温馨提示:本平台仅供研究软件风险、安全评估,禁止用于非法用途。由于展示的数据过于全面,请耐心等待加载完成。如有疑问或建议, 可加入我们的微信群讨论

APP评分

病毒检测 无法判定

安全评分

文件信息

文件名称 furwall231117.apk
文件大小 47.32MB
MD5 c016c327d19b09a996218d3acd478b85
SHA1 c62b42fac7f9dbc3681251ff1c9fc39099631dd5
SHA256 9e7653d6765f38ae6c67ed4aa0dda6404845be5914cf68dc5560fd0f9b69a415

应用信息

应用名称 绒毛墙
包名 cn.furwall.app
主活动 io.dcloud.PandoraEntry
目标SDK 28     最小SDK 28
版本号 1.2.2     子版本号 15
加固信息 未加壳

组件导出信息

反编译代码

Manifest文件 查看
APK文件 下载 APK
Java源代码 查看 -- 下载

证书信息

二进制文件已签名
v1 签名: False
v2 签名: False
v3 签名: True
v4 签名: False
主题: C=CN, ST=, L=, O=Android, OU=Android, CN=qCTzoffTe59UN6E5XBKnDvBrFcGmZYlz%2FSrhBqYhRf52ZacFXdpETlb%2FmNwxWqc8Vw9Nla4HXv%2B%2FX4gc0Z1hMA%3D%3D
签名算法: rsassa_pkcs1v15
有效期自: 2022-08-09 10:06:05+00:00
有效期至: 2122-07-16 10:06:05+00:00
发行人: C=CN, ST=, L=, O=Android, OU=Android, CN=qCTzoffTe59UN6E5XBKnDvBrFcGmZYlz%2FSrhBqYhRf52ZacFXdpETlb%2FmNwxWqc8Vw9Nla4HXv%2B%2FX4gc0Z1hMA%3D%3D
序列号: 0x47d702ad
哈希算法: sha256
证书MD5: ea042496c308cda2d4c17b4550ec6d27
证书SHA1: d741361854a3f6ec2ef1e96a19e9af249e935aa9
证书SHA256: 7bbdb824bd2969ea662bf49d7b580b432105821377e73755577825c49d53c2c7
证书SHA512: 7097673f2cb7961f33032d294e0d6a30bd03eb6cb4fdd7708f9ab7ab3191cee7cb58e54196b44efdae399a23c6607ab5b42ee04cbbff8a0fe806fc8eeca5c1f6
公钥算法: rsa
密钥长度: 2048
指纹: 3dbdc4dde81095b01c0bf6e96aa28f336c2e37078b44455e02702e439fef37ec
找到 1 个唯一证书

应用程序权限

权限名称 安全等级 权限内容 权限描述 关联代码
android.permission.INTERNET 危险 完全互联网访问 允许应用程序创建网络套接字。
android.permission.WRITE_EXTERNAL_STORAGE 危险 读取/修改/删除外部存储内容 允许应用程序写入外部存储。
com/alipay/mobile/common/logging/appender/FileAppender.java
com/alipay/mobile/common/logging/util/FileUtil.java
com/alipay/mobile/common/logging/util/ZipUtil.java
com/bumptech/glide/disklrucache/DiskLruCache.java
com/bumptech/glide/load/model/StreamEncoder.java
com/bumptech/glide/load/resource/bitmap/BitmapEncoder.java
com/bun/miitmdid/core/Utils.java
com/getui/gtc/base/log/b/a.java
com/getui/gtc/base/util/io/IOUtils.java
com/getui/gtc/dim/e/c.java
com/getui/gtc/i/a/a.java
com/getui/gtc/i/c/b.java
com/nostra13/dcloudimageloader/core/LoadAndDisplayImageTask.java
io/dcloud/common/adapter/io/DHFile.java
io/dcloud/common/adapter/util/Logger.java
io/dcloud/common/adapter/util/SharedPreferencesExt.java
io/dcloud/common/adapter/util/UEH.java
io/dcloud/common/util/CompressUtil.java
io/dcloud/common/util/ExifInterface.java
io/dcloud/common/util/FileUtil.java
io/dcloud/common/util/IOUtil.java
io/dcloud/common/util/PdrUtil.java
io/dcloud/common/util/TelephonyUtil.java
io/dcloud/common/util/ZipUtils.java
io/dcloud/common/util/db/DCStorage.java
io/dcloud/e/f/a.java
io/dcloud/feature/audio/recorder/DataEncodeThread.java
io/dcloud/feature/barcode2/decoding/DecodeHandler.java
io/dcloud/feature/gallery/imageedit/IMGEditActivity.java
io/dcloud/feature/nativeObj/NativeBitmap.java
io/dcloud/feature/pdr/RuntimeFeatureImpl.java
io/dcloud/feature/pdr/a.java
io/dcloud/feature/pdr/b.java
io/dcloud/h/a/e/c.java
io/dcloud/h/b/a.java
io/dcloud/h/c/c/b/d/f.java
io/dcloud/js/camera/b.java
io/dcloud/js/file/FileFeatureImpl.java
io/dcloud/net/JsDownload.java
io/dcloud/sdk/base/dcloud/h.java
net/lingala/zip4j/tasks/AbstractExtractFileTask.java
net/lingala/zip4j/tasks/MergeSplitZipFileTask.java
android.permission.ACCESS_NETWORK_STATE 普通 获取网络状态 允许应用程序查看所有网络的状态。
android.permission.ACCESS_WIFI_STATE 普通 查看Wi-Fi状态 允许应用程序查看有关Wi-Fi状态的信息。
android.permission.INSTALL_PACKAGES 签名(系统) 请求安装APP 允许应用程序安装全新的或更新的 Android 包。恶意应用程序可能会借此添加其具有任意权限的新应用程序。
android.permission.REQUEST_INSTALL_PACKAGES 危险 允许安装应用程序 Android8.0 以上系统允许安装未知来源应用程序权限。
android.permission.ACCESS_COARSE_LOCATION 危险 获取粗略位置 通过WiFi或移动基站的方式获取用户错略的经纬度信息,定位精度大概误差在30~1500米。恶意程序可以用它来确定您的大概位置。
android.permission.ACCESS_FINE_LOCATION 危险 获取精确位置 通过GPS芯片接收卫星的定位信息,定位精度达10米以内。恶意程序可以用它来确定您所在的位置。
android.permission.CAMERA 危险 拍照和录制视频 允许应用程序拍摄照片和视频,且允许应用程序收集相机在任何时候拍到的图像。
android.permission.CHANGE_WIFI_STATE 危险 改变Wi-Fi状态 允许应用程序改变Wi-Fi状态。
android.permission.MODIFY_AUDIO_SETTINGS 危险 允许应用修改全局音频设置 允许应用程序修改全局音频设置,如音量。多用于消息语音功能。
android.permission.MOUNT_UNMOUNT_FILESYSTEMS 危险 装载和卸载文件系统 允许应用程序装载和卸载可移动存储器的文件系统。
android.permission.READ_LOGS 危险 读取系统日志文件 允许应用程序从系统的各日志文件中读取信息。这样应用程序可以发现您的手机使用情况,这些信息还可能包含用户个人信息或保密信息,造成隐私数据泄露。
android.permission.READ_PHONE_STATE 危险 读取手机状态和标识 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号,是否正在通话,以及对方的号码等。
android.permission.WRITE_SETTINGS 危险 修改全局系统设置 允许应用程序修改系统设置方面的数据。恶意应用程序可借此破坏您的系统配置。
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS 普通 访问定位额外命令 访问额外位置提供程序命令,恶意应用程序可能会使用它来干扰GPS或其他位置源的操作。
android.permission.VIBRATE 普通 控制振动器 允许应用程序控制振动器,用于消息通知振动功能。
android.permission.GET_TASKS 危险 检索当前运行的应用程序 允许应用程序检索有关当前和最近运行的任务的信息。恶意应用程序可借此发现有关其他应用程序的保密信息。
android.permission.QUERY_ALL_PACKAGES 普通 获取已安装应用程序列表 Android 11引入与包可见性相关的权限,允许查询设备上的任何普通应用程序,而不考虑清单声明。
android.permission.READ_EXTERNAL_STORAGE 危险 读取SD卡内容 允许应用程序从SD卡读取信息。
androidtranscoder/MediaTranscoder.java
com/alipay/mobile/common/logging/ContextInfo.java
com/alipay/mobile/common/logging/api/DeviceHWInfo.java
com/alipay/mobile/common/logging/util/FileUtil.java
com/alipay/mobile/common/logging/util/LogcatUtil.java
com/alipay/mobile/common/logging/util/ZipUtil.java
com/alipay/mobile/common/logging/util/perf/IdleChecker.java
com/alipay/mobile/common/nativecrash/CrashCombineUtils.java
com/bumptech/glide/disklrucache/DiskLruCache.java
com/bumptech/glide/load/model/FileLoader.java
com/bun/miitmdid/core/JLibrary.java
com/bun/miitmdid/core/Utils.java
com/getui/gtc/base/crypt/CryptTools.java
com/getui/gtc/base/http/RequestBody.java
com/getui/gtc/base/log/a/a.java
com/getui/gtc/base/util/io/IOUtils.java
com/getui/gtc/dim/c/a.java
com/getui/gtc/dim/e/c.java
com/getui/gtc/i/a/a.java
com/getui/gtc/i/b/a.java
com/getui/gtc/i/c/b.java
com/nostra13/dcloudimageloader/core/download/BaseImageDownloader.java
io/dcloud/common/adapter/io/DHFile.java
io/dcloud/common/adapter/ui/AdaWebview.java
io/dcloud/common/adapter/ui/webview/WebLoadEvent.java
io/dcloud/common/adapter/util/PermissionUtil.java
io/dcloud/common/adapter/util/PlatformUtil.java
io/dcloud/common/adapter/util/SharedPreferencesExt.java
io/dcloud/common/constant/DataInterface.java
io/dcloud/common/util/AppRuntime.java
io/dcloud/common/util/BaseInfo.java
io/dcloud/common/util/BuildProperties.java
io/dcloud/common/util/CompressUtil.java
io/dcloud/common/util/DataUtil.java
io/dcloud/common/util/ExifInterface.java
io/dcloud/common/util/FileUtil.java
io/dcloud/common/util/IOUtil.java
io/dcloud/common/util/LoadAppUtils.java
io/dcloud/common/util/Md5Utils.java
io/dcloud/common/util/ProcessUtil.java
io/dcloud/common/util/TelephonyUtil.java
io/dcloud/common/util/ZipUtils.java
io/dcloud/e/b/a.java
io/dcloud/e/b/e.java
io/dcloud/e/c/b.java
io/dcloud/e/f/a.java
io/dcloud/feature/barcode2/BarcodeProxy.java
io/dcloud/feature/gallery/imageedit/IMGEditActivity.java
io/dcloud/feature/gallery/imageedit/c/k/a.java
io/dcloud/feature/gg/dcloud/ADHandler.java
io/dcloud/feature/pdr/a.java
io/dcloud/feature/weex/WeexInstanceMgr.java
io/dcloud/feature/weex/config/MimeInfoParser.java
io/dcloud/feature/weex/extend/PlusModule.java
io/dcloud/h/b/a.java
io/dcloud/h/c/c/b/b/e.java
io/dcloud/h/c/c/b/d/f.java
io/dcloud/js/file/FileFeatureImpl.java
io/dcloud/net/JsDownload.java
io/dcloud/net/JsUpload.java
io/dcloud/sdk/base/dcloud/h.java
io/dcloud/weex/DCFileUtils.java
net/lingala/zip4j/tasks/AbstractAddFileToZipTask.java
net/lingala/zip4j/util/CrcUtil.java
org/mozilla/universalchardet/ReaderFactory.java
org/mozilla/universalchardet/UniversalDetector.java
android.permission.SCHEDULE_EXACT_ALARM 普通 精确的闹钟权限 允许应用程序使用准确的警报 API。
getui.permission.GetuiService.cn.furwall.app 未知 未知权限 来自 android 引用的未知权限。
com.vivo.notification.permission.BADGE_ICON 普通 桌面图标角标 vivo平台桌面图标角标,接入vivo平台后需要用户手动开启,开启完成后收到新消息时,在已安装的应用桌面图标右上角显示“数字角标”。
android.permission.READ_MEDIA_IMAGES 危险 允许从外部存储读取图像文件 允许应用程序从外部存储读取图像文件。
android.permission.READ_MEDIA_VIDEO 危险 允许从外部存储读取视频文件 允许应用程序从外部存储读取视频文件。
android.permission.READ_MEDIA_VISUAL_USER_SELECTED 危险 允许从外部存储读取用户选择的图像或视频文件 允许应用程序从用户通过权限提示照片选择器选择的外部存储中读取图像或视频文件。应用程序可以检查此权限以验证用户是否决定使用照片选择器,而不是授予对 READ_MEDIA_IMAGES 或 READ_MEDIA_VIDEO 的访问权限。它不会阻止应用程序手动访问标准照片选择器。应与 READ_MEDIA_IMAGES 和/或 READ_MEDIA_VIDEO 一起请求此权限,具体取决于所需的媒体类型。
com.huawei.android.launcher.permission.CHANGE_BADGE 普通 在应用程序上显示通知计数 在华为手机的应用程序启动图标上显示通知计数或徽章。
com.asus.msa.SupplementaryDID.ACCESS 普通 获取厂商oaid相关权限 获取设备标识信息oaid,在华硕设备上需要用到的权限。
cn.furwall.app.permission.PROCESS_PUSH_MSG 未知 未知权限 来自 android 引用的未知权限。
cn.furwall.app.permission.PUSH_PROVIDER 未知 未知权限 来自 android 引用的未知权限。

证书分析

高危
0
警告
0
信息
1
标题 严重程度 描述信息
已签名应用 信息 应用程序已使用代码签名证书进行签名

MANIFEST分析

高危
4
警告
8
信息
0
屏蔽
0
序号 问题 严重程度 描述信息 操作
1 应用程序可以安装在存在漏洞的 Android 版本上
Android 9, minSdk=28]
警告 该应用程序可以安装在具有多个漏洞的旧版本 Android 上。支持 Android 版本 => 10、API 29 以接收合理的安全更新。
2 应用程序已启用明文网络流量
[android:usesCleartextTraffic=true]
警告 应用程序打算使用明文网络流量,例如明文HTTP,FTP协议,DownloadManager和MediaPlayer。针对API级别27或更低的应用程序,默认值为“true”。针对API级别28或更高的应用程序,默认值为“false”。避免使用明文流量的主要原因是缺乏机密性,真实性和防篡改保护;网络攻击者可以窃听传输的数据,并且可以在不被检测到的情况下修改它。
3 Activity (io.dcloud.PandoraEntry) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (28) 更新到 29 或更高版本以在平台级别修复此问题。
4 Activity (com.tencent.tauth.AuthActivity) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (28) 更新到 29 或更高版本以在平台级别修复此问题。
5 Activity (com.tencent.tauth.AuthActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
6 Activity (com.igexin.sdk.GActivity) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (28) 更新到 29 或更高版本以在平台级别修复此问题。
7 Activity (com.igexin.sdk.GActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
8 Service (com.igexin.sdk.GService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
9 Activity (com.igexin.sdk.GetuiActivity) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (28) 更新到 29 或更高版本以在平台级别修复此问题。
10 Activity (com.igexin.sdk.GetuiActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
11 Broadcast Receiver (com.huawei.hms.support.api.push.PushMsgReceiver) 受权限保护。
Permission: cn.furwall.app.permission.PROCESS_PUSH_MSG
protectionLevel: signature
[android:exported=true]
信息 发现 Broadcast Receiver被导出,但受权限保护。
12 Broadcast Receiver (com.huawei.hms.support.api.push.PushReceiver) 受权限保护。
Permission: cn.furwall.app.permission.PROCESS_PUSH_MSG
protectionLevel: signature
[android:exported=true]
信息 发现 Broadcast Receiver被导出,但受权限保护。
13 Service (com.huawei.hms.support.api.push.service.HmsMsgService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。
14 Content Provider (com.huawei.hms.support.api.push.PushProvider) 未被保护。
[android:exported=true]
警告 发现 Content Provider与设备上的其他应用程序共享,因此使其对设备上的任何其他应用程序都可访问。

可浏览的ACTIVITIES

ACTIVITY INTENT
io.dcloud.PandoraEntry Schemes: unipush://, furwall://,
Hosts: io.dcloud.unipush,
Paths: /,
com.tencent.tauth.AuthActivity Schemes: tencent102035360://,

网络安全配置

序号 范围 严重级别 描述

API调用分析

API功能 源码文件
加密解密-> 信息摘要算法
com/alipay/mobile/common/logging/util/MD5Util.java
com/alipay/mobile/mascanengine/imagetrace/sec/MD5Util.java
com/bumptech/glide/load/Key.java
com/bumptech/glide/load/MultiTransformation.java
com/bumptech/glide/load/Option.java
com/bumptech/glide/load/Options.java
com/bumptech/glide/load/engine/DataCacheKey.java
com/bumptech/glide/load/engine/EngineKey.java
com/bumptech/glide/load/engine/ResourceCacheKey.java
com/bumptech/glide/load/engine/cache/SafeKeyGenerator.java
com/bumptech/glide/load/engine/prefill/BitmapPreFillRunner.java
com/bumptech/glide/load/model/GlideUrl.java
com/bumptech/glide/load/resource/UnitTransformation.java
com/bumptech/glide/load/resource/bitmap/BitmapDrawableTransformation.java
com/bumptech/glide/load/resource/bitmap/CenterCrop.java
com/bumptech/glide/load/resource/bitmap/CenterInside.java
com/bumptech/glide/load/resource/bitmap/CircleCrop.java
com/bumptech/glide/load/resource/bitmap/DrawableTransformation.java
com/bumptech/glide/load/resource/bitmap/FitCenter.java
com/bumptech/glide/load/resource/bitmap/Rotate.java
com/bumptech/glide/load/resource/bitmap/RoundedCorners.java
com/bumptech/glide/load/resource/bitmap/VideoDecoder.java
com/bumptech/glide/load/resource/gif/GifDrawableTransformation.java
com/bumptech/glide/signature/EmptySignature.java
com/bumptech/glide/signature/MediaStoreSignature.java
com/bumptech/glide/signature/ObjectKey.java
com/getui/gtc/a/a/b.java
com/getui/gtc/a/a/h.java
com/getui/gtc/a/a/p.java
com/getui/gtc/base/crypt/CryptTools.java
com/getui/gtc/dim/c/d.java
com/getui/gtc/i/a/a.java
com/getui/gtc/i/b/a.java
com/nostra13/dcloudimageloader/cache/disc/naming/Md5FileNameGenerator.java
io/dcloud/common/util/HashUtils.java
io/dcloud/common/util/LoadAppUtils.java
io/dcloud/common/util/Md5Utils.java
io/dcloud/e/f/b.java
io/dcloud/h/c/c/b/d/d.java
一般功能-> 文件操作
androidtranscoder/MediaTranscoder.java
androidtranscoder/VideoCompressor.java
androidtranscoder/engine/MediaTranscoderEngine.java
androidtranscoder/engine/VideoTrackTranscoder.java
bolts/AggregateException.java
bolts/CancellationTokenRegistration.java
bolts/CancellationTokenSource.java
com/alipay/camera/base/AntCamera.java
com/alipay/fulllink/msg/FieldInfo.java
com/alipay/ma/decode/DecodeResult.java
com/alipay/ma/decode/MaDecode.java
com/alipay/ma/util/a.java
com/alipay/mobile/binarize/RSMaEngineAPI.java
com/alipay/mobile/common/logging/ContextInfo.java
com/alipay/mobile/common/logging/CrashBridge.java
com/alipay/mobile/common/logging/LogContextImpl.java
com/alipay/mobile/common/logging/MdapLogUploadManager.java
com/alipay/mobile/common/logging/api/DeviceHWInfo.java
com/alipay/mobile/common/logging/api/LogEvent.java
com/alipay/mobile/common/logging/api/customer/LogUploadInfo.java
com/alipay/mobile/common/logging/api/utils/PrivacyUtil.java
com/alipay/mobile/common/logging/appender/AppenderManager.java
com/alipay/mobile/common/logging/appender/ExternalFileAppender.java
com/alipay/mobile/common/logging/appender/FileAppender.java
com/alipay/mobile/common/logging/appender/MdapFileAppender.java
com/alipay/mobile/common/logging/event/DumpLogToSDEvent.java
com/alipay/mobile/common/logging/helper/BugReportAnalyzer.java
com/alipay/mobile/common/logging/http/HttpClient.java
com/alipay/mobile/common/logging/http/LoggingHttpClientFactory.java
com/alipay/mobile/common/logging/http/UploadUrlConfig.java
com/alipay/mobile/common/logging/impl/MpaasLoggerImpl.java
com/alipay/mobile/common/logging/io/LogBuffer.java
com/alipay/mobile/common/logging/strategy/LogLengthConfig.java
com/alipay/mobile/common/logging/strategy/LogStrategyManager.java
com/alipay/mobile/common/logging/strategy/StoreFloodManager.java
com/alipay/mobile/common/logging/uploader/BaseUploader.java
com/alipay/mobile/common/logging/uploader/HttpUploader.java
com/alipay/mobile/common/logging/uploader/RpcUploader.java
com/alipay/mobile/common/logging/util/ExternalStorageUtil.java
com/alipay/mobile/common/logging/util/FileUtil.java
com/alipay/mobile/common/logging/util/LogcatUtil.java
com/alipay/mobile/common/logging/util/LoggingSPCache.java
com/alipay/mobile/common/logging/util/LoggingUtil.java
com/alipay/mobile/common/logging/util/MD5Util.java
com/alipay/mobile/common/logging/util/MemoryUtil.java
com/alipay/mobile/common/logging/util/MpaasPropertiesUtil.java
com/alipay/mobile/common/logging/util/RSAUtil.java
com/alipay/mobile/common/logging/util/ZipUtil.java
com/alipay/mobile/common/logging/util/avail/ExceptionCollector.java
com/alipay/mobile/common/logging/util/config/GrayScaleUtils.java
com/alipay/mobile/common/logging/util/crash/CrashAnalyzer.java
com/alipay/mobile/common/logging/util/perf/IdleChecker.java
com/alipay/mobile/common/logging/util/perf/Judge.java
com/alipay/mobile/common/nativecrash/CrashCombineUtils.java
com/alipay/mobile/common/nativecrash/CrashFilterUtils.java
com/alipay/mobile/mascanengine/imagetrace/CyclerStreamFile.java
com/alipay/mobile/mascanengine/imagetrace/sec/MD5Util.java
com/alipay/mobile/mascanengine/imagetrace/sec/RSAUtil.java
com/alipay/mobile/strategies/a.java
com/alipay/phone/scancode/b/b.java
com/alipay/tianyan/mobilesdk/coco/OreoServiceUnlimited.java
com/bumptech/glide/Glide.java
com/bumptech/glide/ModelTypes.java
com/bumptech/glide/RequestBuilder.java
com/bumptech/glide/RequestManager.java
com/bumptech/glide/disklrucache/DiskLruCache.java
com/bumptech/glide/disklrucache/StrictLineReader.java
com/bumptech/glide/disklrucache/Util.java
com/bumptech/glide/gifdecoder/GifDecoder.java
com/bumptech/glide/gifdecoder/StandardGifDecoder.java
com/bumptech/glide/load/Encoder.java
com/bumptech/glide/load/HttpException.java
com/bumptech/glide/load/ImageHeaderParser.java
com/bumptech/glide/load/ImageHeaderParserUtils.java
com/bumptech/glide/load/ResourceDecoder.java
com/bumptech/glide/load/data/AssetFileDescriptorLocalUriFetcher.java
com/bumptech/glide/load/data/AssetPathFetcher.java
com/bumptech/glide/load/data/BufferedOutputStream.java
com/bumptech/glide/load/data/DataRewinder.java
com/bumptech/glide/load/data/ExifOrientationStream.java
com/bumptech/glide/load/data/FileDescriptorAssetPathFetcher.java
com/bumptech/glide/load/data/FileDescriptorLocalUriFetcher.java
com/bumptech/glide/load/data/HttpUrlFetcher.java
com/bumptech/glide/load/data/InputStreamRewinder.java
com/bumptech/glide/load/data/LocalUriFetcher.java
com/bumptech/glide/load/data/StreamAssetPathFetcher.java
com/bumptech/glide/load/data/StreamLocalUriFetcher.java
com/bumptech/glide/load/data/mediastore/FileService.java
com/bumptech/glide/load/data/mediastore/ThumbFetcher.java
com/bumptech/glide/load/data/mediastore/ThumbnailStreamOpener.java
com/bumptech/glide/load/engine/DataCacheGenerator.java
com/bumptech/glide/load/engine/DataCacheWriter.java
com/bumptech/glide/load/engine/DecodeHelper.java
com/bumptech/glide/load/engine/DecodePath.java
com/bumptech/glide/load/engine/GlideException.java
com/bumptech/glide/load/engine/ResourceCacheGenerator.java
com/bumptech/glide/load/engine/cache/DiskCache.java
com/bumptech/glide/load/engine/cache/DiskCacheAdapter.java
com/bumptech/glide/load/engine/cache/DiskLruCacheFactory.java
com/bumptech/glide/load/engine/cache/DiskLruCacheWrapper.java
com/bumptech/glide/load/engine/cache/ExternalCacheDiskCacheFactory.java
com/bumptech/glide/load/engine/cache/ExternalPreferredCacheDiskCacheFactory.java
com/bumptech/glide/load/engine/cache/InternalCacheDiskCacheFactory.java
com/bumptech/glide/load/engine/executor/RuntimeCompat.java
com/bumptech/glide/load/model/AssetUriLoader.java
com/bumptech/glide/load/model/ByteArrayLoader.java
com/bumptech/glide/load/model/ByteBufferEncoder.java
com/bumptech/glide/load/model/ByteBufferFileLoader.java
com/bumptech/glide/load/model/DataUrlLoader.java
com/bumptech/glide/load/model/FileLoader.java
com/bumptech/glide/load/model/MediaStoreFileLoader.java
com/bumptech/glide/load/model/ResourceLoader.java
com/bumptech/glide/load/model/StreamEncoder.java
com/bumptech/glide/load/model/StringLoader.java
com/bumptech/glide/load/model/UriLoader.java
com/bumptech/glide/load/model/UrlUriLoader.java
com/bumptech/glide/load/model/stream/BaseGlideUrlLoader.java
com/bumptech/glide/load/model/stream/HttpGlideUrlLoader.java
com/bumptech/glide/load/model/stream/HttpUriLoader.java
com/bumptech/glide/load/model/stream/MediaStoreImageThumbLoader.java
com/bumptech/glide/load/model/stream/MediaStoreVideoThumbLoader.java
com/bumptech/glide/load/model/stream/UrlLoader.java
com/bumptech/glide/load/resource/bitmap/BitmapDrawableDecoder.java
com/bumptech/glide/load/resource/bitmap/BitmapDrawableEncoder.java
com/bumptech/glide/load/resource/bitmap/BitmapEncoder.java
com/bumptech/glide/load/resource/bitmap/ByteBufferBitmapDecoder.java
com/bumptech/glide/load/resource/bitmap/DefaultImageHeaderParser.java
com/bumptech/glide/load/resource/bitmap/Downsampler.java
com/bumptech/glide/load/resource/bitmap/ExifInterfaceImageHeaderParser.java
com/bumptech/glide/load/resource/bitmap/HardwareConfigState.java
com/bumptech/glide/load/resource/bitmap/RecyclableBufferedInputStream.java
com/bumptech/glide/load/resource/bitmap/StreamBitmapDecoder.java
com/bumptech/glide/load/resource/bitmap/VideoDecoder.java
com/bumptech/glide/load/resource/file/FileDecoder.java
com/bumptech/glide/load/resource/file/FileResource.java
com/bumptech/glide/load/resource/gif/ByteBufferGifDecoder.java
com/bumptech/glide/load/resource/gif/GifDrawableEncoder.java
com/bumptech/glide/load/resource/gif/StreamGifDecoder.java
com/bumptech/glide/load/resource/transcode/BitmapBytesTranscoder.java
com/bumptech/glide/util/ByteBufferUtil.java
com/bumptech/glide/util/ContentLengthInputStream.java
com/bumptech/glide/util/ExceptionCatchingInputStream.java
com/bumptech/glide/util/MarkEnforcingInputStream.java
com/bun/miitmdid/core/JLibrary.java
com/bun/miitmdid/core/Utils.java
com/bun/miitmdid/core/ZipUtils.java
com/dcloud/android/downloader/core/DownloadTaskImpl.java
com/dcloud/android/downloader/core/task/GetFileInfoTask.java
com/dcloud/android/downloader/core/thread/DownloadThread.java
com/dcloud/android/downloader/domain/DownloadInfo.java
com/dcloud/android/downloader/domain/DownloadThreadInfo.java
com/dcloud/android/widget/TabView.java
com/dcloud/zxing2/client/result/ResultParser.java
com/dcloud/zxing2/client/result/VCardResultParser.java
com/dcloud/zxing2/datamatrix/decoder/DecodedBitStreamParser.java
com/dcloud/zxing2/datamatrix/detector/Detector.java
com/dcloud/zxing2/multi/qrcode/QRCodeMultiReader.java
com/dcloud/zxing2/multi/qrcode/detector/MultiFinderPatternFinder.java
com/dcloud/zxing2/pdf417/decoder/DecodedBitStreamParser.java
com/dcloud/zxing2/qrcode/decoder/DecodedBitStreamParser.java
com/dcloud/zxing2/qrcode/detector/FinderPatternFinder.java
com/dcloud/zxing2/qrcode/encoder/Encoder.java
com/dmcbig/mediapicker/PickerActivity.java
com/dmcbig/mediapicker/TakePhotoActivity.java
com/dmcbig/mediapicker/adapter/MediaGridAdapter.java
com/dmcbig/mediapicker/utils/FileUtils.java
com/getui/gtc/SdkLoader.java
com/getui/gtc/a/a/b.java
com/getui/gtc/a/a/g.java
com/getui/gtc/a/e.java
com/getui/gtc/base/crypt/CryptTools.java
com/getui/gtc/base/crypt/SecureCryptTools.java
com/getui/gtc/base/crypt/a.java
com/getui/gtc/base/crypt/c.java
com/getui/gtc/base/http/BridgeInterceptor.java
com/getui/gtc/base/http/BufferedSink.java
com/getui/gtc/base/http/CallServerInterceptor.java
com/getui/gtc/base/http/ConnectInterceptor.java
com/getui/gtc/base/http/FormBody.java
com/getui/gtc/base/http/Interceptor.java
com/getui/gtc/base/http/LoggerInterceptor.java
com/getui/gtc/base/http/MultipartBody.java
com/getui/gtc/base/http/RealCall.java
com/getui/gtc/base/http/RealInterceptorChain.java
com/getui/gtc/base/http/RequestBody.java
com/getui/gtc/base/http/Response.java
com/getui/gtc/base/http/ResponseBody.java
com/getui/gtc/base/http/RetryInterceptor.java
com/getui/gtc/base/http/Util.java
com/getui/gtc/base/http/crypt/GtRASCryptoInterceptor.java
com/getui/gtc/base/http/crypt/PtRASCryptoInterceptor.java
com/getui/gtc/base/log/a/a.java
com/getui/gtc/base/log/b/a.java
com/getui/gtc/base/log/c/a.java
com/getui/gtc/base/log/c/b.java
com/getui/gtc/base/util/CommonUtil.java
com/getui/gtc/base/util/io/Base64InputStream.java
com/getui/gtc/base/util/io/Base64OutputStream.java
com/getui/gtc/base/util/io/IOUtils.java
com/getui/gtc/c/b.java
com/getui/gtc/dim/DimManager.java
com/getui/gtc/dim/a/b.java
com/getui/gtc/dim/c/a.java
com/getui/gtc/dim/e/c.java
com/getui/gtc/dyc/a.java
com/getui/gtc/dyc/d.java
com/getui/gtc/dyc/h.java
com/getui/gtc/f/b.java
com/getui/gtc/g/c.java
com/getui/gtc/h/a.java
com/getui/gtc/h/b.java
com/getui/gtc/h/c.java
com/getui/gtc/h/d.java
com/getui/gtc/i/a/a.java
com/getui/gtc/i/b/a.java
com/getui/gtc/i/c/b.java
com/getui/gtc/server/ServerManager.java
com/nostra13/dcloudimageloader/cache/disc/BaseDiscCache.java
com/nostra13/dcloudimageloader/cache/disc/DiscCacheAware.java
com/nostra13/dcloudimageloader/cache/disc/LimitedDiscCache.java
com/nostra13/dcloudimageloader/cache/disc/impl/FileCountLimitedDiscCache.java
com/nostra13/dcloudimageloader/cache/disc/impl/LimitedAgeDiscCache.java
com/nostra13/dcloudimageloader/cache/disc/impl/TotalSizeLimitedDiscCache.java
com/nostra13/dcloudimageloader/cache/disc/impl/UnlimitedDiscCache.java
com/nostra13/dcloudimageloader/core/DefaultConfigurationFactory.java
com/nostra13/dcloudimageloader/core/ImageLoaderConfiguration.java
com/nostra13/dcloudimageloader/core/LoadAndDisplayImageTask.java
com/nostra13/dcloudimageloader/core/assist/DiscCacheUtil.java
com/nostra13/dcloudimageloader/core/assist/FlushedInputStream.java
com/nostra13/dcloudimageloader/core/assist/deque/LinkedBlockingDeque.java
com/nostra13/dcloudimageloader/core/decode/BaseImageDecoder.java
com/nostra13/dcloudimageloader/core/decode/ImageDecoder.java
com/nostra13/dcloudimageloader/core/download/BaseImageDownloader.java
com/nostra13/dcloudimageloader/core/download/ImageDownloader.java
com/nostra13/dcloudimageloader/core/download/NetworkDeniedImageDownloader.java
com/nostra13/dcloudimageloader/core/download/SlowNetworkImageDownloader.java
com/nostra13/dcloudimageloader/utils/IoUtils.java
com/nostra13/dcloudimageloader/utils/StorageUtils.java
com/tencent/tauth/IRequestListener.java
com/tencent/tauth/Tencent.java
io/dcloud/PandoraEntry.java
io/dcloud/WebAppActivity.java
io/dcloud/WebviewActivity.java
io/dcloud/common/DHInterface/IApp.java
io/dcloud/common/DHInterface/IConfusionMgr.java
io/dcloud/common/DHInterface/IReqListener.java
io/dcloud/common/adapter/io/DHFile.java
io/dcloud/common/adapter/io/UnicodeInputStream.java
io/dcloud/common/adapter/ui/AdaWebview.java
io/dcloud/common/adapter/ui/FileChooseDialog.java
io/dcloud/common/adapter/ui/RecordView.java
io/dcloud/common/adapter/ui/webview/SysWebView.java
io/dcloud/common/adapter/ui/webview/WebJsEvent.java
io/dcloud/common/adapter/ui/webview/WebLoadEvent.java
io/dcloud/common/adapter/ui/webview/WebResUtil.java
io/dcloud/common/adapter/util/CanvasHelper.java
io/dcloud/common/adapter/util/DeviceInfo.java
io/dcloud/common/adapter/util/DownloadUtil.java
io/dcloud/common/adapter/util/Logger.java
io/dcloud/common/adapter/util/PermissionUtil.java
io/dcloud/common/adapter/util/PlatformUtil.java
io/dcloud/common/adapter/util/SP.java
io/dcloud/common/adapter/util/SharedPreferencesExt.java
io/dcloud/common/adapter/util/UEH.java
io/dcloud/common/constant/DataInterface.java
io/dcloud/common/core/ui/l.java
io/dcloud/common/ui/PrivacyManager.java
io/dcloud/common/ui/a.java
io/dcloud/common/util/AppRuntime.java
io/dcloud/common/util/AssistInputUtil.java
io/dcloud/common/util/Base64.java
io/dcloud/common/util/BaseInfo.java
io/dcloud/common/util/BuildProperties.java
io/dcloud/common/util/CompressUtil.java
io/dcloud/common/util/DataUtil.java
io/dcloud/common/util/ExifInterface.java
io/dcloud/common/util/FileUtil.java
io/dcloud/common/util/IOUtil.java
io/dcloud/common/util/ImageLoaderUtil.java
io/dcloud/common/util/LoadAppUtils.java
io/dcloud/common/util/Md5.java
io/dcloud/common/util/Md5Utils.java
io/dcloud/common/util/NativeCrashManager.java
io/dcloud/common/util/NetTool.java
io/dcloud/common/util/PdrUtil.java
io/dcloud/common/util/ProcessUtil.java
io/dcloud/common/util/TelephonyUtil.java
io/dcloud/common/util/TestUtil.java
io/dcloud/common/util/XmlUtil.java
io/dcloud/common/util/Zip4JUtil.java
io/dcloud/common/util/ZipUtils.java
io/dcloud/common/util/db/DCStorage.java
io/dcloud/common/util/emulator/EmulatorCheckUtil.java
io/dcloud/common/util/hostpicker/HostPicker.java
io/dcloud/common/util/language/LanguageUtil.java
io/dcloud/common/util/net/NetMgr.java
io/dcloud/common/util/net/NetWork.java
io/dcloud/common/util/net/RequestData.java
io/dcloud/common/util/net/http/Request.java
io/dcloud/common/util/net/http/Response.java
io/dcloud/common/util/net/http/WebkitCookieManagerProxy.java
io/dcloud/e/b/a.java
io/dcloud/e/b/d.java
io/dcloud/e/b/e.java
io/dcloud/e/c/b.java
io/dcloud/e/c/c.java
io/dcloud/e/c/d.java
io/dcloud/e/c/h/a.java
io/dcloud/e/c/h/b.java
io/dcloud/e/f/a.java
io/dcloud/e/f/b.java
io/dcloud/feature/aps/APSFeatureImpl.java
io/dcloud/feature/aps/AbsPushService.java
io/dcloud/feature/aps/NotificationReceiver.java
io/dcloud/feature/aps/PushMessage.java
io/dcloud/feature/audio/AudioPlayer.java
io/dcloud/feature/audio/aac/AacEncode.java
io/dcloud/feature/audio/recorder/AudioRecorder.java
io/dcloud/feature/audio/recorder/DataEncodeThread.java
io/dcloud/feature/audio/recorder/HighGradeRecorder.java
io/dcloud/feature/audio/recorder/RecorderTask.java
io/dcloud/feature/barcode2/BarcodeFrameItem.java
io/dcloud/feature/barcode2/BarcodeProxy.java
io/dcloud/feature/barcode2/camera/CameraManager.java
io/dcloud/feature/barcode2/decoding/DecodeHandler.java
io/dcloud/feature/gallery/imageedit/IMGEditActivity.java
io/dcloud/feature/gallery/imageedit/c/h/a.java
io/dcloud/feature/gallery/imageedit/c/h/c.java
io/dcloud/feature/gallery/imageedit/c/k/a.java
io/dcloud/feature/gg/AolSplashUtil.java
io/dcloud/feature/gg/dcloud/ADHandler.java
io/dcloud/feature/gg/dcloud/ADSim.java
io/dcloud/feature/gg/dcloud/AolWebView.java
io/dcloud/feature/gg/dcloud/GGSplashView.java
io/dcloud/feature/nativeObj/BannerLayout.java
io/dcloud/feature/nativeObj/NativeBitmap.java
io/dcloud/feature/nativeObj/NativeTypefaceFactory.java
io/dcloud/feature/nativeObj/NativeView.java
io/dcloud/feature/nativeObj/TitleNView.java
io/dcloud/feature/nativeObj/photoview/PhotoActivity.java
io/dcloud/feature/nativeObj/photoview/subscaleview/ImageSource.java
io/dcloud/feature/nativeObj/photoview/subscaleview/ImageViewState.java
io/dcloud/feature/nativeObj/photoview/subscaleview/decoder/SkiaImageDecoder.java
io/dcloud/feature/nativeObj/photoview/subscaleview/decoder/SkiaImageRegionDecoder.java
io/dcloud/feature/nativeObj/photoview/subscaleview/decoder/SkiaPooledImageRegionDecoder.java
io/dcloud/feature/nativeObj/richtext/IAssets.java
io/dcloud/feature/nativeObj/richtext/RichTextLayout.java
io/dcloud/feature/nativeObj/richtext/RichTextParser.java
io/dcloud/feature/pack/FileUtils.java
io/dcloud/feature/pdr/CoreCacheFeatureImpl.java
io/dcloud/feature/pdr/LoggerFeatureImpl.java
io/dcloud/feature/pdr/RuntimeFeatureImpl.java
io/dcloud/feature/pdr/ZipFeature.java
io/dcloud/feature/pdr/a.java
io/dcloud/feature/pdr/b.java
io/dcloud/feature/ui/a.java
io/dcloud/feature/ui/e.java
io/dcloud/feature/ui/nativeui/c.java
io/dcloud/feature/ui/navigator/NavigatorUIFeatureImpl.java
io/dcloud/feature/uniapp/AbsSDKEngine.java
io/dcloud/feature/uniapp/dom/AbsEvent.java
io/dcloud/feature/unipush/GTNormalIntentService.java
io/dcloud/feature/unipush/GTPushService.java
io/dcloud/feature/weex/WXViewWrapper.java
io/dcloud/feature/weex/WeexInstanceMgr.java
io/dcloud/feature/weex/adapter/DCWXHttpAdapter.java
io/dcloud/feature/weex/adapter/DefaultWebSocketAdapter.java
io/dcloud/feature/weex/adapter/Fresco/imagepipeline/OkHttpNetworkFetcher.java
io/dcloud/feature/weex/adapter/FrescoImageAdapter.java
io/dcloud/feature/weex/adapter/webview/DCWXWebView.java
io/dcloud/feature/weex/config/MimeInfoParser.java
io/dcloud/feature/weex/config/UniPathParser.java
io/dcloud/feature/weex/config/UserCustomTrustManager.java
io/dcloud/feature/weex/extend/PlusModule.java
io/dcloud/feature/weex_barcode/BarcodeView.java
io/dcloud/h/a/b.java
io/dcloud/h/a/d/a.java
io/dcloud/h/a/d/b/a.java
io/dcloud/h/a/d/b/h.java
io/dcloud/h/a/d/b/j.java
io/dcloud/h/a/d/c/b.java
io/dcloud/h/a/e/c.java
io/dcloud/h/a/e/d.java
io/dcloud/h/a/e/e.java
io/dcloud/h/b/a.java
io/dcloud/h/b/b.java
io/dcloud/h/b/c.java
io/dcloud/h/c/b/b/b.java
io/dcloud/h/c/c/b/b/b.java
io/dcloud/h/c/c/b/b/c.java
io/dcloud/h/c/c/b/b/e.java
io/dcloud/h/c/c/b/d/d.java
io/dcloud/h/c/c/b/d/f.java
io/dcloud/h/c/c/c/a.java
io/dcloud/js/camera/CameraFeatureImpl.java
io/dcloud/js/camera/b.java
io/dcloud/js/file/FileFeatureImpl.java
io/dcloud/js/file/a.java
io/dcloud/js/gallery/GalleryFeatureImpl.java
io/dcloud/js/map/amap/overlay/AMapServicesUtil.java
io/dcloud/net/DownloadJSMgr.java
io/dcloud/net/DownloadNetWork.java
io/dcloud/net/JsDownload.java
io/dcloud/net/JsUpload.java
io/dcloud/net/UploadNetWork.java
io/dcloud/net/XMLHttpRequest.java
io/dcloud/nineoldandroids/animation/AnimatorInflater.java
io/dcloud/sdk/activity/WebViewActivity.java
io/dcloud/sdk/base/dcloud/ADHandler.java
io/dcloud/sdk/base/dcloud/c.java
io/dcloud/sdk/base/dcloud/d.java
io/dcloud/sdk/base/dcloud/h.java
io/dcloud/sdk/base/dcloud/k/a.java
io/dcloud/sdk/base/entry/AdData.java
io/dcloud/sdk/base/service/DownloadService.java
io/dcloud/sdk/core/api/ContentPage.java
io/dcloud/sdk/poly/base/utils/a.java
io/dcloud/share/a.java
io/dcloud/share/qq/QQApiManager.java
io/dcloud/weex/DCFileUtils.java
io/dcloud/weex/MoudlesLoader.java
io/src/dcloud/adapter/DCloudAdapterUtil.java
io/src/dcloud/adapter/DCloudBaseActivity.java
net/lingala/zip4j/ZipFile.java
net/lingala/zip4j/crypto/PBKDF2/MacBasedPRF.java
net/lingala/zip4j/exception/ZipException.java
net/lingala/zip4j/headers/HeaderReader.java
net/lingala/zip4j/headers/HeaderUtil.java
net/lingala/zip4j/headers/HeaderWriter.java
net/lingala/zip4j/io/inputstream/AesCipherInputStream.java
net/lingala/zip4j/io/inputstream/CipherInputStream.java
net/lingala/zip4j/io/inputstream/DecompressedInputStream.java
net/lingala/zip4j/io/inputstream/InflaterInputStream.java
net/lingala/zip4j/io/inputstream/NoCipherInputStream.java
net/lingala/zip4j/io/inputstream/NumberedSplitFileInputStream.java
net/lingala/zip4j/io/inputstream/NumberedSplitRandomAccessFile.java
net/lingala/zip4j/io/inputstream/SplitFileInputStream.java
net/lingala/zip4j/io/inputstream/ZipEntryInputStream.java
net/lingala/zip4j/io/inputstream/ZipInputStream.java
net/lingala/zip4j/io/inputstream/ZipStandardCipherInputStream.java
net/lingala/zip4j/io/inputstream/ZipStandardSplitFileInputStream.java
net/lingala/zip4j/io/outputstream/AesCipherOutputStream.java
net/lingala/zip4j/io/outputstream/CipherOutputStream.java
net/lingala/zip4j/io/outputstream/CompressedOutputStream.java
net/lingala/zip4j/io/outputstream/CountingOutputStream.java
net/lingala/zip4j/io/outputstream/DeflaterOutputStream.java
net/lingala/zip4j/io/outputstream/NoCipherOutputStream.java
net/lingala/zip4j/io/outputstream/OutputStreamWithSplitZipSupport.java
net/lingala/zip4j/io/outputstream/SplitOutputStream.java
net/lingala/zip4j/io/outputstream/ZipEntryOutputStream.java
net/lingala/zip4j/io/outputstream/ZipOutputStream.java
net/lingala/zip4j/io/outputstream/ZipStandardCipherOutputStream.java
net/lingala/zip4j/model/ExcludeFileFilter.java
net/lingala/zip4j/model/ZipModel.java
net/lingala/zip4j/tasks/AbstractAddFileToZipTask.java
net/lingala/zip4j/tasks/AbstractExtractFileTask.java
net/lingala/zip4j/tasks/AbstractModifyFileTask.java
net/lingala/zip4j/tasks/AddFilesToZipTask.java
net/lingala/zip4j/tasks/AddFolderToZipTask.java
net/lingala/zip4j/tasks/AddStreamToZipTask.java
net/lingala/zip4j/tasks/AsyncZipTask.java
net/lingala/zip4j/tasks/ExtractAllFilesTask.java
net/lingala/zip4j/tasks/ExtractFileTask.java
net/lingala/zip4j/tasks/MergeSplitZipFileTask.java
net/lingala/zip4j/tasks/RemoveFilesFromZipTask.java
net/lingala/zip4j/tasks/RenameFilesTask.java
net/lingala/zip4j/tasks/SetCommentTask.java
net/lingala/zip4j/util/CrcUtil.java
net/lingala/zip4j/util/FileUtils.java
net/lingala/zip4j/util/InternalZipConstants.java
net/lingala/zip4j/util/RawIO.java
net/lingala/zip4j/util/UnzipUtil.java
net/lingala/zip4j/util/Zip4jUtil.java
org/mozilla/universalchardet/EncodingDetectorInputStream.java
org/mozilla/universalchardet/EncodingDetectorOutputStream.java
org/mozilla/universalchardet/ReaderFactory.java
org/mozilla/universalchardet/UnicodeBOMInputStream.java
org/mozilla/universalchardet/UniversalDetector.java
pl/droidsonroids/gif/GifAnimationMetaData.java
pl/droidsonroids/gif/GifDecoder.java
pl/droidsonroids/gif/GifDrawable.java
pl/droidsonroids/gif/GifDrawableInit.java
pl/droidsonroids/gif/GifIOException.java
pl/droidsonroids/gif/GifInfoHandle.java
pl/droidsonroids/gif/GifTexImage2D.java
pl/droidsonroids/gif/GifTextView.java
pl/droidsonroids/gif/GifTextureView.java
pl/droidsonroids/gif/GifViewUtils.java
pl/droidsonroids/gif/InputSource.java
命令执行-> getRuntime.exec()
一般功能-> 获取系统服务(getSystemService)
com/alibaba/android/bindingx/core/internal/OrientationDetector.java
com/alipay/android/phone/scancode/export/camera/ScanHandler.java
com/alipay/camera/CameraConfigurationManager.java
com/alipay/camera/CameraManager.java
com/alipay/camera2/Camera2AvailabilityCallback.java
com/alipay/camera2/operation/Camera2Manager.java
com/alipay/camera2/util/Camera2CharacteristicsCache.java
com/alipay/mobile/common/logging/ContextInfo.java
com/alipay/mobile/common/logging/ProcessInfoImpl.java
com/alipay/mobile/common/logging/api/DeviceHWInfo.java
com/alipay/mobile/common/logging/api/DeviceInfo.java
com/alipay/mobile/common/logging/api/MPLoggerInside.java
com/alipay/mobile/common/logging/helper/ClientIdHelper.java
com/alipay/mobile/common/logging/impl/StatisticalExceptionHandler.java
com/alipay/mobile/common/logging/strategy/LogStrategyManager.java
com/alipay/mobile/common/logging/util/LoggingUtil.java
com/alipay/mobile/common/logging/util/NetUtil.java
com/alipay/mobile/common/logging/util/network/NetworkUtils.java
com/alipay/mobile/common/logging/util/network/RigorousNetworkConnReceiver.java
com/alipay/mobile/scansdk/ui/ScaleFinderView.java
com/bumptech/glide/load/engine/cache/MemorySizeCalculator.java
com/bumptech/glide/manager/DefaultConnectivityMonitor.java
com/bumptech/glide/request/target/CustomViewTarget.java
com/bumptech/glide/request/target/NotificationTarget.java
com/bumptech/glide/request/target/ViewTarget.java
com/dcloud/android/downloader/DownloadService.java
com/dcloud/android/v4/view/ViewParentCompat.java
com/dcloud/android/widget/toast/SafeToastContext.java
com/dmcbig/mediapicker/adapter/FolderAdapter.java
com/dmcbig/mediapicker/utils/ScreenUtils.java
com/getui/gtc/a/a/l.java
com/getui/gtc/a/f.java
com/getui/gtc/base/util/NetworkUtil.java
com/getui/gtc/dim/c/a.java
com/getui/gtc/dim/e/c.java
com/getui/gtc/i/c/b.java
io/dcloud/WebviewActivity.java
io/dcloud/b.java
io/dcloud/common/adapter/ui/WaitingView.java
io/dcloud/common/adapter/util/DeviceInfo.java
io/dcloud/common/adapter/util/DownloadUtil.java
io/dcloud/common/adapter/util/PermissionUtil.java
io/dcloud/common/ui/PermissionGuideWindow.java
io/dcloud/common/util/AppPermissionUtil.java
io/dcloud/common/util/AppRuntime.java
io/dcloud/common/util/BaseInfo.java
io/dcloud/common/util/NetTool.java
io/dcloud/common/util/NetworkTypeUtil.java
io/dcloud/common/util/NotificationUtil.java
io/dcloud/common/util/PdrUtil.java
io/dcloud/common/util/RuningAcitvityUtil.java
io/dcloud/common/util/ServiceUtil.java
io/dcloud/common/util/ShortCutUtil.java
io/dcloud/common/util/TelephonyUtil.java
io/dcloud/common/util/emulator/EmulatorCheckUtil.java
io/dcloud/e/a.java
io/dcloud/feature/aps/NotificationReceiver.java
io/dcloud/feature/aps/PushManager.java
io/dcloud/feature/audio/AudioFeatureImpl.java
io/dcloud/feature/audio/AudioPlayer.java
io/dcloud/feature/barcode2/BarcodeFrameItem.java
io/dcloud/feature/device/DeviceFeatureImpl.java
io/dcloud/feature/gg/dcloud/ADHandler_wanka.java
io/dcloud/feature/nativeObj/NativeView.java
io/dcloud/feature/nativeObj/photoview/subscaleview/decoder/SkiaPooledImageRegionDecoder.java
io/dcloud/feature/pdr/RuntimeFeatureImpl.java
io/dcloud/feature/sensor/b.java
io/dcloud/feature/sensor/c.java
io/dcloud/feature/sensor/e.java
io/dcloud/feature/ui/nativeui/a.java
io/dcloud/feature/ui/nativeui/c.java
io/dcloud/feature/weex/extend/PlusModule.java
io/dcloud/feature/weex_barcode/BarcodeView.java
io/dcloud/h/a/d/b/d.java
io/dcloud/h/a/d/b/e.java
io/dcloud/h/a/d/b/f.java
io/dcloud/h/a/d/b/i.java
io/dcloud/js/geolocation/system/a.java
io/dcloud/js/geolocation/system/b.java
io/dcloud/js/geolocation/system/c.java
io/dcloud/sdk/activity/WebViewActivity.java
io/dcloud/sdk/activity/a/a.java
io/dcloud/sdk/core/DCloudAOLManager.java
io/dcloud/sdk/core/util/ProcessUtil.java
隐私数据-> 获取GPS位置信息
一般功能-> IPC通信
com/alibaba/android/bindingx/plugin/weex/WXBindingXModuleService.java
com/alipay/android/phone/scancode/export/ScanCallback.java
com/alipay/android/phone/scancode/export/ScanService.java
com/alipay/mobile/common/logging/ContextInfo.java
com/alipay/mobile/common/logging/LogContextImpl.java
com/alipay/mobile/common/logging/MdapLogUploadManager.java
com/alipay/mobile/common/logging/ProcessInfoImpl.java
com/alipay/mobile/common/logging/api/ProcessInfo.java
com/alipay/mobile/common/logging/api/utils/PrivacyUtil.java
com/alipay/mobile/common/logging/http/ConfigChangeBroadCastReceiver.java
com/alipay/mobile/common/logging/process/BaseServiceInlite.java
com/alipay/mobile/common/logging/process/LogReceiverInToolsProcess.java
com/alipay/mobile/common/logging/process/LogServiceInMainProcess.java
com/alipay/mobile/common/logging/process/LogServiceInPushProcess.java
com/alipay/mobile/common/logging/process/LogServiceInToolsProcess.java
com/alipay/mobile/common/logging/strategy/DataChangeBroadCastReceiver.java
com/alipay/mobile/common/logging/strategy/LogStrategyManager.java
com/alipay/mobile/common/logging/uploader/BaseUploader.java
com/alipay/mobile/common/logging/util/MemoryUtil.java
com/alipay/mobile/common/logging/util/ToolThreadUtils.java
com/alipay/mobile/common/logging/util/avail/ExceptionCollector.java
com/alipay/mobile/common/logging/util/network/NetWorkProvider.java
com/alipay/mobile/common/logging/util/network/RigorousNetworkConnReceiver.java
com/alipay/mobile/common/logging/util/perf/EventTrigger.java
com/alipay/mobile/common/nativecrash/CrashFilterUtils.java
com/alipay/mobile/common/os/LoggingLifecycleCallback.java
com/alipay/mobile/scan/arplatform/config/PageListener.java
com/alipay/mobile/scansdk/activity/MPaasToolsCaptureActivity.java
com/alipay/mobile/scansdk/activity/ToolsCaptureActivity.java
com/alipay/mobile/scansdk/fragment/BaseScanFragment.java
com/alipay/mobile/scansdk/service/MPaasScanExportService.java
com/alipay/mobile/scansdk/service/ScanServiceImpl.java
com/alipay/mobile/scansdk/ui/ToolScanTopView.java
com/alipay/mobile/tinyapp/biz/R.java
com/alipay/tianyan/mobilesdk/coco/IOreoServiceUnlimited.java
com/alipay/tianyan/mobilesdk/coco/OreoServiceUnlimited.java
com/alipay/tianyan/mobilesdk/coco/OreoServiceUnlimitedIntentService.java
com/alipay/tianyan/mobilesdk/coco/OreoServiceUnlimitedService.java
com/asus/msa/SupplementaryDID/IDidAidlInterface.java
com/asus/msa/sdid/IDIDBinderStatusListener.java
com/asus/msa/sdid/SupplementaryDIDManager.java
com/bumptech/glide/manager/DefaultConnectivityMonitor.java
com/bun/lib/c.java
com/bun/miitmdid/c/b/a.java
com/bun/miitmdid/c/g/a.java
com/bun/miitmdid/supplier/msa/MsaClient.java
com/bun/miitmdid/supplier/sumsung/SumsungCore.java
com/dcloud/android/downloader/DownloadService.java
com/dmcbig/mediapicker/PickerActivity.java
com/dmcbig/mediapicker/PreviewActivity.java
com/dmcbig/mediapicker/TakePhotoActivity.java
com/dmcbig/mediapicker/view/PreviewFragment.java
com/getui/gtc/GtcService.java
com/getui/gtc/a/a/l.java
com/getui/gtc/api/GtcIdCallback.java
com/getui/gtc/base/util/BundleCompat.java
com/getui/gtc/dim/bean/GtWifiInfo.java
com/getui/gtc/dim/c/a.java
com/getui/gtc/dim/c/d.java
com/getui/gtc/dim/c/e.java
com/getui/gtc/dim/e/d.java
com/getui/gtc/dyc/Callback.java
com/getui/gtc/g/b.java
com/getui/gtc/i/d/a.java
com/heytap/openid/a.java
com/heytap/openid/sdk/b.java
com/meizu/flyme/openidsdk/a.java
com/mpaas/uniapp/scan/MpaasScanModule.java
com/samsung/android/deviceidservice/IDeviceIdService.java
com/tencent/tauth/AuthActivity.java
com/tencent/tauth/Tencent.java
com/zui/deviceidservice/IDeviceidInterface.java
com/zui/opendeviceidlibrary/OpenDeviceId.java
io/dcloud/EntryProxy.java
io/dcloud/PandoraEntry.java
io/dcloud/ProcessMediator.java
io/dcloud/WebAppActivity.java
io/dcloud/WebviewActivity.java
io/dcloud/application/DCLoudApplicationImpl.java
io/dcloud/b.java
io/dcloud/c.java
io/dcloud/common/DHInterface/BaseFeature.java
io/dcloud/common/DHInterface/IActivityHandler.java
io/dcloud/common/DHInterface/IApp.java
io/dcloud/common/DHInterface/IDCloudReceiver.java
io/dcloud/common/DHInterface/ISysEventListener.java
io/dcloud/common/adapter/io/AdDownloadReceiver.java
io/dcloud/common/adapter/io/MiniServerService.java
io/dcloud/common/adapter/ui/AdaWebViewParent.java
io/dcloud/common/adapter/ui/AdaWebview.java
io/dcloud/common/adapter/ui/FileChooseDialog.java
io/dcloud/common/adapter/ui/RecordView.java
io/dcloud/common/adapter/ui/webview/SysWebView.java
io/dcloud/common/adapter/ui/webview/WebJsEvent.java
io/dcloud/common/adapter/ui/webview/WebLoadEvent.java
io/dcloud/common/adapter/util/DeviceInfo.java
io/dcloud/common/adapter/util/DownloadUtil.java
io/dcloud/common/adapter/util/PermissionUtil.java
io/dcloud/common/adapter/util/PlatformUtil.java
io/dcloud/common/constant/DataInterface.java
io/dcloud/common/constant/IntentConst.java
io/dcloud/common/core/permission/PermissionControler.java
io/dcloud/common/core/ui/a.java
io/dcloud/common/core/ui/l.java
io/dcloud/common/ui/a.java
io/dcloud/common/ui/b.java
io/dcloud/common/util/ADUtils.java
io/dcloud/common/util/AppPermissionUtil.java
io/dcloud/common/util/AppStatusBarManager.java
io/dcloud/common/util/BaseInfo.java
io/dcloud/common/util/CreateShortResultReceiver.java
io/dcloud/common/util/ErrorDialogUtil.java
io/dcloud/common/util/FileUtil.java
io/dcloud/common/util/LauncherUtil.java
io/dcloud/common/util/LoadAppUtils.java
io/dcloud/common/util/NotificationUtil.java
io/dcloud/common/util/ReflectUtils.java
io/dcloud/common/util/RuningAcitvityUtil.java
io/dcloud/common/util/ShortCutUtil.java
io/dcloud/common/util/language/LanguageUtil.java
io/dcloud/common/util/net/NetCheckReceiver.java
io/dcloud/common/util/net/NetMgr.java
io/dcloud/d.java
io/dcloud/e/b/a.java
io/dcloud/e/b/d.java
io/dcloud/e/b/e.java
io/dcloud/e/c/c.java
io/dcloud/e/c/d.java
io/dcloud/e/c/h/b.java
io/dcloud/feature/aps/APSFeatureImpl.java
io/dcloud/feature/aps/AbsPushService.java
io/dcloud/feature/aps/ApsActionService.java
io/dcloud/feature/aps/NotificationReceiver.java
io/dcloud/feature/aps/PushManager.java
io/dcloud/feature/barcode2/camera/FlashlightManager.java
io/dcloud/feature/barcode2/decoding/DecodeFormatManager.java
io/dcloud/feature/barcode2/decoding/Intents.java
io/dcloud/feature/device/DeviceFeatureImpl.java
io/dcloud/feature/gallery/imageedit/IMGEditActivity.java
io/dcloud/feature/gg/AolSplashUtil.java
io/dcloud/feature/gg/dcloud/ADHandler.java
io/dcloud/feature/gg/dcloud/ADHandler_wanka.java
io/dcloud/feature/internal/reflect/BroadcastReceiver.java
io/dcloud/feature/nativeObj/NativeImageSlider.java
io/dcloud/feature/nativeObj/photoview/PhotoActivity.java
io/dcloud/feature/oauth/qq/QQOAuthService.java
io/dcloud/feature/pack/FileUtils.java
io/dcloud/feature/pdr/RuntimeFeatureImpl.java
io/dcloud/feature/ui/e.java
io/dcloud/feature/ui/nativeui/NativeUIFeatureImpl.java
io/dcloud/feature/ui/navigator/NavigatorUIFeatureImpl.java
io/dcloud/feature/uniapp/ui/component/AbsVContainer.java
io/dcloud/feature/unipush/CustomGTService.java
io/dcloud/feature/unipush/GTNormalIntentService.java
io/dcloud/feature/unipush/GTPushService.java
io/dcloud/feature/weex/WXBaseWrapper.java
io/dcloud/feature/weex/WeexFeature.java
io/dcloud/feature/weex/WeexInstanceMgr.java
io/dcloud/feature/weex/adapter/webview/DCWXWebView.java
io/dcloud/feature/weex/adapter/webview/WXDCWeb.java
io/dcloud/feature/weex/extend/PlusModule.java
io/dcloud/feature/weex/extend/WXEventModule.java
io/dcloud/feature/weex_amap/component/WXAMapViewComponent.java
io/dcloud/g/b.java
io/dcloud/h/a/e/b.java
io/dcloud/h/c/b/b/b.java
io/dcloud/invocation/a.java
io/dcloud/js/camera/CameraFeatureImpl.java
io/dcloud/js/file/FileFeatureImpl.java
io/dcloud/js/gallery/GalleryFeatureImpl.java
io/dcloud/js/map/amap/adapter/DHMapUtil.java
io/dcloud/sdk/activity/WebViewActivity.java
io/dcloud/sdk/base/dcloud/ADHandler.java
io/dcloud/sdk/base/dcloud/a.java
io/dcloud/sdk/base/dcloud/j.java
io/dcloud/sdk/base/entry/AdData.java
io/dcloud/sdk/base/service/DownloadService.java
io/dcloud/sdk/core/PushService.java
io/dcloud/share/a.java
io/dcloud/share/qq/QQApiManager.java
io/src/dcloud/adapter/DCloudBaseActivity.java
io/src/dcloud/adapter/DCloudBaseService.java
进程操作-> 获取运行的进程\服务
进程操作-> 获取进程pid
加密解密-> Crypto加解密组件
网络通信-> HTTP建立连接
DEX-> 动态加载
调用java反射机制
com/alibaba/android/bindingx/core/internal/BindingXTouchHandler.java
com/alipay/android/phone/scancode/export/adapter/MPScan.java
com/alipay/camera/base/AntCamera.java
com/alipay/camera/util/CameraLog.java
com/alipay/camera/util/ManufacturerPermissionChecker.java
com/alipay/camera/util/WalletBehaviorBury.java
com/alipay/ma/b.java
com/alipay/ma/decode/MaDecode.java
com/alipay/ma/util/a.java
com/alipay/mobile/bqcscanservice/CameraHandler.java
com/alipay/mobile/bqcscanservice/behavior/WalletBury.java
com/alipay/mobile/common/logging/CrashBridge.java
com/alipay/mobile/common/logging/ProcessInfoImpl.java
com/alipay/mobile/common/logging/api/LoggerFactory.java
com/alipay/mobile/common/logging/api/utils/PrivacyUtil.java
com/alipay/mobile/common/logging/api/utils/SdkVersionUtil.java
com/alipay/mobile/common/logging/impl/StatisticalExceptionHandler.java
com/alipay/mobile/common/logging/process/LogServiceInToolsProcess.java
com/alipay/mobile/common/logging/util/DeviceUtil.java
com/alipay/mobile/common/logging/util/FileUtil.java
com/alipay/mobile/common/logging/util/FrameworkUtil.java
com/alipay/mobile/common/logging/util/LoggingUtil.java
com/alipay/mobile/common/logging/util/ReflectUtil.java
com/alipay/mobile/common/logging/util/monitor/diagnose/MainTaskWatcher.java
com/alipay/mobile/common/monitor/api/reflect/DeviceInfoReflector.java
com/alipay/mobile/common/nativecrash/NativeCrashHandlerApi.java
com/alipay/mobile/mascanengine/impl/MaPictureEngineServiceImpl.java
com/alipay/mobile/mascanengine/impl/MaScanEngineImpl.java
com/alipay/mobile/scan/util/BQCSystemUtil.java
com/alipay/mobile/scansdk/ui/APTextureView.java
com/alipay/mobile/scansdk/ui/a.java
com/alipay/tianyan/mobilesdk/coco/OreoServiceUnlimited.java
com/bumptech/glide/Glide.java
com/bumptech/glide/module/ManifestParser.java
com/bun/miitmdid/c/k/a.java
com/bun/miitmdid/core/JLibrary.java
com/bun/miitmdid/core/MdidSdkHelper.java
com/bun/miitmdid/core/Utils.java
com/dcloud/android/v4/view/ViewCompat.java
com/dcloud/android/v4/view/ViewCompatBase.java
com/dcloud/android/v4/view/ViewCompatEclairMr1.java
com/dcloud/android/widget/toast/ToastCompat.java
com/dmcbig/mediapicker/PreviewActivity.java
com/dmcbig/mediapicker/utils/ScreenUtils.java
com/getui/gtc/SdkLoader.java
com/getui/gtc/a/a/i.java
com/getui/gtc/a/a/l.java
com/getui/gtc/a/d.java
com/getui/gtc/b/b.java
com/getui/gtc/base/publish/Broker.java
com/getui/gtc/base/util/BundleCompat.java
com/getui/gtc/base/util/CommonUtil.java
com/getui/gtc/d/a.java
com/getui/gtc/dim/b/e.java
com/getui/gtc/dim/c/a.java
com/getui/gtc/dim/c/c.java
com/getui/gtc/dim/c/d.java
com/getui/gtc/dim/c/e.java
com/getui/gtc/dim/d/c.java
com/getui/gtc/dim/e/c.java
com/getui/gtc/dim/e/d.java
com/getui/gtc/g/a/a.java
com/getui/gtc/g/b.java
com/getui/gtc/i/c/b.java
com/getui/gtc/i/d/a.java
com/mpaas/project/aar/convert/converter/FinalR.java
com/mpaas/project/aar/convert/converter/FinalRInit.java
com/mpaas/uniapp/scan/MpaasScanModule.java
com/nostra13/dcloudimageloader/core/download/BaseImageDownloader.java
io/dcloud/PandoraEntry.java
io/dcloud/ProcessMediator.java
io/dcloud/WebAppActivity.java
io/dcloud/WebviewActivity.java
io/dcloud/a.java
io/dcloud/application/DCLoudApplicationImpl.java
io/dcloud/b.java
io/dcloud/common/DHInterface/BaseFeature.java
io/dcloud/common/DHInterface/StandardFeature.java
io/dcloud/common/adapter/ui/AdaWebview.java
io/dcloud/common/adapter/ui/webview/SysWebView.java
io/dcloud/common/adapter/util/DeviceInfo.java
io/dcloud/common/adapter/util/InvokeExecutorHelper.java
io/dcloud/common/adapter/util/PlatformUtil.java
io/dcloud/common/adapter/util/UEH.java
io/dcloud/common/ui/PrivacyManager.java
io/dcloud/common/util/AppPermissionUtil.java
io/dcloud/common/util/AppRuntime.java
io/dcloud/common/util/AppStatusBarManager.java
io/dcloud/common/util/BaseInfo.java
io/dcloud/common/util/DLGeolocation.java
io/dcloud/common/util/FileUtil.java
io/dcloud/common/util/HarmonyUtils.java
io/dcloud/common/util/LoadAppUtils.java
io/dcloud/common/util/PdrUtil.java
io/dcloud/common/util/ProcessUtil.java
io/dcloud/common/util/ReflectUtils.java
io/dcloud/common/util/emulator/CommandUtil.java
io/dcloud/e/b/a.java
io/dcloud/e/c/a.java
io/dcloud/e/c/h/c.java
io/dcloud/e/d/a.java
io/dcloud/e/f/a.java
io/dcloud/feature/barcode2/camera/FlashlightManager.java
io/dcloud/feature/device/DeviceFeatureImpl.java
io/dcloud/feature/gallery/imageedit/b.java
io/dcloud/feature/gallery/imageedit/c/k/c.java
io/dcloud/feature/gg/dcloud/ADHandler.java
io/dcloud/feature/gg/dcloud/AolFeatureImpl.java
io/dcloud/feature/gg/dcloud/AolWebView.java
io/dcloud/feature/nativeObj/BannerLayout.java
io/dcloud/feature/payment/PaymentFeatureImpl.java
io/dcloud/feature/pdr/a.java
io/dcloud/feature/ui/e.java
io/dcloud/feature/ui/navigator/QueryNotchTool.java
io/dcloud/feature/uniapp/common/TypeUniModuleFactory.java
io/dcloud/feature/weex/WXAnalyzerDelegate.java
io/dcloud/feature/weex_scroller/view/DCWXHorizontalScrollView.java
io/dcloud/feature/weex_scroller/view/DCWXScrollView.java
io/dcloud/g/b.java
io/dcloud/h/a/d/b/c.java
io/dcloud/h/a/d/b/d.java
io/dcloud/h/a/d/b/f.java
io/dcloud/h/a/d/b/g.java
io/dcloud/h/a/e/b.java
io/dcloud/h/c/b/b/b.java
io/dcloud/h/c/c/b/b/e.java
io/dcloud/h/c/c/b/d/b.java
io/dcloud/h/c/c/b/d/f.java
io/dcloud/h/c/c/c/b.java
io/dcloud/h/c/c/f/c/a/a.java
io/dcloud/invocation/b.java
io/dcloud/invocation/c.java
io/dcloud/invocation/d.java
io/dcloud/js/geolocation/a.java
io/dcloud/nineoldandroids/animation/PropertyValuesHolder.java
io/dcloud/nineoldandroids/util/ReflectiveProperty.java
io/dcloud/sdk/activity/WebViewActivity.java
io/dcloud/sdk/base/dcloud/ADHandler.java
io/dcloud/sdk/base/entry/AdData.java
io/dcloud/sdk/base/service/DownloadService.java
io/dcloud/sdk/core/b/a.java
io/dcloud/sdk/core/util/ProcessUtil.java
io/dcloud/sdk/core/util/ReflectUtil.java
io/dcloud/share/a.java
io/dcloud/weex/MoudlesLoader.java
io/src/dcloud/adapter/DCloudAdapterUtil.java
pl/droidsonroids/gif/LibraryLoader.java
加密解密-> Base64 解密
组件-> 启动 Service
隐私数据-> 录制视频 io/dcloud/common/adapter/util/PermissionUtil.java
io/dcloud/feature/audio/recorder/AudioRecorder.java
网络通信-> SSL证书处理
网络通信-> OkHttpClient Connection
组件-> ContentProvider com/getui/gtc/base/util/EmptyProvider.java
com/getui/gtc/dim/c/d.java
加密解密-> Base64 加密
隐私数据-> 拍照摄像
一般功能-> 传感器相关操作
组件-> 发送广播
一般功能-> 获取活动网路信息
网络通信-> TCP套接字
组件-> 启动 Activity
com/alipay/mobile/scansdk/service/MPaasScanExportService.java
com/alipay/mobile/scansdk/service/ScanServiceImpl.java
com/alipay/mobile/scansdk/ui/ToolScanTopView.java
com/dmcbig/mediapicker/PickerActivity.java
com/dmcbig/mediapicker/PreviewActivity.java
com/dmcbig/mediapicker/TakePhotoActivity.java
com/dmcbig/mediapicker/view/PreviewFragment.java
com/tencent/tauth/AuthActivity.java
io/dcloud/PandoraEntry.java
io/dcloud/ProcessMediator.java
io/dcloud/WebAppActivity.java
io/dcloud/WebviewActivity.java
io/dcloud/application/DCLoudApplicationImpl.java
io/dcloud/b.java
io/dcloud/common/adapter/ui/FileChooseDialog.java
io/dcloud/common/adapter/ui/RecordView.java
io/dcloud/common/adapter/ui/webview/SysWebView.java
io/dcloud/common/adapter/ui/webview/WebLoadEvent.java
io/dcloud/common/adapter/util/PermissionUtil.java
io/dcloud/common/adapter/util/PlatformUtil.java
io/dcloud/common/ui/a.java
io/dcloud/common/ui/b.java
io/dcloud/common/util/ADUtils.java
io/dcloud/common/util/AppPermissionUtil.java
io/dcloud/common/util/ErrorDialogUtil.java
io/dcloud/common/util/LoadAppUtils.java
io/dcloud/common/util/RuningAcitvityUtil.java
io/dcloud/common/util/ShortCutUtil.java
io/dcloud/e/b/a.java
io/dcloud/e/b/d.java
io/dcloud/feature/aps/NotificationReceiver.java
io/dcloud/feature/device/DeviceFeatureImpl.java
io/dcloud/feature/gallery/imageedit/IMGEditActivity.java
io/dcloud/feature/gg/dcloud/ADHandler_wanka.java
io/dcloud/feature/nativeObj/NativeImageSlider.java
io/dcloud/feature/pack/FileUtils.java
io/dcloud/feature/pdr/RuntimeFeatureImpl.java
io/dcloud/feature/ui/nativeui/NativeUIFeatureImpl.java
io/dcloud/feature/weex/adapter/webview/DCWXWebView.java
io/dcloud/feature/weex/extend/PlusModule.java
io/dcloud/feature/weex/extend/WXEventModule.java
io/dcloud/feature/weex_amap/component/WXAMapViewComponent.java
io/dcloud/h/a/e/b.java
io/dcloud/h/c/b/b/b.java
io/dcloud/js/camera/CameraFeatureImpl.java
io/dcloud/js/file/FileFeatureImpl.java
io/dcloud/js/gallery/GalleryFeatureImpl.java
io/dcloud/js/map/amap/adapter/DHMapUtil.java
io/dcloud/sdk/activity/WebViewActivity.java
io/dcloud/sdk/base/dcloud/a.java
io/dcloud/sdk/base/entry/AdData.java
io/dcloud/share/a.java
io/src/dcloud/adapter/DCloudBaseActivity.java
网络通信-> WebView JavaScript接口
网络通信-> WebView 相关
网络通信-> HTTPS建立连接
进程操作-> 杀死进程
设备指纹-> getSimOperator
一般功能-> 获取网络接口信息 com/getui/gtc/a/a/l.java
com/getui/gtc/dim/c/a.java
io/dcloud/h/a/d/b/e.java
设备指纹-> 查看本机IMSI com/alipay/mobile/common/logging/helper/ClientIdHelper.java
com/getui/gtc/dim/c/a.java
io/dcloud/h/a/d/b/d.java
设备指纹-> 查看本机SIM卡序列号 com/getui/gtc/dim/c/a.java
io/dcloud/h/a/d/b/d.java
一般功能-> 查询数据库(短信、联系人、通话记录、浏览器历史等)
一般功能-> 获取WiFi相关信息 com/getui/gtc/dim/c/a.java
io/dcloud/h/a/d/b/d.java
io/dcloud/h/a/d/b/e.java
辅助功能accessibility相关 com/dcloud/android/v4/view/accessibility/AccessibilityNodeInfoCompatIcs.java
com/dcloud/android/v4/view/accessibility/AccessibilityNodeInfoCompatJellybeanMr2.java
一般功能-> Android通知
一般功能-> 查看\修改Android系统属性
一般功能-> 加载so文件
隐私数据-> 获取已安装的应用程序
JavaScript 接口方法
设备指纹-> 获取蜂窝位置信息 com/getui/gtc/dim/c/a.java
io/dcloud/common/adapter/util/DeviceInfo.java
io/dcloud/h/a/d/b/f.java
网络通信-> 蓝牙连接 io/dcloud/common/adapter/util/DeviceInfo.java
隐私数据-> 录制音频行为 io/dcloud/feature/audio/recorder/RecorderTask.java
一般功能-> 设置手机铃声,媒体音量 io/dcloud/feature/device/DeviceFeatureImpl.java
网络通信-> URLConnection io/dcloud/common/util/net/RequestData.java
隐私数据-> 屏幕截图,截取自己应用内部界面 com/bumptech/glide/load/resource/bitmap/TransformationUtils.java
io/dcloud/feature/nativeObj/photoview/subscaleview/SubsamplingScaleImageView.java
网络通信-> WebView GET请求 io/dcloud/common/adapter/ui/AdaWebview.java
io/dcloud/feature/weex/adapter/webview/DCWXWebView.java
设备指纹-> getAllCellInfo com/getui/gtc/dim/c/a.java
一般功能-> PowerManager操作 com/alipay/mobile/common/logging/util/LoggingUtil.java
网络通信-> HTTP请求、连接和会话 com/alipay/mobile/common/logging/http/HttpClient.java
网络通信-> AndroidHttpClient Connection com/alipay/mobile/common/logging/http/HttpClient.java

源代码分析

高危
6
警告
8
信息
1
安全
2
屏蔽
0
序号 问题 等级 参考标准 文件位置 操作
1 应用程序记录日志信息,不得记录敏感信息 信息 CWE: CWE-532: 通过日志文件的信息暴露
OWASP MASVS: MSTG-STORAGE-3
androidtranscoder/MediaTranscoder.java
androidtranscoder/engine/MediaTranscoderEngine.java
androidtranscoder/engine/QueuedMuxer.java
androidtranscoder/engine/TextureRender.java
androidtranscoder/format/ExportPreset960x540Strategy.java
com/alibaba/android/bindingx/core/LogProxy.java
com/alibaba/android/bindingx/plugin/weex/WXBindingXModule.java
com/alipay/android/phone/scancode/export/adapter/MPScan.java
com/alipay/camera/CameraConfigurationManager.java
com/alipay/camera/base/AntCamera.java
com/alipay/camera/base/CameraFocusPerformanceHelper.java
com/alipay/camera/base/CameraPerformanceRecorder.java
com/alipay/camera/base/CameraStateTracer.java
com/alipay/camera/util/ManufacturerPermissionChecker.java
com/alipay/camera/util/WalletBehaviorBury.java
com/alipay/ma/b.java
com/alipay/ma/decode/MaDecode.java
com/alipay/ma/decode/MaSdkConfigManager.java
com/alipay/mobile/common/logging/ContextInfo.java
com/alipay/mobile/common/logging/LogContextImpl.java
com/alipay/mobile/common/logging/LoggerFactoryBinder.java
com/alipay/mobile/common/logging/ProcessInfoImpl.java
com/alipay/mobile/common/logging/api/DeviceHWInfo.java
com/alipay/mobile/common/logging/api/DeviceInfo.java
com/alipay/mobile/common/logging/api/LoggerFactory.java
com/alipay/mobile/common/logging/api/utils/PrivacyUtil.java
com/alipay/mobile/common/logging/appender/AppenderManager.java
com/alipay/mobile/common/logging/appender/ExternalFileAppender.java
com/alipay/mobile/common/logging/appender/FileAppender.java
com/alipay/mobile/common/logging/appender/MdapFileAppender.java
com/alipay/mobile/common/logging/helper/ClientIdHelper.java
com/alipay/mobile/common/logging/helper/DeviceHWRenderHelper.java
com/alipay/mobile/common/logging/http/HttpClient.java
com/alipay/mobile/common/logging/impl/MpaasLoggerImpl.java
com/alipay/mobile/common/logging/impl/TraceLoggerImpl.java
com/alipay/mobile/common/logging/io/LogBuffer.java
com/alipay/mobile/common/logging/process/BaseServiceInlite.java
com/alipay/mobile/common/logging/process/LogServiceInMainProcess.java
com/alipay/mobile/common/logging/process/LogServiceInPushProcess.java
com/alipay/mobile/common/logging/process/LogServiceInToolsProcess.java
com/alipay/mobile/common/logging/strategy/GlobalLogConfigService.java
com/alipay/mobile/common/logging/strategy/LogStrategyManager.java
com/alipay/mobile/common/logging/uploader/BaseUploader.java
com/alipay/mobile/common/logging/uploader/HttpUploader.java
com/alipay/mobile/common/logging/uploader/RpcUploader.java
com/alipay/mobile/common/logging/util/AESUtil.java
com/alipay/mobile/common/logging/util/ApplicationInfoProvider.java
com/alipay/mobile/common/logging/util/FileUtil.java
com/alipay/mobile/common/logging/util/HybridEncryption.java
com/alipay/mobile/common/logging/util/LoggingUtil.java
com/alipay/mobile/common/logging/util/MD5Util.java
com/alipay/mobile/common/logging/util/NetUtil.java
com/alipay/mobile/common/logging/util/RSAUtil.java
com/alipay/mobile/common/logging/util/config/GrayScaleUtils.java
com/alipay/mobile/common/logging/util/network/NetworkUtils.java
com/alipay/mobile/common/logging/util/network/RigorousNetworkConnReceiver.java
com/alipay/mobile/common/logging/util/perf/EventTrigger.java
com/alipay/mobile/common/logging/util/perf/IdleChecker.java
com/alipay/mobile/common/logging/util/perf/Judge.java
com/alipay/mobile/common/nativecrash/CrashCombineUtils.java
com/alipay/mobile/common/nativecrash/CrashFilterUtils.java
com/alipay/mobile/mascanengine/imagetrace/sec/AESUtil.java
com/alipay/mobile/mascanengine/imagetrace/sec/HybridEncryption.java
com/alipay/mobile/mascanengine/imagetrace/sec/MD5Util.java
com/alipay/mobile/mascanengine/imagetrace/sec/RSAUtil.java
com/alipay/mobile/scansdk/fragment/BaseScanFragment.java
com/alipay/mobile/scansdk/ui/ScaleFinderView.java
com/alipay/mobile/scansdk/ui/ToolScanTopView.java
com/alipay/phone/scancode/b/a.java
com/bumptech/glide/Glide.java
com/bumptech/glide/disklrucache/DiskLruCache.java
com/bumptech/glide/gifdecoder/GifHeaderParser.java
com/bumptech/glide/gifdecoder/StandardGifDecoder.java
com/bumptech/glide/load/data/AssetPathFetcher.java
com/bumptech/glide/load/data/HttpUrlFetcher.java
com/bumptech/glide/load/data/LocalUriFetcher.java
com/bumptech/glide/load/data/mediastore/ThumbFetcher.java
com/bumptech/glide/load/data/mediastore/ThumbnailStreamOpener.java
com/bumptech/glide/load/engine/DecodeJob.java
com/bumptech/glide/load/engine/DecodePath.java
com/bumptech/glide/load/engine/Engine.java
com/bumptech/glide/load/engine/GlideException.java
com/bumptech/glide/load/engine/SourceGenerator.java
com/bumptech/glide/load/engine/bitmap_recycle/LruArrayPool.java
com/bumptech/glide/load/engine/bitmap_recycle/LruBitmapPool.java
com/bumptech/glide/load/engine/cache/DiskLruCacheWrapper.java
com/bumptech/glide/load/engine/cache/MemorySizeCalculator.java
com/bumptech/glide/load/engine/executor/GlideExecutor.java
com/bumptech/glide/load/engine/executor/RuntimeCompat.java
com/bumptech/glide/load/engine/prefill/BitmapPreFillRunner.java
com/bumptech/glide/load/model/ByteBufferEncoder.java
com/bumptech/glide/load/model/ByteBufferFileLoader.java
com/bumptech/glide/load/model/FileLoader.java
com/bumptech/glide/load/model/ResourceLoader.java
com/bumptech/glide/load/model/StreamEncoder.java
com/bumptech/glide/load/resource/bitmap/BitmapEncoder.java
com/bumptech/glide/load/resource/bitmap/DefaultImageHeaderParser.java
com/bumptech/glide/load/resource/bitmap/Downsampler.java
com/bumptech/glide/load/resource/bitmap/DrawableToBitmapConverter.java
com/bumptech/glide/load/resource/bitmap/HardwareConfigState.java
com/bumptech/glide/load/resource/bitmap/TransformationUtils.java
com/bumptech/glide/load/resource/bitmap/VideoDecoder.java
com/bumptech/glide/load/resource/gif/ByteBufferGifDecoder.java
com/bumptech/glide/load/resource/gif/GifDrawableEncoder.java
com/bumptech/glide/load/resource/gif/StreamGifDecoder.java
com/bumptech/glide/manager/DefaultConnectivityMonitor.java
com/bumptech/glide/manager/DefaultConnectivityMonitorFactory.java
com/bumptech/glide/manager/RequestManagerFragment.java
com/bumptech/glide/manager/RequestManagerRetriever.java
com/bumptech/glide/manager/RequestTracker.java
com/bumptech/glide/manager/SupportRequestManagerFragment.java
com/bumptech/glide/module/ManifestParser.java
com/bumptech/glide/request/SingleRequest.java
com/bumptech/glide/request/target/CustomViewTarget.java
com/bumptech/glide/request/target/ViewTarget.java
com/bumptech/glide/signature/ApplicationVersionSignature.java
com/bumptech/glide/util/ContentLengthInputStream.java
com/bumptech/glide/util/pool/FactoryPools.java
com/bun/miitmdid/core/MdidSdkHelper.java
com/bun/miitmdid/core/Utils.java
com/dcloud/android/downloader/core/DownloadResponseImpl.java
com/dcloud/android/downloader/core/thread/DownloadThread.java
com/dcloud/android/v4/view/ViewCompat.java
com/dcloud/android/v4/view/ViewCompatEclairMr1.java
com/dcloud/android/v4/view/ViewParentCompatLollipop.java
com/dcloud/android/v4/widget/SwipeRefreshLayout.java
com/dcloud/android/widget/toast/SafeToastContext.java
com/dmcbig/mediapicker/PreviewActivity.java
com/getui/gtc/base/log/b/a.java
com/getui/gtc/base/log/b/b.java
com/getui/gtc/base/util/BundleCompat.java
com/getui/gtc/base/util/ScheduleQueue.java
com/getui/gtc/c/b.java
com/getui/gtc/dim/DimManager.java
com/huawei/hmf/tasks/a/g.java
com/mpaas/project/aar/convert/converter/FinalR.java
com/tencent/tauth/AuthActivity.java
com/tencent/tauth/Tencent.java
io/dcloud/WebAppActivity.java
io/dcloud/b.java
io/dcloud/common/adapter/ui/AdaFrameView.java
io/dcloud/common/adapter/ui/AdaWebview.java
io/dcloud/common/adapter/ui/webview/WebJsEvent.java
io/dcloud/common/adapter/ui/webview/WebLoadEvent.java
io/dcloud/common/adapter/util/AndroidResources.java
io/dcloud/common/adapter/util/DownloadUtil.java
io/dcloud/common/adapter/util/Logger.java
io/dcloud/common/adapter/util/MobilePhoneModel.java
io/dcloud/common/core/ui/a.java
io/dcloud/common/ui/PrivacyManager.java
io/dcloud/common/util/ADUtils.java
io/dcloud/common/util/AppConsoleLogUtil.java
io/dcloud/common/util/BaseInfo.java
io/dcloud/common/util/CreateShortResultReceiver.java
io/dcloud/common/util/ExifInterface.java
io/dcloud/common/util/LoadAppUtils.java
io/dcloud/common/util/net/NetWork.java
io/dcloud/e/b/a.java
io/dcloud/e/b/d.java
io/dcloud/e/b/e.java
io/dcloud/e/f/a.java
io/dcloud/feature/barcode2/camera/AutoFocusCallback.java
io/dcloud/feature/barcode2/camera/CameraConfigurationManager.java
io/dcloud/feature/barcode2/camera/FlashlightManager.java
io/dcloud/feature/barcode2/camera/PreviewCallback.java
io/dcloud/feature/barcode2/decoding/CaptureActivityHandler.java
io/dcloud/feature/gallery/imageedit/c/a.java
io/dcloud/feature/gallery/imageedit/c/j/b.java
io/dcloud/feature/gallery/imageedit/view/IMGView.java
io/dcloud/feature/nativeObj/photoview/subscaleview/SubsamplingScaleImageView.java
io/dcloud/feature/nativeObj/photoview/subscaleview/decoder/SkiaPooledImageRegionDecoder.java
io/dcloud/feature/nativeObj/richtext/RichTextParser.java
io/dcloud/feature/nativeObj/richtext/dom/ImgDomElement.java
io/dcloud/feature/pdr/RuntimeFeatureImpl.java
io/dcloud/feature/pdr/b.java
io/dcloud/feature/ui/c.java
io/dcloud/feature/ui/e.java
io/dcloud/feature/ui/nativeui/NativeUIFeatureImpl.java
io/dcloud/feature/weex/adapter/Fresco/DCWrappingUtils.java
io/dcloud/feature/weex/adapter/FrescoImageAdapter.java
io/dcloud/feature/weex/adapter/widget/refresh/DCWeexBaseRefreshLayout.java
io/dcloud/h/a/e/b.java
io/dcloud/h/b/a.java
io/dcloud/invocation/a.java
io/dcloud/invocation/c.java
io/dcloud/js/geolocation/a.java
io/dcloud/js/geolocation/amap/AMapGeoManager.java
io/dcloud/js/geolocation/system/a.java
io/dcloud/net/JsDownload.java
io/dcloud/net/UploadNetWork.java
io/dcloud/nineoldandroids/animation/PropertyValuesHolder.java
io/dcloud/sdk/core/b/a.java
io/dcloud/sdk/poly/base/utils/e.java
2 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据 警告 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2
3 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等 警告 CWE: CWE-312: 明文存储敏感信息
OWASP Top 10: M9: Reverse Engineering
OWASP MASVS: MSTG-STORAGE-14
4 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 警告 CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当('SQL 注入')
OWASP Top 10: M7: Client Code Quality
5 SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击 高危 CWE: CWE-295: 证书验证不恰当
OWASP Top 10: M3: Insecure Communication
OWASP MASVS: MSTG-NETWORK-3
io/dcloud/common/adapter/util/DCloudTrustManager.java
io/dcloud/feature/weex/adapter/DCWXHttpAdapter.java
6 IP地址泄露 警告 CWE: CWE-200: 信息泄露
OWASP MASVS: MSTG-CODE-2
7 默认情况下,调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知,ECB模式很弱,因为它导致相同明文块的密文相同 高危 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-2
com/alipay/mobile/common/logging/util/AESUtil.java
com/alipay/mobile/mascanengine/imagetrace/sec/AESUtil.java
8 SHA-1是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-4
9 此应用程序可能具有Root检测功能 安全
OWASP MASVS: MSTG-RESILIENCE-1
io/dcloud/common/adapter/util/DeviceInfo.java
10 应用程序使用不安全的随机数生成器 警告 CWE: CWE-330: 使用不充分的随机数
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-6
com/alipay/mobile/common/logging/strategy/DelayUploadConfig.java
com/alipay/mobile/common/logging/util/LoggingUtil.java
11 MD5是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-4
com/alipay/mobile/common/logging/util/MD5Util.java
com/alipay/mobile/mascanengine/imagetrace/sec/MD5Util.java
com/nostra13/dcloudimageloader/cache/disc/naming/Md5FileNameGenerator.java
12 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 警告 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2
com/dmcbig/mediapicker/TakePhotoActivity.java
com/dmcbig/mediapicker/utils/FileUtils.java
io/dcloud/common/util/ExifInterface.java
13 该文件是World Writable。任何应用程序都可以写入文件 高危 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2
io/dcloud/common/util/TestUtil.java
14 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击 高危 CWE: CWE-79: 在Web页面生成时对输入的转义处理不恰当('跨站脚本')
OWASP Top 10: M1: Improper Platform Usage
OWASP MASVS: MSTG-PLATFORM-6
io/dcloud/common/adapter/ui/AdaWebview.java
io/dcloud/feature/weex/adapter/webview/DCWXWebView.java
15 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 高危 CWE: CWE-649: 依赖于混淆或加密安全相关输入而不进行完整性检查
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-3
io/dcloud/h/a/d/b/a.java
16 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 安全
OWASP MASVS: MSTG-NETWORK-4
io/dcloud/feature/weex/config/UserCustomTrustManager.java
17 该文件是World Readable。任何应用程序都可以读取文件 高危 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2
io/dcloud/common/adapter/util/PermissionUtil.java

动态库分析

序号 动态库 NX(堆栈禁止执行) STACK CANARY(栈保护) RELRO RPATH(指定SO搜索路径) RUNPATH(指定SO搜索路径) FORTIFY(常用函数加强检查) SYMBOLS STRIPPED(裁剪符号表)
1 arm64-v8a/libAMapSDK_MAP_v9_5_0.so
True
info
二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
True
info
这个二进制文件在栈上添加了一个栈哨兵值,以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出
Full RELRO
info
此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
None
info
二进制文件没有设置运行时搜索路径或RPATH
None
info
二进制文件没有设置 RUNPATH
True
info
二进制文件有以下加固函数: ['__strlen_chk', '__memcpy_chk', '__memset_chk', '__vsnprintf_chk', '__strcat_chk', '__strncpy_chk', '__umask_chk', '__memmove_chk', '__vsprintf_chk', '__strcpy_chk', '__strchr_chk']
False
warning
符号可用
2 arm64-v8a/libbreakpad-core.so
True
info
二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
True
info
这个二进制文件在栈上添加了一个栈哨兵值,以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出
Full RELRO
info
此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
None
info
二进制文件没有设置运行时搜索路径或RPATH
None
info
二进制文件没有设置 RUNPATH
True
info
二进制文件有以下加固函数: ['__vsnprintf_chk', '__strlen_chk', '__memcpy_chk', '__memmove_chk']
False
warning
符号可用
3 arm64-v8a/libdcblur.so
True
info
二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
True
info
这个二进制文件在栈上添加了一个栈哨兵值,以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出
Full RELRO
info
此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
None
info
二进制文件没有设置运行时搜索路径或RPATH
None
info
二进制文件没有设置 RUNPATH
False
warning
二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数(如 strcpy,gets 等)的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用
False
warning
符号可用
4 arm64-v8a/libdecode100208f8966d.so
True
info
二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
True
info
这个二进制文件在栈上添加了一个栈哨兵值,以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出
Full RELRO
info
此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
None
info
二进制文件没有设置运行时搜索路径或RPATH
None
info
二进制文件没有设置 RUNPATH
False
warning
二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数(如 strcpy,gets 等)的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用
False
warning
符号可用
5 arm64-v8a/liblamemp3.so
True
info
二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
True
info
这个二进制文件在栈上添加了一个栈哨兵值,以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出
Full RELRO
info
此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
None
info
二进制文件没有设置运行时搜索路径或RPATH
None
info
二进制文件没有设置 RUNPATH
False
warning
二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数(如 strcpy,gets 等)的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用
False
warning
符号可用

文件分析

序号 问题 文件
1 找到硬编码的Keystore assets/grs_sp.bks
assets/hmsincas.bks
assets/hmsrootcas.bks

VIRUSTOTAL扫描

  该文件并未在病毒库中,文件上传功能被禁用。

滥用权限

恶意软件常用权限 9/30
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.CAMERA
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_PHONE_STATE
android.permission.WRITE_SETTINGS
android.permission.VIBRATE
android.permission.GET_TASKS
其它常用权限 9/46
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO

恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。

IP地图

域名检测

域名 状态 中国境内 位置信息 解析
wprd0d.is.autonavi.com 安全
没有可用的地理位置信息。




docs.httyd.cn 安全
IP地址: 154.9.227.22
国家: United States of America
地区: Virginia
城市: Herndon
查看: Google 地图





apilocate.amap.com 安全
IP地址: 59.82.14.113
国家: China
地区: Zhejiang
城市: Hangzhou
查看: 高德地图





apiinit.amap.com 安全
IP地址: 106.11.226.133
国家: China
地区: Zhejiang
城市: Hangzhou
查看: 高德地图





lbs.amap.com 安全
IP地址: 59.82.31.156
国家: China
地区: Guangdong
城市: Guangzhou
查看: 高德地图





er.dcloud.io 安全
没有可用的地理位置信息。




maps.testing.amap.com 安全
IP地址: 140.205.69.9
国家: China
地区: Zhejiang
城市: Hangzhou
查看: 高德地图





ask.dcloud.net.cn 安全
IP地址: 58.222.30.203
国家: China
地区: Jiangsu
城市: Taizhou
查看: 高德地图





yuntuapi.amap.com 安全
没有可用的地理位置信息。




c-gtc.getui.nethttps 安全
没有可用的地理位置信息。




m3w.cn 安全
IP地址: 58.223.176.109
国家: China
地区: Jiangsu
城市: Lianyungang
查看: 高德地图





restsdk.amap.com 安全
IP地址: 59.82.34.102
国家: China
地区: Shanghai
城市: Shanghai
查看: 高德地图





mps.amap.com 安全
IP地址: 59.82.43.198
国家: China
地区: Beijing
城市: Beijing
查看: 高德地图





www.android.com 安全
IP地址: 172.217.24.78
国家: United States of America
地区: California
城市: Mountain View
查看: Google 地图





b-gtc.getui.nethttps 安全
没有可用的地理位置信息。




appgallery.cloud.huawei.com 安全
IP地址: 49.4.35.16
国家: China
地区: Beijing
城市: Beijing
查看: 高德地图





cgicol.amap.com 安全
IP地址: 58.216.15.46
国家: China
地区: Jiangsu
城市: Changzhou
查看: 高德地图





mpsapi.amap.com 安全
IP地址: 59.82.43.198
国家: China
地区: Beijing
城市: Beijing
查看: 高德地图





lame.sf.net 安全
IP地址: 172.64.153.102
国家: United States of America
地区: Texas
城市: Dallas
查看: Google 地图





dualstack-arestapi.amap.com 安全
IP地址: 59.82.9.60
国家: China
地区: Zhejiang
城市: Hangzhou
查看: 高德地图





wb.amap.com 安全
IP地址: 59.82.33.234
国家: China
地区: Shanghai
城市: Shanghai
查看: 高德地图





abroad.apilocate.amap.com 安全
IP地址: 203.209.230.18
国家: China
地区: Zhejiang
城市: Hangzhou
查看: 高德地图





adiu.amap.com 安全
IP地址: 59.82.31.100
国家: China
地区: Guangdong
城市: Guangzhou
查看: 高德地图





m5.amap.com 安全
IP地址: 59.82.9.9
国家: China
地区: Zhejiang
城市: Hangzhou
查看: 高德地图





er.dcloud.net.cn 安全
IP地址: 43.142.62.113
国家: China
地区: Beijing
城市: Beijing
查看: 高德地图





gtc.getui.nethttps 安全
没有可用的地理位置信息。




mst01.is.autonavi.com 安全
IP地址: 59.82.14.191
国家: China
地区: Zhejiang
城市: Hangzhou
查看: 高德地图





dualstack-a.apilocate.amap.com 安全
IP地址: 59.82.9.131
国家: China
地区: Zhejiang
城市: Hangzhou
查看: 高德地图





wap.amap.com 安全
IP地址: 101.226.28.237
国家: China
地区: Shanghai
城市: Shanghai
查看: 高德地图





手机号码

网址

网址信息 源码文件
10.1.68.23
com/alipay/mobile/common/logging/impl/MpaasLoggerImpl.java
data:image
com/bumptech/glide/load/model/DataUrlLoader.java
https://c-gtc.getui.net,https://c-gtc.gepush.com
https://gtc.getui.net,https://gtc.gepush.com
https://b-gtc.getui.net,https://b-gtc.gepush.com
com/getui/gtc/c/b.java
https://mdap.mpaas.cn-hangzhou.aliyuncs.com
https://mpaasapi.mpaas.cn-hangzhou.aliyuncs.com/mgw.htm
com/mpaas/uniapp/scan/MpaasScanModule.java
data:text/html,
javascript:var
javascript:(function(){var
io/dcloud/common/adapter/ui/AdaWebview.java
file:///
io/dcloud/common/adapter/ui/webview/WebJsEvent.java
javascript:(function(){var
javascript:setTimeout(function(){location.__page__load__over__
data:text/html,chromewebdata
file:///
io/dcloud/common/adapter/ui/webview/WebLoadEvent.java
4.5.4.1
4.5.4.2
io/dcloud/common/adapter/util/MobilePhoneModel.java
javascript:(function(){if(!((window.__html5plus__&&__html5plus__.isReady)?__html5plus__:(navigator.plus&&navigator.plus.isReady)?navigator.plus:window.plus)){window.__load__plus__&&window.__load__plus__();}var
javascript:!function(){(window.__html5plus__&&__html5plus__.isReady?__html5plus__:navigator.plus&&navigator.plus.isReady?navigator.plus:window.plus)
io/dcloud/common/constant/AbsoluteConst.java
https://ask.dcloud.net.cn/article/282
io/dcloud/common/constant/DOMException.java
javascript:(function(){if(!((window.__html5plus__&&__html5plus__.isReady)?__html5plus__:(navigator.plus&&navigator.plus.isReady)?navigator.plus:window.plus)){window.__load__plus__&&window.__load__plus__();}var
io/dcloud/common/core/ui/DCKeyboardManager.java
javascript:window.__needNotifyNative__=true;
io/dcloud/common/core/ui/g.java
http://ns.adobe.com/xap/1.0/
io/dcloud/common/util/ExifInterface.java
data:image
http://localhost
https://localhost
io/dcloud/common/util/PdrUtil.java
https://m3w.cn/s/
io/dcloud/common/util/ShortCutUtil.java
https://ask.dcloud.net.cn/article/35627
https://ask.dcloud.net.cn/article/35877
io/dcloud/e/b/a.java
http://localhost
file:///
io/dcloud/e/b/e.java
https://er.dcloud.io/rv
https://er.dcloud.net.cn/rv
io/dcloud/e/c/h/b.java
https://ask.dcloud.net.cn/article/35058
io/dcloud/feature/audio/AudioRecorderMgr.java
https://er.dcloud.io/sc
https://er.dcloud.net.cn/sc
io/dcloud/feature/gg/dcloud/ADHandler.java
data:image/
io/dcloud/feature/nativeObj/NativeBitmap.java
file://%s',
io/dcloud/feature/nativeObj/NativeBitmapMgr.java
data:image/.*;base64,
io/dcloud/feature/nativeObj/TitleNView.java
file:///android_asset
io/dcloud/feature/nativeObj/photoview/PhotoActivity.java
file:///
io/dcloud/feature/nativeObj/photoview/subscaleview/ImageSource.java
file:///
io/dcloud/feature/nativeObj/photoview/subscaleview/SubsamplingScaleImageView.java
file://%s',
io/dcloud/feature/pdr/a.java
http://localhost
io/dcloud/feature/weex/adapter/DefaultWebSocketAdapter.java
file:///
io/dcloud/feature/weex/adapter/PlusUriAdapter.java
javascript:(function
file:///
io/dcloud/feature/weex/adapter/webview/DCWXWebView.java
javascript:(function