安全分析报告： Air v57.0

安全分数


安全分数 44/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

14

用户/设备跟踪器


调研结果

高危 6
中危 21
信息 2
安全 2
关注 9

高危 WebView域控制不严格漏洞 

WebView域控制不严格漏洞


Files:
com/adcolony/sdk/e0.java, line(s) 430,421
com/ironsource/sdk/utils/e.java, line(s) 30,25
com/unity3d/services/core/webview/WebView.java, line(s) 69,66
f4/l4.java, line(s) 55,52
f4/p6.java, line(s) 189,183

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击 

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
com/fyber/inneractive/sdk/activities/InneractiveInternalBrowserActivity.java, line(s) 158,12
com/fyber/inneractive/sdk/config/r.java, line(s) 32,4
com/tapjoy/TJWebViewActivity.java, line(s) 201,14,15
com/unity3d/services/core/webview/WebViewApp.java, line(s) 180,11,56,62,82,113
f4/l4.java, line(s) 31,6
f4/q.java, line(s) 53,6

高危 应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文 

应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-block-cipher-mode

Files:
com/inmobi/media/t3.java, line(s) 20
com/inmobi/media/u2.java, line(s) 190

高危 已启用远程WebView调试 

已启用远程WebView调试
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
com/fyber/inneractive/sdk/web/d.java, line(s) 434,9
com/ironsource/sdk/controller/f0.java, line(s) 392,26,27
com/tapjoy/j.java, line(s) 22,6

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/fyber/inneractive/sdk/player/exoplayer2/extractor/hls/a.java, line(s) 43
com/ironsource/mediationsdk/utils/IronSourceAES.java, line(s) 70,136

高危 应用程序包含隐私跟踪程序 

此应用程序有多个14隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危 应用程序已启用明文网络流量 

[android:usesCleartextTraffic=true]
应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。

中危 应用程序数据可以被备份 

[android:allowBackup=true]
这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。

中危 Activity (com.jimbovpn.jimbo2023.app.ui.DisConnectingActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (com.jimbovpn.jimbo2023.app.ui.ConnectingActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.jimbovpn.jimbo2023.app.v2ray.receiver.TaskerReceiver) 未被保护。 

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.google.firebase.messaging.directboot.FirebaseMessagingDirectBootReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (androidx.work.impl.background.systemjob.SystemJobService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (androidx.profileinstaller.ProfileInstallReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
bin/mt/signature/KillerApplication.java, line(s) 77
com/apm/insight/entity/d.java, line(s) 20
com/apm/insight/l/w.java, line(s) 33,79,90
com/apm/insight/nativecrash/c.java, line(s) 724
com/fyber/inneractive/sdk/network/i0.java, line(s) 32
com/fyber/inneractive/sdk/util/l.java, line(s) 154
com/fyber/inneractive/sdk/web/i.java, line(s) 581
com/inmobi/media/j3.java, line(s) 59,62,114,117
com/ironsource/mediationsdk/utils/g.java, line(s) 151,156
com/ironsource/sdk/utils/SDKUtils.java, line(s) 284
com/ironsource/services/a.java, line(s) 484,344,507
com/pgl/ssdk/ces/e.java, line(s) 166
com/tapjoy/g.java, line(s) 250,251,252
com/unity3d/services/core/cache/CacheDirectory.java, line(s) 55
com/vungle/warren/VungleApiClient.java, line(s) 382
com/vungle/warren/persistence/b.java, line(s) 516,517
i9/h.java, line(s) 393
ib/a.java, line(s) 186
ya/a.java, line(s) 134,136

中危 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/apm/insight/i.java, line(s) 9
com/fyber/inneractive/sdk/config/global/s.java, line(s) 11
com/fyber/inneractive/sdk/player/exoplayer2/upstream/cache/i.java, line(s) 21
com/inmobi/media/b2.java, line(s) 5
com/inmobi/media/d.java, line(s) 11
com/inmobi/media/k8.java, line(s) 12
com/inmobi/media/x0.java, line(s) 26
com/inmobi/media/x7.java, line(s) 27
com/ironsource/mediationsdk/utils/f.java, line(s) 5
com/unity3d/services/core/request/metrics/SDKMetrics.java, line(s) 9
ec/f.java, line(s) 22
ec/h.java, line(s) 18
ge/a.java, line(s) 3
ge/b.java, line(s) 4
he/a.java, line(s) 4
io/grpc/internal/h0.java, line(s) 18
io/grpc/internal/j0.java, line(s) 4
io/grpc/internal/j2.java, line(s) 15
zb/i.java, line(s) 43

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
com/adcolony/sdk/v2.java, line(s) 5,201
com/adcolony/sdk/v3.java, line(s) 7,8,204
com/adcolony/sdk/x2.java, line(s) 5,38
com/apm/insight/e/b/a.java, line(s) 4,39
com/apm/insight/e/b/b.java, line(s) 5,42
com/bykv/vk/openvk/component/video/a/b/b/d.java, line(s) 4,5,14
com/bykv/vk/openvk/preload/geckox/a/b.java, line(s) 6,7,124
com/inmobi/media/g3.java, line(s) 5,87
com/ironsource/environment/f.java, line(s) 6,7,21
com/ironsource/eventsmodule/a.java, line(s) 6,7,168
com/vungle/warren/persistence/DatabaseHelper.java, line(s) 9,10,120
com/vungle/warren/persistence/b.java, line(s) 7,540
d1/b.java, line(s) 5,6,7,8,9,71
w4/k.java, line(s) 4,24
w4/m.java, line(s) 4,34
w4/n.java, line(s) 4,39
w4/q.java, line(s) 4,23
w4/r.java, line(s) 5,6,154
w4/u.java, line(s) 4,5,216
y9/h2.java, line(s) 5,38

中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
com/inmobi/commons/core/configs/AdConfig.java, line(s) 387
com/inmobi/media/i0.java, line(s) 15
com/ironsource/adapters/ironsource/IronSourceAdapter.java, line(s) 81,51,50,708,466
com/ironsource/adapters/ironsource/IronSourceLoadParameters.java, line(s) 52,55
com/ironsource/adapters/supersonicads/SupersonicAdsAdapter.java, line(s) 72,203,377
com/ironsource/mediationsdk/adunit/adapter/utility/AdOptionsPosition.java, line(s) 12
com/ironsource/mediationsdk/d.java, line(s) 213,308
com/ironsource/mediationsdk/g0.java, line(s) 2427,2408
com/ironsource/mediationsdk/utils/IronSourceConstants.java, line(s) 93,104
com/unity3d/ads/metadata/InAppPurchaseMetaData.java, line(s) 14
com/unity3d/services/ads/gmascar/utils/ScarConstants.java, line(s) 4,5,6,8,9
com/unity3d/services/core/configuration/ExperimentObject.java, line(s) 7,8
com/unity3d/services/core/device/reader/DeviceInfoReaderFilterProvider.java, line(s) 11,12
com/unity3d/services/core/device/reader/JsonStorageKeyNames.java, line(s) 4,6,7,8,10,11,12,13,9,14,5,15,16,17
com/unity3d/services/core/properties/SdkProperties.java, line(s) 31
io/grpc/internal/y2.java, line(s) 54
rx/internal/schedulers/NewThreadWorker.java, line(s) 25,34

中危 IP地址泄露 

IP地址泄露


Files:
com/adcolony/sdk/l.java, line(s) 116
com/jimbovpn/jimbo2023/app/v2ray/service/V2RayVpnService.java, line(s) 25,26
i9/h.java, line(s) 195,209,242,136,150
i9/i.java, line(s) 157,159,300,573

中危 MD5是已知存在哈希冲突的弱哈希 

MD5是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/apm/insight/l/v.java, line(s) 128
com/bykv/vk/openvk/component/video/api/f/b.java, line(s) 48
com/bykv/vk/openvk/preload/geckox/utils/g.java, line(s) 37
com/fyber/inneractive/sdk/player/cache/h.java, line(s) 503
com/ironsource/mediationsdk/utils/IronSourceUtils.java, line(s) 344
com/ironsource/sdk/controller/m.java, line(s) 20
com/ironsource/sdk/utils/SDKUtils.java, line(s) 202
f4/p6.java, line(s) 419
v2/d.java, line(s) 27

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞 

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
com/fyber/inneractive/sdk/web/t.java, line(s) 530,522
com/inmobi/media/n9.java, line(s) 932,903
com/ironsource/mediationsdk/testSuite/webView/c.java, line(s) 103,100,102
com/unity3d/services/ads/webplayer/WebPlayerView.java, line(s) 556,540
com/unity3d/services/core/webview/WebView.java, line(s) 139,80

中危 SHA-1是已知存在哈希冲突的弱哈希 

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/adcolony/sdk/b2.java, line(s) 214
com/adcolony/sdk/g4.java, line(s) 302
com/fyber/inneractive/sdk/player/cache/h.java, line(s) 490
com/ironsource/sdk/utils/SDKUtils.java, line(s) 96
com/pgl/ssdk/ces/e.java, line(s) 299
com/tapjoy/internal/t.java, line(s) 152
com/unity3d/services/core/device/Device.java, line(s) 167
f4/b2.java, line(s) 64
f4/d0.java, line(s) 365
t7/n.java, line(s) 37
x9/f0.java, line(s) 22
y9/d0.java, line(s) 32
z7/b.java, line(s) 60

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
r0/d.java, line(s) 100
y9/s.java, line(s) 43
z7/c.java, line(s) 53

中危 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
"com.google.firebase.crashlytics.mapping_file_id" : "00000000000000000000000000000000"
"google_api_key" : "AIzaSyBflHIMgxh8ohUXGQOFuCNZuK72PugDc1M"
"google_crash_reporting_api_key" : "AIzaSyBflHIMgxh8ohUXGQOFuCNZuK72PugDc1M"
PGh0bWw+PGhlYWQ+CiAgICA8bWV0YSBuYW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxlPTEiPgogICAgPHN0eWxlPgogICAgICAgIC5jb250YWluZXIgewogICAgICAgICAgICBmbGV4LWRpcmVjdGlvbjogY29sdW1uOwogICAgICAgIH0KCiAgICAgICAgLmZsZXgtY29udGFpbmVyIHsKICAgICAgICAgICAgZGlzcGxheTogZmxleDsKICAgICAgICAgICAgYWxpZ24taXRlbXM6IGNlbnRlcjsKICAgICAgICAgICAgZmxleC1kaXJlY3Rpb246IGNvbHVtbjsKICAgICAgICAgICAganVzdGlmeS1jb250ZW50OiBmbGV4LWVuZDsKICAgICAgICB9CgogICAgICAgIC5sb2FkaW5nIHsKICAgICAgICAgICAganVzdGlmeS1jb250ZW50OiBzdGFydDsKICAgICAgICB9CgogICAgICAgIC5sZHMtZWxsaXBzaXMgewogICAgICAgICAgICBkaXNwbGF5OiBpbmxpbmUtYmxvY2s7CiAgICAgICAgICAgIHBvc2l0aW9uOiByZWxhdGl2ZTsKICAgICAgICAgICAgd2lkdGg6IDgwcHg7CiAgICAgICAgICAgIGhlaWdodDogODBweDsKICAgICAgICB9CgogICAgICAgIC5sZHMtZWxsaXBzaXMgZGl2IHsKICAgICAgICAgICAgcG9zaXRpb246IGFic29sdXRlOwogICAgICAgICAgICB0b3A6IDMzcHg7CiAgICAgICAgICAgIHdpZHRoOiAxM3B4OwogICAgICAgICAgICBoZWlnaHQ6IDEzcHg7CiAgICAgICAgICAgIGJvcmRlci1yYWRpdXM6IDUwJTsKICAgICAgICAgICAgYmFja2dyb3VuZDogI0E3QTdBNzsKICAgICAgICAgICAgYW5pbWF0aW9uLXRpbWluZy1mdW5jdGlvbjogY3ViaWMtYmV6aWVyKDAsIDEsIDEsIDApOwogICAgICAgIH0KCiAgICAgICAgLmxkcy1lbGxpcHNpcyBkaXY6bnRoLWNoaWxkKDEpIHsKICAgICAgICAgICAgbGVmdDogOHB4OwogICAgICAgICAgICBhbmltYXRpb246IGxkcy1lbGxpcHNpczEgMC42cyBpbmZpbml0ZTsKICAgICAgICB9CgogICAgICAgIC5sZHMtZWxsaXBzaXMgZGl2Om50aC1jaGlsZCgyKSB7CiAgICAgICAgICAgIGxlZnQ6IDhweDsKICAgICAgICAgICAgYW5pbWF0aW9uOiBsZHMtZWxsaXBzaXMyIDAuNnMgaW5maW5pdGU7CiAgICAgICAgfQoKICAgICAgICAubGRzLWVsbGlwc2lzIGRpdjpudGgtY2hpbGQoMykgewogICAgICAgICAgICBsZWZ0OiAzMnB4OwogICAgICAgICAgICBhbmltYXRpb246IGxkcy1lbGxpcHNpczIgMC42cyBpbmZpbml0ZTsKICAgICAgICB9CgogICAgICAgIC5sZHMtZWxsaXBzaXMgZGl2Om50aC1jaGlsZCg0KSB7CiAgICAgICAgICAgIGxlZnQ6IDU2cHg7CiAgICAgICAgICAgIGFuaW1hdGlvbjogbGRzLWVsbGlwc2lzMyAwLjZzIGluZmluaXRlOwogICAgICAgIH0KCiAgICAgICAgQGtleWZyYW1lcyBsZHMtZWxsaXBzaXMxIHsKICAgICAgICAgICAgMCUgewogICAgICAgICAgICAgICAgdHJhbnNmb3JtOiBzY2FsZSgwKTsKICAgICAgICAgICAgfQoKICAgICAgICAgICAgMTAwJSB7CiAgICAgICAgICAgICAgICB0cmFuc2Zvcm06IHNjYWxlKDEpOwogICAgICAgICAgICB9CiAgICAgICAgfQoKICAgICAgICBAa2V5ZnJhbWVzIGxkcy1lbGxpcHNpczMgewogICAgICAgICAgICAwJSB7CiAgICAgICAgICAgICAgICB0cmFuc2Zvcm06IHNjYWxlKDEpOwogICAgICAgICAgICB9CgogICAgICAgICAgICAxMDAlIHsKICAgICAgICAgICAgICAgIHRyYW5zZm9ybTogc2NhbGUoMCk7CiAgICAgICAgICAgIH0KICAgICAgICB9CgogICAgICAgIEBrZXlmcmFtZXMgbGRzLWVsbGlwc2lzMiB7CiAgICAgICAgICAgIDAlIHsKICAgICAgICAgICAgICAgIHRyYW5zZm9ybTogdHJhbnNsYXRlKDAsIDApOwogICAgICAgICAgICB9CgogICAgICAgICAgICAxMDAlIHsKICAgICAgICAgICAgICAgIHRyYW5zZm9ybTogdHJhbnNsYXRlKDI0cHgsIDApOwogICAgICAgICAgICB9CiAgICAgICAgfQogICAgPC9zdHlsZT4KPC9oZWFkPgoKPGJvZHk+CiAgICA8ZGl2IGlkPSJsb2FkaW5nX3dyYXBwZXIiIHN0eWxlPSJkaXNwbGF5OiBmbGV4O2ZsZXgtZGlyZWN0aW9uOiBjb2x1bW47anVzdGlmeS1jb250ZW50OiBzcGFjZS1iZXR3ZWVuO2hlaWdodDogMTAwJTsiPgo8ZGl2IGNsYXNzPSJjb250YWluZXIgZmxleC1jb250YWluZXIiIHN0eWxlPSIKICAgIGZsZXg6IDE7CiI+CiAgICAgICAgPGRpdiBjbGFzcz0iZmxleC1jb250YWluZXIiIHN0eWxlPSIKICAgIGZsZXg6IDE7CiI+CiAgICAgICAgICAgIDxzdmcgd2lkdGg9IjIzNiIgaGVpZ2h0PSI0NCIgdmlld0JveD0iMCAwIDIzNiA0NCIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KICAgICAgICAgICAgICAgIDxwYXRoIGQ9Ik0zNy44MDYzIDMwLjI4NTRWMTAuNDI4NUwyMC42MTI5IDAuNVY4LjExNjM2TDI3LjM1MDggMTIuMDA5NUMyNy41OTQ1IDEyLjE0NTUgMjcuNjAwMiAxMi41MjUyIDI3LjM1MDggMTIuNjYxMkwxOS4zNDM1IDE3LjI4NTVDMTkuMDk5OCAxNy40MjcxIDE4LjgxNjQgMTcuNDE1OCAxOC41ODk4IDE3LjI4NTVMMTAuNTc2OCAxMi42NjEyQzEwLjMzMzEgMTIuNTI1MiAxMC4zMjc0IDEyLjE0NTUgMTAuNTc2OCAxMi4wMDk1TDE3LjMxNDcgOC4xMjIwMlYwLjUwNTY2OEwwLjExNTY0NiAxMC40Mjg1VjMwLjI4NTRWMzAuMTk0N1YzMC4yODU0TDYuNzExOTMgMjYuNDc3MlYxOC42OTY1QzYuNzA2MjYgMTguNDE4OCA3LjAzNDk0IDE4LjIyMDUgNy4yNzg2MiAxOC4zNzM1TDE1LjI4NiAyMi45OTc3QzE1LjUyOTYgMjMuMTM5NCAxNS42NjU2IDIzLjM4ODcgMTUuNjY1NiAyMy42NDk0VjMyLjg5NzlDMTUuNjcxMyAzMy4xNzU1IDE1LjM0ODMgMzMuMzczOSAxNS4xMDQ2IDMzLjIyNjVMOC4zNjY2NyAyOS4zMzM0TDEuNzcwMzggMzMuMTQxNUwxOC45Njk1IDQzLjA3TDM2LjE2ODUgMzMuMTQxNUwyOS41NjA5IDI5LjMzMzRMMjIuODIyOSAzMy4yMjY1QzIyLjU4NDkgMzMuMzY4MiAyMi4yNTA2IDMzLjE4NjkgMjIuMjU2MyAzMi44OTc5VjIzLjY0OTRDMjIuMjU2MyAyMy4zNzE3IDIyLjQwOTMgMjMuMTI4MSAyMi42MzU5IDIyLjk5NzdMMzAuNjQzMyAxOC4zNzM1QzMwLjg4MTMgMTguMjI2MiAzMS4yMTU2IDE4LjQxMzIgMzEuMjEgMTguNzAyMlYyNi40ODI5TDM3LjgwNjMgMzAuMjg1NFoiIGZpbGw9IiM0RDRENEQiPjwvcGF0aD4KICAgICAgICAgICAgICAgIDxwYXRoIGQ9Ik0xNS4wOTkgMzMuMjI2Mkw4LjM2MTA2IDI5LjMzM0wxLjc2NDc4IDMzLjE0MTJMMTguOTYzOCA0My4wNjk2VjIxLjMwODZMMC4xMTU3MDcgMTAuNDI4MVYzMC4yODVWMzAuMTk0NFYzMC4yODVMNi43MTE5OSAyNi40NzY5VjE4LjY5NjJDNi43MDYzMiAxOC40MTg1IDcuMDM1IDE4LjIyMDEgNy4yNzg2OCAxOC4zNzMxTDE1LjI4NiAyMi45OTc0QzE1LjUyOTcgMjMuMTM5IDE1LjY2NTcgMjMuMzg4NCAxNS42NjU3IDIzLjY0OTFWMzIuODk3NUMxNS42NzE0IDMzLjE3NTIgMTUuMzQyNyAzMy4zNzM1IDE1LjA5OSAzMy4yMjYyWiIgZmlsbD0iIzRDNEM0QyI+PC9wYXRoPgogICAgICAgICAgICAgICAgPHBhdGggZD0iTTE4Ljk2MzcgNDMuMDY5NkwzNi4xNjI4IDMzLjE0MTJMMjkuNTYwOSAyOS4zMzNMMjIuODIyOSAzMy4yMjYyQzIyLjU4NDkgMzMuMzY3OCAyMi4yNTA1IDMzLjE4NjUgMjIuMjU2MiAzMi44OTc1VjIzLjY0OTFDMjIuMjU2MiAyMy4zNzE0IDIyLjQwOTIgMjMuMTI3NyAyMi42MzU5IDIyLjk5NzRMMzAuNjQzMiAxOC4zNzMxQzMwLjg4MTIgMTguMjI1OCAzMS4yMTU2IDE4LjQxMjggMzEuMjA5OSAxOC43MDE4VjI2LjQ4MjVMMzcuODA2MiAzMC4yOTA3VjEwLjQyODFMMTguOTYzNyAyMS4zMDg2VjQzLjA2OTZaIiBmaWxsPSJibGFjayI+PC9wYXRoPgogICAgICAgICAgICAgICAgPHBhdGggZD0iTTIwLjYxMjkgMC41VjguMTE2MzZMMjcuMzUwOCAxMi4wMDk1QzI3LjU5NDUgMTIuMTQ1NSAyNy42MDAyIDEyLjUyNTIgMjcuMzUwOCAxMi42NjEyTDE5LjM0MzUgMTcuMjg1NUMxOS4wOTk4IDE3LjQyNzEgMTguODE2NCAxNy40MTU4IDE4LjU4OTggMTcuMjg1NUwxMC41NzY4IDEyLjY2MTJDMTAuMzMzMSAxMi41MjUyIDEwLjMyNzQgMTIuMTQ1NSAxMC41NzY4IDEyLjAwOTVMMTcuMzE0NyA4LjEyMjAyVjAuNTA1NjY4TDAuMTE1NjQ2IDEwLjQyODVMMTguOTYzOCAyMS4zMDlMMzcuODExOSAxMC40Mjg1TDIwLjYxMjkgMC41WiIgZmlsbD0iIzgwODA4MCI+PC9wYXRoPgogICAgICAgICAgICAgICAgPHBhdGggZD0iTTU5LjY3NDYgMjMuODUyN0M1OS42NzQ2IDI1Ljg1MzIgNTguNTU4MiAyNy4yODEyIDU2LjIxNzggMjcuMjgxMkM1My43MyAyNy4yODEyIDUyLjcwNDMgMjUuOTM4MiA1Mi43MDQzIDIzLjkzNzdWMTEuNzA4NUg0Ny42NDk0VjIzLjc2NzdDNDcuNjQ5NCAyOC41MzkzIDUwLjUwNTUgMzEuMzM4NyA1Ni4yMjM0IDMxLjMzODdDNjEuOTA3NCAzMS4zMzg3IDY0Ljc0MDggMjguNDgyNiA2NC43NDA4IDIzLjc2NzdWMTEuNzA4NUg1OS42ODU5VjIzLjg1MjdINTkuNjc0NloiIGZpbGw9ImJsYWNrIj48L3BhdGg+CiAgICAgICAgICAgICAgICA8cGF0aCBkPSJNNzYuNDcxOSAxNS45MDc4Qzc0LjQ0MzIgMTUuOTA3OCA3My4wNDM1IDE2Ljc2MzUgNzEuOTU1NCAxOC4zMzlINzEuODcwNFYxNi4zMzg1SDY3LjM4MjJWMzAuOTY0OUg3Mi4wNDA0VjIyLjg3ODJDNzIuMDQwNCAyMS4wNzYxIDczLjA3MTggMTkuNzg5NyA3NC42MTMyIDE5Ljc4OTdDNzYuMTI2MyAxOS43ODk3IDc2Ljg5NyAyMC44NDk0IDc2Ljg5NyAyMi4zOTA4VjMwLjk2NDlIODEuNTU1MlYyMS40NTAxQzgxLjU2MDggMTguMTkxNiA3OS42NzM3IDE1LjkwNzggNzYuNDcxOSAxNS45MDc4WiIgZmlsbD0iYmxhY2siPjwvcGF0aD4KICAgICAgICAgICAgICAgIDxwYXRoIGQ9Ik04OC42MjE2IDEwLjUzNjlIODMuOTYzNFYxNC4zMTFIODguNjIxNlYxMC41MzY5WiIgZmlsbD0iYmxhY2siPjwvcGF0aD4KICAgICAgICAgICAgICAgIDxwYXRoIGQ9Ik04OC42MjE1IDE2LjMzOTVIODMuOTYzM1YzMC45NzE1SDg4LjYyMTVWMTYuMzM5NVoiIGZpbGw9ImJsYWNrIj48L3BhdGg+CiAgICAgICAgICAgICAgICA8cGF0aCBkPSJNOTYuODIxNyAxMS43MDg1SDkyLjI3NjhWMTYuMzM4NEg5MC4zMzNWMjAuMTEyNkg5Mi4yNzY4VjI3LjExMTJDOTIuMjc2OCAzMC4yNTY0IDk0LjIyMDYgMzEuMTQwNCA5Ni45MzUgMzEuMTQwNEM5OC4xOTMxIDMxLjE0MDQgOTkuMDc3MSAzMS4wMjcxIDk5LjQ3OTQgMzAuOTEzN1YyNy41MTM2Qzk5LjMwOTQgMjcuNTEzNiA5OC44NTA0IDI3LjU0MTkgOTguNDQ4MSAyNy41NDE5Qzk3LjQ1MDcgMjcuNTQxOSA5Ni44MjE3IDI3LjI1ODYgOTYuODIxNyAyNi4xMTM4VjIwLjExMjZIOTkuNDc5NFYxNi4zMzg0SDk2LjgyMTdWMTEuNzA4NVoiIGZpbGw9ImJsYWNrIj48L3BhdGg+CiAgICAgICAgICAgICAgICA8cGF0aCBkPSJNMTA5LjM5MSAyMi41NjY1QzEwOC45MzIgMjMuOTk0NiAxMDguNTM1IDI1LjkzODMgMTA4LjUzNSAyNS45MzgzSDEwOC40NzlDMTA4LjQ3OSAyNS45MzgzIDEwOC4wMTkgMjMuOTk0NiAxMDcuNTY2IDIyLjU2NjVMMTA1LjU5NCAxNi4zMzg2SDEwMC42ODFMMTA0Ljk5MyAyNy41OTg4QzEwNS41OTQgMjkuMTQwMiAxMDUuODc3IDMwLjAwMTUgMTA1Ljg3NyAzMC42MjQ5QzEwNS44NzcgMzEuNjIyMyAxMDUuMzMzIDMyLjE2NjMgMTAzLjk2MiAzMi4xNjYzSDEwMi4zNjRWMzUuNzkzMUgxMDUuMzlDMTA4LjMzMSAzNS43OTMxIDEwOS43MzEgMzQuNTkxNyAxMTAuOTA0IDMxLjE2MzNMMTE1Ljk1OSAxNi4zMzI5SDExMS4zMDFMMTA5LjM5MSAyMi41NjY1WiIgZmlsbD0iYmxhY2siPjwvcGF0aD4KICAgICAgICAgICAgICAgIDxwYXRoIGQ9Ik0xMjIuNzI1IDMxLjE4MDZWMTIuNjA0MUgxMjUuNTI4VjI4Ljc2NzhIMTMzLjk0NVYzMS4xODA2SDEyMi43MjVaIiBmaWxsPSJibGFjayI+PC9wYXRoPgogICAgICAgICAgICAgICAgPHBhdGggZD0iTTE0Mi45MyAzMS40NjE4QzE0MS41NTcgMzEuNDYxOCAxNDAuMzc1IDMxLjE2ODUgMTM5LjM4MyAzMC41ODE5QzEzOC4zOTcgMjkuOTg5MyAxMzcuNjM1IDI5LjE1NzkgMTM3LjA5NyAyOC4wODc1QzEzNi41NjUgMjcuMDExMiAxMzYuMjk5IDI1Ljc1MDQgMTM2LjI5OSAyNC4zMDUxQzEzNi4yOTkgMjIuODc4IDEzNi41NjUgMjEuNjIwMiAxMzcuMDk3IDIwLjUzMThDMTM3LjYzNSAxOS40NDMzIDEzOC4zODUgMTguNTkzNyAxMzkuMzQ3IDE3Ljk4M0MxNDAuMzE0IDE3LjM3MjIgMTQxLjQ0NSAxNy4wNjY4IDE0Mi43MzkgMTcuMDY2OEMxNDMuNTI1IDE3LjA2NjggMTQ0LjI4NyAxNy4xOTY4IDE0NS4wMjUgMTcuNDU2OUMxNDUuNzYzIDE3LjcxNjkgMTQ2LjQyNSAxOC4xMjUxIDE0Ny4wMTEgMTguNjgxNEMxNDcuNTk4IDE5LjIzNzcgMTQ4LjA2MSAxOS45NjAzIDE0OC4zOTkgMjAuODQ5M0MxNDguNzM4IDIxLjczMjEgMTQ4LjkwNyAyMi44MDU1IDE0OC45MDcgMjQuMDY5M1YyNS4wMzA4SDEzNy44MzJWMjIuOTk5SDE0Ni4yNDlDMTQ2LjI0OSAyMi4yODU0IDE0Ni4xMDQgMjEuNjUzNSAxNDUuODE0IDIxLjEwMzJDMTQ1LjUyNCAyMC41NDY5IDE0NS4xMTYgMjAuMTA4NSAxNDQuNTkgMTkuNzg4QzE0NC4wNjkgMTkuNDY3NSAxNDMuNDU5IDE5LjMwNzMgMTQyLjc1NyAxOS4zMDczQzE0MS45OTUgMTkuMzA3MyAxNDEuMzMgMTkuNDk0NyAxNDAuNzYyIDE5Ljg2OTZDMTQwLjE5OSAyMC4yMzg1IDEzOS43NjQgMjAuNzIyMyAxMzkuNDU2IDIxLjMyMDlDMTM5LjE1MyAyMS45MTM1IDEzOS4wMDIgMjIuNTU3NSAxMzkuMDAyIDIzLjI1MjlWMjQuODQwM0MxMzkuMDAyIDI1Ljc3MTUgMTM5LjE2NSAyNi41NjM3IDEzOS40OTIgMjcuMjE2OEMxMzkuODI0IDI3Ljg2OTkgMTQwLjI4NyAyOC4zNjg3IDE0MC44OCAyOC43MTM0QzE0MS40NzIgMjkuMDUyIDE0Mi4xNjUgMjkuMjIxNCAxNDIuOTU3IDI5LjIyMTRDMTQzLjQ3MSAyOS4yMjE0IDE0My45MzkgMjkuMTQ4OCAxNDQuMzYzIDI5LjAwMzdDMTQ0Ljc4NiAyOC44NTI1IDE0NS4xNTIgMjguNjI4OCAxNDUuNDYgMjguMzMyNUMxNDUuNzY5IDI4LjAzNjEgMTQ2LjAwNSAyNy42NzAzIDE0Ni4xNjggMjcuMjM0OUwxNDguNzM1IDI3LjY5NzVDMTQ4LjUyOSAyOC40NTM0IDE0OC4xNiAyOS4xMTU1IDE0Ny42MjggMjkuNjg0QzE0Ny4xMDIgMzAuMjQ2MyAxNDYuNDQgMzAuNjg0NyAxNDUuNjQyIDMwLjk5OTJDMTQ0Ljg1IDMxLjMwNzYgMTQzLjk0NiAzMS40NjE4IDE0Mi45MyAzMS40NjE4WiIgZmlsbD0iYmxhY2siPjwvcGF0aD4KICAgICAgICAgICAgICAgIDxwYXRoIGQ9Ik0xNjMuNDM2IDE3LjI0ODJMMTU4LjM4MyAzMS4xODA2SDE1NS40ODFMMTUwLjQyIDE3LjI0ODJIMTUzLjMzMUwxNTYuODYgMjcuOTY5NkgxNTcuMDA1TDE2MC41MjQgMTcuMjQ4MkgxNjMuNDM2WiIgZmlsbD0iYmxhY2siPjwvcGF0aD4KICAgICAgICAgICAgICAgIDxwYXRoIGQ9Ik0xNzEuNTE1IDMxLjQ2MThDMTcwLjE0MyAzMS40NjE4IDE2OC45NiAzMS4xNjg1IDE2Ny45NjkgMzAuNTgxOUMxNjYuOTgzIDI5Ljk4OTMgMTY2LjIyMSAyOS4xNTc5IDE2NS42ODMgMjguMDg3NUMxNjUuMTUxIDI3LjAxMTIgMTY0Ljg4NSAyNS43NTA0IDE2NC44ODUgMjQuMzA1MUMxNjQuODg1IDIyLjg3OCAxNjUuMTUxIDIxLjYyMDIgMTY1LjY4MyAyMC41MzE4QzE2Ni4yMjEgMTkuNDQzMyAxNjYuOTcxIDE4LjU5MzcgMTY3LjkzMiAxNy45ODNDMTY4LjkgMTcuMzcyMiAxNzAuMDMxIDE3LjA2NjggMTcxLjMyNSAxNy4wNjY4QzE3Mi4xMTEgMTcuMDY2OCAxNzIuODczIDE3LjE5NjggMTczLjYxMSAxNy40NTY5QzE3NC4zNDggMTcuNzE2OSAxNzUuMDEgMTguMTI1MSAxNzUuNTk3IDE4LjY4MTRDMTc2LjE4NCAxOS4yMzc3IDE3Ni42NDYgMTkuOTYwMyAxNzYuOTg1IDIwLjg0OTNDMTc3LjMyMyAyMS43MzIxIDE3Ny40OTMgMjIuODA1NSAxNzcuNDkzIDI0LjA2OTNWMjUuMDMwOEgxNjYuNDE4VjIyLjk5OUgxNzQuODM1QzE3NC44MzUgMjIuMjg1NCAxNzQuNjkgMjEuNjUzNSAxNzQuNCAyMS4xMDMyQzE3NC4xMDkgMjAuNTQ2OSAxNzMuNzAxIDIwLjEwODUgMTczLjE3NSAxOS43ODhDMTcyLjY1NSAxOS40Njc1IDE3Mi4wNDQgMTkuMzA3MyAxNzEuMzQzIDE5LjMwNzNDMTcwLjU4MSAxOS4zMDczIDE2OS45MTYgMTkuNDk0NyAxNjkuMzQ3IDE5Ljg2OTZDMTY4Ljc4NSAyMC4yMzg1IDE2OC4zNSAyMC43MjIzIDE2OC4wNDEgMjEuMzIwOUMxNjcuNzM5IDIxLjkxMzUgMTY3LjU4OCAyMi41NTc1IDE2Ny41ODggMjMuMjUyOVYyNC44NDAzQzE2Ny41ODggMjUuNzcxNSAxNjcuNzUxIDI2LjU2MzcgMTY4LjA3OCAyNy4yMTY4QzE2OC40MSAyNy44Njk5IDE2OC44NzMgMjguMzY4NyAxNjkuNDY1IDI4LjcxMzRDMTcwLjA1OCAyOS4wNTIgMTcwLjc1IDI5LjIyMTQgMTcxLjU0MyAyOS4yMjE0QzE3Mi4wNTcgMjkuMjIxNCAxNzIuNTI1IDI5LjE0ODggMTcyLjk0OCAyOS4wMDM3QzE3My4zNzIgMjguODUyNSAxNzMuNzM4IDI4LjYyODggMTc0LjA0NiAyOC4zMzI1QzE3NC4zNTQgMjguMDM2MSAxNzQuNTkgMjcuNjcwMyAxNzQuNzUzIDI3LjIzNDlMMTc3LjMyIDI3LjY5NzVDMTc3LjExNSAyOC40NTM0IDE3Ni43NDYgMjkuMTE1NSAxNzYuMjE0IDI5LjY4NEMxNzUuNjg4IDMwLjI0NjMgMTc1LjAyNiAzMC42ODQ3IDE3NC4yMjcgMzAuOTk5MkMxNzMuNDM1IDMxLjMwNzYgMTcyLjUzMSAzMS40NjE4IDE3MS41MTUgMzEuNDYxOFoiIGZpbGw9ImJsYWNrIj48L3BhdGg+CiAgICAgICAgICAgICAgICA8cGF0aCBkPSJNMTgzLjIxNCAxMi42MDQxVjMxLjE4MDZIMTgwLjUwMlYxMi42MDQxSDE4My4yMTRaIiBmaWxsPSJibGFjayI+PC9wYXRoPgogICAgICAgICAgICAgICAgPHBhdGggZD0iTTE4Ny4wOCAzMS4xODA2VjEyLjYwNDFIMTkzLjcwMkMxOTUuMTQ3IDEyLjYwNDEgMTk2LjM0NCAxMi44NjcyIDE5Ny4yOTQgMTMuMzkzM0MxOTguMjQzIDEzLjkxOTQgMTk4Ljk1NCAxNC42MzkgMTk5LjQyNSAxNS41NTIxQzE5OS44OTcgMTYuNDU5MSAyMDAuMTMzIDE3LjQ4MTEgMjAwLjEzMyAxOC42MTc5QzIwMC4xMzMgMTkuNzYwOCAxOTkuODk0IDIwLjc4ODggMTk5LjQxNiAyMS43MDE5QzE5OC45NDUgMjIuNjA4OSAxOTguMjMxIDIzLjMyODUgMTk3LjI3NiAyMy44NjA3QzE5Ni4zMjYgMjQuMzg2OCAxOTUuMTMyIDI0LjY0OTggMTkzLjY5MyAyNC42NDk4SDE4OS4xMzlWMjIuMjczM0gxOTMuNDM5QzE5NC4zNTIgMjIuMjczMyAxOTUuMDkzIDIyLjExNjEgMTk1LjY2MSAyMS44MDE3QzE5Ni4yMjkgMjEuNDgxMiAxOTYuNjQ3IDIxLjA0NTggMTk2LjkxMyAyMC40OTU1QzE5Ny4xNzkgMTkuOTQ1MiAxOTcuMzEyIDE5LjMxOTQgMTk3LjMxMiAxOC42MTc5QzE5Ny4zMTIgMTcuOTE2NCAxOTcuMTc5IDE3LjI5MzYgMTk2LjkxMyAxNi43NDk0QzE5Ni42NDcgMTYuMjA1MSAxOTYuMjI2IDE1Ljc3ODggMTk1LjY1MiAxNS40NzA0QzE5NS4wODQgMTUuMTYyIDE5NC4zMzQgMTUuMDA3OCAxOTMuNDAyIDE1LjAwNzhIMTg5Ljg4M1YzMS4xODA2SDE4Ny4wOFoiIGZpbGw9ImJsYWNrIj48L3BhdGg+CiAgICAgICAgICAgICAgICA8cGF0aCBkPSJNMjA1LjkxMyAxMi42MDQxVjMxLjE4MDZIMjAzLjIwMVYxMi42MDQxSDIwNS45MTNaIiBmaWxsPSJibGFjayI+PC9wYXRoPgogICAgICAgICAgICAgICAgPHBhdGggZD0iTTIxMy42MTYgMzEuNDg5QzIxMi43MzMgMzEuNDg5IDIxMS45MzUgMzEuMzI1NyAyMTEuMjIxIDMwLjk5OTJDMjEwLjUwOCAzMC42NjY2IDIwOS45NDMgMzAuMTg1OSAyMDkuNTI1IDI5LjU1N0MyMDkuMTE0IDI4LjkyODEgMjA4LjkwOSAyOC4xNTcxIDIwOC45MDkgMjcuMjQ0QzIwOC45MDkgMjYuNDU3OSAyMDkuMDYgMjUuODEwOCAyMDkuMzYyIDI1LjMwMjlDMjA5LjY2NCAyNC43OTQ5IDIxMC4wNzMgMjQuMzkyOCAyMTAuNTg3IDI0LjA5NjVDMjExLjEwMSAyMy44MDAyIDIxMS42NzUgMjMuNTc2NSAyMTIuMzEgMjMuNDI1M0MyMTIuOTQ1IDIzLjI3NDEgMjEzLjU5MiAyMy4xNTkyIDIxNC4yNTEgMjMuMDgwNkMyMTUuMDg2IDIyLjk4MzkgMjE1Ljc2MyAyMi45MDUyIDIxNi4yODMgMjIuODQ0OEMyMTYuODAzIDIyLjc3ODMgMjE3LjE4MSAyMi42NzI0IDIxNy40MTcgMjIuNTI3M0MyMTcuNjUyIDIyLjM4MjIgMjE3Ljc3IDIyLjE0NjMgMjE3Ljc3IDIxLjgxOThWMjEuNzU2M0MyMTcuNzcgMjAuOTY0MSAyMTcuNTQ3IDIwLjM1MDQgMjE3LjA5OSAxOS45MTVDMjE2LjY1OCAxOS40Nzk2IDIxNS45OTkgMTkuMjYxOSAyMTUuMTIyIDE5LjI2MTlDMjE0LjIwOSAxOS4yNjE5IDIxMy40ODkgMTkuNDY0NSAyMTIuOTYzIDE5Ljg2OTZDMjEyLjQ0MyAyMC4yNjg3IDIxMi4wODMgMjAuNzEzMiAyMTEuODg0IDIxLjIwM0wyMDkuMzM1IDIwLjYyMjVDMjA5LjYzNyAxOS43NzU5IDIxMC4wNzkgMTkuMDkyNiAyMTAuNjU5IDE4LjU3MjVDMjExLjI0NiAxOC4wNDY1IDIxMS45MiAxNy42NjU1IDIxMi42ODIgMTcuNDI5N0MyMTMuNDQ0IDE3LjE4NzggMjE0LjI0NSAxNy4wNjY4IDIxNS4wODYgMTcuMDY2OEMyMTUuNjQyIDE3LjA2NjggMjE2LjIzMSAxNy4xMzM0IDIxNi44NTQgMTcuMjY2NEMyMTcuNDgzIDE3LjM5MzQgMjE4LjA3IDE3LjYyOTIgMjE4LjYxNCAxNy45NzM5QzIxOS4xNjQgMTguMzE4NiAyMTkuNjE1IDE4LjgxMTQgMjE5Ljk2NSAxOS40NTI0QzIyMC4zMTYgMjAuMDg3MyAyMjAuNDkyIDIwLjkxMjcgMjIwLjQ5MiAyMS45Mjg2VjMxLjE4MDZIMjE3Ljg0M1YyOS4yNzU4SDIxNy43MzRDMjE3LjU1OSAyOS42MjY1IDIxNy4yOTYgMjkuOTcxMiAyMTYuOTQ1IDMwLjMwOThDMjE2LjU5NCAzMC42NDg1IDIxNi4xNDQgMzAuOTI5NyAyMTUuNTkzIDMxLjE1MzRDMjE1LjA0MyAzMS4zNzcxIDIxNC4zODQgMzEuNDg5IDIxMy42MTYgMzEuNDg5Wk0yMTQuMjA2IDI5LjMxMjFDMjE0Ljk1NiAyOS4zMTIxIDIxNS41OTYgMjkuMTYzOSAyMTYuMTI5IDI4Ljg2NzZDMjE2LjY2NyAyOC41NzEzIDIxNy4wNzUgMjguMTg0MyAyMTcuMzUzIDI3LjcwNjZDMjE3LjYzNyAyNy4yMjI4IDIxNy43NzkgMjYuNzA1OCAyMTcuNzc5IDI2LjE1NTVWMjQuMzU5NkMyMTcuNjgzIDI0LjQ1NjMgMjE3LjQ5NSAyNC41NDcgMjE3LjIxNyAyNC42MzE3QzIxNi45NDUgMjQuNzEwMyAyMTYuNjM0IDI0Ljc3OTggMjE2LjI4MyAyNC44NDAzQzIxNS45MzIgMjQuODk0NyAyMTUuNTkgMjQuOTQ2MSAyMTUuMjU4IDI0Ljk5NDVDMjE0LjkyNSAyNS4wMzY4IDIxNC42NDcgMjUuMDczMSAyMTQuNDIzIDI1LjEwMzNDMjEzLjg5NyAyNS4xNjk5IDIxMy40MTcgMjUuMjgxNyAyMTIuOTgxIDI1LjQzODlDMjEyLjU1MiAyNS41OTYyIDIxMi4yMDcgMjUuODIyOSAyMTEuOTQ3IDI2LjExOTJDMjExLjY5MyAyNi40MDk1IDIxMS41NjYgMjYuNzk2NSAyMTEuNTY2IDI3LjI4MDNDMjExLjU2NiAyNy45NTE1IDIxMS44MTQgMjguNDU5NCAyMTIuMzEgMjguODA0MUMyMTIuODA2IDI5LjE0MjggMjEzLjQzOCAyOS4zMTIxIDIxNC4yMDYgMjkuMzEyMVoiIGZpbGw9ImJsYWNrIj48L3BhdGg+CiAgICAgICAgICAgICAgICA8cGF0aCBkPSJNMjI1LjMxOSAzNi40MDUyQzIyNC45MTQgMzYuNDA1MiAyMjQuNTQ1IDM2LjM3MiAyMjQuMjEzIDM2LjMwNTVDMjIzLjg4IDM2LjI0NSAyMjMuNjMyIDM2LjE3ODUgMjIzLjQ2OSAzNi4xMDU5TDIyNC4xMjIgMzMuODgzNkMyMjQuNjE4IDM0LjAxNjcgMjI1LjA1OSAzNC4wNzQxIDIyNS40NDYgMzQuMDU2QzIyNS44MzMgMzQuMDM3OCAyMjYuMTc1IDMzLjg5MjcgMjI2LjQ3MSAzMy42MjA2QzIyNi43NzQgMzMuMzQ4NSAyMjcuMDQgMzIuOTA0IDIyNy4yNjkgMzIuMjg3MkwyMjcuNjA1IDMxLjM2MkwyMjIuNTA3IDE3LjI0ODJIMjI1LjQxTDIyOC45MzggMjguMDYwM0gyMjkuMDg0TDIzMi42MTIgMTcuMjQ4MkgyMzUuNTI0TDIyOS43ODIgMzMuMDQwMUMyMjkuNTE2IDMzLjc2NTcgMjI5LjE3NyAzNC4zNzk1IDIyOC43NjYgMzQuODgxNEMyMjguMzU1IDM1LjM4OTMgMjI3Ljg2NSAzNS43NzAzIDIyNy4yOTcgMzYuMDI0M0MyMjYuNzI4IDM2LjI3ODMgMjI2LjA2OSAzNi40MDUyIDIyNS4zMTkgMzYuNDA1MloiIGZpbGw9ImJsYWNrIj48L3BhdGg+CiAgICAgICAgICAgIDwvc3ZnPgogICAgICAgIDwvZGl2PgogICAgICAgIDxkaXYgY2xhc3M9ImZsZXgtY29udGFpbmVyIGxvYWRpbmciIHN0eWxlPSIKICAgIGZsZXg6IDE7CiI+CiAgICAgICAgICAgIDxkaXYgY2xhc3M9Imxkcy1lbGxpcHNpcyI+CiAgICAgICAgICAgICAgICA8ZGl2PjwvZGl2PgogICAgICAgICAgICAgICAgPGRpdj48L2Rpdj4KICAgICAgICAgICAgICAgIDxkaXY+PC9kaXY+CiAgICAgICAgICAgICAgICA8ZGl2PjwvZGl2PgogICAgICAgICAgICA8L2Rpdj4KICAgICAgICA8L2Rpdj4KICAgIDwvZGl2Pgo8L2Rpdj4KCgo8L2JvZHk+PC9odG1sPg==
MIIFiDCCA3CgAwIBAgIUcOHx6bh9Z+ObwJ+Q38h+VsOIcMEwDQYJKoZIhvcNAQELBQAwdDELMAkG
nz1S735nMRHSB5BEIgZPHHlJkjEIAH3kgIis4VsvShOwLe7Fc7ynjDDwX57p3TAOD352R13fC9OC2
nBgNVBAoTC0dvb2dsZSBJbmMuMRAwDgYDVQQLEwdBbmRyb2lkMRAwDgYDVQQDEwdBbmRyb2lkMCAX
C38FB23A402222A0C17D34A92F971D1F
nYW+zmTOzwj+K0QIDAQABoxAwDjAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4ICAQBYEkN8
nQ2FsaWZvcm5pYTEWMBQGA1UEBxMNTW91bnRhaW4gVmlldzEUMBIGA1UEChMLR29vZ2xlIEluYy4x
a3482e88-686a-4a58-8126-99c9df64b7bf
692eabd9-57dc-47b4-a211-6e1988d0c6cb
026ae9c9824b3e483fa6c71fa88f57ae27816141
bb2cf0647ba654d7228dd3f9405bbc6a
nDTIzMDgwNzAwMzI0OFoYDzIwNTMwODA3MDAzMjQ4WjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMK
nA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDU1vdW50YWluIFZpZXcxFDAS
7bf3a1e7bbd31e612eda3310c2cdb8075c43c6b5
nOh7MAJKoGRBbVq+77+fz+iomViEKB47wFNyu2S5GeWS2mpigHacEkmTItN6LIC/1IazQvJIg6Qz3
npBxwEqKHULvQwadc3bSNB16w+dVkI5hEozMIRA0VT1RCZMoFFcUHbDss6tcMm4CMEPIIVfcSrQBK
49f946663a8deb7054212b8adda248c6
nRIZCaIqrjwxAWBdiBGA+FWQyiQJ2jbmkIlnIHdGrTwkO+Z+3ArAlRtbvBDKtnm3BXDhTC520oiLS
19e86589022b804d7fc8788b4b03b770c6dc2cc1
a1b7a7ea69985aec39f305fb8b08309a0686940e
nzTa0UOnSYOlJikrNRcTMbbI3fu9af8B5cvHQROvGmNVmUqcjdjLysIYjqZ4fMFOcA1oucGaWVP5r
470fa2b4ae81cd56ecbcda9735803434cec591fa
n8Az68hAyiPymmDj6d2/xqD0VhoG6MN6V58QWRgbiYhxfENG4gqL6tbdglyJtH9zRYAMSphJgkGn6
nDwAwggIKAoICAQCikG/C1ih5iQ5bPMG3ettIGKb0AGoH6VLcJCtwL3V2bv+oCRwkWvhUlBAEkebx
nLEpoJMoMVmepnZmaKZozcQudQZmYsv7WCv2P9Mx7Aue6oVOayjk0J/oZxv7wInxRg1Qyst6RpKvD
nrKi4RxtPN8a+JMR/LyYQe7ufgCDu+UWBC0yx+OL9spQnNdwlBJmjdC1Wj0YJPxExWsL+KS92VhOL
norxHYfXafazjVW4ItwDWQi5927QptLCmuXCzjdesUrGzMpXZxmTZKLCEESnifoGPgG6CxEx2RG7F
nZ6n16bTVToIefGubVlFrcIsQlqmN2IlcZssRO8ijf7pP21e8D3hmzCWThERGtBwebSJg2KKJR38G
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
nEDAOBgNVBAsTB0FuZHJvaWQxEDAOBgNVBAMTB0FuZHJvaWQwggIiMA0GCSqGSIb3DQEBAQUAA4IC
n3SRkqR+bVuH5slLJDIyC0t/BgvaZpOCANJ6p+G2KR9W6aFSUegeHR9T2MIXVLXDDmDasQkzMjuk2
0000016742C00BDA259000000168CE0F13200000016588840DCE7118A0002FBF1C31C3275D78
cca47107bfcbdb211d88f3385aeede40
n+UztwHmTvXpKCuYXGKQZ3878Lz+qEM1vA/OaT5oIQc7spLKLHG23sbDcs5Ctn75p0cFqUMW+lZXO
c103703e120ae8cc73c9248622f3cd1e

信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
a1/b.java, line(s) 37
a3/b.java, line(s) 241
a4/a.java, line(s) 31,180,185,26
a5/a.java, line(s) 915,916
a8/c.java, line(s) 131,138,299,348,96,101,121,123
ab/b.java, line(s) 80,90,153,162,183,107,119,146,176,179,186,189,117
ab/c.java, line(s) 36,70,79,81,98,89,56
ab/g.java, line(s) 33
ab/k.java, line(s) 45,54
b3/d.java, line(s) 54,81,51,80
b3/e.java, line(s) 575,595,612,574,594,611
b4/a.java, line(s) 124
b5/g.java, line(s) 34
bb/a.java, line(s) 42,51,53,59,44,66,68
bh/a.java, line(s) 38,46,41
bin/mt/signature/KillerApplication.java, line(s) 116,126,161
c1/c.java, line(s) 59,50,54
c4/c.java, line(s) 103
c4/d.java, line(s) 67
c4/f.java, line(s) 53
com/adcolony/sdk/b1.java, line(s) 162,190
com/adcolony/sdk/c1.java, line(s) 40,58,62,46,52
com/adcolony/sdk/o3.java, line(s) 120,130
com/adcolony/sdk/q3.java, line(s) 233
com/apm/insight/b/j.java, line(s) 58
com/apm/insight/h/a.java, line(s) 56
com/apm/insight/k/k.java, line(s) 85
com/apm/insight/l/q.java, line(s) 44,26,32,38,8,20,14,50
com/apm/insight/runtime/o.java, line(s) 54
com/bykv/vk/openvk/component/video/a/b/b.java, line(s) 184,151,162,196,215,237,243
com/bykv/vk/openvk/component/video/a/b/d.java, line(s) 333,339,124,182,192,221,245,264,313,356,363,385,391,397,488
com/bykv/vk/openvk/component/video/a/b/e.java, line(s) 57,65
com/bykv/vk/openvk/component/video/a/b/f.java, line(s) 116,174,188,252
com/bykv/vk/openvk/component/video/a/b/g.java, line(s) 140,177,215,271,279,284,298,303,396,493,534,550,557,597,601,223,313,355,465,516,544,296,326,410
com/bykv/vk/openvk/component/video/a/c/a.java, line(s) 209,217,226,233,242,247,321,328,153,171,200,261,277
com/bykv/vk/openvk/component/video/api/f/c.java, line(s) 46,53,101,108,77,84,60,91
com/bykv/vk/openvk/preload/falconx/a/a.java, line(s) 25
com/bykv/vk/openvk/preload/geckox/h/a.java, line(s) 14,17,25,8
com/caverock/androidsvg/b.java, line(s) 1486,1346
com/caverock/androidsvg/h.java, line(s) 493,1159,3102,2325,3122,3194,3294
com/caverock/androidsvg/i.java, line(s) 1527,1558,1584,2456,2490,2515,2545,2578,2612,2646,2670,4006,1589,2113,2169,2186
com/chartboost/sdk/view/CBImpressionActivity.java, line(s) 70
com/fyber/inneractive/sdk/external/InneractiveAdManager.java, line(s) 361
com/fyber/inneractive/sdk/flow/a.java, line(s) 28
com/fyber/inneractive/sdk/logger/a.java, line(s) 11,19,21,29,41,43,51,58,65
com/fyber/inneractive/sdk/network/d0.java, line(s) 96
com/fyber/inneractive/sdk/player/cache/c.java, line(s) 271
com/fyber/inneractive/sdk/player/exoplayer2/audio/MediaCodecAudioRenderer.java, line(s) 107,353,366,377
com/fyber/inneractive/sdk/player/exoplayer2/audio/c.java, line(s) 662
com/fyber/inneractive/sdk/player/exoplayer2/extractor/mkv/a.java, line(s) 517,520,713,968
com/fyber/inneractive/sdk/player/exoplayer2/extractor/mp4/d.java, line(s) 173,187,361
com/fyber/inneractive/sdk/player/exoplayer2/extractor/mp4/e.java, line(s) 64,70,90,104,157,167,179
com/fyber/inneractive/sdk/player/exoplayer2/extractor/mp4/f.java, line(s) 434,505,460,819
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ogg/j.java, line(s) 240
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ts/d.java, line(s) 134
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ts/k.java, line(s) 404
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ts/l.java, line(s) 54
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ts/o.java, line(s) 54,60,116
com/fyber/inneractive/sdk/player/exoplayer2/extractor/wav/a.java, line(s) 53
com/fyber/inneractive/sdk/player/exoplayer2/extractor/wav/c.java, line(s) 41,64,71
com/fyber/inneractive/sdk/player/exoplayer2/g.java, line(s) 63,135
com/fyber/inneractive/sdk/player/exoplayer2/h.java, line(s) 214,1046,1279,1284,1289
com/fyber/inneractive/sdk/player/exoplayer2/mediacodec/a.java, line(s) 49,81
com/fyber/inneractive/sdk/player/exoplayer2/mediacodec/b.java, line(s) 650
com/fyber/inneractive/sdk/player/exoplayer2/mediacodec/d.java, line(s) 327,330,253
com/fyber/inneractive/sdk/player/exoplayer2/metadata/id3/g.java, line(s) 167,197,243,248,462,472,492,510,523
com/fyber/inneractive/sdk/player/exoplayer2/source/chunk/b.java, line(s) 15,19
com/fyber/inneractive/sdk/player/exoplayer2/text/cea/a.java, line(s) 38
com/fyber/inneractive/sdk/player/exoplayer2/upstream/cache/i.java, line(s) 155
com/fyber/inneractive/sdk/player/exoplayer2/upstream/o.java, line(s) 151,166,349,162
com/fyber/inneractive/sdk/player/exoplayer2/upstream/x.java, line(s) 154,160,172
com/fyber/inneractive/sdk/player/exoplayer2/util/b.java, line(s) 38,86
com/fyber/inneractive/sdk/player/exoplayer2/util/i.java, line(s) 280
com/fyber/inneractive/sdk/player/exoplayer2/video/MediaCodecVideoRenderer.java, line(s) 430,338,348,357,360,363,379,388,391,394,608,690
com/iab/omid/library/adcolony/d/c.java, line(s) 18,11
com/iab/omid/library/bytedance2/utils/d.java, line(s) 18,11
com/iab/omid/library/fyber/utils/d.java, line(s) 18,11
com/iab/omid/library/inmobi/d/c.java, line(s) 18,11
com/iab/omid/library/ironsrc/utils/d.java, line(s) 18,11
com/iab/omid/library/vungle/d/c.java, line(s) 18,11
com/inmobi/media/b0.java, line(s) 43,49
com/inmobi/media/d3.java, line(s) 74
com/inmobi/media/f0.java, line(s) 15,9
com/inmobi/media/k9.java, line(s) 25,29
com/inmobi/media/t3.java, line(s) 27
com/inmobi/media/u2.java, line(s) 195
com/inmobi/media/x.java, line(s) 31
com/inmobi/media/z5.java, line(s) 35,45,64,69,89,94,26,57,20,52
com/ironsource/adapters/ironsource/IronSourceAdapter.java, line(s) 232,299,346,361,545,560,575,591,733,749,761,225,235,247,271,293,456,459,463,468,680,708,710
com/ironsource/adapters/ironsource/IronSourceInterstitialListener.java, line(s) 28
com/ironsource/adapters/ironsource/IronSourceRewardedVideoListener.java, line(s) 31
com/ironsource/adapters/supersonicads/SupersonicAdsAdapter.java, line(s) 181,182,183,198,200,203,377,379
com/ironsource/environment/a.java, line(s) 54,138
com/ironsource/environment/e.java, line(s) 130,205
com/ironsource/environment/l.java, line(s) 90
com/ironsource/environment/q.java, line(s) 31,37,38
com/ironsource/environment/thread/a.java, line(s) 23
com/ironsource/eventsTracker/b.java, line(s) 36,43
com/ironsource/eventsmodule/a.java, line(s) 90,129,157
com/ironsource/lifecycle/timer/a.java, line(s) 78
com/ironsource/mediationsdk/AbstractAdapter.java, line(s) 410,416
com/ironsource/mediationsdk/IronSourceSegment.java, line(s) 198
com/ironsource/mediationsdk/a.java, line(s) 51
com/ironsource/mediationsdk/ads/nativead/LevelPlayNativeAd.java, line(s) 73
com/ironsource/mediationsdk/adunit/adapter/utility/AdInfo.java, line(s) 100
com/ironsource/mediationsdk/adunit/manager/b.java, line(s) 119,136,91,116,125,132,229
com/ironsource/mediationsdk/adunit/manager/c.java, line(s) 85,99
com/ironsource/mediationsdk/adunit/manager/d.java, line(s) 482,612,644,692,766,815,845,901,148,188,204,208,264,284,297,323,459,462,606,617,655,660,666,717,757,808,849,891,215,230,474
com/ironsource/mediationsdk/adunit/smash/b.java, line(s) 53,134,42,127,46
com/ironsource/mediationsdk/adunit/smash/bases/a.java, line(s) 96,165,226,93,153,217
com/ironsource/mediationsdk/adunit/smash/bases/b.java, line(s) 49
com/ironsource/mediationsdk/adunit/smash/bases/c.java, line(s) 223,257,300,333,366,373,445,457,183,202,212,251,269,297,318,347,420
com/ironsource/mediationsdk/adunit/smash/d.java, line(s) 55,42,46
com/ironsource/mediationsdk/adunit/waterfall/c.java, line(s) 47,49,50,80,119,123
com/ironsource/mediationsdk/adunit/waterfall/h.java, line(s) 159
com/ironsource/mediationsdk/b0.java, line(s) 136,181,295,335
com/ironsource/mediationsdk/d.java, line(s) 297
com/ironsource/mediationsdk/demandOnly/c0.java, line(s) 27
com/ironsource/mediationsdk/demandOnly/d0.java, line(s) 20
com/ironsource/mediationsdk/demandOnly/f.java, line(s) 39
com/ironsource/mediationsdk/demandOnly/g.java, line(s) 230,267,334,449,460,80,149,155,158,162,240,254,277,280,344,357,370,380,416,433,441,446,467
com/ironsource/mediationsdk/demandOnly/k.java, line(s) 45
com/ironsource/mediationsdk/demandOnly/l.java, line(s) 65,126,173,208,146,177,180,261,281,291,302,326,371,389
com/ironsource/mediationsdk/demandOnly/p.java, line(s) 45
com/ironsource/mediationsdk/demandOnly/q.java, line(s) 66,118,153,198,91,122,125,245,265,292,303,318,329,376,427
com/ironsource/mediationsdk/demandOnly/u.java, line(s) 29
com/ironsource/mediationsdk/events/b.java, line(s) 300
com/ironsource/mediationsdk/events/d.java, line(s) 57
com/ironsource/mediationsdk/f.java, line(s) 128
com/ironsource/mediationsdk/g.java, line(s) 380,512,643,648
com/ironsource/mediationsdk/g0.java, line(s) 464,469,475,484,491,504,1292,1297,1303,1312,1319,1333,1637,2389,2397,2427,457,1285,2106,2272,2300,2302,2310,2312,2335,2370,2379,2599,315,1013,2410,2414,2418,318,323
com/ironsource/mediationsdk/h.java, line(s) 136,240,322,338,396
com/ironsource/mediationsdk/impressionData/ImpressionData.java, line(s) 121
com/ironsource/mediationsdk/impressionData/a.java, line(s) 80
com/ironsource/mediationsdk/integration/IntegrationHelper.java, line(s) 21,25,43,63,68,78,212,222,17,32,40,57,58,61,66,85,95,113,125,138,148,226,34
com/ironsource/mediationsdk/integration/a.java, line(s) 27,30,21,24,19
com/ironsource/mediationsdk/l0.java, line(s) 43,45,46,48,85,117,130,136
com/ironsource/mediationsdk/logger/a.java, line(s) 48,38,34,42
com/ironsource/mediationsdk/p.java, line(s) 171
com/ironsource/mediationsdk/q.java, line(s) 223,243,263
com/ironsource/mediationsdk/q0.java, line(s) 592,279,285
com/ironsource/mediationsdk/r0.java, line(s) 319,493,729,752,844,874,923,970,98,105,204,269,295,304,410,419,428,430,478,587,660,722,748,762,776,816,825,853,888,917,1004,1121,789,866,901,943,1016
com/ironsource/mediationsdk/r1.java, line(s) 276,282,559
com/ironsource/mediationsdk/t0.java, line(s) 102,169,219,324,81,165,209,213,222,277,282,306,407,432,474,422,437,479
com/ironsource/mediationsdk/u.java, line(s) 64
com/ironsource/mediationsdk/utils/i.java, line(s) 32,47,61,75
com/ironsource/mediationsdk/x0.java, line(s) 158,129,134
com/ironsource/mediationsdk/y.java, line(s) 64
com/ironsource/mediationsdk/y0.java, line(s) 100,152,289,334,453,493
com/ironsource/network/d.java, line(s) 106
com/ironsource/sdk/Events/f.java, line(s) 40
com/ironsource/sdk/ISNAdView/c.java, line(s) 63,92,136
com/ironsource/sdk/ISNAdView/f.java, line(s) 34
com/ironsource/sdk/WPAD/d.java, line(s) 88
com/ironsource/sdk/controller/f0.java, line(s) 255,702,780,807,894,916,962,981,1062,1084,1102,1120,1269,1277,1810,2148,2990,2995,3006,3012,3022,3028,3037,3039,168
com/ironsource/sdk/service/Connectivity/BroadcastReceiverStrategy.java, line(s) 46
com/ironsource/sdk/service/Connectivity/d.java, line(s) 83,104
com/ironsource/sdk/service/e.java, line(s) 103
com/ironsource/sdk/utils/Logger.java, line(s) 13,19,25,31,41,49,54,60,66,72
com/jimbovpn/jimbo2023/app/App.java, line(s) 121
com/jimbovpn/jimbo2023/app/services/ConnectionTimerService.java, line(s) 34
com/jimbovpn/jimbo2023/app/services/FirebaseMessagingService.java, line(s) 29,35,59,61
com/jimbovpn/jimbo2023/app/ui/home/MainViewModel.java, line(s) 234,198,203,208,214,219,226
com/jimbovpn/jimbo2023/app/ui/home/m.java, line(s) 65
com/jimbovpn/jimbo2023/app/ui/perapp/PerAppProxyActivity.java, line(s) 230,249,236,255
com/jimbovpn/jimbo2023/app/ui/perapp/e.java, line(s) 57
com/jimbovpn/jimbo2023/app/ui/servers/ServerActivity$fetchData$1.java, line(s) 284,285
com/jimbovpn/jimbo2023/app/ui/servers/d.java, line(s) 184
com/jimbovpn/jimbo2023/app/ui/setting/d.java, line(s) 52,41
com/jimbovpn/jimbo2023/app/ui/splash/SplashActivity$get_smart_profiles$4.java, line(s) 145
com/jimbovpn/jimbo2023/app/ui/splash/h.java, line(s) 65
com/jimbovpn/jimbo2023/app/ui/splash/m.java, line(s) 205
com/jimbovpn/jimbo2023/app/v2ray/service/V2RayServiceManager$measureV2rayDelay$1.java, line(s) 57
com/jimbovpn/jimbo2023/app/v2ray/service/V2RayServiceManager$stopV2rayPoint$1.java, line(s) 41
com/jimbovpn/jimbo2023/app/v2ray/service/V2RayServiceManager.java, line(s) 162,178,609,569,587
com/jimbovpn/jimbo2023/app/v2ray/service/V2RayTestService$onStartCommand$1.java, line(s) 53
com/jimbovpn/jimbo2023/app/v2ray/service/V2RayVpnService$sendFd$1.java, line(s) 51,69
com/jirbo/adcolony/AdColonyAdapter.java, line(s) 79,131,144,160,47,73
com/jirbo/adcolony/a.java, line(s) 102
com/jirbo/adcolony/b.java, line(s) 83
com/pgl/ssdk/ces/d.java, line(s) 27
com/unity3d/ads/UnityAdsBaseOptions.java, line(s) 23
com/unity3d/ads/metadata/InAppPurchaseMetaData.java, line(s) 28,41,55
com/unity3d/ads/metadata/MetaData.java, line(s) 42,57
com/unity3d/services/UnityServices.java, line(s) 76,124,131,136,144,150,170,179,167,176,106
com/unity3d/services/ads/UnityAdsImplementation.java, line(s) 105,82
com/unity3d/services/ads/adunit/AdUnitActivityController.java, line(s) 359,361,52,128,186,219,260,290,310,376,224
com/unity3d/services/ads/adunit/AdUnitViewHandlerFactory.java, line(s) 22
com/unity3d/services/ads/adunit/VideoPlayerHandler.java, line(s) 17,35
com/unity3d/services/ads/api/AdUnit.java, line(s) 203,209,258,261,265,268,325,328,331,334,361,111,133,156,163,339,352,364,368,408,499
com/unity3d/services/ads/api/VideoPlayer.java, line(s) 59,77,100,118,167,178
com/unity3d/services/ads/api/WebPlayer.java, line(s) 52
com/unity3d/services/ads/gmascar/adapters/ScarAdapterFactory.java, line(s) 46
com/unity3d/services/ads/gmascar/bridges/AdapterStatusBridge.java, line(s) 21,39
com/unity3d/services/ads/gmascar/bridges/InitializeListenerBridge.java, line(s) 22,41
com/unity3d/services/ads/gmascar/bridges/mobileads/MobileAdsBridge.java, line(s) 21
com/unity3d/services/ads/gmascar/bridges/mobileads/MobileAdsBridgeLegacy.java, line(s) 23
com/unity3d/services/ads/gmascar/finder/GMAInitializer.java, line(s) 53
com/unity3d/services/ads/gmascar/finder/ScarVersionFinder.java, line(s) 37,49
com/unity3d/services/ads/token/InMemoryAsyncTokenStorage.java, line(s) 146,180
com/unity3d/services/ads/token/NativeTokenGenerator.java, line(s) 41
com/unity3d/services/ads/video/VideoPlayerView.java, line(s) 56,59,83,126,131,153,196,208,240
com/unity3d/services/ads/webplayer/WebPlayerView.java, line(s) 62,68,408,410,431,533,575,626,641,656,669
com/unity3d/services/banners/BannerView.java, line(s) 137
com/unity3d/services/banners/UnityBanners.java, line(s) 334
com/unity3d/services/core/api/Cache.java, line(s) 166,180,56,132,185,297,314,341
com/unity3d/services/core/api/DeviceInfo.java, line(s) 143,161,182,320,346,360,413
com/unity3d/services/core/api/Intent.java, line(s) 49,63,209,233,248
com/unity3d/services/core/api/Request.java, line(s) 33,45,96,108,126,138
com/unity3d/services/core/api/Sdk.java, line(s) 17,38,54,80,86,92,98
com/unity3d/services/core/broadcast/BroadcastEventReceiver.java, line(s) 39
com/unity3d/services/core/cache/CacheDirectory.java, line(s) 25,27,66,70,79,104,108,114,125,30,59,74
com/unity3d/services/core/cache/CacheThread.java, line(s) 76
com/unity3d/services/core/cache/CacheThreadHandler.java, line(s) 39,42,53,76
com/unity3d/services/core/configuration/ConfigurationReader.java, line(s) 25
com/unity3d/services/core/configuration/ConfigurationRequestFactory.java, line(s) 39
com/unity3d/services/core/configuration/EnvironmentCheck.java, line(s) 30,42,33,45,48,51,56
com/unity3d/services/core/configuration/ExperimentObject.java, line(s) 24
com/unity3d/services/core/configuration/ExperimentsReader.java, line(s) 25
com/unity3d/services/core/configuration/InitializationNotificationCenter.java, line(s) 47
com/unity3d/services/core/configuration/InitializeEventsMetricSender.java, line(s) 42,52,60,70,165,172
com/unity3d/services/core/configuration/InitializeThread.java, line(s) 286,322,455,472,516,524,626,638,664,724,129,295,298,329,332,379,403,575,612,728,879,888,202,360,464,552
com/unity3d/services/core/configuration/PrivacyConfigurationLoader.java, line(s) 63
com/unity3d/services/core/connectivity/ConnectivityMonitor.java, line(s) 56,84,94,76,124
com/unity3d/services/core/device/AdvertisingId.java, line(s) 125,143,153
com/unity3d/services/core/device/Device.java, line(s) 169,262,270,281,291,402,415,430,581,632,641,348
com/unity3d/services/core/device/OpenAdvertisingId.java, line(s) 127,149,156
com/unity3d/services/core/device/Storage.java, line(s) 47,51,58
com/unity3d/services/core/device/reader/DeviceInfoReaderCompressor.java, line(s) 20,33
com/unity3d/services/core/device/reader/DeviceInfoReaderExtended.java, line(s) 46
com/unity3d/services/core/domain/task/InitializeSDK$doWork$2.java, line(s) 144,161
com/unity3d/services/core/domain/task/InitializeStateConfig$doWork$2.java, line(s) 45
com/unity3d/services/core/domain/task/InitializeStateCreate$doWork$2.java, line(s) 43,52,55
com/unity3d/services/core/domain/task/InitializeStateCreateWithRemote$doWork$2.java, line(s) 43,51,54
com/unity3d/services/core/domain/task/InitializeStateError$doWork$2.java, line(s) 41
com/unity3d/services/core/domain/task/InitializeStateLoadCache$doWork$2.java, line(s) 46,60
com/unity3d/services/core/domain/task/InitializeStateLoadCache.java, line(s) 150
com/unity3d/services/core/domain/task/InitializeStateLoadWeb$doWork$2.java, line(s) 81
com/unity3d/services/core/domain/task/InitializeStateNetworkError$doWork$2.java, line(s) 43
com/unity3d/services/core/domain/task/InitializeStateNetworkError.java, line(s) 137,153
com/unity3d/services/core/domain/task/InitializeStateReset$doWork$2.java, line(s) 46
com/unity3d/services/core/extensions/TaskExtensionsKt.java, line(s) 212
com/unity3d/services/core/log/DeviceLog.java, line(s) 69,215,222
com/unity3d/services/core/misc/JsonFlattener.java, line(s) 43
com/unity3d/services/core/misc/JsonStorage.java, line(s) 156,26,32,51,72,84,96,165,171
com/unity3d/services/core/misc/JsonStorageAggregator.java, line(s) 34
com/unity3d/services/core/misc/Utilities.java, line(s) 239,43,61,181,208,214,219,231
com/unity3d/services/core/misc/ViewUtilities.java, line(s) 25,33
com/unity3d/services/core/preferences/AndroidPreferences.java, line(s) 17,31,45,59,73
com/unity3d/services/core/properties/ClientProperties.java, line(s) 39,70,82,84
com/unity3d/services/core/properties/SdkProperties.java, line(s) 240,242,107
com/unity3d/services/core/reflection/GenericBridge.java, line(s) 32,47,56,62,70,76,84,91
com/unity3d/services/core/request/WebRequest.java, line(s) 91,187,190
com/unity3d/services/core/request/WebRequestRunnable.java, line(s) 96,77,100
com/unity3d/services/core/request/WebRequestThread.java, line(s) 63,128,143
com/unity3d/services/core/request/metrics/MetricCommonTags.java, line(s) 72
com/unity3d/services/core/request/metrics/MetricSender$sendMetrics$$inlined$CoroutineExceptionHandler$1.java, line(s) 23
com/unity3d/services/core/request/metrics/MetricSender$sendMetrics$1.java, line(s) 82,88
com/unity3d/services/core/request/metrics/MetricSender.java, line(s) 72,85,93
com/unity3d/services/core/request/metrics/MetricSenderWithBatch.java, line(s) 44
com/unity3d/services/core/request/metrics/SDKMetrics.java, line(s) 37,51,61,85,96
com/unity3d/services/core/sensorinfo/SensorInfoListener.java, line(s) 28
com/unity3d/services/core/timer/BaseTimer.java, line(s) 84
com/unity3d/services/core/webview/WebView.java, line(s) 175
com/unity3d/services/core/webview/WebViewApp.java, line(s) 58,114,234,279,323,373,69,73,78,95,165,185,213,315,345,386
com/unity3d/services/core/webview/WebViewUrlBuilder.java, line(s) 35
com/unity3d/services/core/webview/bridge/Invocation.java, line(s) 80
com/unity3d/services/core/webview/bridge/NativeCallback.java, line(s) 45
com/unity3d/services/core/webview/bridge/WebViewBridge.java, line(s) 91
com/unity3d/services/core/webview/bridge/WebViewBridgeInterface.java, line(s) 52,59
com/unity3d/services/core/webview/bridge/WebViewCallback.java, line(s) 53
com/unity3d/services/store/core/StoreLifecycleListener.java, line(s) 46
com/unity3d/services/store/gpbl/bridges/CommonJsonResponseBridge.java, line(s) 38
com/unity3d/services/store/gpbl/bridges/PurchaseBridge.java, line(s) 37
com/vungle/mediation/VungleInterstitialAdapter.java, line(s) 148,157,167,176,205,232,234,44,68,125,191,208,216,223,244,258
com/vungle/mediation/b.java, line(s) 141,152,162,178,194,221,238,82,85,112,116,331
com/vungle/mediation/c.java, line(s) 107,129,138,147,158,37,32,65,68,109,115
com/vungle/warren/Vungle.java, line(s) 616,1079,1407,1418,87,196,651,672,703,707,712,723,732,1105,1124,1177,1193,1212,1326,1336,1346,1436,1466,1485,1559,1604,1642,1661,1667,1680,1687,1697
com/vungle/warren/VungleApiClient.java, line(s) 169,496,674,372,384,498,502,515,612,531,564,567,575
com/vungle/warren/VungleLogger.java, line(s) 50,71,45,63,87
com/vungle/warren/a.java, line(s) 139,141,206,222,238
com/vungle/warren/a2.java, line(s) 21
com/vungle/warren/c.java, line(s) 138,92,106
com/vungle/warren/c2.java, line(s) 44,76,123,136,155,160,185,209
com/vungle/warren/d.java, line(s) 414,539,593,622,679,860,948,1110,204,512,661,918,1178,1223,1235,1245,601,1257,1273,592,1368
com/vungle/warren/d2.java, line(s) 138
com/vungle/warren/downloader/b.java, line(s) 145,266,272,289,299,325,332,335,339,343,457,463,568,629,656,683,724,976,980,983,985,996,1071,87,945,1000,1032
com/vungle/warren/downloader/c.java, line(s) 22
com/vungle/warren/downloader/e.java, line(s) 79,116,126,250,269,281,285,309,313,319,333,339,354
com/vungle/warren/f0.java, line(s) 260,250,245,416
com/vungle/warren/h.java, line(s) 51,25,36
com/vungle/warren/j.java, line(s) 45
com/vungle/warren/k0.java, line(s) 69,86,105,137,143,155,161,167,177,183,198
com/vungle/warren/l.java, line(s) 272,276,103,109,121,130,135,222,260,358,383,392,430,478,484,496,504
com/vungle/warren/model/c.java, line(s) 716
com/vungle/warren/model/j.java, line(s) 82
com/vungle/warren/n.java, line(s) 31
com/vungle/warren/o.java, line(s) 35,59,61,70,74
com/vungle/warren/p.java, line(s) 19
com/vungle/warren/persistence/b.java, line(s) 522,531,538,591,597,639,935,938,979,989,263,708,748,999
com/vungle/warren/persistence/e.java, line(s) 32
com/vungle/warren/q0.java, line(s) 11,21
com/vungle/warren/t.java, line(s) 24
com/vungle/warren/u1.java, line(s) 69
com/vungle/warren/utility/a.java, line(s) 194
com/vungle/warren/utility/e.java, line(s) 120,717,739,133,119,137,138,738
com/vungle/warren/utility/g.java, line(s) 19
com/vungle/warren/utility/i.java, line(s) 38,22,37
com/vungle/warren/utility/j.java, line(s) 120,131,139,212,70,76
com/vungle/warren/utility/l.java, line(s) 55,80,82
com/vungle/warren/utility/n.java, line(s) 115,120
com/vungle/warren/utility/r.java, line(s) 126,102
com/vungle/warren/utility/y.java, line(s) 92
com/vungle/warren/v1.java, line(s) 42,54
com/vungle/warren/w1.java, line(s) 115
com/vungle/warren/y1.java, line(s) 44,34
d0/b.java, line(s) 282
d1/c.java, line(s) 180
d3/b.java, line(s) 65,64
d3/i.java, line(s) 75,132,72,131,135,141,148,145,151
d3/k.java, line(s) 48,47
db/c.java, line(s) 20
e1/a.java, line(s) 57
e3/b.java, line(s) 105,104
e3/d.java, line(s) 61,106,60,105
f4/a.java, line(s) 150
f4/d.java, line(s) 43,50
f4/d5.java, line(s) 179,657
f4/f.java, line(s) 99,137,151
f4/n4.java, line(s) 12,19,26,33,40,47
f4/o2.java, line(s) 39
f4/p6.java, line(s) 403,402,408,409,414
f4/u.java, line(s) 323
f4/y4.java, line(s) 55
f4/z3.java, line(s) 257,265,285,310,314,318,336,360,367,374,386,371
fb/a.java, line(s) 422,212,217,257
fb/d.java, line(s) 238,568,615,658
fb/l.java, line(s) 127,149,173,212,238,249,337,317,322
g1/a.java, line(s) 31
g3/h.java, line(s) 105,142,109,147
g3/i.java, line(s) 83,128,140,152,78,95,102,115,127,130,139,151,187,190,197,67,100,188,198,116
h1/b0.java, line(s) 20
h3/e.java, line(s) 33,59,72,88,34,73,60,91
h3/j.java, line(s) 103,88
h6/d.java, line(s) 31
h6/e.java, line(s) 35,39,45,48
h6/j.java, line(s) 101
h8/a0.java, line(s) 178,242,257,263,180,219
h8/f0.java, line(s) 52
h8/g0.java, line(s) 64,73,133,151,158,43,141
h8/h0.java, line(s) 64,78
h8/j0.java, line(s) 24
h8/n.java, line(s) 58,84,101,110
h8/u.java, line(s) 140,94
hb/a.java, line(s) 142
hb/c.java, line(s) 301,408,448
hb/i.java, line(s) 37,67,157
hb/j.java, line(s) 31
hb/m.java, line(s) 130
hb/p.java, line(s) 211,265,215
hb/r.java, line(s) 183,284,247,248,258,259,286,116,270
i3/a.java, line(s) 86,85
i8/a.java, line(s) 111,144,148
i9/a.java, line(s) 939
i9/h.java, line(s) 363,371
i9/i.java, line(s) 203,213,219
ib/a.java, line(s) 66,89,113,115,119,102
j3/c.java, line(s) 39,38
j3/e.java, line(s) 99,98
j3/s.java, line(s) 90,91
j3/t.java, line(s) 39,38
j8/c.java, line(s) 103,438,458,129,338,425
j8/f.java, line(s) 38
k5/a.java, line(s) 227
m0/a.java, line(s) 92,106
n5/d.java, line(s) 127,158
o5/a.java, line(s) 44
o6/e.java, line(s) 20,26,11,32,38,44
org/lsposed/hiddenapibypass/HiddenApiBypass.java, line(s) 88,327
p0/a.java, line(s) 165,170,177,181,197,207
p3/a.java, line(s) 90,97,104,115,93,100,107,123
p3/i.java, line(s) 44,45
q/d.java, line(s) 100
q4/k.java, line(s) 42,45,49,53,85,88,91,94,97
qa/c.java, line(s) 29,35,74,75,78,80,83,103,110
r0/a.java, line(s) 167,211,276,290,46,53,72,86,90,100,192,194,205,208,78,94,104,117,122,131,147,201,238
r0/d.java, line(s) 57,68,70,103,119,163,209,213,229,251,308,336,341,343,355,94,202,217,239,255,270,325
r3/e.java, line(s) 38,35,58,79,59,80
r3/f.java, line(s) 11,10
r3/j.java, line(s) 79,80
r3/k.java, line(s) 190,191,201
r3/m.java, line(s) 87,88
r3/n.java, line(s) 82,89,83,90
r5/f.java, line(s) 322
r7/a.java, line(s) 28
r7/c.java, line(s) 54
r7/m0.java, line(s) 180
r7/r.java, line(s) 19,22
s/f.java, line(s) 272
s3/d.java, line(s) 52,59,70,75,51,58,63,69,74,64
sa/a.java, line(s) 94
sa/e.java, line(s) 126,131,140,183,188
sa/f.java, line(s) 19
sa/g.java, line(s) 87,45,69,91
sa/h.java, line(s) 21
sa/i.java, line(s) 54,83
t4/a.java, line(s) 11,18,25,10,17,24,39,40,46,47
u3/g.java, line(s) 196,19,137,150
v3/g.java, line(s) 45,73,74,46
va/d.java, line(s) 35,47,54
w0/b.java, line(s) 98
x3/b.java, line(s) 27
y0/f.java, line(s) 435,462,574,576
y0/g.java, line(s) 59,62
y0/k.java, line(s) 263
y2/c.java, line(s) 15
ya/a.java, line(s) 90,118
ya/e.java, line(s) 36,53,32,49,59
ya/f.java, line(s) 37,59
z3/a.java, line(s) 52,55
z7/b.java, line(s) 53,64

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/jimbovpn/jimbo2023/app/ui/perapp/PerAppProxyActivity.java, line(s) 4,464,477,465

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
com/inmobi/media/c9.java, line(s) 92,96

安全 此应用程序可能具有Root检测功能 

此应用程序可能具有Root检测功能
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
com/apm/insight/nativecrash/c.java, line(s) 531,531,531,531,531

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.paypal.com) 通信。 

{'ip': '192.229.232.89', 'country_short': 'HK', 'country_long': '中国', 'region': '香港', 'city': '香港', 'latitude': '22.285521', 'longitude': '114.157692'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (i.l.inmobicdn.net) 通信。 

{'ip': '152.199.39.108', 'country_short': 'HK', 'country_long': '中国', 'region': '香港', 'city': '香港', 'latitude': '22.285521', 'longitude': '114.157692'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (app-measurement.com) 通信。 

{'ip': '180.163.150.33', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.googletagmanager.com) 通信。 

{'ip': '180.163.151.169', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (lf3-cdn-tos.bytegoofy.com) 通信。 

{'ip': '119.96.90.216', 'country_short': 'CN', 'country_long': '中国', 'region': '湖北', 'city': '武汉', 'latitude': '30.583330', 'longitude': '114.266853'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.linkedin.com) 通信。 

{'ip': '52.131.37.152', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (googleads.g.doubleclick.net) 通信。 

{'ip': '180.163.150.38', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (firebase-settings.crashlytics.com) 通信。 

{'ip': '180.163.150.38', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (pagead2.googlesyndication.com) 通信。 

{'ip': '180.163.150.166', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

安全评分: ( Air 57.0)