For S9 4.5版本 | 静态分析 _南明离火移动安全分析平台

温馨提示：本平台仅供研究软件风险、安全评估，禁止用于非法用途。由于展示的数据过于全面，请耐心等待加载完成。如有疑问或建议，可加入我们的微信群讨论

应用图标

文件信息

文件名称 com.jb.gokeyboard.theme.emojiztfors9.getjar v4.5.apk
文件大小 6.66MB
MD5 27cf44ec6e0720408f5ef017a90a3331
SHA1 0ec69a17513780e3b4fdbdd677c955f45568a4f4
SHA256 a551a5eda99bdb38679ac43c01971ce386d721c6fed9bab4884d0b0c6bef0a3f
病毒检测文件安全

应用信息

应用名称 For S9
包名 com.jb.gokeyboard.theme.emojiztfors9.getjar
主活动 com.keyboard.gdpr.ui.GdprCheckActivity
目标SDK 23 最小SDK 16
版本号 4.5 子版本号 201
加固信息未加壳

非法应用检测（该功能即将上线，识别赌博、诈骗、色情和黑产等类型应用）

组件导出信息

查看

扫描选项

重新扫描管理规则动态分析

反编译代码

Manifest文件查看

APK文件成为会员，解锁下载

Java源代码查看 -- 下载

证书信息

二进制文件已签名
v1 签名: True
v2 签名: True
v3 签名: False
v4 签名: False
主题: C=086, ST=guangdong, L=guangzhou, O=cooltouch, OU=cooltouch, CN=cooltouch
签名算法: rsassa_pkcs1v15
有效期自: 2010-09-25 01:17:48+00:00
有效期至: 2035-09-19 01:17:48+00:00
发行人: C=086, ST=guangdong, L=guangzhou, O=cooltouch, OU=cooltouch, CN=cooltouch
序列号: 0x4c9d4dbc
哈希算法: md5
证书MD5: a47e8f43e213c621f8e5e856492eaba3
证书SHA1: 99400662e7f989a47a3ed684bb97874fd2e9c4a0
证书SHA256: 7533f69e6feb732e23b9344e6568b80ebc586f8122c4a83873d567f3ba0fbf70
证书SHA512: 35a5ea4afc570ed440a9cb446cd83d18b0a532de904cf97bfd56bcf6643034fa4ec41317f754e859d87c322e12a6211e69dd50309bd615ed33b99c640fb4ab5a
公钥算法: rsa
密钥长度: 1024
指纹: 7f93840aa8ca67e9b16390b85c764c81d05688ea473f16c9a80bc65d1e70d178
找到 1 个唯一证书

应用程序权限

权限名称	安全等级	权限内容	权限描述	关联代码
android.permission.WAKE_LOCK	危险	防止手机休眠	允许应用程序防止手机休眠，在手机屏幕关闭后后台进程仍然运行。	显示文件 com/mopub/mobileads/VastVideoViewController.java com/mopub/mraid/MraidVideoViewController.java
android.permission.INTERNET	危险	完全互联网访问	允许应用程序创建网络套接字。	显示文件 com/android/internal/http/multipart/MultipartEntity.java com/gau/go/gostaticsdk/connect/BaseConnectHandle.java com/gau/go/gostaticsdk/connect/BasicConnHandle.java com/gau/utils/net/HttpConnectScheduler.java com/gau/utils/net/connector/HttpConnector.java com/gau/utils/net/connector/HttpConnectorAlive.java com/gau/utils/net/operator/ByteArrayHttpOperatror.java com/gau/utils/net/request/THttpRequest.java com/google/android/apps/analytics/NetworkDispatcher.java com/jb/ga0/commerce/util/Machine.java com/jb/ga0/commerce/util/imagemanager/NetImageLoader.java com/jb/ga0/commerce/util/retrofit/ClientProvider.java com/jb/ga0/commerce/util/retrofit/RetrofitRequest.java com/jb/ga0/commerce/util/retrofit/cache/Cache.java com/jb/gokeyboard/theme/template/httpwecloud/controller/b.java com/jiubang/commerce/ad/url/AdRedirectUrlUtils.java com/jiubang/commerce/fbreplace/ServerManager.java com/jiubang/commerce/statistics/adinfo/http/BaseHttpConnector.java com/jiubang/commerce/utils/ImageUtils.java com/mopub/common/DownloadResponse.java com/mopub/common/MoPubHttpUrlConnection.java com/mopub/common/UrlResolutionTask.java com/mopub/mobileads/VastXmlManagerAggregator.java com/mopub/mobileads/VideoDownloader.java com/mopub/mraid/MraidNativeCommandHandler.java com/mopub/volley/toolbox/BasicNetwork.java com/mopub/volley/toolbox/HttpClientStack.java com/mopub/volley/toolbox/HurlStack.java com/nostra13/universalimageloader/core/download/a.java me/xiaopan/sketch/c/b.java
android.permission.ACCESS_NETWORK_STATE	普通	获取网络状态	允许应用程序查看所有网络的状态。	显示文件 com/gau/go/gostaticsdk/utiltool/Machine.java com/gau/go/gostaticsdk/utiltool/UtilTool.java com/gau/utils/net/util/NetUtil.java com/google/android/apps/analytics/GoogleAnalyticsTracker.java com/jb/ga0/commerce/util/Machine.java com/jb/ga0/commerce/util/NetUtil.java com/jb/ga0/commerce/util/http/GoHttpHeadUtil.java com/jb/gokeyboard/theme/template/util/b.java com/jb/gokeyboard/theme/template/util/k.java com/jb/gokeyboard/theme/template/util/q.java com/jiubang/commerce/fbreplace/FbReplaceManager.java com/jiubang/commerce/mopub/supply/AbStractAbManager.java com/jiubang/commerce/receiver/NetWorkDynamicBroadcastReceiver.java com/jiubang/commerce/utils/NetStateMonitor.java com/jiubang/commerce/utils/NetworkUtils.java com/mopub/common/ClientMetadata.java com/mopub/common/util/DeviceUtils.java com/mopub/mobileads/AdViewController.java
android.permission.WRITE_EXTERNAL_STORAGE	危险	读取/修改/删除外部存储内容	允许应用程序写入外部存储。	显示文件 com/gau/go/gostaticsdk/scheduler/GetCtrlInfoTask.java com/gau/go/gostaticsdk/utiltool/UtilTool.java com/jb/ga0/commerce/util/io/BitmapUtility.java com/jb/ga0/commerce/util/io/FileUtil.java com/jb/ga0/commerce/util/zip/ZipFilesUtils.java com/jb/gokeyboard/theme/template/httpwecloud/a/a.java com/jb/gokeyboard/theme/template/util/i.java com/jiubang/commerce/ad/AdSdkDebugConfig.java com/jiubang/commerce/utils/FileCacheUtils.java com/jiubang/commerce/utils/FileUtils.java com/jiubang/commerce/utils/ImageUtils.java com/mopub/common/DiskLruCache.java com/mopub/mraid/MraidNativeCommandHandler.java com/mopub/volley/toolbox/DiskBasedCache.java com/nostra13/universalimageloader/a/a/a/a.java com/nostra13/universalimageloader/a/a/a/a/a.java me/xiaopan/sketch/util/DiskLruCache.java pl/droidsonroids/gif/i.java
com.google.android.providers.gsf.permission.READ_GSERVICES	未知	未知权限	来自 android 引用的未知权限。
android.permission.SET_WALLPAPER	普通	设置壁纸	允许应用程序设置壁纸。	显示文件 com/gau/go/gostaticsdk/StatisticsManager.java com/jb/ga0/commerce/util/imagemanager/LruImageCache.java com/jb/gokeyboard/theme/template/wallpaper/LiveWallpaperService.java com/jb/gokeyboard/theme/template/wallpaper/b.java com/mopub/common/d.java com/mopub/nativeads/MoPubStreamAdPlacer.java com/mopub/nativeads/c.java
android.permission.GET_TASKS	危险	检索当前运行的应用程序	允许应用程序检索有关当前和最近运行的任务的信息。恶意应用程序可借此发现有关其他应用程序的保密信息。	显示文件 com/gau/go/gostaticsdk/StatisticsManager.java com/gau/go/gostaticsdk/utiltool/Machine.java com/jb/ga0/commerce/util/AppUtils.java com/jb/ga0/commerce/util/topApp/TopHelper.java com/jb/gokeyboard/theme/template/util/b.java com/jiubang/commerce/statistics/AppOpenActivateUtil.java com/jiubang/commerce/utils/AppUtils.java com/jiubang/commerce/utils/ProcessUtil.java me/xiaopan/sketch/util/f.java
android.permission.ACCESS_DOWNLOAD_MANAGER	签名(系统)	访问下载管理器	这个权限是允许应用访问下载管理器，以便管理大型下载操作。
android.permission.ACCESS_ALL_DOWNLOADS	未知	未知权限	来自 android 引用的未知权限。
android.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED	未知	未知权限	来自 android 引用的未知权限。
android.permission.ACCESS_COARSE_LOCATION	危险	获取粗略位置	通过WiFi或移动基站的方式获取用户粗略的经纬度信息，定位精度大概误差在30~1500米。恶意程序可以用它来确定您的大概位置。	显示文件 com/mopub/common/LocationService.java
android.permission.ACCESS_FINE_LOCATION	危险	获取精确位置	通过GPS芯片接收卫星的定位信息，定位精度达10米以内。恶意程序可以用它来确定您所在的位置。	显示文件 com/mopub/common/LocationService.java
android.permission.DISABLE_KEYGUARD	危险	禁用键盘锁	允许应用程序停用键锁和任何关联的密码安全设置。例如，在手机上接听电话时停用键锁，在通话结束后重新启用键锁。
android.permission.VIBRATE	普通	控制振动器	允许应用程序控制振动器，用于消息通知振动功能。

证书安全分析

高危

0

警告

1

信息

1

标题	严重程度	描述信息
已签名应用	信息	应用程序已使用代码签名证书进行签名

MANIFEST分析

高危

3

警告

14

信息

0

屏蔽

0

序号	问题	严重程度	描述信息	操作
1	应用程序可以安装在有漏洞的已更新 Android 版本上 Android 4.1-4.1.2, [minSdk=16]	信息	该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。	对应用 com.jb.gokeyboard.theme.emojiztfors9.getjar 禁止使用 vulnerable_os_version 规则
2	应用程序数据可以被备份 [android:allowBackup=true]	警告	这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。	对应用 com.jb.gokeyboard.theme.emojiztfors9.getjar 禁止使用 app_allowbackup 规则
3	Activity (com.jb.gokeyboard.theme.template.MainActivity) 的启动模式不是standard模式	高危	Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。	对应用 com.jb.gokeyboard.theme.emojiztfors9.getjar 禁止使用 activity_non_standard_launchmode 规则
4	Activity （com.jb.gokeyboard.theme.template.MainActivity）容易受到 Android Task Hijacking/StrandHogg 的攻击。	高危	活动不应将启动模式属性设置为“singleTask”。然后，其他应用程序可以将恶意活动放置在活动栈顶部，从而导致任务劫持/StrandHogg 1.0 漏洞。这使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。您还可以将应用的目标 SDK 版本 (23) 更新到 28 或更高版本以在平台级别修复此问题。	对应用 com.jb.gokeyboard.theme.emojiztfors9.getjar 禁止使用 activity_task_hijacking 规则
5	Activity (com.jb.gokeyboard.theme.template.MainActivity) 未被保护。存在一个intent-filter。	警告	发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。	对应用 com.jb.gokeyboard.theme.emojiztfors9.getjar 禁止使用 activity_exported_intent_filter_exists 规则
6	Activity (com.jb.gokeyboard.theme.template.crashreport.CrashReportDialog) 的启动模式不是standard模式	高危	Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。	对应用 com.jb.gokeyboard.theme.emojiztfors9.getjar 禁止使用 activity_non_standard_launchmode 规则
7	Activity (com.jb.gokeyboard.theme.template.crashreport.CrashReportDialog) 未被保护。 [android:exported=true]	警告	发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.jb.gokeyboard.theme.emojiztfors9.getjar 禁止使用 activity_explicitly_exported 规则
8	Service (com.jb.gokeyboard.theme.template.wallpaper.LiveWallpaperService) 受权限保护, 但是应该检查权限的保护级别。 Permission: android.permission.BIND_WALLPAPER [android:exported=true]	警告	发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。	对应用 com.jb.gokeyboard.theme.emojiztfors9.getjar 禁止使用 service_exported_protected_permission_not_defined 规则
9	Service (com.jb.gokeyboard.theme.template.alarm.GoKeyboardInstallCheckService) 未被保护。存在一个intent-filter。	警告	发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。	对应用 com.jb.gokeyboard.theme.emojiztfors9.getjar 禁止使用 service_exported_intent_filter_exists 规则
10	Service (com.jb.gokeyboard.theme.template.crashreport.CrashSendService) 未被保护。存在一个intent-filter。	警告	发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。	对应用 com.jb.gokeyboard.theme.emojiztfors9.getjar 禁止使用 service_exported_intent_filter_exists 规则
11	Broadcast Receiver (com.jb.gokeyboard.theme.template.google.analytic.ReferrerInfoReceiver) 未被保护。 [android:exported=true]	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.jb.gokeyboard.theme.emojiztfors9.getjar 禁止使用 receiver_explicitly_exported 规则
12	Broadcast Receiver (com.jb.gokeyboard.theme.template.alarm.CheckInstallGoKeyboardReceiver) 未被保护。 [android:exported=true]	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.jb.gokeyboard.theme.emojiztfors9.getjar 禁止使用 receiver_explicitly_exported 规则
13	Broadcast Receiver (com.jb.gokeyboard.theme.template.statistics.AlarmStatisticReceiver) 未被保护。存在一个intent-filter。	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。	对应用 com.jb.gokeyboard.theme.emojiztfors9.getjar 禁止使用 receiver_exported_intent_filter_exists 规则
14	Broadcast Receiver (com.jb.gokeyboard.theme.template.crashreport.CrashSendBroadCastReceiver) 未被保护。存在一个intent-filter。	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。	对应用 com.jb.gokeyboard.theme.emojiztfors9.getjar 禁止使用 receiver_exported_intent_filter_exists 规则
15	Broadcast Receiver (com.jb.gokeyboard.theme.template.httpwecloud.controller.WecloudTimingReceiver) 未被保护。存在一个intent-filter。	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。	对应用 com.jb.gokeyboard.theme.emojiztfors9.getjar 禁止使用 receiver_exported_intent_filter_exists 规则
16	Broadcast Receiver (com.jb.gokeyboard.theme.template.guideoptimize.GuideOptimizeReceiver) 未被保护。 [android:exported=true]	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.jb.gokeyboard.theme.emojiztfors9.getjar 禁止使用 receiver_explicitly_exported 规则
17	Broadcast Receiver (com.jiubang.commerce.receiver.BootBroadcastReceiver) 未被保护。存在一个intent-filter。	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。	对应用 com.jb.gokeyboard.theme.emojiztfors9.getjar 禁止使用 receiver_exported_intent_filter_exists 规则
18	Broadcast Receiver (com.jiubang.commerce.receiver.AppBroadcastReceiver) 未被保护。存在一个intent-filter。	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。	对应用 com.jb.gokeyboard.theme.emojiztfors9.getjar 禁止使用 receiver_exported_intent_filter_exists 规则

可浏览的Activity组件

ACTIVITY	INTENT

网络通信安全

序号	范围	严重级别	描述

API调用分析

API功能	源码文件
加密解密-> 信息摘要算法	显示文件 com/cs/bd/gdpr/core/util/c.java com/gau/go/gostaticsdk/encrypt/CryptTool.java com/jb/ga0/commerce/util/encrypt/CryptTool.java com/jb/ga0/commerce/util/encrypt/MD5.java com/jb/gokeyboard/theme/template/util/MD5.java com/mopub/common/util/Utils.java com/nostra13/universalimageloader/a/a/b/c.java me/xiaopan/sketch/util/e.java
一般功能-> 获取系统服务(getSystemService)	显示文件 com/cs/bd/gdpr/core/util/g.java com/cs/bd/gdpr/core/util/h.java com/gau/go/gostaticsdk/StatisticsManager.java com/gau/go/gostaticsdk/scheduler/SchedulerManager.java com/gau/go/gostaticsdk/utiltool/CpuManager.java com/gau/go/gostaticsdk/utiltool/DrawUtils.java com/gau/go/gostaticsdk/utiltool/Machine.java com/gau/go/gostaticsdk/utiltool/UtilTool.java com/gau/utils/net/util/NetUtil.java com/jb/ga0/commerce/util/AppUtils.java com/jb/ga0/commerce/util/CustomAlarm.java com/jb/ga0/commerce/util/DrawUtils.java com/jb/ga0/commerce/util/Machine.java com/jb/ga0/commerce/util/NetUtil.java com/jb/ga0/commerce/util/http/GoHttpHeadUtil.java com/jb/ga0/commerce/util/imagemanager/LruImageCache.java com/jb/ga0/commerce/util/topApp/TopHelper.java com/jb/gokeyboard/theme/d/b.java com/jb/gokeyboard/theme/template/a.java com/jb/gokeyboard/theme/template/alarm/CheckInstallGoKeyboardReceiver.java com/jb/gokeyboard/theme/template/alarm/GoKeyboardInstallCheckService.java com/jb/gokeyboard/theme/template/crashreport/CrashReportDialog.java com/jb/gokeyboard/theme/template/crashreport/b.java com/jb/gokeyboard/theme/template/crashreport/c.java com/jb/gokeyboard/theme/template/guideoptimize/b.java com/jb/gokeyboard/theme/template/httpwecloud/controller/a.java com/jb/gokeyboard/theme/template/service/ThemeMainService.java com/jb/gokeyboard/theme/template/statistics/c.java com/jb/gokeyboard/theme/template/util/b.java com/jb/gokeyboard/theme/template/util/h.java com/jb/gokeyboard/theme/template/util/k.java com/jb/gokeyboard/theme/template/util/q.java com/jb/gokeyboard/theme/template/view/ContentFrame.java com/jb/gokeyboard/theme/template/view/MainContentFrame.java com/jb/gokeyboard/theme/template/view/PercentLinearLayout.java com/jiubang/commerce/ad/intelligent/api/IntelligentApi.java com/jiubang/commerce/ad/intelligent/api/NativePreHelper.java com/jiubang/commerce/ad/notification/ActivationGuideNotification.java com/jiubang/commerce/ad/window/ActivationGuideWindowManager.java com/jiubang/commerce/ad/window/ExitGoogleWindowManager.java com/jiubang/commerce/ad/window/GuideDownloadWindowManager.java com/jiubang/commerce/fbreplace/AdReplaceContext.java com/jiubang/commerce/fbreplace/FbReplaceManager.java com/jiubang/commerce/mopub/mopubstate/GomoMopubView.java com/jiubang/commerce/mopub/supply/AbStractAbManager.java com/jiubang/commerce/mopub/utils/ScreenUtils.java com/jiubang/commerce/mopub/utils/SimpleAB.java com/jiubang/commerce/receiver/NetWorkDynamicBroadcastReceiver.java com/jiubang/commerce/statistics/AppOpenActivateUtil.java com/jiubang/commerce/utils/AdTimer.java com/jiubang/commerce/utils/AppUtils.java com/jiubang/commerce/utils/DrawUtils.java com/jiubang/commerce/utils/NetStateMonitor.java com/jiubang/commerce/utils/NetworkUtils.java com/jiubang/commerce/utils/ProcessUtil.java com/jiubang/commerce/utils/SystemUtils.java com/keyboard/gdpr/c.java com/mopub/common/ClientMetadata.java com/mopub/common/LocationService.java com/mopub/common/util/DeviceUtils.java com/mopub/mobileads/AdViewController.java com/mopub/mobileads/BaseVideoPlayerActivity.java com/mopub/mobileads/BaseWebView.java com/mopub/mobileads/VastManager.java com/mopub/mobileads/VastXmlManagerAggregator.java com/mopub/mraid/MraidController.java com/mopub/network/MaxWidthImageLoader.java me/xiaopan/sketch/cache/h.java me/xiaopan/sketch/util/f.java
一般功能-> IPC通信	显示文件 com/cs/bd/gdpr/core/a.java com/cs/bd/gdpr/core/util/BaseReceiver.java com/gau/go/gostaticsdk/StatisticsManager.java com/gau/go/gostaticsdk/scheduler/SchedulerManager.java com/gau/go/gostaticsdk/scheduler/SchedulerTask.java com/gau/go/gostaticsdk/utiltool/UtilTool.java com/jb/ga0/commerce/util/AppUtils.java com/jb/ga0/commerce/util/CustomAlarm.java com/jb/ga0/commerce/util/GoogleMarketUtils.java com/jb/ga0/commerce/util/Machine.java com/jb/ga0/commerce/util/io/MultiprocessSharedPreferences.java com/jb/ga0/commerce/util/observer/AppChangeObserver.java com/jb/ga0/commerce/util/observer/NetStateObserver.java com/jb/ga0/commerce/util/observer/SDCardMountObserver.java com/jb/ga0/commerce/util/topApp/TopHelper.java com/jb/gokeyboard/theme/d/b.java com/jb/gokeyboard/theme/d/c.java com/jb/gokeyboard/theme/template/GOKeyboardPackageManager.java com/jb/gokeyboard/theme/template/MainActivity.java com/jb/gokeyboard/theme/template/ThemeApplication.java com/jb/gokeyboard/theme/template/alarm/CheckInstallGoKeyboardReceiver.java com/jb/gokeyboard/theme/template/alarm/GoKeyboardInstallCheckService.java com/jb/gokeyboard/theme/template/b/a.java com/jb/gokeyboard/theme/template/b/c.java com/jb/gokeyboard/theme/template/b/d.java com/jb/gokeyboard/theme/template/c/a.java com/jb/gokeyboard/theme/template/c/b.java com/jb/gokeyboard/theme/template/crashreport/CrashReportDialog.java com/jb/gokeyboard/theme/template/crashreport/CrashSendBroadCastReceiver.java com/jb/gokeyboard/theme/template/crashreport/CrashSendService.java com/jb/gokeyboard/theme/template/crashreport/b.java com/jb/gokeyboard/theme/template/google/analytic/ReferrerInfoReceiver.java com/jb/gokeyboard/theme/template/guideoptimize/GuideOptimizeReceiver.java com/jb/gokeyboard/theme/template/guideoptimize/b.java com/jb/gokeyboard/theme/template/httpwecloud/a/a.java com/jb/gokeyboard/theme/template/httpwecloud/a/b.java com/jb/gokeyboard/theme/template/httpwecloud/controller/WecloudTimingReceiver.java com/jb/gokeyboard/theme/template/httpwecloud/controller/a.java com/jb/gokeyboard/theme/template/service/ThemeMainService.java com/jb/gokeyboard/theme/template/statistics/AlarmStatisticReceiver.java com/jb/gokeyboard/theme/template/statistics/PackageManReceiver.java com/jb/gokeyboard/theme/template/statistics/PackageThemeReceiver.java com/jb/gokeyboard/theme/template/statistics/c.java com/jb/gokeyboard/theme/template/util/b.java com/jb/gokeyboard/theme/template/util/e.java com/jb/gokeyboard/theme/template/view/b.java com/jb/gokeyboard/theme/template/view/giftbox/FacebookJumpActivity.java com/jiubang/commerce/ad/AdSdkApi.java com/jiubang/commerce/ad/avoid/ref/AvoidDetector.java com/jiubang/commerce/ad/cache/AdCachePool.java com/jiubang/commerce/ad/h5/H5AdActivity.java com/jiubang/commerce/ad/http/bean/flash/FlashBean.java com/jiubang/commerce/ad/install/InstallBroadcaster.java com/jiubang/commerce/ad/install/InstalledFilter.java com/jiubang/commerce/ad/intelligent/api/NativePreHelper.java com/jiubang/commerce/ad/manager/PreloadingControlManager.java com/jiubang/commerce/ad/notification/ActivationGuideNotification.java com/jiubang/commerce/ad/tricks/fb/InterceptContext.java com/jiubang/commerce/ad/url/AdUrlPreParseLoadingActivity.java com/jiubang/commerce/ad/url/AppDetailsJumpUtil.java com/jiubang/commerce/ad/url/ReferrerUtil.java com/jiubang/commerce/ad/window/ExitGoogleWindowManager.java com/jiubang/commerce/fbreplace/AdReplaceContext.java com/jiubang/commerce/fbreplace/FbReplaceManager.java com/jiubang/commerce/fbreplace/PackageManagerProxy.java com/jiubang/commerce/mopub/mopubstate/GomoMopubView.java com/jiubang/commerce/mopub/supply/AbStractAbManager.java com/jiubang/commerce/mopub/utils/ScreenBroadCast.java com/jiubang/commerce/receiver/AppBroadcastReceiver.java com/jiubang/commerce/receiver/BootBroadcastReceiver.java com/jiubang/commerce/receiver/NetWorkDynamicBroadcastReceiver.java com/jiubang/commerce/service/AdService.java com/jiubang/commerce/statistics/AppOpenActivateUtil.java com/jiubang/commerce/statistics/adinfo/ECommerceInfoManager.java com/jiubang/commerce/utils/AdTimer.java com/jiubang/commerce/utils/AppUtils.java com/jiubang/commerce/utils/GoogleMarketUtils.java com/jiubang/commerce/utils/NetStateMonitor.java com/keyboard/gdpr/ClearEventBroadcastReceiver.java com/keyboard/gdpr/c.java com/keyboard/gdpr/d.java com/keyboard/gdpr/ui/GdprAgreementActivity.java com/mopub/common/IntentActions.java com/mopub/common/MoPubBrowser.java com/mopub/common/UrlAction.java com/mopub/common/UrlHandler.java com/mopub/common/util/Intents.java com/mopub/common/util/ManifestUtils.java com/mopub/exceptions/IntentNotResolvableException.java com/mopub/mobileads/AdAlertReporter.java com/mopub/mobileads/BaseBroadcastReceiver.java com/mopub/mobileads/BaseInterstitialActivity.java com/mopub/mobileads/BaseVideoPlayerActivity.java com/mopub/mobileads/BaseVideoViewController.java com/mopub/mobileads/EventForwardingBroadcastReceiver.java com/mopub/mobileads/HtmlWebViewClient.java com/mopub/mobileads/MoPubActivity.java com/mopub/mobileads/MoPubView.java com/mopub/mobileads/MraidActivity.java com/mopub/mobileads/MraidVideoPlayerActivity.java com/mopub/mobileads/VastCompanionAdConfig.java com/mopub/mobileads/VastIconConfig.java com/mopub/mobileads/VastVideoConfig.java com/mopub/mobileads/VastVideoViewController.java com/mopub/mraid/MraidBridge.java com/mopub/mraid/MraidController.java com/mopub/mraid/MraidNativeCommandHandler.java com/mopub/volley/AuthFailureError.java com/mopub/volley/toolbox/AndroidAuthenticator.java
一般功能-> 文件操作	显示文件 com/cs/bd/gdpr/a/a.java com/cs/bd/gdpr/core/a.java com/cs/bd/gdpr/core/util/b.java com/cs/bd/gdpr/core/util/f.java com/gau/go/gostaticsdk/StatisticsManager.java com/gau/go/gostaticsdk/connect/BasicConnHandle.java com/gau/go/gostaticsdk/encrypt/Base64.java com/gau/go/gostaticsdk/encrypt/CryptTool.java com/gau/go/gostaticsdk/scheduler/GetCtrlInfoTask.java com/gau/go/gostaticsdk/utiltool/CpuManager.java com/gau/go/gostaticsdk/utiltool/Machine.java com/gau/go/gostaticsdk/utiltool/UtilTool.java com/gau/utils/net/NetException.java com/gau/utils/net/connector/HttpConnector.java com/gau/utils/net/connector/HttpConnectorAlive.java com/gau/utils/net/operator/ByteArrayHttpOperatror.java com/gau/utils/net/operator/IHttpOperator.java com/gau/utils/net/operator/StreamHttpOperator.java com/gau/utils/net/operator/StringOperator.java com/jb/ga0/commerce/util/AppUtils.java com/jb/ga0/commerce/util/DevHelper.java com/jb/ga0/commerce/util/Machine.java com/jb/ga0/commerce/util/MemoryTool.java com/jb/ga0/commerce/util/ProcessHelperUtil.java com/jb/ga0/commerce/util/encrypt/Base64.java com/jb/ga0/commerce/util/encrypt/CryptPreferencesManager.java com/jb/ga0/commerce/util/encrypt/CryptTool.java com/jb/ga0/commerce/util/encrypt/DesUtil.java com/jb/ga0/commerce/util/encrypt/FileCryptor.java com/jb/ga0/commerce/util/http/AdvertJsonOperator.java com/jb/ga0/commerce/util/http/GoHttpPostHandlerForNet.java com/jb/ga0/commerce/util/http/HttpUtil.java com/jb/ga0/commerce/util/imagemanager/NetImageLoader.java com/jb/ga0/commerce/util/imagemanager/SdImageLoader.java com/jb/ga0/commerce/util/io/BitmapDecoder.java com/jb/ga0/commerce/util/io/BitmapUtility.java com/jb/ga0/commerce/util/io/DataBaseHelper.java com/jb/ga0/commerce/util/io/FileUtil.java com/jb/ga0/commerce/util/io/MultiprocessSharedPreferences.java com/jb/ga0/commerce/util/io/StringUtils.java com/jb/ga0/commerce/util/retrofit/Interceptor/GunzipResponseInterceptor.java com/jb/ga0/commerce/util/retrofit/Interceptor/GzipRequestInterceptor.java com/jb/ga0/commerce/util/retrofit/Interceptor/LogInterceptor.java com/jb/ga0/commerce/util/retrofit/Interceptor/RepeatRequestInterceptor.java com/jb/ga0/commerce/util/retrofit/Interceptor/RetryAfterNetOkInterceptor.java com/jb/ga0/commerce/util/retrofit/Interceptor/SimpleRetryIntercepter.java com/jb/ga0/commerce/util/retrofit/RetrofitProxy.java com/jb/ga0/commerce/util/retrofit/RetrofitRequest.java com/jb/ga0/commerce/util/retrofit/cache/Cache.java com/jb/ga0/commerce/util/retrofit/cache/CustomCacheInterceptor.java com/jb/ga0/commerce/util/retrofit/cache/InternalCache.java com/jb/ga0/commerce/util/retrofit/test/Test.java com/jb/ga0/commerce/util/topApp/ProcessFilenameFilter.java com/jb/ga0/commerce/util/topApp/ProcessHelperUtil.java com/jb/ga0/commerce/util/topApp/PsInfo.java com/jb/ga0/commerce/util/topApp/TopHelper.java com/jb/ga0/commerce/util/zip/ZipFilesUtils.java com/jb/ga0/commerce/util/zip/ZipUtils.java com/jb/gokeyboard/theme/template/ThemeApplication.java com/jb/gokeyboard/theme/template/advertising/a/a.java com/jb/gokeyboard/theme/template/crashreport/CrashReportDialog.java com/jb/gokeyboard/theme/template/crashreport/CrashSendService.java com/jb/gokeyboard/theme/template/crashreport/b.java com/jb/gokeyboard/theme/template/crashreport/c.java com/jb/gokeyboard/theme/template/google/analytic/b.java com/jb/gokeyboard/theme/template/gostore/a.java com/jb/gokeyboard/theme/template/gostore/b.java com/jb/gokeyboard/theme/template/gostore/data/BaseInfoBean.java com/jb/gokeyboard/theme/template/gostore/data/k.java com/jb/gokeyboard/theme/template/gostore/databean/BaseThemeBean.java com/jb/gokeyboard/theme/template/gostore/databean/TTFPack.java com/jb/gokeyboard/theme/template/gostore/h.java com/jb/gokeyboard/theme/template/guideoptimize/a.java com/jb/gokeyboard/theme/template/httpwecloud/a/a.java com/jb/gokeyboard/theme/template/httpwecloud/bean/message/NotifyMessageBean.java com/jb/gokeyboard/theme/template/httpwecloud/controller/WecloudTimingReceiver.java com/jb/gokeyboard/theme/template/httpwecloud/controller/b.java com/jb/gokeyboard/theme/template/networkimageview/e.java com/jb/gokeyboard/theme/template/new_template/AppInfoBean.java com/jb/gokeyboard/theme/template/statistics/a.java com/jb/gokeyboard/theme/template/statistics/b.java com/jb/gokeyboard/theme/template/theme/AppInfoBean.java com/jb/gokeyboard/theme/template/theme/ContentResourcesInfoBean.java com/jb/gokeyboard/theme/template/util/MD5.java com/jb/gokeyboard/theme/template/util/b.java com/jb/gokeyboard/theme/template/util/e.java com/jb/gokeyboard/theme/template/util/i.java com/jb/gokeyboard/theme/template/util/j.java com/jb/gokeyboard/theme/template/util/k.java com/jb/gokeyboard/theme/template/util/n.java com/jb/gokeyboard/theme/template/util/o.java com/jb/gokeyboard/theme/template/util/p.java com/jb/gokeyboard/theme/template/util/q.java com/jb/gokeyboard/theme/template/wallpaper/WallPaperModule.java com/jiubang/commerce/ad/AdSdkApi.java com/jiubang/commerce/ad/AdSdkContants.java com/jiubang/commerce/ad/AdSdkDebugConfig.java com/jiubang/commerce/ad/abtest/CachedAbBean.java com/jiubang/commerce/ad/avoid/CountryDetector.java com/jiubang/commerce/ad/avoid/ref/AvoidDetector.java com/jiubang/commerce/ad/avoid/ref/AvoidManager.java com/jiubang/commerce/ad/bean/AdInfoBean.java com/jiubang/commerce/ad/http/AdHttpPostHandlerForNet.java com/jiubang/commerce/ad/http/AdSdkRequestDataUtils.java com/jiubang/commerce/ad/http/AdvertJsonOperator.java com/jiubang/commerce/ad/http/HttpUtil.java com/jiubang/commerce/ad/http/bean/BaseAppInfoBean.java com/jiubang/commerce/ad/http/bean/BaseContentResourceInfoBean.java com/jiubang/commerce/ad/http/bean/BaseModuleDataItemBean.java com/jiubang/commerce/ad/http/bean/BaseModuleInfoBean.java com/jiubang/commerce/ad/http/bean/BaseTagInfoBean.java com/jiubang/commerce/ad/http/bean/ParamsBean.java com/jiubang/commerce/ad/intelligent/api/NativePreHelper.java com/jiubang/commerce/ad/manager/AdSdkSetting.java com/jiubang/commerce/ad/manager/UserTypeManager.java com/jiubang/commerce/ad/params/ClientParams.java com/jiubang/commerce/ad/url/AdRedirectUrlUtils.java com/jiubang/commerce/fbreplace/FbReplaceManager.java com/jiubang/commerce/fbreplace/SpManager.java com/jiubang/commerce/mopub/params/MopubConfigManager.java com/jiubang/commerce/mopub/requestcontrol/appcontrol/AppControl.java com/jiubang/commerce/mopub/supply/SimpleFileLock.java com/jiubang/commerce/mopub/utils/MopubSettingUtils.java com/jiubang/commerce/preferences/PreferencesManager.java com/jiubang/commerce/statistics/AbsBaseStatistic.java com/jiubang/commerce/statistics/adinfo/AdInfoStatisticManager.java com/jiubang/commerce/statistics/adinfo/http/BaseHttpConnector.java com/jiubang/commerce/utils/AppUtils.java com/jiubang/commerce/utils/CallbackUtil.java com/jiubang/commerce/utils/FileCacheUtils.java com/jiubang/commerce/utils/FileUtils.java com/jiubang/commerce/utils/HttpRequestUtils.java com/jiubang/commerce/utils/ImageUtils.java com/jiubang/commerce/utils/ObjectSaveUtils.java com/jiubang/commerce/utils/ProcessExclusiveLock.java com/jiubang/commerce/utils/SDCardUtils.java com/jiubang/commerce/utils/StringUtils.java com/jiubang/commerce/utils/ZipUtils.java com/mopub/common/AdReport.java com/mopub/common/CacheService.java com/mopub/common/DiskLruCache.java com/mopub/common/DiskLruCacheUtil.java com/mopub/common/DownloadResponse.java com/mopub/common/GpsHelper.java com/mopub/common/MoPubHttpUrlConnection.java com/mopub/common/SharedPreferencesHelper.java com/mopub/common/UrlResolutionTask.java com/mopub/common/c.java com/mopub/common/event/ErrorEvent.java com/mopub/common/util/DeviceUtils.java com/mopub/common/util/Files.java com/mopub/common/util/Streams.java com/mopub/common/util/Strings.java com/mopub/mobileads/AdAlertReporter.java com/mopub/mobileads/BaseWebView.java com/mopub/mobileads/MoPubActivity.java com/mopub/mobileads/MoPubConversionTracker.java com/mopub/mobileads/VastAbsoluteProgressTracker.java com/mopub/mobileads/VastCompanionAdConfig.java com/mopub/mobileads/VastFractionalProgressTracker.java com/mopub/mobileads/VastIconConfig.java com/mopub/mobileads/VastMacroHelper.java com/mopub/mobileads/VastResource.java com/mopub/mobileads/VastTracker.java com/mopub/mobileads/VastVideoConfig.java com/mopub/mobileads/VastVideoViewController.java com/mopub/mobileads/VastXmlManager.java com/mopub/mobileads/VastXmlManagerAggregator.java com/mopub/mobileads/VideoDownloader.java com/mopub/mraid/MraidNativeCommandHandler.java com/mopub/mraid/MraidWebViewClient.java com/mopub/nativeads/PositioningRequest.java com/mopub/network/AdRequest.java com/mopub/network/AdResponse.java com/mopub/network/CustomSSLSocketFactory.java com/mopub/network/Networking.java com/mopub/network/RequestQueueHttpStack.java com/mopub/volley/Request.java com/mopub/volley/toolbox/BasicNetwork.java com/mopub/volley/toolbox/DiskBasedCache.java com/mopub/volley/toolbox/HttpClientStack.java com/mopub/volley/toolbox/HttpStack.java com/mopub/volley/toolbox/HurlStack.java com/mopub/volley/toolbox/JsonArrayRequest.java com/mopub/volley/toolbox/JsonObjectRequest.java com/mopub/volley/toolbox/JsonRequest.java com/mopub/volley/toolbox/PoolingByteArrayOutputStream.java com/mopub/volley/toolbox/StringRequest.java com/mopub/volley/toolbox/Volley.java com/nostra13/universalimageloader/a/a/a.java com/nostra13/universalimageloader/a/a/a/a.java com/nostra13/universalimageloader/a/a/a/a/a.java com/nostra13/universalimageloader/a/a/a/a/b.java com/nostra13/universalimageloader/a/a/a/a/c.java com/nostra13/universalimageloader/a/a/a/a/d.java com/nostra13/universalimageloader/a/a/a/b.java com/nostra13/universalimageloader/b/b.java com/nostra13/universalimageloader/b/e.java com/nostra13/universalimageloader/core/LoadAndDisplayImageTask.java com/nostra13/universalimageloader/core/a.java com/nostra13/universalimageloader/core/a/a.java com/nostra13/universalimageloader/core/a/b.java com/nostra13/universalimageloader/core/assist/a.java com/nostra13/universalimageloader/core/assist/b.java com/nostra13/universalimageloader/core/assist/deque/LinkedBlockingDeque.java com/nostra13/universalimageloader/core/download/ImageDownloader.java com/nostra13/universalimageloader/core/download/a.java com/nostra13/universalimageloader/core/e.java com/nostra13/universalimageloader/core/f.java me/xiaopan/sketch/b/j.java me/xiaopan/sketch/b/k.java me/xiaopan/sketch/c/a.java me/xiaopan/sketch/c/b.java me/xiaopan/sketch/cache/c.java me/xiaopan/sketch/cache/e.java me/xiaopan/sketch/decode/a.java me/xiaopan/sketch/decode/b.java me/xiaopan/sketch/decode/c.java me/xiaopan/sketch/decode/d.java me/xiaopan/sketch/decode/g.java me/xiaopan/sketch/decode/h.java me/xiaopan/sketch/decode/i.java me/xiaopan/sketch/f.java me/xiaopan/sketch/feature/c.java me/xiaopan/sketch/feature/large/a.java me/xiaopan/sketch/request/o.java me/xiaopan/sketch/request/z.java me/xiaopan/sketch/util/DiskLruCache.java me/xiaopan/sketch/util/f.java pl/droidsonroids/gif/GifAnimationMetaData.java pl/droidsonroids/gif/GifDrawable.java pl/droidsonroids/gif/GifIOException.java pl/droidsonroids/gif/GifInfoHandle.java pl/droidsonroids/gif/GifTextView.java pl/droidsonroids/gif/GifTextureView.java pl/droidsonroids/gif/d.java pl/droidsonroids/gif/e.java pl/droidsonroids/gif/i.java
网络通信-> HTTP建立连接	显示文件 com/cs/bd/gdpr/a/b.java com/gau/go/gostaticsdk/connect/BaseConnectHandle.java com/gau/utils/net/HttpConnectScheduler.java com/gau/utils/net/IConnectHandler.java com/gau/utils/net/IConnectListener.java com/gau/utils/net/connector/HttpConnector.java com/gau/utils/net/connector/HttpConnectorAlive.java com/gau/utils/net/operator/ByteArrayHttpOperatror.java com/gau/utils/net/operator/IHttpOperator.java com/gau/utils/net/operator/StreamHttpOperator.java com/gau/utils/net/operator/StringOperator.java com/gau/utils/net/request/THttpRequest.java com/gau/utils/net/util/NetUtil.java com/jb/ga0/commerce/util/NetUtil.java com/jb/ga0/commerce/util/http/AdvertJsonOperator.java com/jb/ga0/commerce/util/imagemanager/NetImageLoader.java com/jb/gokeyboard/theme/template/httpwecloud/controller/b.java com/jiubang/commerce/ad/abtest/AbTestHttpHandler.java com/jiubang/commerce/ad/avoid/frequent/TimeHttpHandler.java com/jiubang/commerce/ad/avoid/ref/AvoidHttpHandler.java com/jiubang/commerce/ad/gomo/GomoAdRequestHandler.java com/jiubang/commerce/ad/http/AdvertJsonOperator.java com/jiubang/commerce/ad/manager/AdControlManager.java com/jiubang/commerce/ad/manager/AdSdkManager.java com/jiubang/commerce/ad/url/AdRedirectUrlUtils.java com/jiubang/commerce/fbreplace/ServerManager.java com/jiubang/commerce/mopub/dilute/MopubRequestManager.java com/jiubang/commerce/statistics/adinfo/http/BaseHttpConnector.java com/jiubang/commerce/utils/HttpRequestUtils.java com/jiubang/commerce/utils/ImageUtils.java com/mopub/common/MoPubHttpUrlConnection.java com/mopub/common/UrlResolutionTask.java com/mopub/mobileads/VastXmlManagerAggregator.java com/mopub/mobileads/VideoDownloader.java com/mopub/mraid/MraidNativeCommandHandler.java com/mopub/volley/toolbox/HurlStack.java com/nostra13/universalimageloader/core/download/a.java me/xiaopan/sketch/c/b.java
一般功能-> 加载so文件	pl/droidsonroids/gif/g.java pl/droidsonroids/gif/i.java
隐私数据-> 获取GPS位置信息	com/mopub/common/AdUrlGenerator.java com/mopub/common/LocationService.java com/mopub/network/AdRequest.java
调用java反射机制	显示文件 com/gau/go/gostaticsdk/utiltool/DrawUtils.java com/jb/ga0/commerce/util/DrawUtils.java com/jb/ga0/commerce/util/Machine.java com/jb/ga0/commerce/util/ReflectUtil.java com/jb/ga0/commerce/util/retrofit/cache/Cache.java com/jb/gokeyboard/theme/template/ThemeApplication.java com/jb/gokeyboard/theme/template/a.java com/jb/gokeyboard/theme/template/crashreport/c.java com/jb/gokeyboard/theme/template/util/h.java com/jb/gokeyboard/theme/template/view/ThemeRecViewPager.java com/jb/gokeyboard/theme/template/view/f.java com/jiubang/commerce/ad/appmonet/AppmonetUtils.java com/jiubang/commerce/ad/sdk/SdkAdSourceListener.java com/jiubang/commerce/fbreplace/AdReplaceContext.java com/jiubang/commerce/fbreplace/PackageManagerProxy.java com/jiubang/commerce/mopub/amazon/AmazonUtils.java com/jiubang/commerce/mopub/autofresh/Smaato/MopubIdUtils.java com/jiubang/commerce/utils/DrawUtils.java com/mopub/common/GpsHelper.java com/mopub/common/MoPub.java com/mopub/common/d.java com/mopub/common/util/ManifestUtils.java com/mopub/common/util/Reflection.java com/mopub/mobileads/MoPubView.java com/mopub/mobileads/factories/CustomEventBannerFactory.java com/mopub/mobileads/factories/CustomEventInterstitialFactory.java com/mopub/nativeads/factories/CustomEventNativeFactory.java me/xiaopan/sketch/b/k.java me/xiaopan/sketch/feature/e.java me/xiaopan/sketch/util/f.java pl/droidsonroids/gif/g.java
命令执行-> getRuntime.exec()	显示文件 com/gau/go/gostaticsdk/StatisticsManager.java com/jb/ga0/commerce/util/AppUtils.java com/jb/ga0/commerce/util/Machine.java com/jb/ga0/commerce/util/io/FileUtil.java com/jb/ga0/commerce/util/topApp/PsInfo.java com/keyboard/gdpr/c.java
隐私数据-> 获取已安装的应用程序	显示文件 com/gau/go/gostaticsdk/StatisticsManager.java com/gau/go/gostaticsdk/utiltool/UtilTool.java com/jb/ga0/commerce/util/AppUtils.java com/jb/ga0/commerce/util/GoogleMarketUtils.java com/jb/ga0/commerce/util/Machine.java com/jb/ga0/commerce/util/topApp/TopHelper.java com/jb/gokeyboard/theme/template/GOKeyboardPackageManager.java com/jb/gokeyboard/theme/template/httpwecloud/a/a.java com/jb/gokeyboard/theme/template/httpwecloud/a/b.java com/jiubang/commerce/utils/AppUtils.java com/jiubang/commerce/utils/GoogleMarketUtils.java com/mopub/common/util/Intents.java
加密解密-> Crypto加解密组件	显示文件 com/cs/bd/gdpr/core/util/b.java com/jb/ga0/commerce/util/encrypt/AESCrypt.java com/jb/ga0/commerce/util/encrypt/DesUtil.java com/jb/ga0/commerce/util/io/StringUtils.java
加密解密-> Base64 加密	显示文件 com/cs/bd/gdpr/core/a.java com/cs/bd/gdpr/core/util/b.java com/jb/ga0/commerce/util/encrypt/DesUtil.java com/mopub/common/util/Drawables.java com/mopub/mobileads/AdAlertReporter.java
一般功能-> 获取活动网路信息	显示文件 com/gau/go/gostaticsdk/utiltool/Machine.java com/gau/go/gostaticsdk/utiltool/UtilTool.java com/gau/utils/net/util/NetUtil.java com/jb/ga0/commerce/util/Machine.java com/jb/ga0/commerce/util/NetUtil.java com/jb/ga0/commerce/util/http/GoHttpHeadUtil.java com/jb/gokeyboard/theme/template/util/k.java com/jiubang/commerce/receiver/NetWorkDynamicBroadcastReceiver.java com/jiubang/commerce/utils/NetStateMonitor.java com/jiubang/commerce/utils/NetworkUtils.java com/mopub/common/ClientMetadata.java com/mopub/common/util/DeviceUtils.java com/mopub/mobileads/AdViewController.java
进程操作-> 获取运行的进程\服务	显示文件 com/gau/go/gostaticsdk/StatisticsManager.java com/gau/go/gostaticsdk/utiltool/Machine.java com/jb/ga0/commerce/util/AppUtils.java com/jb/ga0/commerce/util/topApp/TopHelper.java com/jb/gokeyboard/theme/template/alarm/GoKeyboardInstallCheckService.java com/jb/gokeyboard/theme/template/util/b.java com/jiubang/commerce/ad/intelligent/api/IntelligentApi.java com/jiubang/commerce/ad/intelligent/api/NativePreHelper.java com/jiubang/commerce/statistics/AppOpenActivateUtil.java com/jiubang/commerce/utils/AppUtils.java com/jiubang/commerce/utils/ProcessUtil.java me/xiaopan/sketch/util/f.java
组件-> 启动 Service	显示文件 com/jb/gokeyboard/theme/template/ThemeApplication.java com/jb/gokeyboard/theme/template/alarm/GoKeyboardInstallCheckService.java com/jb/gokeyboard/theme/template/c/b.java com/jb/gokeyboard/theme/template/crashreport/CrashSendBroadCastReceiver.java com/jiubang/commerce/ad/intelligent/api/NativePreHelper.java com/jiubang/commerce/ad/window/ExitGoogleWindowManager.java com/jiubang/commerce/fbreplace/AdReplaceContext.java com/jiubang/commerce/utils/GoogleMarketUtils.java
组件-> 发送广播	显示文件 com/gau/go/gostaticsdk/StatisticsManager.java com/jb/ga0/commerce/util/io/MultiprocessSharedPreferences.java com/jb/gokeyboard/theme/template/alarm/GoKeyboardInstallCheckService.java com/jb/gokeyboard/theme/template/b/a.java com/jiubang/commerce/ad/avoid/ref/AvoidDetector.java com/jiubang/commerce/ad/url/ReferrerUtil.java com/keyboard/gdpr/c.java com/mopub/mobileads/BaseBroadcastReceiver.java
网络通信-> OkHttpClient Connection	com/jb/ga0/commerce/util/retrofit/ClientProvider.java com/jb/ga0/commerce/util/retrofit/RetrofitRequest.java com/jb/ga0/commerce/util/retrofit/test/Test.java
组件-> 启动 Activity	显示文件 com/jb/ga0/commerce/util/AppUtils.java com/jb/ga0/commerce/util/GoogleMarketUtils.java com/jb/ga0/commerce/util/topApp/TopHelper.java com/jb/gokeyboard/theme/template/ThemeApplication.java com/jb/gokeyboard/theme/template/b/d.java com/jb/gokeyboard/theme/template/crashreport/b.java com/jb/gokeyboard/theme/template/httpwecloud/a/b.java com/jb/gokeyboard/theme/template/util/b.java com/jb/gokeyboard/theme/template/view/b.java com/jb/gokeyboard/theme/template/view/giftbox/FacebookJumpActivity.java com/jiubang/commerce/ad/AdSdkApi.java com/jiubang/commerce/ad/h5/H5AdActivity.java com/jiubang/commerce/ad/tricks/fb/InterceptContext.java com/jiubang/commerce/ad/url/AppDetailsJumpUtil.java com/jiubang/commerce/ad/window/ExitGoogleWindowManager.java com/jiubang/commerce/fbreplace/AdReplaceContext.java com/jiubang/commerce/utils/AppUtils.java com/jiubang/commerce/utils/GoogleMarketUtils.java com/keyboard/gdpr/c.java com/keyboard/gdpr/d.java com/keyboard/gdpr/ui/GdprAgreementActivity.java com/mopub/common/util/Intents.java com/mopub/mobileads/AdAlertReporter.java com/mopub/mobileads/BaseVideoPlayerActivity.java com/mopub/mobileads/MoPubActivity.java com/mopub/mobileads/MraidActivity.java com/mopub/mobileads/MraidVideoPlayerActivity.java com/mopub/mobileads/VastCompanionAdConfig.java com/mopub/mobileads/VastIconConfig.java com/mopub/mobileads/VastVideoConfig.java com/mopub/mraid/MraidBridge.java com/mopub/mraid/MraidNativeCommandHandler.java
设备指纹-> getSimOperator	显示文件 com/gau/go/gostaticsdk/utiltool/Machine.java com/gau/go/gostaticsdk/utiltool/UtilTool.java com/jb/ga0/commerce/util/Machine.java com/jb/gokeyboard/theme/template/util/b.java com/jb/gokeyboard/theme/template/util/k.java com/mopub/common/ClientMetadata.java
一般功能-> 查询数据库(短信、联系人、通话记录、浏览器历史等)	com/jb/gokeyboard/theme/template/util/b.java
一般功能-> 获取Android广告ID	com/jb/gokeyboard/theme/template/util/b.java com/jb/gokeyboard/theme/template/util/q.java
进程操作-> 获取进程pid	显示文件 com/gau/go/gostaticsdk/StatisticsManager.java com/jb/ga0/commerce/util/AppUtils.java com/jb/ga0/commerce/util/Machine.java com/jb/gokeyboard/theme/template/crashreport/b.java com/jb/gokeyboard/theme/template/crashreport/c.java com/jb/gokeyboard/theme/template/util/b.java com/jiubang/commerce/ad/intelligent/api/IntelligentApi.java com/jiubang/commerce/utils/AppUtils.java com/jiubang/commerce/utils/ProcessUtil.java me/xiaopan/sketch/util/f.java
网络通信-> WebView 相关	显示文件 com/jiubang/commerce/ad/h5/H5AdActivity.java com/jiubang/commerce/ad/ironscr/IronScrAd.java com/jiubang/commerce/ad/url/AdRedirectUrlUtils.java com/mopub/common/MoPubBrowser.java com/mopub/common/b.java com/mopub/mobileads/BaseHtmlWebView.java com/mopub/mobileads/MoPubActivity.java com/mopub/mobileads/MraidActivity.java com/mopub/mobileads/VastVideoViewController.java com/mopub/mobileads/util/WebViews.java com/mopub/mraid/MraidBridge.java com/mopub/network/Networking.java
加密解密-> Base64 解密	com/cs/bd/gdpr/core/a.java com/jb/ga0/commerce/util/encrypt/DesUtil.java com/mopub/common/util/Drawables.java
一般功能-> Android通知	显示文件 com/jb/gokeyboard/theme/template/alarm/CheckInstallGoKeyboardReceiver.java com/jb/gokeyboard/theme/template/guideoptimize/b.java com/jb/gokeyboard/theme/template/httpwecloud/controller/a.java com/jiubang/commerce/ad/notification/ActivationGuideNotification.java
网络通信-> Volley Connection	显示文件 com/jb/gokeyboard/theme/template/advertising/facebook/a.java com/jb/gokeyboard/theme/template/gostore/b/a.java com/jb/gokeyboard/theme/template/gostore/data/c.java com/jb/gokeyboard/theme/template/gostore/data/e.java com/jb/gokeyboard/theme/template/gostore/data/j.java com/jb/gokeyboard/theme/template/networkimageview/c.java
网络通信-> HTTPS建立连接	com/mopub/network/CustomSSLSocketFactory.java com/mopub/volley/toolbox/HurlStack.java
网络通信-> SSL证书处理	com/mopub/network/CustomSSLSocketFactory.java com/mopub/network/RequestQueueHttpStack.java com/mopub/volley/toolbox/HurlStack.java
一般功能-> PowerManager操作	com/jiubang/commerce/mopub/mopubstate/GomoMopubView.java com/jiubang/commerce/mopub/utils/ScreenUtils.java com/jiubang/commerce/mopub/utils/SimpleAB.java
网络通信-> TCP套接字	显示文件 com/gau/utils/net/connector/HttpConnector.java com/gau/utils/net/connector/HttpConnectorAlive.java com/jb/ga0/commerce/util/NetUtil.java com/jb/ga0/commerce/util/imagemanager/NetImageLoader.java com/jiubang/commerce/ad/url/AdRedirectUrlUtils.java com/jiubang/commerce/utils/ImageUtils.java com/mopub/common/util/DeviceUtils.java com/mopub/network/CustomSSLSocketFactory.java com/mopub/volley/toolbox/BasicNetwork.java me/xiaopan/sketch/c/b.java
网络通信-> WebView JavaScript接口	显示文件 com/jiubang/commerce/ad/h5/H5AdActivity.java com/jiubang/commerce/ad/ironscr/IronScrAd.java com/mopub/common/MoPubBrowser.java com/mopub/mobileads/BaseWebView.java com/mopub/mraid/MraidBridge.java
网络通信-> WebView GET请求	显示文件 com/jiubang/commerce/ad/h5/H5AdActivity.java com/jiubang/commerce/ad/ironscr/IronScrAd.java com/mopub/mobileads/BaseHtmlWebView.java com/mopub/mobileads/BaseWebView.java com/mopub/mobileads/MraidActivity.java com/mopub/mraid/MraidBridge.java
网络通信-> HTTP请求、连接和会话	显示文件 com/gau/utils/net/connector/HttpConnector.java com/gau/utils/net/connector/HttpConnectorAlive.java com/jb/gokeyboard/theme/template/gostore/data/k.java com/jb/gokeyboard/theme/template/gostore/i.java com/jb/gokeyboard/theme/template/networkimageview/e.java com/jiubang/commerce/utils/ConnectionManager.java com/mopub/volley/toolbox/HttpClientStack.java com/mopub/volley/toolbox/Volley.java
网络通信-> DefaultHttpClient Connection	显示文件 com/gau/go/gostaticsdk/scheduler/GetCtrlInfoTask.java com/gau/utils/net/connector/HttpConnector.java com/gau/utils/net/connector/HttpConnectorAlive.java com/jb/ga0/commerce/util/NetUtil.java com/jb/gokeyboard/theme/a/c.java com/jiubang/commerce/ad/url/AdRedirectUrlUtils.java com/jiubang/commerce/utils/ConnectionManager.java com/jiubang/commerce/utils/HttpRequestUtils.java
组件-> ContentProvider	com/gau/go/gostaticsdk/StaticDataContentProvider.java com/jb/ga0/commerce/util/io/MultiprocessSharedPreferences.java
设备指纹-> 查看运营商信息	com/mopub/common/ClientMetadata.java
进程操作-> 杀死进程	显示文件 com/jb/ga0/commerce/util/AppUtils.java com/jb/gokeyboard/theme/template/crashreport/b.java com/jiubang/commerce/ad/intelligent/api/IntelligentApi.java com/jiubang/commerce/utils/AppUtils.java com/jiubang/commerce/utils/ProcessUtil.java
隐私数据-> 用户账户管理	com/jb/ga0/commerce/util/Machine.java
一般功能-> 获取网络接口信息	com/jb/ga0/commerce/util/NetUtil.java com/jiubang/commerce/utils/NetworkUtils.java
JavaScript 接口方法	com/jiubang/commerce/ad/ironscr/IronScrAd.java

安全漏洞检测

高危

5

警告

7

信息

1

安全

1

屏蔽

0

序号	问题	等级	参考标准	文件位置	操作
1	MD5是已知存在哈希冲突的弱哈希	警告	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4	升级会员：解锁高级权限	Suppress the rule android_md5 in com.jb.gokeyboard.theme.emojiztfors9.getjar Suppress the rule android_md5 in com.jb.gokeyboard.theme.emojiztfors9.getjar only from these files
2	应用程序记录日志信息,不得记录敏感信息	信息	CWE: CWE-532: 通过日志文件的信息暴露 OWASP MASVS: MSTG-STORAGE-3	升级会员：解锁高级权限	Suppress the rule android_logging in com.jb.gokeyboard.theme.emojiztfors9.getjar Suppress the rule android_logging in com.jb.gokeyboard.theme.emojiztfors9.getjar only from these files
3	文件可能包含硬编码的敏感信息，如用户名、密码、密钥等	警告	CWE: CWE-312: 明文存储敏感信息 OWASP Top 10: M9: Reverse Engineering OWASP MASVS: MSTG-STORAGE-14	升级会员：解锁高级权限	Suppress the rule android_hardcoded in com.jb.gokeyboard.theme.emojiztfors9.getjar Suppress the rule android_hardcoded in com.jb.gokeyboard.theme.emojiztfors9.getjar only from these files
4	应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据	警告	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	升级会员：解锁高级权限	Suppress the rule android_read_write_external in com.jb.gokeyboard.theme.emojiztfors9.getjar Suppress the rule android_read_write_external in com.jb.gokeyboard.theme.emojiztfors9.getjar only from these files
5	应用程序使用不安全的随机数生成器	警告	CWE: CWE-330: 使用不充分的随机数 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-6	升级会员：解锁高级权限	Suppress the rule android_insecure_random in com.jb.gokeyboard.theme.emojiztfors9.getjar Suppress the rule android_insecure_random in com.jb.gokeyboard.theme.emojiztfors9.getjar only from these files
6	使用弱加密算法	高危	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4	升级会员：解锁高级权限	Suppress the rule android_weak_ciphers in com.jb.gokeyboard.theme.emojiztfors9.getjar Suppress the rule android_weak_ciphers in com.jb.gokeyboard.theme.emojiztfors9.getjar only from these files
7	应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库	警告	CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当（'SQL 注入'） OWASP Top 10: M7: Client Code Quality	升级会员：解锁高级权限	Suppress the rule android_sql_raw_query in com.jb.gokeyboard.theme.emojiztfors9.getjar Suppress the rule android_sql_raw_query in com.jb.gokeyboard.theme.emojiztfors9.getjar only from these files
8	此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击	安全	OWASP MASVS: MSTG-NETWORK-4	升级会员：解锁高级权限	Suppress the rule android_ssl_pinning in com.jb.gokeyboard.theme.emojiztfors9.getjar Suppress the rule android_ssl_pinning in com.jb.gokeyboard.theme.emojiztfors9.getjar only from these files
9	该文件是World Readable。任何应用程序都可以读取文件	高危	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	升级会员：解锁高级权限	Suppress the rule android_world_readable in com.jb.gokeyboard.theme.emojiztfors9.getjar Suppress the rule android_world_readable in com.jb.gokeyboard.theme.emojiztfors9.getjar only from these files
10	SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击	高危	CWE: CWE-295: 证书验证不恰当 OWASP Top 10: M3: Insecure Communication OWASP MASVS: MSTG-NETWORK-3	升级会员：解锁高级权限	Suppress the rule android_insecure_ssl in com.jb.gokeyboard.theme.emojiztfors9.getjar Suppress the rule android_insecure_ssl in com.jb.gokeyboard.theme.emojiztfors9.getjar only from these files
11	如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击	高危	CWE: CWE-79: 在Web页面生成时对输入的转义处理不恰当（'跨站脚本'） OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-PLATFORM-6	升级会员：解锁高级权限	Suppress the rule android_webview_xss in com.jb.gokeyboard.theme.emojiztfors9.getjar Suppress the rule android_webview_xss in com.jb.gokeyboard.theme.emojiztfors9.getjar only from these files
12	默认情况下，调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知，ECB模式很弱，因为它导致相同明文块的密文相同	高危	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-2	升级会员：解锁高级权限	Suppress the rule android_aws_ecb_default in com.jb.gokeyboard.theme.emojiztfors9.getjar Suppress the rule android_aws_ecb_default in com.jb.gokeyboard.theme.emojiztfors9.getjar only from these files
13	SHA-1是已知存在哈希冲突的弱哈希	警告	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4	升级会员：解锁高级权限	Suppress the rule android_sha1 in com.jb.gokeyboard.theme.emojiztfors9.getjar Suppress the rule android_sha1 in com.jb.gokeyboard.theme.emojiztfors9.getjar only from these files
14	不安全的Web视图实现。可能存在WebView任意代码执行漏洞	警告	CWE: CWE-749: 暴露危险方法或函数 OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-PLATFORM-7	升级会员：解锁高级权限	Suppress the rule android_webview in com.jb.gokeyboard.theme.emojiztfors9.getjar Suppress the rule android_webview in com.jb.gokeyboard.theme.emojiztfors9.getjar only from these files

Native库安全分析

No Shared Objects found.

序号	动态库	NX(堆栈禁止执行)	PIE	STACK CANARY(栈保护)	RELRO	RPATH（指定SO搜索路径）	RUNPATH（指定SO搜索路径）	FORTIFY(常用函数加强检查)	SYMBOLS STRIPPED(裁剪符号表)

文件分析

序号	问题	文件

敏感权限分析

恶意软件常用权限 6/30

android.permission.WAKE_LOCK
android.permission.SET_WALLPAPER
android.permission.GET_TASKS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.VIBRATE

其它常用权限 3/46

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE

恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。

IP地理位置

恶意域名检测

域名	状态	中国境内	位置信息
newstoredata.goforandroid.com	安全	是	IP地址: 8.210.132.106 国家: 中国地区: 香港城市: 香港查看: 高德地图
www.isvd-jhn.com	安全	否	没有可用的地理位置信息。
advtimedown.goforandroid.com	安全	否	IP地址: 47.88.60.195 国家: 美利坚合众国地区: 加利福尼亚城市: 洛杉矶查看: Google 地图
advs2sonline.goforandroid.com	安全	否	没有可用的地理位置信息。
advuser.goforandroid.com	安全	否	没有可用的地理位置信息。
api.douban.com	安全	是	IP地址: 8.210.132.106 国家: 中国地区: 北京城市: 北京查看: 高德地图
abtest.goforandroid.com	安全	否	IP地址: 139.9.105.102 国家: 美利坚合众国地区: 加利福尼亚城市: 洛杉矶查看: Google 地图
newstoredis.goforandroid.com	安全	是	IP地址: 47.242.94.137 国家: 中国地区: 香港城市: 香港查看: 高德地图
www.googletagmanager.com	安全	否	IP地址: 142.250.176.2 国家: 美利坚合众国地区: 加利福尼亚城市: 山景城查看: Google 地图
keyboard.goupdate.gomo.com	安全	否	IP地址: 198.11.181.196 国家: 美利坚合众国地区: 加利福尼亚城市: 洛杉矶查看: Google 地图
godfs.3g.cn	安全	否	没有可用的地理位置信息。
newstoredis.3g.net.cn	安全	否	没有可用的地理位置信息。
goupdate.3g.cn	安全	是	IP地址: 139.9.105.102 国家: 中国地区: 广东城市: 广州查看: 高德地图
advsearch.goforandroid.com	安全	否	没有可用的地理位置信息。
adviw.goforandroid.com	安全	否	没有可用的地理位置信息。
conf.api.hk.goforandroid.com	安全	否	IP地址: 8.210.59.142 国家: 美利坚合众国地区: 加利福尼亚城市: 洛杉矶查看: Google 地图
gokeyboardmarket.goforandroid.com	安全	是	IP地址: 8.210.59.142 国家: 中国地区: 香港城市: 香港查看: 高德地图
gokeyboardmarkettest.3g.net.cn	安全	否	IP地址: 192.168.18.121 国家: - 地区: - 城市: - 查看: Google 地图
twitter.com	安全	否	IP地址: 104.244.42.193 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
goo.gl	安全	否	IP地址: 142.250.188.238 国家: 美利坚合众国地区: 加利福尼亚城市: 山景城查看: Google 地图
advonline.goforandroid.com	安全	否	没有可用的地理位置信息。
adviap.goforandroid.com	安全	是	IP地址: 47.242.91.30 国家: 中国地区: 香港城市: 香港查看: 高德地图
resource.gomocdn.com	安全	否	IP地址: 18.239.199.124 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
pagead2.googlesyndication.com	安全	否	IP地址: 142.250.176.2 国家: 美利坚合众国地区: 加利福尼亚城市: 山景城查看: Google 地图
advshield.goforandroid.com	安全	否	没有可用的地理位置信息。
gotest.3g.net.cn	安全	否	IP地址: 192.168.18.155 国家: - 地区: - 城市: - 查看: Google 地图
www.mopub.com	安全	否	IP地址: 34.111.170.5 国家: 美利坚合众国地区: 密苏里州城市: 堪萨斯城查看: Google 地图
msg.wecloud.io	安全	否	没有可用的地理位置信息。
protect.ppmobiles.com	安全	是	IP地址: 8.210.87.119 国家: 中国地区: 香港城市: 香港查看: 高德地图
analytics.mopub.com	安全	否	IP地址: 192.48.236.10 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图

手机号提取

URL链接分析

URL信息	源码文件
http://play.google.com/store/apps/details?id= https://play.google.com/store/apps/details?id=	com/jb/gokeyboard/theme/template/httpwecloud/a/b.java
http://abtest.goforandroid.com/abtestcenter/ab?	com/jb/gokeyboard/theme/a/c.java
http://192.168.215.98:8080/adv_user/api/v2/userinfo http://advuser.goforandroid.com/api/v1/info	com/jiubang/commerce/mopub/dilute/MopubRequestManager.java
http://goupdate.3g.cn/goclientdata/dr?ptl=10&is_zip=1 http://61.145.124.212:8084/goclientdata/dr?ptl=10&is_zip=1 http://keyboard.goupdate.gomo.com/goclientdata/dr?ptl=10&is_zip=1	com/gau/go/gostaticsdk/connect/BaseConnectHandle.java
https://protect.ppmobiles.com	com/cs/bd/gdpr/core/a.java
https://www.mopub.com/optout	com/mopub/nativeads/MoPubCustomEventNative.java
https://m.facebook.com/ads/ad_choices https://play.google.com/store/apps/details?	com/jb/gokeyboard/theme/template/util/b.java
http://play.google.com/store/apps/details https://play.google.com/store/apps/details https://play.google.com/store/apps/details?id=	com/jb/ga0/commerce/util/GoogleMarketUtils.java
http://godfs.3g.cn/dynamic/gokeyboard/隐私政策.htm http://godfs.3g.cn/dynamic/gokeyboard/privacy-policy.htm	com/jb/gokeyboard/theme/template/fragment/d.java
http://advonline.goforandroid.com/adv_online/onlineadv	com/jiubang/commerce/ad/gomo/GomoAdRequestHandler.java
https://www.facebook.com/gokeyboard	com/jb/gokeyboard/theme/template/view/giftbox/FacebookJumpActivity.java
http://advsearch.goforandroid.com/adv_search/search http://newstoredata.goforandroid.com/newstore/ http://adviap.goforandroid.com/adv_iap/smartload http://newstoredis.goforandroid.com/newstore_dis/common?funid=3&rd= http://adviap.goforandroid.com/adv_iap/smartload_install http://newstoredata.goforandroid.com/newstore/usertype http://newstoredis.goforandroid.com/newstore_dis/ http://abtest.goforandroid.com/abtestcenter/config http://advs2sonline.goforandroid.com/s2sadv http://adviap.goforandroid.com/adv_iap/usertag http://newstoredis.3g.net.cn/newstore_dis/common?funid=3&rd= http://gotest.3g.net.cn/newstore/ http://newstoredis.3g.net.cn/newstore_dis/	com/jiubang/commerce/ad/http/AdSdkRequestHeader.java
http://spreadsheets.google.com/formresponse?formkey=	com/jb/gokeyboard/theme/template/crashreport/a.java
http://msg.wecloud.io/gopush-msg/common?funid=1&appkey=8khfoa9xlvsa7fk6a1mesqmh&rd=	com/jb/gokeyboard/theme/template/httpwecloud/controller/b.java
http://conf.api.hk.goforandroid.com	com/jiubang/commerce/statistics/adinfo/http/AdInfoController.java
https://twitter.com/%s/status/%s	com/mopub/common/util/Intents.java
http://abtest.goforandroid.com/abtestcenter/ab?sid=292&gzip=0&utm_source=unknown_buychannel&isupgrade=2&aid=4ff9050001bb056f&local=us&cversion=500&user_from=-1&pkgname=com.commerce.chargelockerdemo&cid=6&cdays=1&entrance=999 https://api.douban.com/v2/movie/top250?start=0&count=3 https://api.douban.com/v2/movie/repeat http://abtest.goforandroid.com/abtestcenter/ https://api.douban.com/v2/movie/retry https://api.douban.com/v2/movie http://adviw.goforandroid.com/api/v1/func	com/jb/ga0/commerce/util/retrofit/test/Test.java
https://api.douban.com/v2/movie/retry https://api.douban.com/v2/movie/repeat	com/jb/ga0/commerce/util/retrofit/test/TestService.java
https://analytics.mopub.com/i/jot/exchange_client_event	com/mopub/common/event/ScribeEventRecorder.java
http://61.145.124.212:8084/goclientdata/dc http://goupdate.3g.cn/goclientdata/dc	com/gau/go/gostaticsdk/scheduler/GetCtrlInfoTask.java
http://advtimedown.goforandroid.com/adv_time/time/getsystime	com/jiubang/commerce/ad/avoid/frequent/TimeHttpHandler.java
http://advshield.goforandroid.com/adv_shield/shield/confirmshield	com/jiubang/commerce/ad/avoid/ref/AvoidHttpHandler.java
http://play.google.com/store/apps/details https://play.google.com/store/apps/details https://play.google.com/store/apps/details?id=	com/jiubang/commerce/utils/GoogleMarketUtils.java
https://play.google.com/store/apps/details?id= http://www.isvd-jhn.com/integ/sungy.html?w='	com/jiubang/commerce/ad/ironscr/IronScrAd.java
https://github.com/xiaopansky/sketch	me/xiaopan/sketch/f.java
http://gokeyboardmarkettest.3g.net.cn https://gokeyboardmarket.goforandroid.com	com/jb/gokeyboard/theme/template/gostore/data/l.java
http://69.28.57.171:8888 https://gokeyboardmarket.goforandroid.com http://69.28.57.174:8888 http://69.28.57.172:8888 http://69.28.57.173:8888	com/jb/gokeyboard/theme/template/gostore/data/c.java
http://newstoredis.goforandroid.com/newstore_dis/common?funid=3&rd= http://gokeyboardmarkettest.3g.net.cn http://newstoredata.goforandroid.com/newstore/usertype http://goo.gl/8rd3yj http://abtest.goforandroid.com/abtestcenter/ab?sid=292&gzip=0&utm_source=unknown_buychannel&isupgrade=2&aid=4ff9050001bb056f&local=us&cversion=500&user_from=-1&pkgname=com.commerce.chargelockerdemo&cid=6&cdays=1&entrance=999 https://github.com/xiaopansky/sketch http://www.google.com http://abtest.goforandroid.com/abtestcenter/ab? http://advsearch.goforandroid.com/adv_search/search http://69.28.57.173:8888 www.google.com https://www.%s.facebook.com/adnw_logging/ http://adviap.goforandroid.com/adv_iap/smartload https://www.facebook.com/gokeyboard https://www.facebook.com/audience_network/server_side_reward http://resource.gomocdn.com/soft/file/term/1272/gokeyword_agreement.html https://graph.facebook.com/network_ads_common https://www.facebook.com/ http://goupdate.3g.cn/goclientdata/dr?ptl=10&is_zip=1 https://play.google.com/store/apps/details? http://advs2sonline.goforandroid.com/s2sadv https://api.douban.com/v2/movie/retry http://conf.api.hk.goforandroid.com https://graph.%s.facebook.com/network_ads_common http://m.facebook.com/ads/ad_choices https://play.google.com/store/apps/details https://www.%s.facebook.com http://advuser.goforandroid.com/api/v1/info https://pagead2.googlesyndication.com/pagead/gen_204?id=gmob-apps https://www.mopub.com/optout http://godfs.3g.cn/dynamic/gokeyboard/privacy-policy.htm https://gokeyboardmarket.goforandroid.com http://advtimedown.goforandroid.com/adv_time/time/getsystime http://advshield.goforandroid.com/adv_shield/shield/confirmshield https://www.googletagmanager.com http://%s:%d/%s https://twitter.com/%s/status/%s http://newstoredata.goforandroid.com/newstore/ https://api.douban.com/v2/movie/top250?start=0&count=3 http://adviap.goforandroid.com/adv_iap/smartload_install https://api.douban.com/v2/movie/repeat https://www.facebook.com/adnw_logging/ https://m.facebook.com/ads/ad_choices http://hostname/? http://www.isvd-jhn.com/integ/sungy.html?w=' https://pagead2.googlesyndication.com/pagead/gen_204 http://newstoredis.3g.net.cn/newstore_dis/ http://play.google.com/store/apps/details?id= http://69.28.57.171:8888 https://plus.google.com/ http://adviap.goforandroid.com/adv_iap/usertag http://69.28.57.172:8888 https://www.google.com/dfp/debugsignals http://61.145.124.212:8084/goclientdata/dc https://www.google.com/dfp/inapppreview http://www.facebook.com https://www.google.com/dfp/linkdevice http://69.28.57.174:8888 http://abtest.goforandroid.com/abtestcenter/config http://61.145.124.212:8084/goclientdata/dr?ptl=10&is_zip=1 https://www.google.com/dfp/senddebugdata https://analytics.mopub.com/i/jot/exchange_client_event http://keyboard.goupdate.gomo.com/goclientdata/dr?ptl=10&is_zip=1 127.0.0.1 http://godfs.3g.cn/dynamic/gokeyboard/隐私政策.htm http://newstoredis.goforandroid.com/newstore_dis/ http://msg.wecloud.io/gopush-msg/common?funid=1&appkey=8khfoa9xlvsa7fk6a1mesqmh&rd= http://abtest.goforandroid.com/abtestcenter/ http://newstoredis.3g.net.cn/newstore_dis/common?funid=3&rd= http://goupdate.3g.cn/goclientdata/dc http://play.google.com/store/apps/details http://gotest.3g.net.cn/newstore/ https://protect.ppmobiles.com http://192.168.215.98:8080/adv_user/api/v2/userinfo http://advonline.goforandroid.com/adv_online/onlineadv https://play.google.com/store/apps/details?id= https://www.%s.facebook.com/audience_network/server_side_reward http://adviw.goforandroid.com/api/v1/func http://spreadsheets.google.com/formresponse?formkey= https://api.douban.com/v2/movie http://goo.gl/nafqqk	自研引擎-S

Firebase配置检测

邮箱地址提取

EMAIL	源码文件
goforkeyboard@gmail.com	com/jb/gokeyboard/theme/template/crashreport/b.java
creative-review@mopub.com	com/mopub/mobileads/AdAlertReporter.java
creative-review@mopub.com goforkeyboard@gmail.com	自研引擎-S

第三方追踪器

名称	类别	网址
Facebook Ads	Advertisement	https://reports.exodus-privacy.eu.org/trackers/65
Google AdMob	Advertisement	https://reports.exodus-privacy.eu.org/trackers/312
Google Analytics	Analytics	https://reports.exodus-privacy.eu.org/trackers/48
Google Tag Manager	Analytics	https://reports.exodus-privacy.eu.org/trackers/105
Twitter MoPub	Advertisement, Analytics	https://reports.exodus-privacy.eu.org/trackers/35

敏感凭证泄露

已显示 15 个secrets

1、 "KEY_DEFAULT_KeySoundType" : "Default,com.jb.gokeyboard"
2、 "money_key" : "$"
3、 "substitute_voice_key_symbol" : ","
4、 HPJOVTREZ28LWF51WWA1YI6KUDY7C1SF
5、 8ef191c6-26d6-4f80-8ef3-a3da9a80d2d8
6、 4B20B6EA9127924DFE83
7、 dEM4SDNGX0tvaDVxSjk0NVM5ZTl4Y3c6MQ
8、 NaubrwWEGiJEQqRxx7aXntbGOf4YiRmW0WY9043rcqRhJreE4sReMC1OFRaeI7TXWBJUiJQGpwA1UdSsR65vvNieo70IUqvUnj1mn1mLUTKEMqeM9l5g90WJJo4gBN3n
9、 a4485d83f0bd47b388c88ca4e4a65717
10、 28J3ZCJLXTW06HJYEPOEKOSVVQADNNML
11、 YO0FINC2I0JSPDMB2KWMLZRJ94BHT6IA
12、 0ee68f61b259414bbf6976dfee7c212a
13、 4981cfd89a6740fbb2d7a20a057a99a7
14、 aHR0cDovL2FkdnByb3RlY3QuM2cubmV0LmNuCg==
15、 5ab6a4ae-4aa5-43f4-9da4-e30755f2b295

字符串信息

建议导出为TXT，方便查看。

活动列表

显示 19 个 activities

服务列表

显示 6 个 services

广播接收者列表

显示 8 个 receivers

内容提供者列表

显示 1 个 providers

1 . com.jb.ga0.commerce.util.io.MultiprocessSharedPreferences

第三方SDK

SDK名称	开发者	描述信息
android-gif-drawable	koral--	android-gif-drawable 是在 Android 上显示动画 GIF 的绘制库。
Audience Network SDK	Facebook	The Audience Network allows you to monetize your Android apps with Facebook ads. An interstitial ad is a full screen ad that you can show in your app. Typically interstitial ads are shown when there is a transition in your app. For example -- after finishing a level in a game or after loading a story in a news app.
Google Play Service	Google	借助 Google Play 服务，您的应用可以利用由 Google 提供的最新功能，例如地图，Google+ 等，并通过 Google Play 商店以 APK 的形式分发自动平台更新。这样一来，您的用户可以更快地接收更新，并且可以更轻松地集成 Google 必须提供的最新信息。
File Provider	Android	FileProvider 是 ContentProvider 的特殊子类，它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。
Google Analytics	Google	提供各种 API，可帮助您收集、配置和报告用户与您的在线内容进行互动的数据。

文件列表

污点分析

当apk较大时，代码量会很大，造成数据流图（ICFG）呈现爆炸式增长，所以该功能比较耗时，请先喝杯咖啡，耐心等待……

规则名称	描述信息	操作
病毒分析	使用安卓恶意软件常用的API进行污点分析	开始分析
漏洞挖掘	漏洞挖掘场景下的污点分析	开始分析
隐私合规	隐私合规场景下的污点分析：组件内污点传播、组件间污点传播、组件与库函数之间的污点传播	开始分析
密码分析	分析加密算法是否使用常量密钥、静态初始化的向量（IV）、加密模式是否使用ECB等	开始分析
Callback	因为Android中系统级的Callback并不会出现显式地进行回调方法的调用，所以如果需要分析Callback方法需要在声明文件中将其声明，这里提供一份AndroidCallbacks.txt文件，里面是一些常见的原生回调接口或类，如果有特殊接口需求，可以联系管理员	开始分析

时间	执行功能	执行结果
2024-09-29 16:05:10	生成哈希值	成功
2024-09-29 16:05:10	提取APK	成功
2024-09-29 16:05:13	探测加固信息为：未加壳	成功
2024-09-29 16:05:13	开始解压文件	成功
2024-09-29 16:05:17	获取硬编码证书/密钥库	成功
2024-09-29 16:05:23	解析 AndroidManifest.xml	成功
2024-09-29 16:05:23	使用 androguard 解析 APK	成功
2024-09-29 16:05:23	提取Manifest数据	成功
2024-09-29 16:05:23	提取应用程序基础数据，例如：app名称，版本，包名称等信息	成功
2024-09-29 16:05:23	正在从Play Store获取详细信息: com.jb.gokeyboard.theme.emojiztfors9.getjar	成功
2024-09-29 16:05:25	从 AppMonsta 获取详细信息: com.jb.gokeyboard.theme.emojiztfors9.getjar	成功
2024-09-29 16:05:26	Unable to get app details	HTTPError('403 Client Error: Forbidden for url: https://api.appmonsta.com/v1/stores/android/details/com.jb.gokeyboard.theme.emojiztfors9.getjar.json?country=US')
2024-09-29 16:05:26	Manifest分析开始	成功
2024-09-29 16:05:26	检查恶意软件权限	成功
2024-09-29 16:05:26	提取APK中所有的类和方法	成功
2024-09-29 16:05:30	解析出8138个class，64361个method	成功
2024-09-29 16:05:30	SO文件分析开始	成功
2024-09-29 16:05:31	读取代码签名证书	成功
2024-09-29 16:05:32	检测追踪器	成功
2024-09-29 16:05:33	将 APK 反编译为 Java	成功
2024-09-29 16:05:49	代码分析开始于 - java_source	成功
2024-09-29 16:05:49	Android SAST 开始	成功
2024-09-29 16:05:52	Android API分析开始	成功
2024-09-29 16:05:55	开始进行Android 权限映射	成功
2024-09-29 16:05:56	Android权限映射已完成	成功
2024-09-29 16:05:58	从 APK 中提取字符串数据	成功
2024-09-29 16:06:01	从代码中提取字符串数据	成功
2024-09-29 16:06:01	从代码中提取字符串值和凭证数据	成功
2024-09-29 16:06:03	对提取的域名执行恶意软件检查	成功
2024-09-29 16:06:07	VirusTotal: 检查现有报告	成功
2024-09-29 16:06:08	VirusTotal: Scan finished, information embedded	成功
2024-09-29 16:06:08	保存到数据库	成功