安全声明:本平台专为移动应用安全风险研究与合规评估设计,严禁用于任何非法用途。如有疑问或建议,欢迎加入微信群交流

应用图标

文件基本信息

文件名称
安心加速器_1.0.14.apk
文件大小
68.81MB
MD5
57d637cfb191f4d3f2aa736ffdee8b37
SHA1
4381c257f638e2ddde80de1552940e37908d777b
SHA256
a036afb3289c719293e359c41850900b02c63b3a7dcd801bb145b7685b9d8ce9
病毒检测
无法判定

应用基础信息

应用名称
安心加速器
包名
com.at.a520435307094085
主活动
com.ft.movie.project_speed.MainActivity
目标SDK
33
最小SDK
21
版本号
1.0.14
子版本号
339
加固信息
Flutter/Dart 加固

反编译与源码导出

Manifest文件 查看
Java源代码 查看 -- 下载

文件结构与资源列表

    应用签名证书信息

    二进制文件已签名
    v1 签名: True
    v2 签名: True
    v3 签名: False
    v4 签名: False
    主题: CN=1, OU=1, O=1, L=1, ST=1, C=1
    签名算法: rsassa_pkcs1v15
    有效期自: 2023-08-21 09:23:10+00:00
    有效期至: 2048-08-14 09:23:10+00:00
    发行人: CN=1, OU=1, O=1, L=1, ST=1, C=1
    序列号: 0x1
    哈希算法: sha256
    证书MD5: e7ad735a36aade7394f0ddb441acbd15
    证书SHA1: 94d8cca150d78665d17b71fe4e385d8180381f75
    证书SHA256: 1775627ef3b8fb1e89c27a891ddae835430d4136f6fd5cd3ee13062860637d08
    证书SHA512: 4b2a625d122a9952d046cb969bf1cf777b53d2f16a61d572ce478e02b058c6a717eba90c4411a51472c6040ab0f01f8b1592ffd99c1808a89891a6731885d7aa
    公钥算法: rsa
    密钥长度: 2048
    指纹: 2008ea3c83d8090851a0dd8be9418a17eafca076b10210d4007a9c5d0b401fb3
    找到 1 个唯一证书

    权限声明与风险分级

    权限名称 安全等级 权限内容 权限描述 关联代码
    android.permission.INTERNET 危险 完全互联网访问 允许应用程序创建网络套接字。
    android.permission.QUERY_ALL_PACKAGES 普通 获取已安装应用程序列表 Android 11引入与包可见性相关的权限,允许查询设备上的任何普通应用程序,而不考虑清单声明。
    android.permission.REQUEST_INSTALL_PACKAGES 危险 允许安装应用程序 Android8.0 以上系统允许安装未知来源应用程序权限。
    android.permission.READ_PHONE_STATE 危险 读取手机状态和标识 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号,是否正在通话,以及对方的号码等。
    android.permission.WRITE_EXTERNAL_STORAGE 危险 读取/修改/删除外部存储内容 允许应用程序写入外部存储。
    android.permission.READ_INTERNAL_STORAGE 未知 未知权限 来自 android 引用的未知权限。
    android.permission.WRITE_INTERNAL_STORAGE 未知 未知权限 来自 android 引用的未知权限。
    android.permission.READ_EXTERNAL_STORAGE 危险 读取SD卡内容 允许应用程序从SD卡读取信息。
    android.permission.MANAGE_EXTERNAL_STORAGE 危险 文件列表访问权限 Android11新增权限,读取本地文件,如简历,聊天图片。
    android.permission.ACCESS_BACKGROUND_LOCATION 危险 获取后台定位权限 允许应用程序访问后台位置。如果您正在请求此权限,则还必须请求ACCESS COARSE LOCATION或ACCESS FINE LOCATION。单独请求此权限不会授予您位置访问权限。
    android.permission.RECEIVE_BOOT_COMPLETED 普通 开机自启 允许应用程序在系统完成启动后即自行启动。这样会延长手机的启动时间,而且如果应用程序一直运行,会降低手机的整体速度。
    android.permission.VIBRATE 普通 控制振动器 允许应用程序控制振动器,用于消息通知振动功能。
    android.permission.USE_FULL_SCREEN_INTENT 普通 全屏通知 Android 10以后的全屏 Intent 的通知。
    android.permission.USE_EXACT_ALARM 普通 允许在未经用户许可的情况下使用精确的警报 允许应用使用精确的警报。
    android.permission.POST_NOTIFICATIONS 危险 发送通知的运行时权限 允许应用发布通知,Android 13 引入的新权限。
    android.permission.FOREGROUND_SERVICE 普通 创建前台Service Android 9.0以上允许常规应用程序使用 Service.startForeground,用于podcast播放(推送悬浮播放,锁屏播放)
    android.permission.ACCESS_COARSE_LOCATION 危险 获取粗略位置 通过WiFi或移动基站的方式获取用户错略的经纬度信息,定位精度大概误差在30~1500米。恶意程序可以用它来确定您的大概位置。
    android.permission.ACCESS_WIFI_STATE 普通 查看Wi-Fi状态 允许应用程序查看有关Wi-Fi状态的信息。
    android.permission.ACCESS_FINE_LOCATION 危险 获取精确位置 通过GPS芯片接收卫星的定位信息,定位精度达10米以内。恶意程序可以用它来确定您所在的位置。
    android.permission.ACCESS_NETWORK_STATE 普通 获取网络状态 允许应用程序查看所有网络的状态。
    android.permission.GET_TASKS 危险 检索当前运行的应用程序 允许应用程序检索有关当前和最近运行的任务的信息。恶意应用程序可借此发现有关其他应用程序的保密信息。
    com.android.launcher.permission.WRITE_SETTINGS 未知 未知权限 来自 android 引用的未知权限。
    android.permission.CAMERA 危险 拍照和录制视频 允许应用程序拍摄照片和视频,且允许应用程序收集相机在任何时候拍到的图像。
    android.permission.INSTALL_PACKAGES 签名(系统) 请求安装APP 允许应用程序安装全新的或更新的 Android 包。恶意应用程序可能会借此添加其具有任意权限的新应用程序。
    android.permission.RECORD_AUDIO 危险 获取录音权限 允许应用程序获取录音权限。
    com.at.a520435307094085.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION 未知 未知权限 来自 android 引用的未知权限。

    证书安全合规分析

    高危
    0
    警告
    1
    信息
    1
    标题 严重程度 描述信息
    已签名应用 信息 应用程序已使用代码签名证书进行签名
    应用程序存在Janus漏洞 警告 应用程序使用了v1签名方案进行签名,如果只使用v1签名方案,那么它就容易受到安卓5.0-8.0上的Janus漏洞的攻击。在安卓5.0-7.0上运行的使用了v1签名方案的应用程序,以及同时使用了v2/v3签名方案的应用程序也同样存在漏洞。

    Manifest 配置安全分析

    高危
    0
    警告
    4
    信息
    0
    屏蔽
    0
    序号 问题 严重程度 描述信息 操作
    1 应用程序可以安装在有漏洞的已更新 Android 版本上
    Android 5.0-5.0.2, [minSdk=21]
    警告 该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。
    2 应用程序已启用明文网络流量
    [android:usesCleartextTraffic=true]
    警告 应用程序打算使用明文网络流量,例如明文HTTP,FTP协议,DownloadManager和MediaPlayer。针对API级别27或更低的应用程序,默认值为“true”。针对API级别28或更高的应用程序,默认值为“false”。避免使用明文流量的主要原因是缺乏机密性,真实性和防篡改保护;网络攻击者可以窃听传输的数据,并且可以在不被检测到的情况下修改它。
    3 应用程序数据可以被备份
    [android:allowBackup=true]
    警告 这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。
    4 Broadcast Receiver (com.at.skysdk.core.TcUploadCoreReceiver) 未被保护。
    [android:exported=true]
    警告 发现 Broadcast Receiver与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

    可浏览 Activity 组件分析

    ACTIVITY INTENT

    网络通信安全风险分析

    序号 范围 严重级别 描述

    API调用分析

    API功能 源码文件
    加密解密-> 信息摘要算法
    com/at/skysdk/util/DeviceUtil.java
    com/bumptech/glide/load/Key.java
    com/bumptech/glide/load/MultiTransformation.java
    com/bumptech/glide/load/Option.java
    com/bumptech/glide/load/Options.java
    com/bumptech/glide/load/engine/DataCacheKey.java
    com/bumptech/glide/load/engine/EngineKey.java
    com/bumptech/glide/load/engine/ResourceCacheKey.java
    com/bumptech/glide/load/engine/cache/SafeKeyGenerator.java
    com/bumptech/glide/load/engine/prefill/BitmapPreFillRunner.java
    com/bumptech/glide/load/model/GlideUrl.java
    com/bumptech/glide/load/resource/UnitTransformation.java
    com/bumptech/glide/load/resource/bitmap/BitmapDrawableTransformation.java
    com/bumptech/glide/load/resource/bitmap/CenterCrop.java
    com/bumptech/glide/load/resource/bitmap/CenterInside.java
    com/bumptech/glide/load/resource/bitmap/CircleCrop.java
    com/bumptech/glide/load/resource/bitmap/DrawableTransformation.java
    com/bumptech/glide/load/resource/bitmap/FitCenter.java
    com/bumptech/glide/load/resource/bitmap/GranularRoundedCorners.java
    com/bumptech/glide/load/resource/bitmap/Rotate.java
    com/bumptech/glide/load/resource/bitmap/RoundedCorners.java
    com/bumptech/glide/load/resource/bitmap/VideoDecoder.java
    com/bumptech/glide/load/resource/gif/GifDrawableTransformation.java
    com/bumptech/glide/signature/AndroidResourceSignature.java
    com/bumptech/glide/signature/EmptySignature.java
    com/bumptech/glide/signature/MediaStoreSignature.java
    com/bumptech/glide/signature/ObjectKey.java
    com/xuexiang/flutter_xupdate/utils/Md5Utils.java
    dev/fluttercommunity/plus/packageinfo/PackageInfoPlugin.java
    freemarker/debug/DebuggerClient.java
    freemarker/debug/impl/DebuggerServer.java
    一般功能-> 文件操作
    com/at/skysdk/core/MyLifecycleEventObserver.java
    com/at/skysdk/core/TcStaticsManagerImpl.java
    com/at/skysdk/sp/SharedPreferencesHelper.java
    com/at/skysdk/util/LogUtil.java
    com/at/skysdk/util/NetworkUtil.java
    com/baseflow/permissionhandler/PermissionUtils.java
    com/bumptech/glide/Glide.java
    com/bumptech/glide/ModelTypes.java
    com/bumptech/glide/RequestBuilder.java
    com/bumptech/glide/RequestManager.java
    com/bumptech/glide/disklrucache/DiskLruCache.java
    com/bumptech/glide/disklrucache/StrictLineReader.java
    com/bumptech/glide/disklrucache/Util.java
    com/bumptech/glide/gifdecoder/GifDecoder.java
    com/bumptech/glide/gifdecoder/StandardGifDecoder.java
    com/bumptech/glide/load/Encoder.java
    com/bumptech/glide/load/HttpException.java
    com/bumptech/glide/load/ImageHeaderParser.java
    com/bumptech/glide/load/ImageHeaderParserUtils.java
    com/bumptech/glide/load/ResourceDecoder.java
    com/bumptech/glide/load/data/AssetFileDescriptorLocalUriFetcher.java
    com/bumptech/glide/load/data/AssetPathFetcher.java
    com/bumptech/glide/load/data/BufferedOutputStream.java
    com/bumptech/glide/load/data/DataRewinder.java
    com/bumptech/glide/load/data/ExifOrientationStream.java
    com/bumptech/glide/load/data/FileDescriptorAssetPathFetcher.java
    com/bumptech/glide/load/data/FileDescriptorLocalUriFetcher.java
    com/bumptech/glide/load/data/HttpUrlFetcher.java
    com/bumptech/glide/load/data/InputStreamRewinder.java
    com/bumptech/glide/load/data/LocalUriFetcher.java
    com/bumptech/glide/load/data/ParcelFileDescriptorRewinder.java
    com/bumptech/glide/load/data/StreamAssetPathFetcher.java
    com/bumptech/glide/load/data/StreamLocalUriFetcher.java
    com/bumptech/glide/load/data/mediastore/FileService.java
    com/bumptech/glide/load/data/mediastore/ThumbFetcher.java
    com/bumptech/glide/load/data/mediastore/ThumbnailStreamOpener.java
    com/bumptech/glide/load/engine/DataCacheGenerator.java
    com/bumptech/glide/load/engine/DataCacheWriter.java
    com/bumptech/glide/load/engine/DecodeHelper.java
    com/bumptech/glide/load/engine/DecodePath.java
    com/bumptech/glide/load/engine/GlideException.java
    com/bumptech/glide/load/engine/ResourceCacheGenerator.java
    com/bumptech/glide/load/engine/cache/DiskCache.java
    com/bumptech/glide/load/engine/cache/DiskCacheAdapter.java
    com/bumptech/glide/load/engine/cache/DiskLruCacheFactory.java
    com/bumptech/glide/load/engine/cache/DiskLruCacheWrapper.java
    com/bumptech/glide/load/engine/cache/ExternalCacheDiskCacheFactory.java
    com/bumptech/glide/load/engine/cache/ExternalPreferredCacheDiskCacheFactory.java
    com/bumptech/glide/load/engine/cache/InternalCacheDiskCacheFactory.java
    com/bumptech/glide/load/engine/executor/RuntimeCompat.java
    com/bumptech/glide/load/model/AssetUriLoader.java
    com/bumptech/glide/load/model/ByteArrayLoader.java
    com/bumptech/glide/load/model/ByteBufferEncoder.java
    com/bumptech/glide/load/model/ByteBufferFileLoader.java
    com/bumptech/glide/load/model/DataUrlLoader.java
    com/bumptech/glide/load/model/FileLoader.java
    com/bumptech/glide/load/model/MediaStoreFileLoader.java
    com/bumptech/glide/load/model/ResourceLoader.java
    com/bumptech/glide/load/model/StreamEncoder.java
    com/bumptech/glide/load/model/StringLoader.java
    com/bumptech/glide/load/model/UriLoader.java
    com/bumptech/glide/load/model/UrlUriLoader.java
    com/bumptech/glide/load/model/stream/BaseGlideUrlLoader.java
    com/bumptech/glide/load/model/stream/HttpGlideUrlLoader.java
    com/bumptech/glide/load/model/stream/HttpUriLoader.java
    com/bumptech/glide/load/model/stream/MediaStoreImageThumbLoader.java
    com/bumptech/glide/load/model/stream/MediaStoreVideoThumbLoader.java
    com/bumptech/glide/load/model/stream/QMediaStoreUriLoader.java
    com/bumptech/glide/load/model/stream/UrlLoader.java
    com/bumptech/glide/load/resource/ImageDecoderResourceDecoder.java
    com/bumptech/glide/load/resource/bitmap/BitmapDrawableDecoder.java
    com/bumptech/glide/load/resource/bitmap/BitmapDrawableEncoder.java
    com/bumptech/glide/load/resource/bitmap/BitmapEncoder.java
    com/bumptech/glide/load/resource/bitmap/BitmapImageDecoderResourceDecoder.java
    com/bumptech/glide/load/resource/bitmap/ByteBufferBitmapDecoder.java
    com/bumptech/glide/load/resource/bitmap/ByteBufferBitmapImageDecoderResourceDecoder.java
    com/bumptech/glide/load/resource/bitmap/DefaultImageHeaderParser.java
    com/bumptech/glide/load/resource/bitmap/Downsampler.java
    com/bumptech/glide/load/resource/bitmap/ExifInterfaceImageHeaderParser.java
    com/bumptech/glide/load/resource/bitmap/HardwareConfigState.java
    com/bumptech/glide/load/resource/bitmap/ImageReader.java
    com/bumptech/glide/load/resource/bitmap/InputStreamBitmapImageDecoderResourceDecoder.java
    com/bumptech/glide/load/resource/bitmap/ParcelFileDescriptorBitmapDecoder.java
    com/bumptech/glide/load/resource/bitmap/RecyclableBufferedInputStream.java
    com/bumptech/glide/load/resource/bitmap/StreamBitmapDecoder.java
    com/bumptech/glide/load/resource/bitmap/VideoDecoder.java
    com/bumptech/glide/load/resource/file/FileDecoder.java
    com/bumptech/glide/load/resource/file/FileResource.java
    com/bumptech/glide/load/resource/gif/ByteBufferGifDecoder.java
    com/bumptech/glide/load/resource/gif/GifDrawableEncoder.java
    com/bumptech/glide/load/resource/gif/StreamGifDecoder.java
    com/bumptech/glide/load/resource/transcode/BitmapBytesTranscoder.java
    com/bumptech/glide/util/ByteBufferUtil.java
    com/bumptech/glide/util/ContentLengthInputStream.java
    com/bumptech/glide/util/ExceptionCatchingInputStream.java
    com/bumptech/glide/util/MarkEnforcingInputStream.java
    com/chavesgu/images_picker/FileSaver.java
    com/chavesgu/images_picker/ImagesPickerPlugin.java
    com/dexterous/flutterlocalnotifications/FlutterLocalNotificationsPlugin.java
    com/dexterous/flutterlocalnotifications/ForegroundServiceStartParameter.java
    com/dexterous/flutterlocalnotifications/RuntimeTypeAdapterFactory.java
    com/dexterous/flutterlocalnotifications/isolate/IsolatePreferences.java
    com/dexterous/flutterlocalnotifications/models/MessageDetails.java
    com/dexterous/flutterlocalnotifications/models/NotificationAction.java
    com/dexterous/flutterlocalnotifications/models/NotificationChannelDetails.java
    com/dexterous/flutterlocalnotifications/models/NotificationChannelGroupDetails.java
    com/dexterous/flutterlocalnotifications/models/NotificationDetails.java
    com/dexterous/flutterlocalnotifications/models/PersonDetails.java
    com/dexterous/flutterlocalnotifications/models/Time.java
    com/dexterous/flutterlocalnotifications/models/styles/StyleInformation.java
    com/journeyapps/barcodescanner/CaptureManager.java
    com/journeyapps/barcodescanner/SourceData.java
    com/journeyapps/barcodescanner/camera/CameraManager.java
    com/journeyapps/barcodescanner/camera/CameraSurface.java
    com/luck/picture/lib/PictureBaseActivity.java
    com/luck/picture/lib/PictureContentResolver.java
    com/luck/picture/lib/PictureExternalPreviewActivity.java
    com/luck/picture/lib/PicturePreviewActivity.java
    com/luck/picture/lib/PictureSelectorActivity.java
    com/luck/picture/lib/PictureSelectorCameraEmptyActivity.java
    com/luck/picture/lib/PictureSelectorExternalUtils.java
    com/luck/picture/lib/adapter/PictureImageGridAdapter.java
    com/luck/picture/lib/adapter/PictureSimpleFragmentAdapter.java
    com/luck/picture/lib/compress/Checker.java
    com/luck/picture/lib/compress/Engine.java
    com/luck/picture/lib/compress/InputStreamAdapter.java
    com/luck/picture/lib/compress/InputStreamProvider.java
    com/luck/picture/lib/compress/Luban.java
    com/luck/picture/lib/config/PictureMimeType.java
    com/luck/picture/lib/immersive/RomUtils.java
    com/luck/picture/lib/io/ArrayPoolProvide.java
    com/luck/picture/lib/io/BufferedInputStreamWrap.java
    com/luck/picture/lib/manager/PictureCacheManager.java
    com/luck/picture/lib/manager/UCropManager.java
    com/luck/picture/lib/model/LocalMediaLoader.java
    com/luck/picture/lib/model/SandboxFileLoader.java
    com/luck/picture/lib/tools/AlbumUtils.java
    com/luck/picture/lib/tools/AndroidQTransformUtils.java
    com/luck/picture/lib/tools/BitmapUtils.java
    com/luck/picture/lib/tools/CameraFileUtils.java
    com/luck/picture/lib/tools/MediaUtils.java
    com/luck/picture/lib/tools/PictureFileUtils.java
    com/luck/picture/lib/tools/SPUtils.java
    com/luck/picture/lib/widget/longimage/ImageSource.java
    com/luck/picture/lib/widget/longimage/ImageViewState.java
    com/luck/picture/lib/widget/longimage/SkiaImageDecoder.java
    com/luck/picture/lib/widget/longimage/SkiaImageRegionDecoder.java
    com/luck/picture/lib/widget/longimage/SkiaPooledImageRegionDecoder.java
    com/pichillilorenzo/flutter_inappwebview/InAppWebViewMethodHandler.java
    com/pichillilorenzo/flutter_inappwebview/ServiceWorkerManager.java
    com/pichillilorenzo/flutter_inappwebview/Util.java
    com/pichillilorenzo/flutter_inappwebview/chrome_custom_tabs/ChromeSafariBrowserManager.java
    com/pichillilorenzo/flutter_inappwebview/content_blocker/ContentBlockerHandler.java
    com/pichillilorenzo/flutter_inappwebview/in_app_browser/InAppBrowserActivity.java
    com/pichillilorenzo/flutter_inappwebview/in_app_browser/InAppBrowserManager.java
    com/pichillilorenzo/flutter_inappwebview/in_app_webview/FlutterWebView.java
    com/pichillilorenzo/flutter_inappwebview/in_app_webview/InAppWebView.java
    com/pichillilorenzo/flutter_inappwebview/in_app_webview/InAppWebViewChromeClient.java
    com/pichillilorenzo/flutter_inappwebview/in_app_webview/InAppWebViewClient.java
    com/pichillilorenzo/flutter_inappwebview/types/InAppWebViewInterface.java
    com/tekartik/sqflite/Database.java
    com/tekartik/sqflite/SqflitePlugin.java
    com/xuexiang/flutter_xupdate/OKHttpUpdateHttpService.java
    com/xuexiang/flutter_xupdate/_XUpdate.java
    com/xuexiang/flutter_xupdate/entity/DownloadEntity.java
    com/xuexiang/flutter_xupdate/entity/UpdateEntity.java
    com/xuexiang/flutter_xupdate/listener/OnInstallListener.java
    com/xuexiang/flutter_xupdate/listener/impl/DefaultInstallListener.java
    com/xuexiang/flutter_xupdate/logs/LogcatLogger.java
    com/xuexiang/flutter_xupdate/proxy/IFileEncryptor.java
    com/xuexiang/flutter_xupdate/proxy/IUpdateHttpService.java
    com/xuexiang/flutter_xupdate/proxy/impl/DefaultFileEncryptor.java
    com/xuexiang/flutter_xupdate/service/DownloadService.java
    com/xuexiang/flutter_xupdate/service/OnFileDownloadListener.java
    com/xuexiang/flutter_xupdate/utils/ApkInstallUtils.java
    com/xuexiang/flutter_xupdate/utils/FileUtils.java
    com/xuexiang/flutter_xupdate/utils/Md5Utils.java
    com/xuexiang/flutter_xupdate/utils/ShellUtils.java
    com/xuexiang/flutter_xupdate/utils/UpdateUtils.java
    com/xuexiang/flutter_xupdate/widget/IDownloadEventHandler.java
    com/xuexiang/flutter_xupdate/widget/UpdateDialog.java
    com/xuexiang/flutter_xupdate/widget/UpdateDialogActivity.java
    com/xuexiang/flutter_xupdate/widget/UpdateDialogFragment.java
    com/xuexiang/flutter_xupdate/widget/WeakFileDownloadListener.java
    com/yalantis/ucrop/PictureMultiCuttingActivity.java
    com/yalantis/ucrop/task/BitmapCropTask.java
    com/yalantis/ucrop/task/BitmapLoadTask.java
    com/yalantis/ucrop/util/BitmapLoadUtils.java
    com/yalantis/ucrop/util/ImageHeaderParser.java
    com/zhy/http/okhttp/OkHttpUtils.java
    com/zhy/http/okhttp/builder/PostFileBuilder.java
    com/zhy/http/okhttp/builder/PostFormBuilder.java
    com/zhy/http/okhttp/callback/FileCallBack.java
    com/zhy/http/okhttp/callback/StringCallback.java
    com/zhy/http/okhttp/cookie/store/PersistentCookieStore.java
    com/zhy/http/okhttp/cookie/store/SerializableHttpCookie.java
    com/zhy/http/okhttp/https/HttpsUtils.java
    com/zhy/http/okhttp/log/LoggerInterceptor.java
    com/zhy/http/okhttp/request/CountingRequestBody.java
    com/zhy/http/okhttp/request/PostFileRequest.java
    com/zhy/http/okhttp/request/PostFormRequest.java
    com/zhy/http/okhttp/request/RequestCall.java
    freemarker/cache/FileTemplateLoader.java
    freemarker/cache/MultiTemplateLoader.java
    freemarker/cache/StringTemplateLoader.java
    freemarker/cache/TemplateCache.java
    freemarker/cache/TemplateLoader.java
    freemarker/cache/TemplateLookupContext.java
    freemarker/cache/TemplateLookupStrategy.java
    freemarker/cache/URLTemplateLoader.java
    freemarker/cache/URLTemplateSource.java
    freemarker/cache/WebappTemplateLoader.java
    freemarker/core/AssignmentInstruction.java
    freemarker/core/AttemptBlock.java
    freemarker/core/BlockAssignment.java
    freemarker/core/BodyInstruction.java
    freemarker/core/BuiltInsForSequences.java
    freemarker/core/BuiltInsForStringsEncoding.java
    freemarker/core/BuiltInsForStringsMisc.java
    freemarker/core/Case.java
    freemarker/core/CollectionAndSequence.java
    freemarker/core/CompressedBlock.java
    freemarker/core/ConditionalBlock.java
    freemarker/core/Configurable.java
    freemarker/core/DebugBreak.java
    freemarker/core/DollarVariable.java
    freemarker/core/ElseOfList.java
    freemarker/core/Environment.java
    freemarker/core/EscapeBlock.java
    freemarker/core/FMParser.java
    freemarker/core/FMParserTokenManager.java
    freemarker/core/FallbackInstruction.java
    freemarker/core/FlushInstruction.java
    freemarker/core/IfBlock.java
    freemarker/core/Include.java
    freemarker/core/Interpret.java
    freemarker/core/Items.java
    freemarker/core/IteratorBlock.java
    freemarker/core/LibraryLoad.java
    freemarker/core/ListElseContainer.java
    freemarker/core/ListLiteral.java
    freemarker/core/Macro.java
    freemarker/core/MethodCall.java
    freemarker/core/MixedContent.java
    freemarker/core/NoEscapeBlock.java
    freemarker/core/NumericalOutput.java
    freemarker/core/ParseException.java
    freemarker/core/RangeModel.java
    freemarker/core/RecoveryBlock.java
    freemarker/core/RecurseNode.java
    freemarker/core/Sep.java
    freemarker/core/SimpleCharStream.java
    freemarker/core/StopException.java
    freemarker/core/StringLiteral.java
    freemarker/core/SwitchBlock.java
    freemarker/core/TemplateElement.java
    freemarker/core/TextBlock.java
    freemarker/core/ThreadInterruptionSupportTemplatePostProcessor.java
    freemarker/core/Token.java
    freemarker/core/TransformBlock.java
    freemarker/core/UnifiedCall.java
    freemarker/core/VisitNode.java
    freemarker/core/_CoreAPI.java
    freemarker/debug/Breakpoint.java
    freemarker/debug/DebuggerClient.java
    freemarker/debug/impl/DebuggerServer.java
    freemarker/ext/ant/FreemarkerXmlTask.java
    freemarker/ext/ant/JythonAntTask.java
    freemarker/ext/ant/UnlinkedJythonOperations.java
    freemarker/ext/ant/UnlinkedJythonOperationsImpl.java
    freemarker/ext/beans/UnsafeMethods.java
    freemarker/ext/dom/JaxenXPathSupport.java
    freemarker/ext/dom/NodeModel.java
    freemarker/ext/dom/Transform.java
    freemarker/ext/jdom/NodeListModel.java
    freemarker/ext/jsp/FreeMarkerPageContext.java
    freemarker/ext/jsp/FreemarkerTag.java
    freemarker/ext/jsp/JspWriterAdapter.java
    freemarker/ext/jsp/SimpleTagDirectiveModel.java
    freemarker/ext/jsp/TagTransformModel.java
    freemarker/ext/jsp/TaglibFactory.java
    freemarker/ext/jsp/_FreeMarkerPageContext2.java
    freemarker/ext/servlet/FreemarkerServlet.java
    freemarker/ext/servlet/HttpSessionHashModel.java
    freemarker/ext/servlet/IncludePage.java
    freemarker/ext/servlet/InitParamParser.java
    freemarker/ext/util/IdentityHashMap.java
    freemarker/ext/xml/Navigator.java
    freemarker/ext/xml/NodeListModel.java
    freemarker/ext/xml/_Dom4jNavigator.java
    freemarker/ext/xml/_DomNavigator.java
    freemarker/ext/xml/_JdomNavigator.java
    freemarker/log/Logger.java
    freemarker/template/Configuration.java
    freemarker/template/DefaultArrayAdapter.java
    freemarker/template/DefaultIteratorAdapter.java
    freemarker/template/DefaultListAdapter.java
    freemarker/template/DefaultMapAdapter.java
    freemarker/template/DefaultNonListCollectionAdapter.java
    freemarker/template/MalformedTemplateNameException.java
    freemarker/template/SerializableTemplateBooleanModel.java
    freemarker/template/SimpleCollection.java
    freemarker/template/SimpleHash.java
    freemarker/template/SimpleNumber.java
    freemarker/template/SimpleScalar.java
    freemarker/template/SimpleSequence.java
    freemarker/template/Template.java
    freemarker/template/TemplateDirectiveBody.java
    freemarker/template/TemplateDirectiveModel.java
    freemarker/template/TemplateException.java
    freemarker/template/TemplateExceptionHandler.java
    freemarker/template/TemplateNotFoundException.java
    freemarker/template/TemplateTransformModel.java
    freemarker/template/TransformControl.java
    freemarker/template/Version.java
    freemarker/template/utility/CaptureOutput.java
    freemarker/template/utility/Constants.java
    freemarker/template/utility/Execute.java
    freemarker/template/utility/HtmlEscape.java
    freemarker/template/utility/JythonRuntime.java
    freemarker/template/utility/NormalizeNewlines.java
    freemarker/template/utility/NullWriter.java
    freemarker/template/utility/StandardCompress.java
    freemarker/template/utility/StringUtil.java
    freemarker/template/utility/ToCanonical.java
    freemarker/template/utility/XmlEscape.java
    io/flutter/embedding/android/KeyData.java
    io/flutter/embedding/engine/FlutterJNI.java
    io/flutter/embedding/engine/deferredcomponents/PlayStoreDeferredComponentManager.java
    io/flutter/embedding/engine/loader/ApplicationInfoLoader.java
    io/flutter/embedding/engine/loader/FlutterLoader.java
    io/flutter/embedding/engine/loader/ResourceExtractor.java
    io/flutter/plugin/common/StandardMessageCodec.java
    io/flutter/plugin/editing/InputConnectionAdaptor.java
    io/flutter/plugin/platform/PlatformPlugin.java
    io/flutter/plugins/pathprovider/PathProviderPlugin.java
    io/flutter/plugins/urllauncher/Messages.java
    io/flutter/plugins/videoplayer/CustomSSLSocketFactory.java
    io/flutter/plugins/videoplayer/Messages.java
    io/flutter/util/PathUtils.java
    j$/time/Clock.java
    j$/time/Duration.java
    j$/time/Instant.java
    j$/time/LocalDate.java
    j$/time/LocalDateTime.java
    j$/time/LocalTime.java
    j$/time/MonthDay.java
    j$/time/OffsetDateTime.java
    j$/time/OffsetTime.java
    j$/time/Period.java
    j$/time/Ser.java
    j$/time/Year.java
    j$/time/YearMonth.java
    j$/time/ZoneId.java
    j$/time/ZoneOffset.java
    j$/time/ZoneRegion.java
    j$/time/ZonedDateTime.java
    j$/time/chrono/ChronoLocalDateImpl.java
    j$/time/chrono/ChronoLocalDateTimeImpl.java
    j$/time/chrono/ChronoPeriodImpl.java
    j$/time/chrono/ChronoZonedDateTimeImpl.java
    j$/time/chrono/HijrahChronology.java
    j$/time/chrono/HijrahDate.java
    j$/time/chrono/IsoChronology.java
    j$/time/chrono/JapaneseChronology.java
    j$/time/chrono/JapaneseDate.java
    j$/time/chrono/JapaneseEra.java
    j$/time/chrono/MinguoChronology.java
    j$/time/chrono/MinguoDate.java
    j$/time/chrono/Ser.java
    j$/time/chrono/ThaiBuddhistChronology.java
    j$/time/chrono/ThaiBuddhistDate.java
    j$/time/format/DateTimeFormatter.java
    j$/time/temporal/ValueRange.java
    j$/time/temporal/WeekFields.java
    j$/time/zone/Ser.java
    j$/time/zone/ZoneOffsetTransition.java
    j$/time/zone/ZoneOffsetTransitionRule.java
    j$/time/zone/ZoneRules.java
    j$/util/Comparator$$ExternalSyntheticLambda0.java
    j$/util/Comparator$$ExternalSyntheticLambda1.java
    j$/util/DesugarCollections.java
    j$/util/concurrent/ConcurrentHashMap.java
    j$/util/concurrent/ThreadLocalRandom.java
    net/sqlcipher/DatabaseUtils.java
    net/sqlcipher/DefaultDatabaseErrorHandler.java
    net/sqlcipher/database/SQLiteContentHelper.java
    net/sqlcipher/database/SQLiteDatabase.java
    net/sqlcipher/database/SQLiteOpenHelper.java
    org/greenrobot/greendao/DbUtils.java
    org/greenrobot/greendao/generator/DaoGenerator.java
    org/greenrobot/greendao/generator/DaoUtil.java
    org/greenrobot/greendao/generator/ToMany.java
    org/greenrobot/greendao/generator/ToOne.java
    org/greenrobot/greendao/query/CloseableListIterator.java
    org/greenrobot/greendao/query/LazyList.java
    org/greenrobot/greendao/test/DbTest.java
    辅助功能accessibility相关 io/flutter/view/AccessibilityBridge.java
    io/flutter/view/AccessibilityViewEmbedder.java
    调用java反射机制
    com/at/skysdk/service/Platform.java
    com/at/skysdk/util/LogUtil.java
    com/bumptech/glide/Glide.java
    com/bumptech/glide/module/ManifestParser.java
    com/luck/picture/lib/immersive/LightStatusBarUtils.java
    com/luck/picture/lib/tools/SPUtils.java
    com/luck/picture/lib/widget/MyViewPageHelper.java
    com/pichillilorenzo/flutter_inappwebview/InAppWebViewStatic.java
    com/pichillilorenzo/flutter_inappwebview/Util.java
    com/pichillilorenzo/flutter_inappwebview/in_app_browser/InAppBrowserActivity.java
    com/pichillilorenzo/flutter_inappwebview/in_app_webview/DisplayListenerProxy.java
    com/zhy/http/okhttp/utils/Platform.java
    freemarker/cache/SoftCacheStorage.java
    freemarker/cache/TemplateCache.java
    freemarker/cache/TemplateLoaderUtils.java
    freemarker/core/ArithmeticEngine.java
    freemarker/core/BuiltInsForDates.java
    freemarker/core/BuiltInsForMultipleTypes.java
    freemarker/core/BuiltInsForStringsRegexp.java
    freemarker/core/Configurable.java
    freemarker/core/DynamicKeyName.java
    freemarker/core/Environment.java
    freemarker/core/EvalUtil.java
    freemarker/core/FMParser.java
    freemarker/core/Interpret.java
    freemarker/core/NewBI.java
    freemarker/core/NonBooleanException.java
    freemarker/core/NonDateException.java
    freemarker/core/NonExtendedHashException.java
    freemarker/core/NonHashException.java
    freemarker/core/NonMethodException.java
    freemarker/core/NonNamespaceException.java
    freemarker/core/NonNodeException.java
    freemarker/core/NonNumericalException.java
    freemarker/core/NonSequenceException.java
    freemarker/core/NonSequenceOrCollectionException.java
    freemarker/core/NonStringException.java
    freemarker/core/NonUserDefinedDirectiveLikeException.java
    freemarker/core/ParseException.java
    freemarker/core/TemplateClassResolver.java
    freemarker/core/TransformBlock.java
    freemarker/core/UnifiedCall.java
    freemarker/core/_ConcurrentMapFactory.java
    freemarker/core/_ErrorDescriptionBuilder.java
    freemarker/core/_ObjectBuilderSettingEvaluator.java
    freemarker/debug/impl/RmiDebugModelImpl_Stub.java
    freemarker/debug/impl/RmiDebuggedEnvironmentImpl_Stub.java
    freemarker/debug/impl/RmiDebuggerImpl_Stub.java
    freemarker/debug/impl/RmiDebuggerListenerImpl_Stub.java
    freemarker/ext/beans/ArgumentTypes.java
    freemarker/ext/beans/BeanModel.java
    freemarker/ext/beans/BeansModelCache.java
    freemarker/ext/beans/BeansWrapper.java
    freemarker/ext/beans/ClassIntrospector.java
    freemarker/ext/beans/OverloadedMethods.java
    freemarker/ext/beans/OverloadedMethodsSubset.java
    freemarker/ext/beans/OverloadedNumberUtil.java
    freemarker/ext/beans/ReflectionCallableMemberDescriptor.java
    freemarker/ext/beans/SimpleMethodModel.java
    freemarker/ext/beans/StaticModel.java
    freemarker/ext/beans/TypeFlags.java
    freemarker/ext/beans/UnsafeMethods.java
    freemarker/ext/beans/_MethodUtil.java
    freemarker/ext/dom/NodeListModel.java
    freemarker/ext/dom/NodeModel.java
    freemarker/ext/jsp/EventForwarding.java
    freemarker/ext/jsp/FreeMarkerJspApplicationContext.java
    freemarker/ext/jsp/FreeMarkerJspFactory21.java
    freemarker/ext/jsp/FreeMarkerPageContext.java
    freemarker/ext/jsp/JspTagModelBase.java
    freemarker/ext/jsp/PageContextFactory.java
    freemarker/ext/jsp/SimpleTagDirectiveModel.java
    freemarker/ext/jsp/TagTransformModel.java
    freemarker/ext/jsp/TaglibFactory.java
    freemarker/ext/jsp/TaglibMethodUtil.java
    freemarker/ext/jsp/_FreeMarkerPageContext21.java
    freemarker/ext/jython/JythonModel.java
    freemarker/ext/jython/JythonNumberModel.java
    freemarker/ext/jython/JythonVersionAdapterHolder.java
    freemarker/ext/jython/JythonWrapper.java
    freemarker/ext/jython/_Jython20And21VersionAdapter.java
    freemarker/ext/jython/_Jython22VersionAdapter.java
    freemarker/ext/jython/_Jython25VersionAdapter.java
    freemarker/ext/rhino/RhinoScriptableModel.java
    freemarker/ext/rhino/RhinoWrapper.java
    freemarker/ext/servlet/FreemarkerServlet.java
    freemarker/ext/xml/NodeListModel.java
    freemarker/log/Logger.java
    freemarker/log/SLF4JLoggerFactory.java
    freemarker/log/_Log4jOverSLF4JTester.java
    freemarker/template/Configuration.java
    freemarker/template/DefaultObjectWrapper.java
    freemarker/template/utility/ClassUtil.java
    freemarker/template/utility/DeepUnwrap.java
    freemarker/template/utility/NumberUtil.java
    io/flutter/embedding/android/FlutterView.java
    io/flutter/embedding/engine/plugins/util/GeneratedPluginRegister.java
    io/flutter/plugin/platform/SingleViewPresentation.java
    io/flutter/plugins/deviceinfo/DeviceInfoPlugin.java
    io/flutter/view/AccessibilityViewEmbedder.java
    j$/sun/misc/DesugarUnsafe.java
    j$/time/zone/ZoneRulesProvider.java
    j$/util/DesugarCollections.java
    net/sqlcipher/database/SQLiteContentHelper.java
    org/greenrobot/greendao/internal/DaoConfig.java
    一般功能-> 获取系统服务(getSystemService)
    com/at/skysdk/core/TcObserverPresenter.java
    com/at/skysdk/presenter/TcDeblockObserver.java
    com/at/skysdk/presenter/TcNetworkObserver.java
    com/at/skysdk/presenter/TcScreenObserver.java
    com/at/skysdk/util/DeviceUtil.java
    com/at/skysdk/util/NetworkUtil.java
    com/at/skysdk/util/PollUtil.java
    com/baseflow/permissionhandler/PermissionManager.java
    com/baseflow/permissionhandler/ServiceManager.java
    com/bumptech/glide/load/engine/cache/MemorySizeCalculator.java
    com/bumptech/glide/manager/DefaultConnectivityMonitor.java
    com/bumptech/glide/request/target/CustomViewTarget.java
    com/bumptech/glide/request/target/NotificationTarget.java
    com/bumptech/glide/request/target/ViewTarget.java
    com/chavesgu/scan/ScanPlugin.java
    com/chavesgu/scan/ScanViewNew.java
    com/dexterous/flutterlocalnotifications/FlutterLocalNotificationsPlugin.java
    com/ft/movie/project_speed/HelperUtils.java
    com/ft/movie/project_speed/MainActivityKt.java
    com/journeyapps/barcodescanner/CameraPreview.java
    com/journeyapps/barcodescanner/RotationListener.java
    com/luck/picture/lib/PictureVideoPlayActivity.java
    com/luck/picture/lib/widget/longimage/SkiaPooledImageRegionDecoder.java
    com/pichillilorenzo/flutter_inappwebview/Util.java
    com/pichillilorenzo/flutter_inappwebview/in_app_webview/FlutterWebView.java
    com/pichillilorenzo/flutter_inappwebview/in_app_webview/InAppWebView.java
    com/pichillilorenzo/flutter_inappwebview/in_app_webview/InputAwareWebView.java
    com/xuexiang/flutter_xupdate/service/DownloadService.java
    com/xuexiang/flutter_xupdate/utils/DialogUtils.java
    com/xuexiang/flutter_xupdate/utils/UpdateUtils.java
    com/yalantis/ucrop/util/BitmapLoadUtils.java
    dev/fluttercommunity/plus/connectivity/ConnectivityPlugin.java
    dev/fluttercommunity/plus/device_info/DeviceInfoPlusPlugin.java
    dev/fluttercommunity/plus/sensors/SensorsPlugin.java
    io/flutter/embedding/android/FlutterView.java
    io/flutter/embedding/engine/loader/FlutterLoader.java
    io/flutter/plugin/editing/InputConnectionAdaptor.java
    io/flutter/plugin/editing/TextInputPlugin.java
    io/flutter/plugin/platform/PlatformPlugin.java
    io/flutter/plugin/platform/SingleViewPresentation.java
    io/flutter/plugin/platform/VirtualDisplayController.java
    io/flutter/view/FlutterView.java
    一般功能-> IPC通信
    com/at/skysdk/core/TcIntentManager.java
    com/at/skysdk/core/TcUploadCoreReceiver.java
    com/at/skysdk/presenter/TcDeblockObserver.java
    com/at/skysdk/presenter/TcNetworkObserver.java
    com/at/skysdk/presenter/TcScreenObserver.java
    com/at/skysdk/util/PollUtil.java
    com/baseflow/permissionhandler/AppSettingsManager.java
    com/baseflow/permissionhandler/PermissionManager.java
    com/baseflow/permissionhandler/ServiceManager.java
    com/bumptech/glide/manager/DefaultConnectivityMonitor.java
    com/chavesgu/images_picker/FileSaver.java
    com/dexterous/flutterlocalnotifications/ActionBroadcastReceiver.java
    com/dexterous/flutterlocalnotifications/FlutterLocalNotificationsPlugin.java
    com/dexterous/flutterlocalnotifications/ForegroundService.java
    com/dexterous/flutterlocalnotifications/ScheduledNotificationBootReceiver.java
    com/dexterous/flutterlocalnotifications/ScheduledNotificationReceiver.java
    com/dexterous/flutterlocalnotifications/models/NotificationDetails.java
    com/ft/movie/project_speed/MainActivity$configureFlutterEngine$1.java
    com/ft/movie/project_speed/MainActivity.java
    com/ft/movie/project_speed/service/MyVpnService.java
    com/journeyapps/barcodescanner/CaptureActivity.java
    com/journeyapps/barcodescanner/CaptureManager.java
    com/journeyapps/barcodescanner/DecoratedBarcodeView.java
    com/journeyapps/barcodescanner/ScanContract.java
    com/journeyapps/barcodescanner/ScanIntentResult.java
    com/journeyapps/barcodescanner/ScanOptions.java
    com/luck/picture/lib/PictureBaseActivity.java
    com/luck/picture/lib/PictureCustomCameraActivity.java
    com/luck/picture/lib/PictureExternalPreviewActivity.java
    com/luck/picture/lib/PicturePlayAudioActivity.java
    com/luck/picture/lib/PicturePreviewActivity.java
    com/luck/picture/lib/PictureSelectionModel.java
    com/luck/picture/lib/PictureSelector.java
    com/luck/picture/lib/PictureSelectorActivity.java
    com/luck/picture/lib/PictureSelectorCameraEmptyActivity.java
    com/luck/picture/lib/PictureVideoPlayActivity.java
    com/luck/picture/lib/adapter/PictureSimpleFragmentAdapter.java
    com/luck/picture/lib/broadcast/BroadcastManager.java
    com/luck/picture/lib/permissions/PermissionChecker.java
    com/luck/picture/lib/tools/JumpUtils.java
    com/pichillilorenzo/flutter_inappwebview/chrome_custom_tabs/ActionBroadcastReceiver.java
    com/pichillilorenzo/flutter_inappwebview/chrome_custom_tabs/ChromeCustomTabsActivity.java
    com/pichillilorenzo/flutter_inappwebview/chrome_custom_tabs/ChromeCustomTabsOptions.java
    com/pichillilorenzo/flutter_inappwebview/chrome_custom_tabs/ChromeSafariBrowserManager.java
    com/pichillilorenzo/flutter_inappwebview/chrome_custom_tabs/CustomTabActivityHelper.java
    com/pichillilorenzo/flutter_inappwebview/chrome_custom_tabs/CustomTabsHelper.java
    com/pichillilorenzo/flutter_inappwebview/chrome_custom_tabs/KeepAliveService.java
    com/pichillilorenzo/flutter_inappwebview/chrome_custom_tabs/TrustedWebActivity.java
    com/pichillilorenzo/flutter_inappwebview/in_app_browser/ActivityResultListener.java
    com/pichillilorenzo/flutter_inappwebview/in_app_browser/InAppBrowserActivity.java
    com/pichillilorenzo/flutter_inappwebview/in_app_browser/InAppBrowserManager.java
    com/pichillilorenzo/flutter_inappwebview/in_app_webview/InAppWebViewChromeClient.java
    com/pichillilorenzo/flutter_inappwebview/in_app_webview/ThreadedInputConnectionProxyAdapterView.java
    com/xuexiang/flutter_xupdate/RetryUpdateTipDialog.java
    com/xuexiang/flutter_xupdate/proxy/impl/DefaultUpdateDownloader.java
    com/xuexiang/flutter_xupdate/service/DownloadService.java
    com/xuexiang/flutter_xupdate/utils/ApkInstallUtils.java
    com/xuexiang/flutter_xupdate/utils/UpdateUtils.java
    com/xuexiang/flutter_xupdate/widget/UpdateDialogActivity.java
    com/yalantis/ucrop/PictureMultiCuttingActivity.java
    com/yalantis/ucrop/UCrop.java
    com/yalantis/ucrop/UCropActivity.java
    dev/fluttercommunity/plus/connectivity/ConnectivityBroadcastReceiver.java
    io/flutter/app/FlutterActivity.java
    io/flutter/app/FlutterActivityDelegate.java
    io/flutter/app/FlutterActivityEvents.java
    io/flutter/app/FlutterFragmentActivity.java
    io/flutter/app/FlutterPluginRegistry.java
    io/flutter/embedding/android/FlutterActivity.java
    io/flutter/embedding/android/FlutterActivityAndFragmentDelegate.java
    io/flutter/embedding/android/FlutterFragment.java
    io/flutter/embedding/android/FlutterFragmentActivity.java
    io/flutter/embedding/engine/FlutterEngineConnectionRegistry.java
    io/flutter/embedding/engine/FlutterShellArgs.java
    io/flutter/embedding/engine/plugins/activity/ActivityControlSurface.java
    io/flutter/embedding/engine/plugins/activity/ActivityPluginBinding.java
    io/flutter/embedding/engine/plugins/shim/ShimRegistrar.java
    io/flutter/plugin/common/PluginRegistry.java
    io/flutter/plugins/urllauncher/UrlLauncher.java
    io/flutter/plugins/urllauncher/WebViewActivity.java
    net/sqlcipher/BulkCursorNative.java
    net/sqlcipher/BulkCursorProxy.java
    net/sqlcipher/CursorWindow.java
    net/sqlcipher/IContentObserver.java
    隐私数据-> 获取已安装的应用程序
    网络通信-> 蓝牙连接 com/baseflow/permissionhandler/ServiceManager.java
    DEX-> 动态加载 freemarker/ext/jsp/_FreeMarkerPageContext2.java
    freemarker/ext/jsp/_FreeMarkerPageContext21.java
    freemarker/ext/jython/JythonVersionAdapterHolder.java
    网络通信-> WebView JavaScript接口
    网络通信-> WebView 相关
    隐私数据-> 屏幕截图,截取自己应用内部界面 com/bumptech/glide/load/resource/bitmap/TransformationUtils.java
    com/luck/picture/lib/widget/longimage/SubsamplingScaleImageView.java
    网络通信-> WebView GET请求
    网络通信-> WebView POST请求 com/pichillilorenzo/flutter_inappwebview/InAppWebViewMethodHandler.java
    com/pichillilorenzo/flutter_inappwebview/in_app_webview/InAppWebView.java
    com/pichillilorenzo/flutter_inappwebview/types/InAppWebViewInterface.java
    组件-> 发送广播
    一般功能-> Android通知
    组件-> 启动 Activity
    网络通信-> OkHttpClient Connection
    一般功能-> 获取WiFi相关信息 com/at/skysdk/util/DeviceUtil.java
    组件-> 启动 Service
    一般功能-> 传感器相关操作 dev/fluttercommunity/plus/sensors/SensorsPlugin.java
    dev/fluttercommunity/plus/sensors/StreamHandlerImpl.java
    一般功能-> 获取活动网路信息
    一般功能-> 加载so文件 go/Seq.java
    io/flutter/embedding/engine/FlutterJNI.java
    net/sqlcipher/database/SQLiteDatabase.java
    组件-> ContentProvider io/flutter/embedding/engine/FlutterEngineConnectionRegistry.java
    io/flutter/embedding/engine/plugins/contentprovider/ContentProviderControlSurface.java
    io/flutter/embedding/engine/plugins/contentprovider/ContentProviderPluginBinding.java
    JavaScript 接口方法 com/pichillilorenzo/flutter_inappwebview/JavaScriptBridgeInterface.java
    进程操作-> 获取运行的进程\服务 com/at/skysdk/core/TcObserverPresenter.java
    com/ft/movie/project_speed/HelperUtils.java
    com/xuexiang/flutter_xupdate/utils/UpdateUtils.java
    进程操作-> 杀死进程 com/at/skysdk/core/TcCrashHandler.java
    com/ft/movie/project_speed/HelperUtils.java
    freemarker/ext/dom/Transform.java
    网络通信-> TCP套接字
    一般功能-> 获取网络接口信息 com/at/skysdk/util/NetworkUtil.java
    com/ft/movie/project_speed/HelperUtils.java
    加密解密-> Base64 解密 com/bumptech/glide/load/model/DataUrlLoader.java
    命令执行-> getRuntime.exec() com/luck/picture/lib/immersive/RomUtils.java
    com/xuexiang/flutter_xupdate/utils/ShellUtils.java
    freemarker/template/utility/Execute.java
    隐私数据-> 剪贴板数据读写操作 io/flutter/plugin/editing/InputConnectionAdaptor.java
    io/flutter/plugin/platform/PlatformPlugin.java
    进程操作-> 获取进程pid com/at/skysdk/core/MyLifecycleEventObserver.java
    com/at/skysdk/core/TcCrashHandler.java
    网络通信-> HTTPS建立连接 io/flutter/plugins/videoplayer/VideoPlayerPlugin.java
    一般功能-> PowerManager操作 com/at/skysdk/presenter/TcScreenObserver.java
    隐私数据-> 录制音频行为 com/luck/picture/lib/camera/CheckPermission.java
    一般功能-> 查询数据库(短信、联系人、通话记录、浏览器历史等) com/xuexiang/flutter_xupdate/utils/FileUtils.java
    网络通信-> SSL证书处理 com/zhy/http/okhttp/https/HttpsUtils.java
    io/flutter/plugins/videoplayer/CustomSSLSocketFactory.java
    网络通信-> HTTP建立连接 com/at/skysdk/util/NetworkUtil.java
    com/bumptech/glide/load/data/HttpUrlFetcher.java
    隐私数据-> 拍照摄像 com/journeyapps/barcodescanner/camera/CameraManager.java
    网络通信-> URLConnection freemarker/cache/URLTemplateSource.java
    freemarker/ext/jsp/TaglibFactory.java
    网络通信-> JAR URL Connection freemarker/cache/URLTemplateSource.java
    freemarker/ext/jsp/TaglibFactory.java
    网络通信-> TCP服务器套接字 freemarker/debug/impl/DebuggerServer.java

    安全漏洞检测

    高危
    1
    警告
    8
    信息
    3
    安全
    2
    屏蔽
    0
    序号 问题 等级 参考标准 文件位置 操作
    1 应用程序记录日志信息,不得记录敏感信息 信息 CWE: CWE-532: 通过日志文件的信息暴露
    OWASP MASVS: MSTG-STORAGE-3
    升级会员:解锁高级权限
    2 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等 警告 CWE: CWE-312: 明文存储敏感信息
    OWASP Top 10: M9: Reverse Engineering
    OWASP MASVS: MSTG-STORAGE-14
    升级会员:解锁高级权限
    3 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 警告 CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当('SQL 注入')
    OWASP Top 10: M7: Client Code Quality
    升级会员:解锁高级权限
    4 SHA-1是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-4
    升级会员:解锁高级权限
    5 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据 警告 CWE: CWE-276: 默认权限不正确
    OWASP Top 10: M2: Insecure Data Storage
    OWASP MASVS: MSTG-STORAGE-2
    升级会员:解锁高级权限
    6 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击 高危 CWE: CWE-79: 在Web页面生成时对输入的转义处理不恰当('跨站脚本')
    OWASP Top 10: M1: Improper Platform Usage
    OWASP MASVS: MSTG-PLATFORM-6
    升级会员:解锁高级权限
    7 此应用程序使用SQL Cipher。SQLCipher为sqlite数据库文件提供256位AES加密 信息
    OWASP MASVS: MSTG-CRYPTO-1
    升级会员:解锁高级权限
    8 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 警告 CWE: CWE-276: 默认权限不正确
    OWASP Top 10: M2: Insecure Data Storage
    OWASP MASVS: MSTG-STORAGE-2
    升级会员:解锁高级权限
    9 IP地址泄露 警告 CWE: CWE-200: 信息泄露
    OWASP MASVS: MSTG-CODE-2
    升级会员:解锁高级权限
    10 此应用程序可能具有Root检测功能 安全
    OWASP MASVS: MSTG-RESILIENCE-1
    升级会员:解锁高级权限
    11 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它 信息
    OWASP MASVS: MSTG-STORAGE-10
    升级会员:解锁高级权限
    12 应用程序使用不安全的随机数生成器 警告 CWE: CWE-330: 使用不充分的随机数
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-6
    升级会员:解锁高级权限
    13 MD5是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-4
    升级会员:解锁高级权限
    14 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 安全
    OWASP MASVS: MSTG-NETWORK-4
    升级会员:解锁高级权限

    Native库安全分析

    序号 动态库 NX(堆栈禁止执行) PIE STACK CANARY(栈保护) RELRO RPATH(指定SO搜索路径) RUNPATH(指定SO搜索路径) FORTIFY(常用函数加强检查) SYMBOLS STRIPPED(裁剪符号表)
    1 arm64-v8a/libmsoptimize.so
    True
    info
    二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。


    False
    high
    这个二进制文件没有在栈上添加栈哨兵值。栈哨兵是用于检测和防止攻击者覆盖返回地址的一种技术。使用选项-fstack-protector-all来启用栈哨兵。这对于Dart/Flutter库不适用,除非使用了Dart FFI
    Full RELRO
    info
    此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
    None
    info
    二进制文件没有设置运行时搜索路径或RPATH
    None
    info
    二进制文件没有设置 RUNPATH
    False
    warning
    二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数(如 strcpy,gets 等)的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用
    False
    warning
    符号可用

    文件分析

    序号 问题 文件
    1 找到硬编码的Keystore assets/grs_sp.bks
    assets/hmsincas.bks
    assets/hmsrootcas.bks

    敏感权限分析

    恶意软件常用权限 9/30
    android.permission.REQUEST_INSTALL_PACKAGES
    android.permission.READ_PHONE_STATE
    android.permission.RECEIVE_BOOT_COMPLETED
    android.permission.VIBRATE
    android.permission.ACCESS_COARSE_LOCATION
    android.permission.ACCESS_FINE_LOCATION
    android.permission.GET_TASKS
    android.permission.CAMERA
    android.permission.RECORD_AUDIO
    其它常用权限 7/46
    android.permission.INTERNET
    android.permission.WRITE_EXTERNAL_STORAGE
    android.permission.READ_EXTERNAL_STORAGE
    android.permission.ACCESS_BACKGROUND_LOCATION
    android.permission.FOREGROUND_SERVICE
    android.permission.ACCESS_WIFI_STATE
    android.permission.ACCESS_NETWORK_STATE

    恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
    其它常用权限 是已知恶意软件经常滥用的权限。

    IP地理位置

    恶意域名检测

    域名 状态 中国境内 位置信息 解析
    journeyapps.com 安全
    IP地址: 216.137.39.123
    国家: United States of America
    地区: California
    城市: Los Angeles
    查看: Google 地图

    freemarker.org 安全
    IP地址: 192.64.119.217
    国家: United States of America
    地区: Georgia
    城市: Atlanta
    查看: Google 地图

    aomedia.org 安全
    IP地址: 185.199.110.153
    国家: United States of America
    地区: Pennsylvania
    城市: California
    查看: Google 地图

    dashif.org 安全
    IP地址: 185.199.108.153
    国家: United States of America
    地区: Pennsylvania
    城市: California
    查看: Google 地图

    schemas.microsoft.com 安全
    IP地址: 13.107.246.74
    国家: United States of America
    地区: Washington
    城市: Redmond
    查看: Google 地图

    example.com 安全
    IP地址: 93.184.216.34
    国家: United States of America
    地区: Virginia
    城市: Ashburn
    查看: Google 地图

    default.url 安全
    没有可用的地理位置信息。

    手机号提取

    手机号 源码文件
    17512775099
    自研引擎分析结果

    URL链接分析

    URL信息 源码文件
    https://grs.dbankcloud.cn
    https://grs.dbankcloud.asia
    https://grs.dbankcloud.eu
    https://grs.dbankcloud.com
    自研引擎分析结果
    http://192.168.5.231:8080
    com/at/skysdk/constants/NetConfig.java
    http://www.baidu.com
    com/at/skysdk/util/NetworkUtil.java
    172.19.0.2
    172.19.0.1
    com/ft/movie/project_speed/service/MyVpnService.java
    javascript:if(window.flutter_inappwebview
    com/pichillilorenzo/flutter_inappwebview/JavaScriptBridgeInterface.java
    data:!0}),_t=function(){return
    com/pichillilorenzo/flutter_inappwebview/plugin_scripts_js/PromisePolyfillJS.java
    http://freemarker.org/docs/ref_builtins.html
    freemarker/core/BuiltIn.java
    http://freemarker.org/
    freemarker/core/CommandLine.java
    http://freemarker.org/docs/ref_directive_list.html
    http://freemarker.org/docs/ref_directive_alphaidx.html
    freemarker/core/FMParserTokenManager.java
    http://java.sun.com/dtd/web-jsptaglibrary_1_2.dtd
    http://java.sun.com/j2ee/dtds/web-jsptaglibrary_1_1.dtd
    http://java.sun.com/dtd/web-app_2_3.dtd
    http://java.sun.com/j2ee/dtds/web-app_2_2.dtd
    freemarker/ext/jsp/TaglibFactory.java
    https://developer.android.com/guide/topics/permissions/overview
    io/flutter/plugin/platform/PlatformPlugin.java
    https://developer.android.com/reference/javax/net/ssl/sslsocket
    io/flutter/plugins/videoplayer/VideoPlayerPlugin.java
    http://freemarker.org/docs/ref_builtins.html
    https://default.url
    http://java.sun.com/j2ee/dtds/web-jsptaglibrary_1_1.dtd
    data:!0}),_t=function(){return
    http://freemarker.org/docs/ref_directive_alphaidx.html
    https://aomedia.org/emsg/id3
    http://192.168.5.231:8080
    http://dashif.org/thumbnail_tile
    http://java.sun.com/dtd/web-jsptaglibrary_1_2.dtd
    https://github.com/journeyapps/zxing-android-embedded
    http://www.baidu.com
    https://journeyapps.com/
    https://developer.android.com/guide/topics/permissions/overview
    http://freemarker.org/
    127.0.0.1
    http://dashif.org/guidelines/trickmode
    javascript:if(window.flutter_inappwebview
    172.19.0.1
    https://developer.apple.com/streaming/emsg-id3
    http://freemarker.org/docs/ref_directive_list.html
    http://schemas.microsoft.com/drm/2007/03/protocols/acquirelicense
    http://dashif.org/guidelines/last-segment-number
    http://java.sun.com/dtd/web-app_2_3.dtd
    127.0.0.255
    data:cs:audiopurposecs:2007
    https://developer.android.com/reference/javax/net/ssl/sslsocket
    172.19.0.2
    file:dvb-dash:
    http://java.sun.com/j2ee/dtds/web-app_2_2.dtd
    http://dashif.org/guidelines/thumbnail_tile
    https://developer.android.com/guide/topics/media/issues/cleartext-not-permitted
    https://developer.android.com/guide/topics/media/issues/player-accessed-on-wrong-thread
    自研引擎分析结果

    Firebase配置检测

    邮箱地址提取

    第三方追踪器

    名称 类别 网址
    Huawei Mobile Services (HMS) Core Analytics, Advertisement, Location https://reports.exodus-privacy.eu.org/trackers/333

    敏感凭证泄露

    已显示 4 个secrets
    1、 "library_zxingandroidembedded_authorWebsite" : "https://journeyapps.com/"
    2、 "library_zxingandroidembedded_author" : "JourneyApps"
    3、 5e5398f0546d1d7afd62641edb14d82894f11ddc41bce363a0c8d0dac82c9c5a
    4、 16a09e667f3bcc908b2fb1366ea957d3e3adec17512775099da2f590b0667322a

    字符串信息

    建议导出为TXT,方便查看。

    第三方SDK

    SDK名称 开发者 描述信息
    Flutter Google Flutter 是谷歌的移动 UI 框架,可以快速在 iOS 和 Android 上构建高质量的原生用户界面。
    Golang Google Go 是一种开源编程语言,可轻松构建简单,可靠和高效的软件。
    Jetpack Camera Google CameraX 是 Jetpack 的新增库。利用该库,可以更轻松地向应用添加相机功能。该库提供了很多兼容性修复程序和解决方法,有助于在众多设备上打造一致的开发者体验。
    HMS Scan Kit Huawei 统一扫码服务(Scan Kit)提供便捷的条形码和二维码扫描、解析、生成能力,帮助您快速构建应用内的扫码功能。得益于华为在计算机视觉领域能力的积累,Scan Kit 可以实现远距离码或小型码的检测和自动放大,同时针对常见复杂扫码场景(如反光、暗光、污损、模糊、柱面)做了针对性识别优化,提升扫码成功率与用户体验。Scan Kit 支持 Android 和 iOS 系统集成。其中,Android 系统集成 Scan Kit 后支持横屏扫码能力。
    SQLCipher Zetetic SQLCipher 是一个 SQLite 扩展,它提供数据库文件的 256 位 AES 加密能力。
    ZXing Android Embedded JourneyApps Barcode scanning library for Android, using ZXing for decoding.
    PictureSelector LuckSiege 一款针对 Android 平台下的图片选择器,支持从相册获取图片、视频、音频 & 拍照,支持裁剪(单图 or 多图裁剪)、压缩、主题自定义配置等功能,支持动态获取权限&适配 Android 5.0+ 系统的开源图片选择框架。
    File Provider Android FileProvider 是 ContentProvider 的特殊子类,它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。
    Jetpack App Startup Google App Startup 库提供了一种直接,高效的方法来在应用程序启动时初始化组件。库开发人员和应用程序开发人员都可以使用 App Startup 来简化启动顺序并显式设置初始化顺序。App Startup 允许您定义共享单个内容提供程序的组件初始化程序,而不必为需要初始化的每个组件定义单独的内容提供程序。这可以大大缩短应用启动时间。
    AppGallery Connect Huawei 为开发者提供移动应用全生命周期服务,覆盖全终端全场景,降低开发成本,提升运营效率,助力商业成功。
    HMS ML Kit Huawei 机器学习服务(ML Kit)提供机器学习套件,为开发者使用机器学习能力开发各类应用,提供优质体验。得益于华为长期技术积累,ML Kit 为开发者提供简单易用、服务多样、技术领先的机器学习能力,助力开发者更快更好地开发各类 AI 应用。
    Jetpack Media Google 与其他应用共享媒体内容和控件。已被 media2 取代。

    污点分析

    当apk较大时,代码量会很大,造成数据流图(ICFG)呈现爆炸式增长,所以该功能比较耗时,请先喝杯咖啡,耐心等待……
    规则名称 描述信息 操作
    病毒分析 使用安卓恶意软件常用的API进行污点分析 开始分析  
    漏洞挖掘 漏洞挖掘场景下的污点分析 开始分析  
    隐私合规 隐私合规场景下的污点分析:组件内污点传播、组件间污点传播、组件与库函数之间的污点传播 开始分析  
    密码分析 分析加密算法是否使用常量密钥、静态初始化的向量(IV)、加密模式是否使用ECB等 开始分析  
    Callback 因为Android中系统级的Callback并不会出现显式地进行回调方法的调用,所以如果需要分析Callback方法需要在声明文件中将其声明,这里提供一份AndroidCallbacks.txt文件,里面是一些常见的原生回调接口或类,如果有特殊接口需求,可以联系管理员 开始分析