温馨提示:本平台仅供研究软件风险、安全评估,禁止用于非法用途。由于展示的数据过于全面,请耐心等待加载完成。如有疑问或建议, 可加入我们的微信群讨论

APP评分

病毒检测 7 个厂商报毒

安全评分

文件信息

文件名称 1863_ztjxgf_20240515.apk
文件大小 8.0MB
MD5 aa53fea1aeb824d003b88f3252154c46
SHA1 46a34aa48f9065ff596bc6ad6a65aad9ffac28a4
SHA256 b57ef57db5e7a755fbb6b516437d933d7b958985b626c7c7c9df2a1994f01593

应用信息

应用名称 诛天剑侠
包名 com.hoodinn.hgame.ztjx.hqy
主活动 com.hoodinn.hgame.MainActivity
目标SDK 28     最小SDK 21
版本号 1.0.0     子版本号 1
加固信息 未加壳

组件导出信息

扫描选项

重新扫描 管理规则 动态分析

反编译代码

Manifest文件 查看
APK文件 下载
Java源代码 查看 -- 下载

证书信息

二进制文件已签名
v1 签名: True
v2 签名: True
v3 签名: False
v4 签名: False
主题: L=北京朝阳
签名算法: rsassa_pkcs1v15
有效期自: 2017-08-07 02:35:09+00:00
有效期至: 2042-08-01 02:35:09+00:00
发行人: L=北京朝阳
序列号: 0x48d373f6
哈希算法: sha256
证书MD5: 809e42fafe73c8dc386d427234208afc
证书SHA1: ec945e2bfdb06fe433e0642622804510595e4260
证书SHA256: 154d954145a2bf0575ec8c5d64fa404a44d084cb23e2381754f6c5159d619e85
证书SHA512: 621650b3c81f00f8469ae622bd360d958e9be3d4db96b5ac04f4f416dca9e1883398b29911f476e8bdc9a4391376b80b82970d299df720fc1ff24ce7ebd8e591
公钥算法: rsa
密钥长度: 2048
指纹: 36e028abf31d79f70c2dad67dc2a367c66ae80bf41da0ef6498add9ab44dc582
找到 1 个唯一证书

应用程序权限

权限名称 安全等级 权限内容 权限描述 关联代码
android.permission.READ_LOGS 危险 读取系统日志文件 允许应用程序从系统的各日志文件中读取信息。这样应用程序可以发现您的手机使用情况,这些信息还可能包含用户个人信息或保密信息,造成隐私数据泄露。
android.permission.GET_TASKS 危险 检索当前运行的应用程序 允许应用程序检索有关当前和最近运行的任务的信息。恶意应用程序可借此发现有关其他应用程序的保密信息。
android.permission.ACCESS_NETWORK_STATE 普通 获取网络状态 允许应用程序查看所有网络的状态。
android.permission.INTERNET 危险 完全互联网访问 允许应用程序创建网络套接字。
android.permission.READ_PHONE_STATE 危险 读取手机状态和标识 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号,是否正在通话,以及对方的号码等。
android.permission.ACCESS_WIFI_STATE 普通 查看Wi-Fi状态 允许应用程序查看有关Wi-Fi状态的信息。
android.permission.RECEIVE_BOOT_COMPLETED 普通 开机自启 允许应用程序在系统完成启动后即自行启动。这样会延长手机的启动时间,而且如果应用程序一直运行,会降低手机的整体速度。
android.permission.RECORD_AUDIO 危险 获取录音权限 允许应用程序获取录音权限。
android.permission.READ_CONTACTS 危险 读取联系人信息 允允许应用程序读取您手机上存储的所有联系人(地址)数据。恶意应用程序可借此将您的数据发送给其他人。
android.permission.READ_EXTERNAL_STORAGE 危险 读取SD卡内容 允许应用程序从SD卡读取信息。
android.permission.WRITE_EXTERNAL_STORAGE 危险 读取/修改/删除外部存储内容 允许应用程序写入外部存储。
com.android.launcher.permission.INSTALL_SHORTCUT 签名 创建快捷方式 这个权限是允许应用程序创建桌面快捷方式。
android.permission.SYSTEM_ALERT_WINDOW 危险 弹窗 允许应用程序弹窗。 恶意程序可以接管手机的整个屏幕。
android.permission.VIBRATE 普通 控制振动器 允许应用程序控制振动器,用于消息通知振动功能。
android.permission.WAKE_LOCK 危险 防止手机休眠 允许应用程序防止手机休眠,在手机屏幕关闭后后台进程仍然运行。
android.permission.WRITE_APN_SETTINGS 危险 写入访问点名称设置 允许应用程序写入访问点名称设置。
android.permission.WRITE_SETTINGS 危险 修改全局系统设置 允许应用程序修改系统设置方面的数据。恶意应用程序可借此破坏您的系统配置。
android.permission.CHANGE_NETWORK_STATE 危险 改变网络连通性 允许应用程序改变网络连通性。
android.permission.CHANGE_WIFI_STATE 危险 改变Wi-Fi状态 允许应用程序改变Wi-Fi状态。
com.asus.msa.SupplementaryDID.ACCESS 普通 获取厂商oaid相关权限 获取设备标识信息oaid,在华硕设备上需要用到的权限。
freemme.permission.msa 未知 未知权限 来自 android 引用的未知权限。
android.permission.MOUNT_UNMOUNT_FILESYSTEMS 危险 装载和卸载文件系统 允许应用程序装载和卸载可移动存储器的文件系统。
android.permission.ACCESS_FINE_LOCATION 危险 获取精确位置 通过GPS芯片接收卫星的定位信息,定位精度达10米以内。恶意程序可以用它来确定您所在的位置。
android.permission.ACCESS_COARSE_LOCATION 危险 获取粗略位置 通过WiFi或移动基站的方式获取用户粗略的经纬度信息,定位精度大概误差在30~1500米。恶意程序可以用它来确定您的大概位置。
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS 普通 访问定位额外命令 访问额外位置提供程序命令,恶意应用程序可能会使用它来干扰GPS或其他位置源的操作。
freemme.permission.msa.SECURITY_ACCESS 未知 未知权限 来自 android 引用的未知权限。
oplus.permission.settings.LAUNCH_FOR_EXPORT 未知 未知权限 来自 android 引用的未知权限。

证书分析

高危
0
警告
1
信息
1
标题 严重程度 描述信息
已签名应用 信息 应用程序已使用代码签名证书进行签名

MANIFEST分析

高危
0
警告
2
信息
0
屏蔽
0
序号 问题 严重程度 描述信息 操作
1 应用程序可以安装在有漏洞的已更新 Android 版本上
Android 5.0-5.0.2, [minSdk=21]
信息 该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。
2 应用程序已启用明文网络流量
[android:usesCleartextTraffic=true]
警告 应用程序打算使用明文网络流量,例如明文HTTP,FTP协议,DownloadManager和MediaPlayer。针对API级别27或更低的应用程序,默认值为“true”。针对API级别28或更高的应用程序,默认值为“false”。避免使用明文流量的主要原因是缺乏机密性,真实性和防篡改保护;网络攻击者可以窃听传输的数据,并且可以在不被检测到的情况下修改它。
3 应用程序数据可以被备份
[android:allowBackup=true]
警告 这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。

可浏览的ACTIVITIES

ACTIVITY INTENT

网络安全配置

序号 范围 严重级别 描述

API调用分析

API功能 源码文件
一般功能-> 加载so文件
一般功能-> IPC通信
XI/K0/XI/XI.java
XI/XI/K0/K0.java
XI/XI/XI/XI.java
XI/kM/XI/XI/XI/XI.java
XI/xo/XI/XI/CA.java
XI/xo/XI/XI/xo.java
com/brplug/github/gzuliyujiang/oaid/impl/AsusImpl.java
com/brplug/github/gzuliyujiang/oaid/impl/CoolpadImpl.java
com/brplug/github/gzuliyujiang/oaid/impl/FreemeImpl.java
com/brplug/github/gzuliyujiang/oaid/impl/GmsImpl.java
com/brplug/github/gzuliyujiang/oaid/impl/HuaweiImpl.java
com/brplug/github/gzuliyujiang/oaid/impl/LenovoImpl.java
com/brplug/github/gzuliyujiang/oaid/impl/MsaImpl.java
com/brplug/github/gzuliyujiang/oaid/impl/OAIDService.java
com/brplug/github/gzuliyujiang/oaid/impl/OppoImpl.java
com/brplug/github/gzuliyujiang/oaid/impl/SamsungImpl.java
com/brplug/repeackage/android/creator/IdsSupplier.java
com/brplug/repeackage/asus/msa/SupplementaryDID/IDidAidlInterface.java
com/brplug/repeackage/bun/lib/MsaIdInterface.java
com/brplug/repeackage/coolpad/deviceidsupport/IDeviceIdManager.java
com/brplug/repeackage/google/android/gms/ads/identifier/internal/IAdvertisingIdService.java
com/brplug/repeackage/heytap/openid/IOpenID.java
com/brplug/repeackage/samsung/android/deviceidservice/IDeviceIdService.java
com/brplug/repeackage/uodis/opendevice/aidl/OpenDeviceIdentifierService.java
com/brplug/repeackage/zui/deviceidservice/IDeviceidInterface.java
com/brsdk/android/core/BRSdkApi.java
com/brsdk/android/core/IBRSdkApi.java
com/brsdk/android/core/a.java
com/brsdk/android/event/BRLifecycleListener.java
com/brsdk/android/platform/Br94WanChannel.java
com/brsdk/android/ui/BRUIPermission.java
com/brsdk/android/ui/BRUISplash3.java
com/brsdk/android/ui/f.java
com/brsdk/android/ui/u.java
com/brsdk/android/utils/BRUtils.java
com/brsdk/android/widget/BRWebView.java
com/bun/lib/MsaIdInterface.java
com/bun/miitmdid/provider/asus/AsusProvider.java
com/bun/miitmdid/provider/samsung/SamsungProvider.java
com/bun/miitmdid/provider/zte/MsaClient.java
com/github/dfqin/grantor/PermissionActivity.java
com/github/dfqin/grantor/PermissionsUtil.java
com/hoodinn/hgame/MainActivity.java
com/hoodinn/hgame/MicroClientManager.java
com/hoodinn/hgame/ThirdPTBaseHandler.java
com/hoodinn/hgame/sdk/HGameActivity.java
com/hoodinn/hgame/sdk/HGameSDKAndroid.java
com/hoodinn/hgame/sdk/browser/base/HGameWebView.java
com/hoodinn/hgame/sdk/browser/utils/UrlHandler.java
com/hoodinn/hgame/sdk/browser/x5webview/HGameX5WebViewClient.java
com/hoodinn/hgame/sdk/download/DownloadService.java
com/hoodinn/hgame/sdk/plugin/HGameAppPlugin.java
com/hoodinn/hgame/sdk/plugin/HGameMCPlugin.java
com/hoodinn/hgame/sdk/plugin/HGameSSOLoginPlugin.java
com/hoodinn/hgame/sdk/plugin/HGameSharePlugin.java
com/hoodinn/hgame/sdk/plugin/HGameShortCutPlugin.java
com/hoodinn/hgame/sdk/plugin/core/HGamePlugin.java
com/hoodinn/hgame/sdk/plugin/core/HGamePluginManager.java
com/hoodinn/hgame/thirdsdk/HGameThirdSDK.java
com/hoodinn/hgame/thirdsdk/HGameThirdSDKImpl.java
com/kyzh/sdk2/init/KyzhLib.java
com/kyzh/sdk2/init/KyzhSdk.java
com/kyzh/sdk2/ui/browser/BrowserActivity.java
com/kyzh/sdk2/ui/login/KyzhLoginActivity.java
com/kyzh/sdk2/ui/usercenter/KyzhUserCenterActivity.java
com/kyzh/sdk2/ui/usercenter/about/KyzhAboutActivity.java
com/kyzh/sdk2/ui/usercenter/about/KyzhServiceActivity.java
com/kyzh/sdk2/ui/usercenter/coupon/KyzhCouponActivity.java
com/kyzh/sdk2/ui/usercenter/email/KyzhBindEmailActivity.java
com/kyzh/sdk2/ui/usercenter/email/KyzhUnbindemailActivity.java
com/kyzh/sdk2/ui/usercenter/gift/KyzhGiftActivity.java
com/kyzh/sdk2/ui/usercenter/news/KyzhNewsActivity.java
com/kyzh/sdk2/ui/usercenter/news/KyzhNewsDetailActivity.java
com/kyzh/sdk2/ui/usercenter/password/KyzhChangePasswordActivity.java
com/kyzh/sdk2/ui/usercenter/pay/KyzhPayActivity.java
com/kyzh/sdk2/ui/usercenter/pay/KyzhPayHistoryActivity.java
com/kyzh/sdk2/ui/usercenter/phone/KyzhBindphoneActivity.java
com/kyzh/sdk2/ui/usercenter/phone/KyzhUnbindphoneActivity.java
com/kyzh/sdk2/ui/usercenter/safe/LogoffActivity.java
com/kyzh/sdk2/ui/usercenter/verify/KyzhVerifyActivity.java
com/kyzh/sdk2/utils/DialogUtils.java
com/kyzh/sdk2/utils/KyzhLoginUtils.java
组件-> 启动 Activity
com/brsdk/android/ui/BRUIPermission.java
com/brsdk/android/ui/BRUISplash3.java
com/brsdk/android/ui/f.java
com/brsdk/android/utils/BRUtils.java
com/brsdk/android/widget/BRWebView.java
com/github/dfqin/grantor/PermissionsUtil.java
com/hoodinn/hgame/sdk/HGameSDKAndroid.java
com/hoodinn/hgame/sdk/browser/x5webview/HGameX5WebViewClient.java
com/hoodinn/hgame/sdk/plugin/HGameAppPlugin.java
com/kyzh/sdk2/init/KyzhLib.java
com/kyzh/sdk2/init/KyzhSdk.java
com/kyzh/sdk2/ui/browser/BrowserActivity.java
com/kyzh/sdk2/ui/usercenter/KyzhUserCenterActivity.java
com/kyzh/sdk2/ui/usercenter/about/KyzhAboutActivity.java
com/kyzh/sdk2/ui/usercenter/about/KyzhServiceActivity.java
com/kyzh/sdk2/ui/usercenter/coupon/KyzhCouponActivity.java
com/kyzh/sdk2/ui/usercenter/email/KyzhBindEmailActivity.java
com/kyzh/sdk2/ui/usercenter/email/KyzhUnbindemailActivity.java
com/kyzh/sdk2/ui/usercenter/gift/KyzhGiftActivity.java
com/kyzh/sdk2/ui/usercenter/news/KyzhNewsActivity.java
com/kyzh/sdk2/ui/usercenter/news/KyzhNewsDetailActivity.java
com/kyzh/sdk2/ui/usercenter/password/KyzhChangePasswordActivity.java
com/kyzh/sdk2/ui/usercenter/pay/KyzhPayActivity.java
com/kyzh/sdk2/ui/usercenter/pay/KyzhPayHistoryActivity.java
com/kyzh/sdk2/ui/usercenter/phone/KyzhBindphoneActivity.java
com/kyzh/sdk2/ui/usercenter/phone/KyzhUnbindphoneActivity.java
com/kyzh/sdk2/ui/usercenter/safe/LogoffActivity.java
com/kyzh/sdk2/ui/usercenter/verify/KyzhVerifyActivity.java
com/kyzh/sdk2/utils/DialogUtils.java
com/kyzh/sdk2/utils/KyzhLoginUtils.java
网络通信-> WebView JavaScript接口
网络通信-> WebView使用File协议
网络通信-> WebView 相关
一般功能-> 文件操作
com/brplug/base64/Base64.java
com/brplug/base64/Base64InputStream.java
com/brplug/base64/Base64OutputStream.java
com/brplug/bytedance/hume/readapk/HumeSDK.java
com/brplug/bytedance/hume/readapk/a.java
com/brplug/bytedance/hume/readapk/a/a.java
com/brplug/bytedance/hume/readapk/d.java
com/brplug/encrypt/BRBase64.java
com/brplug/encrypt/BRRSA.java
com/brplug/github/gzuliyujiang/oaid/DeviceID.java
com/brplug/kwai/monitor/payload/TurboHelper.java
com/brplug/kwai/monitor/payload/a.java
com/brplug/kwai/monitor/payload/b.java
com/brplug/kwai/monitor/payload/d.java
com/brplug/meituan/android/walle/ApkUtil.java
com/brplug/meituan/android/walle/ChannelReader.java
com/brplug/meituan/android/walle/PayloadReader.java
com/brplug/oaid/BRContext.java
com/brplug/oaid/MdidSdkCore.java
com/brplug/oaid/core/_BRID.java
com/brsdk/android/core/b.java
com/brsdk/android/event/BRHttpListener.java
com/brsdk/android/ui/u.java
com/brsdk/android/utils/BRShared.java
com/brsdk/android/utils/BRUtils.java
com/brsdk/android/utils/a.java
com/brsdk/android/utils/b.java
com/brsdk/android/utils/c.java
com/brsdk/android/utils/d.java
com/brsdk/android/utils/e.java
com/brsdk/android/utils/f.java
com/brsdk/android/utils/g.java
com/brsdk/android/widget/BRWebView.java
com/github/dfqin/grantor/PermissionActivity.java
com/github/dfqin/grantor/PermissionsUtil.java
com/hoodinn/hgame/sdk/browser/x5webview/HGameX5WebView.java
com/hoodinn/hgame/sdk/download/DownloadService.java
com/hoodinn/hgame/sdk/download/DownloadThread.java
com/hoodinn/hgame/sdk/download/DownloadUtils.java
com/hoodinn/hgame/sdk/model/DeviceInfo.java
com/hoodinn/hgame/sdk/model/InputBuilder.java
com/hoodinn/hgame/sdk/model/InstalledApps.java
com/hoodinn/hgame/sdk/model/NewGameRequest.java
com/hoodinn/hgame/sdk/plugin/HGameMCPlugin.java
com/hoodinn/hgame/sdk/plugin/HGameShortCutPlugin.java
com/hoodinn/hgame/sdk/util/AESCryptHelper.java
com/hoodinn/hgame/sdk/util/ApiRequest.java
com/hoodinn/hgame/sdk/util/CommonUtils.java
com/hoodinn/hgame/sdk/util/FileHelper.java
com/hoodinn/hgame/sdk/util/ImageUtils.java
com/hoodinn/hgame/sdk/util/MD5Helper.java
com/hoodinn/hgame/sdk/util/SPUtils.java
com/hoodinn/hgame/sdk/util/StorageHelper.java
com/kyzh/sdk2/utils/ManifestUtil.java
com/kyzh/sdk2/utils/SPUtils.java
com/zhy/base/imageloader/CacheDispatcher.java
com/zhy/base/imageloader/ContentLengthInputStream.java
com/zhy/base/imageloader/ImageDecorder.java
com/zhy/base/imageloader/ImageLoader.java
com/zhy/base/imageloader/ImageUtils.java
com/zhy/base/imageloader/IoUtils.java
com/zhy/base/imageloader/LocalDispatcher.java
com/zhy/base/imageloader/NetworkDispatcher.java
com/zhy/base/imageloader/diskcache/disklrucache/DiskLruCache.java
com/zhy/base/imageloader/diskcache/disklrucache/DiskLruCacheHelper.java
com/zhy/base/imageloader/diskcache/disklrucache/StrictLineReader.java
com/zhy/base/imageloader/diskcache/disklrucache/Util.java
com/zhy/base/imageloader/diskcache/disklrucache/Utils.java
rx/exceptions/CompositeException.java
rx/internal/operators/NotificationLite.java
网络通信-> TCP套接字
组件-> 启动 Service
加密解密-> 信息摘要算法
调用java反射机制
进程操作-> 杀死进程
进程操作-> 获取进程pid com/brsdk/android/utils/BRUtils.java
com/brsdk/android/utils/a.java
com/hoodinn/hgame/ThirdPTBaseHandler.java
一般功能-> 获取系统服务(getSystemService)
隐私数据-> 获取已安装的应用程序 com/hoodinn/hgame/sdk/util/InstalledAppUtils.java
命令执行-> getRuntime.exec() com/brsdk/android/utils/c.java
com/brsdk/android/utils/e.java
一般功能-> 获取WiFi相关信息 com/brsdk/android/utils/e.java
com/hoodinn/hgame/sdk/util/SystemSettings.java
一般功能-> 获取网络接口信息 com/brsdk/android/utils/e.java
com/hoodinn/hgame/sdk/util/CommonUtils.java
一般功能-> 获取活动网路信息
加密解密-> Crypto加解密组件 com/brplug/encrypt/BRRSA.java
com/hoodinn/hgame/sdk/util/AESCryptHelper.java
com/kyzh/sdk2/utils/RequestUtils.java
网络通信-> HTTP请求、连接和会话 com/hoodinn/hgame/sdk/download/DownloadThread.java
com/hoodinn/hgame/sdk/plugin/HGameShortCutPlugin.java
com/hoodinn/hgame/sdk/util/ApiRequest.java
网络通信-> AndroidHttpClient Connection com/hoodinn/hgame/sdk/download/DownloadThread.java
com/hoodinn/hgame/sdk/plugin/HGameShortCutPlugin.java
网络通信-> OkHttpClient Connection
网络通信-> WebView GET请求 com/brsdk/android/widget/BRWebView.java
com/kyzh/sdk2/ui/usercenter/news/KyzhNewsDetailActivity.java
加密解密-> Base64 解密
辅助功能accessibility相关 com/brsdk/android/widget/pager/view/a/b.java
DEX-> 动态加载 com/brplug/oaid/core/_BRID.java
com/brsdk/android/core/b.java
DEX-> 加载和操作Dex文件 com/brplug/oaid/core/_BRID.java
一般功能-> 查看\修改Android系统属性
加密解密-> Base64 加密 com/brsdk/android/utils/BRUtils.java
com/hoodinn/hgame/sdk/util/AESCryptHelper.java
com/kyzh/sdk2/utils/RequestUtils.java
隐私数据-> 剪贴板数据读写操作 com/brsdk/android/utils/BRUtils.java
com/brsdk/android/widget/BRWebView.java
com/kyzh/sdk2/utils/DialogUtils.java
JavaScript 接口方法
组件-> 发送广播 com/brsdk/android/ui/u.java
com/hoodinn/hgame/sdk/plugin/HGameShortCutPlugin.java
一般功能-> 传感器相关操作 com/brsdk/android/utils/c.java
com/brsdk/android/utils/h.java
进程操作-> 获取运行的进程\服务 com/brsdk/android/utils/BRUtils.java
网络通信-> HTTP建立连接 com/brsdk/android/utils/BRUtils.java
com/hoodinn/hgame/sdk/util/ApiRequest.java
com/zhy/base/imageloader/ImageDecorder.java
设备指纹-> 查看本机SIM卡序列号 com/brsdk/android/utils/BRUtils.java
网络通信-> SSL证书处理 a/a/a/c/d.java
com/brsdk/android/utils/BRUtils.java
com/hoodinn/hgame/sdk/util/ApiRequest.java
网络通信-> DefaultHttpClient Connection com/hoodinn/hgame/sdk/util/ApiRequest.java
设备指纹-> getSimOperator com/hoodinn/hgame/sdk/util/SystemSettings.java
设备指纹-> 查看运营商信息 com/hoodinn/hgame/sdk/util/SystemSettings.java
组件-> ContentProvider com/brplug/github/gzuliyujiang/oaid/impl/NubiaImpl.java
隐私数据-> 屏幕截图,截取自己应用内部界面 com/hoodinn/hgame/sdk/util/CommonUtils.java

源代码分析

高危
5
警告
8
信息
2
安全
1
屏蔽
0
序号 问题 等级 参考标准 文件位置 操作
1 应用程序记录日志信息,不得记录敏感信息 信息 CWE: CWE-532: 通过日志文件的信息暴露
OWASP MASVS: MSTG-STORAGE-3
2 可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息 警告 CWE: CWE-200: 信息泄露
OWASP Top 10: M1: Improper Platform Usage
OWASP MASVS: MSTG-PLATFORM-7
3 不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击 高危 CWE: CWE-295: 证书验证不恰当
OWASP Top 10: M3: Insecure Communication
OWASP MASVS: MSTG-NETWORK-3
com/brsdk/android/widget/BRWebView.java
com/kyzh/sdk2/ui/browser/BrowserActivity.java
com/kyzh/sdk2/ui/usercenter/pay/KyzhPayActivity.java
4 SHA-1是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-4
XI/K0/XI/XI.java
com/brplug/encrypt/BRRSA.java
com/brplug/github/gzuliyujiang/oaid/impl/OppoImpl.java
5 MD5是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-4
6 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据 警告 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2
7 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等 警告 CWE: CWE-312: 明文存储敏感信息
OWASP Top 10: M9: Reverse Engineering
OWASP MASVS: MSTG-STORAGE-14
com/brplug/meituan/android/walle/ChannelReader.java
com/hoodinn/hgame/sdk/plugin/HGameMCPlugin.java
rx/internal/schedulers/NewThreadWorker.java
8 应用程序使用不安全的随机数生成器 警告 CWE: CWE-330: 使用不充分的随机数
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-6
com/brsdk/android/utils/BRUtils.java
com/hoodinn/hgame/sdk/download/DownloadThread.java
com/hoodinn/hgame/sdk/plugin/HGameExposedJsApi.java
9 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击 高危 CWE: CWE-79: 在Web页面生成时对输入的转义处理不恰当('跨站脚本')
OWASP Top 10: M1: Improper Platform Usage
OWASP MASVS: MSTG-PLATFORM-6
com/kyzh/sdk2/ui/usercenter/news/KyzhNewsDetailActivity.java
10 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它 信息
OWASP MASVS: MSTG-STORAGE-10
com/brsdk/android/utils/BRUtils.java
com/brsdk/android/widget/BRWebView.java
com/kyzh/sdk2/utils/DialogUtils.java
11 启用了调试配置。生产版本不能是可调试的 高危 CWE: CWE-919: 移动应用程序中的弱点
OWASP Top 10: M1: Improper Platform Usage
OWASP MASVS: MSTG-RESILIENCE-2
com/brplug/brgame/BuildConfig.java
12 SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击 高危 CWE: CWE-295: 证书验证不恰当
OWASP Top 10: M3: Insecure Communication
OWASP MASVS: MSTG-NETWORK-3
com/hoodinn/hgame/sdk/util/ApiRequest.java
13 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 安全
OWASP MASVS: MSTG-NETWORK-4
a/a/a/c/d.java
a/a/a/c/e/a.java
com/hoodinn/hgame/sdk/util/ApiRequest.java
14 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 警告 CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当('SQL 注入')
OWASP Top 10: M7: Client Code Quality
com/brsdk/android/utils/g.java
15 IP地址泄露 警告 CWE: CWE-200: 信息泄露
OWASP MASVS: MSTG-CODE-2
com/brsdk/android/utils/c.java
16 应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式,因为它对相同的明文块[UNK]产生相同的密文 高危 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-2
com/kyzh/sdk2/utils/RequestUtils.java

动态库分析

序号 动态库 NX(堆栈禁止执行) STACK CANARY(栈保护) RELRO RPATH(指定SO搜索路径) RUNPATH(指定SO搜索路径) FORTIFY(常用函数加强检查) SYMBOLS STRIPPED(裁剪符号表)
1 arm64-v8a/libbrgame.so
True
info
二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
True
info
这个二进制文件在栈上添加了一个栈哨兵值,以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出
Full RELRO
info
此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
None
info
二进制文件没有设置运行时搜索路径或RPATH
None
info
二进制文件没有设置 RUNPATH
False
warning
二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数(如 strcpy,gets 等)的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用
False
warning
符号可用

文件分析

序号 问题 文件

VIRUSTOTAL扫描

  检出率: 7 / 58       完整报告

反病毒引擎 检出结果
AhnLab-V3 PUP/Android.SmsPay.1180319
Avast-Mobile Android:Evo-gen [Trj]
Avira ANDROID/AVE.Evo.nhvzz
Cynet Malicious (score: 99)
F-Secure Malware.ANDROID/AVE.Evo.nhvzz
Ikarus PUA.AndroidOS.SMSreg
SymantecMobileInsight AppRisk:Generisk

滥用权限

恶意软件常用权限 11/30
android.permission.GET_TASKS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECORD_AUDIO
android.permission.READ_CONTACTS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
其它常用权限 9/46
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。

IP地图

域名检测

域名 状态 中国境内 位置信息 解析
d.hgame.com 安全
IP地址: 59.82.112.112
国家: 中国
地区: 浙江
城市: 杭州
查看: 高德地图





alog.umengcloud.com 安全
IP地址: 59.82.112.112
国家: 中国
地区: 江苏
城市: 南京
查看: 高德地图





api.92hwan.com 安全
IP地址: 58.218.215.152
国家: 中国
地区: 江苏
城市: 徐州
查看: 高德地图





db.92hwan.com 安全
IP地址: 101.201.73.95
国家: 中国
地区: 北京
城市: 北京
查看: 高德地图





cmnsguider.yunos.com 安全
IP地址: 59.82.112.112
国家: 中国
地区: 浙江
城市: 杭州
查看: 高德地图





gc.hgame.com 安全
IP地址: 59.82.112.112
国家: 中国
地区: 浙江
城市: 杭州
查看: 高德地图





log.umsns.com 安全
IP地址: 59.82.112.112
国家: 美利坚合众国
地区: 弗吉尼亚州
城市: 阿灵顿
查看: Google 地图





pay.dev.gc.hgame.com 安全
IP地址: 180.76.157.101
国家: 中国
地区: 北京
城市: 北京
查看: 高德地图





手机号码

网址

网址信息 源码文件
https://www.jianshu.com/
https://m.baidu.com/
自研引擎-A
http://d.hgame.com/hdpt/hqyapk/appid/104739/gameid/100836
com/hoodinn/hgame/BuildConfig.java
https://m.baidu.com/
http://m.baidu.com/
com/brsdk/android/ui/r.java
http://www.baidu.com/s?word=%s
com/hoodinn/hgame/sdk/browser/utils/UrlHandler.java
http://pay.dev.gc.hgame.com/preparepay
http://gc.hgame.com/app/microtipslogs/reportdeviceinfo
https://api.weixin.qq.com/sns/oauth2/access_token
http://gc.hgame.com/app/microtipslogs/reportinstallapp
http://gc.hgame.com/public/newgame
http://gc.hgame.com/home/index/appid/100000/
com/hoodinn/hgame/sdk/util/Config.java
http://api.92hwan.com/
a/a/a/a/a.java
http://db.92hwan.com/api/user_login.php
com/brsdk/android/platform/Br94WanChannel.java
https://db.92hwan.com/
http://api.92hwan.com/
a/a/a/c/e/a.java
http://debugtbs.qq.com?10000
file:unexpect
https://api.weixin.qq.com/sns/oauth2/access_token
http://m.baidu.com/
http://mdc.html5.qq.com/d/directdown.jsp?channel_id=11047
http://gc.hgame.com/app/microtipslogs/reportdeviceinfo
https://cmnsguider.yunos.com:443/gendevicetoken
http://wup.imtt.qq.com:8080
www.qq.com
http://www.baidu.com/s?word=%s
http://api.92hwan.com/
http://cfg.imtt.qq.com/tbs?v=2&mk=
http://pay.dev.gc.hgame.com/preparepay
http://pms.mb.qq.com/rsp204
http://log.umsns.com/share/api/
http://mdc.html5.qq.com/mh?channel_id=50079&u=
http://gc.hgame.com/app/microtipslogs/reportinstallapp
https://db.92hwan.com/
https://m.baidu.com/
http://mdc.html5.qq.com/d/directdown.jsp?channel_id=11041
http://log.umsns.com/
http://mqqad.html5.qq.com/adjs
http://gc.hgame.com/home/index/appid/100000/
10.0.0.172
http://soft.tbs.imtt.qq.com/17421/tbs_res_imtt_tbs_debugplugin_debugplugin.tbs
http://alog.umengcloud.com/app_logs
http://d.hgame.com/hdpt/hqyapk/appid/104739/gameid/100836
http://db.92hwan.com/api/user_login.php
http://debugtbs.qq.com
http://gc.hgame.com/public/newgame
http://debugx5.qq.com
自研引擎-S

FIREBASE实例

邮箱

追踪器

名称 类别 网址
Umeng Analytics https://reports.exodus-privacy.eu.org/trackers/119

密钥凭证

已显示 8 个secrets
1、 凭证信息=> "JF_APPKEY" : "E3D5E3B541A345009A40B99D5FBE910B"
2、 凭证信息=> "JF_APPID" : "220534"
3、 "brsdk_find_password" : "Find"
4、 2ad7451d1149bcd16ec80c5e076b3263
5、 258EAFA5-E914-47DA-95CA-C5AB0DC85B11
6、 245d64e65dc9fe70d4d62aa6b941221fa92a3fb07db7a4858e43bf1dbf2972e9
7、 9b38b1ce5d9b5bba1a6539ad75eae153555c74f5b95e6cdfe5019a6a0e56f466
8、 AaBbCcDdEeFfGgHhIiJjKkLlMmNnOoPpQqRrSsTtUuVvWwXxYyZz0123456789

字符串列表

建议导出为TXT,方便查看。

活动列表

已显示 25 个activities
1、 com.hoodinn.hgame.MainActivity
2、 com.brsdk.android.ui.BRUIPermission
3、 com.github.dfqin.grantor.PermissionActivity
4、 com.brsdk.android.ui.BRUISplash3
5、 com.brsdk.android.widget.BRWebView$ImgPicker
6、 com.bun.miitmdid.utilsforrequestpermission.PermissionTransparentActivity
7、 com.kyzh.sdk2.ui.login.KyzhLoginActivity
8、 com.kyzh.sdk2.ui.usercenter.pay.KyzhPayActivity
9、 com.kyzh.sdk2.ui.usercenter.ball.KyzhBallActivity
10、 com.kyzh.sdk2.ui.usercenter.KyzhUserCenterActivity
11、 com.kyzh.sdk2.ui.usercenter.verify.KyzhVerifyActivity
12、 com.kyzh.sdk2.ui.usercenter.pay.KyzhPayHistoryActivity
13、 com.kyzh.sdk2.ui.usercenter.gift.KyzhGiftActivity
14、 com.kyzh.sdk2.ui.usercenter.about.KyzhServiceActivity
15、 com.kyzh.sdk2.ui.usercenter.news.KyzhNewsDetailActivity
16、 com.kyzh.sdk2.ui.usercenter.news.KyzhNewsActivity
17、 com.kyzh.sdk2.ui.usercenter.coupon.KyzhCouponActivity
18、 com.kyzh.sdk2.ui.usercenter.about.KyzhAboutActivity
19、 com.kyzh.sdk2.ui.usercenter.email.KyzhUnbindemailActivity
20、 com.kyzh.sdk2.ui.usercenter.password.KyzhChangePasswordActivity
21、 com.kyzh.sdk2.ui.usercenter.phone.KyzhBindphoneActivity
22、 com.kyzh.sdk2.ui.usercenter.phone.KyzhUnbindphoneActivity
23、 com.kyzh.sdk2.ui.usercenter.email.KyzhBindEmailActivity
24、 com.kyzh.sdk2.ui.browser.BrowserActivity
25、 com.kyzh.sdk2.ui.usercenter.safe.LogoffActivity

服务列表

广播接收者列表

内容提供者列表

第三方SDK

SDK名称 开发者 描述信息
MSA SDK 移动安全联盟 移动智能终端补充设备标识体系统一调用 SDK 由中国信息通信研究院泰尔终端实验室、移动安全联盟整合提供,知识产权归中国信息通信研究院所有。
File Provider Android FileProvider 是 ContentProvider 的特殊子类,它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。

文件列表

res/drawable/kyzh_bg_border_radius_8dp.xml
res/drawable/abc_btn_default_mtrl_shape.xml
res/drawable/abc_ic_arrow_drop_right_black_24dp.xml
res/drawable/brsdk_r4_theme.xml
res/drawable/abc_item_background_holo_light.xml
res/drawable/abc_ic_go_search_api_material.xml
res/drawable/abc_ratingbar_material.xml
res/drawable/notification_action_background.xml
res/drawable/icon_empty_recover.png
res/drawable/brsdk_br4_theme.xml
res/drawable/abc_btn_borderless_material.xml
res/drawable/abc_list_selector_background_transition_holo_light.xml
res/drawable/kyzh_sanjiaojiantou_left.png
res/drawable/kyzh_dialog_guest_login_view_top_bg.webp
res/drawable/kyzh_login_title_bottom_bg.xml
res/drawable/denglu.png
res/drawable/kyzh_bg_l_to_r.xml
res/drawable/notification_icon_background.xml
res/drawable/abc_ic_menu_overflow_material.xml
res/drawable/abc_ic_clear_material.xml
res/drawable/abc_seekbar_thumb_material.xml
res/drawable/notification_bg.xml
res/drawable/brsdk_r8_white.xml
res/drawable/kyzh_shenfenrenzheng.png
res/drawable/ic_launcher_background.xml
res/drawable/notification_tile_bg.xml
res/drawable/abc_ic_search_api_material.xml
res/drawable/brsdk_unlook_st_look.xml
res/drawable/brsdk_r4_black50.xml
res/drawable/kyzh_btn_pact_8dp_white.xml
res/drawable/brsdk_divider_h.xml
res/drawable/kyzh_edittext_bottomline_selector.xml
res/drawable/abc_list_selector_holo_light.xml
res/drawable/kyzh_login_button_bg_l_to_r.xml
res/drawable/brsdk_r4_white.xml
res/drawable/kyzh_dialog_guest_login_view_center_bg.webp
res/drawable/abc_ratingbar_small_material.xml
res/drawable/brvah_sample_footer_loading_progress.xml
res/drawable/kyzh_login_title_left_bg.xml
res/drawable/abc_spinner_textfield_background_material.xml
res/drawable/brsdk_transparent.xml
res/drawable/abc_textfield_search_material.xml
res/drawable/abc_vector_test.xml
res/drawable/brsdk_white_cb_theme.xml
res/drawable/abc_ic_voice_search_api_material.xml
res/drawable/tooltip_frame_dark.xml
res/drawable/notification_bg_low.xml
res/drawable/abc_edit_text_material.xml
res/drawable/kyzh_fanhui.png
res/drawable/abc_cab_background_top_material.xml
res/drawable/kyzh_edittext_bottomline.xml
res/drawable/abc_ratingbar_indicator_material.xml
res/drawable/kyzh_bg_pact_8dp_white.xml
res/drawable/kyzh_down.png
res/drawable/kyzh_app_login.png
res/drawable/abc_cab_background_internal_bg.xml
res/drawable/draw_msg_view.xml
res/drawable/kyzh_sanjiaojiantou.png
res/drawable/relogin_button.jpg
res/drawable/kyzh_login_bg.xml
res/drawable/abc_btn_radio_material.xml
res/drawable/brsdk_divider_v.xml
res/drawable/abc_text_cursor_material.xml
res/drawable/logo.png
res/drawable/brsdk_close_black50.xml
res/drawable/kyzh_dialog_guest_login_view_top_land.webp
res/drawable/kyzh_pay_top_bg.png
res/drawable/kyzjh_img_bangdingchenggong.png
res/drawable/abc_seekbar_track_material.xml
res/drawable/brsdk_arrow_top_theme.xml
res/drawable/brsdk_tr8_black50.xml
res/drawable/brsdk_arrow_white.xml
res/drawable/brsdk_r8_black75.xml
res/drawable/kyzh_bg.xml
res/drawable/load_page.jpg
res/drawable/abc_dialog_material_background.xml
res/drawable/chognzhi.png
res/drawable/brvah_sample_footer_loading.png
res/drawable/abc_switch_thumb_material.xml
res/drawable/abc_btn_colored_material.xml
res/drawable/abc_btn_check_material.xml
res/drawable/kyzh_btn_pact_8dp.xml
res/drawable/kyzh_login_delete.png
res/drawable/kyzh_bg_radius_16dp.xml
res/drawable/kyzh_line.png
res/drawable/xuanfuqiu.png
res/drawable/xuanfuqiu_right.png
res/drawable/xuanfuqiu_left.png
res/drawable/kyzh_login_title_right_bg.xml
res/drawable/kyzh_xuanfuqiu.png
res/drawable/abc_list_selector_holo_dark.xml
res/drawable/kyzh_pay_top_line.png
res/drawable/abc_list_selector_background_transition_holo_dark.xml
res/drawable/abc_ic_ab_back_material.xml
res/drawable/brsdk_permission.xml
res/drawable/hemei_img_float.png
res/drawable/tooltip_frame_light.xml
res/drawable/kyzh_icon_changyong.xml
res/drawable/pj_image_float_logo.png
res/drawable/abc_seekbar_tick_mark_material.xml
res/drawable/kyzh_login_title_top_bg.xml
res/drawable/dengchu.png
res/drawable/abc_tab_indicator_material.xml
res/drawable/shengcheng.png
res/drawable/brsdk_border4_white.xml
res/drawable/abc_item_background_holo_dark.xml
res/drawable/abc_action_bar_item_background_material.xml
res/drawable/brsdk_progress_theme50.xml
res/drawable/jiaosexinxishangchuan.png
res/drawable-xxhdpi/abc_list_pressed_holo_dark.9.png
res/drawable-xxhdpi/brsdk_history_white.png
res/drawable-xxhdpi/brsdk_dropdown_white.png
res/drawable-xxhdpi/kyzh_youkedenglu.png
res/drawable-xxhdpi/abc_btn_radio_to_on_mtrl_000.png
res/drawable-xxhdpi/brsdk_quick_white.png
res/drawable-xxhdpi/brsdk_floating.png
res/drawable-xxhdpi/abc_list_selector_disabled_holo_dark.9.png
res/drawable-xxhdpi/abc_text_select_handle_left_mtrl_light.png
res/drawable-xxhdpi/abc_ic_menu_paste_mtrl_am_alpha.png
res/drawable-xxhdpi/abc_ic_star_half_black_48dp.png
res/drawable-xxhdpi/abc_scrubber_track_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_list_divider_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_btn_radio_to_on_mtrl_015.png
res/drawable-xxhdpi/abc_cab_background_top_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_list_selector_disabled_holo_light.9.png
res/drawable-xxhdpi/abc_list_longpressed_holo.9.png
res/drawable-xxhdpi/abc_list_focused_holo.9.png
res/drawable-xxhdpi/abc_btn_check_to_on_mtrl_000.png
res/drawable-xxhdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-xxhdpi/brsdk_search_white.png
res/drawable-xxhdpi/brsdk_logo_.png
res/drawable-xxhdpi/kyzh_shoujidenglu.png
res/drawable-xxhdpi/brsdk_safety_white.png
res/drawable-xxhdpi/brsdk_checked_white.png
res/drawable-xxhdpi/abc_text_select_handle_left_mtrl_dark.png
res/drawable-xxhdpi/abc_btn_switch_to_on_mtrl_00012.9.png
res/drawable-xxhdpi/abc_menu_hardkey_panel_mtrl_mult.9.png
res/drawable-xxhdpi/abc_text_select_handle_middle_mtrl_light.png
res/drawable-xxhdpi/abc_scrubber_control_to_pressed_mtrl_000.png
res/drawable-xxhdpi/brsdk_edit_gray.png
res/drawable-xxhdpi/abc_text_select_handle_middle_mtrl_dark.png
res/drawable-xxhdpi/abc_popup_background_mtrl_mult.9.png
res/drawable-xxhdpi/brsdk_arrow_top.png
res/drawable-xxhdpi/abc_ic_commit_search_api_mtrl_alpha.png
res/drawable-xxhdpi/abc_scrubber_control_off_mtrl_alpha.png
res/drawable-xxhdpi/abc_ic_star_half_black_16dp.png
res/drawable-xxhdpi/brsdk_look_white.png
res/drawable-xxhdpi/brsdk_pullup_white.png
res/drawable-xxhdpi/abc_btn_switch_to_on_mtrl_00001.9.png
res/drawable-xxhdpi/abc_textfield_activated_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_list_pressed_holo_light.9.png
res/drawable-xxhdpi/brsdk_phone_white.png
res/drawable-xxhdpi/abc_switch_track_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_ic_menu_share_mtrl_alpha.png
res/drawable-xxhdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-xxhdpi/brsdk_unlook_white.png
res/drawable-xxhdpi/abc_scrubber_control_to_pressed_mtrl_005.png
res/drawable-xxhdpi/abc_textfield_search_default_mtrl_alpha.9.png
res/drawable-xxhdpi/brsdk_check_white.png
res/drawable-xxhdpi/kyzh_zhanghaodenglu.png
res/drawable-xxhdpi/brsdk_identify_white.png
res/drawable-xxhdpi/abc_ic_star_black_36dp.png
res/drawable-xxhdpi/abc_ic_star_black_48dp.png
res/drawable-xxhdpi/abc_scrubber_primary_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_tab_indicator_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_ic_star_black_16dp.png
res/drawable-xxhdpi/brsdk_close_white.png
res/drawable-xxhdpi/abc_text_select_handle_right_mtrl_light.png
res/drawable-xxhdpi/abc_ab_share_pack_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_ic_menu_selectall_mtrl_alpha.png
res/drawable-xxhdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-xxhdpi/abc_textfield_search_activated_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_text_select_handle_right_mtrl_dark.png
res/drawable-xxhdpi/brsdk_locked_white.png
res/drawable-xxhdpi/abc_textfield_default_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_btn_check_to_on_mtrl_015.png
res/drawable-xxhdpi/brsdk_account_white.png
res/drawable-xxhdpi/abc_ic_star_half_black_36dp.png
res/layout-land/kyzh_activity_payhistory.xml
res/layout-land/kyzh_activity_gift.xml
res/layout-land/kyzh_activity_bindphone.xml
res/layout-land/kyzh_activity_newsdetail.xml
res/layout-land/kyzh_dialog_guest_login_view.xml
res/layout-land/kyzh_activity_unbindemail.xml
res/layout-land/kyzh_activity_service.xml
res/layout-land/kyzh_activity_coupon.xml
res/layout-land/kyzh_activity_unbindphone.xml
res/layout-land/kyzh_activity_user_center.xml
res/layout-land/kyzh_activity_ball_item.xml
res/layout-land/kyzh_activity_verify.xml
res/layout-land/kyzh_titleview.xml
res/layout-land/kyzh_activity_news.xml
res/layout-land/kyzh_activity_about.xml
res/layout-land/kyzh_activity_ball.xml
res/layout-land/kyzh_activity_change_password.xml
res/layout-land/kyzh_activity_login.xml
res/layout-land/kyzh_activity_bindemail.xml
res/color/abc_secondary_text_material_light.xml
res/color/brsdk_white_theme.xml
res/color/abc_tint_btn_checkable.xml
res/color/abc_tint_spinner.xml
res/color/abc_background_cache_hint_selector_material_dark.xml
res/color/switch_thumb_material_dark.xml
res/color/abc_tint_default.xml
res/color/abc_primary_text_material_light.xml
res/color/abc_hint_foreground_material_dark.xml
res/color/abc_secondary_text_material_dark.xml
res/color/abc_hint_foreground_material_light.xml
res/color/abc_primary_text_disable_only_material_light.xml
res/color/abc_tint_switch_track.xml
res/color/abc_primary_text_disable_only_material_dark.xml
res/color/abc_tint_seek_thumb.xml
res/color/abc_search_url_text.xml
res/color/abc_background_cache_hint_selector_material_light.xml
res/color/switch_thumb_material_light.xml
res/color/abc_btn_colored_text_material.xml
res/color/abc_primary_text_material_dark.xml
res/color/abc_btn_colored_borderless_text_material.xml
res/color/abc_tint_edittext.xml
res/drawable-xhdpi/abc_list_pressed_holo_dark.9.png
res/drawable-xhdpi/abc_btn_radio_to_on_mtrl_000.png
res/drawable-xhdpi/abc_list_selector_disabled_holo_dark.9.png
res/drawable-xhdpi/abc_text_select_handle_left_mtrl_light.png
res/drawable-xhdpi/abc_ic_menu_paste_mtrl_am_alpha.png
res/drawable-xhdpi/abc_ic_star_half_black_48dp.png
res/drawable-xhdpi/notification_bg_low_pressed.9.png
res/drawable-xhdpi/abc_scrubber_track_mtrl_alpha.9.png
res/drawable-xhdpi/abc_list_divider_mtrl_alpha.9.png
res/drawable-xhdpi/abc_btn_radio_to_on_mtrl_015.png
res/drawable-xhdpi/abc_cab_background_top_mtrl_alpha.9.png
res/drawable-xhdpi/abc_list_selector_disabled_holo_light.9.png
res/drawable-xhdpi/abc_list_longpressed_holo.9.png
res/drawable-xhdpi/abc_list_focused_holo.9.png
res/drawable-xhdpi/abc_btn_check_to_on_mtrl_000.png
res/drawable-xhdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-xhdpi/eb_back_normal.png
res/drawable-xhdpi/abc_text_select_handle_left_mtrl_dark.png
res/drawable-xhdpi/abc_btn_switch_to_on_mtrl_00012.9.png
res/drawable-xhdpi/abc_menu_hardkey_panel_mtrl_mult.9.png
res/drawable-xhdpi/btn_toolbar_reload.png
res/drawable-xhdpi/abc_text_select_handle_middle_mtrl_light.png
res/drawable-xhdpi/abc_scrubber_control_to_pressed_mtrl_000.png
res/drawable-xhdpi/btn_right.png
res/drawable-xhdpi/textbox.9.png
res/drawable-xhdpi/abc_text_select_handle_middle_mtrl_dark.png
res/drawable-xhdpi/abc_popup_background_mtrl_mult.9.png
res/drawable-xhdpi/abc_ic_commit_search_api_mtrl_alpha.png
res/drawable-xhdpi/notification_bg_normal_pressed.9.png
res/drawable-xhdpi/abc_scrubber_control_off_mtrl_alpha.png
res/drawable-xhdpi/abc_ic_star_half_black_16dp.png
res/drawable-xhdpi/abc_btn_switch_to_on_mtrl_00001.9.png
res/drawable-xhdpi/abc_textfield_activated_mtrl_alpha.9.png
res/drawable-xhdpi/notification_bg_normal.9.png
res/drawable-xhdpi/abc_list_pressed_holo_light.9.png
res/drawable-xhdpi/abc_switch_track_mtrl_alpha.9.png
res/drawable-xhdpi/abc_ic_menu_share_mtrl_alpha.png
res/drawable-xhdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-xhdpi/abc_scrubber_control_to_pressed_mtrl_005.png
res/drawable-xhdpi/btn_left.png
res/drawable-xhdpi/abc_textfield_search_default_mtrl_alpha.9.png
res/drawable-xhdpi/abc_ic_star_black_36dp.png
res/drawable-xhdpi/abc_ic_star_black_48dp.png
res/drawable-xhdpi/abc_scrubber_primary_mtrl_alpha.9.png
res/drawable-xhdpi/abc_tab_indicator_mtrl_alpha.9.png
res/drawable-xhdpi/abc_ic_star_black_16dp.png
res/drawable-xhdpi/btn_close.png
res/drawable-xhdpi/abc_text_select_handle_right_mtrl_light.png
res/drawable-xhdpi/abc_ab_share_pack_mtrl_alpha.9.png
res/drawable-xhdpi/abc_ic_menu_selectall_mtrl_alpha.png
res/drawable-xhdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-xhdpi/notify_panel_notification_icon_bg.png
res/drawable-xhdpi/abc_textfield_search_activated_mtrl_alpha.9.png
res/drawable-xhdpi/notification_bg_low_normal.9.png
res/drawable-xhdpi/abc_text_select_handle_right_mtrl_dark.png
res/drawable-xhdpi/abc_textfield_default_mtrl_alpha.9.png
res/drawable-xhdpi/abc_btn_check_to_on_mtrl_015.png
res/drawable-xhdpi/abc_ic_star_half_black_36dp.png
res/anim/abc_fade_out.xml
res/anim/abc_grow_fade_in_from_bottom.xml
res/anim/tooltip_exit.xml
res/anim/abc_fade_in.xml
res/anim/bottom_top.xml
res/anim/brsdk_left_translate_alpha_out.xml
res/anim/brsdk_bottom_translate_alpha_out.xml
res/anim/abc_popup_exit.xml
res/anim/abc_popup_enter.xml
res/anim/brsdk_top_translate_alpha_out.xml
res/anim/abc_slide_in_bottom.xml
res/anim/abc_slide_out_bottom.xml
res/anim/brsdk_right_translate_alpha_in.xml
res/anim/top_bottom.xml
res/anim/brsdk_bottom_translate_alpha_in.xml
res/anim/abc_shrink_fade_out_from_bottom.xml
res/anim/brsdk_right_translate_alpha_out.xml
res/anim/slide_out_right.xml
res/anim/abc_slide_in_top.xml
res/anim/slide_out_left.xml
res/anim/brsdk_top_translate_alpha_in.xml
res/anim/brsdk_left_translate_alpha_in.xml
res/anim/tooltip_enter.xml
res/anim/abc_slide_out_top.xml
res/drawable-v23/abc_control_background_material.xml
res/drawable-xxxhdpi/abc_btn_radio_to_on_mtrl_000.png
res/drawable-xxxhdpi/abc_text_select_handle_left_mtrl_light.png
res/drawable-xxxhdpi/abc_ic_menu_paste_mtrl_am_alpha.png
res/drawable-xxxhdpi/abc_ic_star_half_black_48dp.png
res/drawable-xxxhdpi/abc_btn_radio_to_on_mtrl_015.png
res/drawable-xxxhdpi/abc_btn_check_to_on_mtrl_000.png
res/drawable-xxxhdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-xxxhdpi/abc_text_select_handle_left_mtrl_dark.png
res/drawable-xxxhdpi/abc_btn_switch_to_on_mtrl_00012.9.png
res/drawable-xxxhdpi/abc_scrubber_control_to_pressed_mtrl_000.png
res/drawable-xxxhdpi/abc_ic_star_half_black_16dp.png
res/drawable-xxxhdpi/abc_btn_switch_to_on_mtrl_00001.9.png
res/drawable-xxxhdpi/abc_switch_track_mtrl_alpha.9.png
res/drawable-xxxhdpi/abc_ic_menu_share_mtrl_alpha.png
res/drawable-xxxhdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-xxxhdpi/abc_scrubber_control_to_pressed_mtrl_005.png
res/drawable-xxxhdpi/abc_ic_star_black_36dp.png
res/drawable-xxxhdpi/abc_ic_star_black_48dp.png
res/drawable-xxxhdpi/abc_tab_indicator_mtrl_alpha.9.png
res/drawable-xxxhdpi/abc_ic_star_black_16dp.png
res/drawable-xxxhdpi/abc_text_select_handle_right_mtrl_light.png
res/drawable-xxxhdpi/abc_ic_menu_selectall_mtrl_alpha.png
res/drawable-xxxhdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-xxxhdpi/abc_text_select_handle_right_mtrl_dark.png
res/drawable-xxxhdpi/abc_btn_check_to_on_mtrl_015.png
res/drawable-xxxhdpi/abc_ic_star_half_black_36dp.png
res/drawable-ldrtl-mdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-ldrtl-mdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-ldrtl-mdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-ldrtl-hdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-ldrtl-hdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-ldrtl-hdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-ldrtl-xxxhdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-ldrtl-xxxhdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-ldrtl-xxxhdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-ldrtl-xxhdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-ldrtl-xxhdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-ldrtl-xxhdpi/abc_ic_menu_cut_mtrl_alpha.png
res/layout/notification_template_media.xml
res/layout/kyzh_loading_view.xml
res/layout/abc_action_bar_view_list_nav_layout.xml
res/layout/abc_expanded_menu_layout.xml
res/layout/notification_template_custom_big.xml
res/layout/brsdk_item_areacode.xml
res/layout/support_simple_spinner_dropdown_item.xml
res/layout/kyzh_item_news.xml
res/layout/brsdk_cover.xml
res/layout/abc_alert_dialog_material.xml
res/layout/abc_activity_chooser_view_list_item.xml
res/layout/notification_template_icon_group.xml
res/layout/kyzh_activity_payhistory.xml
res/layout/abc_search_dropdown_item_icons_2line.xml
res/layout/abc_select_dialog_material.xml
res/layout/kyzh_dialog_prelogin.xml
res/layout/brsdk_automatic.xml
res/layout/kyzh_activity_gift.xml
res/layout/layout_round_corner_progress_bar.xml
res/layout/notification_template_big_media_narrow_custom.xml
res/layout/kyzh_activity_bindphone.xml
res/layout/kyzh_info_view.xml
res/layout/abc_action_bar_title_item.xml
res/layout/kyzh_activity_newsdetail.xml
res/layout/abc_dialog_title_material.xml
res/layout/kyzh_dialog_guest_login_view.xml
res/layout/abc_activity_chooser_view.xml
res/layout/abc_screen_content_include.xml
res/layout/brsdk_item_trumpet.xml
res/layout/brsdk_item_account.xml
res/layout/abc_list_menu_item_checkbox.xml
res/layout/notification_template_part_time.xml
res/layout/abc_action_menu_layout.xml
res/layout/kyzh_activity_unbindemail.xml
res/layout/abc_alert_dialog_button_bar_material.xml
res/layout/kyzh_activity_service.xml
res/layout/notification_template_big_media_custom.xml
res/layout/notification_template_lines_media.xml
res/layout/notification_template_big_media.xml
res/layout/abc_list_menu_item_radio.xml
res/layout/kyzh_activity_coupon.xml
res/layout/abc_screen_simple.xml
res/layout/brsdk_login.xml
res/layout/brsdk_webview.xml
res/layout/abc_list_menu_item_icon.xml
res/layout/abc_action_mode_bar.xml
res/layout/brvah_quick_view_load_more.xml
res/layout/brsdk_reg_account.xml
res/layout/kyzh_activity_unbindphone.xml
res/layout/kyzh_activity_user_center.xml
res/layout/notification_action_tombstone.xml
res/layout/xuanfuqiu_right.xml
res/layout/kyzh_item_gift.xml
res/layout/kyzh_item_payhistory.xml
res/layout/kyzh_activity_pay.xml
res/layout/kyzh_dialog_verify.xml
res/layout/kyzh_activity_ball_item.xml
res/layout/notification_template_media_custom.xml
res/layout/notification_media_action.xml
res/layout/abc_screen_toolbar.xml
res/layout/notification_action.xml
res/layout/select_dialog_multichoice_material.xml
res/layout/notification_media_cancel_action.xml
res/layout/main.xml
res/layout/brsdk_bind_phone.xml
res/layout/brsdk_confirm.xml
res/layout/abc_popup_menu_item_layout.xml
res/layout/brsdk_control.xml
res/layout/kyzh_activity_verify.xml
res/layout/brsdk_loading.xml
res/layout/kyzh_titleview.xml
res/layout/tooltip.xml
res/layout/brsdk_navigation.xml
res/layout/brsdk_bulletin.xml
res/layout/kyzh_activity_post_user_info.xml
res/layout/kyzh_item_coupon.xml
res/layout/select_dialog_item_material.xml
res/layout/brsdk_register.xml
res/layout/kyzh_activity_news.xml
res/layout/abc_popup_menu_header_item_layout.xml
res/layout/abc_action_bar_up_container.xml
res/layout/popup_window_layout.xml
res/layout/brsdk_phone_verify.xml
res/layout/kyzh_activity_logoff.xml
res/layout/kyzh_dialog_pact.xml
res/layout/brsdk_permissions.xml
res/layout/brsdk_login_tooltip.xml
res/layout/notification_template_big_media_narrow.xml
res/layout/abc_search_view.xml
res/layout/kyzh_activity_about.xml
res/layout/round_view.xml
res/layout/xuanfuqiu_left.xml
res/layout/kyzh_exception_view.xml
res/layout/abc_alert_dialog_title_material.xml
res/layout/abc_action_menu_item_layout.xml
res/layout/kyzh_activity_browser.xml
res/layout/kyzh_activity_ball.xml
res/layout/en_floating_view.xml
res/layout/title_bar_nav.xml
res/layout/kyzh_activity_change_password.xml
res/layout/kyzh_activity_login.xml
res/layout/notification_template_part_chronometer.xml
res/layout/brsdk_permission.xml
res/layout/brsdk_protocol.xml
res/layout/abc_action_mode_close_item_material.xml
res/layout/kyzh_activity_bindemail.xml
res/layout/brsdk_identify.xml
res/layout/brsdk_reg_phone.xml
res/layout/abc_screen_simple_overlay_action_mode.xml
res/layout/abc_list_menu_item_layout.xml
res/layout/titlr_bar_main.xml
res/layout/kyzh_activity_usercenter_item.xml
res/layout/brsdk_trumpets.xml
res/layout/select_dialog_singlechoice_material.xml
res/layout/brsdk_area_code.xml
res/drawable-ldrtl-xhdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-ldrtl-xhdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-ldrtl-xhdpi/abc_ic_menu_cut_mtrl_alpha.png
res/xml/config.xml
res/layout-v22/abc_alert_dialog_button_bar_material.xml
res/layout-v22/brsdk_login.xml
res/layout-v22/brsdk_reg_account.xml
res/layout-v22/brsdk_phone_verify.xml
res/layout-v22/brsdk_reg_phone.xml
res/layout-v26/abc_screen_toolbar.xml
res/drawable-mdpi/abc_list_pressed_holo_dark.9.png
res/drawable-mdpi/abc_btn_radio_to_on_mtrl_000.png
res/drawable-mdpi/abc_list_selector_disabled_holo_dark.9.png
res/drawable-mdpi/abc_text_select_handle_left_mtrl_light.png
res/drawable-mdpi/abc_ic_menu_paste_mtrl_am_alpha.png
res/drawable-mdpi/abc_ic_star_half_black_48dp.png
res/drawable-mdpi/notification_bg_low_pressed.9.png
res/drawable-mdpi/abc_scrubber_track_mtrl_alpha.9.png
res/drawable-mdpi/abc_list_divider_mtrl_alpha.9.png
res/drawable-mdpi/abc_btn_radio_to_on_mtrl_015.png
res/drawable-mdpi/abc_cab_background_top_mtrl_alpha.9.png
res/drawable-mdpi/abc_list_selector_disabled_holo_light.9.png
res/drawable-mdpi/abc_list_longpressed_holo.9.png
res/drawable-mdpi/abc_list_focused_holo.9.png
res/drawable-mdpi/abc_btn_check_to_on_mtrl_000.png
res/drawable-mdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-mdpi/abc_text_select_handle_left_mtrl_dark.png
res/drawable-mdpi/abc_btn_switch_to_on_mtrl_00012.9.png
res/drawable-mdpi/abc_menu_hardkey_panel_mtrl_mult.9.png
res/drawable-mdpi/abc_text_select_handle_middle_mtrl_light.png
res/drawable-mdpi/abc_scrubber_control_to_pressed_mtrl_000.png
res/drawable-mdpi/abc_text_select_handle_middle_mtrl_dark.png
res/drawable-mdpi/abc_popup_background_mtrl_mult.9.png
res/drawable-mdpi/abc_ic_commit_search_api_mtrl_alpha.png
res/drawable-mdpi/notification_bg_normal_pressed.9.png
res/drawable-mdpi/abc_scrubber_control_off_mtrl_alpha.png
res/drawable-mdpi/abc_ic_star_half_black_16dp.png
res/drawable-mdpi/abc_btn_switch_to_on_mtrl_00001.9.png
res/drawable-mdpi/abc_textfield_activated_mtrl_alpha.9.png
res/drawable-mdpi/notification_bg_normal.9.png
res/drawable-mdpi/abc_list_pressed_holo_light.9.png
res/drawable-mdpi/abc_switch_track_mtrl_alpha.9.png
res/drawable-mdpi/abc_ic_menu_share_mtrl_alpha.png
res/drawable-mdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-mdpi/abc_scrubber_control_to_pressed_mtrl_005.png
res/drawable-mdpi/abc_textfield_search_default_mtrl_alpha.9.png
res/drawable-mdpi/abc_ic_star_black_36dp.png
res/drawable-mdpi/abc_ic_star_black_48dp.png
res/drawable-mdpi/abc_scrubber_primary_mtrl_alpha.9.png
res/drawable-mdpi/abc_tab_indicator_mtrl_alpha.9.png
res/drawable-mdpi/abc_ic_star_black_16dp.png
res/drawable-mdpi/abc_text_select_handle_right_mtrl_light.png
res/drawable-mdpi/abc_ab_share_pack_mtrl_alpha.9.png
res/drawable-mdpi/abc_ic_menu_selectall_mtrl_alpha.png
res/drawable-mdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-mdpi/notify_panel_notification_icon_bg.png
res/drawable-mdpi/abc_textfield_search_activated_mtrl_alpha.9.png
res/drawable-mdpi/notification_bg_low_normal.9.png
res/drawable-mdpi/abc_text_select_handle_right_mtrl_dark.png
res/drawable-mdpi/abc_textfield_default_mtrl_alpha.9.png
res/drawable-mdpi/abc_btn_check_to_on_mtrl_015.png
res/drawable-mdpi/abc_ic_star_half_black_36dp.png
res/color-v23/abc_tint_btn_checkable.xml
res/color-v23/abc_tint_spinner.xml
res/color-v23/abc_tint_default.xml
res/color-v23/abc_color_highlight_material.xml
res/color-v23/abc_tint_switch_track.xml
res/color-v23/abc_tint_seek_thumb.xml
res/color-v23/abc_btn_colored_text_material.xml
res/color-v23/abc_btn_colored_borderless_text_material.xml
res/color-v23/abc_tint_edittext.xml
res/drawable-hdpi/abc_list_pressed_holo_dark.9.png
res/drawable-hdpi/abc_btn_radio_to_on_mtrl_000.png
res/drawable-hdpi/abc_list_selector_disabled_holo_dark.9.png
res/drawable-hdpi/abc_text_select_handle_left_mtrl_light.png
res/drawable-hdpi/abc_ic_menu_paste_mtrl_am_alpha.png
res/drawable-hdpi/abc_ic_star_half_black_48dp.png
res/drawable-hdpi/notification_bg_low_pressed.9.png
res/drawable-hdpi/abc_scrubber_track_mtrl_alpha.9.png
res/drawable-hdpi/abc_list_divider_mtrl_alpha.9.png
res/drawable-hdpi/abc_btn_radio_to_on_mtrl_015.png
res/drawable-hdpi/abc_cab_background_top_mtrl_alpha.9.png
res/drawable-hdpi/abc_list_selector_disabled_holo_light.9.png
res/drawable-hdpi/abc_list_longpressed_holo.9.png
res/drawable-hdpi/abc_list_focused_holo.9.png
res/drawable-hdpi/abc_btn_check_to_on_mtrl_000.png
res/drawable-hdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-hdpi/abc_text_select_handle_left_mtrl_dark.png
res/drawable-hdpi/abc_btn_switch_to_on_mtrl_00012.9.png
res/drawable-hdpi/abc_menu_hardkey_panel_mtrl_mult.9.png
res/drawable-hdpi/abc_text_select_handle_middle_mtrl_light.png
res/drawable-hdpi/abc_scrubber_control_to_pressed_mtrl_000.png
res/drawable-hdpi/abc_text_select_handle_middle_mtrl_dark.png
res/drawable-hdpi/abc_popup_background_mtrl_mult.9.png
res/drawable-hdpi/abc_ic_commit_search_api_mtrl_alpha.png
res/drawable-hdpi/notification_bg_normal_pressed.9.png
res/drawable-hdpi/abc_scrubber_control_off_mtrl_alpha.png
res/drawable-hdpi/abc_ic_star_half_black_16dp.png
res/drawable-hdpi/abc_btn_switch_to_on_mtrl_00001.9.png
res/drawable-hdpi/abc_textfield_activated_mtrl_alpha.9.png
res/drawable-hdpi/notification_bg_normal.9.png
res/drawable-hdpi/abc_list_pressed_holo_light.9.png
res/drawable-hdpi/abc_switch_track_mtrl_alpha.9.png
res/drawable-hdpi/abc_ic_menu_share_mtrl_alpha.png
res/drawable-hdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-hdpi/abc_scrubber_control_to_pressed_mtrl_005.png
res/drawable-hdpi/abc_textfield_search_default_mtrl_alpha.9.png
res/drawable-hdpi/abc_ic_star_black_36dp.png
res/drawable-hdpi/abc_ic_star_black_48dp.png
res/drawable-hdpi/abc_scrubber_primary_mtrl_alpha.9.png
res/drawable-hdpi/abc_tab_indicator_mtrl_alpha.9.png
res/drawable-hdpi/abc_ic_star_black_16dp.png
res/drawable-hdpi/abc_text_select_handle_right_mtrl_light.png
res/drawable-hdpi/abc_ab_share_pack_mtrl_alpha.9.png
res/drawable-hdpi/abc_ic_menu_selectall_mtrl_alpha.png
res/drawable-hdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-hdpi/notify_panel_notification_icon_bg.png
res/drawable-hdpi/abc_textfield_search_activated_mtrl_alpha.9.png
res/drawable-hdpi/notification_bg_low_normal.9.png
res/drawable-hdpi/abc_text_select_handle_right_mtrl_dark.png
res/drawable-hdpi/abc_textfield_default_mtrl_alpha.9.png
res/drawable-hdpi/abc_btn_check_to_on_mtrl_015.png
res/drawable-hdpi/abc_ic_star_half_black_36dp.png
resources.arsc
classes3.dex
lib/x86/libbrgame.so
lib/x86/libsecsdk.so
lib/arm64-v8a/libbrgame.so
lib/arm64-v8a/libsecsdk.so
lib/x86_64/libbrgame.so
lib/x86_64/libsecsdk.so
lib/armeabi/libbrgame.so
lib/armeabi/libsecsdk.so
lib/armeabi-v7a/libbrgame.so
lib/armeabi-v7a/libsecsdk.so
classes.dex
classes2.dex
AndroidManifest.xml
assets/brsdk_config.json
assets/supplierconfig.json
assets/zlsioh.dat
assets/brsdk_sign_config.json
assets/brsdk_channel.json
assets/brsdk-oaid-core.apk
com/brplug/okhttp3/internal/publicsuffix/publicsuffixes.gz
com/brplug/okhttp3/internal/publicsuffix/NOTICE
META-INF/author_1863
META-INF/NEWKEY.SF
META-INF/NEWKEY.RSA
META-INF/MANIFEST.MF

污点分析

当apk较大时,代码量会很大,造成数据流图(ICFG)呈现爆炸式增长,所以该功能比较耗时,请先喝杯咖啡,耐心等待……
规则名称 描述信息 操作
病毒分析 使用安卓恶意软件常用的API进行污点分析 开始分析  
漏洞挖掘 漏洞挖掘场景下的污点分析 开始分析  
隐私合规 隐私合规场景下的污点分析:组件内污点传播、组件间污点传播、组件与库函数之间的污点传播 开始分析  
密码分析 分析加密算法是否使用常量密钥、静态初始化的向量(IV)、加密模式是否使用ECB等 开始分析  
Callback 因为Android中系统级的Callback并不会出现显式地进行回调方法的调用,所以如果需要分析Callback方法需要在声明文件中将其声明,这里提供一份AndroidCallbacks.txt文件,里面是一些常见的原生回调接口或类,如果有特殊接口需求,可以联系管理员 开始分析