静态分析-Web Browser Beta Pro-Fastest Browser 2.5.7版本

温馨提示：本平台仅供研究软件风险、安全评估，禁止用于非法用途。由于展示的数据过于全面，请耐心等待加载完成。如有疑问或建议，可加入我们的微信群讨论

APP评分

文件信息

文件名称 2f8399f5c274f451a7e65b4b19893864fa9d8b5b67dbc8ebc40a7020bd9a1681.apk
文件大小 9.48MB
MD5 195005882709ac21163d7a1b97aeec73
SHA1 1a63dec23f791ee8bf0db8847fa7e4df3972eb91
SHA256 2f8399f5c274f451a7e65b4b19893864fa9d8b5b67dbc8ebc40a7020bd9a1681

应用信息

应用名称 Web Browser Beta Pro-Fastest Browser
包名 com.webbrowserbeta
主活动 io.kodular.coc_fun9452.wbbV2_5_7.historyScreen
目标SDK 30 最小SDK 21
版本号 2.5.7 子版本号 53
加固信息未加壳

GooglePlay应用信息

标题 Web Browser Beta Pro-Fastest B
评分 4.0488133
安装 500,000+ 次下载
价格 0
Android版本支持
分类社交
Play 商店链接 com.webbrowserbeta
开发者 ST DEVELOPER
开发者 ID ST+DEVELOPER
开发者地址 None
开发者主页 https://m405021c3.app-ads-txt.com
开发者 Email Sundramsinghtomar@gmail.com
发布日期 2019年3月16日
隐私政策 Privacy link

关于此应用

该Web浏览器Beta Pro是所有Android用户最快的浏览器，而且运行速度惊人，深色主题是该浏览器的绝佳界面。 Web Browser Beta Pro是不错的浏览器。

组件导出信息

查看

扫描选项

重新扫描管理规则动态分析

反编译代码

Manifest文件查看

APK文件下载

Java源代码查看 -- 下载

证书信息

二进制文件已签名
v1 签名: True
v2 签名: True
v3 签名: True
v4 签名: False
主题: C=US, O=AppInventor for Android, CN=sst8602615119@gmail.com
签名算法: rsassa_pkcs1v15
有效期自: 2019-02-06 11:09:28+00:00
有效期至: 2046-06-24 11:09:28+00:00
发行人: C=US, O=AppInventor for Android, CN=sst8602615119@gmail.com
序列号: 0x4db155dc
哈希算法: sha256
证书MD5: fdbacbed741c1389d1f8caf5483e3a57
证书SHA1: 78ff1ce3a4a1cea65084c727317fa929739ebff4
证书SHA256: 800847f47fdfabe6603e62790cbc8f10492daa0454aebdc2497104a7deb4c343
证书SHA512: ddaf03931bea372fc13fe80a252473f610bdeafeafda4b3b1f025cfd85e67f063c73d60e65ba553770031a1aaf708203205c0d06213ed9f4f6eec8488cdb1d96
公钥算法: rsa
密钥长度: 2048
指纹: ce9372630e9669bfa99de3b4bf2e96a7a4729dd3543c0552b99e2405594f26da
找到 1 个唯一证书

应用程序权限

权限名称	安全等级	权限内容	权限描述	关联代码
Armadillo	未知	未知权限	来自 android 引用的未知权限。
io.kodular.coc_fun9452.wbbV2_5_7.permission.C2D_MESSAGE	未知	未知权限	来自 android 引用的未知权限。
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION	普通	后台下载文件	这个权限是允许应用通过下载管理器下载文件，且不对用户进行任何提示。
android.permission.INTERNET	危险	完全互联网访问	允许应用程序创建网络套接字。	显示文件 com/atomdeveloper/FirebaseCloudMessaging/CqSRW8aYrS4D3KYhhNtR.java com/atomdeveloper/FirebaseCloudMessaging/Y6oPaIVmvVm3madpFbk.java com/atomdeveloper/FirebaseCloudMessaging/cXicbtXyRnl22YVaSSsw.java com/google/appinventor/components/runtime/Download.java com/google/appinventor/components/runtime/FusiontablesControl.java com/google/appinventor/components/runtime/GoogleMap.java com/google/appinventor/components/runtime/GoogleShortlink.java com/google/appinventor/components/runtime/GoogleSpreadsheet.java com/google/appinventor/components/runtime/KodularImageUtilities.java com/google/appinventor/components/runtime/KodularPollfish.java com/google/appinventor/components/runtime/KodularRecaptcha.java com/google/appinventor/components/runtime/KodularResourceUtilities.java com/google/appinventor/components/runtime/KodularStartAppBanner.java com/google/appinventor/components/runtime/MakeroidAirtable.java com/google/appinventor/components/runtime/MapFeatureContainerBase.java com/google/appinventor/components/runtime/Navigation.java com/google/appinventor/components/runtime/Network.java com/google/appinventor/components/runtime/Ocr.java com/google/appinventor/components/runtime/PushNotifications.java com/google/appinventor/components/runtime/Texting.java com/google/appinventor/components/runtime/Web.java com/google/appinventor/components/runtime/YandexTranslate.java com/google/appinventor/components/runtime/util/AppInvHTTPD.java com/google/appinventor/components/runtime/util/AssetFetcher.java com/google/appinventor/components/runtime/util/ClientLoginHelper.java com/google/appinventor/components/runtime/util/FileUtil.java com/google/appinventor/components/runtime/util/GingerbreadUtil.java com/google/appinventor/components/runtime/util/KodularBilling.java com/google/appinventor/components/runtime/util/KodularContentProtection.java com/google/appinventor/components/runtime/util/KodularUtil.java com/google/appinventor/components/runtime/util/MediaUtil.java com/google/appinventor/components/runtime/util/NanoHTTPD.java com/google/appinventor/components/runtime/util/PackageInstaller.java com/google/appinventor/components/runtime/util/TelnetRepl.java com/microsoft/appcenter/http/DefaultHttpClientCallTask.java com/microsoft/appcenter/http/HttpUtils.java com/microsoft/appcenter/utils/NetworkStateHelper.java com/nostra13/universalimageloader/core/download/BaseImageDownloader.java com/sunny/CustomWebView/CustomWebView.java gnu/bytecode/ArrayClassLoader.java gnu/bytecode/dump.java gnu/expr/ModuleInfo.java gnu/text/FilePath.java gnu/text/Path.java gnu/text/ResourceStreamHandler.java gnu/text/URIPath.java gnu/text/URLPath.java javax/xml/bind/ContextFinder.java javax/xml/bind/JAXB.java javax/xml/bind/helpers/AbstractUnmarshallerImpl.java kawa/Telnet.java kawa/TelnetRepl.java kawa/repl.java org/jose4j/http/Get.java
android.permission.ACCESS_NETWORK_STATE	普通	获取网络状态	允许应用程序查看所有网络的状态。	显示文件 com/google/appinventor/components/runtime/CloudDB.java com/google/appinventor/components/runtime/DeviceTools.java com/google/appinventor/components/runtime/Download.java com/google/appinventor/components/runtime/GoogleShortlink.java com/google/appinventor/components/runtime/KodularUnityAds.java com/google/appinventor/components/runtime/Network.java com/google/appinventor/components/runtime/NetworkManager.java com/google/appinventor/components/runtime/PhoneStatus.java com/google/appinventor/components/runtime/QrCode.java com/google/appinventor/components/runtime/Texting.java com/google/appinventor/components/runtime/WiFiAdmin.java com/google/appinventor/components/runtime/util/KodularContentProtection.java com/microsoft/appcenter/utils/NetworkStateHelper.java
android.permission.WAKE_LOCK	危险	防止手机休眠	允许应用程序防止手机休眠，在手机屏幕关闭后后台进程仍然运行。	显示文件 com/atomdeveloper/FirebaseCloudMessaging/MessageStyleNotification.java com/atomdeveloper/FirebaseCloudMessaging/PushNotification.java com/google/appinventor/components/runtime/Player.java com/google/appinventor/components/runtime/VideoPlayer.java com/google/appinventor/components/runtime/util/FullScreenVideoUtil.java com/google/appinventor/components/runtime/util/MediaUtil.java
android.permission.ACCESS_WIFI_STATE	普通	查看Wi-Fi状态	允许应用程序查看有关Wi-Fi状态的信息。	显示文件 com/google/appinventor/components/runtime/PhoneStatus.java com/google/appinventor/components/runtime/WiFiAdmin.java com/microsoft/appcenter/utils/NetworkStateHelper.java
android.permission.READ_EXTERNAL_STORAGE	危险	读取SD卡内容	允许应用程序从SD卡读取信息。	显示文件 com/devyb/devybimageloader/DevYBImageLoader.java com/google/appinventor/components/runtime/DeviceTools.java com/google/appinventor/components/runtime/File.java com/google/appinventor/components/runtime/Form.java com/google/appinventor/components/runtime/KodularFirebaseStorage.java com/google/appinventor/components/runtime/KodularLottie.java com/google/appinventor/components/runtime/KodularResourceUtilities.java com/google/appinventor/components/runtime/MakeroidFtp.java com/google/appinventor/components/runtime/MakeroidShell.java com/google/appinventor/components/runtime/Ocr.java com/google/appinventor/components/runtime/Texting.java com/google/appinventor/components/runtime/util/AppInvHTTPD.java com/google/appinventor/components/runtime/util/FileUtil.java com/google/appinventor/components/runtime/util/KodularUtil.java com/google/appinventor/components/runtime/util/MediaUtil.java com/google/appinventor/components/runtime/util/NanoHTTPD.java com/google/appinventor/components/runtime/util/WebRTCNativeMgr.java com/microsoft/appcenter/utils/storage/FileManager.java com/nostra13/universalimageloader/cache/disc/impl/ext/DiskLruCache.java com/nostra13/universalimageloader/core/download/BaseImageDownloader.java gnu/bytecode/ListCodeSize.java gnu/bytecode/ZipArchive.java gnu/bytecode/dump.java gnu/kawa/util/FileInfo.java gnu/kawa/util/PreProcess.java gnu/text/FilePath.java kawa/repl.java
com.google.android.c2dm.permission.RECEIVE	普通	接收推送通知	允许应用程序接收来自云的推送通知。
android.permission.WRITE_EXTERNAL_STORAGE	危险	读取/修改/删除外部存储内容	允许应用程序写入外部存储。	显示文件 com/databySide/bsh/Interpreter.java com/devyb/devybimageloader/DevYBImageLoader.java com/google/appinventor/components/runtime/Canvas.java com/google/appinventor/components/runtime/File.java com/google/appinventor/components/runtime/ImageEditor.java com/google/appinventor/components/runtime/MakeroidFtp.java com/google/appinventor/components/runtime/Metadata.java com/google/appinventor/components/runtime/Package.java com/google/appinventor/components/runtime/Screenshot.java com/google/appinventor/components/runtime/Surface.java com/google/appinventor/components/runtime/Texting.java com/google/appinventor/components/runtime/Wallpaper.java com/google/appinventor/components/runtime/Web.java com/google/appinventor/components/runtime/multidex/a.java com/google/appinventor/components/runtime/util/AppInvHTTPD.java com/google/appinventor/components/runtime/util/AssetFetcher.java com/google/appinventor/components/runtime/util/FileUtil.java com/google/appinventor/components/runtime/util/GeoJSONUtil.java com/google/appinventor/components/runtime/util/JsonUtil.java com/google/appinventor/components/runtime/util/NanoHTTPD.java com/google/appinventor/components/runtime/util/PackageInstaller.java com/nostra13/universalimageloader/cache/disc/impl/BaseDiskCache.java com/nostra13/universalimageloader/cache/disc/impl/ext/DiskLruCache.java com/syper/SyperMoby/SyperMoby.java gnu/bytecode/ClassType.java gnu/bytecode/ZipArchive.java gnu/expr/Compilation.java gnu/expr/ModuleExp.java gnu/kawa/util/FileInfo.java gnu/kawa/util/PreProcess.java gnu/text/FilePath.java gnu/text/URLPath.java gnu/xquery/util/Debug.java javax/xml/bind/helpers/AbstractMarshallerImpl.java
android.permission.READ_PHONE_STATE	危险	读取手机状态和标识	允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号，是否正在通话，以及对方的号码等。	显示文件 com/google/appinventor/components/runtime/DeviceTools.java com/google/appinventor/components/runtime/Texting.java

证书分析

高危

0

警告

1

信息

1

标题	严重程度	描述信息
已签名应用	信息	应用程序已使用代码签名证书进行签名

MANIFEST分析

高危

0

警告

9

信息

0

屏蔽

0

序号	问题	严重程度	描述信息	操作
1	应用程序可以安装在有漏洞的已更新 Android 版本上 Android 5.0-5.0.2, [minSdk=21]	信息	该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。	对应用 com.webbrowserbeta 禁止使用 vulnerable_os_version 规则
2	应用程序已启用明文网络流量 [android:usesCleartextTraffic=true]	警告	应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。	对应用 com.webbrowserbeta 禁止使用 clear_text_traffic 规则
3	应用程序具有网络安全配置 [android:networkSecurityConfig=@xml/network_security_config]	信息	网络安全配置功能让应用程序可以在一个安全的，声明式的配置文件中自定义他们的网络安全设置，而不需要修改应用程序代码。这些设置可以针对特定的域名和特定的应用程序进行配置。	对应用 com.webbrowserbeta 禁止使用 has_network_security 规则
4	应用程序数据存在被泄露的风险未设置[android:allowBackup]标志	警告	这个标志 [android:allowBackup]应该设置为false。默认情况下它被设置为true，允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。	对应用 com.webbrowserbeta 禁止使用 allowbackup_not_set 规则
5	Activity (io.kodular.coc_fun9452.wbbV2_5_7.Screen2) 未被保护。存在一个intent-filter。	警告	发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。	对应用 com.webbrowserbeta 禁止使用 activity_exported_intent_filter_exists 规则
6	Activity (io.kodular.coc_fun9452.wbbV2_5_7.Screen1) 未被保护。存在一个intent-filter。	警告	发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。	对应用 com.webbrowserbeta 禁止使用 activity_exported_intent_filter_exists 规则
7	Activity (io.kodular.coc_fun9452.wbbV2_5_7.bookmarks) 未被保护。存在一个intent-filter。	警告	发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。	对应用 com.webbrowserbeta 禁止使用 activity_exported_intent_filter_exists 规则
8	Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护, 但是应该检查权限的保护级别。 Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]	警告	发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。	对应用 com.webbrowserbeta 禁止使用 service_exported_protected_permission_not_defined 规则
9	Activity (com.google.firebase.auth.internal.FederatedSignInActivity) 受权限保护, 但是应该检查权限的保护级别。 Permission: com.google.firebase.auth.api.gms.permission.LAUNCH_FEDERATED_SIGN_IN [android:exported=true]	警告	发现一个 Activity被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。	对应用 com.webbrowserbeta 禁止使用 activity_exported_protected_permission_not_defined 规则
10	Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。 Permission: com.google.android.c2dm.permission.SEND [android:exported=true]	警告	发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。	对应用 com.webbrowserbeta 禁止使用 receiver_exported_protected_permission_not_defined 规则
11	Service (com.atomdeveloper.FirebaseCloudMessaging.MyFirebaseMessagingService) 未被保护。存在一个intent-filter。	警告	发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。	对应用 com.webbrowserbeta 禁止使用 service_exported_intent_filter_exists 规则

可浏览的ACTIVITIES

ACTIVITY	INTENT

网络安全配置

高危

1

警告

1

信息

0

安全

0

序号	范围	严重级别	描述
1	*	高	基本配置不安全地配置为允许到所有域的明文流量。
2	*	警告	基本配置配置为信任系统证书。

API调用分析

API功能	源码文件
一般功能-> 文件操作	显示文件 com/atomdeveloper/FirebaseCloudMessaging/FirebaseCloudMessaging.java com/atomdeveloper/FirebaseCloudMessaging/MYRJkA9e6SJinWjLzP9.java com/atomdeveloper/FirebaseCloudMessaging/MessageStyleNotification.java com/atomdeveloper/FirebaseCloudMessaging/MyFirebaseMessagingService.java com/atomdeveloper/FirebaseCloudMessaging/PushNotification.java com/atomdeveloper/FirebaseCloudMessaging/XUcGPyQKnjyJXL8S6YW8.java com/databySide/bsh/BshClassManager.java com/databySide/bsh/BshMethod.java com/databySide/bsh/CommandLineReader.java com/databySide/bsh/ConsoleInterface.java com/databySide/bsh/Interpreter.java com/databySide/bsh/JavaCharStream.java com/databySide/bsh/LHS.java com/databySide/bsh/Modifiers.java com/databySide/bsh/Name.java com/databySide/bsh/NameSpace.java com/databySide/bsh/Node.java com/databySide/bsh/Parser.java com/databySide/bsh/ParserTokenManager.java com/databySide/bsh/Primitive.java com/databySide/bsh/TargetError.java com/databySide/bsh/This.java com/databySide/bsh/Token.java com/databySide/bsh/Variable.java com/databySide/bsh/XThis.java com/devyb/devybimageloader/DevYBImageLoader.java com/microsoft/appcenter/channel/DefaultChannel.java com/microsoft/appcenter/crashes/Crashes.java com/microsoft/appcenter/crashes/WrapperSdkExceptionManager.java com/microsoft/appcenter/crashes/utils/ErrorLogHelper.java com/microsoft/appcenter/http/DefaultHttpClientCallTask.java com/microsoft/appcenter/http/HttpClient.java com/microsoft/appcenter/http/HttpClientDecorator.java com/microsoft/appcenter/http/HttpClientNetworkStateHandler.java com/microsoft/appcenter/http/HttpException.java com/microsoft/appcenter/http/HttpUtils.java com/microsoft/appcenter/http/TLS1_2SocketFactory.java com/microsoft/appcenter/ingestion/AppCenterIngestion.java com/microsoft/appcenter/ingestion/Ingestion.java com/microsoft/appcenter/ingestion/OneCollectorIngestion.java com/microsoft/appcenter/persistence/DatabasePersistence.java com/microsoft/appcenter/persistence/Persistence.java com/microsoft/appcenter/utils/HashUtils.java com/microsoft/appcenter/utils/NetworkStateHelper.java com/microsoft/appcenter/utils/storage/DatabaseManager.java com/microsoft/appcenter/utils/storage/FileManager.java com/microsoft/appcenter/utils/storage/SharedPreferencesManager.java com/nostra13/universalimageloader/cache/disc/DiskCache.java com/nostra13/universalimageloader/cache/disc/impl/BaseDiskCache.java com/nostra13/universalimageloader/cache/disc/impl/LimitedAgeDiskCache.java com/nostra13/universalimageloader/cache/disc/impl/UnlimitedDiskCache.java com/nostra13/universalimageloader/cache/disc/impl/ext/DiskLruCache.java com/nostra13/universalimageloader/cache/disc/impl/ext/LruDiskCache.java com/nostra13/universalimageloader/cache/disc/impl/ext/StrictLineReader.java com/nostra13/universalimageloader/cache/disc/impl/ext/Util.java com/nostra13/universalimageloader/core/DefaultConfigurationFactory.java com/nostra13/universalimageloader/core/ImageLoaderConfiguration.java com/nostra13/universalimageloader/core/ImageLoaderEngine.java com/nostra13/universalimageloader/core/LoadAndDisplayImageTask.java com/nostra13/universalimageloader/core/assist/ContentLengthInputStream.java com/nostra13/universalimageloader/core/assist/FlushedInputStream.java com/nostra13/universalimageloader/core/assist/deque/LinkedBlockingDeque.java com/nostra13/universalimageloader/core/decode/BaseImageDecoder.java com/nostra13/universalimageloader/core/decode/ImageDecoder.java com/nostra13/universalimageloader/core/download/BaseImageDownloader.java com/nostra13/universalimageloader/core/download/ImageDownloader.java com/nostra13/universalimageloader/utils/DiskCacheUtils.java com/nostra13/universalimageloader/utils/IoUtils.java com/nostra13/universalimageloader/utils/StorageUtils.java com/puravidaapps/TaifunTextbox.java com/sunny/CustomWebView/CustomWebView.java com/syper/SyperMoby/SyperMoby.java gnu/bytecode/ArrayClassLoader.java gnu/bytecode/ArrayType.java gnu/bytecode/Attribute.java gnu/bytecode/ClassFileInput.java gnu/bytecode/ClassType.java gnu/bytecode/ClassTypeWriter.java gnu/bytecode/CodeAttr.java gnu/bytecode/ConstantPool.java gnu/bytecode/ConstantValueAttr.java gnu/bytecode/CpoolClass.java gnu/bytecode/CpoolEntry.java gnu/bytecode/CpoolNameAndType.java gnu/bytecode/CpoolRef.java gnu/bytecode/CpoolString.java gnu/bytecode/CpoolUtf8.java gnu/bytecode/CpoolValue1.java gnu/bytecode/CpoolValue2.java gnu/bytecode/EnclosingMethodAttr.java gnu/bytecode/ExceptionsAttr.java gnu/bytecode/Field.java gnu/bytecode/InnerClassesAttr.java gnu/bytecode/LineNumbersAttr.java gnu/bytecode/ListCodeSize.java gnu/bytecode/LocalVarsAttr.java gnu/bytecode/Method.java gnu/bytecode/MiscAttr.java gnu/bytecode/SignatureAttr.java gnu/bytecode/SourceDebugExtAttr.java gnu/bytecode/SourceFileAttr.java gnu/bytecode/StackMapTableAttr.java gnu/bytecode/Type.java gnu/bytecode/ZipArchive.java gnu/bytecode/ZipLoader.java gnu/bytecode/dump.java gnu/ecmascript/Lexer.java gnu/ecmascript/Parser.java gnu/expr/Compilation.java gnu/expr/CompiledModule.java gnu/expr/Expression.java gnu/expr/Keyword.java gnu/expr/Language.java gnu/expr/LitTable.java gnu/expr/ModuleExp.java gnu/expr/ModuleInfo.java gnu/expr/ModuleManager.java gnu/expr/PrimProcedure.java gnu/expr/Special.java gnu/kawa/functions/CompilationHelpers.java gnu/kawa/functions/DisplayFormat.java gnu/kawa/functions/FileUtils.java gnu/kawa/functions/Format.java gnu/kawa/functions/GetNamedInstancePart.java gnu/kawa/functions/LispCharacterFormat.java gnu/kawa/functions/LispChoiceFormat.java gnu/kawa/functions/LispEscapeFormat.java gnu/kawa/functions/LispFreshlineFormat.java gnu/kawa/functions/LispIndentFormat.java gnu/kawa/functions/LispIterationFormat.java gnu/kawa/functions/LispNewlineFormat.java gnu/kawa/functions/LispObjectFormat.java gnu/kawa/functions/LispPluralFormat.java gnu/kawa/functions/LispPrettyFormat.java gnu/kawa/functions/LispRealFormat.java gnu/kawa/functions/LispRepositionFormat.java gnu/kawa/functions/LispTabulateFormat.java gnu/kawa/functions/Map.java gnu/kawa/functions/NamedPart.java gnu/kawa/functions/NamedPartSetter.java gnu/kawa/functions/ObjectFormat.java gnu/kawa/functions/ParseFormat.java gnu/kawa/functions/SetNamedInstancePart.java gnu/kawa/lispexpr/ClassNamespace.java gnu/kawa/lispexpr/LispLanguage.java gnu/kawa/lispexpr/LispReader.java gnu/kawa/lispexpr/MakeXmlElement.java gnu/kawa/lispexpr/ReadTableEntry.java gnu/kawa/lispexpr/ReaderColon.java gnu/kawa/lispexpr/ReaderDispatch.java gnu/kawa/lispexpr/ReaderDispatchMacro.java gnu/kawa/lispexpr/ReaderDispatchMisc.java gnu/kawa/lispexpr/ReaderIgnoreRestOfLine.java gnu/kawa/lispexpr/ReaderMacro.java gnu/kawa/lispexpr/ReaderParens.java gnu/kawa/lispexpr/ReaderQuote.java gnu/kawa/lispexpr/ReaderString.java gnu/kawa/lispexpr/ReaderTypespec.java gnu/kawa/lispexpr/ReaderVector.java gnu/kawa/lispexpr/ReaderXmlElement.java gnu/kawa/models/Box.java gnu/kawa/models/DrawImage.java gnu/kawa/models/Label.java gnu/kawa/models/Spacer.java gnu/kawa/models/Text.java gnu/kawa/reflect/ArrayGet.java gnu/kawa/reflect/ArrayLength.java gnu/kawa/reflect/ArrayNew.java gnu/kawa/reflect/ArraySet.java gnu/kawa/reflect/OccurrenceType.java gnu/kawa/sax/KawaXMLReader.java gnu/kawa/servlet/HttpOutputStream.java gnu/kawa/servlet/HttpRequestContext.java gnu/kawa/servlet/ServletPrinter.java gnu/kawa/util/FileInfo.java gnu/kawa/util/FixupHtmlToc.java gnu/kawa/util/PreProcess.java gnu/kawa/xml/AttributeType.java gnu/kawa/xml/ElementType.java gnu/kawa/xml/HttpPrinter.java gnu/kawa/xml/NodeType.java gnu/kawa/xml/ProcessingInstructionType.java gnu/kawa/xml/TreeScanner.java gnu/kawa/xml/WriteTo.java gnu/kawa/xml/XmlNamespace.java gnu/kawa/xslt/XSLT.java gnu/kawa/xslt/XslTranslator.java gnu/lists/AbstractFormat.java gnu/lists/BitVector.java gnu/lists/ByteVector.java gnu/lists/CharBuffer.java gnu/lists/CharSeq.java gnu/lists/ConsumerWriter.java gnu/lists/EofClass.java gnu/lists/F32Vector.java gnu/lists/F64Vector.java gnu/lists/FString.java gnu/lists/FVector.java gnu/lists/LList.java gnu/lists/Pair.java gnu/lists/PairWithPosition.java gnu/lists/PrintConsumer.java gnu/lists/S16Vector.java gnu/lists/S32Vector.java gnu/lists/S64Vector.java gnu/lists/Strings.java gnu/lists/SubCharSeq.java gnu/lists/TreeList.java gnu/lists/U16Vector.java gnu/lists/U32Vector.java gnu/lists/U64Vector.java gnu/lists/UnescapedData.java gnu/mapping/CharArrayInPort.java gnu/mapping/CharArrayOutPort.java gnu/mapping/InPort.java gnu/mapping/Location.java gnu/mapping/LogWriter.java gnu/mapping/Namespace.java gnu/mapping/OutPort.java gnu/mapping/SimpleEnvironment.java gnu/mapping/SimpleSymbol.java gnu/mapping/Symbol.java gnu/mapping/TtyInPort.java gnu/mapping/Values.java gnu/math/BaseUnit.java gnu/math/CComplex.java gnu/math/CQuantity.java gnu/math/DComplex.java gnu/math/DFloNum.java gnu/math/DQuantity.java gnu/math/Duration.java gnu/math/IntFraction.java gnu/math/IntNum.java gnu/math/MulUnit.java gnu/math/NamedUnit.java gnu/text/CaseConvertFormat.java gnu/text/Char.java gnu/text/CompoundFormat.java gnu/text/FilePath.java gnu/text/FlushFormat.java gnu/text/IntegerFormat.java gnu/text/Lexer.java gnu/text/LineBufferedReader.java gnu/text/LineInputStreamReader.java gnu/text/LiteralFormat.java gnu/text/NullReader.java gnu/text/PadFormat.java gnu/text/Path.java gnu/text/PrettyWriter.java gnu/text/QueueReader.java gnu/text/ReportFormat.java gnu/text/ResourceStreamHandler.java gnu/text/SourceError.java gnu/text/SourceMessages.java gnu/text/SyntaxException.java gnu/text/URIPath.java gnu/text/URLPath.java gnu/text/WriterManager.java gnu/text/WriterRef.java gnu/xml/NamespaceBinding.java gnu/xml/XMLParser.java gnu/xml/XMLPrinter.java gnu/xml/XName.java gnu/xquery/lang/XQParser.java gnu/xquery/lang/XQuery.java gnu/xquery/util/Debug.java gnu/xquery/util/NamedCollator.java gnu/xquery/util/NodeUtils.java kawa/GuiInPort.java kawa/Shell.java kawa/Telnet.java kawa/TelnetInputStream.java kawa/TelnetOutputStream.java kawa/TelnetRepl.java kawa/TextPaneWriter.java kawa/lang/AnyPat.java kawa/lang/AutoloadProcedure.java kawa/lang/AutoloadSyntax.java kawa/lang/CompileFile.java kawa/lang/EqualPat.java kawa/lang/ListRepeatPat.java kawa/lang/Macro.java kawa/lang/PairPat.java kawa/lang/Record.java kawa/lang/SyntaxPattern.java kawa/lang/SyntaxRule.java kawa/lang/SyntaxRules.java kawa/lang/SyntaxTemplate.java kawa/lang/TemplateScope.java kawa/lib/files.java kawa/lib/ports.java kawa/lib/system.java kawa/repl.java kawa/standard/Scheme.java kawa/standard/TracedProcedure.java kawa/standard/char_ready_p.java kawa/standard/define_autoload.java kawa/standard/load.java kawa/standard/read_line.java kawa/standard/readchar.java kawa/standard/require.java org/jose4j/http/Get.java org/jose4j/http/SimpleGet.java org/jose4j/json/JsonUtil.java org/jose4j/json/internal/json_simple/JSONArray.java org/jose4j/json/internal/json_simple/JSONObject.java org/jose4j/json/internal/json_simple/JSONStreamAware.java org/jose4j/json/internal/json_simple/JSONValue.java org/jose4j/json/internal/json_simple/parser/ContentHandler.java org/jose4j/json/internal/json_simple/parser/JSONParser.java org/jose4j/json/internal/json_simple/parser/Yylex.java org/jose4j/jwe/kdf/ConcatKeyDerivationFunction.java org/jose4j/jwe/kdf/PasswordBasedKeyDerivationFunction2.java org/jose4j/jwk/HttpsJwks.java org/jose4j/jwk/JsonWebKey.java org/jose4j/jws/EcdsaUsingShaAlgorithm.java org/jose4j/jws/JsonWebSignature.java org/jose4j/keys/X509Util.java org/jose4j/keys/resolvers/HttpsJwksVerificationKeyResolver.java org/jose4j/lang/ByteUtil.java org/jose4j/lang/StringUtil.java org/jose4j/zip/DeflateRFC1951CompressionAlgorithm.java
进程操作-> 杀死进程	显示文件 arm/RunnableC0006.java com/atomdeveloper/FirebaseCloudMessaging/FirebaseCloudMessaging.java com/databySide/bsh/Interpreter.java com/microsoft/appcenter/utils/ShutdownHelper.java gnu/bytecode/ListCodeSize.java gnu/bytecode/ZipArchive.java gnu/bytecode/dump.java gnu/expr/ApplicationMainSupport.java gnu/expr/ModuleBody.java gnu/kawa/util/PreProcess.java kawa/GuiConsole.java kawa/Shell.java kawa/Telnet.java kawa/lib/rnrs/programs.java kawa/repl.java
调用java反射机制	显示文件 com/databySide/bsh/BSHBinaryExpression.java com/databySide/bsh/BshClassManager.java com/databySide/bsh/BshMethod.java com/databySide/bsh/Capabilities.java com/databySide/bsh/ClassGenerator.java com/databySide/bsh/CollectionManager.java com/databySide/bsh/Interpreter.java com/databySide/bsh/LHS.java com/databySide/bsh/NameSpace.java com/databySide/bsh/Primitive.java com/databySide/bsh/Reflect.java com/databySide/bsh/ReflectManager.java com/databySide/bsh/This.java com/databySide/bsh/Types.java com/databySide/bsh/XThis.java com/microsoft/appcenter/utils/InstrumentationRegistryHelper.java com/nostra13/universalimageloader/core/imageaware/ImageViewAware.java com/syper/SyperMoby/SyperMoby.java com/syper/SyperMoby/xL7qJHW5BT7uFIvcxlFI4a9sul7LyNYcW7Tjja270u4CfM8iwtdSJq8D6tIT.java com/yusufcihan/DynamicComponents/DynamicComponents.java gnu/bytecode/ArrayType.java gnu/bytecode/ClassType.java gnu/bytecode/Field.java gnu/bytecode/ObjectType.java gnu/bytecode/ZipLoader.java gnu/commonlisp/lang/Lisp2.java gnu/expr/ApplicationMainSupport.java gnu/expr/ClassExp.java gnu/expr/Compilation.java gnu/expr/Declaration.java gnu/expr/InlineCalls.java gnu/expr/Language.java gnu/expr/ModuleManager.java gnu/expr/ModuleMethod.java gnu/expr/PrimProcedure.java gnu/kawa/models/Display.java gnu/kawa/reflect/ClassMemberLocation.java gnu/kawa/reflect/FieldLocation.java gnu/kawa/reflect/SlotGet.java gnu/kawa/reflect/SlotSet.java gnu/kawa/reflect/StaticFieldLocation.java gnu/kawa/reflect/StaticGet.java gnu/kawa/reflect/StaticSet.java gnu/mapping/LazyPropertyKey.java gnu/xquery/lang/XQParser.java gnu/xquery/util/NodeUtils.java kawa/Shell.java kawa/lang/AutoloadProcedure.java kawa/lang/AutoloadSyntax.java kawa/lang/Record.java kawa/repl.java org/jose4j/lang/BouncyCastleProviderHelp.java
网络通信-> TCP套接字	显示文件 com/microsoft/appcenter/http/HttpUtils.java com/microsoft/appcenter/http/TLS1_2SocketFactory.java kawa/Telnet.java kawa/TelnetRepl.java kawa/repl.java
网络通信-> URLConnection	显示文件 com/microsoft/appcenter/http/HttpUtils.java gnu/text/ResourceStreamHandler.java gnu/text/URIPath.java gnu/text/URLPath.java org/jose4j/http/Get.java
网络通信-> HTTPS建立连接	显示文件 com/microsoft/appcenter/http/DefaultHttpClientCallTask.java com/microsoft/appcenter/http/HttpUtils.java com/microsoft/appcenter/http/TLS1_2SocketFactory.java org/jose4j/http/Get.java
一般功能-> 获取系统服务(getSystemService)	显示文件 com/atomdeveloper/FirebaseCloudMessaging/FirebaseCloudMessaging.java com/atomdeveloper/FirebaseCloudMessaging/MessageStyleNotification.java com/atomdeveloper/FirebaseCloudMessaging/PushNotification.java com/jerin/layoutdialog/LayoutDialog.java com/microsoft/appcenter/crashes/utils/ErrorLogHelper.java com/microsoft/appcenter/utils/DeviceInfoHelper.java com/microsoft/appcenter/utils/NetworkStateHelper.java com/nostra13/universalimageloader/core/DefaultConfigurationFactory.java com/sunny/CustomWebView/CustomWebView.java
组件-> 启动 Activity	com/atomdeveloper/FirebaseCloudMessaging/MessageStyleNotification.java com/atomdeveloper/FirebaseCloudMessaging/PushNotification.java com/sunny/CustomWebView/CustomWebView.java
组件-> 发送广播	com/sunny/CustomWebView/CustomWebView.java
一般功能-> IPC通信	显示文件 com/atomdeveloper/FirebaseCloudMessaging/FirebaseCloudMessaging.java com/atomdeveloper/FirebaseCloudMessaging/MessageStyleNotification.java com/atomdeveloper/FirebaseCloudMessaging/MyFirebaseMessagingService.java com/atomdeveloper/FirebaseCloudMessaging/PushNotification.java com/microsoft/appcenter/utils/NetworkStateHelper.java com/sunny/CustomWebView/CustomWebView.java
网络通信-> WebView JavaScript接口	com/atomdeveloper/MockWebViewC/MockWebViewC.java com/sunny/CustomWebView/CustomWebView.java
网络通信-> WebView GET请求	com/sunny/CustomWebView/CustomWebView.java
网络通信-> WebView POST请求	com/sunny/CustomWebView/CustomWebView.java
加密解密-> Base64 解密	com/microsoft/appcenter/crashes/ingestion/models/ErrorAttachmentLog.java com/microsoft/appcenter/utils/crypto/CryptoUtils.java com/sunny/CustomWebView/CustomWebView.java
JavaScript 接口方法	com/sunny/CustomWebView/CustomWebView.java
网络通信-> WebView 相关	com/sunny/CustomWebView/CustomWebView.java
网络通信-> OkHttpClient Connection	com/sunny/CustomWebView/CustomWebView.java
DEX-> 动态加载	显示文件 com/databySide/bsh/BshClassManager.java com/syper/SyperMoby/SyperMoby.java gnu/bytecode/ArrayClassLoader.java gnu/expr/Compilation.java gnu/expr/ModuleExp.java kawa/lang/Record.java kawa/standard/Scheme.java
加密解密-> Crypto加解密组件	显示文件 com/microsoft/appcenter/utils/crypto/CryptoAesHandler.java com/microsoft/appcenter/utils/crypto/CryptoUtils.java org/jose4j/jwe/AesCbcHmacSha2ContentEncryptionAlgorithm.java org/jose4j/jwe/AesGcmKeyEncryptionAlgorithm.java org/jose4j/jwe/CipherStrengthSupport.java org/jose4j/jwe/CipherUtil.java org/jose4j/jwe/EcdhKeyAgreementAlgorithm.java org/jose4j/jwe/EcdhKeyAgreementWithAesKeyWrapAlgorithm.java org/jose4j/jwe/Pbes2HmacShaWithAesKeyWrapAlgorithm.java org/jose4j/jwe/RsaKeyManagementAlgorithm.java org/jose4j/jwe/SimpleAeadCipher.java org/jose4j/jwe/WrappingKeyManagementAlgorithm.java org/jose4j/jwe/kdf/PasswordBasedKeyDerivationFunction2.java org/jose4j/jwk/OctetSequenceJsonWebKey.java org/jose4j/jws/BaseSignatureAlgorithm.java org/jose4j/jws/HmacUsingShaAlgorithm.java org/jose4j/keys/AesKey.java org/jose4j/keys/HmacKey.java org/jose4j/keys/PbkdfKey.java org/jose4j/mac/MacUtil.java
网络通信-> SSL证书处理	com/microsoft/appcenter/http/TLS1_2SocketFactory.java org/jose4j/http/Get.java
网络通信-> HTTP建立连接	显示文件 com/atomdeveloper/FirebaseCloudMessaging/CqSRW8aYrS4D3KYhhNtR.java com/atomdeveloper/FirebaseCloudMessaging/Y6oPaIVmvVm3madpFbk.java com/atomdeveloper/FirebaseCloudMessaging/cXicbtXyRnl22YVaSSsw.java com/nostra13/universalimageloader/core/download/BaseImageDownloader.java gnu/text/URIPath.java org/jose4j/http/Get.java
一般功能-> Android通知	显示文件 com/atomdeveloper/FirebaseCloudMessaging/CqSRW8aYrS4D3KYhhNtR.java com/atomdeveloper/FirebaseCloudMessaging/MessageStyleNotification.java com/atomdeveloper/FirebaseCloudMessaging/PushNotification.java com/atomdeveloper/FirebaseCloudMessaging/Y6oPaIVmvVm3madpFbk.java
加密解密-> 信息摘要算法	显示文件 com/microsoft/appcenter/utils/HashUtils.java com/nostra13/universalimageloader/cache/disc/naming/Md5FileNameGenerator.java org/jose4j/jwe/kdf/ConcatKeyDerivationFunction.java org/jose4j/lang/HashUtil.java
命令执行-> getRuntime.exec()	kawa/lib/system.java
进程操作-> 获取进程pid	com/microsoft/appcenter/crashes/utils/ErrorLogHelper.java com/microsoft/appcenter/utils/ShutdownHelper.java
组件-> 启动 Service	com/microsoft/appcenter/AppCenter.java
组件-> ContentProvider	arm/RunnableC0006.java
一般功能-> 获取网络接口信息	arm/RunnableC0006.java
进程操作-> 获取运行的进程\服务	com/microsoft/appcenter/crashes/utils/ErrorLogHelper.java
加密解密-> Base64 加密	com/microsoft/appcenter/crashes/ingestion/models/ErrorAttachmentLog.java com/microsoft/appcenter/utils/crypto/CryptoUtils.java
网络通信-> TCP服务器套接字	kawa/repl.java

源代码分析

高危

1

警告

5

信息

2

安全

1

屏蔽

0

序号	问题	等级	参考标准	文件位置	操作
1	应用程序记录日志信息,不得记录敏感信息	信息	CWE: CWE-532: 通过日志文件的信息暴露 OWASP MASVS: MSTG-STORAGE-3	显示文件 co/sgext/asyncprocedure/AsyncProc.java com/atomdeveloper/FirebaseCloudMessaging/CqSRW8aYrS4D3KYhhNtR.java com/atomdeveloper/FirebaseCloudMessaging/FirebaseCloudMessaging.java com/atomdeveloper/FirebaseCloudMessaging/MessageStyleNotification.java com/atomdeveloper/FirebaseCloudMessaging/MyFirebaseMessagingService.java com/atomdeveloper/FirebaseCloudMessaging/PushNotification.java com/atomdeveloper/FirebaseCloudMessaging/Y6oPaIVmvVm3madpFbk.java com/databySide/bsh/BshClassManager.java com/databySide/bsh/CommandLineReader.java com/databySide/bsh/Interpreter.java com/databySide/bsh/NameSpace.java com/databySide/bsh/Parser.java com/databySide/bsh/SimpleNode.java com/github/ybq/android/spinkit/animation/SpriteAnimatorBuilder.java com/microsoft/appcenter/AbstractAppCenterService.java com/microsoft/appcenter/AppCenter.java com/microsoft/appcenter/Constants.java com/microsoft/appcenter/CustomProperties.java com/microsoft/appcenter/Flags.java com/microsoft/appcenter/ServiceInstrumentationUtils.java com/microsoft/appcenter/UncaughtExceptionHandler.java com/microsoft/appcenter/analytics/Analytics.java com/microsoft/appcenter/analytics/AnalyticsTransmissionTarget.java com/microsoft/appcenter/analytics/AuthenticationProvider.java com/microsoft/appcenter/analytics/EventProperties.java com/microsoft/appcenter/analytics/channel/AnalyticsValidator.java com/microsoft/appcenter/analytics/channel/SessionTracker.java com/microsoft/appcenter/analytics/ingestion/models/EventLog.java com/microsoft/appcenter/analytics/ingestion/models/json/EventLogFactory.java com/microsoft/appcenter/channel/DefaultChannel.java com/microsoft/appcenter/channel/OneCollectorChannelListener.java com/microsoft/appcenter/crashes/Crashes.java com/microsoft/appcenter/crashes/WrapperSdkExceptionManager.java com/microsoft/appcenter/crashes/ingestion/models/AbstractErrorLog.java com/microsoft/appcenter/crashes/ingestion/models/ErrorAttachmentLog.java com/microsoft/appcenter/crashes/ingestion/models/HandledErrorLog.java com/microsoft/appcenter/crashes/ingestion/models/ManagedErrorLog.java com/microsoft/appcenter/crashes/utils/ErrorLogHelper.java com/microsoft/appcenter/http/AbstractAppCallTemplate.java com/microsoft/appcenter/http/DefaultHttpClient.java com/microsoft/appcenter/http/DefaultHttpClientCallTask.java com/microsoft/appcenter/http/HttpClientNetworkStateHandler.java com/microsoft/appcenter/http/HttpClientRetryer.java com/microsoft/appcenter/ingestion/OneCollectorIngestion.java com/microsoft/appcenter/ingestion/models/AbstractLog.java com/microsoft/appcenter/ingestion/models/StartServiceLog.java com/microsoft/appcenter/ingestion/models/one/CommonSchemaDataUtils.java com/microsoft/appcenter/ingestion/models/one/CommonSchemaLog.java com/microsoft/appcenter/ingestion/models/one/PartAUtils.java com/microsoft/appcenter/persistence/DatabasePersistence.java com/microsoft/appcenter/utils/AppCenterLog.java com/microsoft/appcenter/utils/AsyncTaskUtils.java com/microsoft/appcenter/utils/DeviceInfoHelper.java com/microsoft/appcenter/utils/IdHelper.java com/microsoft/appcenter/utils/NetworkStateHelper.java com/microsoft/appcenter/utils/context/SessionContext.java com/microsoft/appcenter/utils/context/UserIdContext.java com/microsoft/appcenter/utils/crypto/CryptoUtils.java com/microsoft/appcenter/utils/storage/DatabaseManager.java com/microsoft/appcenter/utils/storage/FileManager.java com/nostra13/universalimageloader/cache/disc/impl/ext/DiskLruCache.java com/puravidaapps/TaifunTextbox.java com/syper/SyperMoby/SyperMoby.java gnu/bytecode/ListCodeSize.java gnu/bytecode/ZipArchive.java gnu/bytecode/dump.java gnu/ecmascript/Lexer.java gnu/ecmascript/Parser.java gnu/expr/ApplicationMainSupport.java gnu/kawa/util/FileInfo.java gnu/kawa/util/FixupHtmlToc.java gnu/kawa/util/PreProcess.java gnu/kawa/xml/Attributes.java gnu/lists/CharBuffer.java gnu/lists/TreePosition.java kawa/Shell.java kawa/Telnet.java kawa/TelnetInputStream.java kawa/repl.java kawa/standard/ImportFromLibrary.java	Suppress the rule android_logging in com.webbrowserbeta Suppress the rule android_logging in com.webbrowserbeta only from these files
2	应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据	警告	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	com/nostra13/universalimageloader/utils/StorageUtils.java com/puravidaapps/TaifunTextbox.java com/syper/SyperMoby/SyperMoby.java	Suppress the rule android_read_write_external in com.webbrowserbeta Suppress the rule android_read_write_external in com.webbrowserbeta only from these files
3	应用程序使用不安全的随机数生成器	警告	CWE: CWE-330: 使用不充分的随机数 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-6	com/microsoft/appcenter/http/HttpClientRetryer.java	Suppress the rule android_insecure_random in com.webbrowserbeta Suppress the rule android_insecure_random in com.webbrowserbeta only from these files
4	不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击	高危	CWE: CWE-295: 证书验证不恰当 OWASP Top 10: M3: Insecure Communication OWASP MASVS: MSTG-NETWORK-3	com/sunny/CustomWebView/CustomWebView.java	Suppress the rule android_webview_ignore_ssl in com.webbrowserbeta Suppress the rule android_webview_ignore_ssl in com.webbrowserbeta only from these files
5	应用程序创建临时文件。敏感信息永远不应该被写进临时文件	警告	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	gnu/kawa/functions/FileUtils.java kawa/lib/files.java	Suppress the rule android_temp_file in com.webbrowserbeta Suppress the rule android_temp_file in com.webbrowserbeta only from these files
6	文件可能包含硬编码的敏感信息，如用户名、密码、密钥等	警告	CWE: CWE-312: 明文存储敏感信息 OWASP Top 10: M9: Reverse Engineering OWASP MASVS: MSTG-STORAGE-14	显示文件 com/microsoft/appcenter/AppCenter.java com/microsoft/appcenter/Constants.java com/microsoft/appcenter/channel/DefaultChannel.java com/microsoft/appcenter/http/DefaultHttpClient.java com/microsoft/appcenter/ingestion/OneCollectorIngestion.java com/microsoft/appcenter/ingestion/models/WrapperSdk.java com/microsoft/appcenter/ingestion/models/one/CommonSchemaLog.java com/microsoft/appcenter/persistence/DatabasePersistence.java com/microsoft/appcenter/utils/context/SessionContext.java com/microsoft/appcenter/utils/storage/DatabaseManager.java gnu/mapping/Procedure.java org/jose4j/jwk/KeyOperations.java org/jose4j/jwk/PublicJsonWebKey.java org/jose4j/jwx/HeaderParameterNames.java org/jose4j/keys/KeyPairUtil.java	Suppress the rule android_hardcoded in com.webbrowserbeta Suppress the rule android_hardcoded in com.webbrowserbeta only from these files
7	此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击	安全	OWASP MASVS: MSTG-NETWORK-4	org/jose4j/http/Get.java	Suppress the rule android_ssl_pinning in com.webbrowserbeta Suppress the rule android_ssl_pinning in com.webbrowserbeta only from these files
8	此应用程序使用SQL Cipher，确保密钥没有硬编码在代码中	信息	OWASP MASVS: MSTG-CRYPTO-1	com/microsoft/appcenter/utils/storage/DatabaseManager.java	Suppress the rule android_sql_cipher in com.webbrowserbeta Suppress the rule android_sql_cipher in com.webbrowserbeta only from these files
9	应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库	警告	CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当（'SQL 注入'） OWASP Top 10: M7: Client Code Quality	com/microsoft/appcenter/persistence/DatabasePersistence.java com/microsoft/appcenter/utils/storage/DatabaseManager.java	Suppress the rule android_sql_raw_query in com.webbrowserbeta Suppress the rule android_sql_raw_query in com.webbrowserbeta only from these files

动态库分析

No Shared Objects found.

序号	动态库	NX(堆栈禁止执行)	STACK CANARY(栈保护)	RELRO	RPATH（指定SO搜索路径）	RUNPATH（指定SO搜索路径）	FORTIFY(常用函数加强检查)	SYMBOLS STRIPPED(裁剪符号表)

文件分析

序号	问题	文件

VIRUSTOTAL扫描

检出率： 2 / 67 完整报告

反病毒引擎	检出结果
Google	Detected
Ikarus	Trojan.AndroidOS.Agent

滥用权限

恶意软件常用权限 2/30

android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE

其它常用权限 6/46

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_EXTERNAL_STORAGE
com.google.android.c2dm.permission.RECEIVE
android.permission.WRITE_EXTERNAL_STORAGE

恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。

IP地图

域名检测

域名	状态	中国境内	位置信息
javax.xml.transform.dom.domresult	安全	否	没有可用的地理位置信息。
my.image.server	安全	否	没有可用的地理位置信息。
community.thunkable.com	安全	否	IP地址: 184.105.99.43 国家: 美利坚合众国地区: 华盛顿城市: 西雅图查看: Google 地图
javax.xml.transform.stax.staxsource	安全	否	没有可用的地理位置信息。
my.kodular.io	安全	否	IP地址: 54.220.15.5 国家: 爱尔兰地区: 都柏林城市: 都柏林查看: Google 地图
play-lh.googleusercontent.com	安全	否	IP地址: 142.250.68.118 国家: 美利坚合众国地区: 加利福尼亚城市: 洛杉矶查看: Google 地图
fontawesome.com	安全	否	IP地址: 213.180.204.194 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
translate.yandex.net	安全	否	IP地址: 213.180.204.194 国家: 俄罗斯联邦地区: 莫斯科城市: 莫斯科查看: Google 地图
twitter.com	安全	否	IP地址: 104.244.42.129 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
javax.xml.transform.sax.saxsource	安全	否	没有可用的地理位置信息。
res.cloudinary.com	安全	否	IP地址: 23.222.204.53 国家: 美利坚合众国地区: 加利福尼亚城市: 洛杉矶查看: Google 地图
javax.xml.transform	安全	否	没有可用的地理位置信息。
mapstyle.withgoogle.com	安全	否	IP地址: 142.250.176.17 国家: 美利坚合众国地区: 加利福尼亚城市: 山景城查看: Google 地图
kawa.gnu.org	安全	否	没有可用的地理位置信息。
account.kodular.io	安全	否	IP地址: 172.67.208.111 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
api.openrouteservice.org	安全	否	IP地址: 129.206.5.53 国家: 德国地区: 巴登符腾堡城市: 海德堡查看: Google 地图
javax.xml.transform.dom.domsource	安全	否	没有可用的地理位置信息。
admob-gmats.uc.r.appspot.com	安全	否	IP地址: 142.250.217.148 国家: 美利坚合众国地区: 佛罗里达州城市: 迈阿密查看: Google 地图
tinywebdb.builder.makeroid.io	安全	否	IP地址: 172.67.186.194 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
atomdeveloper.com	安全	否	IP地址: 34.205.242.146 国家: 美利坚合众国地区: 弗吉尼亚州城市: 阿什本查看: Google 地图
docs.kodular.io	安全	否	IP地址: 185.199.108.153 国家: 美利坚合众国地区: 宾夕法尼亚城市: 加利福尼亚查看: Google 地图
javax.xml.transform.stax.staxresult	安全	否	没有可用的地理位置信息。
api.creator.kodular.io	安全	否	IP地址: 18.157.247.227 国家: 德国地区: 黑森城市: 美因河畔法兰克福查看: Google 地图
2.bp.blogspot.com	安全	否	IP地址: 142.250.188.225 国家: 美利坚合众国地区: 加利福尼亚城市: 山景城查看: Google 地图
community.kodular.io	安全	否	IP地址: 104.21.15.230 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
googlemobileadssdk.page.link	安全	否	IP地址: 142.250.176.1 国家: 美利坚合众国地区: 加利福尼亚城市: 山景城查看: Google 地图
pagead2.googlesyndication.com	安全	否	IP地址: 142.250.189.2 国家: 美利坚合众国地区: 加利福尼亚城市: 山景城查看: Google 地图
docs.oracle.com	安全	否	IP地址: 162.125.2.18 国家: 美利坚合众国地区: 加利福尼亚城市: 洛杉矶查看: Google 地图
goo.gl	安全	否	IP地址: 142.250.217.142 国家: 美利坚合众国地区: 佛罗里达州城市: 迈阿密查看: Google 地图
status.ocr.space	安全	否	IP地址: 140.82.63.111 国家: 美利坚合众国地区: 新泽西州城市: 皮斯卡塔韦查看: Google 地图
api.airtable.com	安全	否	IP地址: 44.208.49.53 国家: 美利坚合众国地区: 弗吉尼亚州城市: 阿什本查看: Google 地图
t.me	安全	否	IP地址: 149.154.167.99 国家: 大不列颠及北爱尔兰联合王国地区: 英格兰城市: 伦敦查看: Google 地图
javax.xml.transform.sax.saxresult	安全	否	没有可用的地理位置信息。
developer.amazon.com	安全	否	IP地址: 44.215.141.168 国家: 美利坚合众国地区: 弗吉尼亚州城市: 阿什本查看: Google 地图
login.live.com	安全	否	IP地址: 20.190.190.132 国家: 美利坚合众国地区: 亚利桑那州城市: 凤凰查看: Google 地图
material.io	安全	否	IP地址: 216.239.36.21 国家: 美利坚合众国地区: 加利福尼亚城市: 山景城查看: Google 地图
api.yandex.com	安全	否	IP地址: 213.180.204.242 国家: 俄罗斯联邦地区: 莫斯科城市: 莫斯科查看: Google 地图
login.yahoo.com	安全	否	IP地址: 162.125.2.18 国家: 美利坚合众国地区: 纽约城市: 纽约市查看: Google 地图
www.dropbox.com	安全	否	IP地址: 162.125.2.18 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
puravidaapps.com	安全	否	IP地址: 62.72.50.243 国家: 美利坚合众国地区: 亚利桑那州城市: 凤凰查看: Google 地图
dashboard.instantaccess.io	安全	否	没有可用的地理位置信息。
ocr.space	安全	否	IP地址: 51.116.246.104 国家: 美利坚合众国地区: 新泽西州城市: 皮斯卡塔韦查看: Google 地图
www.paypal.com	安全	否	IP地址: 104.16.44.99 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
mobile.events.data.microsoft.com	安全	否	IP地址: 51.116.246.104 国家: 德国地区: 黑森城市: 美因河畔法兰克福查看: Google 地图
tools.ietf.org	安全	否	IP地址: 104.16.44.99 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
in.appcenter.ms	安全	否	IP地址: 151.101.65.21 国家: 美利坚合众国地区: 弗吉尼亚州城市: 博伊顿查看: Google 地图
www.linkedin.com	安全	否	IP地址: 108.174.10.20 国家: 美国地区: 弗吉尼亚州城市: 阿什本查看: Google 地图
api.ocr.space	安全	否	IP地址: 136.243.195.202 国家: 德国地区: 萨克森城市: 法尔肯施泰因查看: Google 地图
onesignal.com	安全	否	IP地址: 104.16.160.145 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
www.kodular.io	安全	否	IP地址: 185.199.108.153 国家: 美利坚合众国地区: 宾夕法尼亚城市: 加利福尼亚查看: Google 地图
qexo.gnu.org	安全	否	没有可用的地理位置信息。
api.qrserver.com	安全	否	IP地址: 88.99.85.235 国家: 德国地区: 萨克森城市: 法尔肯施泰因查看: Google 地图
www.twitter.com	安全	否	IP地址: 104.244.42.1 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
gnu.org	安全	否	IP地址: 209.51.188.116 国家: 美利坚合众国地区: 马萨诸塞州城市: 萨默维尔查看: Google 地图

手机号码

网址

网址信息	源码文件
http://www.swiggy.com/ http://www.dictionary.com/ https://www.foodcloud.in/ https://www.google.com/ https://www.taskbucks.com/ https://www.snapdeal.com/ http://www.shopclues.com/ https://www.jio.com/ http://pizzaonline.dominos.co.in/ http://site21.way2sms.com/content/index.html https://www.cricbuzz.com/ http://online.pizzahut.co.in/ https://www.amazon.in/?ie=UTF8&amp https://www.freecharge.com/ https://www.foodmemories.com/ https://www.naukri.com/ http://www.lenskart.com/ http://www.mobikwik.com/ https://www.gmail.com/ http://www.jabong.com/ https://translate.google.co.in/ http://order.faasos.io/ http://www.foodpanda.in/ https://www.amazon.com/ http://flipkart.com/ https://dl.flipkart.com/dl/?affid=vjfeelthe https://www.paytm.com/ https://www.bikewale.com/ https://www.irctc.co.in/eticketing/loginHome.jsf https://www.telenor.in/ https://www.yahoo.com/ http://in.bookmyshow.com/movies https://www.justdial.com/ http://www.myntra.com/ http://bigbasket.com/ http://www.ebay.in/ https://www.olx.com/ http://www.quikr.com/ http://paytmmall.com https://www.facebook.com/ https://www.twitter.com/ https://www.bigbasket.com/ https://use.fontawesome.com/0d1ffa9424.js	自研引擎-A
https://github.com/opensourceaix/jsonutils	cn/colintree/aix/JsonUtils/JsonUtils.java
https://community.kodular.io/t/delayhandler-extension-may-be-similar-but-definitely-different/74079 https://community.kodular.io/t/delayhandler-extension-may-be-similar-but-definitely-different/74079' https://drive.google.com/uc?export=view&id=1kagafbflfbe_xf4s9_4kkktg1kfbvzqa https://drive.google.com/file/d/1rbpjjhphazhvqtokaiuhewmvemd2ujdk/view?usp=sharing'	io/DelayHandler/DelayHandler.java
http://kawa.gnu.org/unit	kawa/standard/Scheme.java
https://github.com/opensourceaix/jsonutils	cn/colintree/aix/JsonUtils/JsonUtilsSimple.java
http://res.cloudinary.com/gdguru111/image/upload/c_scale,w_25/v1531466377/125-512_fsr0zf.png https://www.dropbox.com/s/f25jvmbusramgbt/com.jerin.layoutdialog.aix?dl=0 https://community.thunkable.com/t/paid-extension-layoutdialog-3/36434?u=jerin_jacob	com/jerin/layoutdialog/LayoutDialog.java
https://tools.ietf.org/html/rfc7797#section-5.2	org/jose4j/jws/JsonWebSignature.java
http://gnu.org/kawa/cached-collections	gnu/xquery/util/NodeUtils.java
https://github.com/ysfchn/dynamiccomponents-ai2	com/yusufcihan/DynamicComponents/DynamicComponents.java
http://kawa.gnu.org/ http://qexo.gnu.org/	gnu/xquery/lang/XQuery.java
https://mobile.events.data.microsoft.com/onecollector/1.0	com/microsoft/appcenter/ingestion/OneCollectorIngestion.java
https://res.cloudinary.com/dujfnjfcz/image/upload/v1596225104/icon16.png	com/devyb/devybimageloader/DevYBImageLoader.java
http://kawa.gnu.org/unknown-namespace/	gnu/mapping/Namespace.java
https://atomdeveloper.com https://t.me/atomdeveloper	com/atomdeveloper/FirebaseCloudMessaging/FirebaseCloudMessaging.java
https://t.me/atomdeveloper	com/atomdeveloper/ManifestCode/ManifestCode.java
https://atomdeveloper.com https://t.me/atomdeveloper	com/atomdeveloper/MockWebViewC/MockWebViewC.java
https://in.appcenter.ms	com/microsoft/appcenter/ingestion/AppCenterIngestion.java
https://puravidaapps.com/images/taifun16.png https://puravidaapps.com/textbox.php	com/puravidaapps/TaifunTextbox.java
https://community.kodular.io/user_avatar/community.kodular.io/sumit1334/120/82654_2.png	com/Sumit1334/LayoutUtil/ExpandCollapseView.java
https://play-lh.googleusercontent.com/-4qmtuhhq9n2u6w_3dz1z8vsabkaswopfnwjlxrimiz2a9sqhbogxys8wkbnykr36to=s180	com/apphelper/responsiveapp/Responsive_Size.java
https://community.kodular.io/user_avatar/community.kodular.io/sumit1334/120/82654_2.png	com/Sumit1334/LayoutUtil/LayoutView.java
https://drive.google.com/uc?export=view&id=1kagafbflfbe_xf4s9_4kkktg1kfbvzqa https://account.kodular.io/api/startapp https://www.linkedin.com https://onesignal.com/api/v1/notifications file:///sdcard/appinventor/assets/arrow.gif https://googlemobileadssdk.page.link/admob-android-update-manifest http://gnu.org/kawa/cached-collections https://docs.kodular.io/components/monetization/facebook-rewarded/ https://docs.kodular.io/components/sensors/accelerometer/ https://material.io/resources/icons http://api.yandex.com/translate/ https://community.kodular.io/user_avatar/community.kodular.io/sumit1334/120/82654_2.png https://api.airtable.com/v0/ http://www.google.com/fusiontables/v2/query http://tinywebdb.builder.makeroid.io/ https://docs.kodular.io/components/monetization/admob-interstitial/ https://firebase.google.com/support/privacy/init-options https://pagead2.googlesyndication.com/pagead/gen_204?id=gmob-apps https://docs.kodular.io/components/monetization/in-app-update/ http://www.facebook.com https://docs.kodular.io/components/monetization/facebook-interstitial/ https://dashboard.instantaccess.io/api/partner/authorize?client_id= https://puravidaapps.com/images/taifun16.png https://api.creator.kodular.io/pollfish/v1?appid= https://googlemobileadssdk.page.link/ad-manager-android-update-manifest https://tools.ietf.org/html/rfc7797#section-5.2 https://community.kodular.io/t/delayhandler-extension-may-be-similar-but-definitely-different/74079' https://www.instagram.com/kodular/' https://github.com/opensourceaix/jsonutils www.kodular.io https://docs.kodular.io/components/user-interface/rating-bar/ http://2.bp.blogspot.com/-3c9ezbni9ra/uis93s6uqoi/aaaaaaaaejm/fatwa50u0by/w1200-h630-p-k-nu/hello+world+android+app.jpg https://community.kodular.io/t/delayhandler-extension-may-be-similar-but-definitely-different/74079 https://adservice.google.com/getconfig/pubvendors https://twitter.com https://res.cloudinary.com/dujfnjfcz/image/upload/v1596225104/icon16.png http://qexo.gnu.org/ https://dashboard.instantaccess.io/api/partner/status?client_id= https://www.google.com/dfp/senddebugdata http://api.qrserver.com/v1/create-qr-code/?data= http://javax.xml.transform.stax.staxresult/feature https://t.me/atomdeveloper https://fontawesome.com/cheatsheet https://api.creator.kodular.io/billing/v1?p=commission&i= www.facebook.com https://admob-gmats.uc.r.appspot.com/ https://docs.kodular.io/components/monetization/unity-ads_ads/ https://api.openrouteservice.org/v2/directions/ http://www.twitter.com https://docs.kodular.io/components/google/recaptcha/ https://goo.gl/j1swqy https://docs.oracle.com/javase/7/docs/api/java/text/simpledateformat.html https://api.creator.kodular.io/billing/v1?p=branding&i= https://www.dropbox.com/s/f25jvmbusramgbt/com.jerin.layoutdialog.aix?dl=0 https://status.ocr.space https://docs.kodular.io/components/user-interface/switch/ http://javax.xml.transform.sax.saxresult/feature https://docs.kodular.io/components/dynamic/dynamic-textbox/ http://javax.xml.transform https://login.yahoo.com https://community.thunkable.com/t/paid-extension-layoutdialog-3/36434?u=jerin_jacob http://name/yourimage.jpg http://javax.xml.transform.stax.staxsource/feature https://docs.kodular.io/components/layout/surface-view/ https://docs.kodular.io/components/user-interface/checkbox/ http://javax.xml.transform.dom.domsource/feature https://docs.kodular.io/components/user-interface/floating-action-button/ https://docs.kodular.io/components/storage/sqlite/ http://tinywebdb.builder.makeroid.io https://www.kodular.io https://docs.kodular.io/components/monetization/adcolony-interstitial/ https://%s/%s/%s https://accounts.google.com https://docs.kodular.io/components/sensors/fingerprint/ https://atomdeveloper.com http://javax.xml.transform.dom.domresult/feature http://my.image.server/images/%d/%d/%d.png https://docs.kodular.io/components/layout/space/ 127.0.0.1 https://ocr.space/ocrapi file:///sdcard https://puravidaapps.com/textbox.php file:///mnt/sdcard/kodular/assets/ https://in.appcenter.ms http://kawa.gnu.org/unit https://docs.kodular.io/components/monetization/facebook-banner/ https://goo.gl/afks2r http://www.google.com/admob https://docs.kodular.io/components/google/firebase-database/ https://my.kodular.io/ https://material.io/icons https://developer.amazon.com https://api.ocr.space/parse/image https://www.google.com/dfp/linkdevice https://docs.kodular.io/components/monetization/donate/ https://login.live.com https://www.google.com/voice/b/0/sms/send/ http://javax.xml.xmlconstants/feature/secure-processing https://www.google.com/voice/b/0/redirection/voice file:///mnt/sdcard/appinventor/ https://docs.kodular.io/components/monetization/whitemobi/ https://www.facebook.com https://www.google.com/recaptcha/api/siteverify https://docs.kodular.io/components/monetization/app-lovin/ https://play.google.com/store/apps/details?id=io.makeroid.companion http://kawa.gnu.org/unknown-namespace/ https://docs.kodular.io/components/user-interface/list-view-image-and-text/ file:///sdcard/ http://javax.xml.transform.sax.saxsource/feature http://twitter.com/oauth_clients/new https://docs.kodular.io/components/user-interface/textbox/ https://docs.kodular.io/components/drawing-and-animation/animation-util/ https://www.google.com/dfp/inapppreview https://docs.kodular.io/components/google/google-maps/ http://kawa.gnu.org/ https://docs.kodular.io/components/storage/cryptography/ https://drive.google.com/file/d/1rbpjjhphazhvqtokaiuhewmvemd2ujdk/view?usp=sharing' https://docs.kodular.io/components/user-interface/radio-button/ https://www.paypal.com http://javax.xml.transform.stream.streamsource/feature http://javax.xml.transform.stream.streamresult/feature https://www.google.com/dfp/debugsignals https://translate.yandex.net/api/v1.5/tr.json/translate?key= https://code.google.com/apis/console/ https://mapstyle.withgoogle.com/ https://accounts.google.com/o/oauth2/revoke?token= https://play-lh.googleusercontent.com/-4qmtuhhq9n2u6w_3dz1z8vsabkaswopfnwjlxrimiz2a9sqhbogxys8wkbnykr36to=s180 https://docs.kodular.io/components/monetization/unity-banner/ https://docs.kodular.io/components/connectivity/wifi/ https://docs.kodular.io/components/monetization/amazon-interstitial/ https://api.ocr.space/parse/imageurl?apikey= https://docs.kodular.io/components/monetization/in-app-billing/ http://res.cloudinary.com/gdguru111/image/upload/c_scale,w_25/v1531466377/125-512_fsr0zf.png https://docs.kodular.io/components/monetization/leadbolt/ https://docs.kodular.io/components/monetization/amazon-banner/ https://mobile.events.data.microsoft.com/onecollector/1.0 https://plus.google.com/ https://github.com/ysfchn/dynamiccomponents-ai2 https://api.creator.kodular.io/ads/	自研引擎-S

FIREBASE实例

邮箱

EMAIL	源码文件
per@bothner.com	kawa/repl.java
pat@pat.net	com/databySide/bsh/Interpreter.java
elonen@iki.fi info@ktogias.gr per@bothner.com ben.bitdiddle@gmail.com pat@pat.net	自研引擎-S

追踪器

名称	类别	网址
Google AdMob	Advertisement	https://reports.exodus-privacy.eu.org/trackers/312
Google Firebase Analytics	Analytics	https://reports.exodus-privacy.eu.org/trackers/49
Microsoft Visual Studio App Center Analytics	Analytics	https://reports.exodus-privacy.eu.org/trackers/243
Microsoft Visual Studio App Center Crashes	Crash reporting	https://reports.exodus-privacy.eu.org/trackers/238

密钥凭证

已显示 33 个secrets

1、 AdMob广告平台的=> "com.google.android.gms.ads.APPLICATION_ID" : "ca-app-pub-7994701262897206~3954890134"
2、 "google_api_key" : "AIzaSyAmQ3FXGZGMhOON44r5STItX-8BbqXt2gk"
3、 "google_crash_reporting_api_key" : "AIzaSyAmQ3FXGZGMhOON44r5STItX-8BbqXt2gk"
4、 115792089210356248762697446949407573529996955224135760342422259061068512044369
5、 6864797660130609714981900799081393217269435300143305409394463459185543183397656052122559640661454554977296311391480858037121987999716643812574028291115057148
6、 3Dz1Z8vsaBKAsWOPFnWJlXRIMiZ2A9SqHBogXyS8WkBNYkr36To=s180
7、 34294338-ee8e-4726-a3aa-9a17934f7bcc
8、 Ct4eTlXHBIY2EaV7t7LjJaynVJCpkv4LKjTTAumiGUIuQhrNhZLuF
9、 115792089210356248762697446949407573530086143415290314195533631308867097853951
10、 6864797660130609714981900799081393217269435300143305409394463459185543183397656052122559640661454554977296311391480858037121987999716643812574028291115057151
11、 115792089210356248762697446949407573530086143415290314195533631308867097853948
12、 48439561293906451759052585252797914202762949526041747995844080717082404635286
13、 39402006196394479212279040100143613805079739270465446667946905279627659399113263569398956308152294913554433653942643
14、 8ef0f45e-f83b-426b-a128-bdb4ed9682cc
15、 ed4cb4717d157f447848fe03524da24e461028e1
16、 1093849038073734274511112390766805569936207598951683748994586394495953116150735016013708737573759623248592132296706313309438452531591012912142327488478985984
17、 36134250956749795798585127919587881956611106672985015071877198253568414405109
18、 39402006196394479212279040100143613805079739270465446667948293404245721771496870329047266088258938001861606973112319
19、 41058363725152142129326129780047268409114441015993725554835256314039467401291
20、 8325710961489029985546751289520108179287853048861315594709205902480503199884419224438643760392947333078086511627871
21、 B3EEABB8EE11C2BE770B684D95219ECB
22、 39402006196394479212279040100143613805079739270465446667948293404245721771496870329047266088258938001861606973112316
23、 6864797660130609714981900799081393217269435300143305409394463459185543183397655394245057746333217197532963996371363321113864768612440380340372808892707005449
24、 765978e4c340012f50733280368a0ccc4a14dfb7
25、 VTdL1VbC2tejvcI2BlMkEpk1BzBZI0KQB0GaDWFLN
26、 26247035095799689268623156744566981891852923491109213387815615900925518854738050089022388053975719786650872476732087
27、 sXchDaQebHnPiGvyDOAT4saGEUetSyo9MKLOoWFsueri23bOdgWp4Dy1WlUzewbgBHod5pcM9H95GQRV3JDXboIRROSBigeC5yjU1hGzHHyXss8UDprecbAYxknTcQkhslANGRUZmdTOQ5qTRsLAt6BTYuyvVRdhS8exSZEy
28、 d6cc0f65b29878589f00564d52c8654967e9bcf8
29、 3757180025770020463545507224491183603594455134769762486694567779615544477440556316691234405012945539562144444537289428522585666729196580810124344277578376784
30、 2661740802050217063228768716723360960729859168756973147706671368418802944996427808491545080627771902352094241225065558662157113545570916814161637315895999846
31、 27580193559959705877849011840389048093056905856361568521428707301988689241309860865136260764883745107765439761230575
32、 a77fd14efadb2781c61772b29ca898d5d5964502
33、 18e6b6d5-7c2b-4a1a-9042-e3448b8c323c

字符串列表

建议导出为TXT，方便查看。

活动列表

已显示 8 个activities

1、 io.kodular.coc_fun9452.wbbV2_5_7.historyScreen
2、 io.kodular.coc_fun9452.wbbV2_5_7.Screen2
3、 io.kodular.coc_fun9452.wbbV2_5_7.Screen1
4、 io.kodular.coc_fun9452.wbbV2_5_7.bookmarks
5、 com.google.android.gms.common.api.GoogleApiActivity
6、 com.google.android.gms.auth.api.signin.internal.SignInHubActivity
7、 com.google.firebase.auth.internal.FederatedSignInActivity
8、 com.google.android.gms.ads.AdActivity

服务列表

已显示 6 个services

1、 com.google.android.gms.auth.api.signin.RevocationBoundService
2、 com.google.firebase.components.ComponentDiscoveryService
3、 com.google.firebase.messaging.FirebaseMessagingService
4、 com.atomdeveloper.FirebaseCloudMessaging.MyFirebaseMessagingService
5、 com.google.firebase.components.ComponentDiscoveryService
6、 com.google.android.gms.ads.AdService

广播接收者列表

已显示 3 个receivers

1、 com.google.firebase.iid.FirebaseInstanceIdReceiver
2、 com.atomdeveloper.FirebaseCloudMessaging.PushNotification$PushReceiver
3、 com.atomdeveloper.FirebaseCloudMessaging.MessageStyleNotification$InputReceiver

内容提供者列表

已显示 3 个providers

1、 arm.ۢۢۖۢۢۖۢۢۖۖۢۢۢۖۢۢۢۖۢۖۢۢۖۖۖۖۖۢۢۖ
2、 com.google.firebase.provider.FirebaseInitProvider
3、 androidx.core.content.FileProvider

第三方SDK

SDK名称	开发者	描述信息
Google Sign-In	Google	提供使用 Google 登录的 API。
Google Play Service	Google	借助 Google Play 服务，您的应用可以利用由 Google 提供的最新功能，例如地图，Google+ 等，并通过 Google Play 商店以 APK 的形式分发自动平台更新。这样一来，您的用户可以更快地接收更新，并且可以更轻松地集成 Google 必须提供的最新信息。
File Provider	Android	FileProvider 是 ContentProvider 的特殊子类，它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。
Firebase	Google	Firebase 提供了分析、数据库、消息传递和崩溃报告等功能，可助您快速采取行动并专注于您的用户。

文件列表

AndroidManifest.xml
classes.dex
classes2.dex
classes3.dex
res/anim/abc_fade_in.xml
res/anim/abc_fade_out.xml
res/anim/abc_grow_fade_in_from_bottom.xml
res/anim/abc_popup_enter.xml
res/anim/abc_popup_exit.xml
res/anim/abc_shrink_fade_out_from_bottom.xml
res/anim/abc_slide_in_bottom.xml
res/anim/abc_slide_in_top.xml
res/anim/abc_slide_out_bottom.xml
res/anim/abc_slide_out_top.xml
res/anim/abc_tooltip_enter.xml
res/anim/abc_tooltip_exit.xml
res/anim/design_bottom_sheet_slide_in.xml
res/anim/design_bottom_sheet_slide_out.xml
res/anim/design_snackbar_in.xml
res/anim/design_snackbar_out.xml
res/anim/fadein.xml
res/anim/fadeout.xml
res/anim/hold.xml
res/anim/slide_enter.xml
res/anim/slide_enter_reverse.xml
res/anim/slide_exit.xml
res/anim/slide_exit_reverse.xml
res/anim/slide_v_enter.xml
res/anim/slide_v_enter_reverse.xml
res/anim/slide_v_exit.xml
res/anim/slide_v_exit_reverse.xml
res/anim/zoom_enter.xml
res/anim/zoom_enter_reverse.xml
res/anim/zoom_exit.xml
res/anim/zoom_exit_reverse.xml
res/animator/design_appbar_state_list_animator.xml
res/animator/design_fab_hide_motion_spec.xml
res/animator/design_fab_show_motion_spec.xml
res/animator/mtrl_btn_state_list_anim.xml
res/animator/mtrl_btn_unelevated_state_list_anim.xml
res/animator/mtrl_chip_state_list_anim.xml
res/animator/mtrl_fab_hide_motion_spec.xml
res/animator/mtrl_fab_show_motion_spec.xml
res/animator/mtrl_fab_transformation_sheet_collapse_spec.xml
res/animator/mtrl_fab_transformation_sheet_expand_spec.xml
res/color/abc_background_cache_hint_selector_material_dark.xml
res/color/abc_background_cache_hint_selector_material_light.xml
res/color/abc_btn_colored_borderless_text_material.xml
res/color/abc_btn_colored_text_material.xml
res/color/abc_hint_foreground_material_dark.xml
res/color/abc_hint_foreground_material_light.xml
res/color/abc_primary_text_disable_only_material_dark.xml
res/color/abc_primary_text_disable_only_material_light.xml
res/color/abc_primary_text_material_dark.xml
res/color/abc_primary_text_material_light.xml
res/color/abc_search_url_text.xml
res/color/abc_secondary_text_material_dark.xml
res/color/abc_secondary_text_material_light.xml
res/color/abc_tint_btn_checkable.xml
res/color/abc_tint_default.xml
res/color/abc_tint_edittext.xml
res/color/abc_tint_seek_thumb.xml
res/color/abc_tint_spinner.xml
res/color/abc_tint_switch_track.xml
res/color/common_google_signin_btn_text_dark.xml
res/color/common_google_signin_btn_text_light.xml
res/color/common_google_signin_btn_tint.xml
res/color/design_error.xml
res/color/design_tint_password_toggle.xml
res/color/mtrl_bottom_nav_colored_item_tint.xml
res/color/mtrl_bottom_nav_item_tint.xml
res/color/mtrl_btn_bg_color_selector.xml
res/color/mtrl_btn_ripple_color.xml
res/color/mtrl_btn_stroke_color_selector.xml
res/color/mtrl_btn_text_btn_ripple_color.xml
res/color/mtrl_btn_text_color_selector.xml
res/color/mtrl_chip_background_color.xml
res/color/mtrl_chip_close_icon_tint.xml
res/color/mtrl_chip_ripple_color.xml
res/color/mtrl_chip_text_color.xml
res/color/mtrl_fab_ripple_color.xml
res/color/mtrl_tabs_colored_ripple_color.xml
res/color/mtrl_tabs_icon_color_selector.xml
res/color/mtrl_tabs_icon_color_selector_colored.xml
res/color/mtrl_tabs_legacy_text_color_selector.xml
res/color/mtrl_tabs_ripple_color.xml
res/color/mtrl_text_btn_text_color_selector.xml
res/color/switch_thumb_material_dark.xml
res/color/switch_thumb_material_light.xml
res/color-v23/abc_btn_colored_borderless_text_material.xml
res/color-v23/abc_btn_colored_text_material.xml
res/color-v23/abc_color_highlight_material.xml
res/color-v23/abc_tint_btn_checkable.xml
res/color-v23/abc_tint_default.xml
res/color-v23/abc_tint_edittext.xml
res/color-v23/abc_tint_seek_thumb.xml
res/color-v23/abc_tint_spinner.xml
res/color-v23/abc_tint_switch_track.xml
res/color-v23/design_tint_password_toggle.xml
res/drawable/abc_action_bar_item_background_material.xml
res/drawable/abc_btn_borderless_material.xml
res/drawable/abc_btn_check_material.xml
res/drawable/abc_btn_colored_material.xml
res/drawable/abc_btn_default_mtrl_shape.xml
res/drawable/abc_btn_radio_material.xml
res/drawable/abc_cab_background_internal_bg.xml
res/drawable/abc_cab_background_top_material.xml
res/drawable/abc_dialog_material_background.xml
res/drawable/abc_edit_text_material.xml
res/drawable/abc_ic_ab_back_material.xml
res/drawable/abc_ic_arrow_drop_right_black_24dp.xml
res/drawable/abc_ic_clear_material.xml
res/drawable/abc_ic_go_search_api_material.xml
res/drawable/abc_ic_menu_overflow_material.xml
res/drawable/abc_ic_search_api_material.xml
res/drawable/abc_ic_voice_search_api_material.xml
res/drawable/abc_item_background_holo_dark.xml
res/drawable/abc_item_background_holo_light.xml
res/drawable/abc_list_divider_material.xml
res/drawable/abc_list_selector_background_transition_holo_dark.xml
res/drawable/abc_list_selector_background_transition_holo_light.xml
res/drawable/abc_list_selector_holo_dark.xml
res/drawable/abc_list_selector_holo_light.xml
res/drawable/abc_ratingbar_indicator_material.xml
res/drawable/abc_ratingbar_material.xml
res/drawable/abc_ratingbar_small_material.xml
res/drawable/abc_seekbar_thumb_material.xml
res/drawable/abc_seekbar_tick_mark_material.xml
res/drawable/abc_seekbar_track_material.xml
res/drawable/abc_spinner_textfield_background_material.xml
res/drawable/abc_switch_thumb_material.xml
res/drawable/abc_tab_indicator_material.xml
res/drawable/abc_textfield_search_material.xml
res/drawable/abc_text_cursor_material.xml
res/drawable/abc_vector_test.xml
res/drawable/avd_hide_password.xml
res/drawable/avd_hide_password_1.xml
res/drawable/avd_hide_password_2.xml
res/drawable/avd_hide_password_3.xml
res/drawable/avd_show_password.xml
res/drawable/avd_show_password_1.xml
res/drawable/avd_show_password_2.xml
res/drawable/avd_show_password_3.xml
res/drawable/common_google_signin_btn_icon_dark.xml
res/drawable/common_google_signin_btn_icon_dark_focused.xml
res/drawable/common_google_signin_btn_icon_dark_normal.xml
res/drawable/common_google_signin_btn_icon_disabled.xml
res/drawable/common_google_signin_btn_icon_light.xml
res/drawable/common_google_signin_btn_icon_light_focused.xml
res/drawable/common_google_signin_btn_icon_light_normal.xml
res/drawable/common_google_signin_btn_text_dark.xml
res/drawable/common_google_signin_btn_text_dark_focused.xml
res/drawable/common_google_signin_btn_text_dark_normal.xml
res/drawable/common_google_signin_btn_text_disabled.xml
res/drawable/common_google_signin_btn_text_light.xml
res/drawable/common_google_signin_btn_text_light_focused.xml
res/drawable/common_google_signin_btn_text_light_normal.xml
res/drawable/design_bottom_navigation_item_background.xml
res/drawable/design_fab_background.xml
res/drawable/design_password_eye.xml
res/drawable/design_snackbar_background.xml
res/drawable/divider_transparent.xml
res/drawable/ic_mtrl_chip_checked_black.xml
res/drawable/ic_mtrl_chip_checked_circle.xml
res/drawable/ic_mtrl_chip_close_circle.xml
res/drawable/mtrl_snackbar_background.xml
res/drawable/mtrl_tabs_default_indicator.xml
res/drawable/navigation_empty_icon.xml
res/drawable/navigation_item.xml
res/drawable/notification_action_background.xml
res/drawable/notification_bg.xml
res/drawable/notification_bg_low.xml
res/drawable/notification_icon_background.xml
res/drawable/notification_tile_bg.xml
res/drawable/ripple_effect.xml
res/drawable/splashicon.png
res/drawable/tooltip_frame_dark.xml
res/drawable/tooltip_frame_light.xml
res/drawable/ya.png
res/drawable-anydpi/design_ic_visibility.xml
res/drawable-anydpi/design_ic_visibility_off.xml
res/drawable-hdpi/abc_ab_share_pack_mtrl_alpha.9.png
res/drawable-hdpi/abc_btn_check_to_on_mtrl_000.png
res/drawable-hdpi/abc_btn_check_to_on_mtrl_015.png
res/drawable-hdpi/abc_btn_radio_to_on_mtrl_000.png
res/drawable-hdpi/abc_btn_radio_to_on_mtrl_015.png
res/drawable-hdpi/abc_btn_switch_to_on_mtrl_00001.9.png
res/drawable-hdpi/abc_btn_switch_to_on_mtrl_00012.9.png
res/drawable-hdpi/abc_cab_background_top_mtrl_alpha.9.png
res/drawable-hdpi/abc_ic_commit_search_api_mtrl_alpha.png
res/drawable-hdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-hdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-hdpi/abc_ic_menu_paste_mtrl_am_alpha.png
res/drawable-hdpi/abc_ic_menu_selectall_mtrl_alpha.png
res/drawable-hdpi/abc_ic_menu_share_mtrl_alpha.png
res/drawable-hdpi/abc_ic_star_black_16dp.png
res/drawable-hdpi/abc_ic_star_black_36dp.png
res/drawable-hdpi/abc_ic_star_black_48dp.png
res/drawable-hdpi/abc_ic_star_half_black_16dp.png
res/drawable-hdpi/abc_ic_star_half_black_36dp.png
res/drawable-hdpi/abc_ic_star_half_black_48dp.png
res/drawable-hdpi/abc_list_divider_mtrl_alpha.9.png
res/drawable-hdpi/abc_list_focused_holo.9.png
res/drawable-hdpi/abc_list_longpressed_holo.9.png
res/drawable-hdpi/abc_list_pressed_holo_dark.9.png
res/drawable-hdpi/abc_list_pressed_holo_light.9.png
res/drawable-hdpi/abc_list_selector_disabled_holo_dark.9.png
res/drawable-hdpi/abc_list_selector_disabled_holo_light.9.png
res/drawable-hdpi/abc_menu_hardkey_panel_mtrl_mult.9.png
res/drawable-hdpi/abc_popup_background_mtrl_mult.9.png
res/drawable-hdpi/abc_scrubber_control_off_mtrl_alpha.png
res/drawable-hdpi/abc_scrubber_control_to_pressed_mtrl_000.png
res/drawable-hdpi/abc_scrubber_control_to_pressed_mtrl_005.png
res/drawable-hdpi/abc_scrubber_primary_mtrl_alpha.9.png
res/drawable-hdpi/abc_scrubber_track_mtrl_alpha.9.png
res/drawable-hdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-hdpi/abc_switch_track_mtrl_alpha.9.png
res/drawable-hdpi/abc_tab_indicator_mtrl_alpha.9.png
res/drawable-hdpi/abc_textfield_activated_mtrl_alpha.9.png
res/drawable-hdpi/abc_textfield_default_mtrl_alpha.9.png
res/drawable-hdpi/abc_textfield_search_activated_mtrl_alpha.9.png
res/drawable-hdpi/abc_textfield_search_default_mtrl_alpha.9.png
res/drawable-hdpi/abc_text_select_handle_left_mtrl_dark.png
res/drawable-hdpi/abc_text_select_handle_left_mtrl_light.png
res/drawable-hdpi/abc_text_select_handle_middle_mtrl_dark.png
res/drawable-hdpi/abc_text_select_handle_middle_mtrl_light.png
res/drawable-hdpi/abc_text_select_handle_right_mtrl_dark.png
res/drawable-hdpi/abc_text_select_handle_right_mtrl_light.png
res/drawable-hdpi/common_full_open_on_phone.png
res/drawable-hdpi/common_google_signin_btn_icon_dark_normal_background.9.png
res/drawable-hdpi/common_google_signin_btn_icon_light_normal_background.9.png
res/drawable-hdpi/common_google_signin_btn_text_dark_normal_background.9.png
res/drawable-hdpi/common_google_signin_btn_text_light_normal_background.9.png
res/drawable-hdpi/design_ic_visibility.png
res/drawable-hdpi/design_ic_visibility_off.png
res/drawable-hdpi/googleg_disabled_color_18.png
res/drawable-hdpi/googleg_standard_color_18.png
res/drawable-hdpi/notification_bg_low_normal.9.png
res/drawable-hdpi/notification_bg_low_pressed.9.png
res/drawable-hdpi/notification_bg_normal.9.png
res/drawable-hdpi/notification_bg_normal_pressed.9.png
res/drawable-hdpi/notify_panel_notification_icon_bg.png
res/drawable-ldrtl-hdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-ldrtl-hdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-ldrtl-hdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-ldrtl-mdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-ldrtl-mdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-ldrtl-mdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-ldrtl-xhdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-ldrtl-xhdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-ldrtl-xhdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-ldrtl-xxhdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-ldrtl-xxhdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-ldrtl-xxhdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-ldrtl-xxxhdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-ldrtl-xxxhdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-ldrtl-xxxhdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-mdpi/abc_ab_share_pack_mtrl_alpha.9.png
res/drawable-mdpi/abc_btn_check_to_on_mtrl_000.png
res/drawable-mdpi/abc_btn_check_to_on_mtrl_015.png
res/drawable-mdpi/abc_btn_radio_to_on_mtrl_000.png
res/drawable-mdpi/abc_btn_radio_to_on_mtrl_015.png
res/drawable-mdpi/abc_btn_switch_to_on_mtrl_00001.9.png
res/drawable-mdpi/abc_btn_switch_to_on_mtrl_00012.9.png
res/drawable-mdpi/abc_cab_background_top_mtrl_alpha.9.png
res/drawable-mdpi/abc_ic_commit_search_api_mtrl_alpha.png
res/drawable-mdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-mdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-mdpi/abc_ic_menu_paste_mtrl_am_alpha.png
res/drawable-mdpi/abc_ic_menu_selectall_mtrl_alpha.png
res/drawable-mdpi/abc_ic_menu_share_mtrl_alpha.png
res/drawable-mdpi/abc_ic_star_black_16dp.png
res/drawable-mdpi/abc_ic_star_black_36dp.png
res/drawable-mdpi/abc_ic_star_black_48dp.png
res/drawable-mdpi/abc_ic_star_half_black_16dp.png
res/drawable-mdpi/abc_ic_star_half_black_36dp.png
res/drawable-mdpi/abc_ic_star_half_black_48dp.png
res/drawable-mdpi/abc_list_divider_mtrl_alpha.9.png
res/drawable-mdpi/abc_list_focused_holo.9.png
res/drawable-mdpi/abc_list_longpressed_holo.9.png
res/drawable-mdpi/abc_list_pressed_holo_dark.9.png
res/drawable-mdpi/abc_list_pressed_holo_light.9.png
res/drawable-mdpi/abc_list_selector_disabled_holo_dark.9.png
res/drawable-mdpi/abc_list_selector_disabled_holo_light.9.png
res/drawable-mdpi/abc_menu_hardkey_panel_mtrl_mult.9.png
res/drawable-mdpi/abc_popup_background_mtrl_mult.9.png
res/drawable-mdpi/abc_scrubber_control_off_mtrl_alpha.png
res/drawable-mdpi/abc_scrubber_control_to_pressed_mtrl_000.png
res/drawable-mdpi/abc_scrubber_control_to_pressed_mtrl_005.png
res/drawable-mdpi/abc_scrubber_primary_mtrl_alpha.9.png
res/drawable-mdpi/abc_scrubber_track_mtrl_alpha.9.png
res/drawable-mdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-mdpi/abc_switch_track_mtrl_alpha.9.png
res/drawable-mdpi/abc_tab_indicator_mtrl_alpha.9.png
res/drawable-mdpi/abc_textfield_activated_mtrl_alpha.9.png
res/drawable-mdpi/abc_textfield_default_mtrl_alpha.9.png
res/drawable-mdpi/abc_textfield_search_activated_mtrl_alpha.9.png
res/drawable-mdpi/abc_textfield_search_default_mtrl_alpha.9.png
res/drawable-mdpi/abc_text_select_handle_left_mtrl_dark.png
res/drawable-mdpi/abc_text_select_handle_left_mtrl_light.png
res/drawable-mdpi/abc_text_select_handle_middle_mtrl_dark.png
res/drawable-mdpi/abc_text_select_handle_middle_mtrl_light.png
res/drawable-mdpi/abc_text_select_handle_right_mtrl_dark.png
res/drawable-mdpi/abc_text_select_handle_right_mtrl_light.png
res/drawable-mdpi/common_google_signin_btn_icon_dark_normal_background.9.png
res/drawable-mdpi/common_google_signin_btn_icon_light_normal_background.9.png
res/drawable-mdpi/common_google_signin_btn_text_dark_normal_background.9.png
res/drawable-mdpi/common_google_signin_btn_text_light_normal_background.9.png
res/drawable-mdpi/design_ic_visibility.png
res/drawable-mdpi/design_ic_visibility_off.png
res/drawable-mdpi/googleg_disabled_color_18.png
res/drawable-mdpi/googleg_standard_color_18.png
res/drawable-mdpi/notification_bg_low_normal.9.png
res/drawable-mdpi/notification_bg_low_pressed.9.png
res/drawable-mdpi/notification_bg_normal.9.png
res/drawable-mdpi/notification_bg_normal_pressed.9.png
res/drawable-mdpi/notify_panel_notification_icon_bg.png
res/drawable-v23/abc_control_background_material.xml
res/drawable-watch/abc_dialog_material_background.xml
res/drawable-watch/common_google_signin_btn_text_dark_normal.xml
res/drawable-watch/common_google_signin_btn_text_disabled.xml
res/drawable-watch/common_google_signin_btn_text_light_normal.xml
res/drawable-xhdpi/abc_ab_share_pack_mtrl_alpha.9.png
res/drawable-xhdpi/abc_btn_check_to_on_mtrl_000.png
res/drawable-xhdpi/abc_btn_check_to_on_mtrl_015.png
res/drawable-xhdpi/abc_btn_radio_to_on_mtrl_000.png
res/drawable-xhdpi/abc_btn_radio_to_on_mtrl_015.png
res/drawable-xhdpi/abc_btn_switch_to_on_mtrl_00001.9.png
res/drawable-xhdpi/abc_btn_switch_to_on_mtrl_00012.9.png
res/drawable-xhdpi/abc_cab_background_top_mtrl_alpha.9.png
res/drawable-xhdpi/abc_ic_commit_search_api_mtrl_alpha.png
res/drawable-xhdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-xhdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-xhdpi/abc_ic_menu_paste_mtrl_am_alpha.png
res/drawable-xhdpi/abc_ic_menu_selectall_mtrl_alpha.png
res/drawable-xhdpi/abc_ic_menu_share_mtrl_alpha.png
res/drawable-xhdpi/abc_ic_star_black_16dp.png
res/drawable-xhdpi/abc_ic_star_black_36dp.png
res/drawable-xhdpi/abc_ic_star_black_48dp.png
res/drawable-xhdpi/abc_ic_star_half_black_16dp.png
res/drawable-xhdpi/abc_ic_star_half_black_36dp.png
res/drawable-xhdpi/abc_ic_star_half_black_48dp.png
res/drawable-xhdpi/abc_list_divider_mtrl_alpha.9.png
res/drawable-xhdpi/abc_list_focused_holo.9.png
res/drawable-xhdpi/abc_list_longpressed_holo.9.png
res/drawable-xhdpi/abc_list_pressed_holo_dark.9.png
res/drawable-xhdpi/abc_list_pressed_holo_light.9.png
res/drawable-xhdpi/abc_list_selector_disabled_holo_dark.9.png
res/drawable-xhdpi/abc_list_selector_disabled_holo_light.9.png
res/drawable-xhdpi/abc_menu_hardkey_panel_mtrl_mult.9.png
res/drawable-xhdpi/abc_popup_background_mtrl_mult.9.png
res/drawable-xhdpi/abc_scrubber_control_off_mtrl_alpha.png
res/drawable-xhdpi/abc_scrubber_control_to_pressed_mtrl_000.png
res/drawable-xhdpi/abc_scrubber_control_to_pressed_mtrl_005.png
res/drawable-xhdpi/abc_scrubber_primary_mtrl_alpha.9.png
res/drawable-xhdpi/abc_scrubber_track_mtrl_alpha.9.png
res/drawable-xhdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-xhdpi/abc_switch_track_mtrl_alpha.9.png
res/drawable-xhdpi/abc_tab_indicator_mtrl_alpha.9.png
res/drawable-xhdpi/abc_textfield_activated_mtrl_alpha.9.png
res/drawable-xhdpi/abc_textfield_default_mtrl_alpha.9.png
res/drawable-xhdpi/abc_textfield_search_activated_mtrl_alpha.9.png
res/drawable-xhdpi/abc_textfield_search_default_mtrl_alpha.9.png
res/drawable-xhdpi/abc_text_select_handle_left_mtrl_dark.png
res/drawable-xhdpi/abc_text_select_handle_left_mtrl_light.png
res/drawable-xhdpi/abc_text_select_handle_middle_mtrl_dark.png
res/drawable-xhdpi/abc_text_select_handle_middle_mtrl_light.png
res/drawable-xhdpi/abc_text_select_handle_right_mtrl_dark.png
res/drawable-xhdpi/abc_text_select_handle_right_mtrl_light.png
res/drawable-xhdpi/common_full_open_on_phone.png
res/drawable-xhdpi/common_google_signin_btn_icon_dark_normal_background.9.png
res/drawable-xhdpi/common_google_signin_btn_icon_light_normal_background.9.png
res/drawable-xhdpi/common_google_signin_btn_text_dark_normal_background.9.png
res/drawable-xhdpi/common_google_signin_btn_text_light_normal_background.9.png
res/drawable-xhdpi/design_ic_visibility.png
res/drawable-xhdpi/design_ic_visibility_off.png
res/drawable-xhdpi/googleg_disabled_color_18.png
res/drawable-xhdpi/googleg_standard_color_18.png
res/drawable-xhdpi/notification_bg_low_normal.9.png
res/drawable-xhdpi/notification_bg_low_pressed.9.png
res/drawable-xhdpi/notification_bg_normal.9.png
res/drawable-xhdpi/notification_bg_normal_pressed.9.png
res/drawable-xhdpi/notify_panel_notification_icon_bg.png
res/drawable-xxhdpi/abc_ab_share_pack_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_btn_check_to_on_mtrl_000.png
res/drawable-xxhdpi/abc_btn_check_to_on_mtrl_015.png
res/drawable-xxhdpi/abc_btn_radio_to_on_mtrl_000.png
res/drawable-xxhdpi/abc_btn_radio_to_on_mtrl_015.png
res/drawable-xxhdpi/abc_btn_switch_to_on_mtrl_00001.9.png
res/drawable-xxhdpi/abc_btn_switch_to_on_mtrl_00012.9.png
res/drawable-xxhdpi/abc_cab_background_top_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_ic_commit_search_api_mtrl_alpha.png
res/drawable-xxhdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-xxhdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-xxhdpi/abc_ic_menu_paste_mtrl_am_alpha.png
res/drawable-xxhdpi/abc_ic_menu_selectall_mtrl_alpha.png
res/drawable-xxhdpi/abc_ic_menu_share_mtrl_alpha.png
res/drawable-xxhdpi/abc_ic_star_black_16dp.png
res/drawable-xxhdpi/abc_ic_star_black_36dp.png
res/drawable-xxhdpi/abc_ic_star_black_48dp.png
res/drawable-xxhdpi/abc_ic_star_half_black_16dp.png
res/drawable-xxhdpi/abc_ic_star_half_black_36dp.png
res/drawable-xxhdpi/abc_ic_star_half_black_48dp.png
res/drawable-xxhdpi/abc_list_divider_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_list_focused_holo.9.png
res/drawable-xxhdpi/abc_list_longpressed_holo.9.png
res/drawable-xxhdpi/abc_list_pressed_holo_dark.9.png
res/drawable-xxhdpi/abc_list_pressed_holo_light.9.png
res/drawable-xxhdpi/abc_list_selector_disabled_holo_dark.9.png
res/drawable-xxhdpi/abc_list_selector_disabled_holo_light.9.png
res/drawable-xxhdpi/abc_menu_hardkey_panel_mtrl_mult.9.png
res/drawable-xxhdpi/abc_popup_background_mtrl_mult.9.png
res/drawable-xxhdpi/abc_scrubber_control_off_mtrl_alpha.png
res/drawable-xxhdpi/abc_scrubber_control_to_pressed_mtrl_000.png
res/drawable-xxhdpi/abc_scrubber_control_to_pressed_mtrl_005.png
res/drawable-xxhdpi/abc_scrubber_primary_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_scrubber_track_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-xxhdpi/abc_switch_track_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_tab_indicator_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_textfield_activated_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_textfield_default_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_textfield_search_activated_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_textfield_search_default_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_text_select_handle_left_mtrl_dark.png
res/drawable-xxhdpi/abc_text_select_handle_left_mtrl_light.png
res/drawable-xxhdpi/abc_text_select_handle_middle_mtrl_dark.png
res/drawable-xxhdpi/abc_text_select_handle_middle_mtrl_light.png
res/drawable-xxhdpi/abc_text_select_handle_right_mtrl_dark.png
res/drawable-xxhdpi/abc_text_select_handle_right_mtrl_light.png
res/drawable-xxhdpi/common_google_signin_btn_icon_dark_normal_background.9.png
res/drawable-xxhdpi/common_google_signin_btn_icon_light_normal_background.9.png
res/drawable-xxhdpi/common_google_signin_btn_text_dark_normal_background.9.png
res/drawable-xxhdpi/common_google_signin_btn_text_light_normal_background.9.png
res/drawable-xxhdpi/design_ic_visibility.png
res/drawable-xxhdpi/design_ic_visibility_off.png
res/drawable-xxhdpi/googleg_disabled_color_18.png
res/drawable-xxhdpi/googleg_standard_color_18.png
res/drawable-xxxhdpi/abc_btn_check_to_on_mtrl_000.png
res/drawable-xxxhdpi/abc_btn_check_to_on_mtrl_015.png
res/drawable-xxxhdpi/abc_btn_radio_to_on_mtrl_000.png
res/drawable-xxxhdpi/abc_btn_radio_to_on_mtrl_015.png
res/drawable-xxxhdpi/abc_btn_switch_to_on_mtrl_00001.9.png
res/drawable-xxxhdpi/abc_btn_switch_to_on_mtrl_00012.9.png
res/drawable-xxxhdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-xxxhdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-xxxhdpi/abc_ic_menu_paste_mtrl_am_alpha.png
res/drawable-xxxhdpi/abc_ic_menu_selectall_mtrl_alpha.png
res/drawable-xxxhdpi/abc_ic_menu_share_mtrl_alpha.png
res/drawable-xxxhdpi/abc_ic_star_black_16dp.png
res/drawable-xxxhdpi/abc_ic_star_black_36dp.png
res/drawable-xxxhdpi/abc_ic_star_black_48dp.png
res/drawable-xxxhdpi/abc_ic_star_half_black_16dp.png
res/drawable-xxxhdpi/abc_ic_star_half_black_36dp.png
res/drawable-xxxhdpi/abc_ic_star_half_black_48dp.png
res/drawable-xxxhdpi/abc_scrubber_control_to_pressed_mtrl_000.png
res/drawable-xxxhdpi/abc_scrubber_control_to_pressed_mtrl_005.png
res/drawable-xxxhdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-xxxhdpi/abc_switch_track_mtrl_alpha.9.png
res/drawable-xxxhdpi/abc_tab_indicator_mtrl_alpha.9.png
res/drawable-xxxhdpi/abc_text_select_handle_left_mtrl_dark.png
res/drawable-xxxhdpi/abc_text_select_handle_left_mtrl_light.png
res/drawable-xxxhdpi/abc_text_select_handle_right_mtrl_dark.png
res/drawable-xxxhdpi/abc_text_select_handle_right_mtrl_light.png
res/drawable-xxxhdpi/design_ic_visibility.png
res/drawable-xxxhdpi/design_ic_visibility_off.png
res/interpolator/mtrl_fast_out_linear_in.xml
res/interpolator/mtrl_fast_out_slow_in.xml
res/interpolator/mtrl_linear.xml
res/interpolator/mtrl_linear_out_slow_in.xml
res/layout/abc_action_bar_title_item.xml
res/layout/abc_action_bar_up_container.xml
res/layout/abc_action_menu_item_layout.xml
res/layout/abc_action_menu_layout.xml
res/layout/abc_action_mode_bar.xml
res/layout/abc_action_mode_close_item_material.xml
res/layout/abc_activity_chooser_view.xml
res/layout/abc_activity_chooser_view_list_item.xml
res/layout/abc_alert_dialog_button_bar_material.xml
res/layout/abc_alert_dialog_material.xml
res/layout/abc_alert_dialog_title_material.xml
res/layout/abc_cascading_menu_item_layout.xml
res/layout/abc_dialog_title_material.xml
res/layout/abc_expanded_menu_layout.xml
res/layout/abc_list_menu_item_checkbox.xml
res/layout/abc_list_menu_item_icon.xml
res/layout/abc_list_menu_item_layout.xml
res/layout/abc_list_menu_item_radio.xml
res/layout/abc_popup_menu_header_item_layout.xml
res/layout/abc_popup_menu_item_layout.xml
res/layout/abc_screen_content_include.xml
res/layout/abc_screen_simple.xml
res/layout/abc_screen_simple_overlay_action_mode.xml
res/layout/abc_screen_toolbar.xml
res/layout/abc_search_dropdown_item_icons_2line.xml
res/layout/abc_search_view.xml
res/layout/abc_select_dialog_material.xml
res/layout/abc_tooltip.xml
res/layout/basic_map.xml
res/layout/browser_actions_context_menu_page.xml
res/layout/browser_actions_context_menu_row.xml
res/layout/design_bottom_navigation_item.xml
res/layout/design_bottom_sheet_dialog.xml
res/layout/design_layout_snackbar.xml
res/layout/design_layout_snackbar_include.xml
res/layout/design_layout_tab_icon.xml
res/layout/design_layout_tab_text.xml
res/layout/design_menu_item_action_area.xml
res/layout/design_navigation_item.xml
res/layout/design_navigation_item_header.xml
res/layout/design_navigation_item_separator.xml
res/layout/design_navigation_item_subheader.xml
res/layout/design_navigation_menu.xml
res/layout/design_navigation_menu_item.xml
res/layout/design_text_input_password_icon.xml
res/layout/makeroid_list_image_text_big.xml
res/layout/makeroid_list_image_text_big_right.xml
res/layout/makeroid_list_image_text_normal.xml
res/layout/makeroid_list_image_text_normal_right.xml
res/layout/makeroid_list_image_text_small.xml
res/layout/makeroid_list_image_text_small_right.xml
res/layout/mtrl_layout_snackbar.xml
res/layout/mtrl_layout_snackbar_include.xml
res/layout/notification_action.xml
res/layout/notification_action_tombstone.xml
res/layout/notification_template_custom_big.xml
res/layout/notification_template_icon_group.xml
res/layout/notification_template_part_chronometer.xml
res/layout/notification_template_part_time.xml
res/layout/select_dialog_item_material.xml
res/layout/select_dialog_multichoice_material.xml
res/layout/select_dialog_singlechoice_material.xml
res/layout/support_simple_spinner_dropdown_item.xml
res/layout-sw600dp/design_layout_snackbar.xml
res/layout-sw600dp/mtrl_layout_snackbar.xml
res/layout-v22/abc_alert_dialog_button_bar_material.xml
res/layout-v26/abc_screen_toolbar.xml
res/layout-watch/abc_alert_dialog_button_bar_material.xml
res/layout-watch/abc_alert_dialog_title_material.xml
res/mipmap-anydpi-v26/ic_launcher.xml
res/mipmap-anydpi-v26/ic_launcher_round.xml
res/mipmap-hdpi/ic_launcher.png
res/mipmap-hdpi/ic_launcher_foreground.png
res/mipmap-hdpi/ic_launcher_round.png
res/mipmap-mdpi/ic_launcher.png
res/mipmap-mdpi/ic_launcher_foreground.png
res/mipmap-mdpi/ic_launcher_round.png
res/mipmap-xhdpi/ic_launcher.png
res/mipmap-xhdpi/ic_launcher_foreground.png
res/mipmap-xhdpi/ic_launcher_round.png
res/mipmap-xxhdpi/ic_launcher.png
res/mipmap-xxhdpi/ic_launcher_foreground.png
res/mipmap-xxhdpi/ic_launcher_round.png
res/mipmap-xxxhdpi/ic_launcher.png
res/mipmap-xxxhdpi/ic_launcher_foreground.png
res/mipmap-xxxhdpi/ic_launcher_round.png
res/xml/network_security_config.xml
res/xml/provider_paths.xml
resources.arsc
assets/1521347508253.png
assets/1_IIMR_WUyNcxixtBlUg6bTQ.png
assets/270-2700147_your-creative-space-page-header-design-png.png
assets/3cdc2ff1c9ce6cc66a13cf9e9d3a6082-diamond-precious-gemstone-flat-icon-by-vexels.png
assets/all-recharge-api-500x500.png
assets/amazon-scrnshot.png
assets/banner1.png
assets/bike.png
assets/cancel_black.png
assets/cancel_white.png
assets/com.syper.SyperMoby/ylkmniop.zip
assets/download_(3).png
assets/fa-brands-400.ttf
assets/fa-regular-400.ttf
assets/fa-solid-900.ttf
assets/fontawesome-webfont.ttf
assets/images_(1).png
assets/images_(5).jpg
assets/incognito.png
assets/index.html
assets/MaterialIcons-Regular.ttf
assets/MaterialIconsRound-Regular(1).otf
assets/open-sans.bold.ttf
assets/open-sans.extrabold.ttf
assets/open-sans.semibold.ttf
assets/paint-splatter-600x224.png
assets/Roboto-Regular.ttf
assets/Roboto-Thin.ttf
assets/shopping.png
assets/undraw_functions_egi3.svg
assets/undraw_functions_egi3_(1).png
assets/undraw_videographer_nnc7.png
assets/unnamed_(6).png
assets/utility.png
assets/wbbLogo.png
assets/WhatsAppImage2018-10-06at16.23.08.jpeg
assets/yahoo.png
META-INF/ANDROIDK.SF
META-INF/ANDROIDK.RSA
META-INF/MANIFEST.MF

污点分析

当apk较大时，代码量会很大，造成数据流图（ICFG）呈现爆炸式增长，所以该功能比较耗时，请先喝杯咖啡，耐心等待……

规则名称	描述信息	操作
病毒分析	使用安卓恶意软件常用的API进行污点分析	开始分析
漏洞挖掘	漏洞挖掘场景下的污点分析	开始分析
隐私合规	隐私合规场景下的污点分析：组件内污点传播、组件间污点传播、组件与库函数之间的污点传播	开始分析
密码分析	分析加密算法是否使用常量密钥、静态初始化的向量（IV）、加密模式是否使用ECB等	开始分析
Callback	因为Android中系统级的Callback并不会出现显式地进行回调方法的调用，所以如果需要分析Callback方法需要在声明文件中将其声明，这里提供一份AndroidCallbacks.txt文件，里面是一些常见的原生回调接口或类，如果有特殊接口需求，可以联系管理员	开始分析

时间	执行功能	执行结果
2024-09-27 15:01:30	生成哈希值	成功
2024-09-27 15:01:30	提取APK	成功
2024-09-27 15:01:34	探测加固信息为：未加壳	成功
2024-09-27 15:01:34	开始解压文件	成功
2024-09-27 15:01:36	获取硬编码证书/密钥库	成功
2024-09-27 15:01:41	解析 AndroidManifest.xml	成功
2024-09-27 15:01:41	使用 androguard 解析 APK	成功
2024-09-27 15:01:41	提取Manifest数据	成功
2024-09-27 15:01:41	提取应用程序基础数据，例如：app名称，版本，包名称等信息	成功
2024-09-27 15:01:41	正在从Play Store获取详细信息: com.webbrowserbeta	成功
2024-09-27 15:01:42	Manifest分析开始	成功
2024-09-27 15:01:42	读取网络安全配置 network_security_config.xml	成功
2024-09-27 15:01:42	解析网络安全配置	成功
2024-09-27 15:01:43	检查恶意软件权限	成功
2024-09-27 15:01:43	提取APK中所有的类和方法	成功
2024-09-27 15:01:47	解析出11392个class，102146个method	成功
2024-09-27 15:01:47	SO文件分析开始	成功
2024-09-27 15:01:48	读取代码签名证书	成功
2024-09-27 15:01:48	检测追踪器	成功
2024-09-27 15:01:49	将 APK 反编译为 Java	成功
2024-09-27 15:02:20	代码分析开始于 - java_source	成功
2024-09-27 15:02:20	Android SAST 开始	成功
2024-09-27 15:02:23	Android API分析开始	成功
2024-09-27 15:02:27	开始进行Android 权限映射	成功
2024-09-27 15:02:29	Android权限映射已完成	成功
2024-09-27 15:02:31	从 APK 中提取字符串数据	成功
2024-09-27 15:02:36	从代码中提取字符串数据	成功
2024-09-27 15:02:36	从代码中提取字符串值和凭证数据	成功
2024-09-27 15:02:40	对提取的域名执行恶意软件检查	成功
2024-09-27 15:02:48	VirusTotal: 检查现有报告	成功
2024-09-27 15:02:49	VirusTotal: Scan finished, information embedded	成功
2024-09-27 15:02:49	保存到数据库	成功