安全分析报告： Voice Changer v1.17.1

安全分数


安全分数 43/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

19

用户/设备跟踪器


调研结果

高危 8
中危 20
信息 3
安全 3
关注 2

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击 

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
com/applovin/impl/adview/b.java, line(s) 547,13
com/applovin/impl/sdk/e/t.java, line(s) 109,4
com/chartboost/sdk/impl/i3.java, line(s) 38,4,5
com/fyber/inneractive/sdk/activities/InneractiveInternalBrowserActivity.java, line(s) 145,11
com/fyber/inneractive/sdk/config/r.java, line(s) 30,4
com/mbridge/msdk/click/h.java, line(s) 241,13,14
com/mbridge/msdk/mbbanner/common/bridge/BannerExpandDialog.java, line(s) 226,15
com/mbridge/msdk/mbbanner/common/c/c.java, line(s) 346,13
com/mbridge/msdk/nativex/view/MBMediaView.java, line(s) 1119,1649,23,24
com/mbridge/msdk/video/bt/module/MBridgeBTWebView.java, line(s) 354,14
com/mbridge/msdk/video/module/MBridgeAlertWebview.java, line(s) 95,6
com/mbridge/msdk/video/module/MBridgeH5EndCardView.java, line(s) 891,17
com/my/target/d0.java, line(s) 98,8,9
com/unity3d/services/core/webview/WebViewApp.java, line(s) 164,9,56,62,74,103

高危 该文件是World Readable。任何应用程序都可以读取文件 

该文件是World Readable。任何应用程序都可以读取文件
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
com/fyber/offerwall/gh.java, line(s) 68

高危 不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击 

不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#webview-server-certificate-verification

Files:
com/yandex/mobile/ads/impl/h2.java, line(s) 72,70
com/yandex/mobile/ads/impl/n00.java, line(s) 63,55

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/fyber/inneractive/sdk/player/exoplayer2/extractor/hls/a.java, line(s) 39
com/ironsource/mediationsdk/utils/IronSourceAES.java, line(s) 70,136

高危 应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文 

应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-block-cipher-mode

Files:
com/inmobi/media/v3.java, line(s) 22
com/inmobi/media/w2.java, line(s) 205

高危 该文件是World Writable。任何应用程序都可以写入文件 

该文件是World Writable。任何应用程序都可以写入文件
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
com/ironsource/mediationsdk/utils/IronSourceUtils.java, line(s) 427

高危 已启用远程WebView调试 

已启用远程WebView调试
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
com/fyber/inneractive/sdk/web/d.java, line(s) 372,9

高危 应用程序包含隐私跟踪程序 

此应用程序有多个19隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危 应用程序数据可以被备份 

[android:allowBackup=true]
这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。

中危 Broadcast Receiver (app.ui.service.AlertReceiver) 未被保护。 

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Content Provider (com.yandex.metrica.PreloadInfoContentProvider) 未被保护。 

[android:exported=true]
发现 Content Provider与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (androidx.work.impl.background.systemjob.SystemJobService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (androidx.profileinstaller.ProfileInstallReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 IP地址泄露 

IP地址泄露


Files:
com/admob/mobileads/base/b.java, line(s) 19
com/admob/mobileads/base/i.java, line(s) 11
com/applovin/mediation/BuildConfig.java, line(s) 4
com/applovin/mediation/adapters/AdColonyMediationAdapter.java, line(s) 295
com/applovin/mediation/adapters/GoogleMediationAdapter.java, line(s) 1044
com/applovin/mediation/adapters/InMobiMediationAdapter.java, line(s) 917
com/applovin/mediation/adapters/MyTargetMediationAdapter.java, line(s) 328
com/applovin/mediation/adapters/NimbusMediationAdapter.java, line(s) 30
com/applovin/mediation/adapters/VungleMediationAdapter.java, line(s) 828
com/cleveradssolutions/adapters/AdColonyAdapter.java, line(s) 51
com/cleveradssolutions/adapters/AdMobAdapter.java, line(s) 76
com/cleveradssolutions/adapters/ChartboostAdapter.java, line(s) 38,50
com/cleveradssolutions/adapters/DTExchangeAdapter.java, line(s) 71
com/cleveradssolutions/adapters/InMobiAdapter.java, line(s) 46
com/cleveradssolutions/adapters/IronSourceAdapter.java, line(s) 56
com/cleveradssolutions/adapters/MintegralAdapter.java, line(s) 66
com/cleveradssolutions/adapters/MyTargetAdapter.java, line(s) 28
com/cleveradssolutions/adapters/PangleAdapter.java, line(s) 43,51
com/cleveradssolutions/adapters/UnityAdapter.java, line(s) 56
com/cleveradssolutions/adapters/VungleAdapter.java, line(s) 43
com/cleveradssolutions/adapters/YandexAdapter.java, line(s) 33
com/cleveradssolutions/adapters/applovin/b.java, line(s) 25
com/cleveradssolutions/adapters/yandex/g.java, line(s) 21
com/cleversolutions/ads/AdNetwork.java, line(s) 150,150,150,150,150,150,150,150,150,150,150,150,150,150,150,150,150,150,150
com/fyber/fairbid/sdk/mediation/adapter/meta/MetaAdapter.java, line(s) 189
com/fyber/fairbid/sdk/mediation/adapter/pangle/PangleAdapter.java, line(s) 160
com/fyber/offerwall/w1.java, line(s) 105
com/jirbo/adcolony/c.java, line(s) 103
com/yandex/mobile/ads/adapter/admob/BuildConfig.java, line(s) 9

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
com/adcolony/sdk/n.java, line(s) 5,249,266
com/adcolony/sdk/o.java, line(s) 6,272
com/adcolony/sdk/p.java, line(s) 6,20
com/apm/insight/e/b/a.java, line(s) 4,33
com/apm/insight/e/b/b.java, line(s) 4,44,45,38
com/bykv/vk/openvk/component/video/a/b/b/d.java, line(s) 4,5,14,20,21,23,25
com/bykv/vk/openvk/preload/geckox/a/b.java, line(s) 6,7,121
com/fyber/fairbid/sdk/placements/database/ImpressionsStoreDbHelper.java, line(s) 4,5,14,15,21
com/inmobi/media/i3.java, line(s) 6,114,143
com/ironsource/b/a.java, line(s) 5,6,126,131
com/ironsource/environment/f.java, line(s) 6,7,25,47,111
com/mbridge/msdk/e/b.java, line(s) 4,5,22,36,37,51,52
com/mbridge/msdk/foundation/db/BatchReportDao.java, line(s) 6,84
com/mbridge/msdk/foundation/db/e.java, line(s) 6,880,895,929
com/mbridge/msdk/foundation/db/g.java, line(s) 4,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70
com/mbridge/msdk/foundation/download/database/DatabaseHelper.java, line(s) 6,89,131,237,245
com/my/tracker/obfuscated/c0.java, line(s) 5,6,7,8,9,279,335,372,399,414,447,473,478,482,504,526
com/vungle/warren/persistence/DatabaseHelper.java, line(s) 9,10,133
com/vungle/warren/persistence/Repository.java, line(s) 7,137
com/yandex/android/beacon/SendBeaconDb.java, line(s) 7,8,137,144
com/yandex/div/state/db/DivStateDaoImpl.java, line(s) 4,5,82,116,140,164,187,212,251
com/yandex/div/state/db/DivStateDbOpenHelper.java, line(s) 4,5,21,22
com/yandex/metrica/impl/ob/A9.java, line(s) 3,11
com/yandex/metrica/impl/ob/AbstractC0479r8.java, line(s) 5,45
com/yandex/metrica/impl/ob/AbstractC0902r8.java, line(s) 5,45
com/yandex/metrica/impl/ob/B9.java, line(s) 3,12
com/yandex/metrica/impl/ob/C0057a9.java, line(s) 4,11
com/yandex/metrica/impl/ob/C0082b9.java, line(s) 3,9,10
com/yandex/metrica/impl/ob/C0107c9.java, line(s) 3,9,10
com/yandex/metrica/impl/ob/C0132d9.java, line(s) 3,9
com/yandex/metrica/impl/ob/C0157e9.java, line(s) 3,8
com/yandex/metrica/impl/ob/C0182f9.java, line(s) 3,11
com/yandex/metrica/impl/ob/C0207g9.java, line(s) 3,11
com/yandex/metrica/impl/ob/C0232h9.java, line(s) 3,10
com/yandex/metrica/impl/ob/C0247i.java, line(s) 7,30
com/yandex/metrica/impl/ob/C0257i9.java, line(s) 6,24
com/yandex/metrica/impl/ob/C0281j9.java, line(s) 3,9,10,14,19,20,21,22
com/yandex/metrica/impl/ob/C0306k9.java, line(s) 6,20
com/yandex/metrica/impl/ob/C0331l9.java, line(s) 3,9
com/yandex/metrica/impl/ob/C0356m9.java, line(s) 3,10,11
com/yandex/metrica/impl/ob/C0381n9.java, line(s) 3,9,10
com/yandex/metrica/impl/ob/C0406o9.java, line(s) 3,9,10
com/yandex/metrica/impl/ob/C0431p9.java, line(s) 3,10
com/yandex/metrica/impl/ob/C0456q9.java, line(s) 3,12,13,14
com/yandex/metrica/impl/ob/C0480a9.java, line(s) 4,11
com/yandex/metrica/impl/ob/C0480r9.java, line(s) 3,11,12
com/yandex/metrica/impl/ob/C0505b9.java, line(s) 3,9,10
com/yandex/metrica/impl/ob/C0505s9.java, line(s) 3,9
com/yandex/metrica/impl/ob/C0529t8.java, line(s) 7,8,247,266,444
com/yandex/metrica/impl/ob/C0530c9.java, line(s) 3,9,10
com/yandex/metrica/impl/ob/C0555d9.java, line(s) 3,9
com/yandex/metrica/impl/ob/C0555u9.java, line(s) 3,12,13
com/yandex/metrica/impl/ob/C0580e9.java, line(s) 3,8
com/yandex/metrica/impl/ob/C0580v9.java, line(s) 3,9
com/yandex/metrica/impl/ob/C0605f9.java, line(s) 3,11
com/yandex/metrica/impl/ob/C0610w9.java, line(s) 3,13,14,15
com/yandex/metrica/impl/ob/C0630g9.java, line(s) 3,11
com/yandex/metrica/impl/ob/C0635x9.java, line(s) 3,11
com/yandex/metrica/impl/ob/C0655h9.java, line(s) 3,10
com/yandex/metrica/impl/ob/C0660y9.java, line(s) 3,11
com/yandex/metrica/impl/ob/C0670i.java, line(s) 7,29
com/yandex/metrica/impl/ob/C0680i9.java, line(s) 6,24
com/yandex/metrica/impl/ob/C0685z9.java, line(s) 3,11
com/yandex/metrica/impl/ob/C0704j9.java, line(s) 3,9,10,14,19,20,21,22
com/yandex/metrica/impl/ob/C0729k9.java, line(s) 6,21
com/yandex/metrica/impl/ob/C0754l9.java, line(s) 3,9
com/yandex/metrica/impl/ob/C0779m9.java, line(s) 3,10,11
com/yandex/metrica/impl/ob/C0804n9.java, line(s) 3,9,10
com/yandex/metrica/impl/ob/C0829o9.java, line(s) 3,9,10
com/yandex/metrica/impl/ob/C0854p9.java, line(s) 3,10
com/yandex/metrica/impl/ob/C0879q9.java, line(s) 3,12,13,14
com/yandex/metrica/impl/ob/C0903r9.java, line(s) 3,11,12
com/yandex/metrica/impl/ob/C0927s8.java, line(s) 6,59
com/yandex/metrica/impl/ob/C0928s9.java, line(s) 3,9
com/yandex/metrica/impl/ob/C0952t8.java, line(s) 7,8,248,267,445
com/yandex/metrica/impl/ob/C0978u9.java, line(s) 3,12,13
com/yandex/metrica/impl/ob/C1003v9.java, line(s) 3,9
com/yandex/metrica/impl/ob/C1033w9.java, line(s) 3,13,14,15
com/yandex/metrica/impl/ob/C1058x9.java, line(s) 3,11
com/yandex/metrica/impl/ob/C1083y9.java, line(s) 3,11
com/yandex/metrica/impl/ob/C1108z9.java, line(s) 3,11
com/yandex/metrica/impl/ob/C8.java, line(s) 4,26
com/yandex/metrica/impl/ob/Q8.java, line(s) 3,9
com/yandex/metrica/impl/ob/R8.java, line(s) 3,9
com/yandex/metrica/impl/ob/S8.java, line(s) 3,9
com/yandex/metrica/impl/ob/T8.java, line(s) 3,9
com/yandex/metrica/impl/ob/U8.java, line(s) 3,10,11,12,13
com/yandex/metrica/impl/ob/V8.java, line(s) 3,9,10,11
com/yandex/metrica/impl/ob/W8.java, line(s) 3,9
com/yandex/metrica/impl/ob/X8.java, line(s) 3,9
com/yandex/metrica/impl/ob/Y8.java, line(s) 3,10,11,12,13,14
com/yandex/metrica/impl/ob/Z8.java, line(s) 3,10,11,12,13,14,15,16
com/yandex/mobile/ads/exo/offline/a.java, line(s) 5,6,128,129
com/yandex/mobile/ads/impl/hh.java, line(s) 5,48,49
com/yandex/mobile/ads/impl/ke1.java, line(s) 6,37
com/yandex/mobile/ads/impl/qh.java, line(s) 5,144,165,166
com/yandex/mobile/ads/impl/t61.java, line(s) 6,7,28

中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
com/applovin/impl/mediation/b/a/a.java, line(s) 34
com/applovin/impl/sdk/o.java, line(s) 1489
com/applovin/mediation/AppLovinUtils.java, line(s) 20
com/applovin/mediation/ads/MaxAdView.java, line(s) 175,165
com/applovin/mediation/ads/MaxAppOpenAd.java, line(s) 63,53
com/applovin/mediation/ads/MaxInterstitialAd.java, line(s) 85,75
com/applovin/mediation/ads/MaxRewardedAd.java, line(s) 112,102
com/applovin/mediation/ads/MaxRewardedInterstitialAd.java, line(s) 80,70
com/applovin/mediation/nativeAds/MaxNativeAdLoader.java, line(s) 98,93
com/applovin/sdk/AppLovinSdk.java, line(s) 251
com/applovin/sdk/AppLovinSdkSettings.java, line(s) 146
com/applovin/sdk/AppLovinWebViewActivity.java, line(s) 24
com/bykv/vk/openvk/component/video/a/b/i.java, line(s) 115
com/fyber/ads/ofw/OfferWallActivity.java, line(s) 26
com/fyber/fairbid/internal/Constants.java, line(s) 9,18,10,11,12,13,14,15
com/fyber/fairbid/mediation/config/MediateEndpointRequester.java, line(s) 42,44
com/fyber/fairbid/sdk/placements/Placement.java, line(s) 23
com/inmobi/commons/core/configs/AdConfig.java, line(s) 399
com/inmobi/media/j0.java, line(s) 15
com/inmobi/unification/sdk/model/Initialization/TimeoutConfigurations.java, line(s) 29,52
com/ironsource/adapters/adcolony/AdColonyAdapter.java, line(s) 418
com/ironsource/adapters/admob/AdMobAdapter.java, line(s) 312,147,155,141
com/ironsource/adapters/inmobi/InMobiAdapter.java, line(s) 217,29
com/ironsource/adapters/ironsource/IronSourceAdapter.java, line(s) 49,48,672,436
com/ironsource/adapters/pangle/PangleAdapter.java, line(s) 825
com/ironsource/adapters/supersonicads/SupersonicAdsAdapter.java, line(s) 70,363,200
com/ironsource/adapters/unityads/UnityAdsAdapter.java, line(s) 734,262
com/ironsource/adapters/vungle/VungleAdapter.java, line(s) 709
com/ironsource/mediationsdk/C0120c.java, line(s) 223,338
com/ironsource/mediationsdk/C0451c.java, line(s) 225,340
com/ironsource/mediationsdk/CachedResponse.java, line(s) 38
com/ironsource/mediationsdk/InitConfig.java, line(s) 44
com/ironsource/mediationsdk/adquality/AdQualityBridgeKt.java, line(s) 12
com/ironsource/mediationsdk/adunit/adapter/utility/AdOptionsPosition.java, line(s) 12
com/ironsource/mediationsdk/server/ServerURL.java, line(s) 25,51
com/ironsource/mediationsdk/utils/IronSourceConstants.java, line(s) 93,104
com/ironsource/mediationsdk/z.java, line(s) 1491,1474
com/mbridge/msdk/MBridgeConstans.java, line(s) 14,55
com/mbridge/msdk/click/b/a.java, line(s) 33
com/mbridge/msdk/foundation/db/l.java, line(s) 57,44
com/mbridge/msdk/foundation/download/core/DownloadCommon.java, line(s) 21
com/mbridge/msdk/foundation/download/core/DownloaderReporter.java, line(s) 14
com/mbridge/msdk/foundation/entity/CampaignEx.java, line(s) 39
com/mbridge/msdk/foundation/entity/n.java, line(s) 236,239,337,386,395,190,214,317,319,350,352,335,201,302,203,304,274,252,284,620
com/mbridge/msdk/foundation/same/report/f.java, line(s) 100
com/mbridge/msdk/foundation/same/report/p.java, line(s) 251,359,331
com/mbridge/msdk/mbbanner/common/d/a.java, line(s) 34
com/mbridge/msdk/playercommon/exoplayer2/drm/DefaultDrmSessionManager.java, line(s) 30
com/mbridge/msdk/reward/b/a.java, line(s) 196
com/mbridge/msdk/video/dynview/moffer/MOfferModel.java, line(s) 112
com/my/target/u6.java, line(s) 60
com/unity3d/ads/metadata/InAppPurchaseMetaData.java, line(s) 6
com/unity3d/services/ads/gmascar/utils/ScarConstants.java, line(s) 4,5,6,7,9,10
com/unity3d/services/core/configuration/ExperimentObject.java, line(s) 7,8
com/unity3d/services/core/device/reader/DeviceInfoReaderFilterProvider.java, line(s) 11,12
com/unity3d/services/core/device/reader/JsonStorageKeyNames.java, line(s) 4,6,7,8,10,11,12,13,9,14,5,15,16,17
com/unity3d/services/core/properties/SdkProperties.java, line(s) 28
com/vungle/warren/log/LogManager.java, line(s) 24,25,26,27
com/vungle/warren/log/LogSender.java, line(s) 22,23
com/vungle/warren/model/Cookie.java, line(s) 21,22
com/yandex/metrica/impl/ob/C4.java, line(s) 80
com/yandex/metrica/impl/ob/X4.java, line(s) 113
com/yandex/metrica/impl/ob/vo.java, line(s) 17

中危 MD5是已知存在哈希冲突的弱哈希 

MD5是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/apm/insight/l/v.java, line(s) 65
com/bykv/vk/openvk/component/video/api/f/b.java, line(s) 47
com/bykv/vk/openvk/preload/geckox/utils/g.java, line(s) 35
com/cleveradssolutions/internal/zg.java, line(s) 96
com/fyber/inneractive/sdk/player/cache/h.java, line(s) 352
com/ironsource/mediationsdk/utils/IronSourceUtils.java, line(s) 356
com/ironsource/sdk/controller/w.java, line(s) 24
com/ironsource/sdk/utils/SDKUtils.java, line(s) 159
com/mbridge/msdk/foundation/download/resource/MBResourceManager.java, line(s) 102
com/mbridge/msdk/foundation/tools/w.java, line(s) 18
com/yandex/metrica/impl/ob/C0568um.java, line(s) 82
com/yandex/metrica/impl/ob/C0673ym.java, line(s) 369
com/yandex/metrica/impl/ob/C0991um.java, line(s) 93
com/yandex/metrica/impl/ob/C1096ym.java, line(s) 372

中危 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
app/AppRC.java, line(s) 10
app/IapOnboardPaywallProvider.java, line(s) 11
com/apm/insight/i.java, line(s) 8
com/applovin/exoplayer2/h/z.java, line(s) 4
com/applovin/impl/c/m.java, line(s) 18
com/fyber/inneractive/sdk/config/global/s.java, line(s) 12
com/fyber/inneractive/sdk/player/exoplayer2/upstream/cache/i.java, line(s) 21
com/inmobi/media/d2.java, line(s) 5
com/inmobi/media/d8.java, line(s) 24
com/inmobi/media/e.java, line(s) 8
com/inmobi/media/q8.java, line(s) 12
com/inmobi/media/x0.java, line(s) 26
com/ironsource/mediationsdk/utils/e.java, line(s) 6
com/mbridge/msdk/dycreator/baseview/rewardpopview/MBAcquireRewardPopView.java, line(s) 24
com/mbridge/msdk/playercommon/exoplayer2/source/ShuffleOrder.java, line(s) 4
com/mbridge/msdk/playercommon/exoplayer2/trackselection/RandomTrackSelection.java, line(s) 6
com/mbridge/msdk/playercommon/exoplayer2/upstream/cache/CachedContentIndex.java, line(s) 21
com/mbridge/msdk/thrid/okhttp/OkHttpClient.java, line(s) 29
com/mbridge/msdk/thrid/okhttp/internal/ws/RealWebSocket.java, line(s) 27
com/mbridge/msdk/thrid/okhttp/internal/ws/WebSocketWriter.java, line(s) 9
com/unity3d/services/core/configuration/Configuration.java, line(s) 24
com/yandex/metrica/impl/ob/Bm.java, line(s) 3
com/yandex/mobile/ads/impl/fp.java, line(s) 9
com/yandex/mobile/ads/impl/nd1.java, line(s) 8
com/yandex/mobile/ads/impl/s31.java, line(s) 4
com/yandex/mobile/ads/impl/w31.java, line(s) 13

中危 SHA-1是已知存在哈希冲突的弱哈希 

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/adcolony/sdk/d1.java, line(s) 10
com/adcolony/sdk/z0.java, line(s) 318
com/applovin/impl/sdk/utils/StringUtils.java, line(s) 32
com/applovin/impl/sdk/utils/r.java, line(s) 156
com/chartboost/sdk/impl/u1.java, line(s) 32
com/fyber/fairbid/internal/Utils.java, line(s) 159
com/fyber/inneractive/sdk/player/cache/h.java, line(s) 339
com/fyber/offerwall/tj.java, line(s) 120
com/fyber/offerwall/uj.java, line(s) 21
com/pgl/ssdk/ces/d.java, line(s) 252
com/unity3d/services/core/device/Device.java, line(s) 166
com/yandex/metrica/impl/ob/P.java, line(s) 47

中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
app/utils/Constants.java, line(s) 22,33,34,36,37,43,46
app/utils/Utils.java, line(s) 193,227,261
com/apm/insight/entity/d.java, line(s) 19
com/apm/insight/l/w.java, line(s) 33,79,90
com/apm/insight/nativecrash/c.java, line(s) 663
com/fyber/fairbid/http/requests/UrlParametersProvider.java, line(s) 128
com/fyber/inneractive/sdk/network/l0.java, line(s) 31
com/fyber/inneractive/sdk/util/l.java, line(s) 151
com/fyber/inneractive/sdk/web/i.java, line(s) 551
com/inmobi/media/l3.java, line(s) 57,60,112,115
com/ironsource/environment/h.java, line(s) 502,316
com/ironsource/mediationsdk/utils/f.java, line(s) 152,274
com/ironsource/sdk/utils/SDKUtils.java, line(s) 238
com/mbridge/msdk/foundation/same/report/b/a.java, line(s) 82
com/mbridge/msdk/foundation/tools/ac.java, line(s) 86,96,108
com/pgl/ssdk/ces/d.java, line(s) 137
com/unity3d/services/core/cache/CacheDirectory.java, line(s) 55
com/vungle/warren/VungleApiClient.java, line(s) 401
com/vungle/warren/persistence/CacheManager.java, line(s) 119,121
com/vungle/warren/persistence/Repository.java, line(s) 84,85
com/vungle/warren/utility/platform/AndroidPlatform.java, line(s) 130
com/yandex/mobile/ads/impl/yv.java, line(s) 7

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞 

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
com/fyber/inneractive/sdk/web/t.java, line(s) 504,496
com/inmobi/media/w9.java, line(s) 960,925
com/ironsource/mediationsdk/testSuite/webView/TestSuiteWebViewWrapper.java, line(s) 124,121,123
com/unity3d/services/ads/webplayer/WebPlayerView.java, line(s) 530,514
com/unity3d/services/core/webview/WebView.java, line(s) 133,99

中危 可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息 

可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-6

Files:
com/adcolony/sdk/b1.java, line(s) 666,660
com/chartboost/sdk/impl/p2.java, line(s) 23,22
com/ironsource/sdk/utils/d.java, line(s) 32,34
com/mbridge/msdk/foundation/webview/BrowserView.java, line(s) 90,87
com/mbridge/msdk/mbsignalcommon/base/BaseWebView.java, line(s) 91,88
com/unity3d/services/core/webview/WebView.java, line(s) 86,99
com/vungle/warren/ui/view/WebSettingsUtils.java, line(s) 14,10

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
com/mbridge/msdk/playercommon/exoplayer2/util/Util.java, line(s) 239
com/yandex/div/core/view2/divs/DivGifImageBinder.java, line(s) 89

中危 Firebase远程配置已启用 

Firebase远程配置URL （ https://firebaseremoteconfig.googleapis.com/v1/projects/942724090834/namespaces/firebase:fetch?key=AIzaSyAqDmsoRFxw42lAuDVk8v2fV3nYtvRUf0E ） 已启用。请确保这些配置不包含敏感信息。响应内容如下所示：

{
    "entries": {
        "ads_delay_sec": "60",
        "after_saving": "0",
        "button_sub_text": "1",
        "cross_size": "100",
        "cross_time": "15",
        "cross_transparency": "30",
        "display_onb": "15",
        "display_sub": "11",
        "hidden_presets": "",
        "limit_interstitial_ad": "15",
        "lock_features": "100",
        "new_preset": "true",
        "no_payment": "true",
        "onb_cross": "true",
        "onb_orientation": "v",
        "onb_sub_orientation": "v",
        "paywall_cross_transparency": "30",
        "push": "2",
        "rate_ads_delay_sec": "20",
        "rate_dialog_version": "9",
        "rate_first_delay_sec": "60",
        "rate_second_delay_sec": "10",
        "second_sub_display": "1",
        "show_discount_sub": "false",
        "show_main_terms": "false",
        "show_onb_terms": "true",
        "show_onboard": "false",
        "show_second_sub": "false",
        "show_sub_screen": "100",
        "sub1": "week299",
        "sub2": "month9",
        "sub3": "year79_10d",
        "sub_button_animation": "true",
        "sub_button_animation_time": "3",
        "sub_button_type": "1",
        "sub_orientation": "b",
        "sub_price_text_size": "12",
        "sub_price_transparency": "45",
        "sub_selected_product": "1",
        "subs_screen_type": "1"
    },
    "state": "UPDATE",
    "templateVersion": "1652"
}

中危 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
AdMob广告平台的=> "com.google.android.gms.ads.APPLICATION_ID" : "ca-app-pub-5636049984270410~5658879885"
"google_app_id" : "1:942724090834:android:2ca8eb5be9028c2a26960b"
"google_crash_reporting_api_key" : "AIzaSyAqDmsoRFxw42lAuDVk8v2fV3nYtvRUf0E"
"google_api_key" : "AIzaSyAqDmsoRFxw42lAuDVk8v2fV3nYtvRUf0E"
"dyStrategy.privateAddress" : "privateAddress"
"yandex_mobileads_age_restricted_user" : "com.yandex.mobile.ads.AGE_RESTRICTED_USER"
"com.google.firebase.crashlytics.mapping_file_id" : "00000000000000000000000000000000"
e4250327-8d3c-4d35-b9e8-3c1720a64b91
T01YLmdvb2dsZS5yYXcuZGVjb2Rlcg==
026ae9c9824b3e483fa6c71fa88f57ae27816141
DFKwWgtuDkKwLZPwD+z8H+N/xj26Vjcdx5KyVj5GxVN=
0e5e9c33-f8c3-4568-86c5-2e4f57523f72
936dcbdd57fe235fd7cf61c2e93da3c4
HSrCHRtOan6wp2kwOIGJC1RDtuSrF2mWVbio2aBcMHX9KF3iTJ1lLSzCKP1ZSo5yNolPNw1kCTtWpxELFF4ah1
T01YLmFtbG9naWMuYXZjLmRlY29kZXIuYXdlc29tZS5zZWN1cmU=
T01YLmFsbHdpbm5lci52aWRlby5kZWNvZGVyLmF2Yw==
7bf3a1e7bbd31e612eda3310c2cdb8075c43c6b5
f6c3700f69aeb2f115563bfb01aee99b5faed63c
T01YLkV4eW5vcy5hdmMuZGVjLnNlY3VyZQ==
LdxThdi1WBKUL75ULBPwJ7JgY7K0DkeAWrfXYN==
T01YLmxnZS5hYzMuZGVjb2Rlcg==
DFK/HrQgJ+zQW+xUhoPwJ7JgY7K0DkeAWrfXYN==
T01YLmdvb2dsZS52b3JiaXMuZGVjb2Rlcg==
bb2cf0647ba654d7228dd3f9405bbc6a
T01YLmJyb2FkY29tLnZpZGVvX2RlY29kZXIudHVubmVs
478cb909-6ad1-4e12-84cc-b3629a789f93
YzIuYW5kcm9pZC5tcDMuZGVjb2Rlcg==
T01YLlNFQy5NUDMuRGVjb2Rlcg==
LdxThdi1WBKUL75ULBPBD+QqJk2MWrfXYN==
DFKwWgtuDkKwLZPwD+z8H+N/xj26Vjcdx5KanjKnxVN=
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
DFKwWgtuDkKwLZPwD+z8H+N/xjQZxVfV+T2SZVe6V2xS5c5n
258EAFA5-E914-47DA-95CA-C5AB0DC85B11
cca47107bfcbdb211d88f3385aeede40
C38FB23A402222A0C17D34A92F971D1F
T01YLnJlYWx0ZWsudmlkZW8uZGVjb2Rlci50dW5uZWxlZA==
h7KsLkfPW+xUhoPwJ7JgY7K0DkeAWrfXYN==
T01YLmdvb2dsZS5hYWMuZGVjb2Rlcg==
T01YLnFjb20uYXVkaW8uZGVjb2Rlci5hYWM=
T01YLmJyb2FkY29tLnZpZGVvX2RlY29kZXIudHVubmVsLnNlY3VyZQ==
T01YLnF0aS5hdWRpby5kZWNvZGVyLmZsYWM=
6c5f504e-8928-47b5-bfb5-73af8d8bf4b4
T01YLk52aWRpYS5oMjY0LmRlY29kZS5zZWN1cmU=
T01YLkV4eW5vcy5BVkMuRGVjb2Rlci5zZWN1cmU=
T01YLmxnZS5hbGFjLmRlY29kZXI=
T01YLnFjb20uYXVkaW8uZGVjb2Rlci5tcDM=
4e610cd2-753f-4bfc-9b05-772ce8905c5e
7d962ba4-a392-449a-a02d-6c5be5613928
01528cc0-dd34-494d-9218-24af1317e1ee
T01YLmFtbG9naWMuYXZjLmRlY29kZXIuYXdlc29tZQ==
Y7c14Z2TDbv/Y+xgHFeXDrcshBPUYFT=
4c82305db94e8da5e25534a9b2b84ec64f4ad010
T01YLkV4eW5vcy5BQUMuRGVjb2Rlcg==
T01YLkV4eW5vcy5BVkMuRGVjb2Rlcg==
0000016742C00BDA259000000168CE0F13200000016588840DCE7118A0002FBF1C31C3275D78
20799a27-fa80-4b36-b2db-0f8141f24180
DkPtYdQTLkfAW+xUhoPwJ7JgY7K0DkeAWrfXYN==
7c22942b749fe6a6e361b675e96b3ee9
T01YLnFjb20udmlkZW8uZGVjb2Rlci52cDg=
DFK/HrQgJ+zQW+xUhoPBD+QqJk2MWrfXYN==
bfe995dfe7a2792ccf7718abbff0597da17f40c3
322a737a-a0ca-44e0-bc85-649b1c7c1db6
DFeuWkH0W+xUhoPwJ7JgY7K0DkeAWrfXYN==
h7KsLkfPW+xUhoPBD+QqJk2MWrfXYN==
67bb016b-be40-4c08-a190-96a3f3b503d3

信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
app/AppRate.java, line(s) 356
app/IapOnboardPaywallProvider.java, line(s) 186,222,225,234,237
app/effects/AdvancedBoy.java, line(s) 159,194,253
app/effects/AdvancedGirl.java, line(s) 166,323
app/ui/activity/EffectPlayingActivity.java, line(s) 346,410,421,436,464,1127,1456,1526,1185,1186,1187,1188,1189,1190,1191,1192,1193,1194,1195,1217,1218,1219,1220,1221,1222,1223,1224,1225,1226,1227,1272,1283,1371,1384
app/ui/activity/MyStudioActivity.java, line(s) 397,406
app/ui/activity/RecordActivity.java, line(s) 380
app/ui/adapter/MyStudioTrackAdapter.java, line(s) 214
app/ui/adapter/VoiceEffectAdapter.java, line(s) 235,392
app/ui/fragments/EffectChangedFragment.java, line(s) 171
app/ui/fragments/FilesFragment.java, line(s) 54,63
app/ui/fragments/RecordingsFragment.java, line(s) 177
app/ui/service/EditingService.java, line(s) 102,109
app/ui/service/RecordService.java, line(s) 198,210,214,317,326,350,372,378,383
app/utils/Utils.java, line(s) 219,253,287
com/adcolony/sdk/AdColonyAppOptions.java, line(s) 56,65
com/adcolony/sdk/g0.java, line(s) 60,78,82,203,66,271,72
com/adcolony/sdk/s0.java, line(s) 111,142,127
com/admob/mobileads/YandexInterstitial.java, line(s) 57
com/admob/mobileads/YandexRewarded.java, line(s) 58
com/apm/insight/b/j.java, line(s) 50
com/apm/insight/h/a.java, line(s) 47
com/apm/insight/k/k.java, line(s) 81
com/apm/insight/l/q.java, line(s) 44,26,32,38,8,20,14,50
com/apm/insight/runtime/o.java, line(s) 48
com/applovin/exoplayer2/l/q.java, line(s) 26,66,36,56
com/applovin/impl/sdk/a/f.java, line(s) 69,75,81
com/applovin/impl/sdk/utils/n.java, line(s) 9
com/applovin/impl/sdk/y.java, line(s) 34,67,108,52,112,71,116,75,104
com/bykv/vk/openvk/component/video/a/b/d.java, line(s) 123,101,161,171,198,208,237,261,278,325,395
com/bykv/vk/openvk/component/video/a/b/e.java, line(s) 47,55
com/bykv/vk/openvk/component/video/a/b/f.java, line(s) 103,161,173,237
com/bykv/vk/openvk/component/video/a/b/g.java, line(s) 128,161,196,255,263,268,282,287,363,379,386,426,430,204,297,339,373,280,312
com/bykv/vk/openvk/component/video/a/c/a.java, line(s) 183,189,196,203,209,217,291,298,137,150,174,231,247
com/bykv/vk/openvk/component/video/api/f/c.java, line(s) 42,49,97,104,73,80,56,87
com/bykv/vk/openvk/preload/falconx/a/a.java, line(s) 25
com/bykv/vk/openvk/preload/geckox/h/a.java, line(s) 17,20,28,11
com/chartboost/sdk/Analytics.java, line(s) 80,94,103,127,138
com/chartboost/sdk/Chartboost.java, line(s) 48,111
com/chartboost/sdk/ads/Banner.java, line(s) 105
com/chartboost/sdk/ads/Interstitial.java, line(s) 75
com/chartboost/sdk/ads/Rewarded.java, line(s) 75
com/chartboost/sdk/impl/aa.java, line(s) 35
com/chartboost/sdk/impl/b1.java, line(s) 39
com/chartboost/sdk/impl/c.java, line(s) 137
com/chartboost/sdk/impl/c1.java, line(s) 754
com/chartboost/sdk/impl/e7.java, line(s) 821,825,829,833,837,841,992,1042,1283,1296,1314,937
com/chartboost/sdk/impl/g0.java, line(s) 627,440,847
com/chartboost/sdk/impl/ja.java, line(s) 81,143
com/chartboost/sdk/impl/n0.java, line(s) 161,148
com/chartboost/sdk/impl/nd.java, line(s) 18,11
com/chartboost/sdk/impl/o2.java, line(s) 58
com/chartboost/sdk/impl/p5.java, line(s) 32
com/chartboost/sdk/impl/pb.java, line(s) 46,126,134,137
com/chartboost/sdk/impl/q9.java, line(s) 226
com/chartboost/sdk/impl/s7.java, line(s) 203
com/chartboost/sdk/impl/u0.java, line(s) 82
com/chartboost/sdk/impl/v1.java, line(s) 276,293,327,352,348
com/chartboost/sdk/impl/v2.java, line(s) 68
com/chartboost/sdk/impl/vc.java, line(s) 27,31
com/chartboost/sdk/impl/w0.java, line(s) 30
com/chartboost/sdk/impl/w2.java, line(s) 117
com/chartboost/sdk/impl/w3.java, line(s) 207
com/chartboost/sdk/impl/yb.java, line(s) 192,203,218,223,233,244,255,270,283,290,319,357,129
com/chartboost/sdk/impl/z6.java, line(s) 22,32,41,50,59,68
com/chartboost/sdk/internal/Networking/NetworkHelper.java, line(s) 27
com/chartboost/sdk/internal/clickthrough/EmbeddedBrowserActivity.java, line(s) 135,144,204
com/chartboost/sdk/view/CBImpressionActivity.java, line(s) 49,85,112
com/cleveradssolutions/adapters/admob/a.java, line(s) 47,61
com/cleveradssolutions/adapters/dt/c.java, line(s) 113,157,170
com/cleveradssolutions/adapters/dt/l.java, line(s) 65
com/cleveradssolutions/adapters/yandex/a.java, line(s) 10
com/cleveradssolutions/internal/consent/zb.java, line(s) 40,109,139
com/cleveradssolutions/internal/consent/zc.java, line(s) 24,36
com/cleveradssolutions/internal/consent/ze.java, line(s) 29,34,67,81,103
com/cleveradssolutions/internal/consent/zn.java, line(s) 73
com/cleveradssolutions/internal/content/zd.java, line(s) 70,157,178,198
com/cleveradssolutions/internal/content/zf.java, line(s) 58
com/cleveradssolutions/internal/impl/zb.java, line(s) 185
com/cleveradssolutions/internal/impl/zc.java, line(s) 61,118,207,196,202,265
com/cleveradssolutions/internal/impl/zd.java, line(s) 150,157,175,186,197,219,259,278,305,538,568,586,364,516
com/cleveradssolutions/internal/impl/ze.java, line(s) 98
com/cleveradssolutions/internal/impl/zi.java, line(s) 53,88,70
com/cleveradssolutions/internal/impl/zj.java, line(s) 354,73,315,349,470,295
com/cleveradssolutions/internal/impl/zk.java, line(s) 95,131,136
com/cleveradssolutions/internal/integration/IntegrationPageActivity.java, line(s) 138,150,189
com/cleveradssolutions/internal/lastpagead/LastPageActivity.java, line(s) 202,136
com/cleveradssolutions/internal/lastpagead/ze.java, line(s) 38
com/cleveradssolutions/internal/mediation/zf.java, line(s) 161,176,299,335,369
com/cleveradssolutions/internal/mediation/zi.java, line(s) 131
com/cleveradssolutions/internal/services/zb.java, line(s) 30,61,42
com/cleveradssolutions/internal/services/zc.java, line(s) 47,60
com/cleveradssolutions/internal/services/zd.java, line(s) 21,37
com/cleveradssolutions/internal/services/ze.java, line(s) 160
com/cleveradssolutions/internal/services/zh.java, line(s) 115,195,214,216,218
com/cleveradssolutions/internal/services/zi.java, line(s) 23
com/cleveradssolutions/internal/services/zj.java, line(s) 72
com/cleveradssolutions/internal/services/zl.java, line(s) 88
com/cleveradssolutions/internal/services/zn.java, line(s) 218
com/cleveradssolutions/internal/services/zo.java, line(s) 368,165,160
com/cleveradssolutions/internal/zb.java, line(s) 7
com/cleveradssolutions/internal/zc.java, line(s) 141,173,170
com/cleveradssolutions/internal/zd.java, line(s) 193
com/cleveradssolutions/internal/zh.java, line(s) 106,44,61,89,97,103,32,33,37,66,87,95,82,101
com/cleveradssolutions/internal/zi.java, line(s) 174,185,195
com/cleveradssolutions/mediation/MediationAdapter.java, line(s) 130
com/cleveradssolutions/sdk/base/CASEvent.java, line(s) 65
com/cleversolutions/ads/AdSize.java, line(s) 98,104
com/fyber/fairbid/ads/OfferWall.java, line(s) 400
com/fyber/fairbid/adtransparency/interceptors/Interceptor.java, line(s) 34
com/fyber/fairbid/adtransparency/interceptors/admob/AdMobInterceptor.java, line(s) 79,96,116,147,211,236,258,176
com/fyber/fairbid/adtransparency/interceptors/applovin/AppLovinInterceptor.java, line(s) 40,53,63,117
com/fyber/fairbid/adtransparency/interceptors/chartboost/ChartboostInterceptor.java, line(s) 70,42,52,109
com/fyber/fairbid/adtransparency/interceptors/ironsource/IronSourceInterceptor.java, line(s) 159,96,56,74,91,101,114,130
com/fyber/fairbid/adtransparency/interceptors/mintegral/MintegralInterceptor.java, line(s) 98,140,237,260,156,63,82,106,148,177,114,165,200,205,210,268
com/fyber/fairbid/adtransparency/interceptors/pangle/PangleInterceptor.java, line(s) 46
com/fyber/fairbid/adtransparency/interceptors/unityads/UnityAdsInterceptor.java, line(s) 59,191
com/fyber/fairbid/adtransparency/interceptors/vungle/VungleInterceptor.java, line(s) 66,48
com/fyber/fairbid/internal/ContextReference.java, line(s) 43,49
com/fyber/fairbid/internal/DevLogger.java, line(s) 9,13,17,21,25,29
com/fyber/fairbid/internal/Logger.java, line(s) 22,28,45,54,61,70,76,20,87,129,131,138
com/fyber/fairbid/internal/Utils.java, line(s) 279,304
com/fyber/fairbid/sdk/extensions/unity3d/OfferWallUnityHelper.java, line(s) 396
com/fyber/fairbid/sdk/mediation/adapter/gam/GAMAdapter.java, line(s) 165,188,210,257
com/fyber/fairbid/user/UserInfo.java, line(s) 227
com/fyber/inneractive/sdk/external/InneractiveAdManager.java, line(s) 361
com/fyber/inneractive/sdk/flow/a.java, line(s) 27
com/fyber/inneractive/sdk/logger/a.java, line(s) 11,19,21,29,41,43,51,58,65
com/fyber/inneractive/sdk/network/f0.java, line(s) 137
com/fyber/inneractive/sdk/player/cache/c.java, line(s) 243
com/fyber/inneractive/sdk/player/exoplayer2/audio/MediaCodecAudioRenderer.java, line(s) 266,269,280
com/fyber/inneractive/sdk/player/exoplayer2/audio/c.java, line(s) 427
com/fyber/inneractive/sdk/player/exoplayer2/extractor/mp4/e.java, line(s) 45,51,65,81,132,142,152
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ogg/j.java, line(s) 231
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ts/d.java, line(s) 117
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ts/l.java, line(s) 49
com/fyber/inneractive/sdk/player/exoplayer2/extractor/ts/o.java, line(s) 44,47,103
com/fyber/inneractive/sdk/player/exoplayer2/extractor/wav/a.java, line(s) 48
com/fyber/inneractive/sdk/player/exoplayer2/extractor/wav/c.java, line(s) 39,62,69
com/fyber/inneractive/sdk/player/exoplayer2/g.java, line(s) 40,112
com/fyber/inneractive/sdk/player/exoplayer2/h.java, line(s) 175,666,898,903,908
com/fyber/inneractive/sdk/player/exoplayer2/mediacodec/a.java, line(s) 35,56
com/fyber/inneractive/sdk/player/exoplayer2/mediacodec/d.java, line(s) 334,337,260
com/fyber/inneractive/sdk/player/exoplayer2/source/chunk/b.java, line(s) 15,17
com/fyber/inneractive/sdk/player/exoplayer2/upstream/cache/i.java, line(s) 149
com/fyber/inneractive/sdk/player/exoplayer2/upstream/o.java, line(s) 232
com/fyber/inneractive/sdk/player/exoplayer2/upstream/x.java, line(s) 151,157,163
com/fyber/inneractive/sdk/player/exoplayer2/util/b.java, line(s) 34,78
com/fyber/offerwall/bi.java, line(s) 36,42,53,22
com/fyber/offerwall/fg.java, line(s) 67,58
com/fyber/offerwall/g0.java, line(s) 99,108
com/fyber/offerwall/lh.java, line(s) 36
com/fyber/offerwall/p.java, line(s) 26,39,65,71,33,87
com/fyber/offerwall/rd.java, line(s) 24,12,18
com/fyber/offerwall/z7.java, line(s) 69,86,106,129
com/fyber/utils/FyberLogger.java, line(s) 65,74,54,98,113,145,83,122,154,163
com/github/ybq/android/spinkit/animation/SpriteAnimatorBuilder.java, line(s) 162
com/iab/omid/library/adcolony/d/c.java, line(s) 18,11
com/iab/omid/library/applovin/utils/d.java, line(s) 18,11
com/iab/omid/library/bytedance2/utils/d.java, line(s) 18,11
com/iab/omid/library/corpmailru/d/c.java, line(s) 18,11
com/iab/omid/library/fyber/utils/d.java, line(s) 18,11
com/iab/omid/library/inmobi/d/c.java, line(s) 18,11
com/iab/omid/library/ironsrc/utils/d.java, line(s) 18,11
com/iab/omid/library/mmadbridge/utils/d.java, line(s) 18,11
com/iab/omid/library/vungle/d/c.java, line(s) 18,11
com/inmobi/media/c0.java, line(s) 43,49
com/inmobi/media/c6.java, line(s) 36,46,66,71,94,99,27,59,21,54
com/inmobi/media/f3.java, line(s) 76
com/inmobi/media/g0.java, line(s) 16,10
com/inmobi/media/s9.java, line(s) 25,29
com/inmobi/media/v3.java, line(s) 29
com/inmobi/media/w2.java, line(s) 210
com/inmobi/media/y.java, line(s) 31
com/ironsource/a/b.java, line(s) 42
com/ironsource/adapters/admob/AdMobAdapter.java, line(s) 142,150,158
com/ironsource/adapters/vungle/VungleAdapter.java, line(s) 396,438,475,518
com/ironsource/b/a.java, line(s) 84,112
com/ironsource/environment/a.java, line(s) 36,318
com/ironsource/environment/e.java, line(s) 66,153,165,170,171
com/ironsource/environment/k.java, line(s) 66
com/ironsource/lifecycle/a/a.java, line(s) 72
com/ironsource/mediationsdk/IronSource.java, line(s) 656
com/ironsource/mediationsdk/bidding/d.java, line(s) 35
com/ironsource/mediationsdk/integration/IntegrationHelper.java, line(s) 20,24,16
com/ironsource/mediationsdk/logger/a.java, line(s) 33,26,22,28
com/ironsource/mediationsdk/z.java, line(s) 551,553,561,563,1428,1451
com/ironsource/sdk/Events/f.java, line(s) 41
com/ironsource/sdk/WPAD/d.java, line(s) 117,186
com/ironsource/sdk/b/b.java, line(s) 31,57,96
com/ironsource/sdk/controller/A.java, line(s) 332,340,420,913,1008,1028,1057,1077,1099,1119,1145,1165,1192,1369,1387,2030,1813
com/ironsource/sdk/service/Connectivity/a.java, line(s) 50
com/ironsource/sdk/service/Connectivity/e.java, line(s) 82,96
com/ironsource/sdk/service/d.java, line(s) 45
com/ironsource/sdk/utils/Logger.java, line(s) 12,18,24,30,40,48,53,59,65,71
com/jirbo/adcolony/AdColonyAdapter.java, line(s) 70,129,139,152,41,64
com/jirbo/adcolony/a.java, line(s) 93
com/jirbo/adcolony/b.java, line(s) 75
com/mbridge/msdk/dycreator/a/a.java, line(s) 44,58,145,146,147,151,159,161,240
com/mbridge/msdk/dycreator/baseview/MBScrollView.java, line(s) 74
com/mbridge/msdk/dycreator/baseview/extview/MBExtAcquireRewardPopView.java, line(s) 278
com/mbridge/msdk/dycreator/baseview/extview/MBExtFeedBackView.java, line(s) 259
com/mbridge/msdk/dycreator/baseview/extview/MBExtMBridgeBaitClickView.java, line(s) 278
com/mbridge/msdk/dycreator/baseview/extview/MBExtMBridgeTextView.java, line(s) 269
com/mbridge/msdk/dycreator/bus/BackgroundPoster.java, line(s) 40
com/mbridge/msdk/dycreator/bus/EventBus.java, line(s) 312,106,108,111,431,449,465
com/mbridge/msdk/dycreator/e/g.java, line(s) 11
com/mbridge/msdk/e/a/e.java, line(s) 29
com/mbridge/msdk/e/a/v.java, line(s) 55,51,59
com/mbridge/msdk/e/b.java, line(s) 25,40,55
com/mbridge/msdk/e/c.java, line(s) 32,45,58,85,133,179,214,241,269,297,325
com/mbridge/msdk/e/j.java, line(s) 40
com/mbridge/msdk/e/k.java, line(s) 48,55,85,98,108
com/mbridge/msdk/e/m.java, line(s) 83,64,75,113,144,151
com/mbridge/msdk/e/n.java, line(s) 38,61,94,126
com/mbridge/msdk/e/p.java, line(s) 38
com/mbridge/msdk/e/r.java, line(s) 44,55,79,180,214,223,73,87,97,229,235,247
com/mbridge/msdk/e/w.java, line(s) 61,64,67
com/mbridge/msdk/e/y.java, line(s) 81
com/mbridge/msdk/foundation/same/b/e.java, line(s) 37
com/mbridge/msdk/foundation/same/report/b/a.java, line(s) 206
com/mbridge/msdk/foundation/same/report/i.java, line(s) 56
com/mbridge/msdk/foundation/tools/w.java, line(s) 20
com/mbridge/msdk/foundation/tools/z.java, line(s) 39,60,74,53,46,67
com/mbridge/msdk/mbnative/controller/NativeController.java, line(s) 1898
com/mbridge/msdk/mbnative/controller/b.java, line(s) 448
com/mbridge/msdk/mbnative/d/b.java, line(s) 100,115
com/mbridge/msdk/playercommon/exoplayer2/DefaultRenderersFactory.java, line(s) 92
com/mbridge/msdk/playercommon/exoplayer2/ExoPlayerImpl.java, line(s) 125,489,508
com/mbridge/msdk/playercommon/exoplayer2/ExoPlayerImplInternal.java, line(s) 617,832,1163,1168,1173,1241
com/mbridge/msdk/playercommon/exoplayer2/MediaPeriodHolder.java, line(s) 204
com/mbridge/msdk/playercommon/exoplayer2/SimpleExoPlayer.java, line(s) 294,843
com/mbridge/msdk/playercommon/exoplayer2/audio/DefaultAudioSink.java, line(s) 629,162,171,180,660
com/mbridge/msdk/playercommon/exoplayer2/drm/ClearKeyUtil.java, line(s) 43
com/mbridge/msdk/playercommon/exoplayer2/drm/DefaultDrmSession.java, line(s) 173,318
com/mbridge/msdk/playercommon/exoplayer2/drm/DefaultDrmSessionManager.java, line(s) 279
com/mbridge/msdk/playercommon/exoplayer2/extractor/mkv/MatroskaExtractor.java, line(s) 479
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp3/VbriSeeker.java, line(s) 65
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp3/XingSeeker.java, line(s) 51
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp4/FragmentedMp4Extractor.java, line(s) 274,1016
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp4/MetadataUtil.java, line(s) 169,53,64,70,191,235,247,257
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp4/PsshAtomUtil.java, line(s) 69,93
com/mbridge/msdk/playercommon/exoplayer2/extractor/mp4/TrackEncryptionBox.java, line(s) 62
com/mbridge/msdk/playercommon/exoplayer2/extractor/ogg/VorbisUtil.java, line(s) 210
com/mbridge/msdk/playercommon/exoplayer2/extractor/ts/AdtsReader.java, line(s) 113
com/mbridge/msdk/playercommon/exoplayer2/extractor/ts/H265Reader.java, line(s) 248
com/mbridge/msdk/playercommon/exoplayer2/extractor/ts/Id3Reader.java, line(s) 32
com/mbridge/msdk/playercommon/exoplayer2/extractor/ts/PesReader.java, line(s) 57,110,113
com/mbridge/msdk/playercommon/exoplayer2/extractor/wav/WavHeaderReader.java, line(s) 48
com/mbridge/msdk/playercommon/exoplayer2/mediacodec/MediaCodecInfo.java, line(s) 78,82,41
com/mbridge/msdk/playercommon/exoplayer2/mediacodec/MediaCodecRenderer.java, line(s) 594
com/mbridge/msdk/playercommon/exoplayer2/mediacodec/MediaCodecUtil.java, line(s) 361,364,487,257,266,275,282,285,316,403,408,416,425
com/mbridge/msdk/playercommon/exoplayer2/metadata/id3/Id3Decoder.java, line(s) 192,197,206,217,370
com/mbridge/msdk/playercommon/exoplayer2/offline/DownloadManager.java, line(s) 321,461
com/mbridge/msdk/playercommon/exoplayer2/offline/DownloadService.java, line(s) 146
com/mbridge/msdk/playercommon/exoplayer2/source/chunk/BaseMediaChunkOutput.java, line(s) 49
com/mbridge/msdk/playercommon/exoplayer2/source/chunk/ChunkedTrackBlacklistUtil.java, line(s) 25,27
com/mbridge/msdk/playercommon/exoplayer2/text/cea/Cea708Decoder.java, line(s) 886,450,454,458,559,736,746,786,798,821,835
com/mbridge/msdk/playercommon/exoplayer2/text/cea/CeaUtil.java, line(s) 27
com/mbridge/msdk/playercommon/exoplayer2/text/dvb/DvbParser.java, line(s) 671
com/mbridge/msdk/playercommon/exoplayer2/text/ssa/SsaDecoder.java, line(s) 50,55,60,69
com/mbridge/msdk/playercommon/exoplayer2/text/subrip/SubripDecoder.java, line(s) 44,72,75
com/mbridge/msdk/playercommon/exoplayer2/text/ttml/TtmlDecoder.java, line(s) 343,86,97,113,253,259,268,273,298,302,354
com/mbridge/msdk/playercommon/exoplayer2/text/webvtt/WebvttCue.java, line(s) 60
com/mbridge/msdk/playercommon/exoplayer2/text/webvtt/WebvttCueParser.java, line(s) 119,252,272,275,375,404
com/mbridge/msdk/playercommon/exoplayer2/upstream/DefaultDataSource.java, line(s) 81
com/mbridge/msdk/playercommon/exoplayer2/upstream/DefaultHttpDataSource.java, line(s) 79
com/mbridge/msdk/playercommon/exoplayer2/upstream/Loader.java, line(s) 122,172,184,190
com/mbridge/msdk/playercommon/exoplayer2/upstream/cache/CachedRegionTracker.java, line(s) 121
com/mbridge/msdk/playercommon/exoplayer2/upstream/cache/SimpleCache.java, line(s) 115
com/mbridge/msdk/playercommon/exoplayer2/util/AtomicFile.java, line(s) 35,93
com/mbridge/msdk/playercommon/exoplayer2/util/EventLogger.java, line(s) 133,137
com/mbridge/msdk/playercommon/exoplayer2/video/DummySurface.java, line(s) 73,79
com/mbridge/msdk/playercommon/exoplayer2/video/MediaCodecVideoRenderer.java, line(s) 855,455,461,679
com/mbridge/msdk/video/module/MBridgeBaseView.java, line(s) 186,198
com/mbridge/msdk/widget/FeedbackRadioGroup.java, line(s) 64
com/my/target/c1.java, line(s) 204,234
com/my/target/j9.java, line(s) 13,22,30,38
com/my/tracker/obfuscated/v0.java, line(s) 13,22,39,48,56
com/p/inemu/iap/Iap$tryQueryProduct$1.java, line(s) 60
com/p/inemu/iap/Iap$tryQuerySku$1.java, line(s) 60
com/p/inemu/iap/IapProduct.java, line(s) 113,128
com/p/inemu/iap/IapUtils.java, line(s) 272,288,307
com/p/inemu/perms/Perms.java, line(s) 124,133,142,151,160,169,251,278,288,298,308,318
com/p/inemu/push/Push.java, line(s) 96,141,157
com/p/inemu/remoteconfig/RemoteConfig$tryFetchAndActivate$$inlined$CoroutineExceptionHandler$1.java, line(s) 26
com/p/inemu/remoteconfig/RemoteConfig$tryFetchAndActivate$1.java, line(s) 101
com/p/inemu/ui/ExtensionsKt.java, line(s) 367
com/pgl/ssdk/ces/c.java, line(s) 23
com/unity3d/ads/UnityAdsBaseOptions.java, line(s) 22
com/unity3d/ads/metadata/MetaData.java, line(s) 39,54
com/unity3d/services/UnityServices.java, line(s) 87,137,144,149,157,163,172,181,169,178,119
com/unity3d/services/ads/UnityAdsImplementation.java, line(s) 109,81
com/unity3d/services/ads/adunit/AdUnitActivityController.java, line(s) 359,361,52,128,186,219,260,290,310,376,224
com/unity3d/services/ads/adunit/AdUnitViewHandlerFactory.java, line(s) 22
com/unity3d/services/ads/adunit/VideoPlayerHandler.java, line(s) 17,35
com/unity3d/services/ads/api/AdUnit.java, line(s) 204,210,259,262,266,269,326,329,332,335,362,111,133,156,164,340,353,365,369,409,500
com/unity3d/services/ads/api/VideoPlayer.java, line(s) 59,77,100,118,167,178
com/unity3d/services/ads/api/WebPlayer.java, line(s) 52
com/unity3d/services/ads/gmascar/adapters/ScarAdapterFactory.java, line(s) 38
com/unity3d/services/ads/gmascar/bridges/AdapterStatusBridge.java, line(s) 21,39
com/unity3d/services/ads/gmascar/bridges/InitializeListenerBridge.java, line(s) 21,40
com/unity3d/services/ads/gmascar/bridges/mobileads/MobileAdsBridge.java, line(s) 20
com/unity3d/services/ads/gmascar/bridges/mobileads/MobileAdsBridgeLegacy.java, line(s) 19
com/unity3d/services/ads/gmascar/finder/GMAInitializer.java, line(s) 53
com/unity3d/services/ads/gmascar/finder/ScarVersionFinder.java, line(s) 37,49
com/unity3d/services/ads/token/InMemoryAsyncTokenStorage.java, line(s) 145,179
com/unity3d/services/ads/token/NativeTokenGenerator.java, line(s) 41
com/unity3d/services/ads/topics/TopicsReceiver.java, line(s) 36
com/unity3d/services/ads/topics/TopicsService.java, line(s) 57
com/unity3d/services/ads/video/VideoPlayerView.java, line(s) 54,57,81,124,129,151,194,206,238
com/unity3d/services/ads/webplayer/WebPlayerView.java, line(s) 61,67,395,397,414,507,549,608,623,638,651
com/unity3d/services/banners/BannerView.java, line(s) 154
com/unity3d/services/banners/UnityBanners.java, line(s) 334
com/unity3d/services/core/api/Cache.java, line(s) 160,174,53,126,179
com/unity3d/services/core/api/DeviceInfo.java, line(s) 138,154,183,321,342,354,410
com/unity3d/services/core/api/Intent.java, line(s) 48,62,208,232,247
com/unity3d/services/core/api/Request.java, line(s) 33,45,96,108,126,138
com/unity3d/services/core/api/Sdk.java, line(s) 17,38,54,80,86,92,98
com/unity3d/services/core/broadcast/BroadcastEventReceiver.java, line(s) 36
com/unity3d/services/core/cache/CacheDirectory.java, line(s) 25,27,66,70,79,104,108,114,121,30,59,74
com/unity3d/services/core/cache/CacheThread.java, line(s) 76
com/unity3d/services/core/cache/CacheThreadHandler.java, line(s) 40,43,46,70
com/unity3d/services/core/configuration/ConfigurationReader.java, line(s) 25
com/unity3d/services/core/configuration/ConfigurationRequestFactory.java, line(s) 38
com/unity3d/services/core/configuration/EnvironmentCheck.java, line(s) 28,41,31,44,47,50,53
com/unity3d/services/core/configuration/ExperimentObject.java, line(s) 24
com/unity3d/services/core/configuration/ExperimentsReader.java, line(s) 25
com/unity3d/services/core/configuration/InitializationNotificationCenter.java, line(s) 47
com/unity3d/services/core/configuration/InitializeEventsMetricSender.java, line(s) 42,52,60,70,165,172
com/unity3d/services/core/configuration/InitializeThread.java, line(s) 279,315,441,456,500,508,608,620,646,703,126,288,291,322,325,369,389,557,594,707,858,867,197,351,450,534
com/unity3d/services/core/configuration/PrivacyConfigurationLoader.java, line(s) 63
com/unity3d/services/core/connectivity/ConnectivityMonitor.java, line(s) 56,85,95,76,125
com/unity3d/services/core/device/AdvertisingId.java, line(s) 126,144,154
com/unity3d/services/core/device/Device.java, line(s) 168,486,535,544,295
com/unity3d/services/core/device/OpenAdvertisingId.java, line(s) 128,150,157
com/unity3d/services/core/device/Storage.java, line(s) 47,51,58
com/unity3d/services/core/device/reader/DeviceInfoReaderCompressor.java, line(s) 20,33
com/unity3d/services/core/device/reader/DeviceInfoReaderExtended.java, line(s) 45
com/unity3d/services/core/domain/task/InitializeStateConfig$doWork$2.java, line(s) 53
com/unity3d/services/core/domain/task/InitializeStateCreate$doWork$2.java, line(s) 51,57,68
com/unity3d/services/core/domain/task/InitializeStateCreateWithRemote$doWork$2.java, line(s) 51,56,67
com/unity3d/services/core/domain/task/InitializeStateError$doWork$2.java, line(s) 48
com/unity3d/services/core/domain/task/InitializeStateLoadCache.java, line(s) 144
com/unity3d/services/core/domain/task/InitializeStateNetworkError$doWork$2.java, line(s) 52
com/unity3d/services/core/domain/task/InitializeStateNetworkError.java, line(s) 101,118
com/unity3d/services/core/log/DeviceLog.java, line(s) 68,212,219
com/unity3d/services/core/misc/JsonFlattener.java, line(s) 43
com/unity3d/services/core/misc/JsonStorage.java, line(s) 151,26,32,51,72,84,96,160,166
com/unity3d/services/core/misc/JsonStorageAggregator.java, line(s) 34
com/unity3d/services/core/misc/Utilities.java, line(s) 39,57,173
com/unity3d/services/core/misc/ViewUtilities.java, line(s) 25,33
com/unity3d/services/core/preferences/AndroidPreferences.java, line(s) 14,26,38,50,62
com/unity3d/services/core/properties/ClientProperties.java, line(s) 39,70,82,84
com/unity3d/services/core/properties/SdkProperties.java, line(s) 231,233,100
com/unity3d/services/core/reflection/GenericBridge.java, line(s) 32,47,56,62,70,76,84,91
com/unity3d/services/core/request/WebRequest.java, line(s) 85,178,184
com/unity3d/services/core/request/WebRequestRunnable.java, line(s) 91,76,95
com/unity3d/services/core/request/WebRequestThread.java, line(s) 63,126,140
com/unity3d/services/core/request/metrics/MetricCommonTags.java, line(s) 72
com/unity3d/services/core/request/metrics/MetricSender$sendMetrics$$inlined$CoroutineExceptionHandler$1.java, line(s) 22
com/unity3d/services/core/request/metrics/MetricSender$sendMetrics$1.java, line(s) 78,80
com/unity3d/services/core/request/metrics/MetricSender.java, line(s) 65,81,86
com/unity3d/services/core/request/metrics/MetricSenderWithBatch.java, line(s) 37
com/unity3d/services/core/request/metrics/SDKMetrics.java, line(s) 31,45,55,79,90
com/unity3d/services/core/sensorinfo/SensorInfoListener.java, line(s) 28
com/unity3d/services/core/timer/BaseTimer.java, line(s) 81
com/unity3d/services/core/webview/WebView.java, line(s) 182
com/unity3d/services/core/webview/WebViewApp.java, line(s) 58,104,216,261,305,355,65,67,69,87,151,167,195,297,327,368
com/unity3d/services/core/webview/WebViewUrlBuilder.java, line(s) 28
com/unity3d/services/core/webview/bridge/Invocation.java, line(s) 79
com/unity3d/services/core/webview/bridge/NativeCallback.java, line(s) 45
com/unity3d/services/core/webview/bridge/WebViewBridge.java, line(s) 91
com/unity3d/services/core/webview/bridge/WebViewBridgeInterface.java, line(s) 56,63
com/unity3d/services/core/webview/bridge/WebViewCallback.java, line(s) 47
com/unity3d/services/store/core/StoreLifecycleListener.java, line(s) 43
com/unity3d/services/store/gpbl/bridges/CommonJsonResponseBridge.java, line(s) 38
com/unity3d/services/store/gpbl/bridges/PurchaseBridge.java, line(s) 37
com/vungle/mediation/VungleInterstitialAdapter.java, line(s) 139,144,153,161,186,207,209,40,63,120,175,189,196,203,219,232
com/vungle/mediation/b.java, line(s) 131,144,154,170,183,204,242,68,71,97,101,343
com/vungle/mediation/d.java, line(s) 71,80,124,138,142,149,153,60,55,92,95,126,132
com/vungle/warren/AdActivity.java, line(s) 136,138,209,223,237
com/vungle/warren/AdEventListener.java, line(s) 141,97,109
com/vungle/warren/AdLoader.java, line(s) 378,465,549,731,776,797,879,1039,1255,115,341,445,453,713,1023,1055,782,1289,1301,775,1109
com/vungle/warren/AdvertisementPresentationFactory.java, line(s) 231,234,103,108,119,127,131,203,225,297,320,327,356,400,405,416,423
com/vungle/warren/Banners.java, line(s) 29,34,38,43,56,95,109
com/vungle/warren/CacheBustManager.java, line(s) 28
com/vungle/warren/NativeAd.java, line(s) 204,177,172,403
com/vungle/warren/NativeAdLayout.java, line(s) 99,116,133,139,146,156,164,183,189,201,252
com/vungle/warren/Plugin.java, line(s) 13,23
com/vungle/warren/SessionTracker.java, line(s) 120,124,102,222
com/vungle/warren/Vungle.java, line(s) 287,467,474,155,159,164,175,192,223,276,300,314,400,410,420,447,552,579,598,653,713,769,776,797,816,822,845,852,862
com/vungle/warren/VungleApiClient.java, line(s) 232,538,707,386,403,483,540,544,557,663,573,599,602,608
com/vungle/warren/VungleBanner.java, line(s) 38,46,63,98,119,126,137,157,178,180
com/vungle/warren/VungleJobRunner.java, line(s) 120
com/vungle/warren/VungleLogger.java, line(s) 41,60,95,104,49,71,82,123,134
com/vungle/warren/analytics/VungleAnalytics.java, line(s) 82,87,44,45,48,50,53,99
com/vungle/warren/downloader/AssetDownloader.java, line(s) 144,161,238,246,318,378,395,479,501,556,559,563,567,578,585,605,610,632,644,654,664,665,667,673,680,725,727,730,732,801,893,692,782,805,852,881
com/vungle/warren/downloader/CleverCache.java, line(s) 62,112,122,290,300,304,310,325,331,346,365,369,382
com/vungle/warren/log/BaseFilePersistor.java, line(s) 92,106
com/vungle/warren/log/LogManager.java, line(s) 109,114,122,127,140
com/vungle/warren/log/LogPersister.java, line(s) 99,85,115,43,76,103
com/vungle/warren/log/LogSender.java, line(s) 67,101
com/vungle/warren/model/Advertisement.java, line(s) 554
com/vungle/warren/network/OkHttpCall.java, line(s) 119,133
com/vungle/warren/persistence/CacheManager.java, line(s) 66
com/vungle/warren/persistence/FutureResult.java, line(s) 31,45,27,41,48
com/vungle/warren/persistence/GraphicDesigner.java, line(s) 32,86
com/vungle/warren/persistence/Repository.java, line(s) 89,97,103,239,466,472,517,527,932,935,296,331,542,964
com/vungle/warren/tasks/CacheBustJob.java, line(s) 45,98,117,127,192,61,133,145,159,186,195,198,157
com/vungle/warren/tasks/CleanupJob.java, line(s) 44,73,82,84,101,92,63
com/vungle/warren/tasks/JobInfo.java, line(s) 49
com/vungle/warren/tasks/SendReportsJob.java, line(s) 43,52
com/vungle/warren/tasks/runnable/JobRunnable.java, line(s) 39,48,50,56,41,60,62
com/vungle/warren/ui/JavascriptBridge.java, line(s) 23
com/vungle/warren/ui/presenter/LocalAdPresenter.java, line(s) 327,121
com/vungle/warren/ui/presenter/MRAIDAdPresenter.java, line(s) 299,518,577,640
com/vungle/warren/ui/presenter/NativeAdPresenter.java, line(s) 173,199,206,244,290,305,315
com/vungle/warren/ui/view/BaseAdView.java, line(s) 105,109
com/vungle/warren/ui/view/FullAdWidget.java, line(s) 459,304,412
com/vungle/warren/ui/view/LocalAdView.java, line(s) 165,109,94
com/vungle/warren/ui/view/NativeAdView.java, line(s) 118
com/vungle/warren/ui/view/VungleBannerView.java, line(s) 238,251,255
com/vungle/warren/ui/view/VungleWebClient.java, line(s) 135,227,266,172,173,181,182,229,57,188
com/vungle/warren/utility/ActivityManager.java, line(s) 103
com/vungle/warren/utility/CookieUtil.java, line(s) 28
com/vungle/warren/utility/ExternalRouter.java, line(s) 39,24,38
com/vungle/warren/utility/FileUtility.java, line(s) 159,170,178,290,69,72
com/vungle/warren/utility/ImageLoader.java, line(s) 40,42,59
com/vungle/warren/utility/ImpressionTracker.java, line(s) 116,121
com/vungle/warren/utility/NetworkProvider.java, line(s) 141,117
com/vungle/warren/utility/UnzipUtility.java, line(s) 136
com/vungle/warren/utility/VungleUrlUtility.java, line(s) 14
com/vungle/warren/utility/platform/AndroidPlatform.java, line(s) 62,75,99,101,105,88
com/yandex/android/beacon/SendBeaconPerWorkerLogger.java, line(s) 34,43,52,61
com/yandex/android/beacon/SendBeaconWorkerImpl.java, line(s) 112,114,132,171,174,272,311,324,336,338,349,355,358,136,140,145,211,109
com/yandex/div/core/DecodeBase64ImageTask.java, line(s) 71,77
com/yandex/div/core/DivKit.java, line(s) 106,69
com/yandex/div/core/view2/DivTransitionBuilder.java, line(s) 214,213
com/yandex/div/core/view2/DivVisibilityActionDispatcher.java, line(s) 102
com/yandex/div/core/view2/DivVisibilityActionTracker.java, line(s) 79,122,137
com/yandex/div/core/view2/divs/BaseDivViewExtensionsKt.java, line(s) 215
com/yandex/div/core/view2/divs/DivGifImageBinder.java, line(s) 118,108,117
com/yandex/div/core/view2/divs/PagerSelectedActionsDispatcher.java, line(s) 43,59
com/yandex/div/core/view2/divs/tabs/DivTabsEventManager.java, line(s) 76
com/yandex/div/core/view2/divs/widgets/DivBorderDrawer.java, line(s) 336
com/yandex/div/core/widget/GridContainer.java, line(s) 1540,1562
com/yandex/div/internal/KLog.java, line(s) 46,30,62,29,45,53,61,69,82,83,90,119,127,136,144,120,137
com/yandex/div/internal/Log.java, line(s) 11,17,23,29,35,41,55,61,67,73,79
com/yandex/div/internal/widget/tabs/BaseCardHeightCalculator.java, line(s) 36,42,111
com/yandex/div/internal/widget/tabs/BaseDivTabbedCardUi.java, line(s) 52,69,458
com/yandex/div/internal/widget/tabs/BaseIndicatorTabLayout.java, line(s) 179
com/yandex/div/json/ParsingErrorLogger.java, line(s) 22,21
com/yandex/metrica/gpllibrary/a.java, line(s) 55,64,70
com/yandex/metrica/impl/ob/B2.java, line(s) 33,29,63,67
com/yandex/metrica/impl/ob/C0324l2.java, line(s) 113
com/yandex/metrica/impl/ob/C0375n3.java, line(s) 167
com/yandex/metrica/impl/ob/C0413og.java, line(s) 72
com/yandex/metrica/impl/ob/C0562ug.java, line(s) 100
com/yandex/metrica/impl/ob/C0587vg.java, line(s) 701
com/yandex/metrica/impl/ob/C0747l2.java, line(s) 115
com/yandex/metrica/impl/ob/C0798n3.java, line(s) 170
com/yandex/metrica/impl/ob/C0836og.java, line(s) 77
com/yandex/metrica/impl/ob/C0985ug.java, line(s) 102
com/yandex/metrica/impl/ob/C1010vg.java, line(s) 731
com/yandex/mobile/ads/impl/ca.java, line(s) 119,144,147,163,270,277
com/yandex/mobile/ads/impl/cz0.java, line(s) 12
com/yandex/mobile/ads/impl/gw0.java, line(s) 11
com/yandex/mobile/ads/impl/h70.java, line(s) 23,42,56
com/yandex/mobile/ads/impl/ka0.java, line(s) 48,60,72,79
com/yandex/mobile/ads/impl/np1.java, line(s) 12
com/yandex/mobile/ads/impl/pk1.java, line(s) 9
com/yandex/mobile/ads/impl/po1.java, line(s) 70,85,150,184,218
com/yandex/mobile/ads/impl/q9.java, line(s) 45,45,59
com/yandex/mobile/ads/impl/uc1.java, line(s) 22
com/yandex/mobile/ads/impl/wp1.java, line(s) 46
com/yandex/mobile/ads/nativeads/YandexNativeAdMapper.java, line(s) 53
linc/com/amplituda/Amplituda.java, line(s) 46,126,138,143
org/greenrobot/eventbus/Logger.java, line(s) 35,40
shared/AppUtils.java, line(s) 61,63,70,75
shared/ads/admob/AdInterstitial$loadNew$1.java, line(s) 32,49
shared/ads/admob/AdInterstitial$tryShow$1.java, line(s) 41,65,87
shared/ads/admob/AdNative$loadNew$2.java, line(s) 34
shared/ads/admob/AdNativeLayout.java, line(s) 88,118
shared/ads/admob/AdRepeatable.java, line(s) 117,200
shared/ads/admob/AdmobAdapter.java, line(s) 210

信息 应用程序可以写入应用程序目录。敏感信息应加密 

应用程序可以写入应用程序目录。敏感信息应加密


Files:
com/cleveradssolutions/internal/services/zm.java, line(s) 27,27
com/fyber/fairbid/internal/c.java, line(s) 20,20
com/fyber/fairbid/sdk/session/UserSessionStorage.java, line(s) 53,53
com/fyber/offerwall/da.java, line(s) 14,14
com/fyber/offerwall/dc.java, line(s) 14,14
com/fyber/offerwall/e5.java, line(s) 24,24
com/fyber/offerwall/hh.java, line(s) 37,37
com/fyber/offerwall/o0.java, line(s) 15,15
com/fyber/offerwall/yi.java, line(s) 16,16

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/my/target/f.java, line(s) 4,103
com/yandex/div/core/view2/errors/ErrorView.java, line(s) 4,59

安全 此应用程序可能具有Root检测功能 

此应用程序可能具有Root检测功能
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
com/apm/insight/nativecrash/c.java, line(s) 468,468,468,468,468
com/yandex/metrica/impl/ob/C0473r2.java, line(s) 15
com/yandex/metrica/impl/ob/C0896r2.java, line(s) 17

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
com/inmobi/media/j9.java, line(s) 88,92
com/mbridge/msdk/thrid/okhttp/internal/Util.java, line(s) 437,436,435,435
com/yandex/mobile/ads/impl/bb1.java, line(s) 57,56,55,55
com/yandex/mobile/ads/impl/ts0.java, line(s) 127,115,126,125,125
com/yandex/mobile/ads/impl/za1.java, line(s) 16,15,14,14

安全 此应用程序具有防止窃听攻击的功能 

此应用程序具有防止窃听攻击的功能
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-for-overlay-attacks-mstg-platform-9

Files:
com/yandex/div/core/util/SafeAlertDialog.java, line(s) 27
com/yandex/div/core/util/SafeAlertDialogBuilder.java, line(s) 81
com/yandex/div/core/util/SafePopupWindow.java, line(s) 23

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (appgallery.huawei.com) 通信。 

{'ip': '121.36.119.11', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (appgallery.cloud.huawei.com) 通信。 

{'ip': '49.4.35.16', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

安全评分: ( Voice Changer 1.17.1)