静态分析-Durga Maa Theme Launcher 1.4版本 _南明离火移动安全分析平台

温馨提示：本平台仅供研究软件风险、安全评估，禁止用于非法用途。由于展示的数据过于全面，请耐心等待加载完成。如有疑问或建议，可加入我们的微信群讨论

APP评分

病毒检测 文件安全

文件信息

文件名称 simila.durga.maa.launcher v1.4.apk
文件大小 2.45MB
MD5 6f445794c707058d629d6fcc11712a6f
SHA1 15c7c03f2ec4c2c2fede384d0511b4fc0ae5aae7
SHA256 00ea4cb69bce14e651c68c03f5b1b7a6f363e34e4db7840239999ea390cf8835

应用信息

应用名称 Durga Maa Theme Launcher
包名 simila.durga.maa.launcher
主活动 simila.durga.maa.launcher.MyHomeScreen
目标SDK 31 最小SDK 17
版本号 1.4 子版本号 5
加固信息未加壳

GooglePlay应用信息

标题 Durga Maa Theme Launcher
评分 4.55
安装 5,000+ 次下载
价格 0
Android版本支持
分类个性定制
Play 商店链接 simila.durga.maa.launcher
开发者 Themes & Icons Bare
开发者 ID Themes+%26+Icons+Bare
开发者地址 None
开发者主页 None
开发者 Email similacucu@gmail.com
发布日期 2021年4月7日
隐私政策 Privacy link

关于此应用

杜尔加·马（Durga Maa）启动器主题！这个很棒的主题将完全改变您的屏幕外观！这款Navratri主题启动器将以其奇妙而神奇的色彩和超赞的图标绝对适合您！现在该安装新主题并享受最新风格的Android主题了！杜尔加·马阿主题（Durga Maa Theme）具有先进的功能，可以增强您的主屏幕，但对于每个人来说，仍然是一个不错的用户友好选择。我们很高兴您可以找到自己喜欢的Android启动器主题。立即在手机上安装此Durga Maa主题。
   
   智能功能
   * 50 +应用程序图标
   *高清壁纸
   *隐藏您的应用
   * 3D效果
   
   这款Durga Maa应用程序将更改壁纸，应用程序图标和其他图形元素，以一种有趣而酷炫的方式将时尚主题带入您的日常生活。立即尝试！

组件导出信息

查看

扫描选项

重新扫描管理规则动态分析

反编译代码

Manifest文件查看

APK文件下载

Java源代码查看 -- 下载

证书信息

二进制文件已签名
v1 签名: True
v2 签名: True
v3 签名: False
v4 签名: False
主题: C=ES, ST=Alicante, L=Torrevieja, O=Info Tech Simila, OU=Info Simila, CN=Simila Cucu
签名算法: rsassa_pkcs1v15
有效期自: 2021-03-26 09:58:31+00:00
有效期至: 2055-03-08 09:58:31+00:00
发行人: C=ES, ST=Alicante, L=Torrevieja, O=Info Tech Simila, OU=Info Simila, CN=Simila Cucu
序列号: 0x655fddd3
哈希算法: sha256
证书MD5: 2bd6ddb41e4205a7e9081851090dca43
证书SHA1: 484b5c486f7734cd6e35278b7f573b3fa3e4a8a8
证书SHA256: 46ad45aecdb9d76cf6123b09ebe10f88e7ccae102a989dcf4e0c8fbd8bca082e
证书SHA512: c4b904403e845cabfdbda1781bd33ae3389b14072ff8136e9699702cd85a55e99c402c39e5a0628a038183d7a66d47f3ce2b026eee6e02c63ef76053bea163e4
公钥算法: rsa
密钥长度: 2048
指纹: 34204ae0da4a36fd94a29c64c9cc6ffe17c63bf720423d79f6bb41db3b2911fa
找到 1 个唯一证书

应用程序权限

权限名称	安全等级	权限内容	权限描述	关联代码
android.permission.INTERNET	危险	完全互联网访问	允许应用程序创建网络套接字。	显示文件 c/a/a/b.java c/d/a/d0.java com/startapp/d2.java com/startapp/d9.java com/startapp/g1.java com/startapp/jb.java com/startapp/k0.java com/startapp/mb.java com/startapp/networkTest/net/WebApiClient.java com/startapp/o7.java com/startapp/sdk/ads/video/VideoUtil.java com/startapp/sdk/ads/video/d.java com/startapp/sdk/ads/video/vast/c.java com/startapp/w1.java
android.permission.ACCESS_WIFI_STATE	普通	查看Wi-Fi状态	允许应用程序查看有关Wi-Fi状态的信息。	显示文件 com/startapp/b.java
android.permission.ACCESS_NETWORK_STATE	普通	获取网络状态	允许应用程序查看所有网络的状态。	显示文件 c/d/a/i.java com/startapp/b.java com/startapp/c2.java com/startapp/d2.java com/startapp/j8.java com/startapp/k0.java com/startapp/o7.java com/startapp/p2.java com/startapp/pa.java com/startapp/v.java com/startapp/y0.java e/b/b/a.java
android.permission.RECEIVE_BOOT_COMPLETED	普通	开机自启	允许应用程序在系统完成启动后即自行启动。这样会延长手机的启动时间，而且如果应用程序一直运行，会降低手机的整体速度。	显示文件 c/d/a/i.java com/startapp/a6.java com/startapp/f3.java com/startapp/j8.java com/startapp/m1.java com/startapp/n1.java com/startapp/networkTest/startapp/CoverageMapperManager.java com/startapp/s8.java com/startapp/sdk/ads/list3d/List3DActivity.java com/startapp/sdk/ads/splash/SplashEventHandler.java com/startapp/sdk/ads/video/VideoMode.java com/startapp/sdk/adsbase/SimpleTokenUtils.java com/startapp/sdk/adsbase/StartAppAd.java com/startapp/sdk/adsbase/remoteconfig/BootCompleteListener.java
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE	普通	Google 定义的权限	由 Google 定义的自定义权限。
com.google.android.gms.permission.AD_ID	普通	应用程序显示广告	此应用程序使用 Google 广告 ID，并且可能会投放广告。

证书分析

高危

0

警告

1

信息

1

标题	严重程度	描述信息
已签名应用	信息	应用程序已使用代码签名证书进行签名

MANIFEST分析

高危

0

警告

3

信息

0

屏蔽

0

序号	问题	严重程度	描述信息	操作
1	应用程序可以安装在有漏洞的已更新 Android 版本上 Android 4.2-4.2.2, [minSdk=17]	信息	该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。	对应用 simila.durga.maa.launcher 禁止使用 vulnerable_os_version 规则
2	应用程序已启用明文网络流量 [android:usesCleartextTraffic=true]	警告	应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。	对应用 simila.durga.maa.launcher 禁止使用 clear_text_traffic 规则
3	应用程序数据可以被备份 [android:allowBackup=true]	警告	这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。	对应用 simila.durga.maa.launcher 禁止使用 app_allowbackup 规则
4	Broadcast Receiver (com.startapp.sdk.adsbase.remoteconfig.BootCompleteListener) 未被保护。 [android:exported=true]	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 simila.durga.maa.launcher 禁止使用 receiver_explicitly_exported 规则

可浏览的ACTIVITIES

ACTIVITY	INTENT

网络安全配置

序号	范围	严重级别	描述

API调用分析

API功能	源码文件
一般功能-> 文件操作	显示文件 c/a/a/a.java c/a/a/b.java c/a/a/p.java c/d/a/b.java c/d/a/b0.java c/d/a/c.java c/d/a/d0.java c/d/a/e0.java c/d/a/f.java c/d/a/g.java c/d/a/j.java c/d/a/k.java c/d/a/n.java c/d/a/o.java c/d/a/r.java c/d/a/s.java c/d/a/y.java c/d/a/z.java com/startapp/a.java com/startapp/a0.java com/startapp/b5.java com/startapp/b7.java com/startapp/bc.java com/startapp/c5.java com/startapp/c7.java com/startapp/d1.java com/startapp/d2.java com/startapp/d4.java com/startapp/d8.java com/startapp/d9.java com/startapp/e1.java com/startapp/e3.java com/startapp/g1.java com/startapp/h1.java com/startapp/ja.java com/startapp/jb.java com/startapp/k0.java com/startapp/la.java com/startapp/mb.java com/startapp/networkTest/data/BatteryInfo.java com/startapp/networkTest/data/IspInfo.java com/startapp/networkTest/data/LocationInfo.java com/startapp/networkTest/data/RadioInfo.java com/startapp/networkTest/data/TimeInfo.java com/startapp/networkTest/data/WifiInfo.java com/startapp/networkTest/data/radio/ApnInfo.java com/startapp/networkTest/data/radio/CellInfo.java com/startapp/networkTest/data/radio/NeighboringCell.java com/startapp/networkTest/data/radio/NetworkRegistrationInfo.java com/startapp/networkTest/net/WebApiClient.java com/startapp/networkTest/startapp/NetworkTester.java com/startapp/o7.java com/startapp/o8.java com/startapp/p2.java com/startapp/q5.java com/startapp/q8.java com/startapp/r9.java com/startapp/s1.java com/startapp/sdk/ads/banner/BannerMetaData.java com/startapp/sdk/ads/banner/BannerOptions.java com/startapp/sdk/ads/interstitials/InterstitialAd.java com/startapp/sdk/ads/interstitials/OverlayActivity.java com/startapp/sdk/ads/splash/SplashConfig.java com/startapp/sdk/ads/splash/SplashHtml.java com/startapp/sdk/ads/splash/SplashMetaData.java com/startapp/sdk/ads/splash/b.java com/startapp/sdk/ads/video/VideoAdDetails.java com/startapp/sdk/ads/video/VideoMode.java com/startapp/sdk/ads/video/VideoUtil.java com/startapp/sdk/ads/video/d.java com/startapp/sdk/ads/video/h.java com/startapp/sdk/ads/video/tracking/VideoTrackingDetails.java com/startapp/sdk/ads/video/tracking/VideoTrackingLink.java com/startapp/sdk/ads/video/vast/b.java com/startapp/sdk/ads/video/vast/c.java com/startapp/sdk/adsbase/ActivityExtra.java com/startapp/sdk/adsbase/Ad.java com/startapp/sdk/adsbase/AdsCommonMetaData.java com/startapp/sdk/adsbase/AutoInterstitialPreferences.java com/startapp/sdk/adsbase/BaseResponse.java com/startapp/sdk/adsbase/SDKAdPreferences.java com/startapp/sdk/adsbase/StartAppAd.java com/startapp/sdk/adsbase/VideoConfig.java com/startapp/sdk/adsbase/adinformation/AdInformationConfig.java com/startapp/sdk/adsbase/adinformation/AdInformationMetaData.java com/startapp/sdk/adsbase/adinformation/AdInformationOverrides.java com/startapp/sdk/adsbase/adinformation/ImageResourceConfig.java com/startapp/sdk/adsbase/adrules/AdRule.java com/startapp/sdk/adsbase/adrules/AdRules.java com/startapp/sdk/adsbase/adrules/AdRulesResult.java com/startapp/sdk/adsbase/adrules/AdaptMetaData.java com/startapp/sdk/adsbase/apppresence/AppPresenceDetails.java com/startapp/sdk/adsbase/cache/ACMConfig.java com/startapp/sdk/adsbase/cache/CacheKey.java com/startapp/sdk/adsbase/cache/CacheMetaData.java com/startapp/sdk/adsbase/cache/CachedVideoAd.java com/startapp/sdk/adsbase/cache/DiskAdCacheManager.java com/startapp/sdk/adsbase/cache/FailuresHandler.java com/startapp/sdk/adsbase/commontracking/TrackingParams.java com/startapp/sdk/adsbase/consent/ConsentConfig.java com/startapp/sdk/adsbase/consent/ConsentData.java com/startapp/sdk/adsbase/consent/ConsentTypeInfoConfig.java com/startapp/sdk/adsbase/crashreport/ANRRemoteConfig.java com/startapp/sdk/adsbase/crashreport/ThreadsState.java com/startapp/sdk/adsbase/crashreport/a.java com/startapp/sdk/adsbase/e.java com/startapp/sdk/adsbase/model/AdDetails.java com/startapp/sdk/adsbase/model/AdPreferences.java com/startapp/sdk/adsbase/remoteconfig/AdCallbacksConfig.java com/startapp/sdk/adsbase/remoteconfig/AdvertisingIdResolverMetadata.java com/startapp/sdk/adsbase/remoteconfig/AnalyticsCategoryConfig.java com/startapp/sdk/adsbase/remoteconfig/AnalyticsCategoryFilterConfig.java com/startapp/sdk/adsbase/remoteconfig/AnalyticsConfig.java com/startapp/sdk/adsbase/remoteconfig/BaseSensorConfig.java com/startapp/sdk/adsbase/remoteconfig/BluetoothConfig.java com/startapp/sdk/adsbase/remoteconfig/ConnectivityHelperMetadata.java com/startapp/sdk/adsbase/remoteconfig/ImpressionsTrackingMetadata.java com/startapp/sdk/adsbase/remoteconfig/LocationMetadata.java com/startapp/sdk/adsbase/remoteconfig/MetaData.java com/startapp/sdk/adsbase/remoteconfig/MetaDataStyle.java com/startapp/sdk/adsbase/remoteconfig/MotionMetadata.java com/startapp/sdk/adsbase/remoteconfig/NetworkDiagnosticConfig.java com/startapp/sdk/adsbase/remoteconfig/RcdMetadata.java com/startapp/sdk/adsbase/remoteconfig/RcdTargets.java com/startapp/sdk/adsbase/remoteconfig/RscMetadata.java com/startapp/sdk/adsbase/remoteconfig/RscMetadataItem.java com/startapp/sdk/adsbase/remoteconfig/SensorsConfig.java com/startapp/sdk/adsbase/remoteconfig/SimpleTokenConfig.java com/startapp/sdk/adsbase/remoteconfig/StaleDcConfig.java com/startapp/sdk/adsbase/remoteconfig/TelephonyDataConfig.java com/startapp/sdk/adsbase/remoteconfig/TelephonyMetadata.java com/startapp/sdk/common/utils/Pair.java com/startapp/sdk/components/ComponentLocator.java com/startapp/sdk/insight/NetworkTestsMetaData.java com/startapp/sdk/omsdk/AdVerification.java com/startapp/sdk/omsdk/VerificationDetails.java com/startapp/sdk/triggeredlinks/AppEventsMetadata.java com/startapp/sdk/triggeredlinks/PeriodicAppEventMetadata.java com/startapp/sdk/triggeredlinks/TriggeredLinksMetadata.java com/startapp/simple/bloomfilter/algo/OpenBitSet.java com/startapp/simple/bloomfilter/codec/StringBuilderWriter.java com/startapp/u9.java com/startapp/v2.java com/startapp/v6.java com/startapp/v9.java com/startapp/w1.java com/startapp/wb.java com/startapp/x8.java com/startapp/y.java com/startapp/y2.java com/startapp/y3.java com/startapp/z2.java e/b/b/a.java f/b.java f/c.java f/h/a.java simila/durga/maa/launcher/MyHomeScreen.java
加密解密-> Base64 加密	显示文件 com/startapp/a.java com/startapp/k7.java com/startapp/s4.java com/startapp/sdk/ads/splash/SplashHtml.java com/startapp/sdk/ads/video/e.java com/startapp/wb.java
网络通信-> WebView GET请求	显示文件 com/startapp/sdk/ads/splash/SplashHtml.java com/startapp/sdk/ads/splash/g.java com/startapp/sdk/adsbase/crashreport/a.java com/startapp/wb.java
一般功能-> 获取系统服务(getSystemService)	显示文件 c/a/a/b.java c/d/a/e0.java com/startapp/a1.java com/startapp/b7.java com/startapp/c2.java com/startapp/d2.java com/startapp/i0.java com/startapp/i6.java com/startapp/j8.java com/startapp/k0.java com/startapp/md.java com/startapp/nd.java com/startapp/networkTest/controller/LocationController.java com/startapp/o4.java com/startapp/o7.java com/startapp/o9.java com/startapp/p2.java com/startapp/pa.java com/startapp/pe.java com/startapp/r1.java com/startapp/r4.java com/startapp/sa.java com/startapp/sdk/ads/banner/banner3d/Banner3DSize.java com/startapp/sdk/ads/splash/SplashConfig.java com/startapp/sdk/adsbase/model/GetAdRequest.java com/startapp/sdk/jobs/c.java com/startapp/t7.java com/startapp/wb.java com/startapp/x4.java com/startapp/y0.java e/b/b/a.java e/d/d/v.java
敏感行为-> 检测了是否被jdb调试	com/startapp/sdk/adsbase/crashreport/b.java
一般功能-> IPC通信	显示文件 c/a/a/a.java c/a/a/b.java c/a/a/f.java c/a/a/j.java c/d/a/i.java com/startapp/a1.java com/startapp/a4.java com/startapp/a6.java com/startapp/c4.java com/startapp/e2.java com/startapp/f3.java com/startapp/f8.java com/startapp/g5.java com/startapp/i0.java com/startapp/j8.java com/startapp/m1.java com/startapp/n1.java com/startapp/n5.java com/startapp/networkTest/startapp/CoverageMapperManager.java com/startapp/s8.java com/startapp/sdk/ads/interstitials/InterstitialAd.java com/startapp/sdk/ads/interstitials/OverlayActivity.java com/startapp/sdk/ads/list3d/List3DActivity.java com/startapp/sdk/ads/offerWall/offerWallJson/OfferWall3DAd.java com/startapp/sdk/ads/splash/SplashEventHandler.java com/startapp/sdk/ads/splash/b.java com/startapp/sdk/ads/video/VideoMode.java com/startapp/sdk/adsbase/SimpleTokenUtils.java com/startapp/sdk/adsbase/StartAppAd.java com/startapp/sdk/adsbase/StartAppSDKInternal.java com/startapp/sdk/adsbase/a.java com/startapp/sdk/adsbase/consent/ConsentActivity.java com/startapp/sdk/adsbase/remoteconfig/BootCompleteListener.java com/startapp/sdk/cachedservice/BackgroundService.java com/startapp/sdk/common/advertisingid/AdvertisingIdResolver.java com/startapp/t0.java com/startapp/u.java com/startapp/u0.java com/startapp/v2.java com/startapp/v8.java com/startapp/vb.java com/startapp/wb.java com/startapp/y0.java
网络通信-> 蓝牙连接	com/startapp/i1.java com/startapp/m1.java com/startapp/n1.java
调用java反射机制	显示文件 c/d/a/e0.java com/startapp/b9.java com/startapp/eb.java com/startapp/i5.java com/startapp/j0.java com/startapp/j8.java com/startapp/k5.java com/startapp/l5.java com/startapp/nd.java com/startapp/p2.java com/startapp/r1.java com/startapp/sdk/common/advertisingid/AdvertisingIdResolver.java com/startapp/sdk/jobs/a.java com/startapp/t1.java com/startapp/u1.java com/startapp/v6.java com/startapp/wb.java e/b/b/a.java e/b/d/j.java e/b/d/k.java e/d/d/v.java e/e/a.java e/e/b.java f/g/a.java f/g/b.java f/i/b/c.java
加密解密-> Crypto加解密组件	com/startapp/mb.java com/startapp/w1.java
网络通信-> HTTP建立连接	显示文件 c/d/a/d0.java com/startapp/d9.java com/startapp/g1.java com/startapp/jb.java com/startapp/mb.java com/startapp/networkTest/net/WebApiClient.java com/startapp/o7.java com/startapp/sdk/ads/video/vast/c.java com/startapp/w1.java
加密解密-> Base64 解密	显示文件 c/a/a/b.java com/startapp/a.java com/startapp/g1.java com/startapp/m6.java com/startapp/sdk/ads/splash/SplashHtml.java com/startapp/u7.java com/startapp/x8.java
命令执行-> getRuntime.exec()	显示文件 com/startapp/d2.java com/startapp/k0.java com/startapp/o8.java com/startapp/q8.java com/startapp/v9.java
组件-> 启动 Activity	显示文件 c/a/a/a.java c/a/a/b.java c/a/a/f.java c/a/a/j.java com/startapp/e2.java com/startapp/i0.java com/startapp/n5.java com/startapp/sdk/ads/interstitials/InterstitialAd.java com/startapp/sdk/ads/offerWall/offerWallJson/OfferWall3DAd.java com/startapp/sdk/adsbase/StartAppAd.java com/startapp/sdk/adsbase/a.java com/startapp/sdk/adsbase/consent/ConsentActivity.java com/startapp/wb.java
JavaScript 接口方法	com/startapp/n5.java com/startapp/o5.java com/startapp/sc.java
网络通信-> WebView JavaScript接口	显示文件 com/startapp/a4.java com/startapp/g5.java com/startapp/ld.java com/startapp/sd.java com/startapp/sdk/ads/banner/bannerstandard/BannerStandard.java com/startapp/sdk/ads/splash/SplashHtml.java com/startapp/sdk/adsbase/a.java com/startapp/sdk/adsbase/consent/ConsentActivity.java com/startapp/zd.java
网络通信-> WebView 相关	显示文件 com/startapp/a4.java com/startapp/g5.java com/startapp/ld.java com/startapp/o6.java com/startapp/qe.java com/startapp/re.java com/startapp/sd.java com/startapp/sdk/ads/banner/bannerstandard/BannerStandard.java com/startapp/sdk/ads/splash/SplashHtml.java com/startapp/sdk/ads/video/VideoMode.java com/startapp/sdk/adsbase/a.java com/startapp/sdk/adsbase/consent/ConsentActivity.java com/startapp/wb.java com/startapp/zd.java
隐私数据-> 获取已安装的应用程序	显示文件 com/startapp/sdk/adsbase/StartAppSDKInternal.java com/startapp/sdk/adsbase/a.java com/startapp/v2.java com/startapp/wb.java
组件-> ContentProvider	com/startapp/sdk/adsbase/StartAppInitProvider.java
网络通信-> OkHttpClient Connection	c/d/a/s.java
组件-> 发送广播	com/startapp/sdk/ads/list3d/List3DActivity.java
隐私数据-> 剪贴板数据读写操作	c/a/a/b.java
加密解密-> 信息摘要算法	显示文件 com/startapp/a.java com/startapp/a0.java com/startapp/sdk/ads/video/e.java com/startapp/u9.java
一般功能-> 传感器相关操作	com/startapp/i6.java com/startapp/o9.java
组件-> 启动 Service	显示文件 com/startapp/a0.java com/startapp/f8.java com/startapp/sdk/cachedservice/BackgroundService.java com/startapp/sdk/common/advertisingid/AdvertisingIdResolver.java
网络通信-> UDP数据包	com/startapp/ba.java
网络通信-> UDP数据报套接字	com/startapp/ba.java
隐私数据-> 获取GPS位置信息	com/startapp/networkTest/controller/LocationController.java
网络通信-> TCP套接字	com/startapp/sdk/ads/video/vast/c.java
一般功能-> 获取活动网路信息	显示文件 c/d/a/i.java com/startapp/c2.java com/startapp/j8.java com/startapp/y0.java e/b/b/a.java
设备指纹-> 查看本机IMSI	com/startapp/p2.java
设备指纹-> getSimOperator	com/startapp/p2.java com/startapp/pa.java
设备指纹-> 查看运营商信息	com/startapp/p2.java com/startapp/pa.java
一般功能-> PowerManager操作	com/startapp/p2.java
进程操作-> 获取进程pid	com/startapp/p2.java
网络通信-> HTTPS建立连接	com/startapp/d2.java com/startapp/networkTest/net/WebApiClient.java
网络通信-> SSL证书处理	com/startapp/networkTest/net/WebApiClient.java
设备指纹-> getAllCellInfo	com/startapp/j8.java com/startapp/pa.java
设备指纹-> 获取蜂窝位置信息	com/startapp/j8.java
网络通信-> URLConnection	com/startapp/sdk/ads/video/d.java
网络通信-> WebView使用File协议	com/startapp/sdk/ads/splash/SplashHtml.java
辅助功能accessibility相关	e/b/d/a.java e/b/d/l/b.java e/d/d/v.java
一般功能-> 获取网络接口信息	com/startapp/eb.java
DEX-> 动态加载	com/startapp/v2.java
一般功能-> 查看\修改Android系统属性	com/startapp/v2.java
一般功能-> 设置手机铃声，媒体音量	com/startapp/pe.java
进程操作-> 获取运行的进程\服务	com/startapp/wb.java

源代码分析

高危

2

警告

9

信息

2

安全

2

屏蔽

0

序号	问题	等级	参考标准	文件位置	操作
1	应用程序记录日志信息,不得记录敏感信息	信息	CWE: CWE-532: 通过日志文件的信息暴露 OWASP MASVS: MSTG-STORAGE-3	显示文件 c/d/a/e0.java com/startapp/de.java com/startapp/f6.java com/startapp/gb.java com/startapp/je.java com/startapp/sdk/ads/splash/SplashConfig.java com/startapp/sdk/ads/video/VideoMode.java com/startapp/sdk/adsbase/StartAppSDKInternal.java e/b/d/a.java e/b/d/c.java e/b/d/k.java e/d/d/v.java	Suppress the rule android_logging in simila.durga.maa.launcher Suppress the rule android_logging in simila.durga.maa.launcher only from these files
2	应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库	警告	CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当（'SQL 注入'） OWASP Top 10: M7: Client Code Quality	com/startapp/i7.java com/startapp/l4.java	Suppress the rule android_sql_raw_query in simila.durga.maa.launcher Suppress the rule android_sql_raw_query in simila.durga.maa.launcher only from these files
3	不安全的Web视图实现。可能存在WebView任意代码执行漏洞	警告	CWE: CWE-749: 暴露危险方法或函数 OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-PLATFORM-7	com/startapp/g5.java com/startapp/sdk/ads/banner/bannerstandard/BannerStandard.java com/startapp/sdk/ads/splash/SplashHtml.java	Suppress the rule android_webview in simila.durga.maa.launcher Suppress the rule android_webview in simila.durga.maa.launcher only from these files
4	此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击	安全	OWASP MASVS: MSTG-NETWORK-4	com/startapp/c5.java com/startapp/networkTest/net/WebApiClient.java	Suppress the rule android_ssl_pinning in simila.durga.maa.launcher Suppress the rule android_ssl_pinning in simila.durga.maa.launcher only from these files
5	此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它	信息	OWASP MASVS: MSTG-STORAGE-10	c/a/a/b.java	Suppress the rule android_clipboard_copy in simila.durga.maa.launcher Suppress the rule android_clipboard_copy in simila.durga.maa.launcher only from these files
6	应用程序使用不安全的随机数生成器	警告	CWE: CWE-330: 使用不充分的随机数 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-6	显示文件 com/startapp/b4.java com/startapp/d2.java com/startapp/k0.java com/startapp/sdk/ads/banner/BannerBase.java com/startapp/sdk/adsbase/cache/d.java com/startapp/sdk/adsbase/cache/h.java	Suppress the rule android_insecure_random in simila.durga.maa.launcher Suppress the rule android_insecure_random in simila.durga.maa.launcher only from these files
7	此应用程序可能会请求root（超级用户）权限	警告	CWE: CWE-250: 以不必要的权限执行 OWASP MASVS: MSTG-RESILIENCE-1	com/startapp/p8.java com/startapp/q8.java	Suppress the rule android_su_detect in simila.durga.maa.launcher Suppress the rule android_su_detect in simila.durga.maa.launcher only from these files
8	应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据	警告	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	com/startapp/p2.java com/startapp/v2.java	Suppress the rule android_read_write_external in simila.durga.maa.launcher Suppress the rule android_read_write_external in simila.durga.maa.launcher only from these files
9	此应用程序可能具有Root检测功能	安全	OWASP MASVS: MSTG-RESILIENCE-1	com/startapp/p2.java com/startapp/q8.java	Suppress the rule android_detect_root in simila.durga.maa.launcher Suppress the rule android_detect_root in simila.durga.maa.launcher only from these files
10	SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击	高危	CWE: CWE-295: 证书验证不恰当 OWASP Top 10: M3: Insecure Communication OWASP MASVS: MSTG-NETWORK-3	com/startapp/d2.java com/startapp/networkTest/net/WebApiClient.java	Suppress the rule android_insecure_ssl in simila.durga.maa.launcher Suppress the rule android_insecure_ssl in simila.durga.maa.launcher only from these files
11	MD5是已知存在哈希冲突的弱哈希	警告	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4	com/startapp/sdk/ads/video/e.java	Suppress the rule android_md5 in simila.durga.maa.launcher Suppress the rule android_md5 in simila.durga.maa.launcher only from these files
12	可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息	警告	CWE: CWE-200: 信息泄露 OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-PLATFORM-7	com/startapp/sdk/ads/splash/SplashHtml.java	Suppress the rule android_webview_allow_file_from_url in simila.durga.maa.launcher Suppress the rule android_webview_allow_file_from_url in simila.durga.maa.launcher only from these files
13	如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击	高危	CWE: CWE-79: 在Web页面生成时对输入的转义处理不恰当（'跨站脚本'） OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-PLATFORM-6	com/startapp/sdk/ads/splash/SplashHtml.java com/startapp/sdk/ads/splash/g.java com/startapp/wb.java	Suppress the rule android_webview_xss in simila.durga.maa.launcher Suppress the rule android_webview_xss in simila.durga.maa.launcher only from these files
14	IP地址泄露	警告	CWE: CWE-200: 信息泄露 OWASP MASVS: MSTG-CODE-2	com/startapp/d2.java com/startapp/v2.java	Suppress the rule android_ip_disclosure in simila.durga.maa.launcher Suppress the rule android_ip_disclosure in simila.durga.maa.launcher only from these files
15	文件可能包含硬编码的敏感信息，如用户名、密码、密钥等	警告	CWE: CWE-312: 明文存储敏感信息 OWASP Top 10: M9: Reverse Engineering OWASP MASVS: MSTG-STORAGE-14	com/startapp/networkTest/startapp/NetworkTester.java	Suppress the rule android_hardcoded in simila.durga.maa.launcher Suppress the rule android_hardcoded in simila.durga.maa.launcher only from these files

动态库分析

No Shared Objects found.

序号	动态库	NX(堆栈禁止执行)	STACK CANARY(栈保护)	RELRO	RPATH（指定SO搜索路径）	RUNPATH（指定SO搜索路径）	FORTIFY(常用函数加强检查)	SYMBOLS STRIPPED(裁剪符号表)

文件分析

序号	问题	文件

VIRUSTOTAL扫描

检出率： 0 / 66 完整报告

滥用权限

恶意软件常用权限 1/30

android.permission.RECEIVE_BOOT_COMPLETED

其它常用权限 5/46

android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.gms.permission.AD_ID

恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。

IP地图

域名检测

域名	状态	中国境内	位置信息
awsdus.api.p3insight.de	安全	否	没有可用的地理位置信息。
adsmetadata.mobileadexchange.net	安全	否	IP地址: 213.35.117.150 国家: 新加坡地区: 新加坡城市: 新加坡查看: Google 地图
infoevent.startappservice.com	安全	否	IP地址: 213.35.117.150 国家: 新加坡地区: 新加坡城市: 新加坡查看: Google 地图
www.startapp.com	安全	否	IP地址: 3.222.195.58 国家: 美利坚合众国地区: 弗吉尼亚州城市: 阿什本查看: Google 地图
geoip.api.c0nnectthed0ts.com	安全	否	IP地址: 213.35.117.150 国家: 爱尔兰地区: 都柏林城市: 都柏林查看: Google 地图
geoip.api.p3insight.de	安全	否	没有可用的地理位置信息。
d26xw8rp6mlgfg.cloudfront.net	安全	否	IP地址: 13.226.228.92 国家: 美利坚合众国地区: 加利福尼亚城市: 洛杉矶查看: Google 地图
support.start.io	安全	否	IP地址: 216.198.53.1 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
ul.api.c0nnectthed0ts.com	安全	否	IP地址: 213.35.117.150 国家: 爱尔兰地区: 都柏林城市: 都柏林查看: Google 地图
adsmetadata.startappservice.com	安全	否	IP地址: 213.35.117.150 国家: 新加坡地区: 新加坡城市: 新加坡查看: Google 地图
daneden.me	安全	否	IP地址: 213.35.117.150 国家: 美利坚合众国地区: 加利福尼亚城市: 核桃查看: Google 地图
themes--icons-bare.yolasite.com	安全	否	IP地址: 104.18.43.151 国家: 美利坚合众国地区: 加利福尼亚城市: 旧金山查看: Google 地图
imp.startappservice.com	安全	否	IP地址: 213.35.117.150 国家: 新加坡地区: 新加坡城市: 新加坡查看: Google 地图
lh6.ggpht.com	安全	否	IP地址: 142.250.68.97 国家: 美利坚合众国地区: 加利福尼亚城市: 洛杉矶查看: Google 地图
req.startappservice.com	安全	否	IP地址: 213.35.117.150 国家: 新加坡地区: 新加坡城市: 新加坡查看: Google 地图
info.startappservice.com	安全	否	IP地址: 152.195.62.69 国家: 美利坚合众国地区: 加利福尼亚城市: 洛杉矶查看: Google 地图
d2to8y50b3n6dq.cloudfront.net	安全	否	IP地址: 13.226.228.92 国家: 美利坚合众国地区: 加利福尼亚城市: 洛杉矶查看: Google 地图
funnel-assets.startappservice.com	安全	否	IP地址: 213.35.117.150 国家: 美利坚合众国地区: 加利福尼亚城市: 洛杉矶查看: Google 地图

手机号码

网址

网址信息	源码文件
https://themes--icons-bare.yolasite.com/	c/a/a/j.java
https://adsmetadata.mobileadexchange.net/adsmetadata/api/v1.0/ https://adsmetadata.startappservice.com/adsmetadata/api/v1.0/ https://req.startappservice.com/1.5/ https://d26xw8rp6mlgfg.cloudfront.net/adsmetadata/api/v1.0/	com/startapp/sdk/adsbase/remoteconfig/MetaData.java
127.0.0.1	com/startapp/d2.java
javascript:startappbackpressed	com/startapp/sdk/adsbase/consent/ConsentActivity.java
https://geoip.api.p3insight.de/geoip/ https://d2to8y50b3n6dq.cloudfront.net/truststores/	com/startapp/sdk/insight/NetworkTestsMetaData.java
https://info.startappservice.com/inapp/resources/info_l.png	com/startapp/sdk/adsbase/adinformation/AdInformationMetaData.java
https://ul.api.c0nnectthed0ts.com/ul/v3/ https://awsdus.api.p3insight.de/isupload/upload_check_lumen.php https://geoip.api.c0nnectthed0ts.com/geoip/ https://d2to8y50b3n6dq.cloudfront.net/truststores/	com/startapp/y4.java
https://imp.startappservice.com/tracking/adimpression	com/startapp/sdk/adsbase/AdsConstants.java
https://support.start.io/hc/en-us/articles/360014774799	com/startapp/sdk/adsbase/StartAppSDKInternal.java
10.0.2.15	com/startapp/v2.java
https://www.startapp.com/policy/privacy-policy/ https://funnel-assets.startappservice.com/consent/index.html	com/startapp/sdk/adsbase/adinformation/AdInformationConfig.java
https://support.start.io/hc/en-us/articles/360014774799	com/startapp/s.java
https://play.google.com/store/apps/details?id=	c/a/a/f.java
https://play.google.com/store/apps/details?id=	c/a/a/a.java
https://infoevent.startappservice.com/tracking/infoevent	com/startapp/sdk/adsbase/remoteconfig/AnalyticsConfig.java
javascript:splash_fadeout https://daneden.me/animate https://lh6.ggpht.com/vo9wbfh89bbdbwfhuezqzogpkmfkjsatibvwk3qxpbvjwcr8i79evui0ab41a-je7x-6=w200	com/startapp/sdk/ads/splash/SplashHtml.java
https://play.google.com/store/apps/details?id= http://54.253.58.42/bare/bareicon.json	c/a/a/b.java
https://play.google.com http://play.google.com	com/startapp/sdk/adsbase/a.java
https://geoip.api.c0nnectthed0ts.com/geoip/ https://d2to8y50b3n6dq.cloudfront.net/truststores/	com/startapp/networkTest/startapp/NetworkTester.java
https://www.startapp.com data:;base64,ivborw0kggo=	com/startapp/sdk/ads/video/vast/VASTResource.java
https://www.startapp.com 10.0.2.15 https://awsdus.api.p3insight.de/isupload/upload_check_lumen.php https://ul.api.c0nnectthed0ts.com/ul/v3/ https://www.startapp.com/policy/privacy-policy/ http://play.google.com 127.0.0.1 http://54.253.58.42/bare/bareicon.json https://info.startappservice.com/inapp/resources/info_l.png https://lh6.ggpht.com/vo9wbfh89bbdbwfhuezqzogpkmfkjsatibvwk3qxpbvjwcr8i79evui0ab41a-je7x-6=w200 javascript:splash_fadeout https://d2to8y50b3n6dq.cloudfront.net/truststores/ javascript:startappbackpressed https://geoip.api.c0nnectthed0ts.com/geoip/ https://play.google.com/store/apps/details?id= https://geoip.api.p3insight.de/geoip/ https://daneden.me/animate https://themes--icons-bare.yolasite.com/ https://support.start.io/hc/en-us/articles/360014774799 https://play.google.com data:;base64,ivborw0kggo=	自研引擎-S

FIREBASE实例

邮箱

追踪器

名称	类别	网址
Startapp	Advertisement, Analytics	https://reports.exodus-privacy.eu.org/trackers/195

密钥凭证

已显示 3 个secrets

1、 com/Vo9wbFH89BbDbWFhUezQZOGPKmfkJSAtIbVWk3QxPbvJwcR8I79EVuI0aB41a
2、 2F73797374656D2F6C69622F6C69627265666572656E63652D72696C2E736F
3、 3A757365722F72656C656173652D6B657973

字符串列表

建议导出为TXT，方便查看。

活动列表

已显示 4 个activities

1、 simila.durga.maa.launcher.MyHomeScreen
2、 com.startapp.sdk.adsbase.consent.ConsentActivity
3、 com.startapp.sdk.ads.list3d.List3DActivity
4、 com.startapp.sdk.ads.interstitials.OverlayActivity

服务列表

已显示 2 个services

1、 com.startapp.sdk.cachedservice.BackgroundService
2、 com.startapp.sdk.jobs.SchedulerService

广播接收者列表

已显示 1 个receivers

1、 com.startapp.sdk.adsbase.remoteconfig.BootCompleteListener

内容提供者列表

第三方SDK

SDK名称	开发者	描述信息

文件列表

AndroidManifest.xml
META-INF/CERT.RSA
META-INF/CERT.SF
META-INF/MANIFEST.MF
META-INF/androidx.core_core.version
META-INF/androidx.customview_customview.version
META-INF/androidx.lifecycle_lifecycle-runtime.version
META-INF/androidx.recyclerview_recyclerview.version
META-INF/androidx.versionedparcelable_versionedparcelable.version
META-INF/app_durgamaaRelease.kotlin_module
META-INF/kotlin-stdlib-common.kotlin_module
META-INF/kotlin-stdlib.kotlin_module
assets/large.webp
assets/local_thumb.webp
assets/screen/screen_1.webp
assets/screen/screen_2.webp
assets/screen/screen_3.webp
assets/thumb.webp
classes.dex
kotlin/annotation/annotation.kotlin_builtins
kotlin/collections/collections.kotlin_builtins
kotlin/coroutines/coroutines.kotlin_builtins
kotlin/internal/internal.kotlin_builtins
kotlin/kotlin.kotlin_builtins
kotlin/ranges/ranges.kotlin_builtins
kotlin/reflect/reflect.kotlin_builtins
res/drawable-hdpi-v4/ic_action_name.png
res/drawable-hdpi-v4/ic_down.png
res/drawable-hdpi-v4/ic_heart.png
res/drawable-hdpi-v4/ic_share.png
res/drawable-hdpi-v4/notification_bg_low_normal.9.png
res/drawable-hdpi-v4/notification_bg_low_pressed.9.png
res/drawable-hdpi-v4/notification_bg_normal.9.png
res/drawable-hdpi-v4/notification_bg_normal_pressed.9.png
res/drawable-hdpi-v4/notify_panel_notification_icon_bg.png
res/drawable-mdpi-v4/ic_action_name.png
res/drawable-mdpi-v4/ic_down.png
res/drawable-mdpi-v4/ic_heart.png
res/drawable-mdpi-v4/ic_share.png
res/drawable-mdpi-v4/notification_bg_low_normal.9.png
res/drawable-mdpi-v4/notification_bg_low_pressed.9.png
res/drawable-mdpi-v4/notification_bg_normal.9.png
res/drawable-mdpi-v4/notification_bg_normal_pressed.9.png
res/drawable-mdpi-v4/notify_panel_notification_icon_bg.png
res/drawable-nodpi-v4/app_allapps.png
res/drawable-nodpi-v4/app_amazon.png
res/drawable-nodpi-v4/app_amazonprime.png
res/drawable-nodpi-v4/app_bbm.png
res/drawable-nodpi-v4/app_bookmyshow.png
res/drawable-nodpi-v4/app_booster_home.png
res/drawable-nodpi-v4/app_browser.png
res/drawable-nodpi-v4/app_calculator.png
res/drawable-nodpi-v4/app_calender.png
res/drawable-nodpi-v4/app_camera.png
res/drawable-nodpi-v4/app_clean_master.png
res/drawable-nodpi-v4/app_clock.png
res/drawable-nodpi-v4/app_contact.png
res/drawable-nodpi-v4/app_download.png
res/drawable-nodpi-v4/app_email.png
res/drawable-nodpi-v4/app_esfilemgr.png
res/drawable-nodpi-v4/app_facebook.png
res/drawable-nodpi-v4/app_filecommander.png
res/drawable-nodpi-v4/app_filemanager.png
res/drawable-nodpi-v4/app_firefox.png
res/drawable-nodpi-v4/app_flashlight.png
res/drawable-nodpi-v4/app_flipkart.png
res/drawable-nodpi-v4/app_folder.png
res/drawable-nodpi-v4/app_fxfilemgr.png
res/drawable-nodpi-v4/app_gallery.png
res/drawable-nodpi-v4/app_google.png
res/drawable-nodpi-v4/app_google_chrome.png
res/drawable-nodpi-v4/app_google_gmail.png
res/drawable-nodpi-v4/app_google_maps.png
res/drawable-nodpi-v4/app_google_music.png
res/drawable-nodpi-v4/app_google_photos.png
res/drawable-nodpi-v4/app_google_play.png
res/drawable-nodpi-v4/app_google_play_games.png
res/drawable-nodpi-v4/app_google_plus.png
res/drawable-nodpi-v4/app_google_youtube.png
res/drawable-nodpi-v4/app_hotstar.png
res/drawable-nodpi-v4/app_imo.png
res/drawable-nodpi-v4/app_instagram.png
res/drawable-nodpi-v4/app_launcher_setting.png
res/drawable-nodpi-v4/app_launcher_theme.png
res/drawable-nodpi-v4/app_launcher_torch.png
res/drawable-nodpi-v4/app_line.png
res/drawable-nodpi-v4/app_message.png
res/drawable-nodpi-v4/app_messenger.png
res/drawable-nodpi-v4/app_music.png
res/drawable-nodpi-v4/app_mxplayer.png
res/drawable-nodpi-v4/app_netflix.png
res/drawable-nodpi-v4/app_oifilemgr.png
res/drawable-nodpi-v4/app_opera_browser.png
res/drawable-nodpi-v4/app_paytm.png
res/drawable-nodpi-v4/app_phone.png
res/drawable-nodpi-v4/app_pinterest.png
res/drawable-nodpi-v4/app_power_saver.png
res/drawable-nodpi-v4/app_radio.png
res/drawable-nodpi-v4/app_record.png
res/drawable-nodpi-v4/app_shareit.png
res/drawable-nodpi-v4/app_skype.png
res/drawable-nodpi-v4/app_snapchat.png
res/drawable-nodpi-v4/app_system_settings.png
res/drawable-nodpi-v4/app_truecaller.png
res/drawable-nodpi-v4/app_tumblr.png
res/drawable-nodpi-v4/app_twitter.png
res/drawable-nodpi-v4/app_uc_browser.png
res/drawable-nodpi-v4/app_viber.png
res/drawable-nodpi-v4/app_video.png
res/drawable-nodpi-v4/app_vk.png
res/drawable-nodpi-v4/app_vlc.png
res/drawable-nodpi-v4/app_wechat.png
res/drawable-nodpi-v4/app_whatsapp.png
res/drawable-nodpi-v4/app_whatsapp_biz.png
res/drawable-nodpi-v4/day_1.png
res/drawable-nodpi-v4/day_2.png
res/drawable-nodpi-v4/day_3.png
res/drawable-nodpi-v4/day_4.png
res/drawable-nodpi-v4/day_5.png
res/drawable-nodpi-v4/day_6.png
res/drawable-nodpi-v4/day_7.png
res/drawable-nodpi-v4/home_search_bar_bg.png
res/drawable-nodpi-v4/home_search_bar_icon_search.png
res/drawable-nodpi-v4/home_search_bar_icon_voice.png
res/drawable-nodpi-v4/home_wallpaper.jpg
res/drawable-nodpi-v4/home_wallpaper_thumb.jpg
res/drawable-nodpi-v4/icon_base.png
res/drawable-nodpi-v4/icon_mask.png
res/drawable-nodpi-v4/system_calendar_1.png
res/drawable-nodpi-v4/system_calendar_10.png
res/drawable-nodpi-v4/system_calendar_11.png
res/drawable-nodpi-v4/system_calendar_12.png
res/drawable-nodpi-v4/system_calendar_13.png
res/drawable-nodpi-v4/system_calendar_14.png
res/drawable-nodpi-v4/system_calendar_15.png
res/drawable-nodpi-v4/system_calendar_16.png
res/drawable-nodpi-v4/system_calendar_17.png
res/drawable-nodpi-v4/system_calendar_18.png
res/drawable-nodpi-v4/system_calendar_19.png
res/drawable-nodpi-v4/system_calendar_2.png
res/drawable-nodpi-v4/system_calendar_20.png
res/drawable-nodpi-v4/system_calendar_21.png
res/drawable-nodpi-v4/system_calendar_22.png
res/drawable-nodpi-v4/system_calendar_23.png
res/drawable-nodpi-v4/system_calendar_24.png
res/drawable-nodpi-v4/system_calendar_25.png
res/drawable-nodpi-v4/system_calendar_26.png
res/drawable-nodpi-v4/system_calendar_27.png
res/drawable-nodpi-v4/system_calendar_28.png
res/drawable-nodpi-v4/system_calendar_29.png
res/drawable-nodpi-v4/system_calendar_3.png
res/drawable-nodpi-v4/system_calendar_30.png
res/drawable-nodpi-v4/system_calendar_31.png
res/drawable-nodpi-v4/system_calendar_4.png
res/drawable-nodpi-v4/system_calendar_5.png
res/drawable-nodpi-v4/system_calendar_6.png
res/drawable-nodpi-v4/system_calendar_7.png
res/drawable-nodpi-v4/system_calendar_8.png
res/drawable-nodpi-v4/system_calendar_9.png
res/drawable-v21/notification_action_background.xml
res/drawable-xhdpi-v4/ic_action_name.png
res/drawable-xhdpi-v4/ic_down.png
res/drawable-xhdpi-v4/ic_heart.png
res/drawable-xhdpi-v4/ic_share.png
res/drawable-xhdpi-v4/notification_bg_low_normal.9.png
res/drawable-xhdpi-v4/notification_bg_low_pressed.9.png
res/drawable-xhdpi-v4/notification_bg_normal.9.png
res/drawable-xhdpi-v4/notification_bg_normal_pressed.9.png
res/drawable-xhdpi-v4/notify_panel_notification_icon_bg.png
res/drawable-xxhdpi-v4/ic_action_name.png
res/drawable-xxhdpi-v4/ic_down.png
res/drawable-xxhdpi-v4/ic_heart.png
res/drawable-xxhdpi-v4/ic_share.png
res/drawable/app_open_folder_bg.xml
res/drawable/blurtop.xml
res/drawable/button.xml
res/drawable/download.xml
res/drawable/notification_bg.xml
res/drawable/notification_bg_low.xml
res/drawable/notification_icon_background.xml
res/drawable/notification_tile_bg.xml
res/drawable/rate.xml
res/drawable/share.xml
res/layout-v16/notification_template_custom_big.xml
res/layout-v21/notification_action.xml
res/layout-v21/notification_action_tombstone.xml
res/layout-v21/notification_template_custom_big.xml
res/layout-v21/notification_template_icon_group.xml
res/layout/custom_dialog.xml
res/layout/layout_splash.xml
res/layout/list_header.xml
res/layout/list_tile.xml
res/layout/notification_action.xml
res/layout/notification_action_tombstone.xml
res/layout/notification_template_icon_group.xml
res/layout/notification_template_part_chronometer.xml
res/layout/notification_template_part_time.xml
res/layout/page_item.xml
res/layout/scaffold.xml
res/mipmap-hdpi-v4/home_icon.png
res/mipmap-mdpi-v4/home_icon.png
res/mipmap-xhdpi-v4/home_icon.png
res/mipmap-xxhdpi-v4/home_icon.png
res/mipmap-xxxhdpi-v4/home_icon.png
res/xml/config.xml
resources.arsc

污点分析

当apk较大时，代码量会很大，造成数据流图（ICFG）呈现爆炸式增长，所以该功能比较耗时，请先喝杯咖啡，耐心等待……

规则名称	描述信息	操作
病毒分析	使用安卓恶意软件常用的API进行污点分析	开始分析
漏洞挖掘	漏洞挖掘场景下的污点分析	开始分析
隐私合规	隐私合规场景下的污点分析：组件内污点传播、组件间污点传播、组件与库函数之间的污点传播	开始分析
密码分析	分析加密算法是否使用常量密钥、静态初始化的向量（IV）、加密模式是否使用ECB等	开始分析
Callback	因为Android中系统级的Callback并不会出现显式地进行回调方法的调用，所以如果需要分析Callback方法需要在声明文件中将其声明，这里提供一份AndroidCallbacks.txt文件，里面是一些常见的原生回调接口或类，如果有特殊接口需求，可以联系管理员	开始分析

时间	执行功能	执行结果
2024-09-29 15:03:05	生成哈希值	成功
2024-09-29 15:03:05	提取APK	成功
2024-09-29 15:03:05	探测加固信息为：未加壳	成功
2024-09-29 15:03:05	开始解压文件	成功
2024-09-29 15:03:06	获取硬编码证书/密钥库	成功
2024-09-29 15:03:08	解析 AndroidManifest.xml	成功
2024-09-29 15:03:08	使用 androguard 解析 APK	成功
2024-09-29 15:03:08	提取Manifest数据	成功
2024-09-29 15:03:08	提取应用程序基础数据，例如：app名称，版本，包名称等信息	成功
2024-09-29 15:03:08	正在从Play Store获取详细信息: simila.durga.maa.launcher	成功
2024-09-29 15:03:11	Manifest分析开始	成功
2024-09-29 15:03:11	检查恶意软件权限	成功
2024-09-29 15:03:11	提取APK中所有的类和方法	成功
2024-09-29 15:03:11	解析出1490个class，9596个method	成功
2024-09-29 15:03:11	SO文件分析开始	成功
2024-09-29 15:03:11	读取代码签名证书	成功
2024-09-29 15:03:12	检测追踪器	成功
2024-09-29 15:03:12	将 APK 反编译为 Java	成功
2024-09-29 15:03:16	代码分析开始于 - java_source	成功
2024-09-29 15:03:16	Android SAST 开始	成功
2024-09-29 15:03:18	Android API分析开始	成功
2024-09-29 15:03:20	开始进行Android 权限映射	成功
2024-09-29 15:03:21	Android权限映射已完成	成功
2024-09-29 15:03:21	从 APK 中提取字符串数据	成功
2024-09-29 15:03:22	从代码中提取字符串数据	成功
2024-09-29 15:03:22	从代码中提取字符串值和凭证数据	成功
2024-09-29 15:03:23	对提取的域名执行恶意软件检查	成功
2024-09-29 15:03:24	VirusTotal: 检查现有报告	成功
2024-09-29 15:03:25	VirusTotal: Scan finished, information embedded	成功
2024-09-29 15:03:25	保存到数据库	成功