静态分析-淘歌音乐 2.0.49版本 _南明离火移动安全分析平台

温馨提示：本平台仅供研究软件风险、安全评估，禁止用于非法用途。由于展示的数据过于全面，请耐心等待加载完成。如有疑问或建议，可加入我们的微信群讨论

APP评分

文件信息

文件名称 v2049.apk
文件大小 14.97MB
MD5 49b2dab2d28afd9ea0c9c8648d644406
SHA1 b3239abdbc856a1c84addc569f2b8bb5f3ce5faa
SHA256 15959011ab18496a089c1a51ee0165727f4a9e1c1a99c5c938a29508a8c209ca

应用信息

应用名称淘歌音乐
包名 com.g83849925.unu
主活动 com.uzmap.pkg.LauncherUI
目标SDK 29 最小SDK 19
版本号 2.0.49 子版本号 68
加固信息未加壳

组件导出信息

查看

扫描选项

重新扫描管理规则开始动态分析

反编译代码

Manifest文件查看

APK文件下载

Java源代码查看 -- 下载

证书信息

二进制文件已签名
v1 签名: True
v2 签名: True
v3 签名: False
v4 签名: False
主题: C=(zh), ST=(Beijing), L=(Beijing), O=(83849925@qq.com), OU=(83849925@qq.com), CN=(83849925@qq.com)
签名算法: rsassa_pkcs1v15
有效期自: 2021-11-21 07:02:19+00:00
有效期至: 2121-10-28 07:02:19+00:00
发行人: C=(zh), ST=(Beijing), L=(Beijing), O=(83849925@qq.com), OU=(83849925@qq.com), CN=(83849925@qq.com)
序列号: 0x3d57477c
哈希算法: sha256
证书MD5: 8895f9c8bee11d3dd83778f660bfc52f
证书SHA1: 8408cf912b4c154546cfb761bb8bda4427f334a1
证书SHA256: 1ebcfa511617690476e1fc1e88e77646e7ffe3107f7559fd7a0e4f0982f11907
证书SHA512: 1f91ecacdd3a952f40ddfb48a8364b64d40a6d8d096d4a0c545b6caa8411eb452634c12ed5416032f05e2fe4cd067aa2a931901237d14b0c1c7708d298331c85
公钥算法: rsa
密钥长度: 1024
指纹: 910a985c60a7496742bedd6e3b2e42bf6ee7484ed3ec219cc1620a206f241763
找到 1 个唯一证书

应用程序权限

权限名称	安全等级	权限内容	权限描述	关联代码
android.permission.INTERNET	危险	完全互联网访问	允许应用程序创建网络套接字。	显示文件 com/apicloud/a/a/c.java com/apicloud/audioplayer/AudioPlayer.java com/apicloud/audioplayer/DownloadThread.java com/apicloud/audioplayer/DownloadUtil.java com/apicloud/module/ad/SplashView.java com/apicloud/module/ad/widget/WebImage.java com/apicloud/wxcardpackage/utils/HttpUtils.java com/deepe/c/j/d/g.java com/deepe/c/j/e/c.java com/deepe/c/j/k.java com/deepe/c/l/a/b.java com/eclipsesource/v8/debug/V8DebugServer.java com/pgl/a/a/b.java com/pgl/sys/a/b/a.java com/uzmap/pkg/b/c/o.java com/uzmap/pkg/uzcore/i/b/a.java com/uzmap/pkg/uzmodules/uzWx/utils/Util.java
com.huawei.android.launcher.permission.CHANGE_BADGE	普通	在应用程序上显示通知计数	在华为手机的应用程序启动图标上显示通知计数或徽章。
android.permission.WRITE_EXTERNAL_STORAGE	危险	读取/修改/删除外部存储内容	允许应用程序写入外部存储。	显示文件 com/apicloud/a/i/a/d/g.java com/apicloud/audioplayer/AudioPlayer.java com/apicloud/audioplayer/DownloadThread.java com/apicloud/audioplayer/DownloadUtil.java com/apicloud/audioplayer/FileUtil.java com/apicloud/module/ad/SplashView.java com/apicloud/module/ad/widget/WebImageCache.java com/deepe/a/c/f.java com/deepe/b/e.java com/deepe/b/f/a.java com/deepe/b/f/b.java com/deepe/c/c/j.java com/deepe/c/c/t.java com/deepe/c/i/g.java com/deepe/c/j/d/c.java com/deepe/f/b.java com/deepe/sdk/StringStream.java com/eclipsesource/v8/LibraryLoader.java com/pgl/a/b/e.java com/pgl/sys/ces/a/e.java com/ss/android/downloadlib/a/c/c.java com/uzmap/pkg/b/c/o.java com/uzmap/pkg/uzcore/g/e.java com/uzmap/pkg/uzcore/uzmodule/a/c.java com/uzmap/pkg/uzkit/UZUtility.java com/uzmap/pkg/uzkit/request/HttpDownload.java com/uzmap/pkg/uzmodules/uzWx/UzWx.java
android.permission.ACCESS_NETWORK_STATE	普通	获取网络状态	允许应用程序查看所有网络的状态。	显示文件 com/alipay/b/a/a/b/b.java com/alipay/b/a/a/b/d.java com/deepe/f/a.java com/pgl/sys/ces/out/ISdkInfo.java
android.permission.ACCESS_WIFI_STATE	普通	查看Wi-Fi状态	允许应用程序查看有关Wi-Fi状态的信息。	显示文件 com/alipay/b/a/a/b/b.java com/pgl/sys/ces/a/f.java com/pgl/sys/ces/out/ISdkInfo.java
android.permission.WAKE_LOCK	危险	防止手机休眠	允许应用程序防止手机休眠，在手机屏幕关闭后后台进程仍然运行。	显示文件 com/alipay/b/a/a/b/b.java com/apicloud/a/i/a/ai/a/j.java com/apicloud/audioplayer/AudioPlayer.java com/apicloud/audioplayer/UZAudioPlayer.java com/apicloud/module/ad/VideoView.java com/deepe/a/c/c.java com/uzmap/pkg/b/a/g.java
android.permission.VIBRATE	普通	控制振动器	允许应用程序控制振动器，用于消息通知振动功能。	显示文件 com/deepe/a/b/j.java com/deepe/a/b/k.java com/uzmap/pkg/b/a/g.java
android.permission.FOREGROUND_SERVICE	普通	创建前台Service	Android 9.0以上允许常规应用程序使用 Service.startForeground，用于podcast播放（推送悬浮播放，锁屏播放）
android.permission.REQUEST_INSTALL_PACKAGES	危险	允许安装应用程序	Android8.0 以上系统允许安装未知来源应用程序权限。
android.permission.READ_SMS	危险	读取短信	允许应用程序读取您的手机或 SIM 卡中存储的短信。恶意应用程序可借此读取您的机密信息。	显示文件 com/deepe/c/a/b.java com/deepe/f/a/f.java
android.permission.BLUETOOTH_SCAN	危险	新蓝牙运行时权限	Android 12 系统引入了新的运行时权限，需要能够发现和配对附近的蓝牙设备。
android.permission.BLUETOOTH_ADVERTISE	危险	新蓝牙运行时权限	Android 12 系统引入了新的运行时权限，需要能够向附近的蓝牙设备进行广告。
android.permission.BLUETOOTH_CONNECT	危险	新蓝牙运行时权限	Android 12 系统引入了新的运行时权限，需要能够连接到配对的蓝牙设备。
android.permission.READ_EXTERNAL_STORAGE	危险	读取SD卡内容	允许应用程序从SD卡读取信息。	显示文件 com/alipay/b/a/a/a/b.java com/alipay/b/a/a/b/b.java com/apicloud/audioplayer/UZAudioPlayer.java com/deepe/a/c/e.java com/deepe/a/c/f.java com/deepe/c/c/ac.java com/deepe/c/i/g.java com/deepe/c/j/d/c.java com/deepe/c/j/e/a/g.java com/eclipsesource/v8/PlatformDetector.java com/uzmap/pkg/uzapp/DataProvider.java com/uzmap/pkg/uzcore/b/f.java com/uzmap/pkg/uzcore/e/c.java com/uzmap/pkg/uzkit/request/HttpParams.java
android.permission.CHANGE_WIFI_MULTICAST_STATE	危险	允许接收WLAN多播	允许应用程序接收并非直接向您的设备发送的数据包。这样在查找附近提供的服务时很有用。这种操作所耗电量大于非多播模式。
com.g83849925.unu.permission.KW_SDK_BROADCAST	未知	未知权限	来自 android 引用的未知权限。
com.asus.msa.SupplementaryDID.ACCESS	普通	获取厂商oaid相关权限	获取设备标识信息oaid，在华硕设备上需要用到的权限。

证书分析

高危

0

警告

1

信息

1

标题	严重程度	描述信息
已签名应用	信息	应用程序已使用代码签名证书进行签名

MANIFEST分析

高危

6

警告

4

信息

0

屏蔽

0

序号	问题	严重程度	描述信息	操作
1	应用程序可以安装在有漏洞的已更新 Android 版本上 Android 4.4-4.4.4, [minSdk=19]	信息	该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。	对应用 com.g83849925.unu 禁止使用 vulnerable_os_version 规则
2	应用程序已启用明文网络流量 [android:usesCleartextTraffic=true]	警告	应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。	对应用 com.g83849925.unu 禁止使用 clear_text_traffic 规则
3	Activity (com.uzmap.pkg.EntranceActivity) 的启动模式不是standard模式	高危	Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。	对应用 com.g83849925.unu 禁止使用 activity_non_standard_launchmode 规则
4	Activity (com.uzmap.pkg.EntranceActivity) 未被保护。 [android:exported=true]	警告	发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.g83849925.unu 禁止使用 activity_explicitly_exported 规则
5	Activity (com.ss.android.socialbase.appdownloader.view.DownloadTaskDeleteActivity) 的启动模式不是standard模式	高危	Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。	对应用 com.g83849925.unu 禁止使用 activity_non_standard_launchmode 规则
6	Activity (com.ss.android.socialbase.appdownloader.view.JumpUnknownSourceActivity) 的启动模式不是standard模式	高危	Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。	对应用 com.g83849925.unu 禁止使用 activity_non_standard_launchmode 规则
7	Activity (com.ss.android.downloadlib.activity.TTDelegateActivity) 的启动模式不是standard模式	高危	Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。	对应用 com.g83849925.unu 禁止使用 activity_non_standard_launchmode 规则
8	Activity (com.ss.android.downloadlib.guide.install.InstallGuideActivity) 的启动模式不是standard模式	高危	Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。	对应用 com.g83849925.unu 禁止使用 activity_non_standard_launchmode 规则
9	Activity (com.apicloud.WXEntryActivity) 的启动模式不是standard模式	高危	Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。	对应用 com.g83849925.unu 禁止使用 activity_non_standard_launchmode 规则
10	Activity (com.apicloud.WXEntryActivity) 未被保护。 [android:exported=true]	警告	发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.g83849925.unu 禁止使用 activity_explicitly_exported 规则
11	Activity-Alias (com.g83849925.unu.wxapi.WXEntryActivity) 未被保护。 [android:exported=true]	警告	发现 Activity-Alias与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.g83849925.unu 禁止使用 activity_alias_explicitly_exported 规则

可浏览的ACTIVITIES

ACTIVITY	INTENT
com.uzmap.pkg.EntranceActivity	Schemes: yuanchuangyinyue://,

网络安全配置

序号	范围	严重级别	描述

API调用分析

API功能	源码文件
一般功能-> 文件操作	显示文件 com/alipay/b/a/a/a/a.java com/alipay/b/a/a/a/b.java com/alipay/b/a/a/b/b.java com/alipay/b/a/a/b/c.java com/alipay/b/a/a/b/d.java com/alipay/b/a/a/d/a.java com/alipay/b/a/a/d/b.java com/alipay/b/a/a/d/c.java com/alipay/b/a/a/e/b.java com/alipay/b/a/a/e/d.java com/apicloud/a/a/b.java com/apicloud/a/a/c.java com/apicloud/a/a/e.java com/apicloud/a/c/b.java com/apicloud/a/d/g.java com/apicloud/a/g/a/i.java com/apicloud/a/i/a/ai/a/i.java com/apicloud/a/i/a/ai/a/j.java com/apicloud/a/i/a/d/a/b.java com/apicloud/a/i/a/d/a/c.java com/apicloud/a/i/a/d/a/e.java com/apicloud/a/i/a/d/a/f.java com/apicloud/a/i/a/d/a/o.java com/apicloud/a/i/a/d/a/p.java com/apicloud/a/i/a/d/a/q.java com/apicloud/a/i/a/d/a/r.java com/apicloud/a/i/a/d/b.java com/apicloud/a/i/a/d/g.java com/apicloud/a/i/a/e/c/d.java com/apicloud/a/i/a/e/e.java com/apicloud/a/i/a/y/a/h.java com/apicloud/audioplayer/AudioPlayer.java com/apicloud/audioplayer/ClearCacheUtil.java com/apicloud/audioplayer/DownloadThread.java com/apicloud/audioplayer/DownloadUtil.java com/apicloud/audioplayer/FileUtil.java com/apicloud/audioplayer/UZAudioPlayer.java com/apicloud/module/ad/JsParamsUtil.java com/apicloud/module/ad/SplashView.java com/apicloud/module/ad/VideoView.java com/apicloud/module/ad/widget/WebImage.java com/apicloud/module/ad/widget/WebImageCache.java com/apicloud/third/gif/GifAnimationMetaData.java com/apicloud/third/gif/GifDecoder.java com/apicloud/third/gif/GifDrawable.java com/apicloud/third/gif/GifDrawableInit.java com/apicloud/third/gif/GifIOException.java com/apicloud/third/gif/GifInfoHandle.java com/apicloud/third/gif/GifTexImage2D.java com/apicloud/third/gif/GifTextView.java com/apicloud/third/gif/GifTextureView.java com/apicloud/third/gif/GifViewUtils.java com/apicloud/third/gif/InputSource.java com/apicloud/wxcardpackage/utils/HttpUtils.java com/bytedance/tea/a/a/a/a.java com/deepe/a/a/b.java com/deepe/a/c/c.java com/deepe/a/c/d.java com/deepe/a/c/e.java com/deepe/a/c/f.java com/deepe/a/d/a/a.java com/deepe/a/e/a.java com/deepe/b/a/c.java com/deepe/b/c/a.java com/deepe/b/d.java com/deepe/b/d/a.java com/deepe/b/d/b.java com/deepe/b/e.java com/deepe/b/f.java com/deepe/b/f/a.java com/deepe/b/f/b.java com/deepe/c/a/b.java com/deepe/c/a/c.java com/deepe/c/a/d.java com/deepe/c/a/j.java com/deepe/c/c/a/a/k.java com/deepe/c/c/a/a/m.java com/deepe/c/c/a/a/n.java com/deepe/c/c/ac.java com/deepe/c/c/b.java com/deepe/c/c/e.java com/deepe/c/c/f.java com/deepe/c/c/h.java com/deepe/c/c/j.java com/deepe/c/c/t.java com/deepe/c/c/v.java com/deepe/c/c/x.java com/deepe/c/f/a.java com/deepe/c/i/a.java com/deepe/c/i/g.java com/deepe/c/j/c/b.java com/deepe/c/j/c/c.java com/deepe/c/j/d/a.java com/deepe/c/j/d/c.java com/deepe/c/j/d/f.java com/deepe/c/j/d/g.java com/deepe/c/j/d/i.java com/deepe/c/j/d/k.java com/deepe/c/j/e.java com/deepe/c/j/e/a/a.java com/deepe/c/j/e/a/b.java com/deepe/c/j/e/a/c.java com/deepe/c/j/e/a/d.java com/deepe/c/j/e/a/f.java com/deepe/c/j/e/a/g.java com/deepe/c/j/e/a/h.java com/deepe/c/j/e/a/i.java com/deepe/c/j/e/a/j.java com/deepe/c/j/e/a/k.java com/deepe/c/j/e/j.java com/deepe/c/j/f.java com/deepe/c/j/j.java com/deepe/c/j/k.java com/deepe/c/k/g.java com/deepe/c/l/a/b.java com/deepe/c/l/d.java com/deepe/c/l/i/a.java com/deepe/f/a/f.java com/deepe/f/b.java com/deepe/f/c.java com/deepe/sdk/RESResponse.java com/deepe/sdk/StringStream.java com/eclipsesource/v8/LibraryLoader.java com/eclipsesource/v8/NodeJS.java com/eclipsesource/v8/PlatformDetector.java com/eclipsesource/v8/Releasable.java com/eclipsesource/v8/debug/V8DebugServer.java com/pgl/a/a/b.java com/pgl/a/b/b.java com/pgl/a/b/e.java com/pgl/sys/a/b/a.java com/pgl/sys/ces/a/b.java com/pgl/sys/ces/a/e.java com/ss/android/a/a/a/m.java com/ss/android/downloadlib/a.java com/ss/android/downloadlib/a/a/a.java com/ss/android/downloadlib/a/a/b.java com/ss/android/downloadlib/a/b.java com/ss/android/downloadlib/a/b/g.java com/ss/android/downloadlib/a/c/a.java com/ss/android/downloadlib/a/c/b.java com/ss/android/downloadlib/a/c/c.java com/ss/android/downloadlib/a/c/d.java com/ss/android/downloadlib/a/h.java com/ss/android/downloadlib/a/j.java com/ss/android/downloadlib/d/a.java com/ss/android/downloadlib/e.java com/ss/android/downloadlib/f/a.java com/ss/android/downloadlib/f/i.java com/ss/android/downloadlib/guide/install/InstallGuideActivity.java com/ss/android/downloadlib/guide/install/c.java com/ss/android/ttmd5/FileRandomAccess.java com/ss/android/ttmd5/IRandomAccess.java com/ss/android/ttmd5/TTMd5.java com/uzmap/pkg/b/a/g.java com/uzmap/pkg/b/a/h.java com/uzmap/pkg/b/c/d.java com/uzmap/pkg/b/c/j.java com/uzmap/pkg/b/c/o.java com/uzmap/pkg/openapi/FileSystem.java com/uzmap/pkg/uzapp/DataProvider.java com/uzmap/pkg/uzapp/UPExtraBridge.java com/uzmap/pkg/uzcore/UZCoreUtil.java com/uzmap/pkg/uzcore/b/f.java com/uzmap/pkg/uzcore/b/j.java com/uzmap/pkg/uzcore/e/c.java com/uzmap/pkg/uzcore/f/c.java com/uzmap/pkg/uzcore/g/b.java com/uzmap/pkg/uzcore/g/c.java com/uzmap/pkg/uzcore/g/d.java com/uzmap/pkg/uzcore/g/e.java com/uzmap/pkg/uzcore/g/f.java com/uzmap/pkg/uzcore/g/g.java com/uzmap/pkg/uzcore/g/h.java com/uzmap/pkg/uzcore/g/i.java com/uzmap/pkg/uzcore/i/a/b.java com/uzmap/pkg/uzcore/i/a/c.java com/uzmap/pkg/uzcore/i/b/a.java com/uzmap/pkg/uzcore/i/b/g.java com/uzmap/pkg/uzcore/m.java com/uzmap/pkg/uzcore/uzmodule/a/c.java com/uzmap/pkg/uzcore/uzmodule/a/f.java com/uzmap/pkg/uzkit/UZUtility.java com/uzmap/pkg/uzkit/data/UZWidgetInfo.java com/uzmap/pkg/uzkit/request/APICloudHttpClient.java com/uzmap/pkg/uzkit/request/HttpDownload.java com/uzmap/pkg/uzkit/request/HttpParams.java com/uzmap/pkg/uzkit/request/HttpPost.java com/uzmap/pkg/uzmodules/uzAlipay/UzAlipayActivity.java com/uzmap/pkg/uzmodules/uzWx/UzWx.java com/uzmap/pkg/uzmodules/uzWx/method/WxShare.java com/uzmap/pkg/uzmodules/uzWx/utils/JsParamsUtil.java com/uzmap/pkg/uzmodules/uzWx/utils/ShareUtils.java com/uzmap/pkg/uzmodules/uzWx/utils/Util.java
一般功能-> IPC通信	显示文件 com/alipay/android/app/IAlixPay.java com/alipay/android/app/IRemoteServiceCallback.java com/alipay/b/a/a/b/b.java com/apicloud/WXEntryActivity.java com/apicloud/a/a.java com/apicloud/a/a/a.java com/apicloud/a/b.java com/apicloud/a/d/a.java com/apicloud/a/d/b.java com/apicloud/a/i/a/ai/f.java com/apicloud/a/i/a/d/b.java com/apicloud/a/i/a/y/a/a/f.java com/apicloud/module/ad/AdWebviewActivity.java com/apicloud/wxcardpackage/utils/CBReceiver.java com/deepe/a/b/a.java com/deepe/c/a/d.java com/deepe/c/f/c.java com/deepe/c/f/n.java com/deepe/c/j/a/a.java com/deepe/f/a/f.java com/deepe/f/b/a.java com/pgl/sys/ces/b/a.java com/ss/android/downloadlib/a/f.java com/ss/android/downloadlib/a/i.java com/ss/android/downloadlib/activity/TTDelegateActivity.java com/ss/android/downloadlib/core/download/DownloadReceiver.java com/ss/android/downloadlib/f/a.java com/ss/android/downloadlib/f/f.java com/ss/android/downloadlib/f/i.java com/ss/android/downloadlib/guide/install/InstallGuideActivity.java com/uzmap/pkg/LauncherUI.java com/uzmap/pkg/b/a/a.java com/uzmap/pkg/b/a/g.java com/uzmap/pkg/b/c/i.java com/uzmap/pkg/b/c/m.java com/uzmap/pkg/b/f/a.java com/uzmap/pkg/openapi/SuperWebview.java com/uzmap/pkg/openapi/ViewClient.java com/uzmap/pkg/uzapp/DataProvider.java com/uzmap/pkg/uzapp/UPExtraBridge.java com/uzmap/pkg/uzapp/b.java com/uzmap/pkg/uzcore/UZAppActivity.java com/uzmap/pkg/uzcore/UZCoreUtil.java com/uzmap/pkg/uzcore/UZPlatformBridge.java com/uzmap/pkg/uzcore/ad.java com/uzmap/pkg/uzcore/aj.java com/uzmap/pkg/uzcore/d/c.java com/uzmap/pkg/uzcore/external/j.java com/uzmap/pkg/uzcore/f.java com/uzmap/pkg/uzcore/g/e.java com/uzmap/pkg/uzcore/h.java com/uzmap/pkg/uzcore/h/m.java com/uzmap/pkg/uzcore/i.java com/uzmap/pkg/uzcore/i/a.java com/uzmap/pkg/uzcore/i/b/a.java com/uzmap/pkg/uzcore/i/b/g.java com/uzmap/pkg/uzcore/i/b/h.java com/uzmap/pkg/uzcore/i/b/i.java com/uzmap/pkg/uzcore/k.java com/uzmap/pkg/uzcore/l.java com/uzmap/pkg/uzcore/o.java com/uzmap/pkg/uzcore/uzmodule/ActivityResult.java com/uzmap/pkg/uzcore/uzmodule/UZModule.java com/uzmap/pkg/uzcore/uzmodule/a.java com/uzmap/pkg/uzcore/uzmodule/a/a.java com/uzmap/pkg/uzcore/uzmodule/a/c.java com/uzmap/pkg/uzcore/uzmodule/a/f.java com/uzmap/pkg/uzmodules/uzWx/UzWx.java com/uzmap/pkg/uzmodules/uzWx/WxReceiver.java com/uzmap/pkg/uzmodules/uzWx/utils/ShareUtils.java
组件-> 启动 Activity	显示文件 com/alipay/android/app/IRemoteServiceCallback.java com/apicloud/WXEntryActivity.java com/apicloud/a/i/a/y/a/a/f.java com/apicloud/module/ad/AdWebviewActivity.java com/deepe/c/a/d.java com/deepe/c/f/n.java com/deepe/c/f/p.java com/ss/android/downloadlib/activity/TTDelegateActivity.java com/ss/android/downloadlib/f/f.java com/ss/android/downloadlib/guide/install/InstallGuideActivity.java com/uzmap/pkg/LauncherUI.java com/uzmap/pkg/b/a/g.java com/uzmap/pkg/b/c/i.java com/uzmap/pkg/openapi/ViewClient.java com/uzmap/pkg/uzapp/UPExtraBridge.java com/uzmap/pkg/uzapp/b.java com/uzmap/pkg/uzcore/UZAppActivity.java com/uzmap/pkg/uzcore/h/m.java com/uzmap/pkg/uzcore/i/b/a.java com/uzmap/pkg/uzcore/i/b/i.java com/uzmap/pkg/uzcore/uzmodule/UZModule.java com/uzmap/pkg/uzcore/uzmodule/a/c.java com/uzmap/pkg/uzcore/uzmodule/a/f.java com/uzmap/pkg/uzmodules/uzWx/utils/ShareUtils.java
JavaScript 接口方法	com/apicloud/a/c/g.java com/uzmap/pkg/uzcore/uzmodule/a/a.java com/uzmap/pkg/uzcore/uzmodule/a/e.java
调用java反射机制	显示文件 com/alipay/a/a/g.java com/alipay/b/a/a/a/a.java com/alipay/b/a/a/a/a/c.java com/alipay/b/a/a/b/b.java com/alipay/b/a/a/b/d.java com/apicloud/a/i/a/aa/h.java com/apicloud/a/i/a/aa/j.java com/apicloud/a/i/a/ad/a/h.java com/apicloud/a/i/a/v/a.java com/apicloud/a/i/a/v/g.java com/apicloud/module/ad/transform/SystemBarTintManager.java com/apicloud/third/gif/LibraryLoader.java com/deepe/a/b/d.java com/deepe/c/a/c.java com/deepe/c/b/b/a.java com/deepe/c/b/i.java com/deepe/c/c/a/a/f.java com/deepe/c/c/ab.java com/deepe/c/f/f.java com/deepe/c/f/n.java com/deepe/c/i/l.java com/deepe/c/i/o.java com/deepe/c/j/d/g.java com/deepe/d/b.java com/deepe/f/b/a.java com/eclipsesource/v8/V8.java com/eclipsesource/v8/V8Object.java com/pgl/a/b/c.java com/pgl/sys/ces/a/a.java com/pgl/sys/ces/a/c.java com/pgl/sys/ces/b.java com/ss/android/downloadlib/f/a.java com/uzmap/pkg/b/a/b.java com/uzmap/pkg/b/a/i.java com/uzmap/pkg/b/f/b.java com/uzmap/pkg/uzcore/i/b/j.java com/uzmap/pkg/uzcore/uzmodule/c.java com/uzmap/pkg/uzcore/uzmodule/e.java
一般功能-> 获取系统服务(getSystemService)	显示文件 com/alipay/b/a/a/b/b.java com/alipay/b/a/a/b/d.java com/apicloud/audioplayer/AudioPlayer.java com/apicloud/audioplayer/UZAudioPlayer.java com/apicloud/c/a/a/j.java com/deepe/b/a.java com/deepe/c/a/i.java com/pgl/sys/ces/a/d.java com/pgl/sys/ces/b/b.java
命令执行-> getRuntime.exec()	显示文件 com/deepe/f/c.java com/eclipsesource/v8/LibraryLoader.java com/eclipsesource/v8/NodeJS.java com/pgl/sys/ces/a/e.java com/uzmap/pkg/uzcore/UZCoreUtil.java
加密解密-> 信息摘要算法	显示文件 com/alipay/b/a/a/a/a.java com/alipay/b/a/a/a/a/b.java com/apicloud/audioplayer/MD5.java com/deepe/c/g/f.java com/deepe/c/j/f.java com/deepe/c/l/b/b.java com/pgl/sys/ces/c.java com/ss/android/ttmd5/TTMd5.java com/uzmap/pkg/uzmodules/uzAlipay/Rsa.java com/uzmap/pkg/uzmodules/uzWx/UzWx.java com/uzmap/pkg/uzmodules/uzWx/utils/Util.java
加密解密-> Crypto加解密组件	显示文件 com/alipay/b/a/a/a/a/c.java com/deepe/c/g/b.java com/ss/android/downloadlib/f/i.java com/uzmap/pkg/uzmodules/uzAlipay/Rsa.java
进程操作-> 获取进程pid	显示文件 com/deepe/c/b/i.java com/deepe/c/i/l.java com/uzmap/pkg/uzapp/UProvider.java com/uzmap/pkg/uzcore/UZAppActivity.java com/uzmap/pkg/uzcore/UZCoreUtil.java
网络通信-> WebView JavaScript接口	显示文件 com/apicloud/module/ad/AdWebviewActivity.java com/uzmap/pkg/openapi/SuperWebview.java com/uzmap/pkg/uzcore/i/b/d.java com/uzmap/pkg/uzcore/i/b/k.java
网络通信-> WebView GET请求	显示文件 com/uzmap/pkg/a/g.java com/uzmap/pkg/openapi/SuperWebview.java com/uzmap/pkg/openapi/WebViewProvider.java com/uzmap/pkg/uzcore/i/b/f.java
网络通信-> WebView POST请求	com/uzmap/pkg/openapi/SuperWebview.java
网络通信-> WebView 相关	显示文件 com/apicloud/module/ad/AdWebviewActivity.java com/deepe/c/k/k.java com/uzmap/pkg/openapi/SuperWebview.java com/uzmap/pkg/openapi/WebViewProvider.java com/uzmap/pkg/uzcore/i/b/b.java com/uzmap/pkg/uzcore/i/b/d.java com/uzmap/pkg/uzcore/i/b/f.java com/uzmap/pkg/uzcore/i/b/k.java com/uzmap/pkg/uzcore/i/d.java
进程操作-> 杀死进程	com/uzmap/pkg/uzcore/UZAppActivity.java
一般功能-> 加载so文件	显示文件 com/apicloud/third/gif/LibraryLoader.java com/apicloud/third/yoga/YogaNative.java com/eclipsesource/v8/LibraryLoader.java com/pgl/a/b/e.java com/pgl/sys/ces/a.java com/uzmap/pkg/uzcore/external/Enslecb.java
组件-> 发送广播	显示文件 com/apicloud/WXEntryActivity.java com/uzmap/pkg/b/a/a.java com/uzmap/pkg/uzapp/b.java com/uzmap/pkg/uzcore/UZCoreUtil.java com/uzmap/pkg/uzcore/g/e.java com/uzmap/pkg/uzcore/i/b/g.java
组件-> ContentProvider	com/uzmap/pkg/uzapp/DataProvider.java com/uzmap/pkg/uzapp/UProvider.java
组件-> 启动 Service	com/ss/android/downloadlib/a/f.java
隐私数据-> 读写通讯录	com/deepe/c/a/b.java
隐私数据-> 剪贴板数据读写操作	com/deepe/a/b/c.java com/deepe/c/a/i.java
一般功能-> 传感器相关操作	显示文件 com/alipay/b/a/a/b/b.java com/deepe/a/b/j.java com/deepe/c/a/i.java com/pgl/sys/ces/b/b.java com/uzmap/pkg/b/a/j.java
网络通信-> HTTP建立连接	显示文件 com/apicloud/a/a/c.java com/apicloud/module/ad/SplashView.java com/apicloud/wxcardpackage/utils/HttpUtils.java com/deepe/c/j/d/g.java com/deepe/c/j/k.java com/pgl/a/a/b.java com/pgl/sys/a/b/a.java com/uzmap/pkg/b/c/o.java com/uzmap/pkg/uzcore/i/b/a.java com/uzmap/pkg/uzmodules/uzWx/utils/Util.java
一般功能-> 查看\修改Android系统属性	显示文件 com/alipay/b/a/a/a/a.java com/alipay/b/a/a/b/b.java com/alipay/b/a/a/b/d.java com/apicloud/module/ad/transform/SystemBarTintManager.java com/deepe/a/b/d.java
隐私数据-> 获取已安装的应用程序	com/deepe/c/f/n.java com/ss/android/downloadlib/f/i.java com/uzmap/pkg/uzcore/UZCoreUtil.java
隐私数据-> 录制音频行为	com/deepe/a/c/f.java
一般功能-> 设置手机铃声，媒体音量	com/apicloud/audioplayer/UZAudioPlayer.java
网络通信-> TCP套接字	显示文件 com/deepe/c/j/c/c.java com/deepe/c/j/d/a.java com/deepe/c/l/a/b.java com/eclipsesource/v8/debug/V8DebugServer.java com/uzmap/pkg/uzmodules/uzWx/utils/Util.java
网络通信-> SSL证书处理	显示文件 com/deepe/c/j/c/b.java com/deepe/c/j/c/c.java com/deepe/c/j/d/g.java com/deepe/c/j/e/c.java com/deepe/c/j/k.java com/deepe/c/l/a/b.java com/uzmap/pkg/uzmodules/uzWx/utils/Util.java
隐私数据-> 录制视频	com/apicloud/a/i/a/d/a/q.java com/apicloud/a/i/a/d/a/r.java com/deepe/a/c/d.java
网络通信-> URLConnection	显示文件 com/apicloud/audioplayer/AudioPlayer.java com/apicloud/audioplayer/DownloadThread.java com/apicloud/module/ad/widget/WebImage.java com/pgl/sys/a/b/a.java
设备指纹-> getSimOperator	com/deepe/f/a.java
设备指纹-> 查看运营商信息	com/deepe/f/a.java
进程操作-> 获取运行的进程\服务	com/deepe/c/i/l.java
网络通信-> HTTPS建立连接	显示文件 com/apicloud/wxcardpackage/utils/HttpUtils.java com/deepe/c/j/d/g.java com/pgl/a/a/b.java com/pgl/sys/a/b/a.java
加密解密-> Base64 解密	com/bytedance/tea/a/a/a/a.java com/deepe/c/c/a/a/j.java
组件-> Provider openFile	com/uzmap/pkg/uzapp/DataProvider.java
加密解密-> Base64 加密	显示文件 com/alipay/b/a/a/a/a.java com/bytedance/tea/a/a/a/a.java com/pgl/sys/a/a.java com/ss/android/downloadlib/a/d/a.java
网络通信-> OkHttpClient Connection	com/apicloud/audioplayer/DownloadUtil.java
一般功能-> Android通知	com/uzmap/pkg/b/a/g.java
隐私数据-> 获取GPS位置信息	com/uzmap/pkg/b/a/e.java
网络通信-> TCP服务器套接字	com/eclipsesource/v8/debug/V8DebugServer.java
隐私数据-> 拍照摄像	com/apicloud/a/i/a/d/a/b.java
设备指纹-> 查看本机IMSI	com/alipay/b/a/a/b/b.java
设备指纹-> 查看本机SIM卡序列号	com/alipay/b/a/a/b/b.java
设备指纹-> 查看本机号码	com/alipay/b/a/a/b/b.java
一般功能-> 获取WiFi相关信息	com/alipay/b/a/a/b/b.java
一般功能-> 获取网络接口信息	com/alipay/b/a/a/b/b.java
一般功能-> 获取活动网路信息	com/alipay/b/a/a/b/b.java
网络通信-> 蓝牙连接	com/alipay/b/a/a/b/b.java

源代码分析

高危

6

警告

8

信息

1

安全

2

屏蔽

0

序号	问题	等级	参考标准	文件位置	操作
1	应用程序记录日志信息,不得记录敏感信息	信息	CWE: CWE-532: 通过日志文件的信息暴露 OWASP MASVS: MSTG-STORAGE-3	显示文件 com/apicloud/WXEntryActivity.java com/apicloud/a/d/g.java com/apicloud/a/i/a/ai/a/d.java com/apicloud/a/i/a/ai/a/j.java com/apicloud/a/i/a/d/a/c.java com/apicloud/a/i/a/r/s.java com/apicloud/a/i/a/v/g.java com/apicloud/a/i/a/y/a/a/f.java com/apicloud/audioplayer/AudioPlayer.java com/apicloud/audioplayer/UZAudioPlayer.java com/apicloud/c/a/a/g.java com/apicloud/c/a/a/j.java com/apicloud/c/b/d.java com/apicloud/module/ad/VideoView.java com/apicloud/wxcardpackage/utils/CBReceiver.java com/bytedance/embed_dr/DrLogWriter.java com/deepe/b/a/a.java com/deepe/b/e.java com/deepe/b/f.java com/deepe/c/b/c/e.java com/deepe/c/b/d/b.java com/deepe/c/b/j.java com/deepe/c/c/a/a/l.java com/deepe/c/j/e/b.java com/deepe/c/j/q.java com/deepe/d/a.java com/deepe/f/a/d.java com/deepe/f/a/e.java com/deepe/f/a/f.java com/eclipsesource/v8/debug/V8DebugServer.java com/pgl/sys/a/b.java com/pgl/sys/ces/b.java com/uzmap/pkg/uzcore/UZCoreUtil.java com/uzmap/pkg/uzcore/b/a.java com/uzmap/pkg/uzcore/i/b/a.java com/uzmap/pkg/uzkit/request/Request.java com/uzmap/pkg/uzmodules/uzAlipay/Result.java com/uzmap/pkg/uzmodules/uzAlipay/Rsa.java com/uzmap/pkg/uzmodules/uzWx/UzWx.java com/uzmap/pkg/uzmodules/uzWx/WxReceiver.java com/uzmap/pkg/uzmodules/uzWx/method/WxAuth.java com/uzmap/pkg/uzmodules/uzWx/method/WxShare.java com/uzmap/pkg/uzmodules/uzWx/tasks/AccessTokenTask.java com/uzmap/pkg/uzmodules/uzWx/tasks/GetUserInfoTask.java com/uzmap/pkg/uzmodules/uzWx/utils/Util.java	Suppress the rule android_logging in com.g83849925.unu Suppress the rule android_logging in com.g83849925.unu only from these files
2	SHA-1是已知存在哈希冲突的弱哈希	警告	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4	显示文件 com/alipay/b/a/a/a/a.java com/alipay/b/a/a/a/a/b.java com/alipay/b/a/a/a/a/c.java com/deepe/c/g/f.java com/deepe/c/j/f.java com/deepe/c/l/b/b.java com/pgl/sys/ces/c.java com/uzmap/pkg/uzmodules/uzWx/UzWx.java com/uzmap/pkg/uzmodules/uzWx/utils/Util.java	Suppress the rule android_sha1 in com.g83849925.unu Suppress the rule android_sha1 in com.g83849925.unu only from these files
3	应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据	警告	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	显示文件 com/alipay/b/a/a/b/b.java com/alipay/b/a/a/d/b.java com/apicloud/a/i/a/d/g.java com/apicloud/audioplayer/ClearCacheUtil.java com/apicloud/audioplayer/FileUtil.java com/apicloud/audioplayer/UZAudioPlayer.java com/deepe/b/f.java com/deepe/c/a/j.java com/pgl/sys/ces/a/a.java com/ss/android/downloadlib/a.java com/ss/android/downloadlib/a/c/a.java com/ss/android/downloadlib/a/c/b.java com/ss/android/downloadlib/a/e.java com/ss/android/downloadlib/a/h.java com/ss/android/downloadlib/a/j.java com/uzmap/pkg/uzcore/g/c.java com/uzmap/pkg/uzcore/g/d.java com/uzmap/pkg/uzmodules/uzWx/UzWx.java	Suppress the rule android_read_write_external in com.g83849925.unu Suppress the rule android_read_write_external in com.g83849925.unu only from these files
4	MD5是已知存在哈希冲突的弱哈希	警告	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4	显示文件 com/apicloud/audioplayer/MD5.java com/deepe/c/g/f.java com/ss/android/ttmd5/TTMd5.java com/uzmap/pkg/uzmodules/uzAlipay/Rsa.java	Suppress the rule android_md5 in com.g83849925.unu Suppress the rule android_md5 in com.g83849925.unu only from these files
5	此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击	安全	OWASP MASVS: MSTG-NETWORK-4	com/deepe/c/j/c/d.java	Suppress the rule android_ssl_pinning in com.g83849925.unu Suppress the rule android_ssl_pinning in com.g83849925.unu only from these files
6	此应用程序可能具有Root检测功能	安全	OWASP MASVS: MSTG-RESILIENCE-1	com/deepe/c/a/c.java	Suppress the rule android_detect_root in com.g83849925.unu Suppress the rule android_detect_root in com.g83849925.unu only from these files
7	文件可能包含硬编码的敏感信息，如用户名、密码、密钥等	警告	CWE: CWE-312: 明文存储敏感信息 OWASP Top 10: M9: Reverse Engineering OWASP MASVS: MSTG-STORAGE-14	显示文件 com/pgl/sys/a/b.java com/pgl/sys/ces/c/a.java com/pgl/sys/ces/c/b.java com/uzmap/pkg/uzkit/fineHttp/RequestParam.java com/uzmap/pkg/uzmodules/uzWx/UzWx.java compile/Properties.java	Suppress the rule android_hardcoded in com.g83849925.unu Suppress the rule android_hardcoded in com.g83849925.unu only from these files
8	如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击	高危	CWE: CWE-79: 在Web页面生成时对输入的转义处理不恰当（'跨站脚本'） OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-PLATFORM-6	com/uzmap/pkg/openapi/SuperWebview.java com/uzmap/pkg/uzcore/i/b/f.java	Suppress the rule android_webview_xss in com.g83849925.unu Suppress the rule android_webview_xss in com.g83849925.unu only from these files
9	该文件是World Readable。任何应用程序都可以读取文件	高危	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	com/deepe/b/f/a.java	Suppress the rule android_world_readable in com.g83849925.unu Suppress the rule android_world_readable in com.g83849925.unu only from these files
10	应用程序使用不安全的随机数生成器	警告	CWE: CWE-330: 使用不充分的随机数 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-6	com/deepe/c/i/d.java com/deepe/c/j/e/a/c.java com/uzmap/pkg/uzcore/UZCoreUtil.java	Suppress the rule android_insecure_random in com.g83849925.unu Suppress the rule android_insecure_random in com.g83849925.unu only from these files
11	应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库	警告	CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当（'SQL 注入'） OWASP Top 10: M7: Client Code Quality	com/deepe/f/a/a.java	Suppress the rule android_sql_raw_query in com.g83849925.unu Suppress the rule android_sql_raw_query in com.g83849925.unu only from these files
12	IP地址泄露	警告	CWE: CWE-200: 信息泄露 OWASP MASVS: MSTG-CODE-2	com/ss/android/downloadlib/a/j.java	Suppress the rule android_ip_disclosure in com.g83849925.unu Suppress the rule android_ip_disclosure in com.g83849925.unu only from these files
13	该文件是World Writable。任何应用程序都可以写入文件	高危	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	com/deepe/c/k/g.java	Suppress the rule android_world_writable in com.g83849925.unu Suppress the rule android_world_writable in com.g83849925.unu only from these files
14	启用了调试配置。生产版本不能是可调试的	高危	CWE: CWE-919: 移动应用程序中的弱点 OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-RESILIENCE-2	com/apicloud/sdk/goodAdModule/BuildConfig.java	Suppress the rule android_aar_jar_debug_enabled in com.g83849925.unu Suppress the rule android_aar_jar_debug_enabled in com.g83849925.unu only from these files
15	应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。	高危	CWE: CWE-649: 依赖于混淆或加密安全相关输入而不进行完整性检查 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-3	com/alipay/b/a/a/a/a/c.java	Suppress the rule cbc_padding_oracle in com.g83849925.unu Suppress the rule cbc_padding_oracle in com.g83849925.unu only from these files
16	应用程序创建临时文件。敏感信息永远不应该被写进临时文件	警告	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	com/eclipsesource/v8/NodeJS.java	Suppress the rule android_temp_file in com.g83849925.unu Suppress the rule android_temp_file in com.g83849925.unu only from these files
17	不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击	高危	CWE: CWE-295: 证书验证不恰当 OWASP Top 10: M3: Insecure Communication OWASP MASVS: MSTG-NETWORK-3	com/uzmap/pkg/uzcore/i/d.java	Suppress the rule android_webview_ignore_ssl in com.g83849925.unu Suppress the rule android_webview_ignore_ssl in com.g83849925.unu only from these files

动态库分析

序号	动态库	NX(堆栈禁止执行)	STACK CANARY(栈保护)	RELRO	RPATH（指定SO搜索路径）	RUNPATH（指定SO搜索路径）	FORTIFY(常用函数加强检查)	SYMBOLS STRIPPED(裁剪符号表)
1	arm64-v8a/libavmJni.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	True info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用
2	arm64-v8a/libavmJni_gif.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	True info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	True info 二进制文件有以下加固函数: ['__memcpy_chk', '__strncat_chk']	False warning 符号可用
3	arm64-v8a/libbuffer_pg.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	False high 这个二进制文件没有在栈上添加栈哨兵值。栈哨兵是用于检测和防止攻击者覆盖返回地址的一种技术。使用选项-fstack-protector-all来启用栈哨兵。这对于Dart/Flutter库不适用，除非使用了Dart FFI	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用
4	arm64-v8a/libnms.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	True info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用
5	arm64-v8a/libsec.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	True info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用
6	arm64-v8a/libtobEmbedEncrypt.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	True info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用

文件分析

序号	问题	文件

VIRUSTOTAL扫描

检出率： 4 / 68 完整报告

反病毒引擎	检出结果
Fortinet	Android/Agnet.CLC!tr
Google	Detected
Ikarus	Trojan-Spy.AndroidOS.Agent
K7GW	Trojan ( 0056ba701 )

滥用权限

恶意软件常用权限 4/30

android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.READ_SMS

其它常用权限 6/46

android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.FOREGROUND_SERVICE
android.permission.READ_EXTERNAL_STORAGE

恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。

IP地图

域名检测

域名	状态	中国境内	位置信息
mobilegw-1-64.test.alipay.net	安全	否	没有可用的地理位置信息。
sf3-ttcdn-tos.pstatp.com	安全	是	IP地址: 180.97.251.220 国家: 中国地区: 江苏城市: 镇江查看: 高德地图
h5.m.taobao.com	安全	是	IP地址: 42.231.141.203 国家: 中国地区: 江苏城市: 苏州查看: 高德地图
d.app3c.cn	安全	否	没有可用的地理位置信息。
toblog.ctobsnssdk.com	安全	是	IP地址: 42.231.141.203 国家: 中国地区: 江苏城市: 镇江查看: 高德地图
i.snssdk.com	安全	是	IP地址: 180.97.251.220 国家: 中国地区: 福建城市: 泉州查看: 高德地图
toblog.tobsnssdk.com	安全	否	IP地址: 42.231.141.203 国家: 美利坚合众国地区: 加利福尼亚城市: 圣何塞查看: Google 地图
tobapplog.tobsnssdk.com	安全	否	IP地址: 42.231.141.203 国家: 美利坚合众国地区: 加利福尼亚城市: 圣何塞查看: Google 地图
iuap-yonbuilder-mamservice.yyuap.com	安全	是	IP地址: 42.231.141.203 国家: 中国地区: 北京城市: 北京查看: 高德地图
pangolin.snssdk.com	安全	是	IP地址: 180.97.251.220 国家: 中国地区: 江苏城市: 镇江查看: 高德地图
success.itobsnssdk.com	安全	否	IP地址: 114.108.166.88 国家: 大韩民国地区: 首尔teukbyeolsi 城市: 首尔查看: Google 地图
pangolin16.snssdk.com	安全	否	没有可用的地理位置信息。
www.ccil.org	安全	否	IP地址: 142.250.207.51 国家: 日本地区: 东京城市: 东京查看: Google 地图
s.app3c.com	安全	否	没有可用的地理位置信息。
lf3-ttcdn-tos.pstatp.com	安全	是	IP地址: 180.97.251.220 国家: 中国地区: 河南城市: 南阳查看: 高德地图
www.samsungapps.com	安全	否	IP地址: 52.18.136.34 国家: 爱尔兰地区: 都柏林城市: 都柏林查看: Google 地图
sdfp.snssdk.com	安全	是	IP地址: 180.97.251.220 国家: 中国地区: 江苏城市: 苏州查看: 高德地图
bds.snssdk.com	安全	是	IP地址: 61.147.168.160 国家: 中国地区: 江苏城市: 镇江查看: 高德地图
ops.fun.mipm	安全	否	没有可用的地理位置信息。
toblog.itobsnssdk.com	安全	否	IP地址: 114.108.166.91 国家: 大韩民国地区: 首尔teukbyeolsi 城市: 首尔查看: Google 地图
mobilegw.aaa.alipay.net	安全	否	没有可用的地理位置信息。
ad.toutiao.com	安全	是	IP地址: 150.139.241.201 国家: 中国地区: 湖南城市: 长沙查看: 高德地图
success.ctobsnssdk.com	安全	是	IP地址: 180.97.251.224 国家: 中国地区: 江苏城市: 苏州查看: 高德地图
sf1-ttcdn-tos.pstatp.com	安全	是	IP地址: 150.139.241.201 国家: 中国地区: 江苏城市: 台州查看: 高德地图
as.app3c.com	安全	否	没有可用的地理位置信息。
apmlog.snssdk.com	安全	是	IP地址: 221.230.245.74 国家: 中国地区: 山东城市: 济南查看: 高德地图
www.chengzijianzhan.com	安全	是	IP地址: 150.139.241.201 国家: 中国地区: 江苏城市: 台州查看: 高德地图
sf6-ttcdn-tos.pstatp.com	安全	是	IP地址: 221.230.245.74 国家: 中国地区: 浙江城市: 台州查看: 高德地图
p3-tt.byteimg.com	安全	是	IP地址: 221.230.245.74 国家: 中国地区: 江苏城市: 台州查看: 高德地图
api-access.pangolin-sdk-toutiao.com	安全	是	IP地址: 49.79.224.239 国家: 中国地区: 江苏城市: 南通查看: 高德地图
tobapplog.itobsnssdk.com	安全	否	IP地址: 114.108.166.74 国家: 大韩民国地区: 首尔teukbyeolsi 城市: 首尔查看: Google 地图
tobapplog.ctobsnssdk.com	安全	是	IP地址: 61.147.168.160 国家: 中国地区: 江苏城市: 镇江查看: 高德地图
success.tobsnssdk.com	安全	否	IP地址: 103.136.220.205 国家: 新加坡地区: 新加坡城市: 新加坡查看: Google 地图
p.app3c.cn	安全	否	没有可用的地理位置信息。
mobilegw.stable.alipay.net	安全	否	没有可用的地理位置信息。
is.snssdk.com	安全	是	IP地址: 49.79.240.229 国家: 中国地区: 江苏城市: 南通查看: 高德地图
hydra.alibaba.com	安全	是	IP地址: 203.119.175.213 国家: 中国地区: 北京城市: 北京查看: 高德地图

手机号码

网址

网址信息	源码文件
https://www.yuanchuangyinyue.com/Retpassapp.html http://aamirafridi.com/jquery/jquery-marquee-plugin https://www.yuanchuangyinyue.com/www/opay.php https://www.yuanchuangyinyue.com/www/ali/wappay/app_musicpay.php?pid= https://www.yuanchuangyinyue.com//www/opay.php?pid= https://www.yuanchuangyinyue.com/api/homes/appxy?id=11081 https://www.yuanchuangyinyue.com/post/ https://huati.yuanchuangyinyue.com/api/homes/getGoodsByid?id= http://www.iana.org/assignments/media-types/ https://github.com/katspaugh/wavesurfer.js https://huati.yuanchuangyinyue.com/api/homes/weblist?cate=34&page=1&limit=10 https://www.yuanchuangyinyue.com/api/homes/appxy?id=22995 https://www.yuanchuangyinyue.com/www/ali/wappay/app_pay.php?pid= https://www.yuanchuangyinyue.com/api/ https://xiazai.yuanchuangyinyue.com/ https://www.yuanchuangyinyue.com/www/wx/app_pay_bq.php?WIDout_trade_no= https://xiazai.yuanchuangyinyue.com/uploads.php?type=mp3 https://xiazai.yuanchuangyinyue.com/uploadsmp3.php?type=mp3 https://www.yuanchuangyinyue.com/zb_users/plugin/mochu_us/user/app_xieyi.php https://www.yuanchuangyinyue.com/www/wx/app_music_pay.php?WIDout_trade_no= https://huati.yuanchuangyinyue.com/api/homes/weblist?cate= https://www.yuanchuangyinyue.com/ https://work.weixin.qq.com/kfid/kfc1ad33e8052a4cdca http://get.adobe.com/flashplayer/ https://www.yuanchuangyinyue.com/www/list_edit_cx.php?id= https://www.yuanchuangyinyue.com/home/ https://www.yuanchuangyinyue.com/okinfo/ https://www.yuanchuangyinyue.com/api/homes/appxy?id= https://www.yuanchuangyinyue.com/app/	自研引擎-A
https://api.weixin.qq.com/card/invoice/reimburse/getinvoicebatch?access_token=	com/apicloud/WXEntryActivity.java
http://www.ccil.org/~cowan/tagsoup/properties/schema	com/deepe/c/i/o.java
https://github.com/tootallnate/java-websocket/wiki/lost-connection-detection	com/deepe/c/l/a.java
https://bds.snssdk.com https://sdfp.snssdk.com	com/pgl/a/a/a.java
1.9.5.1	com/ss/android/downloadlib/a/j.java
https://i.snssdk.com/inspect/aegis/client/app/resend/	com/ss/android/downloadlib/a/d/a.java
http://www.samsungapps.com/appquery/appdetail.as?appid=	com/ss/android/downloadlib/f/f.java
http://ad.toutiao.com/advertiser_package/ https://ad.toutiao.com/advertiser_package/ http://lf3-ttcdn-tos.pstatp.com/ https://lf3-ttcdn-tos.pstatp.com/	com/ss/android/downloadlib/f/i.java
http://ops.fun.mipm/sync	com/uzmap/pkg/openapi/SuperWebview.java
http://ops.fun.mipm/sync	com/uzmap/pkg/uzcore/f.java
https://api.weixin.qq.com/cgi-bin/token?grant_type=client_credential&appid= https://api.weixin.qq.com/cgi-bin/ticket/getticket?access_token=	com/uzmap/pkg/uzmodules/uzWx/UzWx.java
https://api.weixin.qq.com/sns/oauth2/access_token?appid=%s&secret=%s&code=%s&grant_type=authorization_code https://api.weixin.qq.com/sns/oauth2/refresh_token?appid=%s&grant_type=refresh_token&refresh_token=%s	com/uzmap/pkg/uzmodules/uzWx/tasks/AccessTokenTask.java
https://api.weixin.qq.com/sns/userinfo?access_token=%s&openid=%s&lang=%s	com/uzmap/pkg/uzmodules/uzWx/tasks/GetUserInfoTask.java
https://iuap-yonbuilder-mamservice.yyuap.com/iuap-yonbuilder-mobile/v2 https://d.app3c.cn https://s.app3c.com https://p.app3c.cn https://as.app3c.com	compile/Properties.java
https://as.app3c.com https://toblog.itobsnssdk.com https://api.weixin.qq.com/sns/oauth2/refresh_token?appid=%s&grant_type=refresh_token&refresh_token=%s https://toblog.itobsnssdk.com/service/2/log_settings/ https://tobapplog.ctobsnssdk.com https://iuap-yonbuilder-mamservice.yyuap.com/iuap-yonbuilder-mobile/v2 http://mobilegw.aaa.alipay.net/mgw.htm https://api-access.pangolin-sdk-toutiao.com http://apmlog.snssdk.com/apm/collect/crash/ http://mobilegw.alipay.com/mgw.htm https://lf3-ttcdn-tos.pstatp.com/ http://mobilegw.stable.alipay.net/mgw.htm javascript:teawebviewinfo https://d.app3c.cn https://p.app3c.cn http://hydra.alibaba.com/ https://toblog.tobsnssdk.com https://toblog.itobsnssdk.com/service/2/app_alert_check/ https://i.snssdk.com/api/ad/union/sdk/stats/ https://toblog.tobsnssdk.com/service/2/device_register_only/ http://www.samsungapps.com/appquery/appdetail.as?appid= https://api.weixin.qq.com/cgi-bin/ticket/getticket?access_token= https://is.snssdk.com https://toblog.tobsnssdk.com/service/2/abtest_config/ http://h5.m.taobao.com/trade/paysuccess.html?bizorderid=$orderid$& https://i.snssdk.com/inspect/aegis/client/app/resend/ http://ad.toutiao.com/advertiser_package/ https://api.weixin.qq.com/card/invoice/reimburse/getinvoicebatch?access_token= 125.35.101.202 http://p3-tt.byteimg.com/img/web.business.image/201907245d0d495a0568785742e0b940~100x100.image http://sf3-ttcdn-tos.pstatp.com/obj/mosaic-legacy/2b96e0005c6b6019f8a5b https://www.chengzijianzhan.com/tetris/page/1639938884171780/?ad_id=1639940885031987&_toutiao_params=%7b%22cid%22%3a1639941324071955%2c%22device_id%22%3a38167681029%2c%22log_extra%22%3a%22%7b%5c%22ad_price%5c%22%3a%5c%22xthcvgadkypdoejwaampijdexkkdlycp1gnxww%5c%22%2c%5c%22convert_id%5c%22%3a1639938850817027%2c%5c%22orit%5c%22%3a900000000%2c%5c%22req_id%5c%22%3a%5c%220781feb2-bf4b-4ff8-be68-9149e288a420u6714%5c%22%2c%5c%22rit%5c%22%3a901121375%7d%22%2c%22orit%22%3a900000000%2c%22req_id%22%3a%220781feb2-bf4b-4ff8-be68-9149e288a420u6714%22%2c%22rit%22%3a901121375%2c%22sign%22%3a%22d41d8cd98f00b204e9800998ecf8427e%22%2c%22uid%22%3a65999808247%2c%22ut%22%3a12%7d http://sf3-ttcdn-tos.pstatp.com/img/mosaic-legacy/2b96e0005c6b6019f8a5b~noop.jpg https://sf1-ttcdn-tos.pstatp.com/obj/union-fe/playable/97699c8fb31e7836e828cffdd428bc80/index.html?toutiao_card_params=%7b%22name%22%3a%20%22%5cu5168%5cu6c11%5cu6f02%5cu79fb-3d%5cu98d9%5cu8f66%22%2c%20%22pkg_name%22%3a%20%22com.joyfort.merge.car%22%2c%20%22id%22%3a%201639299979328516%2c%20%22download_url%22%3a%20%22https%3a//itunes.apple.com/cn/app/%25e5%2585%25a8%25e6%25b0%2591%25e6%25bc%2582%25e7%25a7%25bb3d/id1453467684%3fmt%3d8%22%2c%20%22external_url%22%3a%20%22%22%7d http://sf1-ttcdn-tos.pstatp.com/obj/ttfe/adfe/union_endcard/union_test_tool.mp4 https://tobapplog.tobsnssdk.com https://toblog.tobsnssdk.com/service/2/log_settings/ https://toblog.ctobsnssdk.com https://pangolin.snssdk.com https://ad.toutiao.com/advertiser_package/ http://www.ccil.org/~cowan/tagsoup/properties/schema https://api.weixin.qq.com/sns/oauth2/access_token?appid=%s&secret=%s&code=%s&grant_type=authorization_code https://toblog.itobsnssdk.com/service/2/abtest_config/ javascript:toutiaojsbridge._handlemessagefromtoutiao https://sdfp.snssdk.com http://m.alipay.com/?action=h5quit https://toblog.ctobsnssdk.com/service/2/app_alert_check/ https://tobapplog.itobsnssdk.com https://api.weixin.qq.com/sns/userinfo?access_token=%s&openid=%s&lang=%s https://sf3-ttcdn-tos.pstatp.com/obj/ad-pattern/renderer/latest/index.html 1.9.5.1 https://toblog.tobsnssdk.com/service/2/app_alert_check/ http://ops.fun.mipm/sync 3.3.0.3 https://s.app3c.com 127.0.0.1 http://sf1-ttcdn-tos.pstatp.com/obj/ttfe/adfe/union_endcard/lark20190725-175511.png https://toblog.ctobsnssdk.com/service/2/device_register_only/ https://success.itobsnssdk.com https://pangolin16.snssdk.com https://toblog.itobsnssdk.com/service/2/device_register_only/ javascript:toutiaojsbridge._fetchqueue http://mcgw.alipay.com/sdklog.do https://success.tobsnssdk.com http://sf6-ttcdn-tos.pstatp.com/obj/ad-tetris-site/personal-privacy-page.html http://127.0.0.1: https://toblog.ctobsnssdk.com/service/2/abtest_config/ https://toblog.ctobsnssdk.com/service/2/log_settings/ https://github.com/tootallnate/java-websocket/wiki/lost-connection-detection http://mobilegw-1-64.test.alipay.net/mgw.htm https://success.ctobsnssdk.com https://bds.snssdk.com http://lf3-ttcdn-tos.pstatp.com/ https://api.weixin.qq.com/cgi-bin/token? https://i.snssdk.com/inspect/aegis/client/page/ https://mobilegw.alipay.com/mgw.htm https://sf3-ttcdn-tos.pstatp.com/obj/ad-pattern/renderer/package.json	自研引擎-S

FIREBASE实例

邮箱

追踪器

名称	类别	网址
Pangle	Advertisement	https://reports.exodus-privacy.eu.org/trackers/363

密钥凭证

已显示 10 个secrets

1、 aHR0cHM6Ly93d3cuZ29vZ2xlLWFuYWx5dGljcy5jb20vYmF0Y2g=
2、 aHR0cHM6Ly93d3cuZ29vZ2xlLWFuYWx5dGljcy5jb20vY29sbGVjdA==
3、 ZGlzdC9iYXNlL2FwaWJhc2UuanM=
4、 YW5kcm9pZC50ZWxlcGhvbnkuU21zTWFuYWdlcg==
5、 62587239-AD3C-8190-47B4-37DE080D7E9D
6、 97bcbcb30b66e46e9ab33f26c55d15d9
7、 bvHBkKdw4ztctPaKncsz1mydOk1P7hQ9ST2
8、 Bm0oHnY15QbrdRQ0eMgvPtoIFzDesH2Y2cZt8prHdk9WtySgJzaMicISfLEVdABAEXO
9、 258EAFA5-E914-47DA-95CA-C5AB0DC85B11
10、 AS9rjr5EkU78OogyNQnV2fT6yydnEkxVA1ISEtTqXeY1yWRUqB

字符串列表

建议导出为TXT，方便查看。

活动列表

已显示 20 个activities

1、 com.uzmap.pkg.LauncherUI
2、 com.uzmap.pkg.EntranceActivity
3、 com.deepe.sdk.LoloAppActivity
4、 com.alipay.android.app.sdk.WapPayActivity
5、 com.alipay.sdk.app.H5PayActivity
6、 com.apicloud.module.ad.AdWebviewActivity
7、 com.ss.android.socialbase.appdownloader.view.DownloadTaskDeleteActivity
8、 com.ss.android.socialbase.appdownloader.view.JumpUnknownSourceActivity
9、 com.ss.android.downloadlib.activity.TTDelegateActivity
10、 com.ss.android.downloadlib.guide.install.InstallGuideActivity
11、 com.bytedance.sdk.openadsdk.activity.base.TTWebPageActivity
12、 com.bytedance.sdk.openadsdk.activity.base.TTPlayableWebPageActivity
13、 com.bytedance.sdk.openadsdk.activity.base.TTVideoWebPageActivity
14、 com.bytedance.sdk.openadsdk.activity.base.TTVideoScrollWebPageActivity
15、 com.bytedance.sdk.openadsdk.activity.base.TTDelegateActivity
16、 com.bytedance.sdk.openadsdk.activity.base.TTRewardVideoActivity
17、 com.bytedance.sdk.openadsdk.activity.base.TTRewardExpressVideoActivity
18、 com.bytedance.sdk.openadsdk.activity.base.TTFullScreenVideoActivity
19、 com.bytedance.sdk.openadsdk.activity.base.TTFullScreenExpressVideoActivity
20、 com.apicloud.WXEntryActivity

服务列表

已显示 9 个services

1、 com.ss.android.socialbase.downloader.notification.DownloadNotificationService
2、 com.ss.android.socialbase.downloader.downloader.DownloadService
3、 com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService
4、 com.ss.android.socialbase.downloader.impls.DownloadHandleService
5、 com.ss.android.socialbase.downloader.impls.RetryJobSchedulerService
6、 com.ss.android.socialbase.downloader.downloader.SqlDownloadCacheService
7、 com.ss.android.socialbase.appdownloader.DownloadHandlerService
8、 com.bytedance.sdk.openadsdk.multipro.aidl.BinderPoolService
9、 com.bytedance.tea.crash.upload.CrashUploadService

广播接收者列表

已显示 3 个receivers

1、 com.uzmap.pkg.uzapp.UPExtraBridge
2、 com.ss.android.downloadlib.core.download.DownloadReceiver
3、 com.bytedance.embedapplog.collector.Collector

内容提供者列表

已显示 5 个providers

1、 com.uzmap.pkg.uzapp.UProvider
2、 com.uzmap.pkg.uzapp.DataProvider
3、 com.bytedance.sdk.openadsdk.TTFileProvider
4、 com.bytedance.sdk.openadsdk.multipro.TTMultiProvider
5、 android.support.v4.content.FileProvider

第三方SDK

SDK名称	开发者	描述信息
Pangle SDK	ByteDance	穿山甲是巨量引擎旗下全球应用变现与增长平台，合作优质媒体超 30,000 家，日请求突破 607 亿，日均展示达 100 亿，覆盖 7 亿日活用户，为全球应用和广告主提供高效的用户增长和变现解决方案。
支付宝 SDK	Alipay	支付宝开放平台基于支付宝海量用户，将强大的支付、营销、数据能力，通过接口等形式开放给第三方合作伙伴，帮助第三方合作伙伴创建更具竞争力的应用。
File Provider	Android	FileProvider 是 ContentProvider 的特殊子类，它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。

文件列表

AndroidManifest.xml
META-INF/CERT.RSA
META-INF/CERT.SF
META-INF/MANIFEST.MF
assets/cid
assets/dist/api.min.js.sec
assets/dist/avm.min.js.sec
assets/tt_mime_type.pro
assets/uzmap/module.json
assets/widget/components/avm-ui/button/index.js
assets/widget/components/avm-ui/icon/avm-icon.ttf
assets/widget/components/avm-ui/icon/index.js
assets/widget/config.json
assets/widget/config.xml
assets/widget/html/audio.min.js
assets/widget/html/css/player.css
assets/widget/html/index.css
assets/widget/html/index.html
assets/widget/html/jquery-1.8.3.min.js
assets/widget/html/jquery.marquee.min.js
assets/widget/html/main.html
assets/widget/html/pause.png
assets/widget/html/play.png
assets/widget/html/player.js
assets/widget/html/viewplay.html
assets/widget/html/wavesurfer.min.js
assets/widget/html/weixinaudio.js
assets/widget/images/back/back.png
assets/widget/images/common/back.png
assets/widget/images/common/bg-empty-order.png
assets/widget/images/common/gou.png
assets/widget/images/common/icon_alipay.png
assets/widget/images/common/icon_wxpay.png
assets/widget/images/common/kf1.png
assets/widget/images/common/kf2.png
assets/widget/images/common/load.gif
assets/widget/images/common/logo.png
assets/widget/images/common/main1.png
assets/widget/images/common/main1_1.png
assets/widget/images/common/main2.png
assets/widget/images/common/main2_1.png
assets/widget/images/common/main3.png
assets/widget/images/common/main3_1.png
assets/widget/images/common/main4.png
assets/widget/images/common/main4_1.png
assets/widget/images/common/main5.png
assets/widget/images/common/main5_1.png
assets/widget/images/common/nolist.png
assets/widget/images/common/noseah.png
assets/widget/images/common/nowifi.png
assets/widget/images/common/order_pay.png
assets/widget/images/common/pause.png
assets/widget/images/common/pause_v.png
assets/widget/images/common/play.png
assets/widget/images/common/play_v.png
assets/widget/images/common/tj.png
assets/widget/images/common/ulogo.png
assets/widget/images/main1/address.png
assets/widget/images/main1/btn_1.png
assets/widget/images/main1/btn_2.png
assets/widget/images/main1/car.png
assets/widget/images/main1/close.png
assets/widget/images/main1/ding.png
assets/widget/images/main1/gor.png
assets/widget/images/main1/gor2_2.png
assets/widget/images/main1/gor3.png
assets/widget/images/main1/gor_1.png
assets/widget/images/main1/search.png
assets/widget/images/main1/share.png
assets/widget/images/main1/tip.png
assets/widget/images/main1/wx.png
assets/widget/images/main2/asc_0.png
assets/widget/images/main2/asc_1.png
assets/widget/images/main2/desc_0.png
assets/widget/images/main2/desc_1.png
assets/widget/images/main2/hot.png
assets/widget/images/main3/btn.png
assets/widget/images/main3/chk_0.png
assets/widget/images/main3/chk_1.png
assets/widget/images/main3/lower.png
assets/widget/images/main3/pay_err.png
assets/widget/images/main3/pay_ok.jpg
assets/widget/images/main3/shop_icon.png
assets/widget/images/main5/add_img.png
assets/widget/images/main5/bg_1.png
assets/widget/images/main5/bg_2.png
assets/widget/images/main5/def.png
assets/widget/images/main5/del.png
assets/widget/images/main5/del_img.png
assets/widget/images/main5/edit.png
assets/widget/images/main5/gor2.png
assets/widget/images/main5/home.png
assets/widget/images/main5/nopes.png
assets/widget/images/main5/order_1.png
assets/widget/images/main5/order_2.png
assets/widget/images/main5/order_3.png
assets/widget/images/main5/order_4.png
assets/widget/images/main5/order_5.png
assets/widget/images/main5/order_6.png
assets/widget/images/main5/recommend.png
assets/widget/images/main5/shouhou_ok.jpg
assets/widget/images/main5/switch_0.png
assets/widget/images/main5/switch_1.png
assets/widget/images/main5/time.png
assets/widget/images/main5/tuikuan.png
assets/widget/pages/TongZhiSiList/TongZhiSiList.js
assets/widget/pages/TongZhiSiList/TongZhiSiList.json
assets/widget/pages/activity/activity.js
assets/widget/pages/activity/activity.json
assets/widget/pages/addlayic/addlayic.js
assets/widget/pages/addlayic/addlayic.json
assets/widget/pages/addlayic/or.js
assets/widget/pages/addlayic/or1.js
assets/widget/pages/addlayic/os.js
assets/widget/pages/addlayic/os1.js
assets/widget/pages/addlayic/tg.js
assets/widget/pages/buy/buy.js
assets/widget/pages/buy/buy.json
assets/widget/pages/card/card.js
assets/widget/pages/card/card.json
assets/widget/pages/card/or.js
assets/widget/pages/card/or1.js
assets/widget/pages/card/os.js
assets/widget/pages/card/os1.js
assets/widget/pages/card/tg.js
assets/widget/pages/card/tg1.js
assets/widget/pages/deal/deal.js
assets/widget/pages/deal/deal.json
assets/widget/pages/details/details.js
assets/widget/pages/details/details.json
assets/widget/pages/details/test.js
assets/widget/pages/gqtg/gqtg.js
assets/widget/pages/gqtg/gqtg.json
assets/widget/pages/home/home.js
assets/widget/pages/home/home.json
assets/widget/pages/lyric/lyric.js
assets/widget/pages/lyric/lyric.json
assets/widget/pages/mai1/mai1.js
assets/widget/pages/mai1/mai1.json
assets/widget/pages/mai1view/mai1view.js
assets/widget/pages/mai1view/mai1view.json
assets/widget/pages/main1/main1.js
assets/widget/pages/main1/main1.json
assets/widget/pages/main2/main2.js
assets/widget/pages/main2/main2.json
assets/widget/pages/main3/main3.js
assets/widget/pages/main3/main3.json
assets/widget/pages/main4/main4.js
assets/widget/pages/main4/main4.json
assets/widget/pages/main5/main5.js
assets/widget/pages/main5/main5.json
assets/widget/pages/main6/main6.js
assets/widget/pages/main6/main6.json
assets/widget/pages/main7/main7.js
assets/widget/pages/main7/main7.json
assets/widget/pages/main8/bak.js
assets/widget/pages/main8/lrc.js
assets/widget/pages/main8/main8.js
assets/widget/pages/main8/main8.json
assets/widget/pages/main8/mp3.js
assets/widget/pages/main8s/main8s.js
assets/widget/pages/main8s/main8s.json
assets/widget/pages/musicpaylist/musicpaylist.js
assets/widget/pages/musicpaylist/musicpaylist.json
assets/widget/pages/musicpayview/musicpayview.js
assets/widget/pages/musicpayview/musicpayview.json
assets/widget/pages/musicpayview/musicpayviewios.js
assets/widget/pages/myabout/myabout.js
assets/widget/pages/myabout/myabout.json
assets/widget/pages/myaboutview/myaboutview.js
assets/widget/pages/myaboutview/myaboutview.json
assets/widget/pages/nview/text.js
assets/widget/pages/nview/text.json
assets/widget/pages/oauth/oauth.js
assets/widget/pages/oauth/oauth.json
assets/widget/pages/oauth/xieyioauth.js
assets/widget/pages/ok/ok.js
assets/widget/pages/ok/ok.json
assets/widget/pages/recommend/recommend.js
assets/widget/pages/recommend/recommend.json
assets/widget/pages/reg/reg.js
assets/widget/pages/reg/reg.json
assets/widget/pages/search/search.js
assets/widget/pages/search/search.json
assets/widget/pages/sellsong/sellsong.js
assets/widget/pages/sellsong/sellsong.json
assets/widget/pages/sellsongs/sellsongs.js
assets/widget/pages/sellsongs/sellsongs.json
assets/widget/pages/text/fu.js
assets/widget/pages/text/text.js
assets/widget/pages/text/text.json
assets/widget/pages/tougao2/tougao2.js
assets/widget/pages/tougao2/tougao2.json
assets/widget/pages/tuan/tuan.js
assets/widget/pages/tuan/tuan.json
assets/widget/pages/user/home.js
assets/widget/pages/user/user.js
assets/widget/pages/user/user.json
assets/widget/pages/user/zx.js
assets/widget/pages/view/from.js
assets/widget/pages/view/fu.js
assets/widget/pages/view/text.json
assets/widget/pages/view/view.js
assets/widget/res/manifest.xml
assets/widget/script/api.js
assets/widget/utils/city.js
assets/widget/utils/filter.js
assets/widget/utils/user.js
assets/widget/utils/util.js
classes.dex
lib/arm64-v8a/libavmJni.so
lib/arm64-v8a/libavmJni_gif.so
lib/arm64-v8a/libbuffer_pg.so
lib/arm64-v8a/libfile_lock_pg.so
lib/arm64-v8a/libj2v8.so
lib/arm64-v8a/libnms.so
lib/arm64-v8a/libsec.so
lib/arm64-v8a/libtobEmbedEncrypt.so
lib/armeabi/libavmJni.so
lib/armeabi/libavmJni_gif.so
lib/armeabi/libbuffer_pg.so
lib/armeabi/libfile_lock_pg.so
lib/armeabi/libj2v8.so
lib/armeabi/libnms.so
lib/armeabi/libsec.so
lib/armeabi/libtobEmbedEncrypt.so
res/anim/tt_dislike_animation_dismiss.xml
res/anim/tt_dislike_animation_show.xml
res/drawable-hdpi-v4/load_failure.png
res/drawable-hdpi-v4/loading_default.png
res/drawable-hdpi-v4/mo_alipay_dialog_bg_click.9.png
res/drawable-hdpi-v4/mo_alipay_dialog_bg_normal.9.png
res/drawable-hdpi-v4/mo_alipay_dialog_cut_line.png
res/drawable-hdpi-v4/mo_alipay_dialog_split_h.png
res/drawable-hdpi-v4/mo_alipay_dialog_split_v.png
res/drawable-hdpi-v4/mo_alipay_popup_bg.9.png
res/drawable-hdpi-v4/mo_alipay_refresh.9.png
res/drawable-hdpi-v4/mo_alipay_refresh_push.9.png
res/drawable-hdpi-v4/mo_alipay_title.png
res/drawable-hdpi-v4/mo_alipay_title_background.9.png
res/drawable-hdpi-v4/notification_bg_low_normal.9.png
res/drawable-hdpi-v4/notification_bg_low_pressed.9.png
res/drawable-hdpi-v4/notification_bg_normal.9.png
res/drawable-hdpi-v4/notification_bg_normal_pressed.9.png
res/drawable-hdpi-v4/notify_panel_notification_icon_bg.png
res/drawable-hdpi-v4/uz_copyright.png
res/drawable-hdpi-v4/uz_icon.png
res/drawable-hdpi-v4/uz_pull_down_refresh_arrow.png
res/drawable-hdpi-v4/uz_splash_bg.png
res/drawable-mdpi-v4/notification_bg_low_normal.9.png
res/drawable-mdpi-v4/notification_bg_low_pressed.9.png
res/drawable-mdpi-v4/notification_bg_normal.9.png
res/drawable-mdpi-v4/notification_bg_normal_pressed.9.png
res/drawable-mdpi-v4/notify_panel_notification_icon_bg.png
res/drawable-mdpi-v4/uz_icon.png
res/drawable-mdpi-v4/uz_splash_bg.png
res/drawable-v21/notification_action_background.xml
res/drawable-xhdpi-v4/notification_bg_low_normal.9.png
res/drawable-xhdpi-v4/notification_bg_low_pressed.9.png
res/drawable-xhdpi-v4/notification_bg_normal.9.png
res/drawable-xhdpi-v4/notification_bg_normal_pressed.9.png
res/drawable-xhdpi-v4/notify_panel_notification_icon_bg.png
res/drawable-xhdpi-v4/tt_ad_logo.png
res/drawable-xhdpi-v4/tt_ad_logo_reward_full.png
res/drawable-xhdpi-v4/tt_ad_logo_small.png
res/drawable-xhdpi-v4/tt_ad_logo_small_rectangle.png
res/drawable-xhdpi-v4/tt_app_detail_back_btn.png
res/drawable-xhdpi-v4/tt_app_detail_black.png
res/drawable-xhdpi-v4/tt_app_detail_info.png
res/drawable-xhdpi-v4/tt_back_video.png
res/drawable-xhdpi-v4/tt_close_move_details_normal.png
res/drawable-xhdpi-v4/tt_close_move_details_pressed.png
res/drawable-xhdpi-v4/tt_dislike_icon.png
res/drawable-xhdpi-v4/tt_dislike_icon2.png
res/drawable-xhdpi-v4/tt_download_btn_bg.png
res/drawable-xhdpi-v4/tt_download_dialog_btn_bg.png
res/drawable-xhdpi-v4/tt_enlarge_video.png
res/drawable-xhdpi-v4/tt_forward_video.png
res/drawable-xhdpi-v4/tt_lefterbackicon_titlebar.png
res/drawable-xhdpi-v4/tt_lefterbackicon_titlebar_for_dark.png
res/drawable-xhdpi-v4/tt_lefterbackicon_titlebar_press.png
res/drawable-xhdpi-v4/tt_lefterbackicon_titlebar_press_for_dark.png
res/drawable-xhdpi-v4/tt_mute.png
res/drawable-xhdpi-v4/tt_new_pause_video.png
res/drawable-xhdpi-v4/tt_new_pause_video_press.png
res/drawable-xhdpi-v4/tt_new_play_video.png
res/drawable-xhdpi-v4/tt_normalscreen_loading.png
res/drawable-xhdpi-v4/tt_open_app_detail_download_btn_bg.png
res/drawable-xhdpi-v4/tt_open_app_detail_list_item.png
res/drawable-xhdpi-v4/tt_playable_l_logo.png
res/drawable-xhdpi-v4/tt_refreshing_video_textpage_normal.png
res/drawable-xhdpi-v4/tt_refreshing_video_textpage_pressed.png
res/drawable-xhdpi-v4/tt_reward_dislike_icon.png
res/drawable-xhdpi-v4/tt_shadow_fullscreen_top.9.png
res/drawable-xhdpi-v4/tt_shadow_lefterback_titlebar.png
res/drawable-xhdpi-v4/tt_shadow_lefterback_titlebar_press.png
res/drawable-xhdpi-v4/tt_shadow_lefterback_titlebar_press_withoutnight.png
res/drawable-xhdpi-v4/tt_shadow_lefterback_titlebar_withoutnight.png
res/drawable-xhdpi-v4/tt_shrink_fullscreen.png
res/drawable-xhdpi-v4/tt_shrink_video.png
res/drawable-xhdpi-v4/tt_splash_ad_logo.png
res/drawable-xhdpi-v4/tt_splash_mute.png
res/drawable-xhdpi-v4/tt_splash_unmute.png
res/drawable-xhdpi-v4/tt_star_empty_bg.png
res/drawable-xhdpi-v4/tt_star_full_bg.png
res/drawable-xhdpi-v4/tt_suggestion_logo.png
res/drawable-xhdpi-v4/tt_titlebar_close_drawable.png
res/drawable-xhdpi-v4/tt_titlebar_close_for_dark.png
res/drawable-xhdpi-v4/tt_titlebar_close_press.png
res/drawable-xhdpi-v4/tt_titlebar_close_press_for_dark.png
res/drawable-xhdpi-v4/tt_unmute.png
res/drawable-xhdpi-v4/tt_video_close_drawable.png
res/drawable-xhdpi-v4/tt_white_lefterbackicon_titlebar.png
res/drawable-xhdpi-v4/tt_white_lefterbackicon_titlebar_press.png
res/drawable-xhdpi-v4/uz_icon.png
res/drawable-xhdpi-v4/uz_splash_bg.png
res/drawable-xxhdpi-v4/uz_icon.png
res/drawable-xxhdpi-v4/uz_splash_bg.png
res/drawable/appdownloader_action_bg.xml
res/drawable/appdownloader_action_new_bg.xml
res/drawable/appdownloader_ad_detail_download_progress.xml
res/drawable/appdownloader_detail_download_success_bg.xml
res/drawable/appdownloader_download_progress_bar_horizontal.xml
res/drawable/appdownloader_download_progress_bar_horizontal_new.xml
res/drawable/appdownloader_download_progress_bar_horizontal_night.xml
res/drawable/mo_alipay_dialog_button_colorlist.xml
res/drawable/mo_alipay_dialog_button_submit.xml
res/drawable/mo_alipay_refresh_button.xml
res/drawable/notification_bg.xml
res/drawable/notification_bg_low.xml
res/drawable/notification_icon_background.xml
res/drawable/notification_tile_bg.xml
res/drawable/skip_bg.xml
res/drawable/tt_ad_backup_bk.xml
res/drawable/tt_ad_backup_bk2.xml
res/drawable/tt_ad_cover_btn_begin_bg.xml
res/drawable/tt_ad_cover_btn_draw_begin_bg.xml
res/drawable/tt_ad_download_progress_bar_horizontal.xml
res/drawable/tt_ad_logo_background.xml
res/drawable/tt_ad_skip_btn_bg.xml
res/drawable/tt_app_detail_bg.xml
res/drawable/tt_backup_btn_1.xml
res/drawable/tt_backup_btn_2.xml
res/drawable/tt_browser_download_selector.xml
res/drawable/tt_browser_progress_style.xml
res/drawable/tt_circle_solid_mian.xml
res/drawable/tt_close_move_detail.xml
res/drawable/tt_comment_tv.xml
res/drawable/tt_common_download_bg.xml
res/drawable/tt_common_download_btn_bg.xml
res/drawable/tt_custom_dialog_bg.xml
res/drawable/tt_detail_video_btn_bg.xml
res/drawable/tt_dislike_bottom_seletor.xml
res/drawable/tt_dislike_cancle_bg_selector.xml
res/drawable/tt_dislike_dialog_bg.xml
res/drawable/tt_dislike_flowlayout_tv_bg.xml
res/drawable/tt_dislike_middle_seletor.xml
res/drawable/tt_dislike_son_tag.xml
res/drawable/tt_dislike_top_bg.xml
res/drawable/tt_dislike_top_seletor.xml
res/drawable/tt_download_corner_bg.xml
res/drawable/tt_draw_back_bg.xml
res/drawable/tt_install_bk.xml
res/drawable/tt_install_btn_bk.xml
res/drawable/tt_leftbackbutton_titlebar_photo_preview.xml
res/drawable/tt_leftbackicon_selector.xml
res/drawable/tt_leftbackicon_selector_for_dark.xml
res/drawable/tt_mute_btn_bg.xml
res/drawable/tt_play_movebar_textpage.xml
res/drawable/tt_playable_btn_bk.xml
res/drawable/tt_playable_progress_style.xml
res/drawable/tt_refreshing_video_textpage.xml
res/drawable/tt_reward_countdown_bg.xml
res/drawable/tt_reward_full_new_bar_bg.xml
res/drawable/tt_reward_full_new_bar_btn_bg.xml
res/drawable/tt_reward_full_video_backup_btn_bg.xml
res/drawable/tt_reward_video_download_btn_bg.xml
res/drawable/tt_seek_progress.xml
res/drawable/tt_seek_thumb.xml
res/drawable/tt_seek_thumb_fullscreen.xml
res/drawable/tt_seek_thumb_fullscreen_press.xml
res/drawable/tt_seek_thumb_fullscreen_selector.xml
res/drawable/tt_seek_thumb_normal.xml
res/drawable/tt_seek_thumb_press.xml
res/drawable/tt_shadow_btn_back.xml
res/drawable/tt_shadow_btn_back_withoutnight.xml
res/drawable/tt_skip_text_bg.xml
res/drawable/tt_stop_movebar_textpage.xml
res/drawable/tt_titlebar_close_seletor.xml
res/drawable/tt_titlebar_close_seletor_for_dark.xml
res/drawable/tt_video_black_desc_gradient.xml
res/drawable/tt_video_loading_progress_bar.xml
res/drawable/tt_video_progress_drawable.xml
res/drawable/tt_video_traffic_continue_play_bg.xml
res/drawable/ttdownloader_bg_ad_corner_red_button.xml
res/drawable/ttdownloader_bg_ad_install_vivo.xml
res/drawable/ttdownloader_bg_ad_left_corner_gray.xml
res/drawable/ttdownloader_bg_ad_right_corner_gray.xml
res/drawable/ttdownloader_bg_ad_white_top_corner.xml
res/drawable/ttdownloader_bg_button_blue_corner.xml
res/drawable/ttdownloader_bg_huawei_btn1.xml
res/drawable/ttdownloader_bg_huawei_btn2.xml
res/drawable/ttdownloader_bg_kllk_btn1.xml
res/drawable/ttdownloader_bg_kllk_btn2.xml
res/drawable/ttdownloader_bg_phone_border.xml
res/drawable/ttdownloader_bg_phone_cover.xml
res/drawable/ttdownloader_bg_transparent.xml
res/drawable/ttdownloader_bg_vivo_btn1.xml
res/drawable/ttdownloader_bg_vivo_btn2.xml
res/drawable/ttdownloader_bg_white_corner.xml
res/drawable/ttdownloader_icon_finger.png
res/layout-v16/notification_template_custom_big.xml
res/layout-v21/notification_action.xml
res/layout-v21/notification_action_tombstone.xml
res/layout-v21/notification_template_custom_big.xml
res/layout-v21/notification_template_icon_group.xml
res/layout-v21/tt_video_ad_cover_layout.xml
res/layout/ad_activity.xml
res/layout/ad_activity_title.xml
res/layout/ad_dialog_content_layout.xml
res/layout/anim_dialog_layout.xml
res/layout/appdownloader_notification_layout.xml
res/layout/mo_alipay.xml
res/layout/mo_alipay_dialog_alert.xml
res/layout/mo_alipay_title.xml
res/layout/notification_action.xml
res/layout/notification_action_tombstone.xml
res/layout/notification_media_action.xml
res/layout/notification_media_cancel_action.xml
res/layout/notification_template_big_media.xml
res/layout/notification_template_big_media_custom.xml
res/layout/notification_template_big_media_narrow.xml
res/layout/notification_template_big_media_narrow_custom.xml
res/layout/notification_template_icon_group.xml
res/layout/notification_template_lines_media.xml
res/layout/notification_template_media.xml
res/layout/notification_template_media_custom.xml
res/layout/notification_template_part_chronometer.xml
res/layout/notification_template_part_time.xml
res/layout/tt_activity_full_video.xml
res/layout/tt_activity_full_video_new_bar_3_style.xml
res/layout/tt_activity_full_video_newstyle.xml
res/layout/tt_activity_reward_and_full_video_bar.xml
res/layout/tt_activity_reward_and_full_video_new_bar.xml
res/layout/tt_activity_reward_video_newstyle.xml
res/layout/tt_activity_rewardvideo.xml
res/layout/tt_activity_rewardvideo_new_bar_3_style.xml
res/layout/tt_activity_ttlandingpage.xml
res/layout/tt_activity_ttlandingpage_playable.xml
res/layout/tt_activity_video_scroll_landingpage.xml
res/layout/tt_activity_videolandingpage.xml
res/layout/tt_app_detail_dialog.xml
res/layout/tt_app_detail_full_dialog.xml
res/layout/tt_app_detail_full_dialog_list_head.xml
res/layout/tt_app_detail_listview_item.xml
res/layout/tt_app_privacy_dialog.xml
res/layout/tt_backup_ad.xml
res/layout/tt_backup_ad1.xml
res/layout/tt_backup_ad2.xml
res/layout/tt_backup_banner_layout1.xml
res/layout/tt_backup_banner_layout2.xml
res/layout/tt_backup_banner_layout3.xml
res/layout/tt_backup_draw.xml
res/layout/tt_backup_feed_horizontal.xml
res/layout/tt_backup_feed_img_group.xml
res/layout/tt_backup_feed_img_small.xml
res/layout/tt_backup_feed_vertical.xml
res/layout/tt_backup_feed_video.xml
res/layout/tt_backup_full_reward.xml
res/layout/tt_backup_insert_layout1.xml
res/layout/tt_backup_insert_layout2.xml
res/layout/tt_backup_insert_layout3.xml
res/layout/tt_browser_download_layout.xml
res/layout/tt_browser_titlebar.xml
res/layout/tt_browser_titlebar_for_dark.xml
res/layout/tt_common_download_dialog.xml
res/layout/tt_custom_dailog_layout.xml
res/layout/tt_dialog_listview_item.xml
res/layout/tt_dislike_comment_layout.xml
res/layout/tt_dislike_dialog_layout.xml
res/layout/tt_dislike_dialog_layout1.xml
res/layout/tt_dislike_dialog_layout2.xml
res/layout/tt_dislike_flowlayout_tv.xml
res/layout/tt_insert_ad_layout.xml
res/layout/tt_install_dialog_layout.xml
res/layout/tt_native_video_ad_view.xml
res/layout/tt_native_video_img_cover_layout.xml
res/layout/tt_playable_loading_layout.xml
res/layout/tt_playable_view_layout.xml
res/layout/tt_splash_view.xml
res/layout/tt_top_full_1.xml
res/layout/tt_top_reward_1.xml
res/layout/tt_top_reward_dislike_2.xml
res/layout/tt_video_ad_cover_layout.xml
res/layout/tt_video_detail_layout.xml
res/layout/tt_video_draw_btn_layout.xml
res/layout/tt_video_play_layout_for_live.xml
res/layout/tt_video_traffic_tip.xml
res/layout/tt_video_traffic_tips_layout.xml
res/layout/ttdownloader_dialog_apk_install_guide.xml
res/layout/ttdownloader_dialog_reserve_wifi.xml
res/layout/ttdownloader_layout_install_hijack_huawei.xml
res/layout/ttdownloader_layout_install_hijack_kllk.xml
res/layout/ttdownloader_layout_install_hijack_vivo.xml
res/layout/ttdownloader_layout_install_hijack_xiaomi.xml
res/layout/viewpager_item.xml
res/mipmap-xhdpi-v4/ad_back.png
res/mipmap-xhdpi-v4/ad_cancel.png
res/xml/file_paths.xml
resources.arsc

污点分析

当apk较大时，代码量会很大，造成数据流图（ICFG）呈现爆炸式增长，所以该功能比较耗时，请先喝杯咖啡，耐心等待……

规则名称	描述信息	操作
病毒分析	使用安卓恶意软件常用的API进行污点分析	开始分析
漏洞挖掘	漏洞挖掘场景下的污点分析	开始分析
隐私合规	隐私合规场景下的污点分析：组件内污点传播、组件间污点传播、组件与库函数之间的污点传播	开始分析
密码分析	分析加密算法是否使用常量密钥、静态初始化的向量（IV）、加密模式是否使用ECB等	开始分析
Callback	因为Android中系统级的Callback并不会出现显式地进行回调方法的调用，所以如果需要分析Callback方法需要在声明文件中将其声明，这里提供一份AndroidCallbacks.txt文件，里面是一些常见的原生回调接口或类，如果有特殊接口需求，可以联系管理员	开始分析