小青年软件库 1.0.0版本 | 静态分析 _南明离火移动安全分析平台

安全声明：本平台专为移动应用安全风险研究与合规评估设计，严禁用于任何非法用途。如有疑问或建议，欢迎加入微信群交流。

应用图标

应用评分

文件基本信息

文件名称

xqnrjk.apk

文件大小

5.79MB

MD5

06f38016a4d2703ed537b41411c682f4

SHA1

9fbc98407561748d0a8598038222c639fbce1073

SHA256

4a8282248628bb947158c61c068c3d1ae0bfb3ca9297fd711a7949450a388efb

病毒检测

⚠️ 2 个厂商报毒⚠️

应用基础信息

应用名称

小青年软件库

包名

com.kzqoig.kkfipel

主活动

com.bslyun.app.activity.MainActivity

目标SDK

29

最小SDK

17

版本号

1.0.0

子版本号

2

加固信息

未加壳

组件导出状态统计

查看 Activity 组件

查看 Service 组件

查看 Receiver 组件

查看 Provider 组件

扫描与分析选项

重新扫描管理规则动态分析

反编译与源码导出

Manifest文件查看

APK文件成为会员，解锁下载

Java源代码查看 -- 下载

文件结构与资源列表

应用签名证书信息

二进制文件已签名
v1 签名: True
v2 签名: True
v3 签名: False
v4 签名: False
主题: C=CN, O=������������������, OU=������������������, CN=348091
签名算法: rsassa_pkcs1v15
有效期自: 2020-12-29 09:00:46+00:00
有效期至: 2119-07-24 09:00:46+00:00
发行人: C=CN, O=������������������, OU=������������������, CN=348091
序列号: 0x6a69a039
哈希算法: sha256
证书MD5: 1c1ec6a3dc73b1b57615b74db9d317eb
证书SHA1: 055d499db5b5014eef4035749390870af254642a
证书SHA256: 162bde3926f2ac3645ec3f13428c9f400a92daa0056c64b8fc7ed497f7fac362
证书SHA512: 1160029e35f33a53f58c5ce67715901216dcc3a1830936da98ac0e22cf40a5f8edb82745a5e7338d811e4ce5e718ce4228b2b49f197fc24a49118c8cc1c767ba
公钥算法: rsa
密钥长度: 2048
指纹: 4dfd8d829396b1a0061275704ecf9d8d8b6e6e1a9ab9b384ffb915975fcf3b9f
找到 1 个唯一证书

权限声明与风险分级

权限名称	安全等级	权限内容	权限描述	关联代码
android.permission.READ_PHONE_STATE	危险	读取手机状态和标识	允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号，是否正在通话，以及对方的号码等。	显示文件 com/bslyun/app/utils/j0.java com/sh/sdk/shareinstall/e/a.java
android.permission.RECEIVE_USER_PRESENT	普通	允许程序唤醒机器	允许应用可以接收点亮屏幕或解锁广播。
android.permission.WAKE_LOCK	危险	防止手机休眠	允许应用程序防止手机休眠，在手机屏幕关闭后后台进程仍然运行。	显示文件 com/bslyun/app/browser/Bridge.java com/bslyun/app/service/AudioPlayService.java com/bslyun/app/utils/j0.java com/bslyun/app/utils/p.java com/bslyun/app/video/TexureviewVideo.java
android.permission.INTERNET	危险	完全互联网访问	允许应用程序创建网络套接字。	显示文件 com/bslyun/app/service/DownloadFileExcutorService.java com/bslyun/app/service/VideoDownloadService.java com/bslyun/app/utils/f.java com/bslyun/app/utils/j0.java com/bslyun/app/utils/p.java com/sh/sdk/shareinstall/d/a/b.java com/thoughtworks/xstream/io/AbstractDriver.java com/thoughtworks/xstream/io/json/JettisonMappedXmlDriver.java com/thoughtworks/xstream/io/xml/StaxDriver.java e/h0/j/a.java e/h0/j/e.java f/k.java
android.permission.ACCESS_WIFI_STATE	普通	查看Wi-Fi状态	允许应用程序查看有关Wi-Fi状态的信息。	显示文件 com/bslyun/app/utils/j0.java com/bslyun/app/utils/p.java com/sh/sdk/shareinstall/service/CollectAppInfoService.java
android.permission.ACCESS_NETWORK_STATE	普通	获取网络状态	允许应用程序查看所有网络的状态。	显示文件 com/bslyun/app/utils/j0.java com/bslyun/app/utils/p.java com/bslyun/app/utils/s.java com/sh/sdk/shareinstall/e/a.java com/sh/sdk/shareinstall/e/e.java
android.permission.RESTART_PACKAGES	普通	重启进程	允许程序自己重启或重启其他程序
android.permission.BROADCAST_STICKY	普通	发送置顶广播	允许应用程序发送顽固广播，这些广播在结束后仍会保留。恶意应用程序可能会借此使手机耗用太多内存，从而降低其速度或稳定性。	显示文件 com/bslyun/app/activity/AboutActivity.java com/bslyun/app/activity/HtmlOpenApp.java com/bslyun/app/activity/MainActivity.java com/bslyun/app/activity/WebActivity.java com/bslyun/app/activity/X5OpenFileActivity.java com/bslyun/app/browser/Bridge.java com/bslyun/app/browser/local/LocalBrowser.java com/bslyun/app/browser/local/LocalBrowserChromeClient.java com/bslyun/app/browser/x5/X5Browser.java com/bslyun/app/browser/x5/X5BrowserChromeClient.java com/bslyun/app/component/SportStepCommponent.java com/bslyun/app/eventbus/MainActivityHook.java com/bslyun/app/eventbus/WebFragmentHook.java com/bslyun/app/fragment/WebFragment.java com/bslyun/app/fragment/e.java com/bslyun/app/g/c.java com/bslyun/app/g/d.java com/bslyun/app/service/AudioPlayService.java com/bslyun/app/service/CacheClearService.java com/bslyun/app/service/DownloadAdveService.java com/bslyun/app/service/DownloadFileExcutorService.java com/bslyun/app/service/UpdateFilterIpService.java com/bslyun/app/utils/j0.java com/bslyun/app/utils/r.java com/bslyun/app/utils/t.java com/huantansheng/easyphotos/ui/EasyPhotosActivity.java com/huantansheng/easyphotos/ui/PreviewActivity.java com/huantansheng/easyphotos/ui/PuzzleActivity.java com/huantansheng/easyphotos/ui/PuzzleSelectorActivity.java com/sh/sdk/shareinstall/a.java com/sh/sdk/shareinstall/service/PollingService.java
android.permission.WRITE_SETTINGS	危险	修改全局系统设置	允许应用程序修改系统设置方面的数据。恶意应用程序可借此破坏您的系统配置。
android.permission.READ_EXTERNAL_STORAGE	危险	读取SD卡内容	允许应用程序从SD卡读取信息。	显示文件 b/e/a/a.java com/bslyun/app/utils/j0.java com/bslyun/app/utils/p.java com/bun/miitmdid/core/JLibrary.java com/bun/miitmdid/core/Utils.java com/huantansheng/easyphotos/f/g/b.java com/thoughtworks/xstream/io/AbstractDriver.java com/thoughtworks/xstream/io/json/JettisonMappedXmlDriver.java com/thoughtworks/xstream/io/xml/StaxDriver.java com/thoughtworks/xstream/persistence/AbstractFilePersistenceStrategy.java
android.permission.WRITE_EXTERNAL_STORAGE	危险	读取/修改/删除外部存储内容	允许应用程序写入外部存储。	显示文件 com/bslyun/app/service/DownloadFileExcutorService.java com/bslyun/app/service/VideoDownloadService.java com/bslyun/app/utils/c0.java com/bslyun/app/utils/f.java com/bslyun/app/utils/g.java com/bslyun/app/utils/j0.java com/bun/miitmdid/core/Utils.java com/huantansheng/easyphotos/f/c/a.java com/thoughtworks/xstream/persistence/AbstractFilePersistenceStrategy.java d/a/a/b.java
android.permission.KILL_BACKGROUND_PROCESSES	普通	结束进程	允许应用程序结束其他应用程序的后台进程。
android.permission.READ_LOGS	危险	读取系统日志文件	允许应用程序从系统的各日志文件中读取信息。这样应用程序可以发现您的手机使用情况，这些信息还可能包含用户个人信息或保密信息，造成隐私数据泄露。
android.permission.VIBRATE	普通	控制振动器	允许应用程序控制振动器，用于消息通知振动功能。	显示文件 com/bslyun/app/eventbus/MainActivityHook.java
android.permission.CHANGE_NETWORK_STATE	危险	改变网络连通性	允许应用程序改变网络连通性。
android.permission.MODIFY_AUDIO_SETTINGS	危险	允许应用修改全局音频设置	允许应用程序修改全局音频设置，如音量。多用于消息语音功能。
android.permission.CHANGE_WIFI_STATE	危险	改变Wi-Fi状态	允许应用程序改变Wi-Fi状态。	显示文件 com/bslyun/app/utils/j0.java
android.permission.RECEIVE_BOOT_COMPLETED	普通	开机自启	允许应用程序在系统完成启动后即自行启动。这样会延长手机的启动时间，而且如果应用程序一直运行，会降低手机的整体速度。	显示文件 b/g/a/a.java com/bslyun/app/activity/MainActivity.java com/bslyun/app/fragment/WebFragment.java com/bslyun/app/utils/NetBroadcastReceiver.java
android.permission.GET_TASKS	危险	检索当前运行的应用程序	允许应用程序检索有关当前和最近运行的任务的信息。恶意应用程序可借此发现有关其他应用程序的保密信息。	显示文件 com/bslyun/app/MainApplication.java
android.permission.SET_DEBUG_APP	危险	启用应用程序调试	允许应用程序启动对其他应用程序的调试。恶意应用程序可借此终止其他应用程序。
android.permission.GET_ACCOUNTS	普通	探索已知账号	允许应用程序访问帐户服务中的帐户列表。
android.permission.USE_CREDENTIALS	危险	使用帐户的身份验证凭据	允许应用程序请求身份验证标记。
android.permission.MANAGE_ACCOUNTS	危险	管理帐户列表	允许应用程序执行添加、删除帐户及删除其密码之类的操作。
org.simalliance.openmobileapi.SMARTCARD	未知	未知权限	来自 android 引用的未知权限。
android.permission.CLEAR_APP_CACHE	危险	删除所有应用程序缓存数据	允许应用程序通过删除应用程序缓存目录中的文件释放手机存储空间。通常此权限只适用于系统进程。
android.permission.FLASHLIGHT	普通	控制闪光灯	允许应用程序控制闪光灯。
android.permission.REQUEST_INSTALL_PACKAGES	危险	允许安装应用程序	Android8.0 以上系统允许安装未知来源应用程序权限。
android.permission.FOREGROUND_SERVICE	普通	创建前台Service	Android 9.0以上允许常规应用程序使用 Service.startForeground，用于podcast播放（推送悬浮播放，锁屏播放）	显示文件 com/bslyun/app/component/SportStepCommponent.java
android.permission.CAMERA	危险	拍照和录制视频	允许应用程序拍摄照片和视频，且允许应用程序收集相机在任何时候拍到的图像。	显示文件 com/huantansheng/easyphotos/ui/EasyPhotosActivity.java
android.permission.RECORD_AUDIO	危险	获取录音权限	允许应用程序获取录音权限。
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS	普通	访问定位额外命令	访问额外位置提供程序命令，恶意应用程序可能会使用它来干扰GPS或其他位置源的操作。
android.permission.ACCESS_FINE_LOCATION	危险	获取精确位置	通过GPS芯片接收卫星的定位信息，定位精度达10米以内。恶意程序可以用它来确定您所在的位置。
android.permission.ACCESS_GPS	签名(系统)	使用GPS权限	这个权限已经被废弃，不再被系统支持。这个权限曾经用于访问GPS位置，但是现在已经被android.permission.ACCESS_FINE_LOCATION替代。
android.permission.ACCESS_ASSISTED_GPS	未知	未知权限	来自 android 引用的未知权限。
android.permission.ACCESS_COARSE_LOCATION	危险	获取粗略位置	通过WiFi或移动基站的方式获取用户错略的经纬度信息，定位精度大概误差在30~1500米。恶意程序可以用它来确定您的大概位置。
com.asus.msa.SupplementaryDID.ACCESS	普通	获取厂商oaid相关权限	获取设备标识信息oaid，在华硕设备上需要用到的权限。
android.permission.USE_FINGERPRINT	普通	允许使用指纹	此常量在 API 级别 28 中已弃用。应用程序应改为请求USE_BIOMETRIC	显示文件 com/jsyh/fingerpirnt/b/b.java
com.fingerprints.service.ACCESS_FINGERPRINT_MANAGER	未知	未知权限	来自 android 引用的未知权限。
com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY	未知	未知权限	来自 android 引用的未知权限。
android.permission.MOUNT_UNMOUNT_FILESYSTEMS	危险	装载和卸载文件系统	允许应用程序装载和卸载可移动存储器的文件系统。

证书安全合规分析

高危

0

警告

1

信息

1

标题	严重程度	描述信息
已签名应用	信息	应用程序已使用代码签名证书进行签名

Manifest 配置安全分析

高危

3

警告

5

信息

0

屏蔽

0

序号	问题	严重程度	描述信息	操作
1	应用程序可以安装在有漏洞的已更新 Android 版本上 Android 4.2-4.2.2, [minSdk=17]	信息	该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。	对应用 com.kzqoig.kkfipel 屏蔽 vulnerable_os_version 规则
2	应用程序具有网络安全配置 [android:networkSecurityConfig=@xml/network_security_config]	信息	网络安全配置功能让应用程序可以在一个安全的，声明式的配置文件中自定义他们的网络安全设置，而不需要修改应用程序代码。这些设置可以针对特定的域名和特定的应用程序进行配置。	对应用 com.kzqoig.kkfipel 屏蔽 has_network_security 规则
3	Activity (com.bslyun.app.activity.MainActivity) 的启动模式不是standard模式	高危	Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。	对应用 com.kzqoig.kkfipel 屏蔽 activity_non_standard_launchmode 规则
4	Activity (com.bslyun.app.activity.WebActivity) 未被保护。存在一个intent-filter。	警告	发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。	对应用 com.kzqoig.kkfipel 屏蔽 activity_exported_intent_filter_exists 规则
5	Activity (com.tencent.tauth.AuthActivity) 的启动模式不是standard模式	高危	Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。	对应用 com.kzqoig.kkfipel 屏蔽 activity_non_standard_launchmode 规则
6	Activity (com.tencent.tauth.AuthActivity) 未被保护。存在一个intent-filter。	警告	发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。	对应用 com.kzqoig.kkfipel 屏蔽 activity_exported_intent_filter_exists 规则
7	Activity (com.kzqoig.kkfipel.wxapi.WXEntryActivity) 未被保护。 [android:exported=true]	警告	发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.kzqoig.kkfipel 屏蔽 activity_explicitly_exported 规则
8	Activity (com.kzqoig.kkfipel.wxapi.WXPayEntryActivity) 未被保护。 [android:exported=true]	警告	发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.kzqoig.kkfipel 屏蔽 activity_explicitly_exported 规则
9	Activity (com.bslyun.app.activity.HtmlOpenApp) 未被保护。存在一个intent-filter。	警告	发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。	对应用 com.kzqoig.kkfipel 屏蔽 activity_exported_intent_filter_exists 规则
10	Activity (com.tencent.smtt.sdk.VideoActivity) 的启动模式不是standard模式	高危	Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。	对应用 com.kzqoig.kkfipel 屏蔽 activity_non_standard_launchmode 规则

可浏览 Activity 组件分析

ACTIVITY	INTENT
com.bslyun.app.activity.MainActivity	Schemes: @string/wx_app_id://, @string/shareinstall_scheme://,
com.tencent.tauth.AuthActivity	Schemes: @string/tencent://,
com.bslyun.app.activity.HtmlOpenApp	Schemes: bslapp://,

网络通信安全风险分析

高危

1

警告

0

信息

0

安全

0

序号	范围	严重级别	描述
1	*	高危	基本配置不安全地配置为允许到所有域的明文流量。

API调用分析

API功能	源码文件
一般功能-> 获取系统服务(getSystemService)	显示文件 b/d/a/c.java com/bslyun/app/MainApplication.java com/bslyun/app/browser/Bridge.java com/bslyun/app/eventbus/MainActivityHook.java com/bslyun/app/eventbus/WebFragmentHook.java com/bslyun/app/fragment/WebFragment.java com/bslyun/app/service/AudioPlayService.java com/bslyun/app/utils/i0.java com/bslyun/app/utils/j0.java com/bslyun/app/utils/p.java com/bslyun/app/utils/s.java com/bslyun/app/utils/u.java com/davemorrissey/labs/subscaleview/decoder/SkiaPooledImageRegionDecoder.java com/huantansheng/easyphotos/models/sticker/view/EditFragment.java com/jsyh/fingerpirnt/b/b.java com/sh/sdk/shareinstall/e/a.java com/sh/sdk/shareinstall/e/d.java com/sh/sdk/shareinstall/e/e.java com/sh/sdk/shareinstall/e/h.java com/sh/sdk/shareinstall/service/CollectAppInfoService.java me/yokeyword/swipebackfragment/SwipeBackLayout.java
进程操作-> 获取运行的进程\服务	com/bslyun/app/MainApplication.java com/bslyun/app/utils/j0.java
调用java反射机制	显示文件 com/bslyun/app/banner/BGAViewPager.java com/bslyun/app/component/PushComponent.java com/bslyun/app/component/SportStepCommponent.java com/bslyun/app/component/WeiboComponent.java com/bslyun/app/component/ai/BaiduAIComponent.java com/bslyun/app/component/ai/FaceComponent.java com/bslyun/app/component/ai/SpeechRecogComponent.java com/bslyun/app/component/alibc/AliBCComponent.java com/bslyun/app/component/csj/CsjAdCommponent.java com/bslyun/app/component/lebo/LeboComponent.java com/bslyun/app/component/linkpage/LinkpageComponent.java com/bslyun/app/component/live/ZBCommponent.java com/bslyun/app/component/mt/StatServiceMt.java com/bslyun/app/component/pay/alipay/ALPay.java com/bslyun/app/component/qq/TencentComponent.java com/bslyun/app/component/qrcode/QRCodeComponent.java com/bslyun/app/component/quicklogin/QuickLoginComponent.java com/bslyun/app/component/wx/WechatComponent.java com/bslyun/app/component/ylh/TxAdCommponent.java com/bslyun/app/utils/b0.java com/bslyun/app/utils/j0.java com/bslyun/app/utils/s.java com/bslyun/app/utils/x.java com/bun/miitmdid/c/k/a.java com/bun/miitmdid/core/JLibrary.java com/bun/miitmdid/core/MdidSdkHelper.java com/bun/miitmdid/core/Utils.java com/fingerprints/service/FingerprintManager.java com/flyco/systembar/a.java com/huantansheng/easyphotos/f/g/a.java com/huantansheng/easyphotos/f/g/b.java com/samsung/android/sdk/pass/Spass.java com/samsung/android/sdk/pass/SpassFingerprint.java com/samsung/android/sdk/pass/support/SdkSupporter.java com/samsung/android/sdk/pass/support/v1/FingerprintManagerProxyFactory.java com/scwang/smartrefresh/layout/c/a.java com/thoughtworks/xstream/XStream.java com/thoughtworks/xstream/annotations/AnnotationProvider.java com/thoughtworks/xstream/annotations/AnnotationReflectionConverter.java com/thoughtworks/xstream/converters/collections/PropertiesConverter.java com/thoughtworks/xstream/converters/collections/TreeMapConverter.java com/thoughtworks/xstream/converters/collections/TreeSetConverter.java com/thoughtworks/xstream/converters/enums/EnumMapConverter.java com/thoughtworks/xstream/converters/enums/EnumSetConverter.java com/thoughtworks/xstream/converters/extended/DynamicProxyConverter.java com/thoughtworks/xstream/converters/extended/JavaFieldConverter.java com/thoughtworks/xstream/converters/extended/JavaMethodConverter.java com/thoughtworks/xstream/converters/extended/StackTraceElementFactory.java com/thoughtworks/xstream/converters/extended/ToAttributedValueConverter.java com/thoughtworks/xstream/converters/extended/UseAttributeForEnumMapper.java com/thoughtworks/xstream/converters/javabean/BeanProperty.java com/thoughtworks/xstream/converters/javabean/BeanProvider.java com/thoughtworks/xstream/converters/reflection/AbstractAttributedCharacterIteratorAttributeConverter.java com/thoughtworks/xstream/converters/reflection/AbstractReflectionConverter.java com/thoughtworks/xstream/converters/reflection/CGLIBEnhancedConverter.java com/thoughtworks/xstream/converters/reflection/FieldDictionary.java com/thoughtworks/xstream/converters/reflection/PureJavaReflectionProvider.java com/thoughtworks/xstream/converters/reflection/ReflectionProvider.java com/thoughtworks/xstream/converters/reflection/ReflectionProviderWrapper.java com/thoughtworks/xstream/converters/reflection/SerializableConverter.java com/thoughtworks/xstream/converters/reflection/SerializationMethodInvoker.java com/thoughtworks/xstream/converters/reflection/SunLimitedUnsafeReflectionProvider.java com/thoughtworks/xstream/converters/reflection/SunUnsafeReflectionProvider.java com/thoughtworks/xstream/core/JVM.java com/thoughtworks/xstream/core/util/CompositeClassLoader.java com/thoughtworks/xstream/core/util/CustomObjectInputStream.java com/thoughtworks/xstream/core/util/Fields.java com/thoughtworks/xstream/io/xml/SjsxpDriver.java com/thoughtworks/xstream/io/xml/XppReader.java com/thoughtworks/xstream/mapper/AnnotationMapper.java com/thoughtworks/xstream/mapper/AttributeMapper.java com/thoughtworks/xstream/mapper/DefaultMapper.java com/thoughtworks/xstream/mapper/ImplicitCollectionMapper.java e/h0/f/e.java e/h0/j/a.java e/h0/j/b.java e/h0/j/c.java e/h0/j/d.java e/h0/k/e.java g/a/a/i/a.java h/j.java h/m.java h/n.java me/yokeyword/swipebackfragment/SwipeBackLayout.java org/greenrobot/eventbus/g.java org/greenrobot/eventbus/o.java org/greenrobot/eventbus/p.java
组件-> 启动 Activity	显示文件 com/bslyun/app/activity/BaseActivity.java com/bslyun/app/activity/HtmlOpenApp.java com/bslyun/app/activity/MainActivity.java com/bslyun/app/activity/SplashActivity.java com/bslyun/app/activity/WebActivity.java com/bslyun/app/browser/ActivityResult.java com/bslyun/app/browser/Bridge.java com/bslyun/app/browser/WebViewUtils.java com/bslyun/app/browser/local/LocalBrowserChromeClient.java com/bslyun/app/browser/local/LocalBrowserClient.java com/bslyun/app/browser/x5/X5BrowserChromeClient.java com/bslyun/app/browser/x5/X5BrowserClient.java com/bslyun/app/component/ai/BaiduAIComponent.java com/bslyun/app/component/lebo/LeboComponent.java com/bslyun/app/eventbus/MainActivityHook.java com/bslyun/app/eventbus/WebFragmentHook.java com/bslyun/app/f/a.java com/bslyun/app/f/b.java com/bslyun/app/fragment/WebFragment.java com/bslyun/app/fragment/e.java com/bslyun/app/fragment/g.java com/bslyun/app/g/d.java com/bslyun/app/utils/i0.java com/bslyun/app/utils/j0.java com/bslyun/app/utils/r.java com/bslyun/app/utils/t.java com/bslyun/app/utils/x.java com/bslyun/app/utils/y.java com/huantansheng/easyphotos/f/f/a.java com/huantansheng/easyphotos/ui/EasyPhotosActivity.java com/huantansheng/easyphotos/ui/PreviewActivity.java com/huantansheng/easyphotos/ui/PuzzleActivity.java com/huantansheng/easyphotos/ui/PuzzleSelectorActivity.java com/huantansheng/easyphotos/ui/a/c.java com/sh/sdk/shareinstall/e/a.java
一般功能-> 文件操作	显示文件 b/c/a/j/g.java b/e/a/a.java com/bslyun/app/MainApplication.java com/bslyun/app/activity/FileSelectActivity.java com/bslyun/app/activity/MainActivity.java com/bslyun/app/activity/SplashActivity.java com/bslyun/app/activity/WebActivity.java com/bslyun/app/activity/X5OpenFileActivity.java com/bslyun/app/browser/Bridge.java com/bslyun/app/browser/WebViewUtils.java com/bslyun/app/browser/local/LocalBrowserChromeClient.java com/bslyun/app/browser/local/LocalBrowserClient.java com/bslyun/app/browser/x5/X5BrowserChromeClient.java com/bslyun/app/browser/x5/X5BrowserClient.java com/bslyun/app/eventbus/MainActivityHook.java com/bslyun/app/f/f.java com/bslyun/app/fragment/WebFragment.java com/bslyun/app/fragment/g.java com/bslyun/app/g/d.java com/bslyun/app/modes/AdveMode.java com/bslyun/app/modes/BottomMenu.java com/bslyun/app/modes/EventBusMessage.java com/bslyun/app/modes/NavMenuConfig.java com/bslyun/app/modes/RecordModel.java com/bslyun/app/modes/Threeparty.java com/bslyun/app/service/AudioPlayService.java com/bslyun/app/service/CacheClearService.java com/bslyun/app/service/DownloadAdveService.java com/bslyun/app/service/DownloadFileExcutorService.java com/bslyun/app/service/VideoDownloadService.java com/bslyun/app/uiconfig/e.java com/bslyun/app/uiconfig/h.java com/bslyun/app/utils/a.java com/bslyun/app/utils/b0.java com/bslyun/app/utils/c0.java com/bslyun/app/utils/f.java com/bslyun/app/utils/g.java com/bslyun/app/utils/i.java com/bslyun/app/utils/i0.java com/bslyun/app/utils/j0.java com/bslyun/app/utils/k0.java com/bslyun/app/utils/l.java com/bslyun/app/utils/p.java com/bslyun/app/utils/v.java com/bslyun/app/utils/w.java com/bslyun/app/video/TexureviewVideo.java com/bun/miitmdid/core/JLibrary.java com/bun/miitmdid/core/Utils.java com/bun/miitmdid/core/ZipUtils.java com/davemorrissey/labs/subscaleview/ImageSource.java com/davemorrissey/labs/subscaleview/ImageViewState.java com/davemorrissey/labs/subscaleview/decoder/SkiaImageDecoder.java com/davemorrissey/labs/subscaleview/decoder/SkiaImageRegionDecoder.java com/davemorrissey/labs/subscaleview/decoder/SkiaPooledImageRegionDecoder.java com/huantansheng/easyphotos/b.java com/huantansheng/easyphotos/f/c/a.java com/huantansheng/easyphotos/f/c/b.java com/huantansheng/easyphotos/f/d/b.java com/huantansheng/easyphotos/f/g/b.java com/huantansheng/easyphotos/f/h/a.java com/huantansheng/easyphotos/models/album/AlbumModel.java com/huantansheng/easyphotos/ui/EasyPhotosActivity.java com/huantansheng/easyphotos/ui/PuzzleActivity.java com/scwang/smartrefresh/layout/header/ClassicsHeader.java com/sh/sdk/shareinstall/d/a/a.java com/sh/sdk/shareinstall/d/a/b.java com/sh/sdk/shareinstall/d/a/c.java com/sh/sdk/shareinstall/e/c.java com/sh/sdk/shareinstall/helper/s/c.java com/sh/sdk/shareinstall/helper/s/d.java com/sh/sdk/shareinstall/helper/s/e.java com/sh/sdk/shareinstall/helper/t.java com/thoughtworks/xstream/XStream.java com/thoughtworks/xstream/XStreamer.java com/thoughtworks/xstream/converters/extended/FileConverter.java com/thoughtworks/xstream/converters/reflection/ExternalizableConverter.java com/thoughtworks/xstream/converters/reflection/PureJavaReflectionProvider.java com/thoughtworks/xstream/converters/reflection/SerializableConverter.java com/thoughtworks/xstream/converters/reflection/SerializationMethodInvoker.java com/thoughtworks/xstream/core/JVM.java com/thoughtworks/xstream/core/util/Base64Encoder.java com/thoughtworks/xstream/core/util/CustomObjectInputStream.java com/thoughtworks/xstream/core/util/CustomObjectOutputStream.java com/thoughtworks/xstream/core/util/QuickWriter.java com/thoughtworks/xstream/core/util/XmlHeaderAwareReader.java com/thoughtworks/xstream/io/AbstractDriver.java com/thoughtworks/xstream/io/HierarchicalStreamDriver.java com/thoughtworks/xstream/io/StatefulWriter.java com/thoughtworks/xstream/io/binary/BinaryStreamDriver.java com/thoughtworks/xstream/io/binary/BinaryStreamReader.java com/thoughtworks/xstream/io/binary/BinaryStreamWriter.java com/thoughtworks/xstream/io/binary/Token.java com/thoughtworks/xstream/io/json/AbstractJsonWriter.java com/thoughtworks/xstream/io/json/JettisonMappedXmlDriver.java com/thoughtworks/xstream/io/json/JsonHierarchicalStreamDriver.java com/thoughtworks/xstream/io/json/JsonHierarchicalStreamWriter.java com/thoughtworks/xstream/io/json/JsonWriter.java com/thoughtworks/xstream/io/xml/AbstractXppDomDriver.java com/thoughtworks/xstream/io/xml/AbstractXppDriver.java com/thoughtworks/xstream/io/xml/CompactWriter.java com/thoughtworks/xstream/io/xml/Dom4JDriver.java com/thoughtworks/xstream/io/xml/Dom4JXmlWriter.java com/thoughtworks/xstream/io/xml/DomDriver.java com/thoughtworks/xstream/io/xml/JDom2Driver.java com/thoughtworks/xstream/io/xml/JDomDriver.java com/thoughtworks/xstream/io/xml/PrettyPrintWriter.java com/thoughtworks/xstream/io/xml/StaxDriver.java com/thoughtworks/xstream/io/xml/XomDriver.java com/thoughtworks/xstream/io/xml/XppReader.java com/thoughtworks/xstream/io/xml/xppdom/Xpp3DomBuilder.java com/thoughtworks/xstream/io/xml/xppdom/XppDom.java com/thoughtworks/xstream/io/xml/xppdom/XppFactory.java com/thoughtworks/xstream/mapper/AnnotationMapper.java com/thoughtworks/xstream/mapper/PackageAliasingMapper.java com/thoughtworks/xstream/persistence/AbstractFilePersistenceStrategy.java com/thoughtworks/xstream/persistence/FilePersistenceStrategy.java com/thoughtworks/xstream/persistence/FileStreamStrategy.java d/a/a/a.java d/a/a/b.java e/b.java e/b0.java e/c.java e/c0.java e/d0.java e/e.java e/f.java e/h0/c.java e/h0/e/a.java e/h0/e/b.java e/h0/e/d.java e/h0/f/a.java e/h0/f/b.java e/h0/f/c.java e/h0/f/e.java e/h0/f/f.java e/h0/f/g.java e/h0/g/a.java e/h0/g/b.java e/h0/g/c.java e/h0/g/g.java e/h0/g/j.java e/h0/g/k.java e/h0/h/a.java e/h0/i/a.java e/h0/i/d.java e/h0/i/e.java e/h0/i/f.java e/h0/i/g.java e/h0/i/h.java e/h0/i/i.java e/h0/i/j.java e/h0/i/k.java e/h0/i/m.java e/h0/i/o.java e/h0/j/a.java e/h0/j/e.java e/i0/a.java e/q.java e/u.java e/w.java e/y.java e/z.java f/a.java f/b.java f/c.java f/d.java f/e.java f/f.java f/g.java f/h.java f/i.java f/j.java f/k.java f/l.java f/m.java f/q.java f/r.java f/s.java h/a.java h/b.java h/e.java h/g.java h/h.java h/i.java h/k.java h/n.java h/o.java h/p/a/b.java h/p/a/c.java
一般功能-> IPC通信	显示文件 a/a/a/a/a.java b/g/a/a.java com/bslyun/app/activity/BaseActivity.java com/bslyun/app/activity/HtmlOpenApp.java com/bslyun/app/activity/MainActivity.java com/bslyun/app/activity/SplashActivity.java com/bslyun/app/activity/ThirdpartyActivity.java com/bslyun/app/activity/ViewPagerActivity.java com/bslyun/app/activity/WebActivity.java com/bslyun/app/activity/X5OpenFileActivity.java com/bslyun/app/browser/ActivityResult.java com/bslyun/app/browser/Bridge.java com/bslyun/app/browser/WebViewUtils.java com/bslyun/app/browser/local/LocalBrowserChromeClient.java com/bslyun/app/browser/local/LocalBrowserClient.java com/bslyun/app/browser/x5/X5BrowserChromeClient.java com/bslyun/app/browser/x5/X5BrowserClient.java com/bslyun/app/component/SportStepCommponent.java com/bslyun/app/component/WeiboComponent.java com/bslyun/app/component/ai/BaiduAIComponent.java com/bslyun/app/component/lebo/LeboComponent.java com/bslyun/app/component/pay/alipay/ALPay.java com/bslyun/app/component/qq/TencentComponent.java com/bslyun/app/d/a.java com/bslyun/app/eventbus/ContainerEventBus.java com/bslyun/app/eventbus/HookLifecycle.java com/bslyun/app/eventbus/MainActivityHook.java com/bslyun/app/eventbus/WebFragmentHook.java com/bslyun/app/f/a.java com/bslyun/app/f/b.java com/bslyun/app/fragment/WebFragment.java com/bslyun/app/fragment/c.java com/bslyun/app/fragment/e.java com/bslyun/app/fragment/g.java com/bslyun/app/g/d.java com/bslyun/app/service/AudioPlayService.java com/bslyun/app/service/CacheClearService.java com/bslyun/app/service/DownloadAdveService.java com/bslyun/app/service/DownloadFileExcutorService.java com/bslyun/app/service/UpdateFilterIpService.java com/bslyun/app/service/VideoDownloadService.java com/bslyun/app/utils/NetBroadcastReceiver.java com/bslyun/app/utils/c.java com/bslyun/app/utils/i0.java com/bslyun/app/utils/j0.java com/bslyun/app/utils/l.java com/bslyun/app/utils/r.java com/bslyun/app/utils/t.java com/bslyun/app/utils/u.java com/bslyun/app/utils/w.java com/bslyun/app/utils/x.java com/bslyun/app/utils/y.java com/bun/lib/c.java com/bun/miitmdid/c/b/a.java com/bun/miitmdid/c/g/a.java com/bun/miitmdid/supplier/msa/MsaClient.java com/bun/miitmdid/supplier/sumsung/SumsungCore.java com/fingerprints/service/FingerprintManager.java com/fingerprints/service/IFingerprintClient.java com/fingerprints/service/IFingerprintService.java com/huantansheng/easyphotos/f/f/a.java com/huantansheng/easyphotos/ui/EasyPhotosActivity.java com/huantansheng/easyphotos/ui/PreviewActivity.java com/huantansheng/easyphotos/ui/PuzzleActivity.java com/huantansheng/easyphotos/ui/PuzzleSelectorActivity.java com/huantansheng/easyphotos/ui/a/c.java com/samsung/android/sdk/pass/Spass.java com/samsung/android/sdk/pass/SpassFingerprint.java com/samsung/android/sdk/pass/support/IFingerprintManagerProxy.java com/sh/sdk/shareinstall/a.java com/sh/sdk/shareinstall/e/a.java com/sh/sdk/shareinstall/helper/h.java com/sh/sdk/shareinstall/helper/o.java com/sh/sdk/shareinstall/service/CollectAppInfoService.java com/sh/sdk/shareinstall/service/PollingService.java
网络通信-> HTTP建立连接	显示文件 com/bslyun/app/service/DownloadFileExcutorService.java com/bslyun/app/service/VideoDownloadService.java com/bslyun/app/utils/f.java com/bslyun/app/utils/j0.java com/sh/sdk/shareinstall/d/a/b.java
命令执行-> getRuntime.exec()	显示文件 com/bslyun/app/utils/j0.java com/bslyun/app/utils/p.java com/bun/miitmdid/core/Utils.java com/huantansheng/easyphotos/f/g/b.java
设备指纹-> 查看本机IMSI	com/bslyun/app/utils/j0.java
设备指纹-> 查看本机SIM卡序列号	com/bslyun/app/utils/j0.java
设备指纹-> getSimOperator	com/bslyun/app/utils/j0.java
设备指纹-> 查看运营商信息	com/bslyun/app/utils/j0.java
一般功能-> 查询数据库(短信、联系人、通话记录、浏览器历史等)	com/bslyun/app/utils/j0.java
隐私数据-> 剪贴板数据读写操作	com/bslyun/app/browser/Bridge.java com/bslyun/app/utils/j0.java com/sh/sdk/shareinstall/e/d.java
加密解密-> Base64 加密	com/bslyun/app/utils/b0.java com/bslyun/app/utils/j0.java com/sh/sdk/shareinstall/service/CollectAppInfoService.java
加密解密-> Base64 解密	显示文件 com/bslyun/app/utils/b0.java com/bslyun/app/utils/c0.java com/bslyun/app/utils/h.java com/bslyun/app/utils/j0.java com/sh/sdk/shareinstall/e/d.java
加密解密-> 信息摘要算法	com/bslyun/app/utils/j0.java f/f.java
隐私数据-> 获取已安装的应用程序	显示文件 com/bslyun/app/browser/WebViewUtils.java com/bslyun/app/f/b.java com/bslyun/app/utils/j0.java com/sh/sdk/shareinstall/e/a.java
一般功能-> 获取WiFi相关信息	com/bslyun/app/utils/j0.java com/bslyun/app/utils/p.java com/sh/sdk/shareinstall/service/CollectAppInfoService.java
一般功能-> 设置手机铃声，媒体音量	com/bslyun/app/browser/Bridge.java com/bslyun/app/utils/j0.java
隐私数据-> 屏幕截图，截取自己应用内部界面	com/bslyun/app/utils/j0.java
一般功能-> 查看\修改Android系统属性	com/bslyun/app/utils/j0.java
隐私数据-> 屏幕截图，截取自己应用内部界面	com/davemorrissey/labs/subscaleview/SubsamplingScaleImageView.java com/huantansheng/easyphotos/models/sticker/view/TextSticker.java
DEX-> 动态加载	com/thoughtworks/xstream/core/util/ClassLoaderReference.java com/thoughtworks/xstream/core/util/CompositeClassLoader.java
网络通信-> TCP套接字	显示文件 com/bslyun/app/utils/p.java com/sh/sdk/shareinstall/e/e.java e/a.java e/h0/a.java e/h0/c.java e/h0/f/c.java e/h0/f/f.java e/h0/f/g.java e/h0/g/j.java e/h0/i/g.java e/h0/i/i.java e/h0/j/a.java e/h0/j/e.java e/j.java e/x.java f/k.java
组件-> 启动 Service	显示文件 com/bslyun/app/activity/SplashActivity.java com/bslyun/app/component/SportStepCommponent.java com/bslyun/app/eventbus/MainActivityHook.java com/bslyun/app/fragment/g.java com/bslyun/app/service/DownloadAdveService.java com/bslyun/app/service/VideoDownloadService.java com/bun/miitmdid/c/g/a.java com/bun/miitmdid/supplier/sumsung/SumsungCore.java com/sh/sdk/shareinstall/a.java com/sh/sdk/shareinstall/helper/o.java
网络通信-> SSL证书处理	e/a.java e/h0/g/j.java e/x.java
一般功能-> 获取网络接口信息	com/bslyun/app/utils/p.java com/sh/sdk/shareinstall/e/e.java
网络通信-> WebView JavaScript接口	com/bslyun/app/browser/local/LocalBrowser.java com/sh/sdk/shareinstall/helper/GetWebGLInfo.java
JavaScript 接口方法	显示文件 com/bslyun/app/activity/WebActivity.java com/bslyun/app/browser/Bridge.java com/bslyun/app/browser/WebJsToNative.java com/bslyun/app/browser/local/LocalBrowser.java com/sh/sdk/shareinstall/helper/GetWebGLInfo.java
网络通信-> WebView使用File协议	com/bslyun/app/browser/local/LocalBrowser.java com/bslyun/app/browser/x5/X5Browser.java
网络通信-> WebView 相关	显示文件 com/bslyun/app/activity/WebActivity.java com/bslyun/app/browser/WebViewUtils.java com/bslyun/app/browser/local/LocalBrowser.java com/bslyun/app/browser/local/LocalBrowserClient.java com/bslyun/app/fragment/WebFragment.java com/sh/sdk/shareinstall/helper/GetWebGLInfo.java
组件-> 发送广播	显示文件 com/bslyun/app/activity/WebActivity.java com/bslyun/app/browser/x5/X5BrowserChromeClient.java com/bslyun/app/component/SportStepCommponent.java com/bslyun/app/utils/l.java com/samsung/android/sdk/pass/Spass.java com/samsung/android/sdk/pass/SpassFingerprint.java
一般功能-> Android通知	com/bslyun/app/utils/i0.java com/bslyun/app/utils/u.java
隐私数据-> 读写通讯录	com/bslyun/app/utils/c.java
进程操作-> 获取进程pid	com/bslyun/app/MainApplication.java
一般功能-> 获取活动网路信息	com/bslyun/app/utils/s.java com/sh/sdk/shareinstall/e/e.java
一般功能-> 传感器相关操作	com/bslyun/app/eventbus/WebFragmentHook.java
加密解密-> Crypto加解密组件	com/bslyun/app/utils/h.java com/jsyh/fingerpirnt/b/a.java com/jsyh/fingerpirnt/b/b.java
进程操作-> 杀死进程	com/bslyun/app/activity/MainActivity.java com/bslyun/app/browser/Bridge.java
一般功能-> 加载so文件	com/bun/miitmdid/core/JLibrary.java

安全漏洞检测

高危

3

警告

6

信息

2

安全

1

屏蔽

0

序号	问题	等级	参考标准	文件位置	操作
1	应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据	警告	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	升级会员：解锁高级权限	对应用 com.kzqoig.kkfipel 屏蔽 android_read_write_external 规则仅对这些文件屏蔽 android_read_write_external 规则
2	此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它	信息	OWASP MASVS: MSTG-STORAGE-10	升级会员：解锁高级权限	对应用 com.kzqoig.kkfipel 屏蔽 android_clipboard_copy 规则仅对这些文件屏蔽 android_clipboard_copy 规则
3	MD5是已知存在哈希冲突的弱哈希	警告	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4	升级会员：解锁高级权限	对应用 com.kzqoig.kkfipel 屏蔽 android_md5 规则仅对这些文件屏蔽 android_md5 规则
4	应用程序使用不安全的随机数生成器	警告	CWE: CWE-330: 使用不充分的随机数 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-6	升级会员：解锁高级权限	对应用 com.kzqoig.kkfipel 屏蔽 android_insecure_random 规则仅对这些文件屏蔽 android_insecure_random 规则
5	不安全的Web视图实现。可能存在WebView任意代码执行漏洞	警告	CWE: CWE-749: 暴露危险方法或函数 OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-PLATFORM-7	升级会员：解锁高级权限	对应用 com.kzqoig.kkfipel 屏蔽 android_webview 规则仅对这些文件屏蔽 android_webview 规则
6	已启用远程WebView调试	高危	CWE: CWE-919: 移动应用程序中的弱点 OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-RESILIENCE-2	升级会员：解锁高级权限	对应用 com.kzqoig.kkfipel 屏蔽 android_webview_debug 规则仅对这些文件屏蔽 android_webview_debug 规则
7	WebView域控制不严格漏洞	高危	CWE: CWE-73: 外部控制文件名或路径	升级会员：解锁高级权限	对应用 com.kzqoig.kkfipel 屏蔽 android_webview_domain_control_week 规则仅对这些文件屏蔽 android_webview_domain_control_week 规则
8	应用程序记录日志信息,不得记录敏感信息	信息	CWE: CWE-532: 通过日志文件的信息暴露 OWASP MASVS: MSTG-STORAGE-3	升级会员：解锁高级权限	对应用 com.kzqoig.kkfipel 屏蔽 android_logging 规则仅对这些文件屏蔽 android_logging 规则
9	此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击	安全	OWASP MASVS: MSTG-NETWORK-4	升级会员：解锁高级权限	对应用 com.kzqoig.kkfipel 屏蔽 android_ssl_pinning 规则仅对这些文件屏蔽 android_ssl_pinning 规则
10	应用程序创建临时文件。敏感信息永远不应该被写进临时文件	警告	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	升级会员：解锁高级权限	对应用 com.kzqoig.kkfipel 屏蔽 android_temp_file 规则仅对这些文件屏蔽 android_temp_file 规则
11	应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库	警告	CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当（'SQL 注入'） OWASP Top 10: M7: Client Code Quality	升级会员：解锁高级权限	对应用 com.kzqoig.kkfipel 屏蔽 android_sql_raw_query 规则仅对这些文件屏蔽 android_sql_raw_query 规则
12	不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击	高危	CWE: CWE-295: 证书验证不恰当 OWASP Top 10: M3: Insecure Communication OWASP MASVS: MSTG-NETWORK-3	升级会员：解锁高级权限	对应用 com.kzqoig.kkfipel 屏蔽 android_webview_ignore_ssl 规则仅对这些文件屏蔽 android_webview_ignore_ssl 规则

Native库安全分析

No Shared Objects found.

序号	动态库	NX(堆栈禁止执行)	PIE	STACK CANARY(栈保护)	RELRO	RPATH（指定SO搜索路径）	RUNPATH（指定SO搜索路径）	FORTIFY(常用函数加强检查)	SYMBOLS STRIPPED(裁剪符号表)

文件分析

序号	问题	文件

敏感权限分析

恶意软件常用权限 13/30

android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.VIBRATE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.GET_TASKS
android.permission.GET_ACCOUNTS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.CAMERA
android.permission.RECORD_AUDIO
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION

其它常用权限 11/46

android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.BROADCAST_STICKY
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.FLASHLIGHT
android.permission.FOREGROUND_SERVICE
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。

IP地理位置

恶意域名检测

域名	状态	中国境内	位置信息
statlog.shareinstall.com.cn	安全	是	IP地址: 49.86.42.71 国家: 中国地区: 北京城市: 北京查看: 高德地图
config.shareinstall.com.cn	安全	是	IP地址: 49.86.42.71 国家: 中国地区: 北京城市: 北京查看: 高德地图
api.weibo.com	安全	是	IP地址: 101.226.137.106 国家: 中国地区: 北京城市: 北京查看: 高德地图
pv.sohu.com	安全	是	IP地址: 101.226.137.106 国家: 中国地区: 江苏城市: 台州查看: 高德地图
com.thoughtworks.xstream	安全	否	没有可用的地理位置信息。
check.shareinstall.com.cn	安全	是	IP地址: 101.226.137.106 国家: 中国地区: 北京城市: 北京查看: 高德地图
auth.appbsl.com	安全	否	没有可用的地理位置信息。
adv.ppf.kim	安全	否	没有可用的地理位置信息。
astat.bugly.qcloud.com	安全	否	IP地址: 119.28.121.133 国家: 新加坡地区: 新加坡城市: 新加坡查看: Google 地图
astat.bugly.cros.wr.pvp.net	安全	否	IP地址: 170.106.118.26 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
my.wlwx.com	安全	是	IP地址: 101.226.137.106 国家: 中国地区: 广东城市: 深圳查看: 高德地图
iploc.market.alicloudapi.com	安全	是	IP地址: 101.226.137.106 国家: 中国地区: 广东城市: 深圳查看: 高德地图
www.appk6.com	安全	否	IP地址: 134.122.136.44 国家: 日本地区: 东京城市: 东京查看: Google 地图
wx.tenpay.com	安全	是	IP地址: 101.226.137.106 国家: 中国地区: 上海城市: 上海查看: 高德地图
interface.shareinstall.com.cn	安全	是	IP地址: 106.75.20.108 国家: 中国地区: 上海城市: 上海查看: 高德地图
maplbs-40171.sh.gfp.tencent-cloud.com	安全	是	IP地址: 49.86.42.71 国家: 中国地区: 江苏城市: 扬州查看: 高德地图
adblocker.appbsl.net	安全	否	没有可用的地理位置信息。

手机号提取

URL链接分析

URL信息	源码文件
https://config.shareinstall.com.cn/signal/config	com/sh/sdk/shareinstall/d/a/b.java
https://api.weibo.com/2/users/	com/bslyun/app/component/WeiboComponent.java
https://adblocker.appbsl.net/index.php?g=port&m=unionadvblock&a=get	com/bslyun/app/service/UpdateFilterIpService.java
http://pv.sohu.com/cityjson?ie=utf-8	com/sh/sdk/shareinstall/helper/i.java
https://interface.shareinstall.com.cn/hike/exce	com/sh/sdk/shareinstall/helper/o.java
https://statlog.shareinstall.com.cn/shareinstall_log/install	com/sh/sdk/shareinstall/helper/k.java
https://statlog.shareinstall.com.cn/shareinstall_log/register	com/sh/sdk/shareinstall/helper/p.java
http://auth.appbsl.com/index.php/app/sms/send_sms_code http://auth.appbsl.com/index.php/app/api/record http://auth.appbsl.com http://my.wlwx.com:6006 http://auth.appbsl.com/index.php/app/sms/check_code	com/bslyun/app/component/quicklogin/QuickLoginComponent.java
https://statlog.shareinstall.com.cn/shareinstall_log/si	com/sh/sdk/shareinstall/helper/l.java
https://statlog.shareinstall.com.cn/shareinstall_log/online	com/sh/sdk/shareinstall/helper/n.java
javascript:todayopenappnumber	com/bslyun/app/activity/MainActivity.java
http://iploc.market.alicloudapi.com/v3/ip	com/sh/sdk/shareinstall/helper/g.java
http://www.appk6.com	com/bslyun/app/MainApplication.java
https://wx.tenpay.com/	com/bslyun/app/browser/WebViewUtils.java
javascript:location.href='	com/bslyun/app/browser/Bridge.java
http://com.thoughtworks.xstream/xstreamsource/feature	com/thoughtworks/xstream/io/xml/TraxSource.java
http://com.thoughtworks.xstream/sax/property/source-object-list http://com.thoughtworks.xstream/sax/property/configured-xstream	com/thoughtworks/xstream/io/xml/SaxWriter.java
http://adv.ppf.kim/public/adv/index/appcount	com/bslyun/app/e/a.java
https://wx.tenpay.com/	com/bslyun/app/fragment/WebFragment.java
https://statlog.shareinstall.com.cn/shareinstall_log/active	com/sh/sdk/shareinstall/helper/a.java
https://statlog.shareinstall.com.cn/sdkinfoscollection/startover	com/sh/sdk/shareinstall/helper/d.java
https://config.shareinstall.com.cn/signal/config	com/sh/sdk/shareinstall/helper/c.java
https://check.shareinstall.com.cn/wwwroot	com/sh/sdk/shareinstall/helper/f.java
https://check.shareinstall.com.cn/wwwroot https://config.shareinstall.com.cn/signal/config https://debugx5.qq.com http://my.wlwx.com:6006 http://adv.ppf.kim/public/adv/index/appcount http://com.thoughtworks.xstream/xstreamsource/feature https://statlog.shareinstall.com.cn/shareinstall_log/register https://mdc.html5.qq.com/d/directdown.jsp?channel_id=11047 https://statlog.shareinstall.com.cn/shareinstall_log/install https://mqqad.html5.qq.com/adjs https://mdc.html5.qq.com/d/directdown.jsp?channel_id=50079 https://statlog.shareinstall.com.cn/shareinstall_log/online https://mdc.html5.qq.com/d/directdown.jsp?channel_id=11041 javascript:location.href=' http://astat.bugly.qcloud.com/rqd/async https://adblocker.appbsl.net/index.php?g=port&m=unionadvblock&a=get http://auth.appbsl.com 4.3.0.39 https://api.weibo.com/2/users/ https://statlog.shareinstall.com.cn/sdkinfoscollection/startover http://astat.bugly.cros.wr.pvp.net/:8180/rqd/async https://soft.tbs.imtt.qq.com/17421/tbs_res_imtt_tbs_debugplugin_debugplugin.tbs https://statlog.shareinstall.com.cn/shareinstall_log/si http://rqd.uu.qq.com/rqd/sync https://mdc.html5.qq.com/mh?channel_id=50079&u= https://statlog.shareinstall.com.cn/shareinstall_log/active www.qq.com https://interface.shareinstall.com.cn/hike/exce http://com.thoughtworks.xstream/sax/property/configured-xstream http://auth.appbsl.com/index.php/app/sms/check_code https://cfg.imtt.qq.com/tbs?v=2&mk= http://pms.mb.qq.com/rsp204 https://wx.tenpay.com/ http://iploc.market.alicloudapi.com/v3/ip javascript:todayopenappnumber http://www.appk6.com http://pv.sohu.com/cityjson?ie=utf-8 http://auth.appbsl.com/index.php/app/sms/send_sms_code http://auth.appbsl.com/index.php/app/api/record http://debugtbs.qq.com?10000 http://com.thoughtworks.xstream/sax/property/source-object-list https://maplbs-40171.sh.gfp.tencent-cloud.com/index/ https://debugtbs.qq.com https://astat.bugly.cros.wr.pvp.net/:8180/rqd/async	自研引擎-S

Firebase配置检测

邮箱地址提取

EMAIL	源码文件
null@null.xml	com/thoughtworks/xstream/persistence/FilePersistenceStrategy.java
null@null.xml	自研引擎-S

第三方追踪器

名称	类别	网址
Bugly		https://reports.exodus-privacy.eu.org/trackers/190
WeChat Location		https://reports.exodus-privacy.eu.org/trackers/76

敏感凭证泄露

已显示 13 个secrets

1、腾讯位置服务的=> "TencentMapSDK" : "ANQBZ-ELQW5-2EFIN-QLKQ2-RZU4O-KVB7I"
2、百度统计的=> "BaiduMobAd_STAT_ID" : "ç¦\u0081æ¢å\u0088 é\u0099¤"
3、百度统计的=> "BaiduMobAd_CHANNEL" : "Baidu Market"
4、凭证信息=> "com.shareinstall.APP_KEY" : "@string/shareinstall_appkey"
5、 "QQ_AppSecret" : "_QQ_AppSecret"
6、 "SINA_APP_KEY" : "_SINA_APP_KEY"
7、 "WX_AppSecret" : "_WX_AppSecret"
8、 "baid_ai_app_key" : "_baid_ai_app_key"
9、 "baid_ai_secret_key" : "_baid_ai_secret_key"
10、 "hw_app_key" : "_hw_app_key"
11、 "lebo_app_secret" : "_lebo_app_secret"
12、 "mi_app_key" : "_mi_app_key"
13、 03e7078ecb6d48acaede35db7dae501f

字符串信息

建议导出为TXT，方便查看。

活动列表

显示 18 个 activities

服务列表

显示 9 个 services

广播接收者列表

显示 1 个 receivers

1 . com.bslyun.app.utils.NetBroadcastReceiver

内容提供者列表

显示 1 个 providers

1 . androidx.core.content.FileProvider

第三方SDK

SDK名称	开发者	描述信息
MSA SDK	移动安全联盟	移动智能终端补充设备标识体系统一调用 SDK 由中国信息通信研究院泰尔终端实验室、移动安全联盟整合提供，知识产权归中国信息通信研究院所有。
Bugly	Tencent	腾讯 Bugly，为移动开发者提供专业的异常上报和运营统计，帮助开发者快速发现并解决异常，同时掌握产品运营动态，及时跟进用户反馈。
腾讯地图 SDK	Tencent	腾讯地图定位 SDK 是一套基于 Android 4.1 及以上版本设备的应用程序接口。通过该接口，您可以轻松使用腾讯地图定位服务，构建 LBS 应用程序。
File Provider	Android	FileProvider 是 ContentProvider 的特殊子类，它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。
Jetpack Media	Google	与其他应用共享媒体内容和控件。已被 media2 取代。

污点分析

当apk较大时，代码量会很大，造成数据流图（ICFG）呈现爆炸式增长，所以该功能比较耗时，请先喝杯咖啡，耐心等待……

规则名称	描述信息	操作
病毒分析	使用安卓恶意软件常用的API进行污点分析	开始分析
漏洞挖掘	漏洞挖掘场景下的污点分析	开始分析
隐私合规	隐私合规场景下的污点分析：组件内污点传播、组件间污点传播、组件与库函数之间的污点传播	开始分析
密码分析	分析加密算法是否使用常量密钥、静态初始化的向量（IV）、加密模式是否使用ECB等	开始分析
Callback	因为Android中系统级的Callback并不会出现显式地进行回调方法的调用，所以如果需要分析Callback方法需要在声明文件中将其声明，这里提供一份AndroidCallbacks.txt文件，里面是一些常见的原生回调接口或类，如果有特殊接口需求，可以联系管理员	开始分析