温馨提示:本平台仅供研究软件风险、安全评估,禁止用于非法用途。由于展示的数据过于全面,请耐心等待加载完成。如有疑问或建议, 可加入我们的微信群讨论

APP评分

病毒检测 1 个厂商报毒

安全评分

文件信息

文件名称 友购 - 业务员版_1.3.1_APKPure.apk
文件大小 11.65MB
MD5 8cbb3d96369e0019e65b4dc129a11acb
SHA1 a7053228ac0e39fd5e4d43e52d23d947189e24c5
SHA256 22ff28c7e5ea73b7561c0053913ba39dce153e6b009d9a9eb5178a0601b5d674

应用信息

应用名称 友购(业务员)
包名 com.gl1721.FreeX.yollgo.shop
主活动 com.gl1721.FreeX.yollgo.shop.MainActivity
目标SDK 29     最小SDK 19
版本号 1.3.1     子版本号 10301
加固信息 未加壳

组件导出信息

扫描选项

重新扫描 管理规则 动态分析

反编译代码

Manifest文件 查看
APK文件 下载
Java源代码 查看 -- 下载

证书信息

二进制文件已签名
v1 签名: True
v2 签名: True
v3 签名: False
v4 签名: False
主题: C=ES, ST=MADRID, L=MADRID, O=MADRID, OU=MADRID, CN=MADRID
签名算法: rsassa_pkcs1v15
有效期自: 2017-05-22 22:33:02+00:00
有效期至: 2042-05-16 22:33:02+00:00
发行人: C=ES, ST=MADRID, L=MADRID, O=MADRID, OU=MADRID, CN=MADRID
序列号: 0xf4d7b39
哈希算法: sha256
证书MD5: 36112304e50f223adbef955a1dce27c7
证书SHA1: 0dcfc523ed38e6447ed9c39a46441ee7ebda901a
证书SHA256: a88b43a200954d1b96f170c625ccecb7f7b3053c521a431d11c64b9a9f6d35a2
证书SHA512: 03c1977313f82d853793b0242cd76a696139f732a19b7d788ba87b3deeecdcf77d8a97f7bbd44405437797b512f0c6c376290ee8559f6ba066759804c21a6013
公钥算法: rsa
密钥长度: 2048
指纹: fa74fe876f5a6b94dad08511426427230b3688befb1b8287992c06587413b2cc
找到 1 个唯一证书

应用程序权限

权限名称 安全等级 权限内容 权限描述 关联代码
android.permission.INTERNET 危险 完全互联网访问 允许应用程序创建网络套接字。
android.permission.CAMERA 危险 拍照和录制视频 允许应用程序拍摄照片和视频,且允许应用程序收集相机在任何时候拍到的图像。
android.permission.FLASHLIGHT 普通 控制闪光灯 允许应用程序控制闪光灯。
android.permission.ACCESS_NETWORK_STATE 普通 获取网络状态 允许应用程序查看所有网络的状态。
android.permission.ACCESS_WIFI_STATE 普通 查看Wi-Fi状态 允许应用程序查看有关Wi-Fi状态的信息。
android.permission.READ_PHONE_STATE 危险 读取手机状态和标识 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号,是否正在通话,以及对方的号码等。
android.permission.WRITE_EXTERNAL_STORAGE 危险 读取/修改/删除外部存储内容 允许应用程序写入外部存储。
com.gl1721.FreeX.yollgo.shop.permission.JPUSH_MESSAGE 未知 未知权限 来自 android 引用的未知权限。
android.permission.RECEIVE_USER_PRESENT 普通 允许程序唤醒机器 允许应用可以接收点亮屏幕或解锁广播。
android.permission.READ_EXTERNAL_STORAGE 危险 读取SD卡内容 允许应用程序从SD卡读取信息。
android.permission.MOUNT_UNMOUNT_FILESYSTEMS 危险 装载和卸载文件系统 允许应用程序装载和卸载可移动存储器的文件系统。

证书分析

高危
0
警告
1
信息
1
标题 严重程度 描述信息
已签名应用 信息 应用程序已使用代码签名证书进行签名

MANIFEST分析

高危
1
警告
11
信息
0
屏蔽
0
序号 问题 严重程度 描述信息 操作
1 应用程序可以安装在有漏洞的已更新 Android 版本上
Android 4.4-4.4.4, [minSdk=19]
信息 该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。
2 应用程序数据存在被泄露的风险
未设置[android:allowBackup]标志
警告 这个标志 [android:allowBackup]应该设置为false。默认情况下它被设置为true,允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。
3 Activity设置了TaskAffinity属性
(com.gl1721.FreeX.yollgo.shop.wxapi.WXEntryActivity)
警告 如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名
4 Activity (com.gl1721.FreeX.yollgo.shop.wxapi.WXEntryActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
5 Activity (com.gl1721.FreeX.yollgo.shop.wxapi.WXEntryActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
6 Activity (com.gl1721.FreeX.yollgo.shop.wxapi.WXPayEntryActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
7 Service (cn.jpush.android.service.DaemonService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
8 Content Provider (cn.jpush.android.service.DownloadProvider) 未被保护。
[android:exported=true]
警告 发现 Content Provider与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
9 Broadcast Receiver (cn.jiguang.cordova.push.JPushEventReceiver) 未被保护。
存在一个intent-filter。
警告 发现 Broadcast Receiver与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。
10 Activity设置了TaskAffinity属性
(cn.jpush.android.service.JNotifyActivity)
警告 如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名
11 Activity (cn.jpush.android.service.JNotifyActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
12 Service (cn.jiguang.cordova.push.PushService) 未被保护。
存在一个intent-filter。
警告 发现 Service与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。
13 高优先级的Intent (1000)
[android:priority]
警告 通过设置一个比另一个Intent更高的优先级,应用程序有效地覆盖了其他请求。

可浏览的ACTIVITIES

ACTIVITY INTENT

网络安全配置

序号 范围 严重级别 描述

API调用分析

API功能 源码文件
一般功能-> 文件操作
隐私数据-> 拍照摄像 com/mylhyl/zxing/scanner/camera/CameraManager.java
一般功能-> IPC通信
一般功能-> 加载so文件 io/liteglue/SQLiteConnector.java
一般功能-> 获取系统服务(getSystemService)
组件-> 启动 Activity com/gl1721/FreeX/yollgo/shop/wxapi/EntryActivity.java
fx/barcode.java
隐私数据-> 读写通讯录 com/mylhyl/zxing/scanner/encode/ParserUriToVCard.java
加密解密-> Base64 加密 com/tencent/a/a/a/a/h.java
加密解密-> Base64 解密 com/tencent/a/a/a/a/h.java
xu/li/cordova/wechat/Wechat.java
一般功能-> 获取WiFi相关信息 com/tencent/a/a/a/a/h.java
网络通信-> HTTP建立连接 xu/li/cordova/wechat/Util.java

源代码分析

高危
1
警告
3
信息
1
安全
0
屏蔽
0
序号 问题 等级 参考标准 文件位置 操作
1 应用程序记录日志信息,不得记录敏感信息 信息 CWE: CWE-532: 通过日志文件的信息暴露
OWASP MASVS: MSTG-STORAGE-3
2 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 警告 CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当('SQL 注入')
OWASP Top 10: M7: Client Code Quality
io/sqlc/SQLiteAndroidDatabase.java
3 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据 警告 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2
com/tencent/a/a/a/a/b.java
xu/li/cordova/wechat/Util.java
xu/li/cordova/wechat/Wechat.java
4 启用了调试配置。生产版本不能是可调试的 高危 CWE: CWE-919: 移动应用程序中的弱点
OWASP Top 10: M1: Improper Platform Usage
OWASP MASVS: MSTG-RESILIENCE-2
com/freex/lib/qcode/BuildConfig.java
5 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等 警告 CWE: CWE-312: 明文存储敏感信息
OWASP Top 10: M9: Reverse Engineering
OWASP MASVS: MSTG-STORAGE-14
com/mylhyl/zxing/scanner/encode/ParserUriToVCard.java
xu/li/cordova/wechat/Wechat.java

动态库分析

序号 动态库 NX(堆栈禁止执行) STACK CANARY(栈保护) RELRO RPATH(指定SO搜索路径) RUNPATH(指定SO搜索路径) FORTIFY(常用函数加强检查) SYMBOLS STRIPPED(裁剪符号表)
1 arm64-v8a/libsqlc-ndk-native-driver.so
True
info
二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
True
info
这个二进制文件在栈上添加了一个栈哨兵值,以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出
Full RELRO
info
此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
None
info
二进制文件没有设置运行时搜索路径或RPATH
None
info
二进制文件没有设置 RUNPATH
True
info
二进制文件有以下加固函数: ['__strlen_chk', '__memcpy_chk', '__memset_chk']
False
warning
符号可用

文件分析

序号 问题 文件

VIRUSTOTAL扫描

  检出率: 1 / 67       完整报告

反病毒引擎 检出结果
SymantecMobileInsight AdLibrary:Jpush

滥用权限

恶意软件常用权限 2/30
android.permission.CAMERA
android.permission.READ_PHONE_STATE
其它常用权限 6/46
android.permission.INTERNET
android.permission.FLASHLIGHT
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE

恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。

IP地图

域名检测

域名 状态 中国境内 位置信息 解析
configapi-api.glqa.jpushoa.com 安全
IP地址: 10.55.68.20
国家: -
地区: -
城市: -
查看: Google 地图





mta.oa.com 安全
IP地址: 141.144.196.217
国家: 荷兰(王国)
地区: 北荷兰省
城市: 阿姆斯特丹
查看: Google 地图





手机号码

网址

网址信息 源码文件
http://tools.ietf.org/html/rfc3987
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries
http://blogs.msdn.com/b/ie/archive/2008/10/16/ending-expressions.aspx
http://docs.angularjs.org/api/angular.element
https://github.com/kriskowal/q/wiki/API-Reference
http://ionicframework.com/docs/api/directive/collectionRepeat/
http://jsperf.com/isobject4
https://github.com/faisalman/ua-parser-js
http://www.ecma-international.org/ecma-262/5.1/
https://mdn.io/toUpperCase
https://mdn.io/isNaN
https://mdn.io/Number/isFinite
http://errors.angularjs.org/1.5.8/
https://itunes.apple.com/us/app/freex-zui-jian-dan-dian-huo/id1005225536?l=zh&ls=1mt=8
http://www.aptana.com/reference/html/api/HTMLAnchorElement.html
http://caniuse.com/
https://bugzilla.mozilla.org/show_bug.cgi?id=687787
https://img.freex.es
https://pay.weixin.qq.com/wiki/doc/api/app.php?chapter=9_1
https://jsperf.com/thor-indexof-vs-for/5
https://connect.microsoft.com/IE/feedback/details/1736512/
http://ecma-international.org/ecma-262/7.0/
https://mdn.io/rest_parameters
https://developer.chrome.com/extensions/sandboxingEval
https://css-tricks.com/debouncing-throttling-explained-examples/
http://url.com/id.format?q=x
http://jsperf.com/proto-map-lookup/2
http://developers.whatwg.org/webappapis.html
https://play.google.com/store/apps/details?id=com.gl1721.FreeX.yollgo
http://jsperf.com/angular-bind-vs-custom-vs-native
http://userguide.icu-project.org/formatparse/messages
http://www.html5rocks.com/en/tutorials/es6/promises/
http://jsperf.com/for-in-vs-object-keys2
https://fetch.spec.whatwg.org/
http://simon.html5.org/html-elements
https://html.spec.whatwg.org/
http://jsperf.com/object-create2
http://cwe.mitre.org/data/definitions/601.html
http://jsperf.com/clone-vs-createcomment
http://developer.telerik.com/featured/300-ms-click-delay-ios-8/
http://ionicframework.com/docs/nightly/api/service/
https://openradar.appspot.com/22186109
http://requirejs.org/docs/errors.html
https://gist.github.com/1649788
https://mdn.io/Array/slice
http://peter.michaux.ca/articles/lazy-function-definition-pattern
http://www.quirksmode.org/js/events_mouse.html
https://github.com/olado/doT
https://mdn.io/Number/isInteger
https://github.com/kriskowal/uncommonjs/blob/master/promises/specification.md.
https://wiki.whatwg.org/wiki/Sanitization_rules
https://segmentfault.com/a/1190000007204624
https://mdn.io/Number/isSafeInteger
https://github.com/MikeMcl/big.js/
http://bower.io
https://mdn.io/Number/isNaN
http://ejohn.org/blog/javascript-micro-templating/
https://ssl.freex.es
https://mdn.io/String/split
https://github.com/eslint/eslint/issues/6125
http://wiki.commonjs.org/wiki/Promises
https://segmentfault.com/q/1010000003907796
http://tools.ietf.org/html/rfc3986
http://server.com/index.html
http://code.angularjs.org/1.5.7/docs
https://web.archive.org/web/20100324014747/http
http://www.html5rocks.com/en/tutorials/developertools/sourcemaps/
http://errors.angularjs.org/1.5.3/
http://docs.python.org/library/re.html
https://www.npmjs.org/package/argsarray
http://www.yollgo.com/
https://promisesaplus.com/
https://mdn.io/Structured_clone_algorithm
https://mdn.io/setTimeout
http://angularjs.org
https://angularjs.org/doesntexist&callback=JSON_CALLBACK
https://mdn.io/toLowerCase
https://mths.be/he
https://mdn.io/spread_operator
https://mathiasbynens.be/notes/ambiguous-ampersands
http://angularjs.org/
https://github.com/angular-ui/ui-router/issues/1573
https://lodash.com/license
https://github.com/carhartl/jquery-cookie
https://mdn.io/Array/reverse
https://web.archive.org/web/20141116233347/http
https://docs.angularjs.org/guide/security
http://www.ecma-international.org/ecma-262/7.0/
https://google.com
https://github.com/jashkenas/underscore/pull/1247
http://ionicframework.com/
https://stackoverflow.com/questions/3143070/javascript-regex-iso-datetime
https://code.angularjs.org/
https://sizzlejs.com/
http://unicode.org/repos/cldr-tmp/trunk/diff/supplemental/language_plural_rules.html
http://www.gravatar.com/avatar/
https://mdn.io/clearTimeout
https://bugzilla.mozilla.org/show_bug.cgi?id=407172
http://url.com/id./format?q=x
http://docs.closure-library.googlecode.com/git/closure_goog_string_string.js.source.html
http://www.ietf.org/rfc/rfc3986.txt
http://app.yollgo.com
https://bugzilla.mozilla.org/show_bug.cgi?id=684208
https://github.com/kriskowal/q
http://docs.angularjs.org/api/ng.
http://haacked.com/archive/2008/11/20/anatomy-of-a-subtle-json-vulnerability.aspx
https://xhr.spec.whatwg.org/
https://bugzilla.mozilla.org/show_bug.cgi?id=649285
https://github.com/ftlabs/fastclick
https://developer.chrome.com/apps/api_index
https://js.foundation/
http://www.ruby-doc.org/core-2.0.0/Regexp.html
http://jsperf.com/create-constructor/2
https://lodash.com/
https://bugzilla.mozilla.org/show_bug.cgi?id=491668
http://eev.ee/blog/2015/09/12/dark-corners-of-unicode/
https://mdn.io/round
http://karma-runner.github.io/
http://ngmodules.org/modules/angular-toArrayFilter
http://cdn.mathjax.org/mathjax/latest/MathJax.js
https://jsperf.com/getall-vs-sizzle/2
http://jsperf.com/string-indexof-vs-split
http://url.spec.whatwg.org/
http://underscorejs.org/LICENSE
http://google.com
http://jquerymobile.com/
http://jsperf.com/b64tests
https://developer.microsoft.com/en-us/microsoft-edge/platform/issues/6156135/
http://angular-ui.github.com/
https://angularjs.org/greet.php?callback=JSON_CALLBACK&name=Super%20Hero
https://github.com/xu-li/cordova-plugin-wechat
https://github.com/eslint/eslint/issues/3229
https://docs.google.com/a/google.com/document/d/1pbtW2yvtmFBikfRrJd8VAsabiFkKezmYZ_PbgdjQOVU/edit
https://mathiasbynens.be/notes/javascript-unicode
http://jsperf.com/angularjs-invoke-apply-vs-switch
https://mdn.io/String/replace
http://docs.closure-library.googlecode.com/git/local_closure_goog_string_string.js.source.html
https://lodash.com/custom-builds
http://wonko.com/post/html-escaping
https://mdn.io/iteration_protocols
https://html.spec.whatwg.org/multipage/forms.html
http://james.padolsey.com/javascript/parsing-urls-with-the-dom/
https://mdn.io/Object/assign
http://drifty.com/
http://www.ietf.org/rfc/rfc2109.txt
自研引擎-A
103.7.30.94
120.198.203.175
http://pingma.qq.com:80/mstat/report
111.30.131.31
123.151.152.111
140.207.54.125
10.0.0.200
123.138.162.90
10.0.0.172
http://mta.qq.com/
http://configapi-api.glqa.jpushoa.com/v1/status
117.135.169.101
14.17.43.18
123.126.121.167
113.142.45.79
163.177.71.186
http://mta.oa.com/
180.153.8.53
自研引擎-S

FIREBASE实例

邮箱

追踪器

名称 类别 网址
JiGuang Aurora Mobile JPush Analytics https://reports.exodus-privacy.eu.org/trackers/343
Tencent Stats Analytics https://reports.exodus-privacy.eu.org/trackers/116

密钥凭证

已显示 3 个secrets
1、 极光推送的=> "JPUSH_APPKEY" : "cdfd39c15104f22e3d0f6218"
2、 极光推送的=> "JPUSH_CHANNEL" : "developer-default"
3、 6X8Y4XdM2Vhvn0KfzcEatGnWaNU=

字符串列表

建议导出为TXT,方便查看。

活动列表

已显示 7 个activities
1、 com.gl1721.FreeX.yollgo.shop.MainActivity
2、 com.freex.lib.qcode.ScannerActivity
3、 com.gl1721.FreeX.yollgo.shop.wxapi.WXEntryActivity
4、 com.gl1721.FreeX.yollgo.shop.wxapi.WXPayEntryActivity
5、 cn.jpush.android.ui.PopWinActivity
6、 cn.jpush.android.ui.PushActivity
7、 cn.jpush.android.service.JNotifyActivity

服务列表

已显示 3 个services
1、 cn.jpush.android.service.PushService
2、 cn.jpush.android.service.DaemonService
3、 cn.jiguang.cordova.push.PushService

广播接收者列表

已显示 5 个receivers
1、 cn.jpush.android.service.PushReceiver
2、 cn.jpush.android.service.AlarmReceiver
3、 cn.jpush.android.service.SchedulerReceiver
4、 cn.jiguang.cordova.push.JPushEventReceiver
5、 cn.jiguang.cordova.push.JPushReceiver

内容提供者列表

已显示 2 个providers
1、 cn.jpush.android.service.DataProvider
2、 cn.jpush.android.service.DownloadProvider

第三方SDK

SDK名称 开发者 描述信息
极光推送 极光 JPush 是经过考验的大规模 App 推送平台,每天推送消息数超过 5 亿条。 开发者集成 SDK 后,可以通过调用 API 推送消息。同时,JPush 提供可视化的 web 端控制台发送通知,统计分析推送效果。 JPush 全面支持 Android, iOS, Winphone 三大手机平台。

文件列表

AndroidManifest.xml
META-INF/CERT.RSA
META-INF/CERT.SF
META-INF/MANIFEST.MF
assets/www/API.txt
assets/www/README.md
assets/www/app/account/account-direction-info.html
assets/www/app/account/account-direction.html
assets/www/app/account/account-info.html
assets/www/app/account/account-login.html
assets/www/app/account/account-messagecode.html
assets/www/app/account/account-newpassword.html
assets/www/app/account/account-password.html
assets/www/app/account/account-register.html
assets/www/app/account/account.html
assets/www/app/animate.min.css
assets/www/app/app.css
assets/www/app/app.js
assets/www/app/config.js
assets/www/app/controller.js
assets/www/app/cordova.js
assets/www/app/db.js
assets/www/app/directive.js
assets/www/app/directive/attributes.html
assets/www/app/directive/content.html
assets/www/app/directive/count-box.html
assets/www/app/directive/ios-loading.html
assets/www/app/directive/modal.html
assets/www/app/directive/number.html
assets/www/app/directive/panel.html
assets/www/app/directive/product-banner.html
assets/www/app/directive/product-info.html
assets/www/app/directive/product-slider.html
assets/www/app/directive/product.html
assets/www/app/directive/sharebox.html
assets/www/app/directive/slides.html
assets/www/app/directive/window-product-count.html
assets/www/app/directive/window-product-multi-status.html
assets/www/app/factory.js
assets/www/app/home/home-about.html
assets/www/app/home/home-category.html
assets/www/app/home/home-client-info.html
assets/www/app/home/home-client-info2.html
assets/www/app/home/home-client-remark.html
assets/www/app/home/home-client.html
assets/www/app/home/home-company.html
assets/www/app/home/home-direction-info.html
assets/www/app/home/home-feedback.html
assets/www/app/home/home-group-selector.html
assets/www/app/home/home-group.html
assets/www/app/home/home-home.html
assets/www/app/home/home-message-info.html
assets/www/app/home/home-message.html
assets/www/app/home/home-mine.html
assets/www/app/home/home-order-info.html
assets/www/app/home/home-order-product-add.html
assets/www/app/home/home-order-product-info.html
assets/www/app/home/home-order-remark.html
assets/www/app/home/home-order.html
assets/www/app/home/home-payment-selector.html
assets/www/app/home/home-pin-add.html
assets/www/app/home/home-pin.html
assets/www/app/home/home-product-info.html
assets/www/app/home/home-productlist.html
assets/www/app/home/home-remark.html
assets/www/app/home/home-search-result.html
assets/www/app/home/home-selector.html
assets/www/app/home/home-shop.html
assets/www/app/home/home.html
assets/www/app/language/en.json
assets/www/app/language/es.json
assets/www/app/language/it.json
assets/www/app/lib/angular/angular-animate.js
assets/www/app/lib/angular/angular-animate.min.js
assets/www/app/lib/angular/angular-animate.min.js.map
assets/www/app/lib/angular/angular-aria.js
assets/www/app/lib/angular/angular-aria.min.js
assets/www/app/lib/angular/angular-aria.min.js.map
assets/www/app/lib/angular/angular-cookies.js
assets/www/app/lib/angular/angular-cookies.min.js
assets/www/app/lib/angular/angular-cookies.min.js.map
assets/www/app/lib/angular/angular-csp.css
assets/www/app/lib/angular/angular-loader.js
assets/www/app/lib/angular/angular-loader.min.js
assets/www/app/lib/angular/angular-loader.min.js.map
assets/www/app/lib/angular/angular-message-format.js
assets/www/app/lib/angular/angular-message-format.min.js
assets/www/app/lib/angular/angular-message-format.min.js.map
assets/www/app/lib/angular/angular-messages.js
assets/www/app/lib/angular/angular-messages.min.js
assets/www/app/lib/angular/angular-messages.min.js.map
assets/www/app/lib/angular/angular-mocks.js
assets/www/app/lib/angular/angular-parse-ext.js
assets/www/app/lib/angular/angular-parse-ext.min.js
assets/www/app/lib/angular/angular-parse-ext.min.js.map
assets/www/app/lib/angular/angular-resource.js
assets/www/app/lib/angular/angular-resource.min.js
assets/www/app/lib/angular/angular-resource.min.js.map
assets/www/app/lib/angular/angular-route.js
assets/www/app/lib/angular/angular-route.min.js
assets/www/app/lib/angular/angular-route.min.js.map
assets/www/app/lib/angular/angular-sanitize.js
assets/www/app/lib/angular/angular-sanitize.min.js
assets/www/app/lib/angular/angular-sanitize.min.js.map
assets/www/app/lib/angular/angular-scenario.js
assets/www/app/lib/angular/angular-touch.js
assets/www/app/lib/angular/angular-touch.min.js
assets/www/app/lib/angular/angular-touch.min.js.map
assets/www/app/lib/angular/angular-ui-router.js
assets/www/app/lib/angular/angular-ui-router.min.js
assets/www/app/lib/angular/angular.js
assets/www/app/lib/angular/angular.min.js
assets/www/app/lib/angular/angular.min.js.map
assets/www/app/lib/angular/errors.json
assets/www/app/lib/angular/version.json
assets/www/app/lib/angular/version.txt
assets/www/app/lib/beautify/beautify-css.min.js
assets/www/app/lib/beautify/beautify-html.min.js
assets/www/app/lib/beautify/beautify.min.js
assets/www/app/lib/code/code.js
assets/www/app/lib/code/ua-device.js
assets/www/app/lib/code/ua-parser.min.js
assets/www/app/lib/code/useragent-base.js
assets/www/app/lib/ionic/css/ionic.min.css
assets/www/app/lib/ionic/fonts/ionicons.eot
assets/www/app/lib/ionic/fonts/ionicons.svg
assets/www/app/lib/ionic/fonts/ionicons.ttf
assets/www/app/lib/ionic/fonts/ionicons.woff
assets/www/app/lib/ionic/js/angular-ui/angular-ui-router.min.js
assets/www/app/lib/ionic/js/angular/angular-animate.min.js
assets/www/app/lib/ionic/js/angular/angular-resource.min.js
assets/www/app/lib/ionic/js/angular/angular-sanitize.min.js
assets/www/app/lib/ionic/js/angular/angular.min.js
assets/www/app/lib/ionic/js/ionic-angular.min.js
assets/www/app/lib/ionic/js/ionic.bundle.min.js
assets/www/app/lib/ionic/js/ionic.min.js
assets/www/app/lib/ionic/version.json
assets/www/app/lib/jquery/jquery.cookie.js
assets/www/app/lib/jquery/jquery.json.min.js
assets/www/app/lib/jquery/jquery.min.js
assets/www/app/lib/lodash.js
assets/www/app/lib/ngcordova/ng-cordova-mocks.min.js
assets/www/app/lib/ngcordova/ng-cordova.min.js
assets/www/app/log.js
assets/www/app/modal/bigphoto.html
assets/www/app/modal/choose.html
assets/www/app/modal/direction.html
assets/www/app/modal/directionInfo.html
assets/www/app/modal/morecategory.html
assets/www/app/modal/orderInfo.html
assets/www/app/modal/shoplist.html
assets/www/app/modal/state.html
assets/www/apple.html
assets/www/cordova-js-src/android/nativeapiprovider.js
assets/www/cordova-js-src/android/promptbasednativeapi.js
assets/www/cordova-js-src/exec.js
assets/www/cordova-js-src/platform.js
assets/www/cordova-js-src/plugin/android/app.js
assets/www/cordova.js
assets/www/cordova_plugins.js
assets/www/ecode.html
assets/www/favicon.ico
assets/www/image/apple/android.png
assets/www/image/apple/appstore.png
assets/www/image/apple/appstore@2.png
assets/www/image/apple/pin.png
assets/www/image/apple/pin2.png
assets/www/image/apple/playstore.png
assets/www/image/apple/playstore@2.png
assets/www/image/apple/safari.png
assets/www/image/apple/safari2.png
assets/www/image/country/ad.png
assets/www/image/country/ae.png
assets/www/image/country/af.png
assets/www/image/country/ag.png
assets/www/image/country/ai.png
assets/www/image/country/al.png
assets/www/image/country/am.png
assets/www/image/country/an.png
assets/www/image/country/ao.png
assets/www/image/country/ar.png
assets/www/image/country/as.png
assets/www/image/country/at.png
assets/www/image/country/au.png
assets/www/image/country/aw.png
assets/www/image/country/ax.png
assets/www/image/country/az.png
assets/www/image/country/ba.png
assets/www/image/country/bb.png
assets/www/image/country/bd.png
assets/www/image/country/be.png
assets/www/image/country/bf.png
assets/www/image/country/bg.png
assets/www/image/country/bh.png
assets/www/image/country/bi.png
assets/www/image/country/bj.png
assets/www/image/country/bm.png
assets/www/image/country/bn.png
assets/www/image/country/bo.png
assets/www/image/country/br.png
assets/www/image/country/bs.png
assets/www/image/country/bt.png
assets/www/image/country/bv.png
assets/www/image/country/bw.png
assets/www/image/country/by.png
assets/www/image/country/bz.png
assets/www/image/country/ca.png
assets/www/image/country/catalonia.png
assets/www/image/country/cc.png
assets/www/image/country/cd.png
assets/www/image/country/cf.png
assets/www/image/country/cg.png
assets/www/image/country/ch.png
assets/www/image/country/ci.png
assets/www/image/country/ck.png
assets/www/image/country/cl.png
assets/www/image/country/cm.png
assets/www/image/country/cn.png
assets/www/image/country/co.png
assets/www/image/country/cr.png
assets/www/image/country/cs.png
assets/www/image/country/cu.png
assets/www/image/country/cv.png
assets/www/image/country/cx.png
assets/www/image/country/cy.png
assets/www/image/country/cz.png
assets/www/image/country/dj.png
assets/www/image/country/dk.png
assets/www/image/country/dm.png
assets/www/image/country/do.png
assets/www/image/country/dz.png
assets/www/image/country/ec.png
assets/www/image/country/ee.png
assets/www/image/country/eg.png
assets/www/image/country/eh.png
assets/www/image/country/england.png
assets/www/image/country/er.png
assets/www/image/country/es.png
assets/www/image/country/et.png
assets/www/image/country/eu.png
assets/www/image/country/fi.png
assets/www/image/country/fj.png
assets/www/image/country/fk.png
assets/www/image/country/fm.png
assets/www/image/country/fo.png
assets/www/image/country/fr.png
assets/www/image/country/ga.png
assets/www/image/country/galicia.png
assets/www/image/country/gb.png
assets/www/image/country/gd.png
assets/www/image/country/ge.png
assets/www/image/country/gf.png
assets/www/image/country/gg.png
assets/www/image/country/gh.png
assets/www/image/country/gi.png
assets/www/image/country/gl.png
assets/www/image/country/gm.png
assets/www/image/country/gn.png
assets/www/image/country/gp.png
assets/www/image/country/gq.png
assets/www/image/country/gr.png
assets/www/image/country/gs.png
assets/www/image/country/gt.png
assets/www/image/country/gu.png
assets/www/image/country/gw.png
assets/www/image/country/gy.png
assets/www/image/country/hk.png
assets/www/image/country/hm.png
assets/www/image/country/hn.png
assets/www/image/country/hr.png
assets/www/image/country/ht.png
assets/www/image/country/hu.png
assets/www/image/country/id.png
assets/www/image/country/ie.png
assets/www/image/country/il.png
assets/www/image/country/im.png
assets/www/image/country/in.png
assets/www/image/country/io.png
assets/www/image/country/iq.png
assets/www/image/country/ir.png
assets/www/image/country/is.png
assets/www/image/country/it.png
assets/www/image/country/je.png
assets/www/image/country/jm.png
assets/www/image/country/jo.png
assets/www/image/country/jp.png
assets/www/image/country/ke.png
assets/www/image/country/kg.png
assets/www/image/country/kh.png
assets/www/image/country/ki.png
assets/www/image/country/km.png
assets/www/image/country/kn.png
assets/www/image/country/kp.png
assets/www/image/country/kr.png
assets/www/image/country/kw.png
assets/www/image/country/ky.png
assets/www/image/country/kz.png
assets/www/image/country/la.png
assets/www/image/country/lb.png
assets/www/image/country/lc.png
assets/www/image/country/li.png
assets/www/image/country/lk.png
assets/www/image/country/lr.png
assets/www/image/country/ls.png
assets/www/image/country/lt.png
assets/www/image/country/lu.png
assets/www/image/country/lv.png
assets/www/image/country/ly.png
assets/www/image/country/ma.png
assets/www/image/country/mc.png
assets/www/image/country/md.png
assets/www/image/country/me.png
assets/www/image/country/mf.png
assets/www/image/country/mg.png
assets/www/image/country/mh.png
assets/www/image/country/mk.png
assets/www/image/country/ml.png
assets/www/image/country/mm.png
assets/www/image/country/mn.png
assets/www/image/country/mo.png
assets/www/image/country/mp.png
assets/www/image/country/mq.png
assets/www/image/country/mr.png
assets/www/image/country/ms.png
assets/www/image/country/mt.png
assets/www/image/country/mu.png
assets/www/image/country/mv.png
assets/www/image/country/mw.png
assets/www/image/country/mx.png
assets/www/image/country/my.png
assets/www/image/country/mz.png
assets/www/image/country/na.png
assets/www/image/country/nc.png
assets/www/image/country/nc2.png
assets/www/image/country/ne.png
assets/www/image/country/nf.png
assets/www/image/country/ng.png
assets/www/image/country/ni.png
assets/www/image/country/np.png
assets/www/image/country/nr.png
assets/www/image/country/nu.png
assets/www/image/country/nz.png
assets/www/image/country/om.png
assets/www/image/country/pa.png
assets/www/image/country/pe.png
assets/www/image/country/pf.png
assets/www/image/country/pg.png
assets/www/image/country/ph.png
assets/www/image/country/pk.png
assets/www/image/country/pl.png
assets/www/image/country/pm.png
assets/www/image/country/pn.png
assets/www/image/country/pr.png
assets/www/image/country/ps.png
assets/www/image/country/pt.png
assets/www/image/country/pw.png
assets/www/image/country/py.png
assets/www/image/country/qa.png
assets/www/image/country/re.png
assets/www/image/country/ro.png
assets/www/image/country/rs.png
assets/www/image/country/ru.png
assets/www/image/country/rw.png
assets/www/image/country/sa.png
assets/www/image/country/sb.png
assets/www/image/country/sc.png
assets/www/image/country/scotland.png
assets/www/image/country/sd.png
assets/www/image/country/se.png
assets/www/image/country/sg.png
assets/www/image/country/sh.png
assets/www/image/country/si.png
assets/www/image/country/sj.png
assets/www/image/country/sk.png
assets/www/image/country/sl.png
assets/www/image/country/sm.png
assets/www/image/country/sn.png
assets/www/image/country/so.png
assets/www/image/country/sr.png
assets/www/image/country/st.png
assets/www/image/country/sv.png
assets/www/image/country/sy.png
assets/www/image/country/sz.png
assets/www/image/country/tc.png
assets/www/image/country/td.png
assets/www/image/country/tf.png
assets/www/image/country/tg.png
assets/www/image/country/th.png
assets/www/image/country/tj.png
assets/www/image/country/tk.png
assets/www/image/country/tl.png
assets/www/image/country/tm.png
assets/www/image/country/tn.png
assets/www/image/country/to.png
assets/www/image/country/tr.png
assets/www/image/country/tt.png
assets/www/image/country/tv.png
assets/www/image/country/tw.png
assets/www/image/country/tz.png
assets/www/image/country/ua.png
assets/www/image/country/ug.png
assets/www/image/country/um.png
assets/www/image/country/us.png
assets/www/image/country/uy.png
assets/www/image/country/uz.png
assets/www/image/country/va.png
assets/www/image/country/vc.png
assets/www/image/country/ve.png
assets/www/image/country/vg.png
assets/www/image/country/vi.png
assets/www/image/country/vn.png
assets/www/image/country/vu.png
assets/www/image/country/wales.png
assets/www/image/country/wf.png
assets/www/image/country/ws.png
assets/www/image/country/ye.png
assets/www/image/country/yt.png
assets/www/image/country/za.png
assets/www/image/country/zm.png
assets/www/image/country/zw.png
assets/www/image/payment/coin.png
assets/www/image/payment/info.png
assets/www/image/payment/payment.png
assets/www/image/payment/phone.png
assets/www/image/payment/pin.png
assets/www/image/payment/sale.png
assets/www/image/payment/total.png
assets/www/image/payment/user.png
assets/www/image/system/320X480.png
assets/www/image/system/640x1136-1.png
assets/www/image/system/640x1136.png
assets/www/image/system/640x960-1.png
assets/www/image/system/640x960.png
assets/www/image/system/BtnIncrease.png
assets/www/image/system/BtnIncrease@2x.png
assets/www/image/system/BtnIncrease@3x.png
assets/www/image/system/Icon-40.png
assets/www/image/system/Icon-40@2x.png
assets/www/image/system/Icon-40@3x.png
assets/www/image/system/Icon-60@2x.png
assets/www/image/system/Icon-60@3x.png
assets/www/image/system/Icon-72.png
assets/www/image/system/Icon-72@2x.png
assets/www/image/system/Icon-76.png
assets/www/image/system/Icon-76@2x.png
assets/www/image/system/Icon-83.5@2x.png
assets/www/image/system/Icon-Small-50.png
assets/www/image/system/Icon-Small-50@2x.png
assets/www/image/system/Icon-Small.png
assets/www/image/system/Icon-Small@2x.png
assets/www/image/system/Icon-Small@3x.png
assets/www/image/system/Icon.png
assets/www/image/system/Icon@2x.png
assets/www/image/system/LLArrowRightGray@2x.png
assets/www/image/system/LLArrowRightGray@3x.png
assets/www/image/system/LLCellIndicator@2x.png
assets/www/image/system/LLCellIndicator@3x.png
assets/www/image/system/LLMenuRoundAdd@2x.png
assets/www/image/system/LLMenuRoundAdd@3x.png
assets/www/image/system/NB_hot@2x.png
assets/www/image/system/NB_hot@3x.png
assets/www/image/system/NB_new@2x.png
assets/www/image/system/NB_new@3x.png
assets/www/image/system/NB_pro@2x.png
assets/www/image/system/NB_pro@3x.png
assets/www/image/system/about.jpg
assets/www/image/system/actions@2x.png
assets/www/image/system/address_edit_highlighted@2x.png
assets/www/image/system/address_edit_normal@2x.png
assets/www/image/system/adduser@2x.png
assets/www/image/system/alarm@2x.png
assets/www/image/system/album@2x.png
assets/www/image/system/all_arrow.png
assets/www/image/system/all_arrow@2x.png
assets/www/image/system/arc@2x.png
assets/www/image/system/back1@2x.png
assets/www/image/system/back@2x.png
assets/www/image/system/bandaid@2x.png
assets/www/image/system/barcode.png
assets/www/image/system/barcode@x.png
assets/www/image/system/bg.jpg
assets/www/image/system/bg_deal.png
assets/www/image/system/bg_deal@2x.png
assets/www/image/system/bluetooth@2x.png
assets/www/image/system/bookmarks@2x.png
assets/www/image/system/bookmarks_selected@2x.png
assets/www/image/system/box@2x.png
assets/www/image/system/briefcase@2x.png
assets/www/image/system/btnAdd@2x.png
assets/www/image/system/btnAdd@3x.png
assets/www/image/system/btn_share@2x.png
assets/www/image/system/btn_share@3x.png
assets/www/image/system/btnback@2x.png
assets/www/image/system/btnback@3x.png
assets/www/image/system/btnsetting.png
assets/www/image/system/btnsetting@2x.png
assets/www/image/system/btnsetting@3x.png
assets/www/image/system/burger.png
assets/www/image/system/burger@2x.png
assets/www/image/system/button-more.png
assets/www/image/system/button_add.png
assets/www/image/system/button_remove.png
assets/www/image/system/calculator@2x.png
assets/www/image/system/camara@2x.png
assets/www/image/system/car@2x.png
assets/www/image/system/cart2@2x.png
assets/www/image/system/cart@2x.png
assets/www/image/system/cart_add.png
assets/www/image/system/cart_icon_empty@2x.png
assets/www/image/system/cash@2x.png
assets/www/image/system/chat.png
assets/www/image/system/client-info-bg-origen.jpg
assets/www/image/system/client-info-bg.jpg
assets/www/image/system/client-info-user.png
assets/www/image/system/clock@2x.png
assets/www/image/system/cloud@2x.png
assets/www/image/system/clouddownload@2x.png
assets/www/image/system/cloudupload@2x.png
assets/www/image/system/coinpig@2x.png
assets/www/image/system/copyfile@2x.png
assets/www/image/system/copyfile_selected@2x.png
assets/www/image/system/cube@2x.png
assets/www/image/system/deleteuser@2x.png
assets/www/image/system/diamond@2x.png
assets/www/image/system/disk@2x.png
assets/www/image/system/doorlock@2x.png
assets/www/image/system/down@2x.png
assets/www/image/system/down@3x.png
assets/www/image/system/down_dark.png
assets/www/image/system/downarrow@2x.png
assets/www/image/system/download@2x.png
assets/www/image/system/drawer@2x.png
assets/www/image/system/dumbbell@2x.png
assets/www/image/system/ecode.gif
assets/www/image/system/ecode.png
assets/www/image/system/ecode2.gif
assets/www/image/system/ecode2.png
assets/www/image/system/eyedropper@2x.png
assets/www/image/system/feedBack_service@2x.png
assets/www/image/system/female@2x.png
assets/www/image/system/file@2x.png
assets/www/image/system/film@2x.png
assets/www/image/system/flag@2x.png
assets/www/image/system/folder@2x.png
assets/www/image/system/fxlogo.png
assets/www/image/system/global@2x.png
assets/www/image/system/group.png
assets/www/image/system/hammer@2x.png
assets/www/image/system/headphones@2x.png
assets/www/image/system/heart@2x.png
assets/www/image/system/helm@2x.png
assets/www/image/system/home_art@2x.png
assets/www/image/system/home_des@2x.png
assets/www/image/system/home_hot@2x.png
assets/www/image/system/home_kehu@2x.png
assets/www/image/system/home_msg@2x.png
assets/www/image/system/home_new@2x.png
assets/www/image/system/home_ped@2x.png
assets/www/image/system/home_pedido@2x.png
assets/www/image/system/home_sale@2x.png
assets/www/image/system/home_shop@2x.png
assets/www/image/system/hourglass@2x.png
assets/www/image/system/icon-group.png
assets/www/image/system/icon-lock.png
assets/www/image/system/icon-pen.png
assets/www/image/system/icon.jpg
assets/www/image/system/icon@2.jpg
assets/www/image/system/icon_addshop.png
assets/www/image/system/icon_cart.png
assets/www/image/system/icon_category.png
assets/www/image/system/icon_direction.png
assets/www/image/system/icon_history.png
assets/www/image/system/icon_lighting@2x.png
assets/www/image/system/icon_message.png
assets/www/image/system/icon_my.png
assets/www/image/system/icon_mystore@2x.png
assets/www/image/system/icon_mystore@3x.png
assets/www/image/system/icon_new.png
assets/www/image/system/icon_new@2x.png
assets/www/image/system/icon_new@3x.png
assets/www/image/system/icon_newshop.png
assets/www/image/system/icon_order.png
assets/www/image/system/icon_photo.png
assets/www/image/system/icon_photo_active.png
assets/www/image/system/icon_radius.png
assets/www/image/system/icon_recoment.png
assets/www/image/system/icon_sale.png
assets/www/image/system/icon_search.png
assets/www/image/system/icon_search_none.png
assets/www/image/system/icon_share.png
assets/www/image/system/icon_shop.png
assets/www/image/system/icon_star.png
assets/www/image/system/icon_star_active.png
assets/www/image/system/icon_user.png
assets/www/image/system/img_nophoto.png
assets/www/image/system/info@2x.png
assets/www/image/system/joy@2x.png
assets/www/image/system/junk@2x.png
assets/www/image/system/kehu_blank@2x.png
assets/www/image/system/kehu_blank@3x.png
assets/www/image/system/key.png
assets/www/image/system/key@2x.png
assets/www/image/system/leaf@2x.png
assets/www/image/system/leftarrow@2x.png
assets/www/image/system/less@2x.png
assets/www/image/system/like@2x.png
assets/www/image/system/list_bg.png
assets/www/image/system/list_bg@2x.png
assets/www/image/system/list_hot.png
assets/www/image/system/list_hot@2x.png
assets/www/image/system/list_new.png
assets/www/image/system/list_new@2x.png
assets/www/image/system/list_promo.png
assets/www/image/system/list_promo@2x.png
assets/www/image/system/loading.gif
assets/www/image/system/lock_blue.png
assets/www/image/system/lock_green.png
assets/www/image/system/lock_red.png
assets/www/image/system/login_name.png
assets/www/image/system/login_password.png
assets/www/image/system/look@2x.png
assets/www/image/system/magicwand@2x.png
assets/www/image/system/mail@2x.png
assets/www/image/system/male@2x.png
assets/www/image/system/map@2x.png
assets/www/image/system/metal@2x.png
assets/www/image/system/mine-bg.jpg
assets/www/image/system/moments.png
assets/www/image/system/more@2x.png
assets/www/image/system/msg_system.png
assets/www/image/system/mute@2x.png
assets/www/image/system/my_address_icon@2x.png
assets/www/image/system/my_avatar@2x.png
assets/www/image/system/my_avatar_bg@2x.png
assets/www/image/system/my_feedback_icon@2x.png
assets/www/image/system/my_serviceonline_icon@2x.png
assets/www/image/system/my_share_icon@2x.png
assets/www/image/system/next@2x.png
assets/www/image/system/no_data.png
assets/www/image/system/note1@2x.png
assets/www/image/system/note@2x.png
assets/www/image/system/openapp.jpg
assets/www/image/system/paintbuket@2x.png
assets/www/image/system/papelplane@2x.png
assets/www/image/system/paperclip@2x.png
assets/www/image/system/pedido@2x.png
assets/www/image/system/pendrive@2x.png
assets/www/image/system/people.png
assets/www/image/system/phone.png
assets/www/image/system/photo@2x.png
assets/www/image/system/photoX@2x.png
assets/www/image/system/photo_selected@2x.png
assets/www/image/system/photogallery@2x.png
assets/www/image/system/pin@2x.png
assets/www/image/system/placeholder2.png
assets/www/image/system/placeholder3.png
assets/www/image/system/placeholder3@2x.png
assets/www/image/system/placeholder3@3x.png
assets/www/image/system/placeholder@2x.png
assets/www/image/system/plug@2x.png
assets/www/image/system/plugin@2x.png
assets/www/image/system/plus@2x.png
assets/www/image/system/product_bg.png
assets/www/image/system/product_bg@2x.png
assets/www/image/system/product_hot.png
assets/www/image/system/product_hot@2x.png
assets/www/image/system/product_new.png
assets/www/image/system/product_new@2x.png
assets/www/image/system/product_promo.png
assets/www/image/system/product_promo@2x.png
assets/www/image/system/product_tag.png
assets/www/image/system/red@2x.png
assets/www/image/system/refresh@2x.png
assets/www/image/system/refreshcloud@2x.png
assets/www/image/system/reload.png
assets/www/image/system/rightarrow@2x.png
assets/www/image/system/rocket@2x.png
assets/www/image/system/safe@2x.png
assets/www/image/system/scan_qrcode@2x.png
assets/www/image/system/scissors1@2x.png
assets/www/image/system/scissors@2x.png
assets/www/image/system/search2@2x.png
assets/www/image/system/search2@3x.png
assets/www/image/system/search@2x.png
assets/www/image/system/search@3x.png
assets/www/image/system/setting_down.png
assets/www/image/system/settings@2x.png
assets/www/image/system/settingsX@2x.png
assets/www/image/system/shield@2x.png
assets/www/image/system/shop@2x.png
assets/www/image/system/shop_empty@2x.png
assets/www/image/system/shop_empty@3x.png
assets/www/image/system/shop_list_new@2x.png
assets/www/image/system/shoprail@2x.png
assets/www/image/system/sin_logo@2x.png
assets/www/image/system/smile@2x.png
assets/www/image/system/star@2x.png
assets/www/image/system/star_selected@2x.png
assets/www/image/system/stopwatch@2x.png
assets/www/image/system/submit@2x.png
assets/www/image/system/submit@3x.png
assets/www/image/system/switch@2x.png
assets/www/image/system/tab_collection.png
assets/www/image/system/tab_collection@2x.png
assets/www/image/system/tab_table.png
assets/www/image/system/tab_table@2x.png
assets/www/image/system/timer@2x.png
assets/www/image/system/trash@2x.png
assets/www/image/system/uparrow@2x.png
assets/www/image/system/upload@2x.png
assets/www/image/system/usb@2x.png
assets/www/image/system/user@2x.png
assets/www/image/system/user_selected@2x.png
assets/www/image/system/userfemale@2x.png
assets/www/image/system/userid@2x.png
assets/www/image/system/users@2x.png
assets/www/image/system/v2_increase@2x.png
assets/www/image/system/v2_reduce@2x.png
assets/www/image/system/vector@2x.png
assets/www/image/system/volume@2x.png
assets/www/image/system/wave.png
assets/www/image/system/wave.psd
assets/www/image/system/way@2x.png
assets/www/image/system/wine@2x.png
assets/www/image/system/worldmap@2x.png
assets/www/image/system/wristwatch@2x.png
assets/www/index.html
assets/www/localstorage.html
assets/www/manifest.json
assets/www/plugins/com.phonegap.plugin.mobile-accessibility/android/AndroidVox_v1.js
assets/www/plugins/com.phonegap.plugin.mobile-accessibility/android/chromeandroidvox.js
assets/www/plugins/cordova-plugin-android-permissions/www/permissions.js
assets/www/plugins/cordova-plugin-barcode/www/barcode.js
assets/www/plugins/cordova-plugin-device/www/device.js
assets/www/plugins/cordova-plugin-ionic-keyboard/www/android/keyboard.js
assets/www/plugins/cordova-plugin-network-information/www/Connection.js
assets/www/plugins/cordova-plugin-network-information/www/network.js
assets/www/plugins/cordova-plugin-splashscreen/www/splashscreen.js
assets/www/plugins/cordova-plugin-statusbar/www/statusbar.js
assets/www/plugins/cordova-plugin-uuid/www/uuid.js
assets/www/plugins/cordova-plugin-wechat/www/wechat.js
assets/www/plugins/cordova-sqlite-storage/www/SQLitePlugin.js
assets/www/plugins/jpush-phonegap-plugin-greetgo/www/JPushPlugin.js
assets/www/plugins/phonegap-plugin-mobile-accessibility/www/MobileAccessibilityNotifications.js
assets/www/plugins/phonegap-plugin-mobile-accessibility/www/mobile-accessibility.js
assets/www/web-market.code-workspace
classes.dex
lib/arm64-v8a/libjcore260.so
lib/arm64-v8a/libsqlc-ndk-native-driver.so
lib/armeabi-v7a/libjcore260.so
lib/armeabi-v7a/libsqlc-ndk-native-driver.so
lib/armeabi/libjcore260.so
lib/mips/libjcore260.so
lib/mips64/libjcore260.so
lib/x86/libjcore260.so
lib/x86/libsqlc-ndk-native-driver.so
lib/x86_64/libjcore260.so
lib/x86_64/libsqlc-ndk-native-driver.so
res/drawable-hdpi-v4/jpush_ic_richpush_actionbar_back.png
res/drawable-hdpi-v4/jpush_ic_richpush_actionbar_divider.png
res/drawable-land-hdpi-v4/screen.png
res/drawable-land-ldpi-v4/screen.png
res/drawable-land-mdpi-v4/screen.png
res/drawable-land-xhdpi-v4/screen.png
res/drawable-land-xxhdpi-v4/screen.png
res/drawable-land-xxxhdpi-v4/screen.png
res/drawable-port-hdpi-v4/screen.png
res/drawable-port-ldpi-v4/screen.png
res/drawable-port-mdpi-v4/screen.png
res/drawable-port-xhdpi-v4/screen.png
res/drawable-port-xxhdpi-v4/screen.png
res/drawable-port-xxxhdpi-v4/screen.png
res/drawable/jpush_richpush_btn_selector.xml
res/drawable/jpush_richpush_progressbar.xml
res/layout-v21/push_notification.xml
res/layout/activity_scanner.xml
res/layout/jpush_popwin_layout.xml
res/layout/jpush_webview_layout.xml
res/layout/push_notification.xml
res/mipmap-hdpi-v4/ic_launcher.png
res/mipmap-ldpi-v4/ic_launcher.png
res/mipmap-mdpi-v4/ic_launcher.png
res/mipmap-xhdpi-v4/ic_launcher.png
res/mipmap-xxhdpi-v4/ic_launcher.png
res/mipmap-xxxhdpi-v4/ic_launcher.png
res/mipmap/wx_qcode_line.png
res/xml/config.xml
resources.arsc

污点分析

当apk较大时,代码量会很大,造成数据流图(ICFG)呈现爆炸式增长,所以该功能比较耗时,请先喝杯咖啡,耐心等待……
规则名称 描述信息 操作
病毒分析 使用安卓恶意软件常用的API进行污点分析 开始分析  
漏洞挖掘 漏洞挖掘场景下的污点分析 开始分析  
隐私合规 隐私合规场景下的污点分析:组件内污点传播、组件间污点传播、组件与库函数之间的污点传播 开始分析  
密码分析 分析加密算法是否使用常量密钥、静态初始化的向量(IV)、加密模式是否使用ECB等 开始分析  
Callback 因为Android中系统级的Callback并不会出现显式地进行回调方法的调用,所以如果需要分析Callback方法需要在声明文件中将其声明,这里提供一份AndroidCallbacks.txt文件,里面是一些常见的原生回调接口或类,如果有特殊接口需求,可以联系管理员 开始分析