安全声明:本平台专为移动应用安全风险研究与合规评估设计,严禁用于任何非法用途。如有疑问或建议,欢迎加入微信群交流

应用图标

文件基本信息

文件名称
notification.apk
文件大小
18.78MB
MD5
6bebd71678beba7629d70e31d9cf6a44
SHA1
11c8871d9bef71c2bf904e63280365f0e4a1d7a8
SHA256
e90bcd7d573656ee2441583c0d29449807a86e48186865e0063a0cac276b26cf

应用基础信息

应用名称
Aptoide
包名
cm.aptoide.pt
主活动
cm.aptoide.pt.view.MainActivity
目标SDK
25
最小SDK
16
版本号
9.20.6.1
子版本号
12010
加固信息
未加壳

反编译与源码导出

Manifest文件 查看
Java源代码 查看 -- 下载

文件结构与资源列表

    应用签名证书信息

    二进制文件已签名
    v1 签名: True
    v2 签名: False
    v3 签名: False
    v4 签名: False
    主题: ST=Portugal
    签名算法: rsassa_pkcs1v15
    有效期自: 2009-09-22 14:53:51+00:00
    有效期至: 2034-09-16 14:53:51+00:00
    发行人: ST=Portugal
    序列号: 0x4ab8e4ff
    哈希算法: sha1
    证书MD5: 99bd1872bc56b4b2619e731ae9cbdc6f
    证书SHA1: d590a7d792fd0331542d99faf9997641790773a9
    证书SHA256: 73534d45c1345a4783c7eff2cf6038551ab5fdf09673f32c68c3b0864baa80e4
    证书SHA512: 8a5562a7825800df284d47dab79fcae1ccde0c3c46b1a181696809ed270576b92718130131ffef402f4d2822e235879de1e91224d91f0f4c0a0b58d2d2bc5b43
    找到 1 个唯一证书

    权限声明与风险分级

    权限名称 安全等级 权限内容 权限描述 关联代码
    android.permission.WAKE_LOCK 危险 防止手机休眠 允许应用程序防止手机休眠,在手机屏幕关闭后后台进程仍然运行。
    android.permission.READ_SYNC_STATS 普通 读取同步统计信息 允许应用程序读取同步统计信息;例如已发生的同步历史记录。
    com.android.launcher.permission.INSTALL_SHORTCUT 签名 创建快捷方式 这个权限是允许应用程序创建桌面快捷方式。
    android.permission.RECEIVE_BOOT_COMPLETED 普通 开机自启 允许应用程序在系统完成启动后即自行启动。这样会延长手机的启动时间,而且如果应用程序一直运行,会降低手机的整体速度。
    android.permission.INSTALL_PACKAGES 签名(系统) 请求安装APP 允许应用程序安装全新的或更新的 Android 包。恶意应用程序可能会借此添加其具有任意权限的新应用程序。
    android.permission.CHANGE_WIFI_MULTICAST_STATE 危险 允许接收WLAN多播 允许应用程序接收并非直接向您的设备发送的数据包。这样在查找附近提供的服务时很有用。这种操作所耗电量大于非多播模式。
    android.permission.ACCESS_WIFI_STATE 普通 查看Wi-Fi状态 允许应用程序查看有关Wi-Fi状态的信息。
    android.permission.READ_SYNC_SETTINGS 普通 读取同步设置 允许应用程序读取同步设置,例如是否为 联系人 启用同步。
    android.permission.WRITE_SYNC_SETTINGS 危险 修改同步设置 允许应用程序修改同步设置。
    android.permission.AUTHENTICATE_ACCOUNTS 危险 作为帐户身份验证程序 允许应用程序使用 AccountManager 的帐户身份验证程序功能,包括创建帐户以及获取和设置其密码。
    android.permission.GET_ACCOUNTS 普通 探索已知账号 允许应用程序访问帐户服务中的帐户列表。
    android.permission.MANAGE_ACCOUNTS 危险 管理帐户列表 允许应用程序执行添加、删除帐户及删除其密码之类的操作。
    android.permission.INTERNET 危险 完全互联网访问 允许应用程序创建网络套接字。
    android.permission.USE_CREDENTIALS 危险 使用帐户的身份验证凭据 允许应用程序请求身份验证标记。
    android.permission.READ_EXTERNAL_STORAGE 危险 读取SD卡内容 允许应用程序从SD卡读取信息。
    android.permission.WRITE_EXTERNAL_STORAGE 危险 读取/修改/删除外部存储内容 允许应用程序写入外部存储。
    android.permission.CAMERA 危险 拍照和录制视频 允许应用程序拍摄照片和视频,且允许应用程序收集相机在任何时候拍到的图像。
    android.permission.ACCESS_NETWORK_STATE 普通 获取网络状态 允许应用程序查看所有网络的状态。
    com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE 普通 Google 定义的权限 由 Google 定义的自定义权限。

    证书安全合规分析

    高危
    1
    警告
    0
    信息
    1
    标题 严重程度 描述信息
    已签名应用 信息 应用程序已使用代码签名证书进行签名
    应用程序存在Janus漏洞 高危 应用程序使用了v1签名方案进行签名,如果只使用v1签名方案,那么它就容易受到安卓5.0-8.0上的Janus漏洞的攻击。在安卓5.0-7.0上运行的使用了v1签名方案的应用程序,以及同时使用了v2/v3签名方案的应用程序也同样存在漏洞。

    Manifest 配置安全分析

    高危
    23
    警告
    14
    信息
    0
    屏蔽
    0
    序号 问题 严重程度 描述信息 操作
    1 应用程序可以安装在有漏洞的已更新 Android 版本上
    Android 4.1-4.1.2, [minSdk=16]
    警告 该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。
    2 应用程序具有网络安全配置
    [android:networkSecurityConfig=@xml/network_security_config]
    信息 网络安全配置功能让应用程序可以在一个安全的,声明式的配置文件中自定义他们的网络安全设置,而不需要修改应用程序代码。这些设置可以针对特定的域名和特定的应用程序进行配置。
    3 Activity (cm.aptoide.pt.view.MainActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
    4 Activity (cm.aptoide.pt.view.MainActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。 高危 活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (25) 更新到 28 或更高版本以在平台级别修复此问题。
    5 Activity设置了TaskAffinity属性
    (cm.aptoide.pt.wallet.WalletInstallActivity)
    警告 如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名
    6 Service (cm.aptoide.pt.account.AccountAuthenticatorService) 未被保护。
    存在一个intent-filter。
    警告 发现 Service与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。
    7 Content Provider (cm.aptoide.pt.toolbox.ToolboxContentProvider) 未被保护。
    [android:exported=true]
    警告 发现 Content Provider与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
    8 Activity (com.facebook.CustomTabActivity) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (25) 更新到 29 或更高版本以在平台级别修复此问题。
    9 Activity (com.facebook.CustomTabActivity) 未被保护。
    [android:exported=true]
    警告 发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
    10 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=http://app.aptoide.com]
    高危 App Link 资产验证 URL (http://app.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:404)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    11 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=https://app.aptoide.com]
    高危 App Link 资产验证 URL (https://app.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:404)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    12 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=http://webservices.aptoide.com]
    高危 App Link 资产验证 URL (http://webservices.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:404)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    13 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=https://webservices.aptoide.com]
    高危 App Link 资产验证 URL (https://webservices.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:404)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    14 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=http://br.aptoide.com]
    高危 App Link 资产验证 URL (http://br.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:None)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    15 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=https://br.aptoide.com]
    高危 App Link 资产验证 URL (https://br.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:None)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    16 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=http://mx.aptoide.com]
    高危 App Link 资产验证 URL (http://mx.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:None)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    17 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=http://de.aptoide.com]
    高危 App Link 资产验证 URL (http://de.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:None)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    18 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=https://sa.aptoide.com]
    高危 App Link 资产验证 URL (https://sa.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:None)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    19 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=http://in.aptoide.com]
    高危 App Link 资产验证 URL (http://in.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:None)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    20 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=https://vn.aptoide.com]
    高危 App Link 资产验证 URL (https://vn.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:None)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    21 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=http://ro.aptoide.com]
    高危 App Link 资产验证 URL (http://ro.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:None)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    22 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=http://hu.aptoide.com]
    高危 App Link 资产验证 URL (http://hu.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:None)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    23 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=https://nl.aptoide.com]
    高危 App Link 资产验证 URL (https://nl.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:None)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    24 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=https://kr.aptoide.com]
    高危 App Link 资产验证 URL (https://kr.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:None)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    25 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=http://community.aptoide.com]
    高危 App Link 资产验证 URL (http://community.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:404)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    26 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=https://community.aptoide.com]
    高危 App Link 资产验证 URL (https://community.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:404)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    27 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=http://become-a-power-gamer.aptoide.com]
    高危 App Link 资产验证 URL (http://become-a-power-gamer.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:404)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    28 App 链接 assetlinks.json 文件未找到
    [android:name=cm.aptoide.pt.DeepLinkIntentReceiver]
    [android:host=https://become-a-power-gamer.aptoide.com]
    高危 App Link 资产验证 URL (https://become-a-power-gamer.aptoide.com/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:404)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。
    29 Activity设置了TaskAffinity属性
    (cm.aptoide.pt.DeepLinkIntentReceiver)
    警告 如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名
    30 Activity (cm.aptoide.pt.DeepLinkIntentReceiver) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (25) 更新到 29 或更高版本以在平台级别修复此问题。
    31 Activity (cm.aptoide.pt.DeepLinkIntentReceiver) 未被保护。
    [android:exported=true]
    警告 发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
    32 Broadcast Receiver (cm.aptoide.pt.install.InstalledBroadcastReceiver) 未被保护。
    存在一个intent-filter。
    警告 发现 Broadcast Receiver与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。
    33 Broadcast Receiver (cm.aptoide.pt.notification.NotificationReceiver) 未被保护。
    存在一个intent-filter。
    警告 发现 Broadcast Receiver与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。
    34 Broadcast Receiver (cm.aptoide.pt.install.CheckRootOnBoot) 未被保护。
    存在一个intent-filter。
    警告 发现 Broadcast Receiver与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。
    35 Broadcast Receiver (cm.aptoide.pt.widget.SearchWidgetProvider) 未被保护。
    存在一个intent-filter。
    警告 发现 Broadcast Receiver与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。
    36 Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护, 但是应该检查权限的保护级别。
    Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION
    [android:exported=true]
    警告 发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
    37 Service (androidx.work.impl.background.systemjob.SystemJobService) 受权限保护, 但是应该检查权限的保护级别。
    Permission: android.permission.BIND_JOB_SERVICE
    [android:exported=true]
    警告 发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
    38 高优先级的Intent (999)
    [android:priority]
    警告 通过设置一个比另一个Intent更高的优先级,应用程序有效地覆盖了其他请求。

    可浏览 Activity 组件分析

    ACTIVITY INTENT
    com.facebook.CustomTabActivity Schemes: @string/fb_login_protocol_scheme://, fbconnect://,
    Hosts: cct.cm.aptoide.pt,
    cm.aptoide.pt.DeepLinkIntentReceiver Schemes: file://, http://, aptoide://, aptoiderepo://, aptoideinstall://, aptoideauth://, aptoidesearch://, aptoidefeature://, market://, https://,
    Hosts: app.aptoide.com, market.android.com, webservices.aptoide.com, play.google.com, *.en.aptoide.com, *.pt.aptoide.com, *.br.aptoide.com, *.fr.aptoide.com, *.es.aptoide.com, *.mx.aptoide.com, *.de.aptoide.com, *.it.aptoide.com, *.ru.aptoide.com, *.sa.aptoide.com, *.id.aptoide.com, *.in.aptoide.com, *.bd.aptoide.com, *.mr.aptoide.com, *.pa.aptoide.com, *.my.aptoide.com, *.th.aptoide.com, *.vn.aptoide.com, *.tr.aptoide.com, *.cn.aptoide.com, *.ro.aptoide.com, *.mm.aptoide.com, *.pl.aptoide.com, *.rs.aptoide.com, *.hu.aptoide.com, *.gr.aptoide.com, *.bg.aptoide.com, *.nl.aptoide.com, *.ir.aptoide.com, *.jp.aptoide.com, *.kr.aptoide.com, *.ua.aptoide.com, en.aptoide.com, pt.aptoide.com, br.aptoide.com, fr.aptoide.com, es.aptoide.com, mx.aptoide.com, de.aptoide.com, it.aptoide.com, ru.aptoide.com, sa.aptoide.com, id.aptoide.com, in.aptoide.com, bd.aptoide.com, mr.aptoide.com, pa.aptoide.com, my.aptoide.com, th.aptoide.com, vn.aptoide.com, tr.aptoide.com, cn.aptoide.com, ro.aptoide.com, mm.aptoide.com, pl.aptoide.com, rs.aptoide.com, hu.aptoide.com, gr.aptoide.com, bg.aptoide.com, nl.aptoide.com, ir.aptoide.com, jp.aptoide.com, kr.aptoide.com, ua.aptoide.com, community.aptoide.com, become-a-power-gamer.aptoide.com,
    Mime Types: application/vnd.cm.aptoide.pt,
    Path Prefixes: /apkinstall,
    Path Patterns: /store/..*, /thank-you*, /appcoins, /using-appcoins*, /download*, /editorial/..*, /app,

    网络通信安全风险分析

    高危
    0
    警告
    1
    信息
    1
    安全
    0
    序号 范围 严重级别 描述
    1 *
    信息 基本配置配置为信任bundled certs @raw/vanilla_cert.
    2 *
    警告 基本配置配置为信任系统证书。

    API调用分析

    API功能 源码文件
    一般功能-> 文件操作
    bolts/AggregateException.java
    cm/aptoide/analytics/implementation/loggers/HttpKnockEventLogger.java
    cm/aptoide/pt/ApplicationModule.java
    cm/aptoide/pt/DeepLinkIntentReceiver.java
    cm/aptoide/pt/FirstLaunchManager.java
    cm/aptoide/pt/account/view/ImageInfoProvider.java
    cm/aptoide/pt/account/view/ImagePickerPresenter.java
    cm/aptoide/pt/account/view/PhotoFileGenerator.java
    cm/aptoide/pt/analytics/FirstLaunchAnalytics.java
    cm/aptoide/pt/analytics/UTMTrackingFileParser.java
    cm/aptoide/pt/app/view/AppViewPresenter.java
    cm/aptoide/pt/app/view/donations/utils/GenericPaymentIntentBuilder.java
    cm/aptoide/pt/database/RoomEventMapper.java
    cm/aptoide/pt/database/RoomEventPersistence.java
    cm/aptoide/pt/database/room/RoomInstalled.java
    cm/aptoide/pt/dataprovider/ads/AdNetworkUtils.java
    cm/aptoide/pt/dataprovider/cache/L2Cache.java
    cm/aptoide/pt/dataprovider/cache/POSTCacheInterceptor.java
    cm/aptoide/pt/dataprovider/cache/POSTCacheKeyAlgorithm.java
    cm/aptoide/pt/dataprovider/cache/ResponseCacheEntry.java
    cm/aptoide/pt/dataprovider/cache/Sha1KeyAlgorithm.java
    cm/aptoide/pt/dataprovider/ws/v2/aptwords/GetAdsRequest.java
    cm/aptoide/pt/dataprovider/ws/v3/V3.java
    cm/aptoide/pt/dataprovider/ws/v7/ListSearchAppsRequest.java
    cm/aptoide/pt/dataprovider/ws/v7/SetStoreImageRequest.java
    cm/aptoide/pt/dataprovider/ws/v7/SetUserMultipartRequest.java
    cm/aptoide/pt/dataprovider/ws/v7/V7.java
    cm/aptoide/pt/dataprovider/ws/v7/store/RequestBodyFactory.java
    cm/aptoide/pt/download/DownloadMirrorEventInterceptor.java
    cm/aptoide/pt/download/Md5Comparator.java
    cm/aptoide/pt/file/CacheHelper.java
    cm/aptoide/pt/home/more/apps/ListAppsMoreRepository.java
    cm/aptoide/pt/install/InstallAppSizeValidator.java
    cm/aptoide/pt/install/PackageRepository.java
    cm/aptoide/pt/install/RootInstallerProvider.java
    cm/aptoide/pt/install/installer/DefaultInstaller.java
    cm/aptoide/pt/install/installer/DownloadInstallationAdapter.java
    cm/aptoide/pt/install/installer/Installation.java
    cm/aptoide/pt/install/installer/Root.java
    cm/aptoide/pt/install/installer/RootCommandOnSubscribe.java
    cm/aptoide/pt/install/installer/RootInstaller.java
    cm/aptoide/pt/install/remote/RemoteInstallationSenderManager.java
    cm/aptoide/pt/networking/Pnp1AuthorizationInterceptor.java
    cm/aptoide/pt/networking/UserAgentInterceptor.java
    cm/aptoide/pt/networking/UserAgentInterceptorV8.java
    cm/aptoide/pt/packageinstaller/AppInstall.java
    cm/aptoide/pt/packageinstaller/AppInstaller.java
    cm/aptoide/pt/preferences/PRNGFixes.java
    cm/aptoide/pt/preferences/secure/SecurePreferencesImplementation.java
    cm/aptoide/pt/root/RootShell.java
    cm/aptoide/pt/root/containers/RootClass.java
    cm/aptoide/pt/root/execution/Command.java
    cm/aptoide/pt/root/execution/Shell.java
    cm/aptoide/pt/search/SearchRepository.java
    cm/aptoide/pt/themes/NewFeatureManager.java
    cm/aptoide/pt/toolbox/ToolboxContentProvider.java
    cm/aptoide/pt/util/ApkFyManager.java
    cm/aptoide/pt/util/PreferencesXmlParser.java
    cm/aptoide/pt/utils/AptoideUtils.java
    cm/aptoide/pt/utils/FileUtils.java
    cm/aptoide/pt/utils/MultiDexHelper.java
    cm/aptoide/pt/view/DeepLinkManager.java
    cm/aptoide/pt/view/feedback/SendFeedbackFragment.java
    com/airbnb/lottie/LottieAnimationView.java
    com/airbnb/lottie/e.java
    com/airbnb/lottie/r/b.java
    com/airbnb/lottie/t/b.java
    com/airbnb/lottie/t/c.java
    com/airbnb/lottie/u/a.java
    com/airbnb/lottie/u/a0.java
    com/airbnb/lottie/u/b.java
    com/airbnb/lottie/u/b0.java
    com/airbnb/lottie/u/c.java
    com/airbnb/lottie/u/c0.java
    com/airbnb/lottie/u/d.java
    com/airbnb/lottie/u/d0.java
    com/airbnb/lottie/u/e.java
    com/airbnb/lottie/u/e0.java
    com/airbnb/lottie/u/f.java
    com/airbnb/lottie/u/f0.java
    com/airbnb/lottie/u/g.java
    com/airbnb/lottie/u/g0.java
    com/airbnb/lottie/u/h.java
    com/airbnb/lottie/u/h0.java
    com/airbnb/lottie/u/i.java
    com/airbnb/lottie/u/i0.java
    com/airbnb/lottie/u/j.java
    com/airbnb/lottie/u/j0.java
    com/airbnb/lottie/u/k.java
    com/airbnb/lottie/u/l.java
    com/airbnb/lottie/u/m.java
    com/airbnb/lottie/u/n.java
    com/airbnb/lottie/u/o.java
    com/airbnb/lottie/u/p.java
    com/airbnb/lottie/u/q.java
    com/airbnb/lottie/u/r.java
    com/airbnb/lottie/u/s.java
    com/airbnb/lottie/u/t.java
    com/airbnb/lottie/u/u.java
    com/airbnb/lottie/u/v.java
    com/airbnb/lottie/u/w.java
    com/airbnb/lottie/u/x.java
    com/airbnb/lottie/u/y.java
    com/airbnb/lottie/u/z.java
    com/airbnb/lottie/v/f.java
    com/asf/appcoins/sdk/contractproxy/proxy/Web3jProxyContract.java
    com/asf/appcoins/sdk/core/util/LogInterceptor.java
    com/bumptech/glide/c.java
    com/bumptech/glide/k/a.java
    com/bumptech/glide/k/b.java
    com/bumptech/glide/k/c.java
    com/bumptech/glide/load/HttpException.java
    com/bumptech/glide/load/ImageHeaderParser.java
    com/bumptech/glide/load/d.java
    com/bumptech/glide/load/e.java
    com/bumptech/glide/load/engine/GlideException.java
    com/bumptech/glide/load/engine/a0/a.java
    com/bumptech/glide/load/engine/a0/b.java
    com/bumptech/glide/load/engine/a0/d.java
    com/bumptech/glide/load/engine/a0/e.java
    com/bumptech/glide/load/engine/a0/f.java
    com/bumptech/glide/load/engine/b0/b.java
    com/bumptech/glide/load/engine/c.java
    com/bumptech/glide/load/engine/e.java
    com/bumptech/glide/load/engine/g.java
    com/bumptech/glide/load/engine/i.java
    com/bumptech/glide/load/engine/v.java
    com/bumptech/glide/load/j.java
    com/bumptech/glide/load/m/a.java
    com/bumptech/glide/load/m/b.java
    com/bumptech/glide/load/m/c.java
    com/bumptech/glide/load/m/e.java
    com/bumptech/glide/load/m/g.java
    com/bumptech/glide/load/m/h.java
    com/bumptech/glide/load/m/i.java
    com/bumptech/glide/load/m/j.java
    com/bumptech/glide/load/m/k.java
    com/bumptech/glide/load/m/l.java
    com/bumptech/glide/load/m/m.java
    com/bumptech/glide/load/m/n.java
    com/bumptech/glide/load/m/o/a.java
    com/bumptech/glide/load/m/o/c.java
    com/bumptech/glide/load/m/o/e.java
    com/bumptech/glide/load/n/a.java
    com/bumptech/glide/load/n/b.java
    com/bumptech/glide/load/n/c.java
    com/bumptech/glide/load/n/d.java
    com/bumptech/glide/load/n/e.java
    com/bumptech/glide/load/n/f.java
    com/bumptech/glide/load/n/k.java
    com/bumptech/glide/load/n/s.java
    com/bumptech/glide/load/n/t.java
    com/bumptech/glide/load/n/u.java
    com/bumptech/glide/load/n/w.java
    com/bumptech/glide/load/n/x.java
    com/bumptech/glide/load/n/y/a.java
    com/bumptech/glide/load/n/y/b.java
    com/bumptech/glide/load/n/y/c.java
    com/bumptech/glide/load/n/y/d.java
    com/bumptech/glide/load/n/y/e.java
    com/bumptech/glide/load/o/c/a.java
    com/bumptech/glide/load/o/c/b.java
    com/bumptech/glide/load/o/c/c.java
    com/bumptech/glide/load/o/c/f.java
    com/bumptech/glide/load/o/c/j.java
    com/bumptech/glide/load/o/c/l.java
    com/bumptech/glide/load/o/c/o.java
    com/bumptech/glide/load/o/c/q.java
    com/bumptech/glide/load/o/c/s.java
    com/bumptech/glide/load/o/c/v.java
    com/bumptech/glide/load/o/c/y.java
    com/bumptech/glide/load/o/f/a.java
    com/bumptech/glide/load/o/f/b.java
    com/bumptech/glide/load/o/g/a.java
    com/bumptech/glide/load/o/g/d.java
    com/bumptech/glide/load/o/g/j.java
    com/bumptech/glide/load/o/h/a.java
    com/bumptech/glide/r/a.java
    com/bumptech/glide/r/c.java
    com/bumptech/glide/r/d.java
    com/bumptech/glide/r/h.java
    com/fasterxml/jackson/annotation/ObjectIdGenerator.java
    com/fasterxml/jackson/core/Base64Variant.java
    com/fasterxml/jackson/core/JsonFactory.java
    com/fasterxml/jackson/core/JsonGenerator.java
    com/fasterxml/jackson/core/JsonLocation.java
    com/fasterxml/jackson/core/JsonParser.java
    com/fasterxml/jackson/core/JsonProcessingException.java
    com/fasterxml/jackson/core/ObjectCodec.java
    com/fasterxml/jackson/core/PrettyPrinter.java
    com/fasterxml/jackson/core/TokenStreamFactory.java
    com/fasterxml/jackson/core/base/GeneratorBase.java
    com/fasterxml/jackson/core/base/ParserBase.java
    com/fasterxml/jackson/core/base/ParserMinimalBase.java
    com/fasterxml/jackson/core/filter/FilteringParserDelegate.java
    com/fasterxml/jackson/core/filter/TokenFilter.java
    com/fasterxml/jackson/core/io/CharacterEscapes.java
    com/fasterxml/jackson/core/io/InputDecorator.java
    com/fasterxml/jackson/core/io/MergedStream.java
    com/fasterxml/jackson/core/io/OutputDecorator.java
    com/fasterxml/jackson/core/io/SegmentedStringWriter.java
    com/fasterxml/jackson/core/io/SerializedString.java
    com/fasterxml/jackson/core/io/UTF32Reader.java
    com/fasterxml/jackson/core/io/UTF8Writer.java
    com/fasterxml/jackson/core/json/ByteSourceJsonBootstrapper.java
    com/fasterxml/jackson/core/json/JsonGeneratorImpl.java
    com/fasterxml/jackson/core/json/ReaderBasedJsonParser.java
    com/fasterxml/jackson/core/json/UTF8JsonGenerator.java
    com/fasterxml/jackson/core/json/UTF8StreamJsonParser.java
    com/fasterxml/jackson/core/json/WriterBasedJsonGenerator.java
    com/fasterxml/jackson/core/util/ByteArrayBuilder.java
    com/fasterxml/jackson/core/util/DefaultIndenter.java
    com/fasterxml/jackson/core/util/DefaultPrettyPrinter.java
    com/fasterxml/jackson/core/util/JsonParserDelegate.java
    com/fasterxml/jackson/core/util/JsonParserSequence.java
    com/fasterxml/jackson/core/util/MinimalPrettyPrinter.java
    com/fasterxml/jackson/core/util/RequestPayload.java
    com/fasterxml/jackson/core/util/Separators.java
    com/fasterxml/jackson/databind/AnnotationIntrospector.java
    com/fasterxml/jackson/databind/BeanProperty.java
    com/fasterxml/jackson/databind/DeserializationConfig.java
    com/fasterxml/jackson/databind/DeserializationContext.java
    com/fasterxml/jackson/databind/JavaType.java
    com/fasterxml/jackson/databind/JsonDeserializer.java
    com/fasterxml/jackson/databind/JsonMappingException.java
    com/fasterxml/jackson/databind/JsonSerializable.java
    com/fasterxml/jackson/databind/JsonSerializer.java
    com/fasterxml/jackson/databind/KeyDeserializer.java
    com/fasterxml/jackson/databind/ObjectMapper.java
    com/fasterxml/jackson/databind/ObjectReader.java
    com/fasterxml/jackson/databind/ObjectWriter.java
    com/fasterxml/jackson/databind/PropertyMetadata.java
    com/fasterxml/jackson/databind/PropertyName.java
    com/fasterxml/jackson/databind/PropertyNamingStrategy.java
    com/fasterxml/jackson/databind/SerializationConfig.java
    com/fasterxml/jackson/databind/SerializerProvider.java
    com/fasterxml/jackson/databind/cfg/BaseSettings.java
    com/fasterxml/jackson/databind/cfg/ConfigOverrides.java
    com/fasterxml/jackson/databind/cfg/ContextAttributes.java
    com/fasterxml/jackson/databind/cfg/DeserializerFactoryConfig.java
    com/fasterxml/jackson/databind/cfg/MapperConfig.java
    com/fasterxml/jackson/databind/cfg/MapperConfigBase.java
    com/fasterxml/jackson/databind/cfg/SerializerFactoryConfig.java
    com/fasterxml/jackson/databind/deser/AbstractDeserializer.java
    com/fasterxml/jackson/databind/deser/BasicDeserializerFactory.java
    com/fasterxml/jackson/databind/deser/BeanDeserializer.java
    com/fasterxml/jackson/databind/deser/BeanDeserializerBase.java
    com/fasterxml/jackson/databind/deser/BeanDeserializerFactory.java
    com/fasterxml/jackson/databind/deser/BuilderBasedDeserializer.java
    com/fasterxml/jackson/databind/deser/CreatorProperty.java
    com/fasterxml/jackson/databind/deser/DefaultDeserializationContext.java
    com/fasterxml/jackson/databind/deser/DeserializationProblemHandler.java
    com/fasterxml/jackson/databind/deser/DeserializerCache.java
    com/fasterxml/jackson/databind/deser/SettableAnyProperty.java
    com/fasterxml/jackson/databind/deser/SettableBeanProperty.java
    com/fasterxml/jackson/databind/deser/ValueInstantiator.java
    com/fasterxml/jackson/databind/deser/impl/BeanAsArrayBuilderDeserializer.java
    com/fasterxml/jackson/databind/deser/impl/BeanAsArrayDeserializer.java
    com/fasterxml/jackson/databind/deser/impl/BeanPropertyMap.java
    com/fasterxml/jackson/databind/deser/impl/CreatorCollector.java
    com/fasterxml/jackson/databind/deser/impl/ErrorThrowingDeserializer.java
    com/fasterxml/jackson/databind/deser/impl/ExternalTypeHandler.java
    com/fasterxml/jackson/databind/deser/impl/FailingDeserializer.java
    com/fasterxml/jackson/databind/deser/impl/FieldProperty.java
    com/fasterxml/jackson/databind/deser/impl/InnerClassProperty.java
    com/fasterxml/jackson/databind/deser/impl/ManagedReferenceProperty.java
    com/fasterxml/jackson/databind/deser/impl/MergingSettableBeanProperty.java
    com/fasterxml/jackson/databind/deser/impl/MethodProperty.java
    com/fasterxml/jackson/databind/deser/impl/NullsAsEmptyProvider.java
    com/fasterxml/jackson/databind/deser/impl/NullsConstantProvider.java
    com/fasterxml/jackson/databind/deser/impl/NullsFailProvider.java
    com/fasterxml/jackson/databind/deser/impl/ObjectIdReader.java
    com/fasterxml/jackson/databind/deser/impl/ObjectIdReferenceProperty.java
    com/fasterxml/jackson/databind/deser/impl/ObjectIdValueProperty.java
    com/fasterxml/jackson/databind/deser/impl/PropertyBasedCreator.java
    com/fasterxml/jackson/databind/deser/impl/PropertyValue.java
    com/fasterxml/jackson/databind/deser/impl/PropertyValueBuffer.java
    com/fasterxml/jackson/databind/deser/impl/ReadableObjectId.java
    com/fasterxml/jackson/databind/deser/impl/SetterlessProperty.java
    com/fasterxml/jackson/databind/deser/impl/TypeWrappedDeserializer.java
    com/fasterxml/jackson/databind/deser/impl/UnwrappedPropertyHandler.java
    com/fasterxml/jackson/databind/deser/impl/ValueInjector.java
    com/fasterxml/jackson/databind/deser/std/ArrayBlockingQueueDeserializer.java
    com/fasterxml/jackson/databind/deser/std/AtomicBooleanDeserializer.java
    com/fasterxml/jackson/databind/deser/std/BaseNodeDeserializer.java
    com/fasterxml/jackson/databind/deser/std/ByteBufferDeserializer.java
    com/fasterxml/jackson/databind/deser/std/CollectionDeserializer.java
    com/fasterxml/jackson/databind/deser/std/ContainerDeserializerBase.java
    com/fasterxml/jackson/databind/deser/std/DateDeserializers.java
    com/fasterxml/jackson/databind/deser/std/EnumDeserializer.java
    com/fasterxml/jackson/databind/deser/std/EnumMapDeserializer.java
    com/fasterxml/jackson/databind/deser/std/EnumSetDeserializer.java
    com/fasterxml/jackson/databind/deser/std/FactoryBasedEnumDeserializer.java
    com/fasterxml/jackson/databind/deser/std/FromStringDeserializer.java
    com/fasterxml/jackson/databind/deser/std/JsonNodeDeserializer.java
    com/fasterxml/jackson/databind/deser/std/MapDeserializer.java
    com/fasterxml/jackson/databind/deser/std/MapEntryDeserializer.java
    com/fasterxml/jackson/databind/deser/std/NullifyingDeserializer.java
    com/fasterxml/jackson/databind/deser/std/NumberDeserializers.java
    com/fasterxml/jackson/databind/deser/std/ObjectArrayDeserializer.java
    com/fasterxml/jackson/databind/deser/std/PrimitiveArrayDeserializers.java
    com/fasterxml/jackson/databind/deser/std/ReferenceTypeDeserializer.java
    com/fasterxml/jackson/databind/deser/std/StackTraceElementDeserializer.java
    com/fasterxml/jackson/databind/deser/std/StdDelegatingDeserializer.java
    com/fasterxml/jackson/databind/deser/std/StdDeserializer.java
    com/fasterxml/jackson/databind/deser/std/StdKeyDeserializer.java
    com/fasterxml/jackson/databind/deser/std/StdKeyDeserializers.java
    com/fasterxml/jackson/databind/deser/std/StdScalarDeserializer.java
    com/fasterxml/jackson/databind/deser/std/StdValueInstantiator.java
    com/fasterxml/jackson/databind/deser/std/StringArrayDeserializer.java
    com/fasterxml/jackson/databind/deser/std/StringCollectionDeserializer.java
    com/fasterxml/jackson/databind/deser/std/StringDeserializer.java
    com/fasterxml/jackson/databind/deser/std/ThrowableDeserializer.java
    com/fasterxml/jackson/databind/deser/std/TokenBufferDeserializer.java
    com/fasterxml/jackson/databind/deser/std/UUIDDeserializer.java
    com/fasterxml/jackson/databind/deser/std/UntypedObjectDeserializer.java
    com/fasterxml/jackson/databind/ext/Java7SupportImpl.java
    com/fasterxml/jackson/databind/ext/NioPathDeserializer.java
    com/fasterxml/jackson/databind/ext/NioPathSerializer.java
    com/fasterxml/jackson/databind/ext/OptionalHandlerFactory.java
    com/fasterxml/jackson/databind/introspect/AnnotatedConstructor.java
    com/fasterxml/jackson/databind/introspect/AnnotatedField.java
    com/fasterxml/jackson/databind/introspect/AnnotatedMember.java
    com/fasterxml/jackson/databind/introspect/AnnotatedMethod.java
    com/fasterxml/jackson/databind/introspect/AnnotationCollector.java
    com/fasterxml/jackson/databind/introspect/BasicClassIntrospector.java
    com/fasterxml/jackson/databind/introspect/ConcreteBeanPropertyBase.java
    com/fasterxml/jackson/databind/introspect/JacksonAnnotationIntrospector.java
    com/fasterxml/jackson/databind/introspect/NopAnnotationIntrospector.java
    com/fasterxml/jackson/databind/introspect/SimpleMixInResolver.java
    com/fasterxml/jackson/databind/introspect/VirtualAnnotatedMember.java
    com/fasterxml/jackson/databind/introspect/VisibilityChecker.java
    com/fasterxml/jackson/databind/jsontype/NamedType.java
    com/fasterxml/jackson/databind/jsontype/TypeDeserializer.java
    com/fasterxml/jackson/databind/jsontype/TypeIdResolver.java
    com/fasterxml/jackson/databind/jsontype/TypeSerializer.java
    com/fasterxml/jackson/databind/jsontype/impl/AsArrayTypeDeserializer.java
    com/fasterxml/jackson/databind/jsontype/impl/AsPropertyTypeDeserializer.java
    com/fasterxml/jackson/databind/jsontype/impl/AsWrapperTypeDeserializer.java
    com/fasterxml/jackson/databind/jsontype/impl/ClassNameIdResolver.java
    com/fasterxml/jackson/databind/jsontype/impl/MinimalClassNameIdResolver.java
    com/fasterxml/jackson/databind/jsontype/impl/StdSubtypeResolver.java
    com/fasterxml/jackson/databind/jsontype/impl/TypeDeserializerBase.java
    com/fasterxml/jackson/databind/jsontype/impl/TypeSerializerBase.java
    com/fasterxml/jackson/databind/node/ArrayNode.java
    com/fasterxml/jackson/databind/node/BaseJsonNode.java
    com/fasterxml/jackson/databind/node/BigIntegerNode.java
    com/fasterxml/jackson/databind/node/BinaryNode.java
    com/fasterxml/jackson/databind/node/BooleanNode.java
    com/fasterxml/jackson/databind/node/DecimalNode.java
    com/fasterxml/jackson/databind/node/DoubleNode.java
    com/fasterxml/jackson/databind/node/FloatNode.java
    com/fasterxml/jackson/databind/node/IntNode.java
    com/fasterxml/jackson/databind/node/JsonNodeFactory.java
    com/fasterxml/jackson/databind/node/LongNode.java
    com/fasterxml/jackson/databind/node/NullNode.java
    com/fasterxml/jackson/databind/node/ObjectNode.java
    com/fasterxml/jackson/databind/node/POJONode.java
    com/fasterxml/jackson/databind/node/TextNode.java
    com/fasterxml/jackson/databind/node/ValueNode.java
    com/fasterxml/jackson/databind/ser/BasicSerializerFactory.java
    com/fasterxml/jackson/databind/ser/BeanPropertyWriter.java
    com/fasterxml/jackson/databind/ser/BeanSerializer.java
    com/fasterxml/jackson/databind/ser/BeanSerializerFactory.java
    com/fasterxml/jackson/databind/ser/DefaultSerializerProvider.java
    com/fasterxml/jackson/databind/ser/PropertyWriter.java
    com/fasterxml/jackson/databind/ser/VirtualBeanPropertyWriter.java
    com/fasterxml/jackson/databind/ser/impl/BeanAsArraySerializer.java
    com/fasterxml/jackson/databind/ser/impl/FailingSerializer.java
    com/fasterxml/jackson/databind/ser/impl/FilteredBeanPropertyWriter.java
    com/fasterxml/jackson/databind/ser/impl/IndexedListSerializer.java
    com/fasterxml/jackson/databind/ser/impl/IndexedStringListSerializer.java
    com/fasterxml/jackson/databind/ser/impl/IteratorSerializer.java
    com/fasterxml/jackson/databind/ser/impl/MapEntrySerializer.java
    com/fasterxml/jackson/databind/ser/impl/StringArraySerializer.java
    com/fasterxml/jackson/databind/ser/impl/StringCollectionSerializer.java
    com/fasterxml/jackson/databind/ser/impl/TypeWrappedSerializer.java
    com/fasterxml/jackson/databind/ser/impl/UnknownSerializer.java
    com/fasterxml/jackson/databind/ser/impl/UnwrappingBeanPropertyWriter.java
    com/fasterxml/jackson/databind/ser/impl/UnwrappingBeanSerializer.java
    com/fasterxml/jackson/databind/ser/impl/WritableObjectId.java
    com/fasterxml/jackson/databind/ser/std/ArraySerializerBase.java
    com/fasterxml/jackson/databind/ser/std/AsArraySerializerBase.java
    com/fasterxml/jackson/databind/ser/std/BeanSerializerBase.java
    com/fasterxml/jackson/databind/ser/std/BooleanSerializer.java
    com/fasterxml/jackson/databind/ser/std/ByteArraySerializer.java
    com/fasterxml/jackson/databind/ser/std/ByteBufferSerializer.java
    com/fasterxml/jackson/databind/ser/std/CalendarSerializer.java
    com/fasterxml/jackson/databind/ser/std/ClassSerializer.java
    com/fasterxml/jackson/databind/ser/std/CollectionSerializer.java
    com/fasterxml/jackson/databind/ser/std/DateSerializer.java
    com/fasterxml/jackson/databind/ser/std/DateTimeSerializerBase.java
    com/fasterxml/jackson/databind/ser/std/EnumSerializer.java
    com/fasterxml/jackson/databind/ser/std/EnumSetSerializer.java
    com/fasterxml/jackson/databind/ser/std/FileSerializer.java
    com/fasterxml/jackson/databind/ser/std/InetAddressSerializer.java
    com/fasterxml/jackson/databind/ser/std/InetSocketAddressSerializer.java
    com/fasterxml/jackson/databind/ser/std/IterableSerializer.java
    com/fasterxml/jackson/databind/ser/std/JsonValueSerializer.java
    com/fasterxml/jackson/databind/ser/std/MapSerializer.java
    com/fasterxml/jackson/databind/ser/std/NullSerializer.java
    com/fasterxml/jackson/databind/ser/std/NumberSerializer.java
    com/fasterxml/jackson/databind/ser/std/NumberSerializers.java
    com/fasterxml/jackson/databind/ser/std/ObjectArraySerializer.java
    com/fasterxml/jackson/databind/ser/std/RawSerializer.java
    com/fasterxml/jackson/databind/ser/std/ReferenceTypeSerializer.java
    com/fasterxml/jackson/databind/ser/std/SerializableSerializer.java
    com/fasterxml/jackson/databind/ser/std/SqlDateSerializer.java
    com/fasterxml/jackson/databind/ser/std/SqlTimeSerializer.java
    com/fasterxml/jackson/databind/ser/std/StdArraySerializers.java
    com/fasterxml/jackson/databind/ser/std/StdDelegatingSerializer.java
    com/fasterxml/jackson/databind/ser/std/StdJdkSerializers.java
    com/fasterxml/jackson/databind/ser/std/StdKeySerializer.java
    com/fasterxml/jackson/databind/ser/std/StdKeySerializers.java
    com/fasterxml/jackson/databind/ser/std/StdScalarSerializer.java
    com/fasterxml/jackson/databind/ser/std/StdSerializer.java
    com/fasterxml/jackson/databind/ser/std/StringSerializer.java
    com/fasterxml/jackson/databind/ser/std/TimeZoneSerializer.java
    com/fasterxml/jackson/databind/ser/std/ToStringSerializer.java
    com/fasterxml/jackson/databind/ser/std/TokenBufferSerializer.java
    com/fasterxml/jackson/databind/ser/std/UUIDSerializer.java
    com/fasterxml/jackson/databind/type/ClassKey.java
    com/fasterxml/jackson/databind/type/TypeBase.java
    com/fasterxml/jackson/databind/type/TypeBindings.java
    com/fasterxml/jackson/databind/type/TypeFactory.java
    com/fasterxml/jackson/databind/type/TypeParser.java
    com/fasterxml/jackson/databind/util/ByteBufferBackedInputStream.java
    com/fasterxml/jackson/databind/util/ByteBufferBackedOutputStream.java
    com/fasterxml/jackson/databind/util/ClassUtil.java
    com/fasterxml/jackson/databind/util/CompactStringObjectMap.java
    com/fasterxml/jackson/databind/util/ConstantValueInstantiator.java
    com/fasterxml/jackson/databind/util/EnumResolver.java
    com/fasterxml/jackson/databind/util/EnumValues.java
    com/fasterxml/jackson/databind/util/LRUMap.java
    com/fasterxml/jackson/databind/util/NameTransformer.java
    com/fasterxml/jackson/databind/util/RawValue.java
    com/fasterxml/jackson/databind/util/RootNameLookup.java
    com/fasterxml/jackson/databind/util/TokenBuffer.java
    com/fasterxml/jackson/databind/util/ViewMatcher.java
    com/flurry/sdk/a.java
    com/flurry/sdk/b2.java
    com/flurry/sdk/b7.java
    com/flurry/sdk/c2.java
    com/flurry/sdk/c7.java
    com/flurry/sdk/f.java
    com/flurry/sdk/f2.java
    com/flurry/sdk/g.java
    com/flurry/sdk/h.java
    com/flurry/sdk/i.java
    com/flurry/sdk/i1.java
    com/flurry/sdk/j.java
    com/flurry/sdk/j2.java
    com/flurry/sdk/k.java
    com/flurry/sdk/k1.java
    com/flurry/sdk/k2.java
    com/flurry/sdk/m3.java
    com/flurry/sdk/n3.java
    com/flurry/sdk/n7.java
    com/flurry/sdk/o3.java
    com/flurry/sdk/o7.java
    com/flurry/sdk/p0.java
    com/flurry/sdk/p2.java
    com/flurry/sdk/q0.java
    com/flurry/sdk/q2.java
    com/flurry/sdk/r0.java
    com/flurry/sdk/r1.java
    com/flurry/sdk/s0.java
    com/flurry/sdk/s1.java
    com/flurry/sdk/t1.java
    com/flurry/sdk/u1.java
    com/flurry/sdk/v0.java
    com/flurry/sdk/v1.java
    com/flurry/sdk/w.java
    com/flurry/sdk/w1.java
    com/flurry/sdk/w2.java
    com/flurry/sdk/x1.java
    com/flurry/sdk/x6.java
    com/flurry/sdk/z6.java
    com/liulishuo/filedownloader/exception/FileDownloadOutOfSpaceException.java
    com/liulishuo/filedownloader/message/c.java
    com/liulishuo/filedownloader/services/b.java
    com/liulishuo/filedownloader/services/h.java
    com/liulishuo/filedownloader/services/i.java
    io/rakam/api/b.java
    io/rakam/api/d.java
    io/rakam/api/e.java
    io/rakam/api/h.java
    io/rakam/api/k.java
    io/sentry/connection/b.java
    io/sentry/connection/c.java
    io/sentry/connection/d.java
    io/sentry/connection/g.java
    io/sentry/connection/i.java
    io/sentry/connection/j.java
    io/sentry/dsn/a.java
    l/a/l/a/a.java
    l/a/o/g.java
    l/h/e/e.java
    l/h/e/g.java
    l/h/e/i.java
    l/h/e/j.java
    l/h/e/k.java
    l/h/k/b.java
    l/h/k/i.java
    l/l/a/a.java
    l/l/a/b.java
    l/l/b/a.java
    l/l/b/b.java
    l/n/a.java
    l/n/b.java
    l/n/c.java
    l/q/a/b.java
    l/q/a/c.java
    l/q/a/d.java
    l/q/a/g/a.java
    l/t/a/a/c.java
    l/t/a/a/d.java
    l/t/a/a/e.java
    l/t/a/a/i.java
    m/a/a/a.java
    n/f/a/a/a.java
    n/g/b/b.java
    n/h/a/b0/a.java
    n/h/a/b0/b.java
    n/h/a/c.java
    n/h/a/d.java
    n/h/a/e0/a.java
    n/h/a/e0/b.java
    n/h/a/f0/c.java
    n/h/a/f0/e.java
    n/h/a/f0/f.java
    n/h/a/q.java
    q/a/d0/j/m.java
    q/b/a.java
    q/b/f.java
    q/b/g/b.java
    q/b/g/d/a/a.java
    q/b/h/b.java
    q/b/i/a.java
    q/b/i/b.java
    q/b/i/c.java
    q/b/i/d.java
    q/b/i/e.java
    q/b/i/g/f.java
    q/b/i/g/g.java
    q/b/j/a.java
    q/b/l/a.java
    q/b/l/b.java
    q/b/l/d.java
    q/b/l/e.java
    q/b/l/g/a.java
    q/b/l/g/c.java
    q/b/l/g/g.java
    q/b/l/g/h.java
    q/b/l/g/i.java
    q/b/n/a.java
    q/b/n/b/a.java
    q/b/n/b/b.java
    q/b/n/b/c.java
    q/b/n/b/d.java
    q/b/n/b/e.java
    q/b/n/b/f.java
    q/b/n/b/g.java
    q/b/n/b/h.java
    q/b/n/b/i.java
    q/b/q/a.java
    r/a/a.java
    r/a/g/b.java
    r/a/g/c.java
    r/a/g/f.java
    r/a/g/h.java
    r/a/g/i.java
    r/a/g/k.java
    r/a/g/l.java
    r/a/g/q.java
    r/a/g/r.java
    r/a/g/t/a.java
    r/a/g/t/d/a.java
    r/a/g/t/d/b.java
    r/a/g/t/d/c.java
    r/a/g/t/e/a.java
    r/a/g/t/e/b.java
    r/a/g/t/e/c.java
    r/a/g/t/e/d.java
    r/a/g/t/e/e.java
    rx/exceptions/CompositeException.java
    rx/exceptions/OnErrorThrowable.java
    rx/n/a/h.java
    rx/n/e/h.java
    rx/q/c.java
    s/a0.java
    s/b0.java
    s/d.java
    s/f.java
    s/g.java
    s/h.java
    s/i.java
    s/j.java
    s/k.java
    s/l.java
    s/m.java
    s/n.java
    s/o.java
    s/p.java
    s/r.java
    s/u.java
    s/y.java
    s/z.java
    t/b/c.java
    t/b/e.java
    t/b/g/g.java
    t/b/g/j.java
    t/b/h/a.java
    一般功能-> 获取系统服务(getSystemService)
    cm/aptoide/pt/ApplicationModule.java
    cm/aptoide/pt/AptoideApplication.java
    cm/aptoide/pt/DeepLinkIntentReceiver.java
    cm/aptoide/pt/NotificationApplicationView.java
    cm/aptoide/pt/app/view/AppViewFragment.java
    cm/aptoide/pt/app/view/donations/view/DonateDialogFragment.java
    cm/aptoide/pt/comments/view/CommentListFragment.java
    cm/aptoide/pt/home/bundles/ads/AdsBundleViewHolder.java
    cm/aptoide/pt/home/bundles/appcoins/EarnAppCoinsViewHolder.java
    cm/aptoide/pt/home/bundles/appcoins/FeaturedAppcViewHolder.java
    cm/aptoide/pt/home/bundles/apps/AppsBundleViewHolder.java
    cm/aptoide/pt/home/bundles/apps/EskillsAppsBundleViewHolder.java
    cm/aptoide/pt/home/bundles/editorschoice/EditorsBundleViewHolder.java
    cm/aptoide/pt/install/remote/RemoteInstallationSenderManager.java
    cm/aptoide/pt/networking/image/ImageLoader.java
    cm/aptoide/pt/notification/ComingSoonNotificationManager.java
    cm/aptoide/pt/notification/NotificationReceiver.java
    cm/aptoide/pt/notification/PullingContentService.java
    cm/aptoide/pt/notification/UpdatesNotificationManager.java
    cm/aptoide/pt/permission/PermissionServiceActivity.java
    cm/aptoide/pt/promotions/ClaimPromotionDialogFragment.java
    cm/aptoide/pt/reactions/ui/ReactionsView.java
    cm/aptoide/pt/store/view/StoreFragment.java
    cm/aptoide/pt/store/view/StoreTabWidgetsGridRecyclerFragment.java
    cm/aptoide/pt/store/view/ads/GetAdsFragment.java
    cm/aptoide/pt/store/view/my/MyStoresSubscribedFragment.java
    cm/aptoide/pt/util/ReferrerUtils.java
    cm/aptoide/pt/utils/AptoideUtils.java
    cm/aptoide/pt/view/ActivityModule.java
    cm/aptoide/pt/view/app/ListStoreAppsFragment.java
    cm/aptoide/pt/view/fragment/AptoideBaseFragment.java
    cm/aptoide/pt/view/fragment/FragmentView.java
    cm/aptoide/pt/view/fragment/GridRecyclerFragment.java
    cm/aptoide/pt/view/settings/MyAccountFragment.java
    cm/aptoide/pt/view/settings/SettingsFragment.java
    com/bumptech/glide/load/engine/a0/i.java
    com/bumptech/glide/m/e.java
    com/bumptech/glide/p/l/f.java
    com/bumptech/glide/p/l/j.java
    com/flurry/sdk/i4.java
    com/flurry/sdk/p1.java
    com/flurry/sdk/u.java
    com/flurry/sdk/w.java
    io/rakam/api/d.java
    l/a/o/d.java
    l/h/l/v.java
    l/i/a/c.java
    l/j/a/a.java
    n/h/a/f0/f.java
    q/b/g/d/a/a.java
    调用java反射机制
    cm/aptoide/pt/preferences/PRNGFixes.java
    cm/aptoide/pt/root/containers/RootClass.java
    cm/aptoide/pt/root/execution/Shell.java
    cm/aptoide/pt/utils/AptoideUtils.java
    cm/aptoide/pt/view/BaseFragment.java
    com/airbnb/epoxy/g.java
    com/bumptech/glide/c.java
    com/bumptech/glide/n/d.java
    com/fasterxml/jackson/databind/BeanDescription.java
    com/fasterxml/jackson/databind/deser/impl/FieldProperty.java
    com/fasterxml/jackson/databind/deser/impl/MethodProperty.java
    com/fasterxml/jackson/databind/deser/impl/SetterlessProperty.java
    com/fasterxml/jackson/databind/deser/std/StdKeyDeserializer.java
    com/fasterxml/jackson/databind/deser/std/StdKeyDeserializers.java
    com/fasterxml/jackson/databind/ext/Java7Support.java
    com/fasterxml/jackson/databind/ext/OptionalHandlerFactory.java
    com/fasterxml/jackson/databind/introspect/AnnotatedCreatorCollector.java
    com/fasterxml/jackson/databind/introspect/AnnotatedField.java
    com/fasterxml/jackson/databind/introspect/AnnotatedFieldCollector.java
    com/fasterxml/jackson/databind/introspect/AnnotatedMethod.java
    com/fasterxml/jackson/databind/introspect/AnnotatedMethodCollector.java
    com/fasterxml/jackson/databind/introspect/BasicBeanDescription.java
    com/fasterxml/jackson/databind/introspect/JacksonAnnotationIntrospector.java
    com/fasterxml/jackson/databind/introspect/MemberKey.java
    com/fasterxml/jackson/databind/introspect/VirtualAnnotatedMember.java
    com/fasterxml/jackson/databind/introspect/VisibilityChecker.java
    com/fasterxml/jackson/databind/ser/BeanPropertyWriter.java
    com/fasterxml/jackson/databind/type/TypeFactory.java
    com/fasterxml/jackson/databind/util/ClassUtil.java
    com/flurry/sdk/h2.java
    com/flurry/sdk/o.java
    io/rakam/api/d.java
    l/a/o/g.java
    l/h/e/e.java
    l/h/e/f.java
    l/h/e/g.java
    l/h/e/h.java
    l/h/e/j.java
    l/h/j/b.java
    l/h/l/d0.java
    l/h/l/e.java
    l/h/l/f.java
    l/h/l/v.java
    l/h/l/w.java
    l/n/a.java
    l/s/i0.java
    l/s/y.java
    org/parceler/b.java
    q/b/a.java
    q/b/d.java
    q/b/i/g/e.java
    q/b/m/a.java
    rx/n/c/h.java
    rx/n/e/g.java
    rx/n/e/o/z.java
    rx/q/f.java
    s/i.java
    t/b/g/h.java
    隐私数据-> 获取GPS位置信息
    加密解密-> 信息摘要算法
    一般功能-> IPC通信
    cm/aptoide/aptoideviews/filters/Filter.java
    cm/aptoide/pt/ApplicationComponent.java
    cm/aptoide/pt/ApplicationModule.java
    cm/aptoide/pt/AptoideApplication.java
    cm/aptoide/pt/DaggerApplicationComponent.java
    cm/aptoide/pt/DeepLinkIntentReceiver.java
    cm/aptoide/pt/FirstLaunchManager.java
    cm/aptoide/pt/UserFeedbackAnalytics.java
    cm/aptoide/pt/account/AccountAuthenticator.java
    cm/aptoide/pt/account/AccountAuthenticatorService.java
    cm/aptoide/pt/account/FacebookSignUpAdapter.java
    cm/aptoide/pt/account/view/GooglePlayServicesFragment.java
    cm/aptoide/pt/account/view/LoginActivity.java
    cm/aptoide/pt/account/view/magiclink/CheckYourEmailNavigator.java
    cm/aptoide/pt/app/PromotionViewModel.java
    cm/aptoide/pt/app/view/AppViewFragment.java
    cm/aptoide/pt/app/view/AppViewNavigator.java
    cm/aptoide/pt/app/view/donations/utils/GenericPaymentIntentBuilder.java
    cm/aptoide/pt/app/view/donations/view/DonateDialogFragment.java
    cm/aptoide/pt/app/view/donations/view/DonateDialogPresenter.java
    cm/aptoide/pt/app/view/donations/view/DonateDialogView.java
    cm/aptoide/pt/app/view/screenshots/ScreenshotsViewerFragment.java
    cm/aptoide/pt/autoupdate/AutoUpdateModel.java
    cm/aptoide/pt/bottomNavigation/BottomNavigationAnalytics.java
    cm/aptoide/pt/database/room/AptoideDatabase_Impl.java
    cm/aptoide/pt/database/room/LocalNotificationSyncDao_Impl.java
    cm/aptoide/pt/dataprovider/ws/v3/PushNotificationsRequest.java
    cm/aptoide/pt/download/view/Download.java
    cm/aptoide/pt/download/view/DownloadNavigator.java
    cm/aptoide/pt/download/view/outofspace/OutOfSpaceNavigator.java
    cm/aptoide/pt/home/ChipManager.java
    cm/aptoide/pt/home/HomeFragment.java
    cm/aptoide/pt/home/bundles/appcoins/FeaturedAppcBundleAdapter.java
    cm/aptoide/pt/home/bundles/base/FeaturedAppcBundle.java
    cm/aptoide/pt/home/more/appcoins/EarnAppcNavigator.java
    cm/aptoide/pt/home/more/base/ListAppsAdapter.java
    cm/aptoide/pt/home/more/base/ListAppsFragment.java
    cm/aptoide/pt/home/more/base/ListAppsPresenter.java
    cm/aptoide/pt/home/more/base/ListAppsView.java
    cm/aptoide/pt/install/CheckRootOnBoot.java
    cm/aptoide/pt/install/DownloadService.java
    cm/aptoide/pt/install/InstallManager.java
    cm/aptoide/pt/install/InstalledBroadcastReceiver.java
    cm/aptoide/pt/install/InstalledIntentService.java
    cm/aptoide/pt/install/InstalledIntentService_MembersInjector.java
    cm/aptoide/pt/install/RootInstallNotificationEventReceiver.java
    cm/aptoide/pt/install/installer/DefaultInstaller.java
    cm/aptoide/pt/install/installer/RootInstallErrorNotification.java
    cm/aptoide/pt/install/installer/RootInstallErrorNotificationFactory.java
    cm/aptoide/pt/install/view/remote/RemoteInstallDialog.java
    cm/aptoide/pt/link/AptoideInstallParser.java
    cm/aptoide/pt/link/CustomTabNativeReceiver.java
    cm/aptoide/pt/link/CustomTabsHelper.java
    cm/aptoide/pt/navigator/ActivityNavigator.java
    cm/aptoide/pt/navigator/ActivityResultNavigator.java
    cm/aptoide/pt/navigator/Result.java
    cm/aptoide/pt/notification/ComingSoonNotificationWorker.java
    cm/aptoide/pt/notification/ContentPuller.java
    cm/aptoide/pt/notification/NotificationReceiver.java
    cm/aptoide/pt/notification/PullingContentService.java
    cm/aptoide/pt/notification/ReadyToInstallNotificationManager.java
    cm/aptoide/pt/notification/SystemNotificationShower.java
    cm/aptoide/pt/notification/UpdatesNotificationWorker.java
    cm/aptoide/pt/packageinstaller/AppInstaller.java
    cm/aptoide/pt/packageinstaller/InstallResultReceiver.java
    cm/aptoide/pt/presenter/MainPresenter.java
    cm/aptoide/pt/presenter/MainView.java
    cm/aptoide/pt/promotions/ClaimPromotionDialogFragment.java
    cm/aptoide/pt/promotions/ClaimPromotionDialogPresenter.java
    cm/aptoide/pt/promotions/ClaimPromotionDialogView.java
    cm/aptoide/pt/promotions/ClaimPromotionsNavigator.java
    cm/aptoide/pt/promotions/WalletApp.java
    cm/aptoide/pt/root/RootShell.java
    cm/aptoide/pt/root/execution/Shell.java
    cm/aptoide/pt/search/analytics/SearchAnalytics.java
    cm/aptoide/pt/share/ShareStoreHelper.java
    cm/aptoide/pt/store/view/AddStoreDialog.java
    cm/aptoide/pt/store/view/StoreFragment.java
    cm/aptoide/pt/themes/NewFeature.java
    cm/aptoide/pt/toolbox/ToolboxContentProvider.java
    cm/aptoide/pt/util/ApkFyManager.java
    cm/aptoide/pt/util/ApkfyParameters.java
    cm/aptoide/pt/util/ReferrerUtils.java
    cm/aptoide/pt/utils/AptoideUtils.java
    cm/aptoide/pt/utils/BroadcastRegisterOnSubscribe.java
    cm/aptoide/pt/view/ActivityModule.java
    cm/aptoide/pt/view/BaseActivity.java
    cm/aptoide/pt/view/DeepLinkManager.java
    cm/aptoide/pt/view/MainActivity.java
    cm/aptoide/pt/view/feedback/SendFeedbackFragment.java
    cm/aptoide/pt/view/fragment/FragmentView.java
    cm/aptoide/pt/view/recycler/widget/GridDisplayWidget.java
    cm/aptoide/pt/widget/SearchWidgetProvider.java
    com/airbnb/lottie/u/t.java
    com/asf/appcoins/sdk/core/util/AndroidUtils.java
    com/asf/appcoins/sdk/core/util/wallet/WalletUtils.java
    com/bumptech/glide/m/e.java
    com/flurry/sdk/i4.java
    com/flurry/sdk/j0.java
    com/flurry/sdk/q.java
    com/flurry/sdk/s.java
    com/flurry/sdk/w.java
    com/liulishuo/filedownloader/services/FileDownloadService.java
    com/liulishuo/filedownloader/services/a.java
    com/liulishuo/filedownloader/services/e.java
    com/liulishuo/filedownloader/services/f.java
    com/liulishuo/filedownloader/services/k.java
    io/rakam/api/b.java
    k/a/a/a.java
    k/b/a/a.java
    k/b/a/b.java
    l/c/b/b.java
    l/c/b/c.java
    l/c/b/d.java
    l/c/b/e.java
    l/m/a/a.java
    l/s/k0.java
    n/c/a/a/a/a/a.java
    n/e/b/a/a/a.java
    n/h/a/d0/a.java
    n/h/a/d0/b.java
    n/h/a/n.java
    n/h/a/o.java
    org/parceler/NonParcelRepository.java
    q/b/g/d/a/a.java
    q/b/n/b/i.java
    隐私数据-> 剪贴板数据读写操作 cm/aptoide/pt/promotions/ClaimPromotionDialogFragment.java
    组件-> 启动 Activity
    网络通信-> OkHttpClient Connection
    cm/aptoide/analytics/implementation/loggers/HttpKnockEventLogger.java
    cm/aptoide/pt/ApplicationModule.java
    cm/aptoide/pt/AptoideApplication.java
    cm/aptoide/pt/abtesting/ABTestServiceProvider.java
    cm/aptoide/pt/app/view/AppViewFragment.java
    cm/aptoide/pt/app/view/OtherVersionsFragment.java
    cm/aptoide/pt/comments/view/CommentListFragment.java
    cm/aptoide/pt/dataprovider/WebService.java
    cm/aptoide/pt/dataprovider/ads/AdNetworkUtils.java
    cm/aptoide/pt/dataprovider/ws/v7/GetAppMetaRequest.java
    cm/aptoide/pt/dataprovider/ws/v7/GetEskillsAppsRequest.java
    cm/aptoide/pt/dataprovider/ws/v7/ListAppsRequest.java
    cm/aptoide/pt/dataprovider/ws/v7/ListFullReviewsRequest.java
    cm/aptoide/pt/dataprovider/ws/v7/home/GetActionItemRequest.java
    cm/aptoide/pt/dataprovider/ws/v7/store/GetHomeMetaRequest.java
    cm/aptoide/pt/dataprovider/ws/v7/store/GetMyStoreListRequest.java
    cm/aptoide/pt/dataprovider/ws/v7/store/GetRecommendedStoresRequest.java
    cm/aptoide/pt/dataprovider/ws/v7/store/GetStoreDisplaysRequest.java
    cm/aptoide/pt/dataprovider/ws/v7/store/GetStoreMetaRequest.java
    cm/aptoide/pt/dataprovider/ws/v7/store/GetStoreRequest.java
    cm/aptoide/pt/dataprovider/ws/v7/store/GetStoreWidgetsRequest.java
    cm/aptoide/pt/dataprovider/ws/v7/store/GetUserRequest.java
    cm/aptoide/pt/dataprovider/ws/v7/store/ListStoresRequest.java
    cm/aptoide/pt/reviews/LatestReviewsFragment.java
    cm/aptoide/pt/reviews/RateAndReviewsFragment.java
    cm/aptoide/pt/store/view/StoreFragment.java
    cm/aptoide/pt/timeline/view/follow/TimeLineFollowersFragment.java
    cm/aptoide/pt/timeline/view/follow/TimeLineFollowingFragment.java
    cm/aptoide/pt/view/fragment/DescriptionFragment.java
    cm/aptoide/pt/view/settings/MyAccountFragment.java
    com/aptoide/authentication/network/RemoteAuthenticationService.java
    com/asf/appcoins/sdk/contractproxy/AppCoinsAddressProxyBuilder.java
    io/rakam/api/e.java
    io/rakam/api/h.java
    m/a/a/a.java
    一般功能-> 获取Android广告ID cm/aptoide/pt/networking/IdsRepository.java
    com/flurry/sdk/f.java
    网络通信-> HTTPS建立连接 com/flurry/sdk/k1.java
    com/flurry/sdk/l1.java
    io/sentry/connection/g.java
    加密解密-> Base64 加密
    隐私数据-> 获取已安装的应用程序
    网络通信-> HTTP建立连接
    组件-> 发送广播
    网络通信-> WebView JavaScript接口 cm/aptoide/aptoideviews/video/YoutubeWebViewPlayer.java
    cm/aptoide/pt/editorial/EditorialItemsViewHolder.java
    cm/aptoide/pt/util/ReferrerUtils.java
    网络通信-> WebView 相关 cm/aptoide/aptoideviews/video/YoutubeWebViewPlayer.java
    cm/aptoide/pt/editorial/EditorialItemsViewHolder.java
    cm/aptoide/pt/util/ReferrerUtils.java
    组件-> ContentProvider cm/aptoide/pt/toolbox/ToolboxContentProvider.java
    com/flurry/android/agent/FlurryContentProvider.java
    一般功能-> 获取活动网路信息
    网络通信-> TCP套接字
    一般功能-> 获取WiFi相关信息 cm/aptoide/pt/install/remote/RemoteInstallationSenderManager.java
    敏感行为-> 检测了是否被jdb调试 q/b/g/a.java
    一般功能-> 获取网络接口信息 r/a/g/k.java
    r/a/g/o.java
    命令执行-> getRuntime.exec()
    DEX-> 动态加载 com/fasterxml/jackson/databind/util/ClassUtil.java
    org/parceler/e.java
    加密解密-> Base64 解密
    进程操作-> 获取进程pid
    网络通信-> UDP数据包
    组件-> 启动 Service
    隐私数据-> 用户账户管理
    一般功能-> Android通知 cm/aptoide/pt/notification/SystemNotificationShower.java
    com/bumptech/glide/p/l/f.java
    网络通信-> URLConnection n/h/a/b0/b.java
    加密解密-> Crypto加解密组件
    网络通信-> DefaultHttpClient Connection n/f/a/a/a.java
    辅助功能accessibility相关 l/h/l/a.java
    l/h/l/e0/c.java
    设备指纹-> getSimOperator com/flurry/sdk/w.java
    设备指纹-> 查看运营商信息 com/flurry/sdk/w.java
    一般功能-> 查询数据库(短信、联系人、通话记录、浏览器历史等) cm/aptoide/pt/account/view/ImageInfoProvider.java
    DEX-> 加载和操作Dex文件 cm/aptoide/pt/utils/MultiDexHelper.java
    l/n/a.java
    一般功能-> 查看\修改Android系统属性 cm/aptoide/pt/utils/AptoideUtils.java
    进程操作-> 获取运行的进程\服务 n/h/a/f0/f.java

    安全漏洞检测

    高危
    0
    警告
    8
    信息
    1
    安全
    3
    屏蔽
    0
    序号 问题 等级 参考标准 文件位置 操作
    1 应用程序记录日志信息,不得记录敏感信息 信息 CWE: CWE-532: 通过日志文件的信息暴露
    OWASP MASVS: MSTG-STORAGE-3
    升级会员:解锁高级权限
    2 应用程序使用不安全的随机数生成器 警告 CWE: CWE-330: 使用不充分的随机数
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-6
    升级会员:解锁高级权限
    3 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等 警告 CWE: CWE-312: 明文存储敏感信息
    OWASP Top 10: M9: Reverse Engineering
    OWASP MASVS: MSTG-STORAGE-14
    升级会员:解锁高级权限
    4 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 安全
    OWASP MASVS: MSTG-NETWORK-4
    升级会员:解锁高级权限
    5 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 警告 CWE: CWE-276: 默认权限不正确
    OWASP Top 10: M2: Insecure Data Storage
    OWASP MASVS: MSTG-STORAGE-2
    升级会员:解锁高级权限
    6 此应用程序使用Safety Net API。 安全
    OWASP MASVS: MSTG-RESILIENCE-7
    升级会员:解锁高级权限
    7 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据 警告 CWE: CWE-276: 默认权限不正确
    OWASP Top 10: M2: Insecure Data Storage
    OWASP MASVS: MSTG-STORAGE-2
    升级会员:解锁高级权限
    8 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 警告 CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当('SQL 注入')
    OWASP Top 10: M7: Client Code Quality
    升级会员:解锁高级权限
    9 此应用程序可能具有Root检测功能 安全
    OWASP MASVS: MSTG-RESILIENCE-1
    升级会员:解锁高级权限
    10 SHA-1是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-4
    升级会员:解锁高级权限
    11 IP地址泄露 警告 CWE: CWE-200: 信息泄露
    OWASP MASVS: MSTG-CODE-2
    升级会员:解锁高级权限
    12 MD5是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-4
    升级会员:解锁高级权限

    Native库安全分析

    No Shared Objects found.
    序号 动态库 NX(堆栈禁止执行) PIE STACK CANARY(栈保护) RELRO RPATH(指定SO搜索路径) RUNPATH(指定SO搜索路径) FORTIFY(常用函数加强检查) SYMBOLS STRIPPED(裁剪符号表)

    文件分析

    序号 问题 文件
    1 应用程序中硬编码的证书/密钥文件 res/raw/vanilla_cert.pem

    敏感权限分析

    恶意软件常用权限 4/30
    android.permission.WAKE_LOCK
    android.permission.RECEIVE_BOOT_COMPLETED
    android.permission.GET_ACCOUNTS
    android.permission.CAMERA
    其它常用权限 8/46
    com.android.launcher.permission.INSTALL_SHORTCUT
    android.permission.ACCESS_WIFI_STATE
    android.permission.AUTHENTICATE_ACCOUNTS
    android.permission.INTERNET
    android.permission.READ_EXTERNAL_STORAGE
    android.permission.WRITE_EXTERNAL_STORAGE
    android.permission.ACCESS_NETWORK_STATE
    com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

    恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
    其它常用权限 是已知恶意软件经常滥用的权限。

    IP地理位置

    恶意域名检测

    域名 状态 中国境内 位置信息 解析
    diagnostics.rakam.io 安全
    IP地址: 104.21.35.78
    国家: United States of America
    地区: California
    城市: San Francisco
    查看: Google 地图

    ws75.aptoide.com 安全
    IP地址: 34.255.90.131
    国家: Ireland
    地区: Dublin
    城市: Dublin
    查看: Google 地图

    pool.img.aptoide.com 安全
    IP地址: 104.22.11.83
    国家: United States of America
    地区: California
    城市: San Francisco
    查看: Google 地图

    apichain-dev.blockchainds.com 安全
    没有可用的地理位置信息。
    api.blockchainds.com 安全
    IP地址: 52.213.26.15
    国家: Ireland
    地区: Dublin
    城市: Dublin
    查看: Google 地图

    api.aptoide.com 安全
    IP地址: 52.50.179.203
    国家: Ireland
    地区: Dublin
    城市: Dublin
    查看: Google 地图

    blog.aptoide.com 安全
    IP地址: 37.48.77.171
    国家: Netherlands
    地区: Noord-Holland
    城市: Amsterdam
    查看: Google 地图

    api.indicative.com 安全
    IP地址: 34.98.104.50
    国家: United States of America
    地区: Missouri
    城市: Kansas City
    查看: Google 地图

    data.flurry.com 安全
    IP地址: 98.136.147.16
    国家: United States of America
    地区: New York
    城市: New York City
    查看: Google 地图

    catappult.io 安全
    IP地址: 99.84.203.53
    国家: United States of America
    地区: California
    城市: Los Angeles
    查看: Google 地图

    twitter.com 安全
    IP地址: 104.244.42.65
    国家: United States of America
    地区: California
    城市: San Francisco
    查看: Google 地图

    impression.appsflyer.com 安全
    IP地址: 13.225.142.107
    国家: United States of America
    地区: California
    城市: Los Angeles
    查看: Google 地图

    ws75-primary.aptoide.com 安全
    IP地址: 37.48.77.161
    国家: Netherlands
    地区: Noord-Holland
    城市: Amsterdam
    查看: Google 地图

    webservices.aptoide.com 安全
    IP地址: 37.48.77.165
    国家: Netherlands
    地区: Noord-Holland
    城市: Amsterdam
    查看: Google 地图

    cdn6.aptoide.com 安全
    IP地址: 104.22.10.83
    国家: United States of America
    地区: California
    城市: San Francisco
    查看: Google 地图

    www.aptoide.com 安全
    IP地址: 34.242.10.185
    国家: Ireland
    地区: Dublin
    城市: Dublin
    查看: Google 地图

    aptoi.de 安全
    IP地址: 52.23.47.7
    国家: United States of America
    地区: Virginia
    城市: Ashburn
    查看: Google 地图

    apichain.blockchainds.com 安全
    IP地址: 52.211.89.149
    国家: Ireland
    地区: Dublin
    城市: Dublin
    查看: Google 地图

    placeimg.com 安全
    IP地址: 159.65.240.55
    国家: United States of America
    地区: New Jersey
    城市: Clifton
    查看: Google 地图

    sentry.aptoide.com 安全
    IP地址: 54.155.39.109
    国家: Ireland
    地区: Dublin
    城市: Dublin
    查看: Google 地图

    m.aptoide.com 安全
    IP地址: 37.48.77.180
    国家: Netherlands
    地区: Noord-Holland
    城市: Amsterdam
    查看: Google 地图

    imgs.aptoide.com 安全
    IP地址: 37.48.77.161
    国家: Netherlands
    地区: Noord-Holland
    城市: Amsterdam
    查看: Google 地图

    facebook.com 安全
    IP地址: 157.240.11.35
    国家: United States of America
    地区: California
    城市: Los Angeles
    查看: Google 地图

    docs.sentry.io 安全
    IP地址: 76.223.121.104
    国家: United States of America
    地区: Washington
    城市: Seattle
    查看: Google 地图

    手机号提取

    手机号 源码文件
    13074170746
    cm/aptoide/pt/BuildConfig.java
    13074170746
    自研引擎分析结果

    URL链接分析

    URL信息 源码文件
    https://cdn6.aptoide.com/includes/themes/2014/images/vanilla_appcoins_info_video_placeholder.svg')
    https://www.youtube.com/embed/
    cm/aptoide/aptoideviews/video/YoutubeWebViewPlayer.java
    https://3ad378b027fe45aa8bfbc5bacf56344e:1b2ec33c1a5a485bb7b111d41f17e0f8@sentry.aptoide.com/32
    9.20.6.1
    cm/aptoide/pt/BuildConfig.java
    https://catappult.io/?utm_source=vanilla
    cm/aptoide/pt/CatappultNavigator.java
    https://ws75.aptoide.com/api/7/listapps/store_name=
    cm/aptoide/pt/DeepLinkIntentReceiver.java
    https://api.blockchainds.com/
    https://impression.appsflyer.com
    http://imgs.aptoide.com/
    https://api.aptoide.com/
    cm/aptoide/pt/ApplicationModule.java
    https://webservices.aptoide.com/webservices/3/
    cm/aptoide/pt/dataprovider/ws/v3/PushNotificationsRequest.java
    https://webservices.aptoide.com/webservices/3/
    cm/aptoide/pt/dataprovider/ws/v3/V3.java
    https://ws75.aptoide.com/api/7/
    cm/aptoide/pt/dataprovider/ws/v7/GetUserInfoRequest.java
    https://ws75-primary.aptoide.com/api/7/
    cm/aptoide/pt/dataprovider/ws/v7/SetUserMultipartRequest.java
    https://ws75-primary.aptoide.com/api/7/
    cm/aptoide/pt/dataprovider/ws/v7/SetUserSettings.java
    https://ws75.aptoide.com/api/7/getstorewidgets/store_id=15/context=apps/widget=apps_list%3a0%261%3apdownloads7d
    https://ws75.aptoide.com/api/7/getstorewidgets/store_id=15/context=games/widget=apps_list%3a0%262%3adownloads7d
    cm/aptoide/pt/home/HomeContainerNavigator.java
    https://placeimg.com/640/480/any
    http://pool.img.aptoide.com/asf-store/ace60f6352f6dd9289843b5b0b2ab3d4_icon.png
    cm/aptoide/pt/home/bundles/FakeBundleDataSource.java
    http://m.aptoide.com/account/password-recovery
    cm/aptoide/pt/view/ActivityModule.java
    https://blog.aptoide.com/what-is-aptoidetv/
    cm/aptoide/pt/view/settings/MyAccountFragment.java
    https://ws75.aptoide.com/api/7/getstorewidgets/store_id=15/context=stores
    cm/aptoide/pt/bottomNavigation/BottomNavigationNavigator.java
    https://blog.aptoide.com/aptoide-new-authentication-system-no-user-data-storage/
    cm/aptoide/pt/account/view/magiclink/SendMagicLinkNavigator.java
    http://www.example.com
    http://m.aptoide.com
    cm/aptoide/pt/link/CustomTabNativeReceiver.java
    http://m.aptoide.com
    cm/aptoide/pt/link/CustomTabsHelper.java
    https://facebook.com/aptoide/
    https://twitter.com/aptoide
    https://www.instagram.com/aptoideappstore/
    cm/aptoide/pt/socialmedia/SocialMediaNavigator.java
    https://github.com/airbnb/epoxy/wiki/avoiding-memory-leaks
    com/airbnb/epoxy/n.java
    https://apichain.blockchainds.com
    https://apichain-dev.blockchainds.com
    com/asf/appcoins/sdk/contractproxy/BuildConfig.java
    https://data.flurry.com/aap.do
    com/flurry/sdk/t0.java
    https://data.flurry.com/v1/flr.do
    com/flurry/sdk/u0.java
    https://github.com/lingochamp/filedownloader/wiki/filedownloader.properties
    com/liulishuo/filedownloader/services/a.java
    https://diagnostics.rakam.io/event/batch
    io/rakam/api/e.java
    https://docs.sentry.io/learn/quotas/
    io/sentry/connection/g.java
    https://docs.sentry.io/clients/java/
    io/sentry/dsn/a.java
    https://api.indicative.com/service/event
    n/f/a/a/a.java
    https://github.com/reactivex/rxjava/wiki/plugins
    q/a/b.java
    https://github.com/reactivex/rxjava/wiki/plugins
    q/a/h.java
    https://github.com/reactivex/rxjava/wiki/plugins
    q/a/j.java
    https://github.com/reactivex/rxjava/wiki/plugins
    q/a/n.java
    https://github.com/reactivex/rxjava/wiki/plugins
    q/a/w.java
    https://docs.sentry.io/clients/java/config/#in-application-stack-frames
    q/b/a.java
    https://docs.sentry.io/clients/java/modules/android/
    q/b/g/b.java
    https://docs.sentry.io/clients/java/config/
    q/b/l/c.java
    224.0.0.251
    r/a/g/l.java
    http://www.slf4j.org/codes.html#staticloggerbinder
    http://www.slf4j.org/codes.html#unsuccessfulinit
    http://www.slf4j.org/codes.html#version_mismatch
    http://www.slf4j.org/codes.html#substitutelogger
    http://www.slf4j.org/codes.html#multiple_bindings
    http://www.slf4j.org/codes.html#replay
    http://www.slf4j.org/codes.html#loggernamemismatch
    t/b/c.java
    http://www.slf4j.org/codes.html#no_static_mdc_binder
    http://www.slf4j.org/codes.html#null_mdca
    t/b/d.java
    http://aptoi.de/tv
    https://docs.sentry.io/clients/java/config/#in-application-stack-frames
    9.20.6.1
    http://pool.img.aptoide.com/asf-store/ace60f6352f6dd9289843b5b0b2ab3d4_icon.png
    http://m.aptoide.com/account/password-recovery
    https://www.aptoide.com/company/legal/account/delete?email=%s
    https://ws75.aptoide.com/api/7/
    https://facebook.com/aptoide/
    http://www.aptoide.com
    https://www.youtube.com/embed/
    http://blog.aptoide.com/remote-tv-install
    https://api.blockchainds.com/
    https://ws75.aptoide.com/api/7/listapps/store_name=
    https://placeimg.com/640/480/any
    https://ws75-primary.aptoide.com/api/7/
    https://ws75.aptoide.com/api/7/getstorewidgets/store_id=15/context=apps/widget=apps_list%3a0%261%3apdownloads7d
    http://www.aptoide.com/page/about
    https://github.com/aptoide
    https://webservices.aptoide.com/webservices/3/
    http://m.aptoide.com
    https://impression.appsflyer.com
    http://www.aptoide.com/
    https://www.instagram.com/aptoideappstore/
    http://imgs.aptoide.com/
    https://3ad378b027fe45aa8bfbc5bacf56344e:1b2ec33c1a5a485bb7b111d41f17e0f8@sentry.aptoide.com/32
    https://api.aptoide.com/
    https://www.aptoide.com/legal/privacy?header=0&menu=0
    https://blog.aptoide.com/aptoide-new-authentication-system-no-user-data-storage/
    https://cdn6.aptoide.com/includes/themes/2014/images/vanilla_appcoins_info_video_placeholder.svg')
    https://www.aptoide.com/legal/terms?header=0&menu=0
    http://www.example.com
    https://twitter.com/aptoide
    https://docs.sentry.io/clients/java/modules/android/
    https://catappult.io/?utm_source=vanilla
    https://ws75.aptoide.com/api/7/getstorewidgets/store_id=15/context=games/widget=apps_list%3a0%262%3adownloads7d
    https://ws75.aptoide.com/api/7/getstorewidgets/store_id=15/context=stores
    自研引擎分析结果

    Firebase配置检测

    邮箱地址提取

    EMAIL 源码文件
    b2ec33c1a5a485bb7b111d41f17e0f8@sentry.aptoide
    cm/aptoide/pt/BuildConfig.java
    support@aptoide.com
    cm/aptoide/pt/AptoideApplication.java
    filipo@emailo.como
    com/aptoide/authentication/mock/MockAuthenticationService.java
    suport@aptoide.com
    aptoide@aptoide.com
    support@aptoide.com
    b2ec33c1a5a485bb7b111d41f17e0f8@sentry.aptoide
    自研引擎分析结果

    第三方追踪器

    敏感凭证泄露

    显示全部的 122 个secrets
    1、 "authenticator_account_type" : "cm.aptoide.pt"
    2、 "password" : "Password"
    3、 "search_suggestion_provider_authority" : "cm.aptoide.pt.provider.SearchSuggestionProvider"
    4、 "store_suggestion_provider_authority" : "cm.aptoide.pt.provider.StoreSearchSuggestionProvider"
    5、 "store_username" : "Nickname"
    6、 "username" : "Email"
    7、 "password" : "گذرواژه"
    8、 "com_facebook_device_auth_instructions" : "<b>facebook.com/device</b>にアクセスして、上のコードを入力してください。"
    9、 "nothing_inserted_user" : "ニックネームと写真(任意)を入れて、プロフィールを作成"
    10、 "password" : "パスワード"
    11、 "recover_password" : "あなたのパスワードを回復します"
    12、 "store_username" : "ニックネーム"
    13、 "username" : "Eメール"
    14、 "password" : "ਪਾਸਵਰਡ"
    15、 "store_username" : "ਉਪਨਾਮ"
    16、 "username" : "ਈਮੇਲ"
    17、 "password" : "Passwort"
    18、 "store_username" : "Nick"
    19、 "username" : "E-Mail"
    20、 "password" : "Парола"
    21、 "store_username" : "Прякор"
    22、 "username" : "Имейл"
    23、 "nothing_inserted_user" : "โปรดใส่ชื่อผู้ใช้และรูปภาพ(ทางเลือก)เพื่อสร้างโปรไฟล์ของคุณ"
    24、 "password" : "รหัสผ่าน"
    25、 "recover_password" : "รื้อฟื้นรหัสผ่านของคุณ"
    26、 "social_timeline_users_private" : "%dเป็นส่วนตัว"
    27、 "store_username" : "ชื่อเล่น"
    28、 "username" : "อีเมล"
    29、 "password" : "Salasana"
    30、 "store_username" : "Nimimerkki"
    31、 "username" : "Sähköposti"
    32、 "password" : "पासवर्ड"
    33、 "store_username" : "उपनाम"
    34、 "store_username" : "Nickname"
    35、 "password" : "Пароль"
    36、 "store_username" : "Псевдонім"
    37、 "store_username" : "Ψευδώνυμο"
    38、 "username" : "Email"
    39、 "password" : "Wachtwoord"
    40、 "store_username" : "Weergavenaam"
    41、 "username" : "E-mail"
    42、 "password" : "Hasło"
    43、 "store_username" : "Pseudonim"
    44、 "username" : "Email"
    45、 "password" : "পাসওয়ার্ড"
    46、 "store_username" : "ডাকনাম"
    47、 "username" : "ইমেইল"
    48、 "username" : "Email"
    49、 "password" : "패스워드"
    50、 "store_username" : "별명"
    51、 "username" : "이메일"
    52、 "password" : "Parolă"
    53、 "store_username" : "Pseudonim"
    54、 "username" : "E-mail"
    55、 "store_username" : "Pseudo"
    56、 "username" : "Email"
    57、 "password" : "पासवर्ड"
    58、 "username" : "इमेल"
    59、 "password" : "Lozinka"
    60、 "store_username" : "Nadimak"
    61、 "username" : "E-pošta"
    62、 "password" : "Şifre"
    63、 "username" : "E-posta"
    64、 "password" : "Contraseña"
    65、 "store_username" : "Apodo"
    66、 "username" : "E-mail"
    67、 "username" : "E-mel"
    68、 "password" : "Password"
    69、 "store_username" : "Nickname"
    70、 "password" : "Palavra-passe"
    71、 "store_username" : "Alcunha"
    72、 "username" : "E-mail"
    73、 "password" : "Jelszó"
    74、 "store_username" : "Becenév"
    75、 "username" : "E-mail"
    76、 "password" : "Пароль"
    77、 "store_username" : "Никнейм"
    78、 "username" : "E-mail"
    79、 "password" : "လျှို့ဝှက်စကားလုံး"
    80、 "store_username" : "အမည္ေျပာင္"
    81、 "username" : "အီးမေးလ်"
    82、 "com_facebook_device_auth_instructions" : "请访问<b>facebook.com/device</b>并输入以上验证码。"
    83、 "nothing_inserted_user" : "请插入昵称和照片(可选)以创建资料"
    84、 "password" : "密码"
    85、 "recover_password" : "找回密码"
    86、 "store_username" : "昵称"
    87、 "username" : "电子邮件"
    88、 "password" : "Palavra-passe"
    89、 "store_username" : "Apelido"
    90、 "username" : "E-mail"
    91、 "com_facebook_device_auth_instructions" : "前往<b>facebook.com/device</b&gt,並輸入上方顯示的代碼。"
    92、 "password" : "密碼"
    93、 "recover_password" : "尋回您的密碼"
    94、 "store_username" : "Nickname"
    95、 "username" : "電子郵件"
    96、 "com_facebook_device_auth_instructions" : "前往<b>facebook.com/device</b&gt,並輸入上方顯示的代碼。"
    97、 cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM=
    98、 a4b7452e2ed8f5f191058ca7bbfd26b0d3214bfc
    99、 8a3c4b262d721acd49a4bf97d5213199c86fa2b9
    100、 WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18=
    101、 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
    102、 2438bce1ddb7bd026d5ff89f598b3b5e5bb824b3
    103、 df6b721c8b4d3b6eb44c861d4415007e5a35fc95
    104、 0ccb1b4967115d54d18138b4f6c7c9ca
    105、 305bdd41-271f-4618-a1ea-0793da9e04ef
    106、 UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4=
    107、 bfce038c5ef7f0c99d0a6317a549edf0
    108、 ace60f6352f6dd9289843b5b0b2ab3d4
    109、 3ad378b027fe45aa8bfbc5bacf56344e
    110、 919afcc635fd11ea817c025656b09b22
    111、 3CA30A86d04e65E6E388922deCe3eBD0F100F5d0
    112、 5e8f16062ea3cd2c4a0d547876baa6f38cabf625
    113、 uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc=
    114、 jtcoe3puh462k3igthcrkmi918i30edh47c1tksma0pe1uqmuhc2o7i3g7ansalg
    115、 Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw=
    116、 E112a13984c2eF19DBeE98E3eDa79e90DB51f0e6
    117、 JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg=
    118、 cc2751449a350f668590264ed76692694a80308a
    119、 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
    120、 9b8f518b086098de3d77736f9458a3d2f6f95a37
    121、 1b2ec33c1a5a485bb7b111d41f17e0f8
    122、 SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4=

    字符串信息

    建议导出为TXT,方便查看。

    第三方SDK

    SDK名称 开发者 描述信息
    Google Sign-In Google 提供使用 Google 登录的 API。
    Google Play Service Google 借助 Google Play 服务,您的应用可以利用由 Google 提供的最新功能,例如地图,Google+ 等,并通过 Google Play 商店以 APK 的形式分发自动平台更新。 这样一来,您的用户可以更快地接收更新,并且可以更轻松地集成 Google 必须提供的最新信息。
    Jetpack Lifecycle Google 生命周期感知型组件可执行操作来响应另一个组件(如 Activity 和 Fragment)的生命周期状态的变化。这些组件有助于您写出更有条理且往往更精简的代码,这样的代码更易于维护。
    File Provider Android FileProvider 是 ContentProvider 的特殊子类,它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。
    Jetpack WorkManager Google 使用 WorkManager API 可以轻松地调度即使在应用退出或设备重启时仍应运行的可延迟异步任务。
    Jetpack Room Google Room 持久性库在 SQLite 的基础上提供了一个抽象层,让用户能够在充分利用 SQLite 的强大功能的同时,获享更强健的数据库访问机制。
    FileDownloader LingoChamp Android 文件下载引擎,稳定、高效、灵活、简单易用。

    污点分析

    当apk较大时,代码量会很大,造成数据流图(ICFG)呈现爆炸式增长,所以该功能比较耗时,请先喝杯咖啡,耐心等待……
    规则名称 描述信息 操作
    病毒分析 使用安卓恶意软件常用的API进行污点分析 开始分析  
    漏洞挖掘 漏洞挖掘场景下的污点分析 开始分析  
    隐私合规 隐私合规场景下的污点分析:组件内污点传播、组件间污点传播、组件与库函数之间的污点传播 开始分析  
    密码分析 分析加密算法是否使用常量密钥、静态初始化的向量(IV)、加密模式是否使用ECB等 开始分析  
    Callback 因为Android中系统级的Callback并不会出现显式地进行回调方法的调用,所以如果需要分析Callback方法需要在声明文件中将其声明,这里提供一份AndroidCallbacks.txt文件,里面是一些常见的原生回调接口或类,如果有特殊接口需求,可以联系管理员 开始分析