温馨提示:本平台仅供研究软件风险、安全评估,禁止用于非法用途。由于展示的数据过于全面,请耐心等待加载完成。如有疑问或建议, 可加入我们的微信群讨论

APP评分

病毒检测 13 个厂商报毒

安全评分

文件信息

文件名称 2b82c83adcf63cded8277a07189fd52a06406e08d2c891bbe09c73aaaf3dbff1.apk
文件大小 5.53MB
MD5 a4419df488fc10f11c81547db5b09b7c
SHA1 87a6328deeb4124854caf7ec99433561313e82cc
SHA256 2b82c83adcf63cded8277a07189fd52a06406e08d2c891bbe09c73aaaf3dbff1

应用信息

应用名称 应用宝
包名 com.tencent.android.qqdownloader
主活动 com.tencent.assistant.activity.SplashActivity
目标SDK 17     最小SDK 7
版本号 5.2.1     子版本号 5213129
加固信息 未加壳

组件导出信息

反编译代码

Manifest文件 查看
APK文件 下载
Java源代码 查看 -- 下载

证书信息

二进制文件已签名
v1 签名: True
v2 签名: False
v3 签名: False
v4 签名: False
主题: C=86, ST=Beijing City, L=Beijing City, O=QZone Team of Tencent Company, OU=Tencent Company, CN=Android QZone Team
签名算法: rsassa_pkcs1v15
有效期自: 2010-06-27 04:08:02+00:00
有效期至: 2035-06-21 04:08:02+00:00
发行人: C=86, ST=Beijing City, L=Beijing City, O=QZone Team of Tencent Company, OU=Tencent Company, CN=Android QZone Team
序列号: 0x4c26cea2
哈希算法: sha1
证书MD5: a095641b30785f28642708f481603e0b
证书SHA1: 2677c0f3bc06b2bb627c5653040e6da8b2f5e39c
证书SHA256: 9c286b8beb45a6bc2642e2e52255c7f892573a7d5da7cb4598c419a46e898d36
证书SHA512: 04008877a9efe8ac3eeaa59a002fa9f86d01a21a338c63e3282087bddc2f6d7293bd80da3becd7fd8b186fcb2d5ff9ca0d6c4c8b9f8694ac362d2a9b36cbce95
找到 1 个唯一证书

应用程序权限

权限名称 安全等级 权限内容 权限描述 关联代码
oicq.wlogin_sdk.permission.WloginProvider.READ 未知 未知权限 来自 android 引用的未知权限。
oicq.wlogin_sdk.permission.WloginProvider.WRITE 未知 未知权限 来自 android 引用的未知权限。
com.qq.AppService.permission.out.IPC_SERVICE 未知 未知权限 来自 android 引用的未知权限。
com.qq.superuser.READ_PERMISSION 未知 未知权限 来自 android 引用的未知权限。
com.qq.AppService.permission.out.CACHE_READ_PERMISSION 未知 未知权限 来自 android 引用的未知权限。
com.qq.AppService.permission.out.CACHE_WRITE_PERMISSION 未知 未知权限 来自 android 引用的未知权限。
com.android.launcher.permission.READ_SETTINGS 危险 读取桌面快捷方式 这种权限的作用是允许应用读取桌面快捷方式的设置。
com.android.launcher.permission.WRITE_SETTINGS 未知 未知权限 来自 android 引用的未知权限。
com.android.launcher.permission.INSTALL_SHORTCUT 签名 创建快捷方式 这个权限是允许应用程序创建桌面快捷方式。
com.android.launcher.permission.UNINSTALL_SHORTCUT 签名 删除快捷方式 这个权限是允许应用程序删除桌面快捷方式。
android.permission.BROADCAST_STICKY 普通 发送置顶广播 允许应用程序发送顽固广播,这些广播在结束后仍会保留。恶意应用程序可能会借此使手机耗用太多内存,从而降低其速度或稳定性。
com/qq/AppService/AppInstaller.java
com/qq/AppService/AppService.java
com/qq/AppService/AstApp.java
com/qq/AppService/ComposeSmsActivity.java
com/qq/AppService/HeadlessSmsSendService.java
com/qq/AppService/MainReceiver.java
com/qq/AppService/SmsManagerActivity.java
com/qq/AppService/StartApp.java
com/qq/AppService/UsbPage.java
com/qq/AppService/WifiPage.java
com/qq/a/a/c.java
com/qq/provider/ab.java
com/qq/receiver/NetReceiver.java
com/tencent/android/qqdownloader/wxapi/WXEntryActivity.java
com/tencent/assistant/activity/AppBackupActivity.java
com/tencent/assistant/activity/BaseActivity.java
com/tencent/assistant/activity/BrowserActivity.java
com/tencent/assistant/activity/ShortCutActivity.java
com/tencent/assistant/activity/SplashActivity.java
com/tencent/assistant/activity/VideoActivity.java
com/tencent/assistant/activity/VideoActivityV2.java
com/tencent/assistant/activity/hl.java
com/tencent/assistant/activity/pictureprocessor/ShowPictureActivity.java
com/tencent/assistant/adapter/ac.java
com/tencent/assistant/apilevel/FullscreenableChromeClient.java
com/tencent/assistant/apilevel/b.java
com/tencent/assistant/component/PluginDownStateButton.java
com/tencent/assistant/component/appdetail/process/i.java
com/tencent/assistant/component/appdetail/process/n.java
com/tencent/assistant/component/co.java
com/tencent/assistant/d/b.java
com/tencent/assistant/g/e.java
com/tencent/assistant/js/JsBridge.java
com/tencent/assistant/link/LinkProxyActivity.java
com/tencent/assistant/link/a.java
com/tencent/assistant/localres/localapk/loadapkservice/GetApkInfoService.java
com/tencent/assistant/login/b.java
com/tencent/assistant/manager/notification/AbstractNotificationService.java
com/tencent/assistant/plugin/PluginActivity.java
com/tencent/assistant/plugin/PluginContext.java
com/tencent/assistant/plugin/PluginHelper.java
com/tencent/assistant/plugin/PluginService.java
com/tencent/assistant/plugin/mgr/PluginConnectNotificationService.java
com/tencent/assistant/plugin/proxy/PluginProxyActivity.java
com/tencent/assistant/plugin/system/PluginLoader.java
com/tencent/assistant/plugin/system/PluginStarter.java
com/tencent/assistant/receiver/DockRubbishRelateReceiver.java
com/tencent/assistant/receiver/SDKRelatedReceiver.java
com/tencent/assistant/service/DockRubbishRelateService.java
com/tencent/assistant/service/DownloadingService.java
com/tencent/assistant/uninstall/WakeUpActivity.java
com/tencent/assistant/utils/FunctionUtils.java
com/tencent/assistant/utils/ac.java
com/tencent/assistant/utils/at.java
com/tencent/assistant/utils/au.java
com/tencent/assistant/utils/q.java
com/tencent/assistantv2/activity/n.java
com/tencent/assistantv2/adapter/AssistantTabAdapter.java
com/tencent/assistantv2/component/TxManagerCommContainView.java
com/tencent/assistantv2/component/TxWebView.java
com/tencent/assistantv2/component/TxWebViewContainer.java
com/tencent/assistantv2/component/UcTitleView.java
com/tencent/assistantv2/component/cx.java
com/tencent/assistantv2/component/cy.java
com/tencent/assistantv2/component/dv.java
com/tencent/assistantv2/component/dw.java
com/tencent/assistantv2/component/ej.java
com/tencent/assistantv2/component/fps/a.java
com/tencent/feedback/common/f.java
com/tencent/securemodule/impl/SecureModuleService.java
com/tencent/securemodule/impl/SecureService.java
com/tencent/securemodule/ui/TransparentActivity.java
android.permission.RECEIVE_BOOT_COMPLETED 普通 开机自启 允许应用程序在系统完成启动后即自行启动。这样会延长手机的启动时间,而且如果应用程序一直运行,会降低手机的整体速度。
com/qq/AppService/APKReceiver.java
com/qq/AppService/AstApp.java
com/qq/AppService/AuthorReceiver.java
com/qq/AppService/LoginReceiver.java
com/qq/AppService/MainReceiver.java
com/qq/AppService/MmsReceiver.java
com/qq/AppService/PowerReceiver.java
com/qq/AppService/SMSReceiver.java
com/qq/AppService/SmsSentReceiver.java
com/qq/AppService/SmsXReceiver.java
com/qq/AppService/StorageListener.java
com/qq/AppService/k.java
com/qq/receiver/NetReceiver.java
com/tencent/assistant/activity/BaseActivity.java
com/tencent/assistant/activity/SplashActivity.java
com/tencent/assistant/activity/bc.java
com/tencent/assistant/activity/gs.java
com/tencent/assistant/backgroundscan/BackgroundPushReceiver.java
com/tencent/assistant/backgroundscan/BackgroundReceiver.java
com/tencent/assistant/d/b.java
com/tencent/assistant/d/d.java
com/tencent/assistant/module/timer/RecoverAppListReceiver.java
com/tencent/assistant/module/timer/ScheduleJobReceiver.java
com/tencent/assistant/plugin/system/PluginBackToBaoReceiver.java
com/tencent/assistant/plugin/system/PluginDispatchReceiver.java
com/tencent/assistant/receiver/BatteryStatusReceiver.java
com/tencent/assistant/receiver/DockRubbishRelateReceiver.java
com/tencent/assistant/receiver/NetworkMonitorReceiver.java
com/tencent/assistant/receiver/PackageChangedReceiver.java
com/tencent/assistant/receiver/PhoneStatusReceiver.java
com/tencent/assistant/receiver/QubeThemeInstallReceiver.java
com/tencent/assistant/receiver/SDKRelatedReceiver.java
com/tencent/assistant/receiver/SdCardEventReceiver.java
com/tencent/assistant/receiver/StorageLowReceiver.java
com/tencent/assistant/uninstall/WakeUpReceiver.java
com/tencent/downloadsdk/monitor/NetworkMonitorReceiver.java
com/tencent/downloadsdk/monitor/SdCardEventReceiver.java
com/tencent/securemodule/impl/SecureModuleService.java
com/tencent/securemodule/ui/SecureEventReceiver.java
com/tencent/wcs/proxy/heartbeat/HeartBeatService.java
com/tencent/wcs/proxy/j.java
android.permission.BATTERY_STATS 普通 修改电池统计 允许对手机电池统计信息进行修改
android.permission.READ_CONTACTS 危险 读取联系人信息 允允许应用程序读取您手机上存储的所有联系人(地址)数据。恶意应用程序可借此将您的数据发送给其他人。
android.permission.WRITE_CONTACTS 危险 写入联系人信息 允许应用程序修改您手机上存储的联系人(地址)数据。恶意应用程序可借此清除或修改您的联系人数据。
android.permission.WRITE_CALL_LOG 危险 写入通话记录 允许应用程序写入(但不读取)用户的通话记录数据。
android.permission.READ_CALL_LOG 危险 读取通话记录 允许应用程序读取用户的通话记录
android.permission.SEND_SMS 危险 发送短信 允许应用程序发送短信。恶意应用程序可能会不经您的确认就发送信息,给您带来费用。
android.permission.WRITE_SMS 危险 编辑短信或彩信 允许应用程序写入手机或 SIM 卡中存储的短信。恶意应用程序可借此删除您的信息。
android.permission.READ_SMS 危险 读取短信 允许应用程序读取您的手机或 SIM 卡中存储的短信。恶意应用程序可借此读取您的机密信息。
android.permission.INTERNET 危险 完全互联网访问 允许应用程序创建网络套接字。
android.permission.RECEIVE_SMS 危险 接收短信 允许应用程序接收短信。 恶意程序会在用户未知的情况下监视或删除。
com/qq/AppService/APKReceiver.java
com/qq/AppService/AuthorReceiver.java
com/qq/AppService/LoginReceiver.java
com/qq/AppService/MainReceiver.java
com/qq/AppService/MmsReceiver.java
com/qq/AppService/PowerReceiver.java
com/qq/AppService/SMSReceiver.java
com/qq/AppService/SmsSentReceiver.java
com/qq/AppService/SmsXReceiver.java
com/qq/AppService/StorageListener.java
com/qq/AppService/k.java
com/qq/receiver/NetReceiver.java
com/tencent/assistant/activity/SplashActivity.java
com/tencent/assistant/activity/bc.java
com/tencent/assistant/activity/gs.java
com/tencent/assistant/backgroundscan/BackgroundPushReceiver.java
com/tencent/assistant/backgroundscan/BackgroundReceiver.java
com/tencent/assistant/d/d.java
com/tencent/assistant/module/timer/RecoverAppListReceiver.java
com/tencent/assistant/module/timer/ScheduleJobReceiver.java
com/tencent/assistant/plugin/system/PluginBackToBaoReceiver.java
com/tencent/assistant/plugin/system/PluginDispatchReceiver.java
com/tencent/assistant/receiver/BatteryStatusReceiver.java
com/tencent/assistant/receiver/DockRubbishRelateReceiver.java
com/tencent/assistant/receiver/NetworkMonitorReceiver.java
com/tencent/assistant/receiver/PackageChangedReceiver.java
com/tencent/assistant/receiver/PhoneStatusReceiver.java
com/tencent/assistant/receiver/QubeThemeInstallReceiver.java
com/tencent/assistant/receiver/SDKRelatedReceiver.java
com/tencent/assistant/receiver/SdCardEventReceiver.java
com/tencent/assistant/receiver/StorageLowReceiver.java
com/tencent/assistant/uninstall/WakeUpReceiver.java
com/tencent/downloadsdk/monitor/NetworkMonitorReceiver.java
com/tencent/downloadsdk/monitor/SdCardEventReceiver.java
com/tencent/securemodule/impl/SecureModuleService.java
com/tencent/securemodule/ui/SecureEventReceiver.java
com/tencent/wcs/proxy/heartbeat/HeartBeatService.java
com/tencent/wcs/proxy/j.java
android.permission.READ_PHONE_STATE 危险 读取手机状态和标识 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号,是否正在通话,以及对方的号码等。
android.permission.SET_WALLPAPER 普通 设置壁纸 允许应用程序设置壁纸。
android.permission.ACCESS_WIFI_STATE 普通 查看Wi-Fi状态 允许应用程序查看有关Wi-Fi状态的信息。
android.permission.CHANGE_WIFI_STATE 危险 改变Wi-Fi状态 允许应用程序改变Wi-Fi状态。
android.permission.ACCESS_NETWORK_STATE 普通 获取网络状态 允许应用程序查看所有网络的状态。
android.permission.CALL_PHONE 危险 直接拨打电话 允许应用程序直接拨打电话。恶意程序会在用户未知的情况下拨打电话造成损失。但不被允许拨打紧急电话。
android.permission.WAKE_LOCK 危险 防止手机休眠 允许应用程序防止手机休眠,在手机屏幕关闭后后台进程仍然运行。
android.permission.DISABLE_KEYGUARD 危险 禁用键盘锁 允许应用程序停用键锁和任何关联的密码安全设置。例如,在手机上接听电话时停用键锁,在通话结束后重新启用键锁。
android.permission.VIBRATE 普通 控制振动器 允许应用程序控制振动器,用于消息通知振动功能。
android.permission.WRITE_SETTINGS 危险 修改全局系统设置 允许应用程序修改系统设置方面的数据。恶意应用程序可借此破坏您的系统配置。
android.permission.READ_CALENDAR 危险 读取日历活动 允许应用程序读取您手机上存储的所有日历活动。恶意应用程序可借此将您的日历活动发送给其他人。
android.permission.WRITE_CALENDAR 危险 添加或修改日历活动以及向邀请对象发送电子邮件 允许应用程序添加或更改日历中的活动,这可能会向邀请对象发送电子邮件。恶意应用程序可能会借此清除或修改您的日历活动,或者向邀请对象发送电子邮件。
com.android.browser.permission.READ_HISTORY_BOOKMARKS 危险 获取自带浏览器上网记录 恶意代码可有利用此权限窃取用户的上网记录和书签。
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS 危险 修改自带浏览器上网记录 恶意代码可有利用此权限篡改用户的上网记录和书签。
android.permission.GET_ACCOUNTS 普通 探索已知账号 允许应用程序访问帐户服务中的帐户列表。
android.permission.RESTART_PACKAGES 普通 重启进程 允许程序自己重启或重启其他程序
android.permission.BLUETOOTH 危险 创建蓝牙连接 允许应用程序查看或创建蓝牙连接。
android.permission.FLASHLIGHT 普通 控制闪光灯 允许应用程序控制闪光灯。
android.permission.CAMERA 危险 拍照和录制视频 允许应用程序拍摄照片和视频,且允许应用程序收集相机在任何时候拍到的图像。
android.permission.GET_TASKS 危险 检索当前运行的应用程序 允许应用程序检索有关当前和最近运行的任务的信息。恶意应用程序可借此发现有关其他应用程序的保密信息。
android.permission.READ_EXTERNAL_STORAGE 危险 读取SD卡内容 允许应用程序从SD卡读取信息。
android.permission.WRITE_EXTERNAL_STORAGE 危险 读取/修改/删除外部存储内容 允许应用程序写入外部存储。
android.permission.GET_PACKAGE_SIZE 普通 测量应用程序空间大小 允许一个程序获取任何package占用空间容量。
android.permission.EXPAND_STATUS_BAR 普通 展开/收拢状态栏 允许应用程序展开或折叠状态条。
android.permission.ACCESS_COARSE_LOCATION 危险 获取粗略位置 通过WiFi或移动基站的方式获取用户错略的经纬度信息,定位精度大概误差在30~1500米。恶意程序可以用它来确定您的大概位置。
android.permission.CLEAR_APP_CACHE 危险 删除所有应用程序缓存数据 允许应用程序通过删除应用程序缓存目录中的文件释放手机存储空间。通常此权限只适用于系统进程。
com.tencent.permission.VIRUS_SCAN 未知 未知权限 来自 android 引用的未知权限。
android.permission.SYSTEM_ALERT_WINDOW 危险 弹窗 允许应用程序弹窗。 恶意程序可以接管手机的整个屏幕。
android.permission.CHANGE_NETWORK_STATE 危险 改变网络连通性 允许应用程序改变网络连通性。
android.permission.ACCESS_MTK_MMHW 未知 未知权限 来自 android 引用的未知权限。
android.permission.ACCESS_CACHE_FILESYSTEM 签名(系统) 访问缓存文件系统 允许应用程序读取和写入缓存文件系统。
android.permission.CHANGE_WIFI_MULTICAST_STATE 危险 允许接收WLAN多播 允许应用程序接收并非直接向您的设备发送的数据包。这样在查找附近提供的服务时很有用。这种操作所耗电量大于非多播模式。
android.permission.DIAGNOSTIC 签名 读取/写入诊断所拥有的资源 允许应用程序读取/写入诊断组所拥有的任何资源(例如,/dev 中的文件)。这可能会影响系统稳定性和安全性。此权限仅供制造商或运营商诊断硬件问题。
android.permission.UPDATE_APP_OPS_STATS 未知 未知权限 来自 android 引用的未知权限。

证书分析

高危
1
警告
0
信息
1
标题 严重程度 描述信息
已签名应用 信息 应用程序已使用代码签名证书进行签名
应用程序存在Janus漏洞 高危 应用程序使用了v1签名方案进行签名,如果只使用v1签名方案,那么它就容易受到安卓5.0-8.0上的Janus漏洞的攻击。在安卓5.0-7.0上运行的使用了v1签名方案的应用程序,以及同时使用了v2/v3签名方案的应用程序也同样存在漏洞。

MANIFEST分析

高危
40
警告
42
信息
0
屏蔽
0
序号 问题 严重程度 描述信息 操作
1 应用程序可以安装在有漏洞的已更新 Android 版本上
Android XX, [minSdk=7]
信息 该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。
2 Activity (com.tencent.assistant.link.LinkProxyActivity) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (17) 更新到 29 或更高版本以在平台级别修复此问题。
3 Activity (com.tencent.assistant.link.LinkProxyActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
4 Activity (com.tencent.assistant.activity.InstalledAppManagerActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
5 Activity (com.tencent.assistant.activity.InstalledAppManagerActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。 高危 活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (17) 更新到 28 或更高版本以在平台级别修复此问题。
6 Activity (com.tencent.assistant.activity.RootUtilInstallActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
7 Activity (com.tencent.assistant.activity.RootUtilInstallActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。 高危 活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (17) 更新到 28 或更高版本以在平台级别修复此问题。
8 Activity (com.tencent.assistant.activity.UpdateListActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
9 Activity (com.tencent.assistant.activity.UpdateListActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。 高危 活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (17) 更新到 28 或更高版本以在平台级别修复此问题。
10 Activity (com.tencent.assistant.activity.UpdateIgnoreListActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
11 Activity (com.tencent.assistant.activity.UpdateIgnoreListActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。 高危 活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (17) 更新到 28 或更高版本以在平台级别修复此问题。
12 Activity (com.tencent.assistant.activity.SpaceCleanActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
13 Activity (com.tencent.assistant.activity.SpaceCleanActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。 高危 活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (17) 更新到 28 或更高版本以在平台级别修复此问题。
14 Activity (com.tencent.assistant.activity.BigFileCleanActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
15 Activity (com.tencent.assistant.activity.BigFileCleanActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。 高危 活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (17) 更新到 28 或更高版本以在平台级别修复此问题。
16 Activity (com.tencent.assistant.activity.SingleBrowserActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
17 Activity (com.tencent.assistant.activity.SingleBrowserActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。 高危 活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (17) 更新到 28 或更高版本以在平台级别修复此问题。
18 Activity (com.tencent.assistant.activity.ExportBrowserActivity) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (17) 更新到 29 或更高版本以在平台级别修复此问题。
19 Activity (com.tencent.assistant.activity.ExportBrowserActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
20 Broadcast Receiver (com.tencent.assistant.uninstall.WakeUpReceiver) 未被保护。
[android:exported=true]
警告 发现 Broadcast Receiver与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
21 Activity (com.tencent.assistant.activity.PhotoBackupNewActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
22 Activity (com.tencent.assistant.activity.PhotoBackupNewActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。 高危 活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (17) 更新到 28 或更高版本以在平台级别修复此问题。
23 Activity (com.tencent.connector.ConnectionActivity) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (17) 更新到 29 或更高版本以在平台级别修复此问题。
24 Activity (com.tencent.connector.ConnectionActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
25 Content Provider (com.qq.provider.ebooks3.EbooksProvider) 如果应用程序在API级别低于17的设备上运行,则不会受到保护。
[Content Provider, targetSdkVersion >= 17]
警告 如果应用程序运行在一个API级别低于17的设备上,内容提供者( Content Provider)就会被导出。在这种情况下,它会被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。
26 Content Provider (com.qq.provider.cache2.CacheProvider) 如果应用程序在API级别低于17的设备上运行,则不会受到保护。
[Content Provider, targetSdkVersion >= 17]
警告 如果应用程序运行在一个API级别低于17的设备上,内容提供者( Content Provider)就会被导出。在这种情况下,它会被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。
27 Content Provider (com.tencent.assistant.db.contentprovider.AssistantProvider) 未被保护。
[android:exported=true]
警告 发现 Content Provider与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
28 Content Provider (com.tencent.assistant.db.contentprovider.ExternalProvider) 未被保护。
[android:exported=true]
警告 发现 Content Provider与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
29 Activity (com.qq.AppService.StartApp) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
30 Activity (com.qq.AppService.StartApp) 未被保护。
存在一个intent-filter。
警告 发现 Activity与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。
31 Service (com.qq.AppService.AppService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
32 Service (com.tencent.assistant.plugin.system.ConnectAppService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
33 Service (com.tencent.assistant.plugin.system.AppService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
34 Broadcast Receiver (com.qq.AppService.SmsXReceiver) 受权限保护, 但是应该检查权限的保护级别。
Permission: android.permission.BROADCAST_SMS
[android:exported=true]
警告 发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
35 Broadcast Receiver (com.qq.AppService.MmsReceiver) 受权限保护, 但是应该检查权限的保护级别。
Permission: android.permission.BROADCAST_WAP_PUSH
[android:exported=true]
警告 发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
36 Activity (com.qq.AppService.ComposeSmsActivity) 未被保护。
存在一个intent-filter。
警告 发现 Activity与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。
37 Service (com.qq.AppService.HeadlessSmsSendService) 受权限保护, 但是应该检查权限的保护级别。
Permission: android.permission.SEND_RESPOND_VIA_MESSAGE
[android:exported=true]
警告 发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
38 Broadcast Receiver (com.qq.AppService.MainReceiver) 未被保护。
存在一个intent-filter。
警告 发现 Broadcast Receiver与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。
39 Broadcast Receiver (com.qq.AppService.SMSReceiver) 受权限保护, 但是应该检查权限的保护级别。
Permission: android.permission.BROADCAST_SMS
[android:exported=true]
警告 发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。
40 Broadcast Receiver (com.qq.AppService.AuthorReceiver) 未被保护。
[android:exported=true]
警告 发现 Broadcast Receiver与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
41 Broadcast Receiver (com.qq.AppService.SmsSentReceiver) 未被保护。
存在一个intent-filter。
警告 发现 Broadcast Receiver与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。
42 Broadcast Receiver (com.qq.AppService.APKReceiver) 未被保护。
存在一个intent-filter。
警告 发现 Broadcast Receiver与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。
43 Broadcast Receiver (com.tencent.assistant.receiver.QubeThemeInstallReceiver) 未被保护。
[android:exported=true]
警告 发现 Broadcast Receiver与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
44 Broadcast Receiver (com.tencent.assistant.receiver.DockRubbishRelateReceiver) 未被保护。
[android:exported=true]
警告 发现 Broadcast Receiver与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
45 Activity (com.tencent.assistant.activity.DownloadActivity) 未被保护。
存在一个intent-filter。
警告 发现 Activity与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。
46 Activity (.wxapi.WXEntryActivity) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (17) 更新到 29 或更高版本以在平台级别修复此问题。
47 Activity (.wxapi.WXEntryActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
48 Activity (com.tencent.tauth.AuthActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
49 Activity (com.tencent.tauth.AuthActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。 高危 活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (17) 更新到 28 或更高版本以在平台级别修复此问题。
50 Activity (com.tencent.tauth.AuthActivity) 未被保护。
存在一个intent-filter。
警告 发现 Activity与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。
51 Activity (com.tencent.assistant.activity.StartPopWindowActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
52 Activity (com.tencent.assistant.activity.StartPopWindowActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。 高危 活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (17) 更新到 28 或更高版本以在平台级别修复此问题。
53 Broadcast Receiver (com.tencent.assistant.receiver.SDKRelatedReceiver) 未被保护。
[android:exported=true]
警告 发现 Broadcast Receiver与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
54 Activity (com.tencent.assistant.plugin.proxy.SingleTaskPluginProxyActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
55 Activity (com.tencent.assistant.plugin.proxy.SingleTaskPluginProxyActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。 高危 活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (17) 更新到 28 或更高版本以在平台级别修复此问题。
56 Activity (com.tencent.assistant.plugin.proxy.ConnectSingleTaskPluginProxyActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
57 Activity (com.tencent.assistant.plugin.proxy.ConnectSingleTaskPluginProxyActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。 高危 活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (17) 更新到 28 或更高版本以在平台级别修复此问题。
58 Activity (com.tencent.assistant.plugin.proxy.TranslucentSinglePluginProxyActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
59 Activity (com.tencent.assistant.plugin.accelerate.PluginAccelerateBridgeActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
60 Activity (com.tencent.assistant.plugin.accelerate.PluginAccelerateBridgeActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
61 Activity (com.tencent.assistant.plugin.system.FreewifiBridgeActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
62 Service (com.tencent.assistant.sdk.SDKSupportService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
63 Activity (com.tencent.assistant.plugin.system.PluginLoader) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (17) 更新到 29 或更高版本以在平台级别修复此问题。
64 Activity (com.tencent.assistant.plugin.system.PluginLoader) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
65 Activity (com.tencent.assistant.plugin.system.PluginStarter) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (17) 更新到 29 或更高版本以在平台级别修复此问题。
66 Activity (com.tencent.assistant.plugin.system.PluginStarter) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
67 Broadcast Receiver (com.tencent.assistant.plugin.system.DockReceiver) 未被保护。
[android:exported=true]
警告 发现 Broadcast Receiver与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
68 Activity (com.tencent.assistant.activity.ShortCutActivity) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (17) 更新到 29 或更高版本以在平台级别修复此问题。
69 Activity (com.tencent.assistant.activity.ShortCutActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
70 Activity (com.tencent.assistant.activity.AppBackupActivity) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (17) 更新到 29 或更高版本以在平台级别修复此问题。
71 Activity (com.tencent.assistant.activity.AppBackupActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
72 Activity设置了TaskAffinity属性
(com.tencent.securemodule.ui.TransparentActivity)
警告 如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名
73 Activity (com.tencent.assistantv2.activity.MainActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
74 Activity (com.tencent.assistantv2.activity.MainActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。 高危 活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (17) 更新到 28 或更高版本以在平台级别修复此问题。
75 Activity (com.tencent.assistantv2.activity.PopWindowActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
76 Activity (com.tencent.assistantv2.activity.PopWindowActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。 高危 活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (17) 更新到 28 或更高版本以在平台级别修复此问题。
77 Broadcast Receiver (com.tencent.assistant.plugin.system.QReaderReceiver) 未被保护。
存在一个intent-filter。
警告 发现 Broadcast Receiver与设备上的其他应用程序共享,因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。
78 高优先级的Intent (1000)
[android:priority]
警告 通过设置一个比另一个Intent更高的优先级,应用程序有效地覆盖了其他请求。
79 高优先级的Intent (1000)
[android:priority]
警告 通过设置一个比另一个Intent更高的优先级,应用程序有效地覆盖了其他请求。
80 高优先级的Intent (1000)
[android:priority]
警告 通过设置一个比另一个Intent更高的优先级,应用程序有效地覆盖了其他请求。
81 高优先级的Intent (1000)
[android:priority]
警告 通过设置一个比另一个Intent更高的优先级,应用程序有效地覆盖了其他请求。
82 高优先级的Intent (1000)
[android:priority]
警告 通过设置一个比另一个Intent更高的优先级,应用程序有效地覆盖了其他请求。
83 高优先级的Intent (1000)
[android:priority]
警告 通过设置一个比另一个Intent更高的优先级,应用程序有效地覆盖了其他请求。

可浏览的ACTIVITIES

ACTIVITY INTENT
com.tencent.assistant.link.LinkProxyActivity Schemes: tmast://, market://,
com.qq.AppService.ComposeSmsActivity Schemes: sms://, smsto://, mms://, mmsto://,
com.tencent.assistant.activity.DownloadActivity Schemes: http://,
Hosts: apps.wandoujia.com, apps.wandoujia.cn, *,
Mime Types: image/*, video/*, audio/*, application/*, text/plain,
Path Patterns: .*download, .*\\..*download, .*\\..*\\..*download, .*\\..*\\..*\\..*download, .*\\..*\\..*\\..*\\..*download, .*\\..*\\..*\\..*\\..*\\..*download, .*\\..*\\..*\\..*\\..*\\..*\\..*download, .*\\..*\\..*\\..*\\..*\\..*\\..*\\..*download, .*\\.apk, .*\\.apk.*, .*\\..*\\.apk.*, .*\\..*\\..*\\.apk.*, .*\\..*\\..*\\..*\\.apk.*, .*\\..*\\..*\\..*\\..*\\.apk.*, .*\\..*\\..*\\..*\\..*\\..*\\.apk.*, .*\\..*\\..*\\..*\\..*\\..*\\..*\\.apk.*, .*\\..*\\..*\\..*\\..*\\..*\\..*\\..*\\.apk.*, .*\\.APK, .*\\.APK.*, .*\\..*\\.APK.*, .*\\..*\\..*\\.APK.*, .*\\..*\\..*\\..*\\.APK.*, .*\\..*\\..*\\..*\\..*\\.APK.*, .*\\..*\\..*\\..*\\..*\\..*\\.APK.*, .*\\..*\\..*\\..*\\..*\\..*\\..*\\.APK.*, .*\\..*\\..*\\..*\\..*\\..*\\..*\\..*\\.APK.*, .*\\.mp3, .*\\.mp3.*, .*\\..*\\.mp3.*, .*\\..*\\..*\\.mp3.*, .*\\..*\\..*\\..*\\.mp3.*, .*\\..*\\..*\\..*\\..*\\.mp3.*, .*\\..*\\..*\\..*\\..*\\..*\\.mp3.*, .*\\..*\\..*\\..*\\..*\\..*\\..*\\.mp3.*, .*\\..*\\..*\\..*\\..*\\..*\\..*\\..*\\.mp3.*, .*\\.doc, .*\\.doc.*, .*\\..*\\.doc.*, .*\\..*\\..*\\.doc.*, .*\\..*\\..*\\..*\\.doc.*, .*\\..*\\..*\\..*\\..*\\.doc.*, .*\\..*\\..*\\..*\\..*\\..*\\.doc.*, .*\\..*\\..*\\..*\\..*\\..*\\..*\\.doc.*, .*\\..*\\..*\\..*\\..*\\..*\\..*\\..*\\.doc.*, .*\\.docx, .*\\.docx.*, .*\\..*\\.docx.*, .*\\..*\\..*\\.docx.*, .*\\..*\\..*\\..*\\.docx.*, .*\\..*\\..*\\..*\\..*\\.docx.*, .*\\..*\\..*\\..*\\..*\\..*\\.docx.*, .*\\..*\\..*\\..*\\..*\\..*\\..*\\.docx.*, .*\\..*\\..*\\..*\\..*\\..*\\..*\\..*\\.docx.*, .*\\.txt, .*\\.txt.*, .*\\..*\\.txt.*, .*\\..*\\..*\\.txt.*, .*\\..*\\..*\\..*\\.txt.*, .*\\..*\\..*\\..*\\..*\\.txt.*, .*\\..*\\..*\\..*\\..*\\..*\\.txt.*, .*\\..*\\..*\\..*\\..*\\..*\\..*\\.txt.*, .*\\..*\\..*\\..*\\..*\\..*\\..*\\..*\\.txt.*, .*\\.zip, .*\\.zip.*, .*\\..*\\.zip.*, .*\\..*\\..*\\.zip.*, .*\\..*\\..*\\..*\\.zip.*, .*\\..*\\..*\\..*\\..*\\.zip.*, .*\\..*\\..*\\..*\\..*\\..*\\.zip.*, .*\\..*\\..*\\..*\\..*\\..*\\..*\\.zip.*, .*\\..*\\..*\\..*\\..*\\..*\\..*\\..*\\.zip.*, .*\\.rar, .*\\.rar.*, .*\\..*\\.rar.*, .*\\..*\\..*\\.rar.*, .*\\..*\\..*\\..*\\.rar.*, .*\\..*\\..*\\..*\\..*\\.rar.*, .*\\..*\\..*\\..*\\..*\\..*\\.rar.*, .*\\..*\\..*\\..*\\..*\\..*\\..*\\.rar.*, .*\\..*\\..*\\..*\\..*\\..*\\..*\\..*\\.rar.*, .*\\.ape, .*\\.avi, .*\\.wmv, .*\\.asf, .*\\.mpg, .*\\.3gpp, .*\\.rm, .*\\.oga, .*\\.pps, .*\\.ppx, .*\\.torrent, .*\\.m4a, .*\\.mid, .*\\.aac, .*\\.amr, .*\\.wma, .*\\.mpga, .*\\.flac, .*\\.ogg, .*\\.wav, .*\\.3gp, .*\\.mp4, .*\\.rtsp, .*\\.rtmp, .*\\.flv, .*\\.webm, .*\\.ts, .*\\.ogv, .*\\.m3u8, .*\\.rmvb, .*\\.f4v, .*\\.dat, .*\\.mov, .*\\.mkv, .*\\.mpeg, .*\\.xvid, .*\\.dvd, .*\\.vcd, .*\\.vob, .*\\.divx, .*\\.jpg, .*\\.gif, .*\\.png, .*\\.jpeg, .*\\.bmp, .*\\.webp, .*\\.ppt, .*\\.pptx, .*\\.xls, .*\\.xlsx, .*\\.pdf, .*\\.chm, .*\\.log, .*\\.bat, .*\\.lrc, .*\\.ini, .*\\.7z,
com.tencent.tauth.AuthActivity Schemes: tencent1101070898://,

网络安全配置

序号 范围 严重级别 描述

API调用分析

API功能 源码文件
一般功能-> 文件操作
b/a/a/a/c.java
b/a/a/a/d.java
com/qq/AppService/AppInstaller.java
com/qq/AppService/AppService.java
com/qq/AppService/AstApp.java
com/qq/AppService/a.java
com/qq/AppService/ag.java
com/qq/AppService/ar.java
com/qq/AppService/at.java
com/qq/AppService/ba.java
com/qq/AppService/s.java
com/qq/AppService/v.java
com/qq/AppService/w.java
com/qq/b/a.java
com/qq/c/a.java
com/qq/c/b.java
com/qq/c/d.java
com/qq/c/e.java
com/qq/c/g.java
com/qq/d/d/a.java
com/qq/d/d/b.java
com/qq/d/g/d.java
com/qq/d/g/i.java
com/qq/d/g/m.java
com/qq/f/a.java
com/qq/i/a.java
com/qq/jce/wup/WupInfo.java
com/qq/k/a.java
com/qq/k/b.java
com/qq/l/f.java
com/qq/l/q.java
com/qq/m/h.java
com/qq/provider/ab.java
com/qq/provider/ah.java
com/qq/provider/ai.java
com/qq/provider/aj.java
com/qq/provider/ak.java
com/qq/provider/b.java
com/qq/provider/c.java
com/qq/provider/cache2/a.java
com/qq/provider/ebooks3/EbooksProvider.java
com/qq/provider/l.java
com/qq/provider/m.java
com/qq/provider/n.java
com/qq/provider/o.java
com/qq/provider/p.java
com/qq/provider/v.java
com/qq/provider/x.java
com/qq/taf/jce/JceInputStream.java
com/qq/taf/jce/JceOutputStream.java
com/qq/taf/jce/JceStruct.java
com/qq/util/aa.java
com/qq/util/ab.java
com/qq/util/b.java
com/qq/util/g.java
com/qq/util/l.java
com/qq/util/p.java
com/qq/util/q.java
com/tencent/assistant/Global.java
com/tencent/assistant/a.java
com/tencent/assistant/activity/BrowserActivity.java
com/tencent/assistant/activity/SettingActivity.java
com/tencent/assistant/activity/VideoActivityV2.java
com/tencent/assistant/activity/debug/m.java
com/tencent/assistant/appbakcup/n.java
com/tencent/assistant/b.java
com/tencent/assistant/c.java
com/tencent/assistant/component/QuickEntranceView.java
com/tencent/assistant/component/bg.java
com/tencent/assistant/component/cd.java
com/tencent/assistant/component/spaceclean/RubbishItemView.java
com/tencent/assistant/d.java
com/tencent/assistant/db/a.java
com/tencent/assistant/db/b.java
com/tencent/assistant/download/DownloadInfo.java
com/tencent/assistant/download/a.java
com/tencent/assistant/e/a.java
com/tencent/assistant/g/e.java
com/tencent/assistant/g/o.java
com/tencent/assistant/graphic/c.java
com/tencent/assistant/graphic/i.java
com/tencent/assistant/graphic/j.java
com/tencent/assistant/j.java
com/tencent/assistant/js/JsBridge.java
com/tencent/assistant/js/j.java
com/tencent/assistant/link/sdk/a/a.java
com/tencent/assistant/link/sdk/a/b.java
com/tencent/assistant/link/sdk/a/e.java
com/tencent/assistant/link/sdk/b/a.java
com/tencent/assistant/localres/ApkResourceManager.java
com/tencent/assistant/localres/LocalAVLoader.java
com/tencent/assistant/localres/WiFiReceiveLoader.java
com/tencent/assistant/localres/i.java
com/tencent/assistant/localres/localapk/a.java
com/tencent/assistant/localres/localapk/loadapkservice/GetApkInfoService.java
com/tencent/assistant/localres/y.java
com/tencent/assistant/login/a/a.java
com/tencent/assistant/manager/DownloadProxy.java
com/tencent/assistant/manager/SelfUpdateManager.java
com/tencent/assistant/manager/bc.java
com/tencent/assistant/manager/bj.java
com/tencent/assistant/manager/ck.java
com/tencent/assistant/manager/notification/a/p.java
com/tencent/assistant/manager/spaceclean/BigFileFilter.java
com/tencent/assistant/manager/spaceclean/SpaceScanManager.java
com/tencent/assistant/model/PluginStartEntry.java
com/tencent/assistant/model/QuickEntranceNotify.java
com/tencent/assistant/module/b/b.java
com/tencent/assistant/module/ef.java
com/tencent/assistant/module/timer/TimerJob.java
com/tencent/assistant/module/wisedownload/condition/ThresholdCondition.java
com/tencent/assistant/module/wisedownload/g.java
com/tencent/assistant/module/wisedownload/p.java
com/tencent/assistant/module/wisedownload/r.java
com/tencent/assistant/module/wisedownload/s.java
com/tencent/assistant/module/wisedownload/t.java
com/tencent/assistant/module/wisedownload/u.java
com/tencent/assistant/plugin/PluginContext.java
com/tencent/assistant/plugin/accelerate/PluginAccelerateBridgeActivity.java
com/tencent/assistant/plugin/mgr/c.java
com/tencent/assistant/plugin/mgr/d.java
com/tencent/assistant/plugin/mgr/e.java
com/tencent/assistant/plugin/system/PluginLoader.java
com/tencent/assistant/protocol/a/b/b.java
com/tencent/assistant/protocol/d.java
com/tencent/assistant/protocol/h.java
com/tencent/assistant/protocol/jce/ClientWifiCmd.java
com/tencent/assistant/protocol/jce/IPDataType.java
com/tencent/assistant/protocol/jce/JceCmd.java
com/tencent/assistant/protocol/jce/PHONE_USER_OPERATION_TYPE.java
com/tencent/assistant/protocol/jce/ResponseHeadErrorCode.java
com/tencent/assistant/protocol/jce/SmartCardCase.java
com/tencent/assistant/protocol/jce/SmartCardType.java
com/tencent/assistant/protocol/jce/TicketType.java
com/tencent/assistant/sdk/SDKClient.java
com/tencent/assistant/sdk/b/a.java
com/tencent/assistant/sdk/param/jce/IPCCmd.java
com/tencent/assistant/st/h.java
com/tencent/assistant/st/model/AppInstallDetail.java
com/tencent/assistant/st/model/StatAppInstallWithDetail.java
com/tencent/assistant/thumbnailCache/b.java
com/tencent/assistant/thumbnailCache/d.java
com/tencent/assistant/thumbnailCache/f.java
com/tencent/assistant/uninstall/a.java
com/tencent/assistant/uninstall/d.java
com/tencent/assistant/uninstall/e.java
com/tencent/assistant/uninstall/h.java
com/tencent/assistant/usagestats/o.java
com/tencent/assistant/usercenter/b.java
com/tencent/assistant/utils/FileUtil.java
com/tencent/assistant/utils/XLog.java
com/tencent/assistant/utils/a/c.java
com/tencent/assistant/utils/a/d.java
com/tencent/assistant/utils/a/f.java
com/tencent/assistant/utils/a/g.java
com/tencent/assistant/utils/a/h.java
com/tencent/assistant/utils/a/i.java
com/tencent/assistant/utils/a/j.java
com/tencent/assistant/utils/a/k.java
com/tencent/assistant/utils/al.java
com/tencent/assistant/utils/ax.java
com/tencent/assistant/utils/b.java
com/tencent/assistant/utils/ba.java
com/tencent/assistant/utils/bd.java
com/tencent/assistant/utils/bl.java
com/tencent/assistant/utils/bm.java
com/tencent/assistant/utils/bo.java
com/tencent/assistant/utils/bq.java
com/tencent/assistant/utils/by.java
com/tencent/assistant/utils/cc.java
com/tencent/assistant/utils/ce.java
com/tencent/assistant/utils/ci.java
com/tencent/assistant/utils/e.java
com/tencent/assistant/utils/installuninstall/InstallUninstallTaskBean.java
com/tencent/assistant/utils/installuninstall/InstallUninstallUtil.java
com/tencent/assistant/utils/installuninstall/y.java
com/tencent/assistant/utils/m.java
com/tencent/assistant/utils/p.java
com/tencent/assistant/utils/q.java
com/tencent/assistant/wifihotspot/wifisocket/jce/ClientWifiCmd.java
com/tencent/assistantv2/component/ea.java
com/tencent/assistantv2/component/search/WebSearchResultPage.java
com/tencent/assistantv2/mediadownload/FileOpenSelector.java
com/tencent/assistantv2/mediadownload/h.java
com/tencent/assistantv2/model/AbstractDownloadInfo.java
com/tencent/assistantv2/model/ItemElement.java
com/tencent/assistantv2/st/business/StartUpCostTimeSTManager.java
com/tencent/assistantv2/st/business/l.java
com/tencent/assistantv2/st/business/p.java
com/tencent/assistantv2/st/model/STCommonInfo.java
com/tencent/assistantv2/st/page/STExternalInfo.java
com/tencent/assistantv2/st/page/STPageInfo.java
com/tencent/b/a/b.java
com/tencent/b/c/b.java
com/tencent/b/c/c.java
com/tencent/b/c/d.java
com/tencent/b/d/i.java
com/tencent/b/d/k.java
com/tencent/d/a/a.java
com/tencent/d/a/e.java
com/tencent/d/a/f.java
com/tencent/d/a/j.java
com/tencent/downloadsdk/DownloadSettingInfo.java
com/tencent/downloadsdk/DownloadTask.java
com/tencent/downloadsdk/af.java
com/tencent/downloadsdk/aj.java
com/tencent/downloadsdk/ao.java
com/tencent/downloadsdk/b.java
com/tencent/downloadsdk/c.java
com/tencent/downloadsdk/k.java
com/tencent/downloadsdk/l.java
com/tencent/downloadsdk/network/a.java
com/tencent/downloadsdk/network/b.java
com/tencent/downloadsdk/network/d.java
com/tencent/downloadsdk/o.java
com/tencent/downloadsdk/protocol/b.java
com/tencent/downloadsdk/protocol/jce/JceCmd.java
com/tencent/downloadsdk/protocol/jce/ResponseHeadErrorCode.java
com/tencent/downloadsdk/q.java
com/tencent/downloadsdk/utils/a.java
com/tencent/downloadsdk/utils/e.java
com/tencent/downloadsdk/utils/g.java
com/tencent/downloadsdk/utils/i.java
com/tencent/downloadsdk/utils/n.java
com/tencent/e/a/a/a.java
com/tencent/e/a/a/c.java
com/tencent/f/a/a/a.java
com/tencent/f/a/a/b.java
com/tencent/feedback/a/b.java
com/tencent/feedback/anr/b.java
com/tencent/feedback/b/g.java
com/tencent/feedback/b/h.java
com/tencent/feedback/common/PlugInInfo.java
com/tencent/feedback/common/a/c.java
com/tencent/feedback/common/a/e.java
com/tencent/feedback/common/a/f.java
com/tencent/feedback/common/a/g.java
com/tencent/feedback/common/b.java
com/tencent/feedback/common/b/f.java
com/tencent/feedback/common/f.java
com/tencent/feedback/common/j.java
com/tencent/feedback/eup/c.java
com/tencent/feedback/eup/d.java
com/tencent/feedback/eup/f.java
com/tencent/feedback/eup/jni/NativeExceptionUpload.java
com/tencent/feedback/eup/jni/a.java
com/tencent/feedback/eup/jni/c.java
com/tencent/feedback/eup/jni/d.java
com/tencent/feedback/eup/jni/e.java
com/tencent/feedback/eup/k.java
com/tencent/feedback/ua/e.java
com/tencent/securemodule/impl/AppInfo.java
com/tencent/securemodule/impl/SecureModuleService.java
com/tencent/securemodule/impl/SecureService.java
com/tencent/wcs/agent/h.java
com/tencent/wcs/agent/j.java
com/tencent/wcs/agent/k.java
com/tencent/wcs/agent/l.java
com/tencent/wcs/agent/n.java
com/tencent/wcs/agent/o.java
com/tencent/wcs/b/a.java
com/tencent/wcs/c/b.java
com/tencent/wcs/jce/ConfigDeviceType.java
com/tencent/wcs/jce/DeviceType.java
com/tencent/wcs/jce/ECOMMANDErrorCode.java
com/tencent/wcs/jce/InviteType.java
com/tencent/wcs/jce/PCSTATUS.java
com/tencent/wcs/jce/QQActionType.java
com/tencent/wcs/jce/ServiceTransMessageType.java
com/tencent/wcs/jce/TransMessageType.java
com/tencent/wcs/jce/enumPushType.java
com/tencent/wcs/jce/enumServiceResultCode.java
com/tencent/wcs/proxy/c/a.java
com/tencent/wcs/proxy/c/f.java
com/tencent/wcs/proxy/e/d.java
网络通信-> HTTP建立连接
组件-> 启动 Activity
com/qq/AppService/AppInstaller.java
com/qq/AppService/MainReceiver.java
com/qq/AppService/SmsManagerActivity.java
com/qq/AppService/WifiPage.java
com/qq/provider/ab.java
com/qq/provider/ac.java
com/qq/provider/ad.java
com/qq/provider/p.java
com/qq/provider/x.java
com/tencent/assistant/activity/AboutActivity.java
com/tencent/assistant/activity/ApkMgrActivity.java
com/tencent/assistant/activity/AppBackupActivity.java
com/tencent/assistant/activity/AppTreasureBoxActivity.java
com/tencent/assistant/activity/BaseActivity.java
com/tencent/assistant/activity/BigFileCleanActivity.java
com/tencent/assistant/activity/BrowserActivity.java
com/tencent/assistant/activity/InstalledAppManagerActivity.java
com/tencent/assistant/activity/PhotoBackupNewActivity.java
com/tencent/assistant/activity/SettingActivity.java
com/tencent/assistant/activity/SpaceCleanActivity.java
com/tencent/assistant/activity/SplashActivity.java
com/tencent/assistant/activity/UpdateIgnoreListActivity.java
com/tencent/assistant/activity/debug/z.java
com/tencent/assistant/activity/dn.java
com/tencent/assistant/activity/fw.java
com/tencent/assistant/activity/g.java
com/tencent/assistant/activity/gz.java
com/tencent/assistant/activity/ha.java
com/tencent/assistant/activity/hj.java
com/tencent/assistant/activity/hl.java
com/tencent/assistant/adapter/AppUpdateIgnoreListAdapter.java
com/tencent/assistant/adapter/ac.java
com/tencent/assistant/adapter/cd.java
com/tencent/assistant/adapter/cn.java
com/tencent/assistant/adapter/cq.java
com/tencent/assistant/adapter/cy.java
com/tencent/assistant/adapter/db.java
com/tencent/assistant/adapter/dj.java
com/tencent/assistant/adapter/ec.java
com/tencent/assistant/apilevel/FullscreenableChromeClient.java
com/tencent/assistant/backgroundscan/d.java
com/tencent/assistant/c/h.java
com/tencent/assistant/component/ab.java
com/tencent/assistant/component/appdetail/CustomRelateAppView.java
com/tencent/assistant/component/appdetail/b.java
com/tencent/assistant/component/appdetail/d.java
com/tencent/assistant/component/appdetail/s.java
com/tencent/assistant/component/at.java
com/tencent/assistant/component/au.java
com/tencent/assistant/component/bw.java
com/tencent/assistant/component/cp.java
com/tencent/assistant/component/cq.java
com/tencent/assistant/component/cr.java
com/tencent/assistant/component/dp.java
com/tencent/assistant/component/e.java
com/tencent/assistant/component/f.java
com/tencent/assistant/component/smartcard/a.java
com/tencent/assistant/component/smartcard/ad.java
com/tencent/assistant/component/smartcard/ag.java
com/tencent/assistant/component/smartcard/al.java
com/tencent/assistant/component/smartcard/ap.java
com/tencent/assistant/component/smartcard/as.java
com/tencent/assistant/component/smartcard/b.java
com/tencent/assistant/component/smartcard/c.java
com/tencent/assistant/component/smartcard/k.java
com/tencent/assistant/component/smartcard/p.java
com/tencent/assistant/component/smartcard/t.java
com/tencent/assistant/component/smartcard/w.java
com/tencent/assistant/component/w.java
com/tencent/assistant/guessfavor/c.java
com/tencent/assistant/js/JsBridge.java
com/tencent/assistant/link/a.java
com/tencent/assistant/link/b.java
com/tencent/assistant/login/b.java
com/tencent/assistant/manager/bc.java
com/tencent/assistant/manager/bs.java
com/tencent/assistant/manager/notification/AbstractNotificationService.java
com/tencent/assistant/manager/notification/NotificationService.java
com/tencent/assistant/plugin/PluginActivity.java
com/tencent/assistant/plugin/PluginHelper.java
com/tencent/assistant/plugin/mgr/f.java
com/tencent/assistant/plugin/proxy/PluginProxyActivity.java
com/tencent/assistant/securescan/StartScanActivity.java
com/tencent/assistant/utils/ac.java
com/tencent/assistant/utils/am.java
com/tencent/assistant/utils/an.java
com/tencent/assistant/utils/aq.java
com/tencent/assistant/utils/br.java
com/tencent/assistant/utils/installuninstall/InstallUninstallUtil.java
com/tencent/assistant/utils/o.java
com/tencent/assistantv2/activity/AssistantTabActivity.java
com/tencent/assistantv2/activity/GuideActivity.java
com/tencent/assistantv2/activity/n.java
com/tencent/assistantv2/activity/x.java
com/tencent/assistantv2/adapter/AssistantTabAdapter.java
com/tencent/assistantv2/adapter/ag.java
com/tencent/assistantv2/adapter/g.java
com/tencent/assistantv2/adapter/j.java
com/tencent/assistantv2/adapter/smartlist/d.java
com/tencent/assistantv2/adapter/smartlist/r.java
com/tencent/assistantv2/adapter/smartlist/x.java
com/tencent/assistantv2/adapter/w.java
com/tencent/assistantv2/adapter/z.java
com/tencent/assistantv2/component/DownloadButton.java
com/tencent/assistantv2/component/FileDownloadButton.java
com/tencent/assistantv2/component/MainActionHeaderView.java
com/tencent/assistantv2/component/TxManagerCommContainView.java
com/tencent/assistantv2/component/appdetail/CustomRelateAppViewV5.java
com/tencent/assistantv2/component/appdetail/RecommendAppViewV5.java
com/tencent/assistantv2/component/appdetail/j.java
com/tencent/assistantv2/component/appdetail/t.java
com/tencent/assistantv2/component/cd.java
com/tencent/assistantv2/component/da.java
com/tencent/assistantv2/component/db.java
com/tencent/assistantv2/component/dv.java
com/tencent/assistantv2/component/dw.java
com/tencent/assistantv2/component/ea.java
com/tencent/assistantv2/component/fps/a.java
com/tencent/assistantv2/component/search/d.java
com/tencent/assistantv2/component/z.java
com/tencent/assistantv2/mediadownload/o.java
com/tencent/securemodule/impl/SecureService.java
组件-> 启动 Service
组件-> 发送广播
一般功能-> IPC通信
com/qq/AppService/APKReceiver.java
com/qq/AppService/AppInstaller.java
com/qq/AppService/AppService.java
com/qq/AppService/AstApp.java
com/qq/AppService/AuthorReceiver.java
com/qq/AppService/HeadlessSmsSendService.java
com/qq/AppService/IPCService.java
com/qq/AppService/LoginReceiver.java
com/qq/AppService/MainReceiver.java
com/qq/AppService/MmsReceiver.java
com/qq/AppService/PowerReceiver.java
com/qq/AppService/SMSReceiver.java
com/qq/AppService/SmsManagerActivity.java
com/qq/AppService/SmsSentReceiver.java
com/qq/AppService/SmsXReceiver.java
com/qq/AppService/StartApp.java
com/qq/AppService/StorageListener.java
com/qq/AppService/WifiPage.java
com/qq/AppService/ab.java
com/qq/AppService/ac.java
com/qq/AppService/ad.java
com/qq/AppService/ae.java
com/qq/AppService/ax.java
com/qq/AppService/b.java
com/qq/AppService/k.java
com/qq/AppService/t.java
com/qq/AppService/y.java
com/qq/AppService/z.java
com/qq/d/g/m.java
com/qq/provider/a.java
com/qq/provider/ab.java
com/qq/provider/ac.java
com/qq/provider/ad.java
com/qq/provider/ag.java
com/qq/provider/am.java
com/qq/provider/an.java
com/qq/provider/p.java
com/qq/provider/q.java
com/qq/provider/t.java
com/qq/provider/x.java
com/qq/provider/y.java
com/qq/provider/z.java
com/qq/receiver/NetReceiver.java
com/tencent/android/qqdownloader/wxapi/WXEntryActivity.java
com/tencent/assistant/activity/AboutActivity.java
com/tencent/assistant/activity/ApkMgrActivity.java
com/tencent/assistant/activity/AppBackupActivity.java
com/tencent/assistant/activity/AppTreasureBoxActivity.java
com/tencent/assistant/activity/AuthorOtherAppsActivity.java
com/tencent/assistant/activity/BaseActivity.java
com/tencent/assistant/activity/BigFileCleanActivity.java
com/tencent/assistant/activity/BrowserActivity.java
com/tencent/assistant/activity/ChildSettingActivity.java
com/tencent/assistant/activity/CommentReplyActivity.java
com/tencent/assistant/activity/DownloadActivity.java
com/tencent/assistant/activity/ForbiddenDialogActivity.java
com/tencent/assistant/activity/GroupListActivity.java
com/tencent/assistant/activity/InstalledAppManagerActivity.java
com/tencent/assistant/activity/MobileManagerInstallActivity.java
com/tencent/assistant/activity/PermissionActivity.java
com/tencent/assistant/activity/PhotoBackupNewActivity.java
com/tencent/assistant/activity/PluginDetailActivity.java
com/tencent/assistant/activity/PluginDownActivity.java
com/tencent/assistant/activity/ReportActivity.java
com/tencent/assistant/activity/RootUtilInstallActivity.java
com/tencent/assistant/activity/SelfUpdateActivity.java
com/tencent/assistant/activity/SettingActivity.java
com/tencent/assistant/activity/ShortCutActivity.java
com/tencent/assistant/activity/SpaceCleanActivity.java
com/tencent/assistant/activity/SpecailTopicDetailActivity.java
com/tencent/assistant/activity/SplashActivity.java
com/tencent/assistant/activity/StartPopWindowActivity.java
com/tencent/assistant/activity/TencentAppListActivity.java
com/tencent/assistant/activity/UpdateIgnoreListActivity.java
com/tencent/assistant/activity/UpdateListActivity.java
com/tencent/assistant/activity/VideoActivity.java
com/tencent/assistant/activity/VideoActivityV2.java
com/tencent/assistant/activity/bc.java
com/tencent/assistant/activity/ck.java
com/tencent/assistant/activity/debug/DActivity.java
com/tencent/assistant/activity/debug/z.java
com/tencent/assistant/activity/dn.java
com/tencent/assistant/activity/fw.java
com/tencent/assistant/activity/fy.java
com/tencent/assistant/activity/g.java
com/tencent/assistant/activity/gs.java
com/tencent/assistant/activity/gz.java
com/tencent/assistant/activity/ha.java
com/tencent/assistant/activity/hj.java
com/tencent/assistant/activity/hl.java
com/tencent/assistant/activity/pictureprocessor/ShowPictureActivity.java
com/tencent/assistant/activity/q.java
com/tencent/assistant/adapter/AppUpdateIgnoreListAdapter.java
com/tencent/assistant/adapter/DownloadInfoMultiAdapter.java
com/tencent/assistant/adapter/ac.java
com/tencent/assistant/adapter/cd.java
com/tencent/assistant/adapter/cn.java
com/tencent/assistant/adapter/cq.java
com/tencent/assistant/adapter/cy.java
com/tencent/assistant/adapter/db.java
com/tencent/assistant/adapter/dj.java
com/tencent/assistant/adapter/ec.java
com/tencent/assistant/apilevel/FullscreenableChromeClient.java
com/tencent/assistant/backgroundscan/BackgroundPushReceiver.java
com/tencent/assistant/backgroundscan/BackgroundReceiver.java
com/tencent/assistant/backgroundscan/a.java
com/tencent/assistant/backgroundscan/d.java
com/tencent/assistant/backgroundscan/e.java
com/tencent/assistant/c/h.java
com/tencent/assistant/component/UpdateListView.java
com/tencent/assistant/component/ab.java
com/tencent/assistant/component/appdetail/CustomRelateAppView.java
com/tencent/assistant/component/appdetail/b.java
com/tencent/assistant/component/appdetail/d.java
com/tencent/assistant/component/appdetail/s.java
com/tencent/assistant/component/at.java
com/tencent/assistant/component/au.java
com/tencent/assistant/component/bw.java
com/tencent/assistant/component/cp.java
com/tencent/assistant/component/cq.java
com/tencent/assistant/component/cr.java
com/tencent/assistant/component/dp.java
com/tencent/assistant/component/e.java
com/tencent/assistant/component/f.java
com/tencent/assistant/component/smartcard/a.java
com/tencent/assistant/component/smartcard/ad.java
com/tencent/assistant/component/smartcard/ag.java
com/tencent/assistant/component/smartcard/al.java
com/tencent/assistant/component/smartcard/ap.java
com/tencent/assistant/component/smartcard/as.java
com/tencent/assistant/component/smartcard/b.java
com/tencent/assistant/component/smartcard/c.java
com/tencent/assistant/component/smartcard/k.java
com/tencent/assistant/component/smartcard/p.java
com/tencent/assistant/component/smartcard/t.java
com/tencent/assistant/component/smartcard/w.java
com/tencent/assistant/component/w.java
com/tencent/assistant/d/b.java
com/tencent/assistant/d/d.java
com/tencent/assistant/guessfavor/c.java
com/tencent/assistant/js/JsBridge.java
com/tencent/assistant/link/LinkProxyActivity.java
com/tencent/assistant/link/a.java
com/tencent/assistant/link/b.java
com/tencent/assistant/localres/ApkResourceManager.java
com/tencent/assistant/localres/localapk/a.java
com/tencent/assistant/localres/localapk/d.java
com/tencent/assistant/localres/localapk/loadapkservice/GetApkInfoService.java
com/tencent/assistant/localres/model/LocalApkInfo.java
com/tencent/assistant/login/PluginLoadingActivity.java
com/tencent/assistant/login/b.java
com/tencent/assistant/manager/NetworkMonitor.java
com/tencent/assistant/manager/bc.java
com/tencent/assistant/manager/bm.java
com/tencent/assistant/manager/bs.java
com/tencent/assistant/manager/ce.java
com/tencent/assistant/manager/notification/AbstractNotificationService.java
com/tencent/assistant/manager/notification/NotificationService.java
com/tencent/assistant/manager/notification/a.java
com/tencent/assistant/manager/notification/a/d.java
com/tencent/assistant/manager/notification/a/f.java
com/tencent/assistant/manager/notification/a/g.java
com/tencent/assistant/manager/notification/a/h.java
com/tencent/assistant/manager/notification/a/p.java
com/tencent/assistant/manager/notification/o.java
com/tencent/assistant/manager/notification/r.java
com/tencent/assistant/manager/notification/s.java
com/tencent/assistant/manager/spaceclean/SpaceScanManager.java
com/tencent/assistant/manager/spaceclean/b.java
com/tencent/assistant/module/a/n.java
com/tencent/assistant/module/timer/BaseScheduleJob.java
com/tencent/assistant/module/timer/BaseTimePointJob.java
com/tencent/assistant/module/timer/RecoverAppListReceiver.java
com/tencent/assistant/module/timer/ScheduleJobReceiver.java
com/tencent/assistant/module/timer/job/AutoDownloadTimerJob.java
com/tencent/assistant/module/timer/job/STInstallRepairReportTimerJob.java
com/tencent/assistant/module/timer/job/STReportTimerJob.java
com/tencent/assistant/module/wisedownload/i.java
com/tencent/assistant/plugin/PluginActivity.java
com/tencent/assistant/plugin/PluginContext.java
com/tencent/assistant/plugin/PluginHelper.java
com/tencent/assistant/plugin/PluginIPCClient.java
com/tencent/assistant/plugin/PluginProxyManager.java
com/tencent/assistant/plugin/PluginProxyUtils.java
com/tencent/assistant/plugin/PluginService.java
com/tencent/assistant/plugin/accelerate/PluginAccelerateBridgeActivity.java
com/tencent/assistant/plugin/mgr/PluginConnectNotificationService.java
com/tencent/assistant/plugin/mgr/d.java
com/tencent/assistant/plugin/mgr/f.java
com/tencent/assistant/plugin/mgr/g.java
com/tencent/assistant/plugin/proxy/PluginProxyActivity.java
com/tencent/assistant/plugin/system/BaseAppService.java
com/tencent/assistant/plugin/system/CommandHandleService.java
com/tencent/assistant/plugin/system/DockAccelerationService.java
com/tencent/assistant/plugin/system/DockDeepAccelerationService.java
com/tencent/assistant/plugin/system/FreewifiBridgeActivity.java
com/tencent/assistant/plugin/system/PluginBackToBaoReceiver.java
com/tencent/assistant/plugin/system/PluginDispatchReceiver.java
com/tencent/assistant/plugin/system/PluginLoader.java
com/tencent/assistant/plugin/system/PluginStarter.java
com/tencent/assistant/receiver/BatteryStatusReceiver.java
com/tencent/assistant/receiver/DockRubbishRelateReceiver.java
com/tencent/assistant/receiver/NetworkMonitorReceiver.java
com/tencent/assistant/receiver/PackageChangedReceiver.java
com/tencent/assistant/receiver/PhoneStatusReceiver.java
com/tencent/assistant/receiver/QubeThemeInstallReceiver.java
com/tencent/assistant/receiver/SDKRelatedReceiver.java
com/tencent/assistant/receiver/SdCardEventReceiver.java
com/tencent/assistant/receiver/StorageLowReceiver.java
com/tencent/assistant/receiver/a.java
com/tencent/assistant/receiver/c.java
com/tencent/assistant/sdk/PluginSupportService.java
com/tencent/assistant/sdk/SDKClient.java
com/tencent/assistant/sdk/SDKSupportService.java
com/tencent/assistant/sdk/a/b.java
com/tencent/assistant/sdk/a/c.java
com/tencent/assistant/sdk/a/e.java
com/tencent/assistant/sdk/a/f.java
com/tencent/assistant/securescan/StartScanActivity.java
com/tencent/assistant/service/DockRubbishRelateService.java
com/tencent/assistant/service/DownloadingService.java
com/tencent/assistant/service/SelfUpdateService.java
com/tencent/assistant/service/WiseDownloadService.java
com/tencent/assistant/service/b.java
com/tencent/assistant/uninstall/WakeUpActivity.java
com/tencent/assistant/uninstall/WakeUpReceiver.java
com/tencent/assistant/uninstall/b.java
com/tencent/assistant/uninstall/e.java
com/tencent/assistant/uninstall/g.java
com/tencent/assistant/utils/ac.java
com/tencent/assistant/utils/am.java
com/tencent/assistant/utils/an.java
com/tencent/assistant/utils/aq.java
com/tencent/assistant/utils/ba.java
com/tencent/assistant/utils/bo.java
com/tencent/assistant/utils/br.java
com/tencent/assistant/utils/e.java
com/tencent/assistant/utils/installuninstall/InstallUninstallUtil.java
com/tencent/assistant/utils/o.java
com/tencent/assistant/utils/q.java
com/tencent/assistantv2/activity/AppDetailActivityV5.java
com/tencent/assistantv2/activity/AssistantTabActivity.java
com/tencent/assistantv2/activity/CategoryDetailActivity.java
com/tencent/assistantv2/activity/GameCategoryDetailActivity.java
com/tencent/assistantv2/activity/GuideActivity.java
com/tencent/assistantv2/activity/MainActivity.java
com/tencent/assistantv2/activity/PopWindowActivity.java
com/tencent/assistantv2/activity/SearchActivity.java
com/tencent/assistantv2/activity/ShowSameTagAppsActivity.java
com/tencent/assistantv2/activity/ci.java
com/tencent/assistantv2/activity/ck.java
com/tencent/assistantv2/activity/dd.java
com/tencent/assistantv2/activity/n.java
com/tencent/assistantv2/activity/x.java
com/tencent/assistantv2/adapter/AssistantTabAdapter.java
com/tencent/assistantv2/adapter/ag.java
com/tencent/assistantv2/adapter/g.java
com/tencent/assistantv2/adapter/j.java
com/tencent/assistantv2/adapter/smartlist/d.java
com/tencent/assistantv2/adapter/smartlist/r.java
com/tencent/assistantv2/adapter/smartlist/x.java
com/tencent/assistantv2/adapter/w.java
com/tencent/assistantv2/adapter/z.java
com/tencent/assistantv2/component/DownloadButton.java
com/tencent/assistantv2/component/FileDownloadButton.java
com/tencent/assistantv2/component/MainActionHeaderView.java
com/tencent/assistantv2/component/TxManagerCommContainView.java
com/tencent/assistantv2/component/appdetail/CustomRelateAppViewV5.java
com/tencent/assistantv2/component/appdetail/RecommendAppViewV5.java
com/tencent/assistantv2/component/appdetail/j.java
com/tencent/assistantv2/component/appdetail/t.java
com/tencent/assistantv2/component/cd.java
com/tencent/assistantv2/component/da.java
com/tencent/assistantv2/component/db.java
com/tencent/assistantv2/component/dv.java
com/tencent/assistantv2/component/dw.java
com/tencent/assistantv2/component/ea.java
com/tencent/assistantv2/component/fps/a.java
com/tencent/assistantv2/component/search/d.java
com/tencent/assistantv2/component/z.java
com/tencent/assistantv2/mediadownload/FileOpenSelector.java
com/tencent/assistantv2/mediadownload/m.java
com/tencent/assistantv2/mediadownload/n.java
com/tencent/assistantv2/mediadownload/o.java
com/tencent/downloadsdk/monitor/NetworkMonitorReceiver.java
com/tencent/downloadsdk/monitor/SdCardEventReceiver.java
com/tencent/e/a/b/a.java
com/tencent/feedback/anr/ANRHandleServiceTask.java
com/tencent/feedback/common/service/RQDService.java
com/tencent/feedback/common/service/a.java
com/tencent/feedback/common/service/b.java
com/tencent/securemodule/impl/SecureModuleService.java
com/tencent/securemodule/impl/SecureService.java
com/tencent/securemodule/ui/SecureEventReceiver.java
com/tencent/securemodule/ui/TransparentActivity.java
com/tencent/tmsecurelite/a/a.java
com/tencent/tmsecurelite/a/b.java
com/tencent/tmsecurelite/a/c.java
com/tencent/tmsecurelite/a/d.java
com/tencent/tmsecurelite/a/e.java
com/tencent/tmsecurelite/a/f.java
com/tencent/tmsecurelite/a/g.java
com/tencent/tmsecurelite/a/h.java
com/tencent/tmsecurelite/a/i.java
com/tencent/tmsecurelite/a/j.java
com/tencent/tmsecurelite/a/k.java
com/tencent/tmsecurelite/a/l.java
com/tencent/tmsecurelite/b/a.java
com/tencent/tmsecurelite/b/b.java
com/tencent/tmsecurelite/c/b.java
com/tencent/tmsecurelite/c/c.java
com/tencent/tmsecurelite/commom/ServiceManager.java
com/tencent/tmsecurelite/commom/c.java
com/tencent/tmsecurelite/commom/d.java
com/tencent/tmsecurelite/d/b.java
com/tencent/tmsecurelite/d/c.java
com/tencent/tmsecurelite/e/b.java
com/tencent/tmsecurelite/e/c.java
com/tencent/tmsecurelite/optimize/c.java
com/tencent/tmsecurelite/optimize/d.java
com/tencent/tmsecurelite/optimize/e.java
com/tencent/tmsecurelite/optimize/f.java
com/tencent/tmsecurelite/optimize/g.java
com/tencent/tmsecurelite/optimize/h.java
com/tencent/tmsecurelite/virusscan/ScanListenerStub.java
com/tencent/tmsecurelite/virusscan/a.java
com/tencent/tmsecurelite/virusscan/b.java
com/tencent/tmsecurelite/virusscan/c.java
com/tencent/wcs/proxy/c.java
com/tencent/wcs/proxy/heartbeat/HeartBeatService.java
com/tencent/wcs/proxy/j.java
进程操作-> 杀死进程
进程操作-> 获取进程pid
网络通信-> TCP套接字
调用java反射机制
com/qq/b/a.java
com/qq/d/g/t.java
com/qq/j/a.java
com/qq/jce/wup/BasicClassTypeUtil.java
com/qq/provider/x.java
com/qq/taf/jce/JceInputStream.java
com/qq/util/q.java
com/tencent/assistant/activity/VideoActivityV2.java
com/tencent/assistant/apilevel/FullscreenableChromeClient.java
com/tencent/assistant/apilevel/b.java
com/tencent/assistant/component/AppBarWebView.java
com/tencent/assistant/component/MyViewPager.java
com/tencent/assistant/component/PreInstallAppListView.java
com/tencent/assistant/component/UserAppListView.java
com/tencent/assistant/component/appdetail/AppBarTabView.java
com/tencent/assistant/d/b.java
com/tencent/assistant/js/JsBridge.java
com/tencent/assistant/kapalaiadapter/a/e.java
com/tencent/assistant/kapalaiadapter/g.java
com/tencent/assistant/login/c.java
com/tencent/assistant/manager/cp.java
com/tencent/assistant/manager/notification/AbstractNotificationService.java
com/tencent/assistant/manager/notification/a/d.java
com/tencent/assistant/module/timer/d.java
com/tencent/assistant/plugin/PluginActivity.java
com/tencent/assistant/plugin/PluginApplication.java
com/tencent/assistant/plugin/PluginContext.java
com/tencent/assistant/plugin/a.java
com/tencent/assistant/plugin/a/e.java
com/tencent/assistant/plugin/mgr/e.java
com/tencent/assistant/protocol/a/e.java
com/tencent/assistant/protocol/l.java
com/tencent/assistant/protocol/scu/i.java
com/tencent/assistant/sdk/param/a.java
com/tencent/assistant/uninstall/a.java
com/tencent/assistant/utils/bf.java
com/tencent/assistant/utils/by.java
com/tencent/assistant/utils/cx.java
com/tencent/assistant/utils/db.java
com/tencent/assistant/utils/e.java
com/tencent/assistant/utils/o.java
com/tencent/assistant/utils/q.java
com/tencent/assistantv2/activity/SearchActivity.java
com/tencent/assistantv2/adapter/AssistantTabAdapter.java
com/tencent/assistantv2/component/FixedWebViewV2.java
com/tencent/assistantv2/component/TxWebView.java
com/tencent/d/a/f.java
com/tencent/downloadsdk/protocol/a.java
一般功能-> 获取系统服务(getSystemService)
com/qq/AppService/AppService.java
com/qq/AppService/af.java
com/qq/AppService/ar.java
com/qq/AppService/ay.java
com/qq/AppService/b.java
com/qq/AppService/ba.java
com/qq/d/g/j.java
com/qq/d/g/o.java
com/qq/d/g/t.java
com/qq/e/a.java
com/qq/m/b.java
com/qq/m/d.java
com/qq/m/f.java
com/qq/provider/ab.java
com/qq/provider/ag.java
com/qq/provider/b.java
com/qq/provider/o.java
com/qq/provider/w.java
com/qq/receiver/NetReceiver.java
com/qq/util/p.java
com/tencent/assistant/activity/AppTreasureBoxActivity.java
com/tencent/assistant/activity/BaseActivity.java
com/tencent/assistant/activity/HelperFeedbackActivity.java
com/tencent/assistant/activity/bt.java
com/tencent/assistant/activity/ds.java
com/tencent/assistant/activity/fv.java
com/tencent/assistant/backgroundscan/BackgroundScanManager.java
com/tencent/assistant/component/AppListView.java
com/tencent/assistant/component/PopViewDialog.java
com/tencent/assistant/component/TabView.java
com/tencent/assistant/component/TotalTabLayout.java
com/tencent/assistant/component/UpdateIgnoreListView.java
com/tencent/assistant/component/UpdateListView.java
com/tencent/assistant/component/listview/ApkResultListView.java
com/tencent/assistant/component/listview/BigFileListView.java
com/tencent/assistant/component/listview/RubbishResultListView.java
com/tencent/assistant/component/smartcard/ISmartcard.java
com/tencent/assistant/component/smartcard/SmartSquareAppItem.java
com/tencent/assistant/component/smartcard/SmartSquareAppWithUserItem.java
com/tencent/assistant/component/spaceclean/RubbishItemView.java
com/tencent/assistant/d/b.java
com/tencent/assistant/e/a.java
com/tencent/assistant/graphic/i.java
com/tencent/assistant/js/JsBridge.java
com/tencent/assistant/kapalaiadapter/a/a.java
com/tencent/assistant/kapalaiadapter/a/b.java
com/tencent/assistant/kapalaiadapter/a/d.java
com/tencent/assistant/kapalaiadapter/a/e.java
com/tencent/assistant/kapalaiadapter/a/f.java
com/tencent/assistant/kapalaiadapter/a/g.java
com/tencent/assistant/kapalaiadapter/a/h.java
com/tencent/assistant/manager/bm.java
com/tencent/assistant/manager/cp.java
com/tencent/assistant/manager/notification/AbstractNotificationService.java
com/tencent/assistant/manager/notification/b.java
com/tencent/assistant/manager/notification/k.java
com/tencent/assistant/manager/notification/o.java
com/tencent/assistant/manager/notification/t.java
com/tencent/assistant/module/b/b.java
com/tencent/assistant/module/timer/BaseScheduleJob.java
com/tencent/assistant/module/timer/BaseTimePointJob.java
com/tencent/assistant/module/timer/job/AutoDownloadTimerJob.java
com/tencent/assistant/module/timer/job/STInstallRepairReportTimerJob.java
com/tencent/assistant/module/timer/job/STReportTimerJob.java
com/tencent/assistant/module/wisedownload/condition/ThresholdCondition.java
com/tencent/assistant/net/c.java
com/tencent/assistant/plugin/PluginActivity.java
com/tencent/assistant/protocol/c.java
com/tencent/assistant/protocol/h.java
com/tencent/assistant/securescan/StartScanActivity.java
com/tencent/assistant/uninstall/a.java
com/tencent/assistant/uninstall/h.java
com/tencent/assistant/utils/ab.java
com/tencent/assistant/utils/ax.java
com/tencent/assistant/utils/e.java
com/tencent/assistant/utils/i.java
com/tencent/assistant/utils/o.java
com/tencent/assistant/utils/q.java
com/tencent/assistantv2/activity/SearchActivity.java
com/tencent/assistantv2/activity/dg.java
com/tencent/assistantv2/component/DownloadCenterButton.java
com/tencent/assistantv2/component/RankFriendsLoginErrorView.java
com/tencent/assistantv2/component/ScaningProgressView.java
com/tencent/assistantv2/component/UcTitleView.java
com/tencent/assistantv2/component/bc.java
com/tencent/assistantv2/component/search/ISearchResultPage.java
com/tencent/b/d/i.java
com/tencent/b/d/k.java
com/tencent/downloadsdk/k.java
com/tencent/downloadsdk/network/HttpUtils.java
com/tencent/downloadsdk/utils/g.java
com/tencent/downloadsdk/utils/k.java
com/tencent/feedback/anr/ANRHandleServiceTask.java
com/tencent/feedback/common/b.java
com/tencent/feedback/common/f.java
com/tencent/feedback/common/i.java
com/tencent/wcs/d/a.java
com/tencent/wcs/proxy/a/b.java
com/tencent/wcs/proxy/a/d.java
com/tencent/wcs/proxy/heartbeat/HeartBeatService.java
com/tencent/wcs/proxy/k.java
设备指纹-> 查看本机IMSI
加密解密-> Crypto加解密组件
网络通信-> WebView JavaScript接口
设备指纹-> 查看手机软件版本号 com/qq/provider/ab.java
设备指纹-> 查看本机SIM卡序列号 com/qq/provider/ab.java
设备指纹-> 查看本机号码 com/qq/provider/ab.java
一般功能-> 获取WiFi相关信息
一般功能-> 查看\修改Android系统属性 com/qq/d/g/j.java
com/qq/provider/ab.java
com/tencent/assistant/utils/cc.java
一般功能-> 传感器相关操作 com/qq/provider/ab.java
网络通信-> DefaultHttpClient Connection
一般功能-> 获取活动网路信息
网络通信-> HTTP请求、连接和会话
网络通信-> WebView 相关
一般功能-> PowerManager操作 com/tencent/assistant/module/wisedownload/condition/ThresholdCondition.java
com/tencent/assistant/utils/i.java
com/tencent/assistant/utils/q.java
进程操作-> 获取运行的进程\服务
隐私数据-> 获取已安装的应用程序
隐私数据-> 用户账户管理 com/qq/provider/j.java
com/tencent/assistant/kapalaiadapter/a.java
一般功能-> 加载so文件
设备指纹-> getSimOperator com/tencent/b/d/i.java
DEX-> 动态加载
一般功能-> 查询数据库(短信、联系人、通话记录、浏览器历史等) com/qq/provider/j.java
com/tencent/assistant/utils/e.java
隐私数据-> 读写通讯录 com/qq/provider/j.java
组件-> ContentProvider
命令执行-> getRuntime.exec()
隐私数据-> 发送SMS短信息 com/qq/provider/y.java
com/qq/provider/z.java
网络通信-> TCP服务器套接字
隐私数据-> 剪贴板数据读写操作 com/tencent/assistant/js/JsBridge.java
一般功能-> 获取网络接口信息 com/qq/AppService/af.java
com/qq/d/g/t.java
隐私数据-> 读取短信 com/qq/AppService/SMSReceiver.java
com/qq/provider/y.java
一般功能-> Android通知 com/qq/AppService/b.java
com/tencent/assistant/manager/notification/o.java
加密解密-> 信息摘要算法
设备指纹-> 获取蜂窝位置信息 com/tencent/assistant/d/b.java
一般功能-> 设置手机铃声,媒体音量 com/qq/provider/ag.java
网络通信-> 蓝牙连接 com/qq/provider/ag.java

源代码分析

高危
4
警告
7
信息
2
安全
1
屏蔽
0
序号 问题 等级 参考标准 文件位置 操作
1 应用程序记录日志信息,不得记录敏感信息 信息 CWE: CWE-532: 通过日志文件的信息暴露
OWASP MASVS: MSTG-STORAGE-3
com/qq/AppService/AppInstaller.java
com/qq/AppService/AppService.java
com/qq/AppService/AstApp.java
com/qq/AppService/IPCService.java
com/qq/AppService/LoginReceiver.java
com/qq/AppService/MainReceiver.java
com/qq/AppService/SMSReceiver.java
com/qq/AppService/SmsManagerActivity.java
com/qq/AppService/SmsSentReceiver.java
com/qq/AppService/StartApp.java
com/qq/AppService/StorageListener.java
com/qq/AppService/WifiPage.java
com/qq/AppService/ae.java
com/qq/AppService/ag.java
com/qq/AppService/ah.java
com/qq/AppService/aq.java
com/qq/AppService/at.java
com/qq/AppService/au.java
com/qq/AppService/aw.java
com/qq/AppService/b.java
com/qq/AppService/ba.java
com/qq/AppService/bb.java
com/qq/AppService/bc.java
com/qq/AppService/d.java
com/qq/AppService/g.java
com/qq/AppService/h.java
com/qq/AppService/m.java
com/qq/AppService/n.java
com/qq/AppService/r.java
com/qq/AppService/t.java
com/qq/AppService/v.java
com/qq/AppService/w.java
com/qq/c/d.java
com/qq/c/e.java
com/qq/d/g/f.java
com/qq/d/g/o.java
com/qq/h/d.java
com/qq/j/a.java
com/qq/m/b.java
com/qq/m/d.java
com/qq/m/f.java
com/qq/m/h.java
com/qq/m/i.java
com/qq/provider/ab.java
com/qq/provider/ag.java
com/qq/provider/ah.java
com/qq/provider/ak.java
com/qq/provider/al.java
com/qq/provider/am.java
com/qq/provider/an.java
com/qq/provider/b.java
com/qq/provider/c.java
com/qq/provider/cache2/a.java
com/qq/provider/ebooks3/DBHelper.java
com/qq/provider/extern/ExternDBHelper.java
com/qq/provider/h.java
com/qq/provider/j.java
com/qq/provider/l.java
com/qq/provider/n.java
com/qq/provider/o.java
com/qq/provider/p.java
com/qq/provider/q.java
com/qq/provider/r.java
com/qq/provider/s.java
com/qq/provider/t.java
com/qq/provider/v.java
com/qq/provider/w.java
com/qq/provider/x.java
com/qq/provider/y.java
com/qq/taf/RequestPacket.java
com/qq/util/l.java
com/qq/util/x.java
com/tencent/android/qqdownloader/wxapi/WXEntryActivity.java
com/tencent/assistant/Global.java
com/tencent/assistant/activity/ApkMgrActivity.java
com/tencent/assistant/activity/AppBackupActivity.java
com/tencent/assistant/activity/BaseActivity.java
com/tencent/assistant/activity/BigFileCleanActivity.java
com/tencent/assistant/activity/BrowserActivity.java
com/tencent/assistant/activity/DownloadActivity.java
com/tencent/assistant/activity/InstalledAppManagerActivity.java
com/tencent/assistant/activity/MobileManagerInstallActivity.java
com/tencent/assistant/activity/PhotoBackupNewActivity.java
com/tencent/assistant/activity/RootUtilInstallActivity.java
com/tencent/assistant/activity/SettingActivity.java
com/tencent/assistant/activity/SpaceCleanActivity.java
com/tencent/assistant/activity/VideoActivity.java
com/tencent/assistant/activity/VideoActivityV2.java
com/tencent/assistant/activity/ag.java
com/tencent/assistant/activity/bl.java
com/tencent/assistant/activity/br.java
com/tencent/assistant/activity/bt.java
com/tencent/assistant/activity/bv.java
com/tencent/assistant/activity/ca.java
com/tencent/assistant/activity/cn.java
com/tencent/assistant/activity/cv.java
com/tencent/assistant/activity/ec.java
com/tencent/assistant/activity/ee.java
com/tencent/assistant/activity/eg.java
com/tencent/assistant/activity/ej.java
com/tencent/assistant/activity/ep.java
com/tencent/assistant/activity/fa.java
com/tencent/assistant/activity/fo.java
com/tencent/assistant/activity/fs.java
com/tencent/assistant/activity/fv.java
com/tencent/assistant/activity/fx.java
com/tencent/assistant/activity/fy.java
com/tencent/assistant/activity/fz.java
com/tencent/assistant/activity/gr.java
com/tencent/assistant/activity/hf.java
com/tencent/assistant/activity/hj.java
com/tencent/assistant/activity/hl.java
com/tencent/assistant/activity/k.java
com/tencent/assistant/activity/l.java
com/tencent/assistant/activity/q.java
com/tencent/assistant/activity/t.java
com/tencent/assistant/adapter/DownloadInfoMultiAdapter.java
com/tencent/assistant/adapter/UserCenterAdapter.java
com/tencent/assistant/adapter/a/a.java
com/tencent/assistant/adapter/a/b.java
com/tencent/assistant/adapter/ca.java
com/tencent/assistant/adapter/d.java
com/tencent/assistant/adapter/dh.java
com/tencent/assistant/adapter/du.java
com/tencent/assistant/adapter/dv.java
com/tencent/assistant/adapter/p.java
com/tencent/assistant/adapter/q.java
com/tencent/assistant/apilevel/FullscreenableChromeClient.java
com/tencent/assistant/appbakcup/s.java
com/tencent/assistant/b.java
com/tencent/assistant/backgroundscan/BackgroundPushReceiver.java
com/tencent/assistant/backgroundscan/BackgroundReceiver.java
com/tencent/assistant/backgroundscan/BackgroundScanManager.java
com/tencent/assistant/backgroundscan/BackgroundScanTimerJob.java
com/tencent/assistant/backgroundscan/a.java
com/tencent/assistant/backgroundscan/b.java
com/tencent/assistant/backgroundscan/c.java
com/tencent/assistant/backgroundscan/d.java
com/tencent/assistant/backgroundscan/g.java
com/tencent/assistant/backgroundscan/h.java
com/tencent/assistant/backgroundscan/i.java
com/tencent/assistant/backgroundscan/j.java
com/tencent/assistant/backgroundscan/k.java
com/tencent/assistant/backgroundscan/l.java
com/tencent/assistant/c/h.java
com/tencent/assistant/c/j.java
com/tencent/assistant/component/AppIconView.java
com/tencent/assistant/component/AppStateButton.java
com/tencent/assistant/component/NormalErrorRecommendPage.java
com/tencent/assistant/component/PluginDownStateButton.java
com/tencent/assistant/component/PreInstallAppListView.java
com/tencent/assistant/component/RankFriendsListPage.java
com/tencent/assistant/component/ShareAppDialog.java
com/tencent/assistant/component/SwitchButton.java
com/tencent/assistant/component/UpdateListView.java
com/tencent/assistant/component/UserAppListView.java
com/tencent/assistant/component/appdetail/process/b.java
com/tencent/assistant/component/appdetail/process/e.java
com/tencent/assistant/component/appdetail/process/f.java
com/tencent/assistant/component/appdetail/process/i.java
com/tencent/assistant/component/appdetail/process/n.java
com/tencent/assistant/component/aw.java
com/tencent/assistant/component/ba.java
com/tencent/assistant/component/by.java
com/tencent/assistant/component/ca.java
com/tencent/assistant/component/dz.java
com/tencent/assistant/component/eb.java
com/tencent/assistant/component/listview/AnimationExpandableListView.java
com/tencent/assistant/component/listview/ManagerGeneralController.java
com/tencent/assistant/component/listview/n.java
com/tencent/assistant/component/smartcard/NormalSmartcardAppListItem.java
com/tencent/assistant/component/smartcard/SearchSmartCardBaseItem.java
com/tencent/assistant/component/smartcard/SmartSquareAppItem.java
com/tencent/assistant/component/txscrollview/RankRefreshGetMoreListView.java
com/tencent/assistant/component/txscrollview/TXTabBarLayout.java
com/tencent/assistant/component/txscrollview/TXTabBarLayoutBase.java
com/tencent/assistant/d/b.java
com/tencent/assistant/db/helper/SqliteHelper.java
com/tencent/assistant/db/table/SwitchPhoneTable.java
com/tencent/assistant/db/table/aa.java
com/tencent/assistant/db/table/ab.java
com/tencent/assistant/db/table/ac.java
com/tencent/assistant/db/table/ae.java
com/tencent/assistant/db/table/e.java
com/tencent/assistant/db/table/r.java
com/tencent/assistant/download/DownloadInfo.java
com/tencent/assistant/download/a.java
com/tencent/assistant/download/g.java