安全分析报告： privacy firewall v3.5.8

安全分数


安全分数 51/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

0

用户/设备跟踪器


调研结果

高危 2
中危 18
信息 1
安全 2
关注 0

高危 Activity (com.wish.lmbank.activity.LauncherActivity) 容易受到StrandHogg 2.0的攻击 

已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时，其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部，从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (23) 更新到 29 或更高版本以在平台级别修复此问题。

高危 已启用远程WebView调试 

已启用远程WebView调试
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
com/wish/lmbank/activity/LauncherActivity.java, line(s) 688,23,24

中危 应用程序已启用明文网络流量 

[android:usesCleartextTraffic=true]
应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。

中危 Service (com.wish.lmbank.service.LAutoService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_ACCESSIBILITY_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (com.wish.lmbank.service.RecServiceV) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_ACCESSIBILITY_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (com.xdandroid.hellodaemon.WakeUpReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Service (com.wish.lmbank.service.UninstallService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.xdandroid.hellodaemon.WakeUpReceiver$WakeUpAutoStartReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Service (com.xdandroid.hellodaemon.JobSchedulerService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity (com.wish.lmbank.activity.VRequestDefaultDialerActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.wish.lmbank.phone.PhoneCallService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_INCALL_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity (com.wish.lmbank.phone.PhoneActivity) 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 高优先级的Intent （1000） - {2} 个命中 

[android:priority]
通过设置一个比另一个Intent更高的优先级，应用程序有效地覆盖了其他请求。

中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
a/f/a/b/a/g.java, line(s) 73
a/f/a/e/c.java, line(s) 150,152
com/wish/lmbank/base/BaseActivityV.java, line(s) 66
com/wish/lmbank/receiver/TelePhoneReceiver.java, line(s) 112

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
a/f/a/e/c.java, line(s) 163

中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
com/wish/lmbank/common/Constants.java, line(s) 30
org/jsoup/helper/W3CDom.java, line(s) 26
org/jsoup/nodes/Comment.java, line(s) 7
org/jsoup/nodes/DataNode.java, line(s) 7
org/jsoup/nodes/DocumentType.java, line(s) 10,11,13
org/jsoup/nodes/TextNode.java, line(s) 8

中危 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
a/c/a/a/e/c.java, line(s) 24
b/b/d/a/w/i.java, line(s) 21
d/k0/m/a.java, line(s) 25
d/k0/m/d.java, line(s) 11
org/jsoup/helper/DataUtil.java, line(s) 14

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
a/f/a/d/f.java, line(s) 6,7,8,9,44,51,64,65,66,67,68,70,71,72,73

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞 

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
com/wish/lmbank/activity/LauncherActivity.java, line(s) 685,690

中危 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
"OKey" : "OPQ"
Q1dESEBaVkxfQFpAV1dKVyVpYGticW0lOyUgYT8lIGE
KSVmaWp2YERmcWxzbHF8KSVsdkB9YGZwcWBGaWp2YERmcWxzbHF8PyU
JVZga2ElZGZua2pyaWBhYmBoYGtxJXJsa2FqciV2bH9gPyU
ZGthd2psYStrYHErZmpraytGSktLQEZRTFNMUVxaRk1ES0JA
ZGthd2psYStsa3Fga3ErZGZxbGprK0tAUlpKUFFCSkxLQlpGRElJ
V1FIVSVEZm5ranJpYGFiaGBrcSUtdmB0cGBrZmAla3BoZ2B3PyU
YGtmRmRpaSklYH1mYHVxbGprPyVvZHNkK2lka2IrVmBmcHdscXxAfWZgdXFsams
SGR3biVtZHYlZ2BgayVsa3NkaWxhZHFgYSkldWp2PyU
PiVgfW1kcHZxYGEldXdqfXwlZmprY2xicHdkcWxqa3Y
TGJrandsa2IldnRpbHFgJWB9ZmB1cWxqaw
Kiphd2xzYCtiampiaWArZmpoKmNsaWAqYSo0TV9iMTV0cjJBQmJpN01RM19wQm5OSW5jMGQ1QWtkR1Eqc2xgcjpwdnU4dm1kd2BaaWxrbg
ZGthd2psYStsa3Fga3ErZGZxbGprK0dKSlFaRkpIVUlAUUBB
YH1mYHVxbGprKSV2cWp1V2BmandhYHcpJVdwa3FsaGBAfWZgdXFsams
ZGthd2psYSt2YHFxbGtiditXQFRQQFZRWkxCS0pXQFpHRFFRQFdcWkpVUUxITF9EUUxKS1Y
andiK2BmaWx1dmArb2BxcXwrZGl1aytESVVLIVZgd3Ngd1V3anNsYWB3
R2R2YERmcWxzbHF8KSVJSkRBWlBXSVpWUEZGQFZWPyU
dmpmbmBxJXdgZmBsc2BhPyVxfHVgJSIgdiIpJWFkcWQlIiB2Ig
dXdqcWpmaml2JWFqYHZrInElZmprcWRsayVtcXF1KjQrND8l
andiK2BmaWx1dmArb2BxcXwrZGl1aytESVVL
dmpmbmBxJWZpanZsa2IlKCVxYGlpbGtiJXF3ZGt2dWp3cSVxaiVmaWp2YA
RHElaWBkdnElamtgJVFJViVzYHd2bGprJWx2JXdgdHBsd2Bh
d2B2dWprdmAlbHYla2pxJWBpbGJsZ2lgJWNqdyVkJWdqYXwlZGthJWhwdnEla2pxJWdgJWZpanZgYQ
RmRrInElaWpkYSVka2xoZHFsamsld2B2anB3ZmAlTEElJjV9
ZGthd2psYSt2YHFxbGtiditERkZAVlZMR0xJTFFcWlZAUVFMS0JW
Rm1kbGslamMlRmRwdmB2JWNqdyVGamh1anZscWBAfWZgdXFsamslTGslSndhYHclV2BmYGxzYGElODs
bXFxdT8qKnVyYHwxdHxhPTwrZmpoKmRrYXdqbGErdW11OnZxZHFwdjh
RGslYHd3anclamZmcHdgYSVybWxpYCV1cHFxbGtiJXVkZm5gcSVhZHFkJXFqJU9WSktKZ29gZnE
TXFxdTdGamtrYGZxbGprK0lsdnFga2B3JWNkbGlwd2AlY2p3JQ
WCXoko3pn6zokLEl6aa56YCR6ZC5JemlkOmGhOmlhOmYvSXpgZnuvIHpj6El6Zix6Z
ZGthd2psYSt1YHdobHZ2bGprK0RLVlJAV1pVTUpLQFpGRElJVg
QH11YGZxYGElIkZqa2tgZnFsamsiJW1gZGFgdyVzZGlwYCUiUHVid2RhYCIlZ3BxJXJkdiUi
YH1gZnBxYEZqaGhka2FXYGZqd2Fsa2Il44yi7aSJ4LiQ7Jq24JS44b6hKSV2bH9gPw
ZGthd2psYSt1YHdobHZ2bGprK0dJUEBRSkpRTVpGSktLQEZR
cndscWBGNC0sPyVyd2xxbGtiJUY0JXVkZm5gcQ
QVdKVSVRREdJQCVMQyVAXUxWUVYlZmRpaVp3YGZqd2Fsa2I
YH1mYHVxbGprKSV1d2B1ZHdgV2BmandhYHcpJUhgYWxkV2BmandhYHcldXdgdWR3YCVMSkB9ZmB1cWxqayU
d2B0cGB2cURpcWB3a2RxYExVKSVgfWZgdXFsams
UVxVQFpGSktRTEtQRFFMSksldnF3YGRoTGElZm1ka2JgYQ
JXB2YCV2YHFAc2BrcUFkcWQtbGtxLCVsa3ZxYGRh
QmlQcWxpK2JgcVZxd2xrYkN3amhXZHItZmprcWB9cSklVyt3ZHIrcmRxYHdoZHduWnNgd3FgfSw
KSVmZGlpQWx2Zmpra2BmcWBhKSXjjq3jjJbikbDtqpgpJWNqd3Jkd2Fsa2JVbWprYD8l
KyVFT3Zqa0RhZHVxYHclc2RpcGAlaHB2cSVnYCVkJVF8dWBEYWR1cWB3KSVRfHVgRGFkdXFgd0NkZnFqd3wpJU92amtWYHdsZGlsf2B3JWp3JU92amtBYHZgd2xkaWx
cHVpamRhV2BmandhbGtiQ2xpYCVsdlB1aWpkYVdgZmp3YWxrYkNsaWA
bXFxdT8qKnVyYHwxdHxhPTwrZmpoKmRrYXdqbGErdW11OnZxZHFwdjhVMA
ZGthd2psYSt1YHdobHZ2bGprK0RGRkBWVlpGSkRXVkBaSUpGRFFMSks
UVxVQFpXVlFaVlFXQERIJXBrYH11YGZxYGElYHd3anclZmphYD8lIGE
KSVqa1ZxZHFgRm1ka2JgYSkl7IWf7aqY45Oo4LmFKSXgirLipYQ
JWprVmB3c2xmYEZqa2tgZnFgYSkldm1qckRmZmB2dj8l
YH1mYHVxbGprPyV3YHRwYHZxQWBjZHBpcUFsZGlgdyklQWBjZHBpcSV1bWprYCVjcGtmcWxqa2RpbHF8JWtqcSVjanBrYQ
dnFkd3FJamZkUHVhZHFgdiklY2RsaSVxaiV3YHRwYHZxJWlqZmRxbGprJXB1YWRxYA
RGd2cXdkZnElZmlkdnYlZmRrInElZ2AlbGt2cWRrcWxkcWBhJCVGaWR2diVrZGhgPyU
RGhjVnF3bGtiK1Zsf2BKYy0sPyVmZHBibXElYH1mYHVxbGpr
R2R2YERmcWxzbHF8KSVpamRhTWp2cSklYH1mYHVxbGprPyU
ZGthd2psYSt1d2pzbGFgdytRYGlgdW1qa3wrREZRTEpLWkZNREtCQFpBQENEUElR
ZHV1aWxmZHFsamsqb3Zqaz4lZm1kd3ZgcThwcWMoPQ
bXFxdT8qKnVyYHwxdHxhPTwrZmpoKmRrYXdqbGErdW11OnZxZHFwdjh2cXBr
V2BmandhYHdWYHdzbGZgKSV3YHRwYHZxTWp2cSklcWxxaWA
UGtgfXVgZnFgYSVmbWR3JSAmNTF9JWRxJSBhJWxrJW1gZGFgdyVrZGhgPyUgdg
UGtua2pyayVoYHZ2ZGJgJXF8dWAlZ3xxYD8l
RGslYHd3anclamZmcHdgYSVybWxpYCV3YHF3bGBzbGtiJWFkcWQlY3dqaCVPVkpLUWpuYGtgdw
f0ZibDF2XEpmfVxTVVVuYVFRSjR2UW1fcDNRNlZgZE0
fE5TR1BuTm0wYkhcf3Bsaz1OdUsyQ101bU1cXUhLQEA
ZmpoK2RrYXdqbGErandiK2Zqa3Zmd3x1cStWVklVZHdkaGBxYHd2TGh1aQ
YmBxUGtsa3ZxZGlpRHVuSWx2cSklYH1mYHVxbGprPyU
RmlsYGtxKHZga3ElY3dkaGB2JWhwdnElZ2AlaGR2bmBhKw
SGR9bGhwaCVrcGhnYHclamMlbHFgaHYldnB1dWp3cWBhJWd8JUdqcXFqaEtkc2xiZHFsamtTbGByJWx2JTArJUlsaGxxJWZkayVnYCVmbWBmbmBhJXJscW0lR2pxcWpoS2RzbGJkcWxqa1NsYHImYmBxSGR9THFgaEZqcGtxLSw
ZGthd2psYSt1YHdobHZ2bGprK1dAREFaVU1KS0BaS1BIR0BXVg
bXFxdT8qKnVyYHwxdHxhPTwrZmpoKmRrYXdqbGErdW11OnZxZHFwdjhqblprZw
RmpoaGRrYUZqa3FkZnFJbGhscVB1YWRxYEdgZGt
QH11YGZxYGElZCVmamtrYGZxbGprJW1gZGFgdyVncHElcmR2JSB2
VmB3c2B3KHZga3ElY3dkaGB2JWhwdnEla2pxJWdgJWhkdm5gYSs
ZGthd2psYSt2YGZwd2xxfCtLYHFyanduVmBmcHdscXxVamlsZnw
UVxVQFpCSkRSRFwlaWBrYnFtJTklPT8lIHY
ZGthd2psYSt1YHdobHZ2bGprK0JAUVpERkZKUEtRVg
Q2RsaWBhJXFqJWRwcW1ga3FsZmRxYCVybHFtJXV3an18
Zmpra2BmcSVkcXFgaHVxJXFsaGBhJWpwcSVkY3FgdyUgYQ
dXdqcWpmaml2JWhwdnEla2pxJWZqa3FkbGslbXFxdSo0KzU
ZGthd2psYSt1d2pzbGFgdytRYGlgdW1qa3wrVkhWWldARkBMU0BB
UHVpamRhTGtjalFtd2BkYUB9YGZwcWp3
amtXYHRwYHZxVWB3aGx2dmxqa3ZXYHZwaXEpJVVAV0hMVlZMSktaQldES1FAQSkldWB3aGx2dmxqaz8l
JWx2JWtqcSVkJXNkaWxhJWFqcGdpYCVzZGlwYCVkdiV1YHclT1ZKSyV2dWBmbGNsZmRxbGprKyVRaiVqc2B3d2xhYCVxbWx2JWdgbWRzbGp3KSVwdmAlQnZqa0dwbGlhYHcrdmB3bGRpbH9gVnVgZmxkaUNpamRxbGtiVWpsa3FTZGlwYHYtLCVoYHFtamEr
RldARFFAJVFER0lAJUxDJUtKUSVAXUxWUVYlZmRpaVp3YGZqd2Fsa2IlLWxhJUxLUUBCQFclKSVxfHVgJVFAXVElS0pRJUtQSUkpJXVtamtgS3BoZ2B3JVFAXVElS0pRJUtQSUkpJWFwd2RxbGprJUxLUUBCQFclS0pRJUtQSUklQUBDRFBJUSU1KSV1ZHFtJVFAXVElKSVmd2BkcWBxbGhgJUxLUUBCQFcpJXB1YWRxYHFsaGAlTEtRQEJAVykldnFkcXB2JVFAXVElS0pRJUtQSUklKSVVV0xIRFdcJU5AXCUtbGEsJSw
ZGthd2psYStsa3Fga3ErZGZxbGprK1VNSktAWlZRRFFA
KSVqa0RmcWxzbHF8V2B2cGlxKSV3YHRwYHZxRmphYD8l
andiK2R1ZGZtYCttZHdoamt8K31rYHErdXdqc2xhYHcrb3Z2YCtWVklVZHdkaGBxYHd2TGh1aQ
UGtgfXVgZnFgYSVASkMlcm1saWAld2BkYWxrYiVXUUhVJXVkZm5gcSVnZHZsZiVtYGRhYHc
VlZJWkFNWmRramtaQF1VSldRWlJMUU1aV0YxWjE1WkhBMA
UGtgfXVgZnFgYSVASkMlcm1saWAld2BkYWxrYiVWNyVnfHFgdiUxKDI
dnF3YGRoRGlpamZkcWxqayU4OCVrcGlp
V2BmandhYHdWYHdzbGZgKSVqa0pwcUBrYWBhPw
6ZuU6YG0JeiQsemmuemBvemfkSXpprnuqrnulrTupJjut43onb0
andiK2BmaWx1dmArb2BxcXwrZGl1aytESVVLIUZpbGBrcVV3anNsYWB3
YHNga3FacGtsa3ZxZGlpWmR1blpjd2poWnZgd3Ngdw
cGtkZ2lgJXFqJWJgcSVAQkk0MSVhbHZ1aWR8
RHFxYGh1cWBhJXFqJWFgdmB3bGRpbH9gJWQlb2RzZCtpZGtiK0ZpZHZ2KyVDandianElcWold2BibHZxYHclZCVxfHVgJWRhZHVxYHc6
cGtkZ2lgJXFqJWFgcWB3aGxrYCVmaWBkd3FgfXEldnB1dWp3cQ
a2olUUlWJWB9cWBrdmxqa3YlY2p3JWZpYGR3cWB9cSVmamtrYGZxbGprdg
bXFxdT8qKnVyYHwxdHxhPTwrZmpoKmRrYXdqbGErdW11OnZxZHFwdjhgZ2R8
cndscWxrYiV1bGtiJXVkZm5gcSUoJWB9dWBmcWxrYiV1amtiJXJscW1sayUgdmh2
dnFkd3FCdXZJamZkUHVhZHFgdiklY2RsaSVxaiV3YHRwYHZxJWlqZmRxbGprJXB1YWRxYA
JUtqcSVtZGthaWxrYiVwa2xodWlgaGBrcWBhKnBrbmtqcmsldWRmbmBxJWpjJXF8dWA
ZGthd2psYSt1YHdobHZ2bGprK1VXSkZAVlZaSlBRQkpMS0JaRkRJSVY
bGtzZGlsYSVhbGZxbGprZHd8PyV1d2BjbH0la2pxJXBrbHRwYA
Q2RsaWBhJXFqJWZpanZgJXFsaGBhJWpwcSV2amZuYHEl
JS4tXlslJzhYLyw4LT86Jy1eWydYLywneS1eWyUnOFgvLCwlLy0
YmpxJWdsa2R3fCVhZHFkJXJtYGsla2pxJXdgZmprdnF3cGZxbGtiJWQldWRmbmBx
cndscWBGNC0sPyVSd2xxbGtiJXFsaGB2cWRodSVka2ElQ2lkdm0lVWlkfGB3JXNgd3Zsams
YGJpRndgZHFgRmprcWB9cSVXQkc9PT0ud2BmandhZGdpYCVAVjc
JXJkdiVpYGRuYGErJUFsYSV8anAlY2p3YmBxJXFqJWZpanZgJWQld2B2dWprdmAlZ2phfDo
ZGthd2psYStsa3Fga3ErYH1xd2QrV0BRUFdLWldAVlBJUQ
dm1wcWFqcmstLD8lY2RsaWBhJXFqJWZpanZgJXZqZm5gcQ
ZGthd2psYSt1YHdobHZ2bGprK0RGRkBWVlpDTEtAWklKRkRRTEpL
QH11YGZxYGElIj92cWRxcHYiJW1gZGFgdyVranEldXdgdmBrcQ
VlZJWkFNWmRramtaUkxRTVpXRjFaNDc9WkhBMA
ZGthd2psYSt1YHdobHZ2bGprK1JXTFFAWkZKS1FERlFW
KSVoRnB3dmp3JSQ4JWtwaWklIyMlaEZwd3ZqdytiYHFGanBrcS0sJSQ4JTU
JWRmcXBkaSU1fSA1PX0lJDglYH11YGZxYGElNX0gNT19
RmppandXbGtiUW13YGRhK3dwayVjbGlgJWlga2JxbT8l
ZmpoK3ZkaHZwa2IrZGthd2psYSt1YHdobHZ2bGprZmprcXdqaWlgdw
QH11YGZxYGElTVFRVSU0NTQld2B2dWprdmAlZ3BxJXJkdiUi
VmZtYGFwaWB3JUZkaWlkZ2lgJXdgdnBpcSVmZGsicSVnYCVrcGlp
7reN6aK9JemQtOmYgSXvt4Xph6npoZTpm4Dujo3ujqE
RmphYCVocHZxJWdgJWxrJXdka2JgJV40NTU1KTA1NTUsPyU
UGtgfXVgZnFgYSV3YHZ1amt2YCVmamFgJWNqdyVGSktLQEZRPyU
SGp3YCV1d2phcGZgYSVxbWRrJXdgdHBgdnFgYT8l
amtAd3dqdyVmZGlpYGElcmxxbSVrcGlpKyVLcGlpJXNkaXBgdiVkd2AlYmBrYHdkaWl8JWtqcSVkaWlqcmBhJWxrJTcrfSVqdWB3ZHFqd3YlZGthJXZqcHdmYHYr
V2BmandhYHdWYHdzbGZgJWprQWB2cXdqfCklbHU
QH11YGZxYGElIlB1YndkYWAiJW1gZGFgdyVzZGlwYCUicmBndmpmbmBxIiVncHElcmR2JSI
bXFxdT8qKnVyYHwxdHxhPTwrZmpoKmRrYXdqbGErdW11OnZxZHFwdjhNSw
QH11YGZxYGElZCVWQFFRTEtCViVjd2RoYCVncHElcmR2JSB2
VXdqfXwrZGFhd2B2di0sJWx2JWtqcSVkayVMa2BxVmpmbmBxRGFhd2B2dj8l
RmppandXbGtiUW13YGRhK3dwayVgfWZgdXFsams
RmRwYm1xJUxKQH1mYHVxbGprJWFwd2xrYiVyd2xxYCVpamp1KSV2bXBxcWxrYiVhanJrPyU
QXB1aWxmZHFgJWNqcGthJWxrJWZkcHZkaSVmbWRsayV2aiVmd2p1dWxrYiVxaiV1d2BzYGtxJWlqanUlKysr
ZGthd2psYSt1YHdobHZ2bGprK1dAREFaVU1KS0BaVlFEUUA
TGtzZGlsYSVkcXFgaHVxJXFqJWdsa2ElZGslbGt2cWRrZmAlamMl
cGtsY2p3aCV2ZGh1aWB3RnBnYCVwWnFgfUxhPnNkd3xsa2Ilc2BmNiVzWnFgfUZqandhdj5zamxhJWhkbGstLH5iaVpDd2RiRmppanclOCVxYH1xcHdgRnBnYC1wWnFgfUxhKSVzWnFgfUZqandhdiw
amtXYGZgbHNgV2BmandhbGtiKSXjkbPgjbXjjKLtpInguJDsmrbglLjhvqEpJWh2Yj8l
QmlQcWxpK2JgcVZxd2xrYkN3amhXZHItZmprcWB9cSklVyt3ZHIrcmRxYHdoZHduWmN3ZGJoYGtxLA
UW1gJWB9ZmB1cWxqayVmanBpYSVranElZ2AlYWBpbHNgd2BhJXFqJXFtYCVmamt2cGhgdyVnYGZkcHZgJWxxJW1kdiVkaXdgZGF8JWZka2ZgaWBhKmFsdnVqdmBhJXFtYCVjaWpyJWp3JXFtYCVgfWZgdXFsamslbWR2JWtqcm1gd2AlcWolYmolcWolZ2BibGslcmxxbSslQ3B3cW1gdyV3YGRhbGtiPyVtcXF1dj8qKmJscW1wZytmamgqV2BkZnFsc2BdKld9T2RzZCpybG5sKlJtZHEidihhbGNjYHdga3EobGsoNys1JmB3d2p3KG1ka2FpbGtiJXkl
andiK2BmaWx1dmArb2BxcXwrZGl1aytESVVLIVV3anNsYWB3
VTBOfF9vbDBMdFdhNXRLSU9GT29LYXxSbXRJN1FQRks
ZGthd2psYStsa3Fga3ErZGZxbGprK0dEUVFAV1xaRk1ES0JAQQ
a2olUUlWJXNgd3Zsamt2JWNqdyVmaWBkd3FgfXElZmpra2BmcWxqa3Y
YH1mYHVxbGprKSV2cWR3cVdgZmp3YWxrYiklSGBhbGRXYGZqd2FgdyV2cWR3cSVXcGtxbGhgQH1mYHVxbGprPyU
cmAlZHdgJWZwd3dga3FpfCV1amlpbGtiJSglcmRscWxrYiVxaiV1ZHB2YA
cmp3bmB3PyV2YGthJWN3ZGhgJXF8dWA4IGEpJWFxdjggYSkldmx
d303K2ZqaHVwcWRxbGprKHFtd2BkYXY
UUlWJXFwa2tgaSVncGNjYHdgYSVxamolaGRrfCVnfHFgdiQ
d2BkYVVkZm5gcS0sPyVWYHFxbGtiJWZtcGtuJXZsf2AlcWo
K2tgcXJqd25XYHZ1amt2YCUkOCVrcGlp
LV5kKH9EKF81KDwoJCYhICMiLy4rW1plfnl4e1guLCotXmQof0QoXzUoPCgkJiEgIyIvLitbWmV
UVxVQFpCSkRSRFwlcGtgfXVgZnFgYSVgd3dqdyVmamFgPyUgYQ
bXFxdT8qKnVyYHwxdHxhPTwrZmpoKmRrYXdqbGErdW11OnZxZHFwdjh1ZHw
ZGthd2psYSt1YHdobHZ2bGprK1dAREFaQF1RQFdLRElaVlFKV0RCQA
ZGthd2psYStxYGlgZmpoK2RmcWxqaytGTURLQkBaQUBDRFBJUVpBTERJQFc
UW1gJXZxfGlgJWprJXFtbHYlZmpodWprYGtxJXdgdHBsd2B2JXxqcHclZHV1JXFtYGhgJXFqJWdgJQ
UGtua2pyayVmbXBrbiVtYGRhYHclcXx1YCVnfHFgPyU
V2BmandhbGtiRmpwa3FBanJrUWxoYHclamtDbGtsdm0
QWxhayJxJWxrbHFsZGlsf2AlZmprcWBrcSVnZGZuYndqcGth
bXFxdT8qKnVyYHwxdHxhPTwrZmpoKmRrYXdqbGErdW11OnZxZHFwdjhqbg
bXFxdT8qKnVyYHwxdHxhPTwrZmpoKmRrYXdqbGErdW11OnZxZHFwdjhkZA
RChfNSg8KCQmISAjIi8uK1taZX55eHtYLiw4LTo
cGtfbHVEdnZgcXZDamlhYHcpJWB3d2p3PyU
ZGthd2psYT9oYGtwP2RmcWxqa1pzbGBydg
dnFkd3FXYGZqd2Fsa2IpJWhWZGh1aWBDbGlgPyU
QEBAKSVhYSVISEglfHx8fCVNTT9oaD92diV
amtWYHFBYGNkcGlxQWxkaWB3KSXikbbtqrLsvp3tq6HikbDtqpjjiYLhvqE
ZmpoK2Rta2lkZytzNmhqZ2xpYHZgZnB3bHF8K3ZqYWQ
dnFkd3FCdXZJamZkUHVhZHFgdikldXdqc2xhYHclYWpgdiVranElYH1sdnE
ZGthd2psYStxYGlgZmpoK2B9cXdkK0ZNREtCQFpBQENEUElRWkFMRElAV1pVREZOREJAWktESEA
JWtqJWRrYXdqbGErdWB3aGx2dmxqaytES1ZSQFdaVU1KS0BaRkRJSVY
RmRwYm1xJVZqZm5gcUB9ZmB1cWxqayVhcHdsa2IlcndscWAlaWpqdSkldm1wcXFsa2IlYWpyaz8l
dWRmbmBxJXdgZmBsc2BhJXJscW0ldmpmbmBxJXdgZGF8VnFkcWAlIiB2Ig
ZHV1aWxmZHFsamsqfShycnIoY2p3aChwd2lga2ZqYWBh
cndscWBGNC0sPyVhbGJgdnFKY2N2YHFHfHFgdj8l
dmBrYWxrYiV9bXclcmxxbSVwd2klIHYleSVhZHFkJSB2
KSV2cWR3cURmcWxzbHF8Q2p3RmRpaSklYH1mYHVxbGprPyU
RldARFFAJVFER0lAJUxDJUtKUSVAXUxWUVYlZmpoaGRrYVp3YGZqd2Fsa2IlLWxhJUxLUUBCQFclKSV3TGElTEtRQEJAVyVLSlElS1BJSSklYXB3ZHFsamslTEtRQEJAVyVLSlElS1BJSSVBQENEUElRJTUpJXVkcW0lUUBdUSUpJWZ3YGRxYHFsaGAlTEtRQEJAVyklcHVhZHFgcWxoYCVMS1FAQkBXKSV2cWRxcHYlUUBdUSVLSlElS1BJSSUpJVVXTEhEV1wlTkBcJS1sYSwlLD4
QH11YGZxYGElamtgJU9WSkslYGlgaGBrcSVncHElcmR2JQ
RmRoYHdkN0R1bEhka2RiYHcla2BgYSVnYCV1d2B1ZHdgYSklRmRoYHdkN0R1bEhka2RiYHcla2pxJWBrZGdpYGE
d2B2YHFMa2xxVnFkcWApJWhMdkRwYWxqVnVgZG5gd0prPyU
d2BkdmprK3Zsf2AtLCU7JTQ3Nj8l
S2oldWRmbmBxJWdqYXwlbGh1aWBoYGtxZHFsamslY2p3JWhgdnZkYmAlcXx1YD8l
ZGFhd2B2djg6JWRrYSVnamF8JWlsbmAlOg
JWtqcSVzYHdsY2xgYT8PJSUlJWZgd3FsY2xmZHFgPyU
KSVqa1ZxZHFgRm1ka2JgYSklVlFEUUBaREZRTFNAKSXikbDtqpjgirLipYQ
ZmpoK31hZGthd2psYSttYGlpamFkYGhqaytGREtGQElaT0pHWkRJRFdIWlZQRw
ZndkYWlgU2B3cWxmZGlKY2N2YHElaHB2cSVnYCV1anZscWxzYCs
ZGthd2psYSt1YHdobHZ2bGprK1dAREFaRkRJSVpJSkI
dXdqZ2AlcXdka3Z1andxJScgdiclY2RsaWBhJWdgZmRwdmAlamMlYHd3anc
KyVXYGJsdnFgd2xrYiVkayVMa3ZxZGtmYEZ3YGRxanclcmxxbSVCdmprJWNqdyVxbWx2JXF8dWAlaGR8JWNsfSVxbWx2JXV3amdpYGgr
UWR2biVmZGslamtpfCVnYCVgfWBmcHFgYSVqa2ZgKw
Zmpra2BmcWxqayVkcXFgaHVxJXJsaWklcWxoYGpwcSVkY3FgdyUgYQ
Zm1ka2Jsa2IlcXdka3Z1andxJWRrYSV2YGthbGtiJXB1YndkYWAldWRmbmBx
RmRrInElZm1gZm4ldWB3aGx2dmxqa3YlY2p3JWtwaWklZmprcWB9cQ
YWBjZHBpcSVhbHZuJWZkZm1gJWFsdyVsdiVrcGlp
RmRwYm1xJVZqZm5gcUB9ZmB1cWxqayVybWxpYCV3YGRhbGtiKmFgZmphbGtiJXVkZm5gcSkldm1wcXFsa2IlYWpyaz8l
UGtgfXVgZnFgYSVASkMlcm1saWAld2BkYWxrYiVWNyVnfHFgdiU1KDY
RGtqcW1gdyVoYHZ2ZGJgJXJ3bHFgdyVsdiVkZnFsc2ArJUFsYSV8anAlZmRpaSVmaWp2YC0sOg
VWR8aWpkYSV2bH9gJWhwdnElZ2AlaWB2diVxbWRrJWp3JWB0cGRpJXFqJTQ3MA
bXFxdT8qKnVyYHwxdHxhPTwrZmpoKmRrYXdqbGErdW11OnZxZHFwdjhpcQ
a2dBaTFpYlEzMGt0ZGk8fUtOPFJnSXFiTnJpMnwxQWw
KyVDandianElcWold2BibHZxYHclZCVxfHVgJWRhZHVxYHc6
UHZgJWQla2prKHF3ZGt2dWR3YGtxJWZqaWp3JWNqdyVxbWAlYWBjZHBpcSVmamlqdyVkdiVscSVybGlpJWdgJXB2YGElcWolY2xrbHZtJXdsdXVpYCVka2xoZHFsamt2Kw
RGslYHd3anclamZmcHdgYSVybWxpYCV1cHFxbGtiJWFkcWQlcWolT1ZKS0pnb2BmcQ
ZGthd2psYStsa3Fga3ErZGZxbGprK1ZGV0BAS1pKQ0M
RldARFFAJVFER0lAJUxDJUtKUSVAXUxWUVYlaWxobHFadW1qa2Baa3BoZ2B3JS1sYSVMS1FAQkBXJSkla2RoYCVRQF1RJUtKUSVLUElJKSV1bWprYCVRQF1RJUtKUSVLUElJKSV3YGRpWnVtamtgJVFAXVElS0pRJUtQSUkpJXF8dWAlUUBdUSVLSlElS1BJSSkldnVgZmxkaSVMS1FAQkBXJUtKUSVLUElJKSVVV0xIRFdcJU5AXCUtbGEsJSw
cndscWBGNC0sPyV3YGZkaWZwaWRxYGElYWxiYHZxSmNjdmBxPyU
RmB3cWxjbGZkcWAldWxra2xrYiV3YHRwbHdgdiVdMDU8JWZgd3FsY2xmZHFgdg
cXdka3Z1andxJWp1YGslKCVmaWp2bGti
QEBAQCklYWEoSEhIKHx8JU1NP2hoP3Z2JX9
ZGthd2psYStsa3Fga3ErZmRxYGJqd3wrTUpIQA
DyUlVWxra2BhJWZgd3FsY2xmZHFgdiVjancl
RmprcXdqaSVjd2RoYCVocHZxJWdgJWlgdnYlcW1kayU0NzBHKw
VVdKUUpGSklaQFdXSlcld2B2dWprdmAlaGRpY2p3aGBhPyVobH1gYSVmZHZgJWtkaGA
SGRpY2p3aGBhJWZpanZgJXVkfGlqZGElaWBrYnFtJWpjJTQr
QmlQcWxpK2JgcVZxd2xrYkN3amhXZHItZmprcWB9cSklVyt3ZHIrZmRoYHdkWmN3ZGJoYGtxLA
QlZKSyVmZGtranEldmB3bGRpbH9gJQ
QEBAKSVhYSVISEglfHx8fCVNTT9oaD92diUiQkhRIg
KSVhYGlsc2B3fFdgdnBpcUZqYWA4
UGtgfXVgZnFgYSVhYGNkcGlxJXF3cHZxJWhka2RiYHd2Pw
JVZgcXFsa2IlZGZua2pyaWBhYmBoYGtxJXJsa2FqciV2bH9gPyU
cndscWBGNC0sPyUtd2BkaSVzZGlwYCVqYywlYWxiYHZxSmNjdmBxPyU
KSVqa0ZkaWlXYGhqc2BhKSXikbDtqpjgirLipYQ
UGtgfXVgZnFgYSVASkMld2BkZm1gYSVnYGNqd2Ald2BkYSVncGNjYHclcmR2JWNsaWlgYQ
JUNJREJaRkpIVVdAVlZAQSVybHFtanBxJVZAUVFMS0JWWkZKSFVXQFZWWkFEUUQ
ZGthd2psYSt1YHdobHZ2bGprK1JXTFFAWkZESUlaSUpC
Y2x3dnFVZGJgJWZka2tqcSVnYCVkY3FgdyVmcHd3YGtxVWRiYA
UGtgfXVgZnFgYSVASkMlcm1saWAld2BkYWxrYiV3YGhkbGthYHclamMlVjcpJWB9dWBmcWBhJTQwNz0lZ3xxYHYpJWdwcSVqa2l8JXdgZGEl
YExrZndgaGBrcSU4OCU1JXl5JXJsa2FqclZsf2BMa2Z3YGhga3ElOyU1fTJjY2NjY2NjST8lIHY
bXFxdT8qKnVyYHwxdHxhPTwrZmpoKmRrYXdqbGErdW11OnZxZHFwdjhobg
Y3dqaExrYWB9OCB2JXFqTGthYH04IHY
IDQhdiV3YHRwbHdgdiVkJXNkaXBgJWNqdyVxbWAlIDchdiVkcXF3bGdwcWAlcWolZ2AldmBxJWxrJXxqcHclZHV1JXFtYGhgKyVcanAlZmRrJWBscW1gdyV2YHElcW1gJWRxcXdsZ3BxYCVsayV8anB3JXFtYGhgJWp3JXB1YWRxYCV8anB3JXFtYGhgJXFqJWxrbWB3bHElY3dqaCVRbWBoYCtIZHFgd2xkaUZqaHVqa2BrcXYlLWp3JWQlYWB2ZmBrYWRrcSwr
VkBRWkdQQ0NAV1pJQEtCUU0ld2B0cGx3YHYlcXJqJWBzYGtxJWFkcWQlc2RpcGB2PiVwdmAldmBxQHNga3FBZHFkLWxrcSklbGtxLCVsa3ZxYGRh
aWpkYUB9cXdkSGB2dmRiYCklamtXYHZ1amt2YCkld2BxaHZiPyU
V2BmandhYHdWYHdzbGZgKSVqa0hsdnZgYUZkaWkla3BoZ2B3Pw
Zmp1fGxrYiVhbGJgdnElamNjdmBxJWd8cWB2JWxrJXVkd3FHYGNqd2BBbGJgdnE
LV5kKH9EKF81KDwoJCYhICMiLy4rW1plfnl4e1guLHknLV5bJ1gvLCcsLDo
JVZxd2BkaCVASkMld2BkZm1gYSklZmlqdmxrYiVXUUhVJXJ3bHFgdysrKw
aWpkYURpaUhgYWxkKSVqa0ZqaHV3YHZ2V2B2cGlxKSV2bH9gPyU
LTpsLC1vZGt5Y2BneWhkd3lkdXd5aGR8eW9wa3lvcGl5ZHBieXZgdXlqZnF5a2pzeWFgZiwrLw
RGslYHd3anclamZmcHdgYSVybWxpYCV3YHF3bGBzbGtiJWFkcWQlY3dqaCVPVkpLSmdvYGZx
d303K3ZmbWBhcGlgdytwdmAoa2RranFsaGA
W3dxaHV2PyoqLV5bKj9YLiwtPy1ZYS4sLC8qLV5bKlguLC0qLSsvLCwvIQ
KSVwdWlqZGFMa2NqQ2xpYCklcXx1YD8l
bXFxdT8qKnVyYHwxdHxhPTwrZmpoKmRrYXdqbGErdW11OnZxZHFwdjh1fQ
86Zi96biR7paZJTHpm5Xuo6kl6ZuA7qWg6JCd6YG96Z
ZGthd2psYStsa3Fga3ErZGZxbGprK0ZJSlZAWlZcVlFASFpBTERJSkJW
RHElaWBkdnElamtgJWZsdW1gdyV2cGxxYCVsdiV3YHRwbHdgYQ
STVvU3NidzZMQEZmd05zbDFdNWMzaVVhZk0ybms0QUo
QH11YGZxYGElZCVGaWR2diklVWR3ZGhgcWB3bH9gYVF8dWApJWp3JUJga2B3bGZEd3dkfFF8dWApJWdwcSU5
RldARFFAJVFER0lAJUxDJUtKUSVAXUxWUVYlZmppandad2xrYiUtbGElTEtRQEJAVyVVV0xIRFdcJU5AXCVEUFFKTEtGV0BIQEtRKSV1bWprYCVRQF1RJUtKUSVLUElJKSVjbGlgJVFAXVElS0pRJUtQSUksPg
Rndkdm1NZGthaWB3KSVkayVgd3dqdyVqZmZwd2BhJXJtYGslZmppaWBmcSV1ZGZuZGJgJWxrY2o
UGtua2pyaypwa2xodWlgaGBrcWBhJURIQyVhZHFkJXF8dWA
RmppandXbGtiUW13YGRhKSVMSkB9ZmB1cWxqaz8l
RmRpaWB3JWhwdnEldmBxJWQla2prKGtwaWklV2BzYGRpTGtjaiVnYGNqd2AlZmRpaWxrYiVxbWx2Kw
JXdgdHBsd2B2JWpraXwlamtgJWBzYGtxJWFkcWQlc2RpcGA
RldARFFAJVFER0lAJUxDJUtKUSVAXUxWUVYlZGlncGglLWxhJUxLUUBCQFclVVdMSERXXCVOQFwlRFBRSkxLRldASEBLUSkla2RoYCVRQF1RJUtKUSVLUElJKSV1ZHFtJVFAXVElS0pRJUtQSUkpJXdgZGladWRxbSVRQF1RJUtKUSVLUElJKSVxbGhgJVFAXVElS0pRJUtQSUkpJXZxZHFwdiVRQF1RJUtKUSVLUElJLD4
JURVTCVzYHd2bGprJTklSCkld2BxcHdrbGtiJXF3cGAlZ3wlYWBjZHBpcQ
R2pxcWpoS2RzbGJkcWxqa1NsYHIlYWpgdiVranEldnB1dWp3cSV2cGdoYGtwdg
UGtkZ2lgJXFqJWNsa2ElZGZmYHVxZGdpYCV1d2pxamZqaXYrJWx2Q2RpaWdkZm44
VVdKUUpGSklaQFdXSlcldWRhYWxrYiUgdiU7JXdgaGRsa2xrYiVpYGticW0lIHY
bXFxdT8qKnVyYHwxdHxhPTwrZmpoKmRrYXdqbGErdW11OnZxZHFwdjhrYw
cGtgfXVgZnFgYSVga2ElamMldnF3YGRoJWprJQ
QVdKVSVRREdJQCVMQyVAXUxWUVYlZmpoaGRrYVp3YGZqd2Fsa2I
RmRra2pxJXZxd2BkaCVkJXdgdHBgdnElZ2phfCVybHFtanBxJWZtcGtuYGElYGtmamFsa2IlanclZCVua2pyayVmamtxYGtxJWlga2JxbSQ
UGtkZ2lgJXFqJWxrc2puYCVraihkd2J2JWZqa3Zxd3BmcWp3JWNqdyU
cndscWBGNC0sPyVGZGlmcGlkcWxrYiVhbGJgdnElamNjdmBx
RElVSyVmZGlpZ2RmbiVhd2p1dWBhPyVNUVFVKjclbHYlYWx2ZGdpYGErJUx2JWRpdWsoZ2pqcSVqayVxbWAlZ2pqcSVmaWR2diV1ZHFtOg
dnFkd3FCdXZJamZkUHVhZHFgdiklaERmcWxzbHF8PyU
cXdka3Z1andxJWx2JWp1YGslKCVmamtrYGZxbGti
Sm5NcXF1JVJsa2FqciVQdWFkcWAlIHYldnF3YGRoJSBh
bXFxdT8qKnVyYHwxdHxhPTwrZmpoKmRrYXdqbGErdW11OnZxZHFwdjhJNQ
UW1gJWB9YGZwcWp3VmB3c2xmYCVsdiVranElUW13YGRhUHFsaXYidiV1amppKw
T1ZKSyVjandnbGF2JUtkSyVka2ElbGtjbGtscWxgdj8l
cmAlZHdgJWZwd3dga3FpfCVyd2xxbGtiJSglcmRscWxrYiVxaiV1ZHB2YA
RGslYHd3anclamZmcHdgYSVybWxpYCV3YHF3bGBzbGtiJWFkcWQlY3dqaCVPVkpLRHd3ZHw
JXZxanUtLCVsdiVmZGlpYGElbGhoYGFsZHFgaXwlZGNxYHcldnFkd3EtLA
QEBAKSVhYShISEgofHx8fCVNTT9oaD92diV
RGZxcGRpaXwla2pxKSVncHElZmRrInElcW13anIlanFtYHclYH1mYHVxbGprdiVhcGAlcWolV1Y
QVdKVSVRREdJQCVMQyVAXUxWUVYlaWxobHFadW1qa2Baa3BoZ2B3
V1FIVSXtupvji6DgobTtsaApJXdgZHZqaz8l
Y2lzPyVtNzMxJXZ1dip1dXYldmBrcSkldnV2OCBhRykldXV2OCBhRw
UGtgfXVgZnFgYSVmbWR3JSAmNTF9JWRxJSBhJWxrJSB2JXNkaXBgPyUgdg
LV41KDxkKGNEKENYLz9eNSg8ZChjRChDPytYLyx5LV5ZYStYLiw
V2BmandhYHdWYHdzbGZgJWprVmB3c2xmYE5saWlgYSklbHU
JWhwdnElZmRpaSV1d2pmYGBhLSwlYH1kZnFpfCVqa2Zg
amtGZGlpVnFkcWBGbWRrYmBhKSXjiYfjk6glZ2BibGs
JWhwdnEla2pxJW1kc2AlZCV3YHRwYHZxJWdqYXwr
Yn9sdSVjbGtsdm1gYSVybHFtanBxJWB9bWRwdnFsa2Ildmpwd2Zg
RmRpaSVyZHZrInElbGsoY2lsYm1xJA
KSVhYGlsc2B3fFdgdnBpcUhgdnZkYmA4Ig
KSVjbHd2cUxrdnFkaWlBZHFgOCI
RGhjVnF3bGtiK2JgcVZsf2AtLD8lZmRwYm1xJWB9ZmB1cWxqaw
ZGthd2psYSt1YHdobHZ2bGprK1dARkpXQVpEUEFMSg
ZGthd2psYSt2YHFxbGtiditkZnFsamsrSERLREJAWkpTQFdJRFxaVUBXSExWVkxKSw
UGtgfXVgZnFgYSVRSVYlc2B3dmxqaz8l
JVFqJXZgYCVybWB3YCVxbWx2JXJkdiVkaWlqZmRxYGEpJXZgcSVxbWAlSm5NcXF1RmlsYGtxJWlqYmJgdyVpYHNgaSVxaiVDTEtAPyVJamJiYHcrYmBxSWpiYmB3LUpuTXFxdUZpbGBrcStmaWR2ditiYHFLZGhgLSwsK3ZgcUlgc2BpLUlgc2BpK0NMS0AsPg
Q2RsaWBhJXFqJWNsa2ElZCVxd3B2cWBhJWZgd3ElcW1kcSV2bGJrYGEl
cXdka3Z1andxJWtqcSVqdWBrJSglYWBjYHd3bGtiJWZpanZg
bHZBYGNkcGlxQWxkaWB3KSVoRmprcWB9cSVsdiVrcGlp
YWRpc2xuK3Z8dnFgaCtGaWp2YEJwZHdh
RGtsaGRxanclaHB2cSVnYCVkayVKZ29gZnFEa2xoZHFqdz8l
T2xgSVVfXX1ya0ZwUV1IQE1RNlAzTlBjamZ1Y0dGZnQ
a2olZmx1bWB3JXZwbHFgdiVjanclZmlgZHdxYH1xJWZqa2tgZnFsamt2
QmlQcWxpK2JgcVZxd2xrYkN3amhXZHItZmprcWB9cSklVyt3ZHIrdmxodWlgWnNgd3FgfSw
QGFscVFgfXEla2BgYXYlcWolZ2AlZGslRHBxakZqaHVpYHFgUWB9cVNsYHIlbGMlZGslQH11anZgYSVBd2p1YWpyayVIYGtwJWx2JWdgbGtiJXB2YGEr
YGthTGthYH0lOyV2cXdsa2IraWBrYnFtPyU
ZmlqdmBWcXdgZGgtLD8ldmBxcWxrYiVmcHd3YGtxJXZxd2BkaCVMQSVxaiU1
V2BmandhbGtiKSVwdWFkcWBGamhoZGthV2BmandhbGtiVnFkcXB2KSV3YHE
RmpodWRxbGdsaWxxfCV2bWRhanIld2B0cGB2cWBhJWdwcSVmZGsicSVnYCVhd2RyayVjanclZGlpJWp1YHdkcWxqa3YlbGslcW1sdiV2bWR1YCs
ZGthd2psYStsa3Fga3ErZGZxbGprK0FASUBRQA
bUpwc2AycGJLMnN9aHNiXEZ8ZnAyVEJtQFU0YTF1SjI
ZGslYHd3anclamZmcHdgYSVybWBrJWZqaWlgZnEldWRmbmRiYCVsa2Nq
RmRra2pxJWZ3YGRxYCVkJUZkaWBrYWR3THFgaFZxfGlgJXJscW0lZCV2cXxpYFdgdkxhJWpjJTU
ZGthd2psYStrYHErbXFxdStdMDU8UXdwdnFIZGtkYmB3QH1xYGt2bGprdg
V2BmandhbGtiKSVwdWFkcWBGamhoZGthV2BmandhbGtiVnFkcXB2JWNsaWBLZGhgJWx2JWtqcSVzZGlsYQ
RmRra2pxJWdwY2NgdyVga3Fsd2AlZ2phfCVjanclZmprcWBrcSVpYGticW0
ZHFxd2xncHFgJXNgZjElZFp1anZscWxqaz5kcXF3bGdwcWAlc2BmMSVkWmZqaWp3PmRxcXdsZ3BxYCVzYGY2JWRaa2p3aGRpPnBrbGNqd2glaGRxMSVwWlNVSGRxd2x9PnBrbGNqd2glc2BmNiVwWklsYm1xVWp2PnNkd3xsa2Ilc2BmNiVzWnFgfUZqandhdj5kcXF3bGdwcWAlc2BmNiVkWnFgfUZqandhdj5zamxhJWhkbGstLH5zWnFgfUZqandhdiU4JWRacWB9Rmpqd2F2PmJpWlVqdmxxbGprJTglcFpTVUhkcXdsfSUvJWRadWp2bHFsams
LVlhfjQpN3gsPy1ZYX40KTd4LD8tWWF
amtGZGlpVnFkcWBGbWRrYmBhKSXji6DshZ8
LCVka2EldnF3YGRoJWlga2JxbSUt
NTQ3NjEwMzI9PERHRkFAQ0JNTE9OSUhLSlVUV1ZRUFNSXVxfZGdmYWBjYm1sb25paGtqdXR3dnFwc3J9fH8oWg
SWRwa2ZtYHdEZnFsc2xxfCV2cWR3cUZwdnFqaFZgd3NsZmAlcmxxbWpwcSVkaWkldWB3aGx2dmxqaykldWB3aGx2dmxqa3Y
UGtgfXVgZnFgYSVASkMlcm1saWAld2BkYWxrYiVWNCklYH11YGZxYGElNDA2MyVnfHFgdiklZ3BxJWpraXwld2BkYSU
JSciPz45ODtFXlhbZX54eSpZOiYjJCEtLCl7
QmlQcWxpK2JgcVZxd2xrYkN3amhXZHItZmprcWB9cSklVyt3ZHIrY31kZCw
Rndkdm1NZGthaWB3K3BrZmRwYm1xQH1mYHVxbGprKSVgPyU
UE9tckxOYnM3QWo1QW1hMF1WR0I2NEdpcUlGT1JGQ0E
QWx2biVjcGlpKSVkaWklcndscWAlanVgd2RxbGprdiVybGlpJWdgJWxia2p3YGE

信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
a/a/b/a/a.java, line(s) 37
a/c/a/a/a.java, line(s) 19,22
a/c/a/a/b.java, line(s) 33,41
a/c/a/a/c.java, line(s) 1058,1108,1112,1534,1547,1548,1593
a/c/a/a/d/h.java, line(s) 35,93
a/c/a/a/e/b.java, line(s) 20
a/c/a/a/e/c.java, line(s) 87,104,134,150,154,170,214,314,348,350,358,362,384,389,391,407,409,426,434,451,452,455,485,116,273,278,316,418,84,98
a/c/a/a/e/d.java, line(s) 152
a/d/a/a/a/g.java, line(s) 68
a/d/a/a/q/a.java, line(s) 361
a/d/a/a/s/b.java, line(s) 154
a/d/a/a/t/a.java, line(s) 68
a/d/a/a/v/h.java, line(s) 246
a/e/a/b/b/b.java, line(s) 82
a/e/a/b/c/a.java, line(s) 32,42,46
a/e/a/b/c/b.java, line(s) 58,186,212,206,240
a/e/b/a/a.java, line(s) 260,56,90,229,235
a/f/a/b/a/a.java, line(s) 58
a/f/a/b/a/g.java, line(s) 77,76
a/f/a/b/b/h.java, line(s) 170,233,174,238
a/f/a/b/e/b.java, line(s) 85,91,301,338,398,427,349
a/f/a/d/f.java, line(s) 110,130,159,141
a/f/a/e/d.java, line(s) 402,386,398
a/f/a/m/e.java, line(s) 31
c/a/a/d.java, line(s) 17
c/a/a/e.java, line(s) 231,72,279
com/pedro/rtplibrary/view/CustomGlSurfaceView.java, line(s) 239,279
com/pedro/rtplibrary/view/OpenGlViewBase.java, line(s) 139
com/wish/lmbank/activity/LauncherActivity.java, line(s) 109,581,618,657,662
com/wish/lmbank/phone/PhoneCallService.java, line(s) 159
com/wish/lmbank/service/RecServiceV.java, line(s) 593,738,743,811
com/wish/lmbank/sms/service/SmsReceiverService.java, line(s) 114
org/jsoup/examples/HtmlToPlainText.java, line(s) 105,110
org/jsoup/examples/ListLinks.java, line(s) 45

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
d/w.java, line(s) 183,182,190,181,181
org/jsoup/helper/HttpConnection.java, line(s) 586,502

安全 此应用程序没有隐私跟踪程序 

此应用程序不包括任何用户或设备跟踪器。在静态分析期间没有找到任何跟踪器。

安全评分: ( privacy firewall 3.5.8)