1cmU=
DFeuWkH0W+xUhoPwJ7JgY7K0DkeAWrfXYN==
h7KsLkfPW+xUhoPBD+QqJk2MWrfXYN==
LdxThdi1WBKUL75ULBPBD+QqJk2MWrfXYN==
T01YLnFjb20uYXVkaW8uZGVjb2Rlci5tcDM=
322a737a-a0ca-44e0-bc85-649b1c7c1db6
GgAdzxUzIopIaMADJlas7igqkhX864iWm1YtPo56MsY=
67bb016b-be40-4c08-a190-96a3f3b503d3
T01YLmJyb2FkY29tLnZpZGVvX2RlY29kZXIudHVubmVs
T01YLmFsbHdpbm5lci52aWRlby5kZWNvZGVyLmF2Yw==
C38FB23A402222A0C17D34A92F971D1F
GgAdzxUzIopIaMADJlas7oInAhdeAqzo5Ow19kGQQ48=
h7KsLkfPW+xUhoPwJ7JgY7K0DkeAWrfXYN==
9b8f518b086098de3d77736f9458a3d2f6f95a37
0e5e9c33-f8c3-4568-86c5-2e4f57523f72
v7eUg2iIyprzckQ3JRmVlnmTB5EOIrZgFvRWRhUTuF6aDJjXH/9MpCh2ezqbbmV0
GgAdzxUzIopIaMADJlas7v6fRHafLKoaoXdiRlQ6mcs=
T01YLmxnZS5hbGFjLmRlY29kZXI=
T01YLmdvb2dsZS5hYWMuZGVjb2Rlcg==
258EAFA5-E914-47DA-95CA-C5AB0DC85B11
GgAdzxUzIopIaMADJlas7np709A2N7IJ55Cg/4FGAd0=
v7eUg2iIyprzckQ3JRmVlnmTB5EOIrZgFvRWRhUTuF6vEzzvKrW+amlHPilNukJXM302d4XiJMRExKheA5RuIA==
wmipZi9I+y34akQWNFpGoIoTmGBWMm2ICoLclT+BXfI=
GgAdzxUzIopIaMADJlas7s2+ZxDcE6JD4aZhvXl1oHE=
T01YLkV4eW5vcy5BQUMuRGVjb2Rlcg==
7d962ba4-a392-449a-a02d-6c5be5613928
bE7qysf7mW4v386NuPKNWkQovrykKDaVCLlbV6tOuAej6UiaSCJM/IBtABPnMLiw
2438bce1ddb7bd026d5ff89f598b3b5e5bb824b3
v7eUg2iIyprzckQ3JRmVlnmTB5EOIrZgFvRWRhUTuF74+wthWf7VGbs6c0TMoysS
GgAdzxUzIopIaMADJlas7uW4Yzpp+Gy3heEDbuy7frw=
T01YLkV4eW5vcy5BVkMuRGVjb2Rlcg==
0000016742C00BDA259000000168CE0F13200000016588840DCE7118A0002FBF1C31C3275D78
GgAdzxUzIopIaMADJlas7oSMrgb1OOLBL0GR6gTqkkalJ+Owoo00Nd/z4yDoxWIz
90d4874ed05a73738dae79fcd7138eb975ff61e0
00841be8562c434cacc6429d78cbb517
T01YLnFjb20uYXVkaW8uZGVjb2Rlci5hYWM=
v7eUg2iIyprzckQ3JRmVlnmTB5EOIrZgFvRWRhUTuF6vEzzvKrW+amlHPilNukJXsSr1JC7Z3n4EHHEq+y/zGQ==
GgAdzxUzIopIaMADJlas7tXlcyyJfJPkpqqh6JDxtxE=
T01YLlNFQy5NUDMuRGVjb2Rlcg==
936dcbdd57fe235fd7cf61c2e93da3c4
GgAdzxUzIopIaMADJlas7iZljhveqdqId2I4dS4wDclxmKC4m6vvcpONG7REVxKU
cc2751449a350f668590264ed76692694a80308a
GgAdzxUzIopIaMADJlas7k9Zw+pI68PydslxZHd/hRBYIlaNF1z4fwFKbXmhQK8O
DkPtYdQTLkfAW+xUhoPwJ7JgY7K0DkeAWrfXYN==
T01YLmFtbG9naWMuYXZjLmRlY29kZXIuYXdlc29tZQ==
T01YLkV4eW5vcy5hdmMuZGVjLnNlY3VyZQ==
T01YLmdvb2dsZS5yYXcuZGVjb2Rlcg==
GgAdzxUzIopIaMADJlas7gs2IHRdAgkl3yKiFyJS6Gc=
T01YLnF0aS5hdWRpby5kZWNvZGVyLmZsYWM=
T01YLkV4eW5vcy5BVkMuRGVjb2Rlci5zZWN1cmU=
v7eUg2iIyprzckQ3JRmVlnmTB5EOIrZgFvRWRhUTuF5oaASWBNljdbxpDLhOmd6gOX7Fp0GEx+VOgkkP+P3igA==
92762936dcbdd57fe235fd7cf61c2e93da3c4
h0kDsry/VHZguJLfGYdI+6NndNdTzOyqChr2dCVKe9Y=
v7eUg2iIyprzckQ3JRmVlnmTB5EOIrZgFvRWRhUTuF4HhREb5vJSMFXg8XS01s0B
4e610cd2-753f-4bfc-9b05-772ce8905c5e
T01YLmdvb2dsZS52b3JiaXMuZGVjb2Rlcg==
v7eUg2iIyprzckQ3JRmVlnmTB5EOIrZgFvRWRhUTuF6vEzzvKrW+amlHPilNukJX366JWJI/XdeiR6S91qKQ4Q==
e4250327-8d3c-4d35-b9e8-3c1720a64b91
v7eUg2iIyprzckQ3JRmVlnmTB5EOIrZgFvRWRhUTuF6vEzzvKrW+amlHPilNukJXzeNkDQxCqoS1FbDjUA24ig==
T01YLnJlYWx0ZWsudmlkZW8uZGVjb2Rlci50dW5uZWxlZA==
f6c3700f69aeb2f115563bfb01aee99b5faed63c
DFKwWgtuDkKwLZPwD+z8H+N/xjQZxVfV+T2SZVe6V2xS5c5n
GgAdzxUzIopIaMADJlas7vAudde2tUEUjFBEF+d/Ye8=
v7eUg2iIyprzckQ3JRmVlnmTB5EOIrZgFvRWRhUTuF6vEzzvKrW+amlHPilNukJX33uX+7LBZO84TWQUsizNBGHZp597fD0v8nuyuXa0Jc4=
T01YLmJyb2FkY29tLnZpZGVvX2RlY29kZXIudHVubmVsLnNlY3VyZQ==
cca47107bfcbdb211d88f3385aeede40
v7eUg2iIyprzckQ3JRmVlnmTB5EOIrZgFvRWRhUTuF5Z8XagJUtkuQApQNRNvIb/Yz5tu6R+XRkn1O97H+jm2A==
v7eUg2iIyprzckQ3JRmVlnmTB5EOIrZgFvRWRhUTuF6vEzzvKrW+amlHPilNukJXLMT6S/La3mDgZd3Yiuzghw==
478cb909-6ad1-4e12-84cc-b3629a789f93
df6b721c8b4d3b6eb44c861d4415007e5a35fc95
GgAdzxUzIopIaMADJlas7q9kHl9uO27vi/7MEUjgSXAC6HEcyoIB0E9ZPh1V3bWg
a7559d9417d87f401b1e3a524f9f70575
v7eUg2iIyprzckQ3JRmVlnmTB5EOIrZgFvRWRhUTuF6vEzzvKrW+amlHPilNukJXU5PhTIB0QOt9WefEZGT/Xg==
GgAdzxUzIopIaMADJlas7igZ36IOadX0Rv0Ac8DaiweqsmX8dm5k2rMJ2nKCdcSZ
HSrCHRtOan6wp2kwOIGJC1RDtuSrF2mWVbio2aBcMHX9KF3iTJ1lLSzCKP1ZSo5yNolPNw1kCTtWpxELFF4ah1
01528cc0-dd34-494d-9218-24af1317e1ee
LdxThdi1WBKUL75ULBPwJ7JgY7K0DkeAWrfXYN==
6c5f504e-8928-47b5-bfb5-73af8d8bf4b4
DFKwWgtuDkKwLZPwD+z8H+N/xjK+n3eyNVx6ZVPn5jcincKZx5f5ncN=
YzIuYW5kcm9pZC5tcDMuZGVjb2Rlcg==
470fa2b4ae81cd56ecbcda9735803434cec591fa
YkRXhr5AWBPfNgzuH7JQ+2Ha
DFK/HrQgJ+zQW+xUhoPwJ7JgY7K0DkeAWrfXYN==
8a3c4b262d721acd49a4bf97d5213199c86fa2b9
DFK/HrQgJ+zQW+xUhoPBD+QqJk2MWrfXYN==
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
T01YLmxnZS5hYzMuZGVjb2Rlcg==
DFKwWgtuDkKwLZPwD+z8H+N/xj26Vjcdx5KanjKnxVN=
T01YLk52aWRpYS5oMjY0LmRlY29kZS5zZWN1cmU=

信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
a/a.java, line(s) 7,12,161
b0/c.java, line(s) 18,27
c2/d.java, line(s) 23,29
com/alex/AlexMaxBannerAdapter.java, line(s) 366
com/alex/AlexMaxInterstitialAdapter.java, line(s) 70
com/alex/AlexMaxManualNativeAd.java, line(s) 70,75
com/alex/AlexMaxRewardedVideoAdapter.java, line(s) 355
com/anythink/banner/api/ATBannerView.java, line(s) 373,391,398,541
com/anythink/interstitial/a/a.java, line(s) 83,269,416
com/anythink/interstitial/a/c.java, line(s) 91,225,230,235,132,134,173,175
com/anythink/interstitial/api/ATInterstitial.java, line(s) 204,209,220
com/apm/insight/b/j.java, line(s) 60
com/apm/insight/h/a.java, line(s) 72
com/apm/insight/k/k.java, line(s) 141
com/apm/insight/l/q.java, line(s) 14,38,44,50,8,32,20,26
com/apm/insight/runtime/o.java, line(s) 238
com/applovin/exoplayer2/l/q.java, line(s) 37,55,43,49
com/applovin/impl/a/a/e.java, line(s) 111
com/applovin/impl/sdk/a/f.java, line(s) 55,61,67
com/applovin/impl/sdk/e/b0.java, line(s) 279
com/applovin/impl/sdk/utils/h0.java, line(s) 59
com/applovin/impl/sdk/x.java, line(s) 20,90,125,61,86,24,94,28,82
com/bykv/vk/openvk/component/video/a/b/b.java, line(s) 87,54,63,108,130,136,156
com/bykv/vk/openvk/component/video/a/b/d.java, line(s) 148,325,331,124,217,233,250,297,347,483,493,520,530,193,358,379,385,393
com/bykv/vk/openvk/component/video/a/b/e.java, line(s) 73,81
com/bykv/vk/openvk/component/video/a/b/f.java, line(s) 117,179,189,236
com/bykv/vk/openvk/component/video/a/b/g.java, line(s) 155,288,353,369,381,420,424,485,493,498,511,519,576,609,648,111,234,312,363,537,656,249,509,550
com/bykv/vk/openvk/component/video/a/c/a.java, line(s) 286,292,299,306,312,320,330,337,133,163,256,361,377
com/bykv/vk/openvk/component/video/api/f/c.java, line(s) 51,72,34,64,57,80,91,97
com/bykv/vk/openvk/preload/falconx/a/a.java, line(s) 30
com/bykv/vk/openvk/preload/geckox/h/a.java, line(s) 9,12,20,25
com/bytedance/adsdk/lottie/LottieAnimationView.java, line(s) 372
com/bytedance/adsdk/lottie/f/c.java, line(s) 24,41,34
com/bytedance/adsdk/ugeno/a/a.java, line(s) 139
com/bytedance/adsdk/ugeno/a/h.java, line(s) 60
com/bytedance/adsdk/ugeno/a/j.java, line(s) 87
com/bytedance/adsdk/ugeno/b/c.java, line(s) 14
com/bytedance/adsdk/ugeno/component/b.java, line(s) 161
com/bytedance/adsdk/ugeno/component/image/RoundImageView.java, line(s) 119,137
com/bytedance/adsdk/ugeno/component/image/a.java, line(s) 151
com/fyber/inneractive/sdk/external/InneractiveAdManager.java, line(s) 533
com/fyber/inneractive/sdk/flow/a.java, line(s) 35
com/fyber/inneractive/sdk/logger/a.java, line(s) 11,19,21,29,37,39,47,61,54
com/fyber/inneractive/sdk/network/f0.java, line(s) 331
com/fyber/inneractive/sdk/player/cache/c.java, line(s) 581
com/fyber/inneractive/sdk/player/exoplayer2/audio/MediaCodecAudioRenderer.java, line(s) 141,152,163,344
com/fyber/inneractive/sdk/player/exoplayer2/audio/c.java, line(s) 791
com/fyber/inneractive/sdk/player/exoplayer2/extractor/mkv/a.java, line(s) 529,532,731,996
com/fyber/inneractive/sdk/player/exoplayer2/extractor/mp4/d.java, line(s) 324,1190
com/fyber/inneractive/sdk/player/exoplayer2/extractor/mp4/e.java, line(s) 102,112,123,138,156,176
com/fyber/inneractive/sdk/player/exoplayer2/extractor/mp4/f.java, line(s) 234,269,189,517
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ogg/j.java, line(s) 330
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ts/d.java, line(s) 138
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ts/l.java, line(s) 66
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ts/o.java, line(s) 55,58
com/fyber/inneractive/sdk/player/exoplayer2/extractor/wav/a.java, line(s) 80
com/fyber/inneractive/sdk/player/exoplayer2/extractor/wav/c.java, line(s) 42,68,72
com/fyber/inneractive/sdk/player/exoplayer2/g.java, line(s) 63,160
com/fyber/inneractive/sdk/player/exoplayer2/h.java, line(s) 143,565,570,575,971
com/fyber/inneractive/sdk/player/exoplayer2/mediacodec/a.java, line(s) 51,79
com/fyber/inneractive/sdk/player/exoplayer2/mediacodec/b.java, line(s) 410
com/fyber/inneractive/sdk/player/exoplayer2/mediacodec/d.java, line(s) 352,354,212
com/fyber/inneractive/sdk/player/exoplayer2/metadata/id3/g.java, line(s) 154,166,202,380,465,470,479
com/fyber/inneractive/sdk/player/exoplayer2/source/chunk/b.java, line(s) 15,19
com/fyber/inneractive/sdk/player/exoplayer2/text/cea/a.java, line(s) 68
com/fyber/inneractive/sdk/player/exoplayer2/upstream/cache/i.java, line(s) 239
com/fyber/inneractive/sdk/player/exoplayer2/upstream/o.java, line(s) 315,235
com/fyber/inneractive/sdk/player/exoplayer2/upstream/x.java, line(s) 206,217,222
com/fyber/inneractive/sdk/player/exoplayer2/util/b.java, line(s) 39,82
com/fyber/inneractive/sdk/player/exoplayer2/video/MediaCodecVideoRenderer.java, line(s) 334,251,261,270,273,276,284,288,296,303,525,607
com/iab/omid/library/applovin/publisher/b.java, line(s) 33,35
com/iab/omid/library/applovin/utils/d.java, line(s) 18,11
com/iab/omid/library/bigosg/e/c.java, line(s) 18,11
com/iab/omid/library/bytedance2/utils/d.java, line(s) 18,11
com/iab/omid/library/fyber/publisher/b.java, line(s) 33,35
com/iab/omid/library/fyber/utils/d.java, line(s) 18,11
com/iab/omid/library/inmobi/d/c.java, line(s) 18,11
com/iab/omid/library/ironsrc/utils/d.java, line(s) 18,11
com/iab/omid/library/mmadbridge/utils/d.java, line(s) 18,11
com/iab/omid/library/vungle/publisher/b.java, line(s) 36,38
com/iab/omid/library/vungle/utils/d.java, line(s) 18,11
com/inmobi/media/b7.java, line(s) 32,42,51,57,83,88,23,76,17,71
com/inmobi/media/d0.java, line(s) 64,70
com/inmobi/media/f3.java, line(s) 75
com/inmobi/media/h0.java, line(s) 15,9
com/inmobi/media/wa.java, line(s) 25,29
com/inmobi/media/x2.java, line(s) 193
com/inmobi/media/x3.java, line(s) 58
com/inmobi/media/z.java, line(s) 30
com/ironsource/a.java, line(s) 32,71
com/ironsource/a2.java, line(s) 62
com/ironsource/a3.java, line(s) 87,124,163
com/ironsource/adapters/ironsource/IronSourceAdapter.java, line(s) 253,312,246,256,306,465,468,476,481,686,714,716
com/ironsource/adapters/ironsource/IronSourceInterstitialListener.java, line(s) 28
com/ironsource/adapters/ironsource/IronSourceRewardedVideoListener.java, line(s) 31
com/ironsource/adapters/supersonicads/SupersonicAdsAdapter.java, line(s) 188,189,190,211,213,216,397,399
com/ironsource/d6.java, line(s) 101,139,168
com/ironsource/f6.java, line(s) 90
com/ironsource/gd.java, line(s) 49,51,52,98,137,141
com/ironsource/h1.java, line(s) 172,188,72,169,177,184
com/ironsource/i4.java, line(s) 39
com/ironsource/j1.java, line(s) 90,194,79,190,83
com/ironsource/ja.java, line(s) 73
com/ironsource/jd.java, line(s) 79
com/ironsource/ld.java, line(s) 169
com/ironsource/mediationsdk/AbstractAdapter.java, line(s) 410,413
com/ironsource/mediationsdk/a.java, line(s) 52
com/ironsource/mediationsdk/a0.java, line(s) 129,132
com/ironsource/mediationsdk/ads/nativead/LevelPlayNativeAd.java, line(s) 87
com/ironsource/mediationsdk/d.java, line(s) 340,345
com/ironsource/mediationsdk/demandOnly/d.java, line(s) 273,284,341,439,98,103,270,289,329,357,379,389,396
com/ironsource/mediationsdk/demandOnly/g.java, line(s) 341,299,302,315
com/ironsource/mediationsdk/demandOnly/l.java, line(s) 389,347,350,363
com/ironsource/mediationsdk/integration/IntegrationHelper.java, line(s) 41,44,57,61,72,77,142,152,244,247,264,35,38,53,67,70,75,84,156,177,186,203,218,228,237,253,261,33,255
com/ironsource/mediationsdk/logger/a.java, line(s) 43,51,54,48
com/ironsource/mediationsdk/p.java, line(s) 2785,2790,2796,2805,2812,2825,2852,2857,2863,2872,2879,2893,3114,3122,3159,2576,2778,2845,2952,2954,2962,2964,2987,3022,3104,1863,3142,3146,3150,1866,1871
com/ironsource/mediationsdk/q.java, line(s) 832,838
com/ironsource/mediationsdk/w.java, line(s) 400,485,790,811,862,891,973,116,120,387,480,538,627,763,770,779,796,802,804,809,843,860,933,965,630,786,851,867,935
com/ironsource/mediationsdk/x.java, line(s) 377,500,259,276,321,369,373,380,431,436,457,498,269,286,326
com/ironsource/mediationsdk/y.java, line(s) 704,710
com/ironsource/o6.java, line(s) 40
com/ironsource/o9.java, line(s) 58,45,49
com/ironsource/p1.java, line(s) 119,195,213,97,183,204
com/ironsource/q1.java, line(s) 522,630,721,761,863,931,954,145,202,210,213,251,365,378,509,515,628,685,691,700,754,766,814,854,898,935
com/ironsource/q9.java, line(s) 96,116
com/ironsource/r0.java, line(s) 23
com/ironsource/sdk/controller/t.java, line(s) 216,752,844,873,961,984,1035,1055,1137,1160,1179,1198,1355,1367,2131,2492,3447,3452,3463,3469,3479,3485,3494,3496,649
com/ironsource/sdk/service/Connectivity/BroadcastReceiverStrategy.java, line(s) 65
com/ironsource/sdk/utils/Logger.java, line(s) 13,53,19,59,35,67,41,72,47,78
com/ironsource/t1.java, line(s) 219,264,309,321,585,625,653,660,198,208,252,284,553,566,610,634
com/ironsource/u2.java, line(s) 91,167
com/ironsource/uc.java, line(s) 180
com/ironsource/v8.java, line(s) 46,48,49,51,74,86,91,146
com/ironsource/va.java, line(s) 416,477
com/ironsource/w5.java, line(s) 105
com/ironsource/w8.java, line(s) 48
com/ironsource/x5.java, line(s) 224,285
com/mbridge/msdk/dycreator/a/a.java, line(s) 97,98,99,103,111,113,257,271,326
com/mbridge/msdk/dycreator/baseview/MBScrollView.java, line(s) 182
com/mbridge/msdk/dycreator/baseview/extview/MBExtAcquireRewardPopView.java, line(s) 233
com/mbridge/msdk/dycreator/baseview/extview/MBExtFeedBackView.java, line(s) 268
com/mbridge/msdk/dycreator/baseview/extview/MBExtMBridgeBaitClickView.java, line(s) 233
com/mbridge/msdk/dycreator/baseview/extview/MBExtMBridgeTextView.java, line(s) 277
com/mbridge/msdk/dycreator/bus/BackgroundPoster.java, line(s) 43
com/mbridge/msdk/dycreator/bus/EventBus.java, line(s) 177,482,484,488,255,336,387
com/mbridge/msdk/dycreator/e/g.java, line(s) 12
com/mbridge/msdk/e/a/e.java, line(s) 37
com/mbridge/msdk/e/a/v.java, line(s) 57,61,91
com/mbridge/msdk/e/b.java, line(s) 26,41,56
com/mbridge/msdk/e/c.java, line(s) 35,50,68,87,106,126,157,178,192,212,228,253,281,306,319,336,354,378,396
com/mbridge/msdk/e/j.java, line(s) 33
com/mbridge/msdk/e/k.java, line(s) 63,70,254,267,277
com/mbridge/msdk/e/m.java, line(s) 121,37,61,68,152,160
com/mbridge/msdk/e/n.java, line(s) 47,72,106,142
com/mbridge/msdk/e/p.java, line(s) 34
com/mbridge/msdk/e/r.java, line(s) 54,63,178,215,256,310,324,348,69,75,87,189,197,285
com/mbridge/msdk/e/w.java, line(s) 115,118,121
com/mbridge/msdk/e/y.java, line(s) 90,99,147
com/mbridge/msdk/foundation/controller/b.java, line(s) 51
com/mbridge/msdk/foundation/same/b/e.java, line(s) 69
com/mbridge/msdk/foundation/same/report/b/b.java, line(s) 75
com/mbridge/msdk/foundation/same/report/b/d.java, line(s) 72
com/mbridge/msdk/foundation/same/report/h.java, line(s) 64
com/mbridge/msdk/foundation/same/report/t.java, line(s) 40
com/mbridge/msdk/foundation/tools/aa.java, line(s) 23
com/mbridge/msdk/foundation/tools/ad.java, line(s) 41,48,78,53,59,67,85
com/mbridge/msdk/mbnative/controller/NativeController.java, line(s) 1646
com/mbridge/msdk/mbnative/controller/d.java, line(s) 1146
com/mbridge/msdk/mbnative/e/b.java, line(s) 59,114
com/mbridge/msdk/playercommon/exoplayer2/DefaultRenderersFactory.java, line(s) 61,69,74,79,86,89,121
com/mbridge/msdk/playercommon/exoplayer2/ExoPlayerImpl.java, line(s) 146,582,680
com/mbridge/msdk/playercommon/exoplayer2/ExoPlayerImplInternal.java, line(s) 776,1070,1478,1483,1488,1548
com/mbridge/msdk/playercommon/exoplayer2/MediaPeriodHolder.java, line(s) 177
com/mbridge/msdk/playercommon/exoplayer2/SimpleExoPlayer.java, line(s) 79,608
com/mbridge/msdk/playercommon/exoplayer2/audio/DefaultAudioSink.java, line(s) 917,165,180,198,946
com/mbridge/msdk/playercommon/exoplayer2/drm/ClearKeyUtil.java, line(s) 47
com/mbridge/msdk/playercommon/exoplayer2/drm/DefaultDrmSession.java, line(s) 180,337
com/mbridge/msdk/playercommon/exoplayer2/drm/DefaultDrmSessionManager.java, line(s) 236
com/mbridge/msdk/playercommon/exoplayer2/extractor/mkv/MatroskaExtractor.java, line(s) 498,886,903,1184
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp3/VbriSeeker.java, line(s) 77
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp3/XingSeeker.java, line(s) 44
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp4/AtomParsers.java, line(s) 957,1101
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp4/FragmentedMp4Extractor.java, line(s) 270,1151
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp4/MetadataUtil.java, line(s) 179,85,245,285
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp4/PsshAtomUtil.java, line(s) 66
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp4/TrackEncryptionBox.java, line(s) 66
com/mbridge/msdk/playercommon/exoplayer2/extractor/ogg/VorbisUtil.java, line(s) 218
com/mbridge/msdk/playercommon/exoplayer2/extractor/ts/AdtsReader.java, line(s) 118
com/mbridge/msdk/playercommon/exoplayer2/extractor/ts/Id3Reader.java, line(s) 36
com/mbridge/msdk/playercommon/exoplayer2/extractor/ts/PesReader.java, line(s) 115,120
com/mbridge/msdk/playercommon/exoplayer2/extractor/wav/WavHeaderReader.java, line(s) 52,81,90,112
com/mbridge/msdk/playercommon/exoplayer2/mediacodec/MediaCodecInfo.java, line(s) 121,132,63
com/mbridge/msdk/playercommon/exoplayer2/mediacodec/MediaCodecRenderer.java, line(s) 632
com/mbridge/msdk/playercommon/exoplayer2/mediacodec/MediaCodecUtil.java, line(s) 411,416,562,258,270,275,280,285,366,454,459,468,473
com/mbridge/msdk/playercommon/exoplayer2/metadata/id3/Id3Decoder.java, line(s) 242,372,377,386,395,422,442,706
com/mbridge/msdk/playercommon/exoplayer2/offline/DownloadManager.java, line(s) 320,463
com/mbridge/msdk/playercommon/exoplayer2/offline/DownloadService.java, line(s) 142,329,336,347
com/mbridge/msdk/playercommon/exoplayer2/source/chunk/BaseMediaChunkOutput.java, line(s) 55
com/mbridge/msdk/playercommon/exoplayer2/source/chunk/ChunkSampleStream.java, line(s) 475
com/mbridge/msdk/playercommon/exoplayer2/source/chunk/ChunkedTrackBlacklistUtil.java, line(s) 37,41
com/mbridge/msdk/playercommon/exoplayer2/text/cea/Cea708Decoder.java, line(s) 993,882,894
com/mbridge/msdk/playercommon/exoplayer2/text/cea/CeaUtil.java, line(s) 68
com/mbridge/msdk/playercommon/exoplayer2/text/dvb/DvbParser.java, line(s) 902
com/mbridge/msdk/playercommon/exoplayer2/text/ssa/SsaDecoder.java, line(s) 36,41,46,53
com/mbridge/msdk/playercommon/exoplayer2/text/subrip/SubripDecoder.java, line(s) 44,72,75
com/mbridge/msdk/playercommon/exoplayer2/text/ttml/TtmlDecoder.java, line(s) 721,97,108,120,372,376,379,382,386,389,571,580,589,732
com/mbridge/msdk/playercommon/exoplayer2/text/webvtt/WebvttCue.java, line(s) 59
com/mbridge/msdk/playercommon/exoplayer2/text/webvtt/WebvttCueParser.java, line(s) 157,375,378,522,590,634
com/mbridge/msdk/playercommon/exoplayer2/upstream/DefaultDataSource.java, line(s) 71
com/mbridge/msdk/playercommon/exoplayer2/upstream/DefaultHttpDataSource.java, line(s) 66,92
com/mbridge/msdk/playercommon/exoplayer2/upstream/Loader.java, line(s) 139,179,190,195
com/mbridge/msdk/playercommon/exoplayer2/upstream/cache/CachedRegionTracker.java, line(s) 135
com/mbridge/msdk/playercommon/exoplayer2/upstream/cache/SimpleCache.java, line(s) 90
com/mbridge/msdk/playercommon/exoplayer2/util/AtomicFile.java, line(s) 35,92
com/mbridge/msdk/playercommon/exoplayer2/util/EventLogger.java, line(s) 217,221
com/mbridge/msdk/playercommon/exoplayer2/util/Util.java, line(s) 926,941
com/mbridge/msdk/playercommon/exoplayer2/video/DummySurface.java, line(s) 81,87
com/mbridge/msdk/playercommon/exoplayer2/video/MediaCodecVideoRenderer.java, line(s) 1842,1396,1402,1644
com/mbridge/msdk/video/module/MBridgeBaseView.java, line(s) 173,185
com/mbridge/msdk/widget/FeedbackRadioGroup.java, line(s) 60
com/one/manager/image/compressor/engine/a.java, line(s) 386
com/one/manager/service/LockedListener$init$1$1.java, line(s) 87,89,102
com/one/manager/ui/activity/LanguageSetAct.java, line(s) 225
com/pgl/ssdk/ces/d.java, line(s) 36
com/trustlook/sdk/cloudscan/CloudScanClient.java, line(s) 524,529,533,895,900,905,920,1996,2000,2024,2036,2040,2044,2089,2100,2107,2114,2121,2128,2135,726,783,934,944,1851,1856
com/trustlook/sdk/cloudscan/CloudUtil.java, line(s) 229,234
com/trustlook/sdk/cloudscan/NetworkUtils.java, line(s) 101,141,151,162,344,347,397,498,575,725,543,648,688
com/trustlook/sdk/cloudscan/PkgUtils.java, line(s) 70
com/trustlook/sdk/cloudscan/PopulatePkgInfoTask.java, line(s) 39
com/trustlook/sdk/cloudscan/URLScanClient.java, line(s) 94,127,131,137,143,149,154,160
com/trustlook/sdk/data/AppCertificate.java, line(s) 27
com/trustlook/sdk/data/AppInfo.java, line(s) 237
com/trustlook/sdk/data/PkgInfo.java, line(s) 94,96,302
com/trustlook/sdk/database/DBHelper.java, line(s) 55
com/trustlook/sdk/database/DataSource.java, line(s) 126,159,192,224,240,262,479,551,587,618,641
com/trustlook/sdk/database/SimplifiedAppDAO.java, line(s) 68,104,120
com/trustlook/sdk/database/SimplifiedPkgInfo.java, line(s) 122
com/trustlook/sdk/ngsescan/FileUtils.java, line(s) 40,62,139,210,226,346,380,388,479,485,490,495,503,509,514,522,532,540,625,655,794,799,805,811,817,827,872,881,885,889,910,917
com/unity3d/ads/UnityAdsBaseOptions.java, line(s) 20
com/unity3d/ads/adplayer/CommonWebViewBridge.java, line(s) 190
com/unity3d/ads/core/data/datasource/AndroidDynamicDeviceInfoDataSource.java, line(s) 110,316,286
com/unity3d/ads/core/data/datasource/AndroidStaticDeviceInfoDataSource.java, line(s) 198,239,264,476,492,494,521
com/unity3d/ads/core/data/repository/AndroidDiagnosticEventRepository.java, line(s) 102
com/unity3d/ads/core/domain/AndroidGetCacheDirectoryUseCase$initialize$2.java, line(s) 73,79,84,67,89
com/unity3d/ads/core/domain/AndroidGetCacheDirectoryUseCase.java, line(s) 61,63,92,98,101,66
com/unity3d/ads/core/domain/InitializeAndroidBoldSDK.java, line(s) 130,187,243
com/unity3d/ads/core/domain/LegacyLoadUseCase.java, line(s) 135,277,392,634
com/unity3d/ads/core/domain/LegacyShowUseCase.java, line(s) 163,241,330,432,590
com/unity3d/ads/gatewayclient/CommonGatewayClient.java, line(s) 80
com/unity3d/ads/metadata/InAppPurchaseMetaData.java, line(s) 36,56,65
com/unity3d/ads/metadata/MetaData.java, line(s) 44,55
com/unity3d/services/SDKErrorHandler.java, line(s) 96
com/unity3d/services/UnityServices.java, line(s) 81,127,137,142,153,158,172,182,167,176,111
com/unity3d/services/ads/UnityAdsImplementation.java, line(s) 92,173
com/unity3d/services/ads/adunit/AdUnitActivityController.java, line(s) 363,365,53,134,190,223,264,294,314,381,230
com/unity3d/services/ads/adunit/AdUnitViewHandlerFactory.java, line(s) 22
com/unity3d/services/ads/adunit/VideoPlayerHandler.java, line(s) 18,34
com/unity3d/services/ads/api/AdUnit.java, line(s) 209,215,262,266,271,275,499,502,505,508,531,122,138,167,175,358,452,522,535,540,545
com/unity3d/services/ads/api/VideoPlayer.java, line(s) 59,77,100,149,160,178
com/unity3d/services/ads/api/WebPlayer.java, line(s) 49
com/unity3d/services/ads/gmascar/adapters/ScarAdapterFactory.java, line(s) 38
com/unity3d/services/ads/gmascar/bridges/AdapterStatusBridge.java, line(s) 21,37
com/unity3d/services/ads/gmascar/bridges/InitializeListenerBridge.java, line(s) 22,41
com/unity3d/services/ads/gmascar/bridges/mobileads/MobileAdsBridge.java, line(s) 21
com/unity3d/services/ads/gmascar/bridges/mobileads/MobileAdsBridgeLegacy.java, line(s) 20
com/unity3d/services/ads/gmascar/finder/GMAInitializer.java, line(s) 53
com/unity3d/services/ads/gmascar/finder/ScarVersionFinder.java, line(s) 43,55
com/unity3d/services/ads/token/InMemoryAsyncTokenStorage.java, line(s) 154,187
com/unity3d/services/ads/token/NativeTokenGenerator.java, line(s) 35
com/unity3d/services/ads/topics/TopicsReceiver.java, line(s) 38
com/unity3d/services/ads/topics/TopicsService.java, line(s) 70
com/unity3d/services/ads/video/VideoPlayerView.java, line(s) 42,45,70,113,118,140,183,195,227
com/unity3d/services/ads/webplayer/WebPlayerView.java, line(s) 66,70,311,353,412,427,442,455,696,698,720
com/unity3d/services/banners/BannerView.java, line(s) 202
com/unity3d/services/banners/UnityBanners.java, line(s) 139
com/unity3d/services/core/api/Cache.java, line(s) 166,180,56,132,185,276,293,320
com/unity3d/services/core/api/DeviceInfo.java, line(s) 137,155,183,327,347,363,420
com/unity3d/services/core/api/Intent.java, line(s) 49,63,212,238,251
com/unity3d/services/core/api/Request.java, line(s) 33,45,96,108,131,143
com/unity3d/services/core/api/Sdk.java, line(s) 17,38,54,84,90,96,102
com/unity3d/services/core/broadcast/BroadcastEventReceiver.java, line(s) 44
com/unity3d/services/core/cache/CacheDirectory.java, line(s) 24,26,65,69,75,103,107,113,120,29,58,78
com/unity3d/services/core/cache/CacheThread.java, line(s) 79
com/unity3d/services/core/cache/CacheThreadHandler.java, line(s) 39,42,46,69
com/unity3d/services/core/configuration/ConfigurationReader.java, line(s) 25
com/unity3d/services/core/configuration/ConfigurationRequestFactory.java, line(s) 37
com/unity3d/services/core/configuration/EnvironmentCheck.java, line(s) 32,44,35,47,50,53,56
com/unity3d/services/core/configuration/ExperimentObject.java, line(s) 22
com/unity3d/services/core/configuration/ExperimentsReader.java, line(s) 25
com/unity3d/services/core/configuration/InitializationNotificationCenter.java, line(s) 43
com/unity3d/services/core/configuration/InitializeEventsMetricSender.java, line(s) 53,60,67,82,177,184
com/unity3d/services/core/configuration/InitializeThread.java, line(s) 293,334,465,480,524,532,635,647,674,731,126,306,309,345,348,393,413,581,621,735,885,894,197,374,472,558
com/unity3d/services/core/configuration/PrivacyConfigurationLoader.java, line(s) 69
com/unity3d/services/core/connectivity/ConnectivityMonitor.java, line(s) 56,88,98,79,127
com/unity3d/services/core/device/AdvertisingId.java, line(s) 201,132,142
com/unity3d/services/core/device/Device.java, line(s) 178,285,291,304,314,439,452,467,647,710,723,379
com/unity3d/services/core/device/OpenAdvertisingId.java, line(s) 193,140,146
com/unity3d/services/core/device/Storage.java, line(s) 89,94,121
com/unity3d/services/core/device/reader/DeviceInfoReaderCompressor.java, line(s) 30,34
com/unity3d/services/core/device/reader/DeviceInfoReaderExtended.java, line(s) 46
com/unity3d/services/core/domain/task/InitializeSDK$doWork$2.java, line(s) 113,125
com/unity3d/services/core/domain/task/InitializeStateConfig$doWork$2.java, line(s) 61
com/unity3d/services/core/domain/task/InitializeStateCreate$doWork$2.java, line(s) 50,56,80
com/unity3d/services/core/domain/task/InitializeStateCreateWithRemote$doWork$2.java, line(s) 50,55,79
com/unity3d/services/core/domain/task/InitializeStateError$doWork$2.java, line(s) 45
com/unity3d/services/core/domain/task/InitializeStateLoadCache$doWork$2.java, line(s) 53,66
com/unity3d/services/core/domain/task/InitializeStateLoadCache.java, line(s) 163
com/unity3d/services/core/domain/task/InitializeStateLoadWeb$doWork$2.java, line(s) 184
com/unity3d/services/core/domain/task/InitializeStateNetworkError$doWork$2.java, line(s) 59
com/unity3d/services/core/domain/task/InitializeStateNetworkError.java, line(s) 108,124
com/unity3d/services/core/domain/task/InitializeStateReset$doWork$2.java, line(s) 74
com/unity3d/services/core/extensions/TaskExtensionsKt.java, line(s) 142
com/unity3d/services/core/log/DeviceLog.java, line(s) 71,232,239
com/unity3d/services/core/misc/JsonFlattener.java, line(s) 46
com/unity3d/services/core/misc/JsonStorage.java, line(s) 171,26,32,51,72,87,99,165,174
com/unity3d/services/core/misc/JsonStorageAggregator.java, line(s) 34
com/unity3d/services/core/misc/Utilities.java, line(s) 190,134,160,166,171,184,204,238
com/unity3d/services/core/misc/ViewUtilities.java, line(s) 23,32
com/unity3d/services/core/preferences/AndroidPreferences.java, line(s) 17,31,45,59,73
com/unity3d/services/core/properties/ClientProperties.java, line(s) 46,81,93,95
com/unity3d/services/core/properties/SdkProperties.java, line(s) 248,250,101
com/unity3d/services/core/reflection/GenericBridge.java, line(s) 32,47,56,62,70,76,84,91
com/unity3d/services/core/request/WebRequest.java, line(s) 69,161,166
com/unity3d/services/core/request/WebRequestRunnable.java, line(s) 91,76,95
com/unity3d/services/core/request/WebRequestThread.java, line(s) 63,115,130
com/unity3d/services/core/request/metrics/MetricCommonTags.java, line(s) 75
com/unity3d/services/core/request/metrics/MetricSender$sendMetrics$$inlined$CoroutineExceptionHandler$1.java, line(s) 22
com/unity3d/services/core/request/metrics/MetricSender$sendMetrics$1.java, line(s) 85,87
com/unity3d/services/core/request/metrics/MetricSender.java, line(s) 72,89,99
com/unity3d/services/core/request/metrics/MetricSenderWithBatch.java, line(s) 44
com/unity3d/services/core/request/metrics/SDKMetrics.java, line(s) 32,37,47,83,96
com/unity3d/services/core/sensorinfo/SensorInfoListener.java, line(s) 26
com/unity3d/services/core/timer/BaseTimer.java, line(s) 77
com/unity3d/services/core/webview/WebView.java, line(s) 72
com/unity3d/services/core/webview/WebViewApp.java, line(s) 57,113,187,241,285,335,64,68,71,88,145,277,307,348,383,397
com/unity3d/services/core/webview/WebViewUrlBuilder.java, line(s) 30
com/unity3d/services/core/webview/bridge/Invocation.java, line(s) 66
com/unity3d/services/core/webview/bridge/NativeCallback.java, line(s) 39
com/unity3d/services/core/webview/bridge/WebViewBridge.java, line(s) 108
com/unity3d/services/core/webview/bridge/WebViewBridgeInterface.java, line(s) 32,39
com/unity3d/services/core/webview/bridge/WebViewCallback.java, line(s) 69
com/unity3d/services/store/core/StoreLifecycleListener.java, line(s) 31
com/unity3d/services/store/gpbl/bridges/CommonJsonResponseBridge.java, line(s) 33
com/unity3d/services/store/gpbl/bridges/PurchaseBridge.java, line(s) 37
com/vungle/ads/BannerView.java, line(s) 143,215,222
com/vungle/ads/VungleAds.java, line(s) 106,109
com/vungle/ads/internal/AdInternal.java, line(s) 202
com/vungle/ads/internal/VungleInitializer.java, line(s) 182,368,372,191,315,363,395
com/vungle/ads/internal/a.java, line(s) 353
com/vungle/ads/internal/b.java, line(s) 174,179,133
com/vungle/ads/internal/downloader/b.java, line(s) 140,147,255,257,847,852,311,445,521,687,786,866,933,1004,1087,1148,1241,1318,1407,1540,107,585,753,1481,1609
com/vungle/ads/internal/load/BaseAdLoader.java, line(s) 212,220,780
com/vungle/ads/internal/load/c.java, line(s) 53
com/vungle/ads/internal/network/VungleApiClient.java, line(s) 552,352,505,835,838,844
com/vungle/ads/internal/network/f.java, line(s) 65,105
com/vungle/ads/internal/omsdk/NativeOMTracker.java, line(s) 83
com/vungle/ads/internal/platform/b.java, line(s) 73,103,126,130,134,195,114
com/vungle/ads/internal/platform/d.java, line(s) 35
com/vungle/ads/internal/presenter/MRAIDPresenter.java, line(s) 108,113,334,788,797,236,300,572,553,560,611,626,649,658,683,691,709,729,736,746,750
com/vungle/ads/internal/presenter/NativeAdPresenter.java, line(s) 468
com/vungle/ads/internal/presenter/a.java, line(s) 45,35
com/vungle/ads/internal/task/CleanupJob.java, line(s) 86
com/vungle/ads/internal/task/c.java, line(s) 46
com/vungle/ads/internal/task/d.java, line(s) 46,55,57,63,48,67
com/vungle/ads/internal/task/j.java, line(s) 152
com/vungle/ads/internal/ui/a.java, line(s) 141,143,252,107
com/vungle/ads/internal/ui/e.java, line(s) 258,427,465,310,434,484,95,337
com/vungle/ads/internal/ui/view/MRAIDAdWidget.java, line(s) 230
com/vungle/ads/internal/util/UnzipUtility.java, line(s) 52
com/vungle/ads/internal/util/a.java, line(s) 359
com/vungle/ads/internal/util/d.java, line(s) 80,23,79
com/vungle/ads/internal/util/e.java, line(s) 44,57,60,122,134,143,227
com/vungle/ads/internal/util/g.java, line(s) 67,75,84
com/vungle/ads/internal/util/i.java, line(s) 31,40,58,51,65
com/vungle/ads/internal/util/j.java, line(s) 53
com/vungle/mediation/VungleInterstitialAdapter.java, line(s) 121,132,164,183,189,227,59,91,203,214,221,238,245,292,301,353,362
com/yandex/div/core/DecodeBase64ImageTask.java, line(s) 74,80
com/yandex/div/core/actions/DivActionTypedHandlerCombiner.java, line(s) 57
com/yandex/div/core/view2/DivVisibilityActionDispatcher.java, line(s) 101
com/yandex/div/core/view2/DivVisibilityActionTracker.java, line(s) 78,137,153
com/yandex/div/core/view2/ReleaseManager.java, line(s) 90,103
com/yandex/div/core/view2/divs/BaseDivViewExtensionsKt.java, line(s) 385
com/yandex/div/core/view2/divs/DivGifImageBinder.java, line(s) 120,117,125,141,153,161
com/yandex/div/core/view2/divs/PagerSelectedActionsDispatcher.java, line(s) 38,56
com/yandex/div/core/view2/divs/tabs/DivTabsEventManager.java, line(s) 92
com/yandex/div/core/view2/divs/widgets/DivBorderDrawer.java, line(s) 344
com/yandex/div/core/widget/GridContainer.java, line(s) 1044,1066
com/yandex/div/internal/Log.java, line(s) 10,16,32,26
com/yandex/div/internal/viewpool/optimization/ViewPreCreationProfileRepository$get$2.java, line(s) 85,84
com/yandex/div/internal/viewpool/optimization/ViewPreCreationProfileRepository.java, line(s) 105,146,104,145
com/yandex/div/internal/widget/tabs/BaseCardHeightCalculator.java, line(s) 45,51,90
com/yandex/div/internal/widget/tabs/BaseDivTabbedCardUi.java, line(s) 88,111,187,210,559
com/yandex/div/internal/widget/tabs/BaseIndicatorTabLayout.java, line(s) 217
com/yandex/div/json/ParsingErrorLogger.java, line(s) 45,44
com/yandex/metrica/gpllibrary/a.java, line(s) 68,89,96
com/yandex/metrica/impl/ob/B2.java, line(s) 71,48,52,94
com/yandex/metrica/impl/ob/C2159l2.java, line(s) 95
com/yandex/metrica/impl/ob/C2210n3.java, line(s) 161
com/yandex/metrica/impl/ob/C2248og.java, line(s) 89
com/yandex/metrica/impl/ob/C2397ug.java, line(s) 100
com/yandex/metrica/impl/ob/C2422vg.java, line(s) 612
com/yandex/mobile/ads/impl/aa.java, line(s) 45,80,83
com/yandex/mobile/ads/impl/ab1.java, line(s) 100,132,147,191,225
com/yandex/mobile/ads/impl/cb0.java, line(s) 47,23,35
com/yandex/mobile/ads/impl/cs0.java, line(s) 116
com/yandex/mobile/ads/impl/et1.java, line(s) 11
com/yandex/mobile/ads/impl/he0.java, line(s) 15,37,25,31
com/yandex/mobile/ads/impl/ll1.java, line(s) 58
com/yandex/mobile/ads/impl/m51.java, line(s) 14
com/yandex/mobile/ads/impl/na.java, line(s) 161,168,210,237,240,257
com/yandex/mobile/ads/impl/oy1.java, line(s) 12
com/yandex/mobile/ads/impl/p21.java, line(s) 16
com/yandex/mobile/ads/impl/xy1.java, line(s) 103
d3/c.java, line(s) 33
d3/g.java, line(s) 68
e0/e.java, line(s) 136
e0/i.java, line(s) 50
e4/a.java, line(s) 63,74
f2/b.java, line(s) 229,230
f3/a.java, line(s) 47,46,51
f3/c.java, line(s) 18,19
f3/d.java, line(s) 12
g3/b.java, line(s) 48,49
g3/c.java, line(s) 35,54,36,55
g6/a.java, line(s) 197
h3/c.java, line(s) 41
h3/d.java, line(s) 37,31,48
h3/f.java, line(s) 11,10
h4/b0.java, line(s) 47,63,46,62
h4/c0.java, line(s) 41
h4/d0.java, line(s) 41,53,97,93,136,40,52,96,106,110,115
h4/e.java, line(s) 802,1025,1028,84,94,113,152,193,207,215,223,233,243,259,261,486,693,797
h4/e0.java, line(s) 21
h4/g.java, line(s) 106,105,118,79,95,99,101
h4/h0.java, line(s) 138,143,149,122,127,77
h4/i.java, line(s) 71,70
h4/i0.java, line(s) 51,66,111,177,50,65,110,171,194,207,226
h4/k.java, line(s) 33,32
h4/k0.java, line(s) 27,26
h4/l.java, line(s) 47,61,46,60,31,58
h4/l0.java, line(s) 61,65,70,83,98,126,148,106,111,130,60,64,69,82,95,125,147
h4/q.java, line(s) 102,99
h4/r.java, line(s) 56,36,39,49,55,50
h4/s.java, line(s) 291,74,302,45,290,97,164,182,195,205,225,269,279,299
h4/t.java, line(s) 72,60,91
h4/u.java, line(s) 52,66,108
h5/d.java, line(s) 27
h5/g.java, line(s) 39
h5/q.java, line(s) 27
h5/u.java, line(s) 28,33,34
i2/i.java, line(s) 45,48,52,56,88,91,94,97,100
i3/c.java, line(s) 16,10
io/appmetrica/analytics/gpllibrary/internal/GplLibraryWrapper.java, line(s) 87,109,116
io/appmetrica/analytics/impl/A9.java, line(s) 91
io/appmetrica/analytics/impl/B.java, line(s) 67
io/appmetrica/analytics/impl/Cc.java, line(s) 73,33,55,37
io/appmetrica/analytics/impl/H.java, line(s) 83
io/appmetrica/analytics/impl/Q.java, line(s) 101
io/appmetrica/analytics/impl/S.java, line(s) 621
io/appmetrica/analytics/impl/Sb.java, line(s) 137
j0/b.java, line(s) 76,81,87
j0/x.java, line(s) 483,486
j3/f.java, line(s) 29,28,41
j3/j.java, line(s) 30
j3/k.java, line(s) 70,77,78,186
j3/r.java, line(s) 111,135,65,121,140,142,144,91,110,134,92,61,116
j3/s.java, line(s) 39,40
j3/u.java, line(s) 109,48,105
j3/w.java, line(s) 39,50,60,33,44,56
j3/y.java, line(s) 168,54,167,55,121,135
k3/b.java, line(s) 34,78
k3/d.java, line(s) 117,144,44,116,143,71,123
k3/f.java, line(s) 73,127,138
l1/b.java, line(s) 50,83,89,141
l2/a.java, line(s) 10,17,9,16
m0/f.java, line(s) 156,166,209,272,274,289
m1/a.java, line(s) 55
m1/b.java, line(s) 56,105
m1/d.java, line(s) 220,149,156,90,93,106,111,177,178,214
n0/c.java, line(s) 37
n0/d.java, line(s) 194,445
n1/b.java, line(s) 109,116
n1/e.java, line(s) 114,132,334,340,359
n1/j.java, line(s) 80,25,35,53
n2/a.java, line(s) 98,97
n3/a.java, line(s) 79,80
o1/a.java, line(s) 117,60,173
o1/b.java, line(s) 102,111,130,139,144,163,172,177,121,154,51,188
o1/c.java, line(s) 110,119,128,137,158,247,64,147,180,214,240
o1/d.java, line(s) 20,30
o1/f.java, line(s) 103,112,131,141,146,165,174,208,216,52,122,156,223
o2/m.java, line(s) 110,109
o3/a.java, line(s) 134
o3/b.java, line(s) 68,81,86,67,80
p0/c.java, line(s) 54
p3/c.java, line(s) 69,123,65,122
q3/b.java, line(s) 82
q3/d.java, line(s) 50,58,85,49,53,66,54,67
q3/e.java, line(s) 35,22,47,34,58,59
r0/b.java, line(s) 131,104
r0/d.java, line(s) 102
r0/f.java, line(s) 65
r0/g.java, line(s) 72
r1/b.java, line(s) 58
r1/c.java, line(s) 19,30,57,71,78,40
r1/e.java, line(s) 17,27,50,61,39,72
r1/f.java, line(s) 47
r1/g.java, line(s) 17,27,50,60,73,39,85
rxhttp/a.java, line(s) 30,83,91
s1/a.java, line(s) 38,43,57
sg/bigo/ads/common/view/AutoNextLineLinearLayout.java, line(s) 62
t0/a.java, line(s) 136,203
t1/a.java, line(s) 56,69
t1/b.java, line(s) 105
t1/c.java, line(s) 56,68
t1/e.java, line(s) 50,89
t1/f.java, line(s) 37,62,79,97
u0/a.java, line(s) 60
v6/b.java, line(s) 54,95,50,91,98
x1/a.java, line(s) 35,48
x1/c.java, line(s) 46,60,76
x1/e.java, line(s) 35,48
x1/g.java, line(s) 50,63
x1/i.java, line(s) 35,48
x1/j.java, line(s) 93
y2/e.java, line(s) 86,340,364,138,141,145,149,271
z1/a.java, line(s) 41
z1/b.java, line(s) 49,55,80
z1/c.java, line(s) 32
z1/d.java, line(s) 51,58,101
z1/e.java, line(s) 65,128,135,219,228,243,252,174
z1/f.java, line(s) 56,89,96,132,139,184
z6/a.java, line(s) 52

信息 此应用程序使用SQL Cipher，确保密钥没有硬编码在代码中 

此应用程序使用SQL Cipher，确保密钥没有硬编码在代码中


Files:
com/yandex/div/storage/database/AndroidDatabaseOpenHelper.java, line(s) 276

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/yandex/div/core/actions/DivActionTypedCopyToClipboardHandler.java, line(s) 4,38
com/yandex/div/core/view2/errors/ErrorView.java, line(s) 4,70
sg/bigo/ads/common/utils/c.java, line(s) 5,104

信息 应用程序可以写入应用程序目录。敏感信息应加密 

应用程序可以写入应用程序目录。敏感信息应加密


Files:
j0/a.java, line(s) 14,14
j0/g.java, line(s) 11,11
j0/o.java, line(s) 11,11
j0/x.java, line(s) 261,261
p0/g.java, line(s) 240,240
v0/b.java, line(s) 86,86

安全 此应用程序可能具有Root检测功能 

此应用程序可能具有Root检测功能
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
com/apm/insight/nativecrash/c.java, line(s) 326,326,326,326,326
com/yandex/metrica/impl/ob/C2308r2.java, line(s) 26
com/yandex/mobile/ads/impl/o71.java, line(s) 10,10,10,10,10
io/appmetrica/analytics/coreutils/internal/system/RootChecker.java, line(s) 28

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
com/inmobi/media/na.java, line(s) 115,119
com/mbridge/msdk/thrid/okhttp/internal/Util.java, line(s) 503,502,501,501
com/yandex/mobile/ads/impl/rj1.java, line(s) 13,12,11,11
com/yandex/mobile/ads/impl/tj1.java, line(s) 50,49,48,48
com/yandex/mobile/ads/impl/zy0.java, line(s) 156,99,154,154

安全 此应用程序具有防止窃听攻击的功能 

此应用程序具有防止窃听攻击的功能
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-for-overlay-attacks-mstg-platform-9

Files:
com/yandex/div/core/util/SafePopupWindow.java, line(s) 18

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (app.adjust.cn) 通信。 

{'ip': '47.104.30.117', 'country_short': 'CN', 'country_long': '中国', 'region': '山东', 'city': '青岛', 'latitude': '36.098610', 'longitude': '120.371941'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (lf3-cdn-tos.bytegoofy.com) 通信。 

{'ip': '61.170.81.236', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (mores.toponad.com) 通信。 

{'ip': '117.91.199.31', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '扬州', 'latitude': '32.397221', 'longitude': '119.435600'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (app-measurement.com) 通信。 

{'ip': '180.163.151.161', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (queryapi-1431840856.bceapp.com) 通信。 

{'ip': '106.12.135.174', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.googletagmanager.com) 通信。 

{'ip': '180.163.151.169', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (fileservice-1431840856.bceapp.com) 通信。 

{'ip': '106.12.135.175', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (aa.birdgesdk.com) 通信。 

{'ip': '120.78.94.142', 'country_short': 'CN', 'country_long': '中国', 'region': '广东', 'city': '深圳', 'latitude': '22.545673', 'longitude': '114.068108'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (dtcy0bqpv6jys.cloudfront.net) 通信。 

{'ip': '61.160.148.90', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (onecleanpro.com) 通信。 

{'ip': '119.13.113.2', 'country_short': 'HK', 'country_long': '中国', 'region': '香港', 'city': '香港', 'latitude': '22.285521', 'longitude': '114.157692'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (pagead2.googlesyndication.com) 通信。 

{'ip': '180.163.150.38', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (pitk.birdgesdk.com) 通信。 

{'ip': '39.108.103.199', 'country_short': 'CN', 'country_long': '中国', 'region': '广东', 'city': '深圳', 'latitude': '22.545673', 'longitude': '114.068108'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (firebase-settings.crashlytics.com) 通信。 

{'ip': '180.163.150.162', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

安全评分: ( One Manager 1.9.8.0)