温馨提示:本平台仅供研究软件风险、安全评估,禁止用于非法用途。由于展示的数据过于全面,请耐心等待加载完成。如有疑问或建议, 可加入我们的微信群讨论

APP评分

病毒检测 1 个厂商报毒

安全评分

文件信息

文件名称 plus.BAIRUIXINTUODFdf45gdh.apk
文件大小 3.94MB
MD5 caa0615cd5f4a3ae4ac8e2f0f9e0bebe
SHA1 ce91d7933c6acbfcb3f95a3256ee2049a72d9cb0
SHA256 bb072515cb77468c6aff4e9cf62100f788062376c8ad726dbcb659594eb613ec

应用信息

应用名称 BRXT
包名 plus.BAIRUIXINTUODFdf45gdh
主活动 io.dcloud.PandoraEntry
目标SDK 26     最小SDK 19
版本号 5.6.8     子版本号 568
加固信息 未加壳

组件导出信息

反编译代码

Manifest文件 查看
APK文件 下载
Java源代码 查看 -- 下载

证书信息

二进制文件已签名
v1 签名: True
v2 签名: True
v3 签名: True
v4 签名: False
主题: C=CN, ST=BJ, L=HD, O=Test, OU=Test, CN=Tester
签名算法: rsassa_pkcs1v15
有效期自: 2019-07-26 12:52:56+00:00
有效期至: 2119-07-02 12:52:56+00:00
发行人: C=CN, ST=BJ, L=HD, O=Test, OU=Test, CN=Tester
序列号: 0x7dd12840
哈希算法: sha256
证书MD5: f9f6c81fdbab50147d6f2c4fcee60aa5
证书SHA1: bbace22f973b1802e7d669a37a28efd23fa368e7
证书SHA256: 24117de73612bcfeaf2a6a24bd044f2e33e52d41965f504d74177f4fe255eb26
证书SHA512: 333aab8f49d2434b3c0a4cbba65e82f4056a9d17076b5b288846621868a6165482905ca5705fc2080570f31d969a22b9d023cd0b7ceb7984c5a6604a5de7b4e5
公钥算法: rsa
密钥长度: 2048
指纹: b0efd86a24b6e59ce3afdbaadc6a22aff1217552a26ee9664f2124eb62fe23b7
找到 1 个唯一证书

应用程序权限

权限名称 安全等级 权限内容 权限描述 关联代码
android.permission.INTERNET 危险 完全互联网访问 允许应用程序创建网络套接字。
android.permission.WRITE_EXTERNAL_STORAGE 危险 读取/修改/删除外部存储内容 允许应用程序写入外部存储。
android.permission.ACCESS_NETWORK_STATE 普通 获取网络状态 允许应用程序查看所有网络的状态。
android.permission.ACCESS_WIFI_STATE 普通 查看Wi-Fi状态 允许应用程序查看有关Wi-Fi状态的信息。
android.permission.INSTALL_PACKAGES 签名(系统) 请求安装APP 允许应用程序安装全新的或更新的 Android 包。恶意应用程序可能会借此添加其具有任意权限的新应用程序。
android.permission.REQUEST_INSTALL_PACKAGES 危险 允许安装应用程序 Android8.0 以上系统允许安装未知来源应用程序权限。
android.permission.ACCESS_COARSE_LOCATION 危险 获取粗略位置 通过WiFi或移动基站的方式获取用户错略的经纬度信息,定位精度大概误差在30~1500米。恶意程序可以用它来确定您的大概位置。
android.permission.ACCESS_FINE_LOCATION 危险 获取精确位置 通过GPS芯片接收卫星的定位信息,定位精度达10米以内。恶意程序可以用它来确定您所在的位置。
android.permission.CALL_PHONE 危险 直接拨打电话 允许应用程序直接拨打电话。恶意程序会在用户未知的情况下拨打电话造成损失。但不被允许拨打紧急电话。
android.permission.CAMERA 危险 拍照和录制视频 允许应用程序拍摄照片和视频,且允许应用程序收集相机在任何时候拍到的图像。
android.permission.CHANGE_WIFI_STATE 危险 改变Wi-Fi状态 允许应用程序改变Wi-Fi状态。
android.permission.FLASHLIGHT 普通 控制闪光灯 允许应用程序控制闪光灯。
android.permission.MODIFY_AUDIO_SETTINGS 危险 允许应用修改全局音频设置 允许应用程序修改全局音频设置,如音量。多用于消息语音功能。
android.permission.MOUNT_UNMOUNT_FILESYSTEMS 危险 装载和卸载文件系统 允许应用程序装载和卸载可移动存储器的文件系统。
android.permission.READ_LOGS 危险 读取系统日志文件 允许应用程序从系统的各日志文件中读取信息。这样应用程序可以发现您的手机使用情况,这些信息还可能包含用户个人信息或保密信息,造成隐私数据泄露。
android.permission.VIBRATE 普通 控制振动器 允许应用程序控制振动器,用于消息通知振动功能。
android.permission.WAKE_LOCK 危险 防止手机休眠 允许应用程序防止手机休眠,在手机屏幕关闭后后台进程仍然运行。
android.permission.WRITE_SETTINGS 危险 修改全局系统设置 允许应用程序修改系统设置方面的数据。恶意应用程序可借此破坏您的系统配置。
com.huawei.android.launcher.permission.CHANGE_BADGE 普通 在应用程序上显示通知计数 在华为手机的应用程序启动图标上显示通知计数或徽章。
com.vivo.notification.permission.BADGE_ICON 普通 桌面图标角标 vivo平台桌面图标角标,接入vivo平台后需要用户手动开启,开启完成后收到新消息时,在已安装的应用桌面图标右上角显示“数字角标”。
android.permission.READ_EXTERNAL_STORAGE 危险 读取SD卡内容 允许应用程序从SD卡读取信息。
android.permission.READ_PHONE_STATE 危险 读取手机状态和标识 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号,是否正在通话,以及对方的号码等。
com.asus.msa.SupplementaryDID.ACCESS 普通 获取厂商oaid相关权限 获取设备标识信息oaid,在华硕设备上需要用到的权限。

证书分析

高危
0
警告
1
信息
1
标题 严重程度 描述信息
已签名应用 信息 应用程序已使用代码签名证书进行签名
应用程序存在Janus漏洞 警告 应用程序使用了v1签名方案进行签名,如果只使用v1签名方案,那么它就容易受到安卓5.0-8.0上的Janus漏洞的攻击。在安卓5.0-7.0上运行的使用了v1签名方案的应用程序,以及同时使用了v2/v3签名方案的应用程序也同样存在漏洞。

MANIFEST分析

高危
4
警告
3
信息
0
屏蔽
0
序号 问题 严重程度 描述信息 操作
1 应用程序可以安装在有漏洞的已更新 Android 版本上
Android 4.4-4.4.4, [minSdk=19]
警告 该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。
2 应用程序已启用明文网络流量
[android:usesCleartextTraffic=true]
警告 应用程序打算使用明文网络流量,例如明文HTTP,FTP协议,DownloadManager和MediaPlayer。针对API级别27或更低的应用程序,默认值为“true”。针对API级别28或更高的应用程序,默认值为“false”。避免使用明文流量的主要原因是缺乏机密性,真实性和防篡改保护;网络攻击者可以窃听传输的数据,并且可以在不被检测到的情况下修改它。
3 Activity (io.dcloud.PandoraEntryActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
4 Activity (io.dcloud.PandoraEntryActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。 高危 活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (26) 更新到 28 或更高版本以在平台级别修复此问题。
5 Activity设置了TaskAffinity属性
(io.dcloud.WebAppActivity)
警告 如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名
6 Activity (io.dcloud.WebAppActivity) 的启动模式不是standard模式 高危 Activity 不应将启动模式属性设置为 "singleTask/singleInstance",因为这会使其成为根 Activity,并可能导致其他应用程序读取调用 Intent 的内容。因此,当 Intent 包含敏感信息时,需要使用 "standard" 启动模式属性。
7 Activity (io.dcloud.WebAppActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。 高危 活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (26) 更新到 28 或更高版本以在平台级别修复此问题。

可浏览的ACTIVITIES

ACTIVITY INTENT
io.dcloud.PandoraEntry Schemes: h51f32e74://,

网络安全配置

序号 范围 严重级别 描述

API调用分析

API功能 源码文件
加密解密-> 信息摘要算法
com/bumptech/glide/load/Key.java
com/bumptech/glide/load/MultiTransformation.java
com/bumptech/glide/load/Option.java
com/bumptech/glide/load/Options.java
com/bumptech/glide/load/engine/DataCacheKey.java
com/bumptech/glide/load/engine/EngineKey.java
com/bumptech/glide/load/engine/ResourceCacheKey.java
com/bumptech/glide/load/engine/cache/SafeKeyGenerator.java
com/bumptech/glide/load/engine/prefill/BitmapPreFillRunner.java
com/bumptech/glide/load/model/GlideUrl.java
com/bumptech/glide/load/resource/UnitTransformation.java
com/bumptech/glide/load/resource/bitmap/BitmapDrawableTransformation.java
com/bumptech/glide/load/resource/bitmap/CenterCrop.java
com/bumptech/glide/load/resource/bitmap/CenterInside.java
com/bumptech/glide/load/resource/bitmap/CircleCrop.java
com/bumptech/glide/load/resource/bitmap/DrawableTransformation.java
com/bumptech/glide/load/resource/bitmap/FitCenter.java
com/bumptech/glide/load/resource/bitmap/Rotate.java
com/bumptech/glide/load/resource/bitmap/RoundedCorners.java
com/bumptech/glide/load/resource/bitmap/VideoDecoder.java
com/bumptech/glide/load/resource/gif/GifDrawableTransformation.java
com/bumptech/glide/signature/EmptySignature.java
com/bumptech/glide/signature/MediaStoreSignature.java
com/bumptech/glide/signature/ObjectKey.java
com/nostra13/dcloudimageloader/cache/disc/naming/Md5FileNameGenerator.java
io/dcloud/common/util/HashUtils.java
io/dcloud/common/util/LoadAppUtils.java
io/dcloud/common/util/Md5Utils.java
io/dcloud/f/d/b.java
io/dcloud/i/s.java
一般功能-> 文件操作
com/bumptech/glide/Glide.java
com/bumptech/glide/ModelTypes.java
com/bumptech/glide/RequestBuilder.java
com/bumptech/glide/RequestManager.java
com/bumptech/glide/disklrucache/DiskLruCache.java
com/bumptech/glide/disklrucache/StrictLineReader.java
com/bumptech/glide/disklrucache/Util.java
com/bumptech/glide/gifdecoder/GifDecoder.java
com/bumptech/glide/gifdecoder/StandardGifDecoder.java
com/bumptech/glide/load/Encoder.java
com/bumptech/glide/load/HttpException.java
com/bumptech/glide/load/ImageHeaderParser.java
com/bumptech/glide/load/ImageHeaderParserUtils.java
com/bumptech/glide/load/ResourceDecoder.java
com/bumptech/glide/load/data/AssetFileDescriptorLocalUriFetcher.java
com/bumptech/glide/load/data/AssetPathFetcher.java
com/bumptech/glide/load/data/BufferedOutputStream.java
com/bumptech/glide/load/data/DataRewinder.java
com/bumptech/glide/load/data/ExifOrientationStream.java
com/bumptech/glide/load/data/FileDescriptorAssetPathFetcher.java
com/bumptech/glide/load/data/FileDescriptorLocalUriFetcher.java
com/bumptech/glide/load/data/HttpUrlFetcher.java
com/bumptech/glide/load/data/InputStreamRewinder.java
com/bumptech/glide/load/data/LocalUriFetcher.java
com/bumptech/glide/load/data/StreamAssetPathFetcher.java
com/bumptech/glide/load/data/StreamLocalUriFetcher.java
com/bumptech/glide/load/data/mediastore/FileService.java
com/bumptech/glide/load/data/mediastore/ThumbFetcher.java
com/bumptech/glide/load/data/mediastore/ThumbnailStreamOpener.java
com/bumptech/glide/load/engine/DataCacheGenerator.java
com/bumptech/glide/load/engine/DataCacheWriter.java
com/bumptech/glide/load/engine/DecodeHelper.java
com/bumptech/glide/load/engine/DecodePath.java
com/bumptech/glide/load/engine/GlideException.java
com/bumptech/glide/load/engine/ResourceCacheGenerator.java
com/bumptech/glide/load/engine/cache/DiskCache.java
com/bumptech/glide/load/engine/cache/DiskCacheAdapter.java
com/bumptech/glide/load/engine/cache/DiskLruCacheFactory.java
com/bumptech/glide/load/engine/cache/DiskLruCacheWrapper.java
com/bumptech/glide/load/engine/cache/ExternalCacheDiskCacheFactory.java
com/bumptech/glide/load/engine/cache/ExternalPreferredCacheDiskCacheFactory.java
com/bumptech/glide/load/engine/cache/InternalCacheDiskCacheFactory.java
com/bumptech/glide/load/engine/executor/RuntimeCompat.java
com/bumptech/glide/load/model/AssetUriLoader.java
com/bumptech/glide/load/model/ByteArrayLoader.java
com/bumptech/glide/load/model/ByteBufferEncoder.java
com/bumptech/glide/load/model/ByteBufferFileLoader.java
com/bumptech/glide/load/model/DataUrlLoader.java
com/bumptech/glide/load/model/FileLoader.java
com/bumptech/glide/load/model/MediaStoreFileLoader.java
com/bumptech/glide/load/model/ResourceLoader.java
com/bumptech/glide/load/model/StreamEncoder.java
com/bumptech/glide/load/model/StringLoader.java
com/bumptech/glide/load/model/UriLoader.java
com/bumptech/glide/load/model/UrlUriLoader.java
com/bumptech/glide/load/model/stream/BaseGlideUrlLoader.java
com/bumptech/glide/load/model/stream/HttpGlideUrlLoader.java
com/bumptech/glide/load/model/stream/HttpUriLoader.java
com/bumptech/glide/load/model/stream/MediaStoreImageThumbLoader.java
com/bumptech/glide/load/model/stream/MediaStoreVideoThumbLoader.java
com/bumptech/glide/load/model/stream/UrlLoader.java
com/bumptech/glide/load/resource/bitmap/BitmapDrawableDecoder.java
com/bumptech/glide/load/resource/bitmap/BitmapDrawableEncoder.java
com/bumptech/glide/load/resource/bitmap/BitmapEncoder.java
com/bumptech/glide/load/resource/bitmap/ByteBufferBitmapDecoder.java
com/bumptech/glide/load/resource/bitmap/DefaultImageHeaderParser.java
com/bumptech/glide/load/resource/bitmap/Downsampler.java
com/bumptech/glide/load/resource/bitmap/ExifInterfaceImageHeaderParser.java
com/bumptech/glide/load/resource/bitmap/HardwareConfigState.java
com/bumptech/glide/load/resource/bitmap/RecyclableBufferedInputStream.java
com/bumptech/glide/load/resource/bitmap/StreamBitmapDecoder.java
com/bumptech/glide/load/resource/bitmap/VideoDecoder.java
com/bumptech/glide/load/resource/file/FileDecoder.java
com/bumptech/glide/load/resource/file/FileResource.java
com/bumptech/glide/load/resource/gif/ByteBufferGifDecoder.java
com/bumptech/glide/load/resource/gif/GifDrawableEncoder.java
com/bumptech/glide/load/resource/gif/StreamGifDecoder.java
com/bumptech/glide/load/resource/transcode/BitmapBytesTranscoder.java
com/bumptech/glide/util/ByteBufferUtil.java
com/bumptech/glide/util/ContentLengthInputStream.java
com/bumptech/glide/util/ExceptionCatchingInputStream.java
com/bumptech/glide/util/MarkEnforcingInputStream.java
com/bun/miitmdid/core/JLibrary.java
com/bun/miitmdid/core/Utils.java
com/bun/miitmdid/core/ZipUtils.java
com/dcloud/android/downloader/core/DownloadTaskImpl.java
com/dcloud/android/downloader/core/task/GetFileInfoTask.java
com/dcloud/android/downloader/core/thread/DownloadThread.java
com/dcloud/android/downloader/domain/DownloadInfo.java
com/dcloud/android/downloader/domain/DownloadThreadInfo.java
com/dcloud/zxing2/client/result/ResultParser.java
com/dcloud/zxing2/client/result/VCardResultParser.java
com/dcloud/zxing2/datamatrix/decoder/DecodedBitStreamParser.java
com/dcloud/zxing2/datamatrix/detector/Detector.java
com/dcloud/zxing2/multi/qrcode/QRCodeMultiReader.java
com/dcloud/zxing2/multi/qrcode/detector/MultiFinderPatternFinder.java
com/dcloud/zxing2/pdf417/decoder/DecodedBitStreamParser.java
com/dcloud/zxing2/qrcode/decoder/DecodedBitStreamParser.java
com/dcloud/zxing2/qrcode/detector/FinderPatternFinder.java
com/dcloud/zxing2/qrcode/encoder/Encoder.java
com/dmcbig/mediapicker/TakePhotoActivity.java
com/dmcbig/mediapicker/data/ImageLoader.java
com/dmcbig/mediapicker/data/MediaLoader.java
com/dmcbig/mediapicker/data/VideoLoader.java
com/dmcbig/mediapicker/utils/FileUtils.java
com/nostra13/dcloudimageloader/cache/disc/BaseDiscCache.java
com/nostra13/dcloudimageloader/cache/disc/DiscCacheAware.java
com/nostra13/dcloudimageloader/cache/disc/LimitedDiscCache.java
com/nostra13/dcloudimageloader/cache/disc/impl/FileCountLimitedDiscCache.java
com/nostra13/dcloudimageloader/cache/disc/impl/LimitedAgeDiscCache.java
com/nostra13/dcloudimageloader/cache/disc/impl/TotalSizeLimitedDiscCache.java
com/nostra13/dcloudimageloader/cache/disc/impl/UnlimitedDiscCache.java
com/nostra13/dcloudimageloader/core/DefaultConfigurationFactory.java
com/nostra13/dcloudimageloader/core/ImageLoaderConfiguration.java
com/nostra13/dcloudimageloader/core/LoadAndDisplayImageTask.java
com/nostra13/dcloudimageloader/core/assist/DiscCacheUtil.java
com/nostra13/dcloudimageloader/core/assist/FlushedInputStream.java
com/nostra13/dcloudimageloader/core/assist/deque/LinkedBlockingDeque.java
com/nostra13/dcloudimageloader/core/decode/BaseImageDecoder.java
com/nostra13/dcloudimageloader/core/decode/ImageDecoder.java
com/nostra13/dcloudimageloader/core/download/BaseImageDownloader.java
com/nostra13/dcloudimageloader/core/download/ImageDownloader.java
com/nostra13/dcloudimageloader/core/download/NetworkDeniedImageDownloader.java
com/nostra13/dcloudimageloader/core/download/SlowNetworkImageDownloader.java
com/nostra13/dcloudimageloader/utils/IoUtils.java
com/nostra13/dcloudimageloader/utils/StorageUtils.java
io/dcloud/PandoraEntry.java
io/dcloud/WebAppActivity.java
io/dcloud/WebviewActivity.java
io/dcloud/common/DHInterface/IApp.java
io/dcloud/common/DHInterface/IConfusionMgr.java
io/dcloud/common/DHInterface/IReqListener.java
io/dcloud/common/adapter/io/DHFile.java
io/dcloud/common/adapter/io/UnicodeInputStream.java
io/dcloud/common/adapter/ui/AdaWebview.java
io/dcloud/common/adapter/ui/FileChooseDialog.java
io/dcloud/common/adapter/ui/RecordView.java
io/dcloud/common/adapter/ui/webview/SysWebView.java
io/dcloud/common/adapter/ui/webview/WebJsEvent.java
io/dcloud/common/adapter/ui/webview/WebLoadEvent.java
io/dcloud/common/adapter/ui/webview/WebResUtil.java
io/dcloud/common/adapter/util/CanvasHelper.java
io/dcloud/common/adapter/util/DeviceInfo.java
io/dcloud/common/adapter/util/DownloadUtil.java
io/dcloud/common/adapter/util/Logger.java
io/dcloud/common/adapter/util/PermissionUtil.java
io/dcloud/common/adapter/util/PlatformUtil.java
io/dcloud/common/adapter/util/SP.java
io/dcloud/common/adapter/util/SharedPreferencesExt.java
io/dcloud/common/adapter/util/UEH.java
io/dcloud/common/constant/DataInterface.java
io/dcloud/common/core/a/a.java
io/dcloud/common/core/ui/l.java
io/dcloud/common/sonic/SonicRuntimeImpl.java
io/dcloud/common/util/AppRuntime.java
io/dcloud/common/util/AssistInputUtil.java
io/dcloud/common/util/Base64.java
io/dcloud/common/util/BaseInfo.java
io/dcloud/common/util/BuildProperties.java
io/dcloud/common/util/DataUtil.java
io/dcloud/common/util/FileUtil.java
io/dcloud/common/util/IOUtil.java
io/dcloud/common/util/ImageLoaderUtil.java
io/dcloud/common/util/LoadAppUtils.java
io/dcloud/common/util/Md5.java
io/dcloud/common/util/Md5Utils.java
io/dcloud/common/util/NetTool.java
io/dcloud/common/util/PdrUtil.java
io/dcloud/common/util/TelephonyUtil.java
io/dcloud/common/util/TestUtil.java
io/dcloud/common/util/XmlUtil.java
io/dcloud/common/util/ZipUtils.java
io/dcloud/common/util/db/DCStorage.java
io/dcloud/common/util/emulator/EmulatorCheckUtil.java
io/dcloud/common/util/hostpicker/HostPicker.java
io/dcloud/common/util/net/NetWork.java
io/dcloud/common/util/net/RequestData.java
io/dcloud/common/util/net/http/Request.java
io/dcloud/common/util/net/http/Response.java
io/dcloud/common/util/net/http/WebkitCookieManagerProxy.java
io/dcloud/f/a/a.java
io/dcloud/f/a/e.java
io/dcloud/f/b/b.java
io/dcloud/f/b/c.java
io/dcloud/f/b/d.java
io/dcloud/f/b/e/a.java
io/dcloud/f/d/a.java
io/dcloud/f/d/b.java
io/dcloud/feature/ad/AdSplashUtil.java
io/dcloud/feature/ad/dcloud/ADHandler.java
io/dcloud/feature/ad/dcloud/ADSim.java
io/dcloud/feature/ad/dcloud/ADWebView.java
io/dcloud/feature/audio/AudioPlayer.java
io/dcloud/feature/audio/aac/AacEncode.java
io/dcloud/feature/audio/recorder/AudioRecorder.java
io/dcloud/feature/audio/recorder/DataEncodeThread.java
io/dcloud/feature/audio/recorder/HighGradeRecorder.java
io/dcloud/feature/audio/recorder/RecorderTask.java
io/dcloud/feature/barcode2/BarcodeFrameItem.java
io/dcloud/feature/barcode2/BarcodeProxy.java
io/dcloud/feature/barcode2/camera/CameraManager.java
io/dcloud/feature/barcode2/decoding/DecodeHandler.java
io/dcloud/feature/internal/sdk/SDK.java
io/dcloud/feature/nativeObj/BannerLayout.java
io/dcloud/feature/nativeObj/NativeBitmap.java
io/dcloud/feature/nativeObj/NativeTypefaceFactory.java
io/dcloud/feature/nativeObj/NativeView.java
io/dcloud/feature/nativeObj/TitleNView.java
io/dcloud/feature/nativeObj/photoview/PhotoActivity.java
io/dcloud/feature/nativeObj/photoview/subscaleview/ImageSource.java
io/dcloud/feature/nativeObj/photoview/subscaleview/ImageViewState.java
io/dcloud/feature/nativeObj/photoview/subscaleview/decoder/SkiaImageDecoder.java
io/dcloud/feature/nativeObj/photoview/subscaleview/decoder/SkiaImageRegionDecoder.java
io/dcloud/feature/nativeObj/photoview/subscaleview/decoder/SkiaPooledImageRegionDecoder.java
io/dcloud/feature/nativeObj/richtext/IAssets.java
io/dcloud/feature/nativeObj/richtext/RichTextLayout.java
io/dcloud/feature/nativeObj/richtext/RichTextParser.java
io/dcloud/feature/pdr/CoreCacheFeatureImpl.java
io/dcloud/feature/pdr/LoggerFeatureImpl.java
io/dcloud/feature/pdr/RuntimeFeatureImpl.java
io/dcloud/feature/pdr/ZipFeature.java
io/dcloud/feature/pdr/a.java
io/dcloud/feature/pdr/b.java
io/dcloud/feature/ui/a.java
io/dcloud/feature/ui/e.java
io/dcloud/feature/ui/nativeui/c.java
io/dcloud/feature/ui/navigator/NavigatorUIFeatureImpl.java
io/dcloud/i/a.java
io/dcloud/i/b.java
io/dcloud/i/d.java
io/dcloud/i/g.java
io/dcloud/i/i.java
io/dcloud/i/j.java
io/dcloud/i/m.java
io/dcloud/i/p.java
io/dcloud/i/r.java
io/dcloud/i/s.java
io/dcloud/i/t.java
io/dcloud/js/camera/CameraFeatureImpl.java
io/dcloud/js/camera/b.java
io/dcloud/js/file/FileFeatureImpl.java
io/dcloud/js/file/a.java
io/dcloud/js/gallery/GalleryFeatureImpl.java
io/dcloud/net/DownloadJSMgr.java
io/dcloud/net/DownloadNetWork.java
io/dcloud/net/JsDownload.java
io/dcloud/net/JsUpload.java
io/dcloud/net/UploadNetWork.java
io/dcloud/net/XMLHttpRequest.java
io/dcloud/nineoldandroids/animation/AnimatorInflater.java
io/dcloud/share/a.java
io/src/dcloud/adapter/DCloudAdapterUtil.java
io/src/dcloud/adapter/DCloudBaseActivity.java
org/mozilla/universalchardet/EncodingDetectorInputStream.java
org/mozilla/universalchardet/EncodingDetectorOutputStream.java
org/mozilla/universalchardet/ReaderFactory.java
org/mozilla/universalchardet/UnicodeBOMInputStream.java
org/mozilla/universalchardet/UniversalDetector.java
pl/droidsonroids/gif/GifAnimationMetaData.java
pl/droidsonroids/gif/GifDecoder.java
pl/droidsonroids/gif/GifDrawable.java
pl/droidsonroids/gif/GifDrawableInit.java
pl/droidsonroids/gif/GifIOException.java
pl/droidsonroids/gif/GifInfoHandle.java
pl/droidsonroids/gif/GifTexImage2D.java
pl/droidsonroids/gif/GifTextView.java
pl/droidsonroids/gif/GifTextureView.java
pl/droidsonroids/gif/GifViewUtils.java
pl/droidsonroids/gif/InputSource.java
调用java反射机制
com/bumptech/glide/Glide.java
com/bumptech/glide/module/ManifestParser.java
com/bun/miitmdid/c/k/a.java
com/bun/miitmdid/core/JLibrary.java
com/bun/miitmdid/core/MdidSdkHelper.java
com/bun/miitmdid/core/Utils.java
com/dcloud/android/v4/view/ViewCompat.java
com/dcloud/android/v4/view/ViewCompatBase.java
com/dcloud/android/v4/view/ViewCompatEclairMr1.java
com/dmcbig/mediapicker/utils/ScreenUtils.java
com/nostra13/dcloudimageloader/core/imageaware/ImageViewAware.java
io/dcloud/ProcessMediator.java
io/dcloud/WebviewActivity.java
io/dcloud/a.java
io/dcloud/application/DCLoudApplicationImpl.java
io/dcloud/common/DHInterface/BaseFeature.java
io/dcloud/common/DHInterface/StandardFeature.java
io/dcloud/common/adapter/ui/AdaWebview.java
io/dcloud/common/adapter/ui/webview/SysWebView.java
io/dcloud/common/adapter/util/DeviceInfo.java
io/dcloud/common/adapter/util/InvokeExecutorHelper.java
io/dcloud/common/adapter/util/PlatformUtil.java
io/dcloud/common/adapter/util/UEH.java
io/dcloud/common/util/AppPermissionUtil.java
io/dcloud/common/util/AppStatusBarManager.java
io/dcloud/common/util/BaseInfo.java
io/dcloud/common/util/DLGeolocation.java
io/dcloud/common/util/FileUtil.java
io/dcloud/common/util/LoadAppUtils.java
io/dcloud/common/util/PdrUtil.java
io/dcloud/common/util/ReflectUtils.java
io/dcloud/common/util/emulator/CommandUtil.java
io/dcloud/f/b/a.java
io/dcloud/f/c/a.java
io/dcloud/f/d/a.java
io/dcloud/feature/ad/AdFlowMgr.java
io/dcloud/feature/ad/dcloud/ADHandler.java
io/dcloud/feature/ad/dcloud/ADWebView.java
io/dcloud/feature/ad/dcloud/AdFeatureImpl.java
io/dcloud/feature/barcode2/camera/FlashlightManager.java
io/dcloud/feature/device/DeviceFeatureImpl.java
io/dcloud/feature/nativeObj/BannerLayout.java
io/dcloud/feature/payment/PaymentFeatureImpl.java
io/dcloud/feature/pdr/a.java
io/dcloud/feature/ui/e.java
io/dcloud/feature/ui/navigator/QueryNotchTool.java
io/dcloud/h/b.java
io/dcloud/invocation/b.java
io/dcloud/invocation/c.java
io/dcloud/invocation/d.java
io/dcloud/js/geolocation/a.java
io/dcloud/nineoldandroids/animation/PropertyValuesHolder.java
io/dcloud/nineoldandroids/util/ReflectiveProperty.java
io/dcloud/share/a.java
io/src/dcloud/adapter/DCloudAdapterUtil.java
pl/droidsonroids/gif/LibraryLoader.java
组件-> 发送广播
一般功能-> IPC通信
com/asus/msa/SupplementaryDID/IDidAidlInterface.java
com/asus/msa/sdid/IDIDBinderStatusListener.java
com/asus/msa/sdid/SupplementaryDIDManager.java
com/bumptech/glide/manager/DefaultConnectivityMonitor.java
com/bun/lib/c.java
com/bun/miitmdid/c/b/a.java
com/bun/miitmdid/c/g/a.java
com/bun/miitmdid/supplier/msa/MsaClient.java
com/bun/miitmdid/supplier/sumsung/SumsungCore.java
com/dcloud/android/downloader/DownloadService.java
com/dcloud/zxing2/client/result/VCardResultParser.java
com/dmcbig/mediapicker/PickerActivity.java
com/dmcbig/mediapicker/PreviewActivity.java
com/dmcbig/mediapicker/TakePhotoActivity.java
com/dmcbig/mediapicker/view/PreviewFragment.java
com/heytap/openid/a.java
com/heytap/openid/sdk/b.java
com/meizu/flyme/openidsdk/a.java
com/samsung/android/deviceidservice/IDeviceIdService.java
com/zui/deviceidservice/IDeviceidInterface.java
com/zui/opendeviceidlibrary/OpenDeviceId.java
io/dcloud/EntryProxy.java
io/dcloud/PandoraEntry.java
io/dcloud/ProcessMediator.java
io/dcloud/WebAppActivity.java
io/dcloud/WebviewActivity.java
io/dcloud/b.java
io/dcloud/c.java
io/dcloud/common/DHInterface/BaseFeature.java
io/dcloud/common/DHInterface/IActivityHandler.java
io/dcloud/common/DHInterface/IApp.java
io/dcloud/common/DHInterface/IDCloudReceiver.java
io/dcloud/common/DHInterface/ISysEventListener.java
io/dcloud/common/adapter/io/AdDownloadReceiver.java
io/dcloud/common/adapter/io/DownloadReceiver.java
io/dcloud/common/adapter/io/MiniServerService.java
io/dcloud/common/adapter/io/PushReceiver.java
io/dcloud/common/adapter/ui/AdaWebViewParent.java
io/dcloud/common/adapter/ui/AdaWebview.java
io/dcloud/common/adapter/ui/FileChooseDialog.java
io/dcloud/common/adapter/ui/RecordView.java
io/dcloud/common/adapter/ui/webview/SysWebView.java
io/dcloud/common/adapter/ui/webview/WebJsEvent.java
io/dcloud/common/adapter/ui/webview/WebLoadEvent.java
io/dcloud/common/adapter/util/DeviceInfo.java
io/dcloud/common/adapter/util/DownloadUtil.java
io/dcloud/common/adapter/util/PermissionUtil.java
io/dcloud/common/adapter/util/PlatformUtil.java
io/dcloud/common/constant/DataInterface.java
io/dcloud/common/constant/IntentConst.java
io/dcloud/common/core/a/a.java
io/dcloud/common/core/permission/PermissionControler.java
io/dcloud/common/core/ui/a.java
io/dcloud/common/core/ui/l.java
io/dcloud/common/ui/a.java
io/dcloud/common/util/ADUtils.java
io/dcloud/common/util/AppPermissionUtil.java
io/dcloud/common/util/AppStatusBarManager.java
io/dcloud/common/util/BaseInfo.java
io/dcloud/common/util/CreateShortResultReceiver.java
io/dcloud/common/util/DialogUtil.java
io/dcloud/common/util/ErrorDialogUtil.java
io/dcloud/common/util/FileUtil.java
io/dcloud/common/util/LauncherUtil.java
io/dcloud/common/util/LoadAppUtils.java
io/dcloud/common/util/NotificationUtil.java
io/dcloud/common/util/ReflectUtils.java
io/dcloud/common/util/RuningAcitvityUtil.java
io/dcloud/common/util/ShortCutUtil.java
io/dcloud/common/util/net/NetCheckReceiver.java
io/dcloud/common/util/net/NetMgr.java
io/dcloud/d.java
io/dcloud/f/a/a.java
io/dcloud/f/a/e.java
io/dcloud/f/b/c.java
io/dcloud/f/b/d.java
io/dcloud/f/b/e/a.java
io/dcloud/feature/ad/AdSplashUtil.java
io/dcloud/feature/ad/dcloud/ADHandler.java
io/dcloud/feature/ad/dcloud/ADHandler_wanka.java
io/dcloud/feature/ad/dcloud/SplashADViewWrapper.java
io/dcloud/feature/barcode2/camera/FlashlightManager.java
io/dcloud/feature/barcode2/decoding/DecodeFormatManager.java
io/dcloud/feature/barcode2/decoding/Intents.java
io/dcloud/feature/device/DeviceFeatureImpl.java
io/dcloud/feature/internal/reflect/BroadcastReceiver.java
io/dcloud/feature/internal/sdk/SDK.java
io/dcloud/feature/nativeObj/NativeImageSlider.java
io/dcloud/feature/nativeObj/photoview/PhotoActivity.java
io/dcloud/feature/pdr/RuntimeFeatureImpl.java
io/dcloud/feature/ui/e.java
io/dcloud/feature/ui/nativeui/NativeUIFeatureImpl.java
io/dcloud/feature/ui/navigator/NavigatorUIFeatureImpl.java
io/dcloud/h/b.java
io/dcloud/i/j.java
io/dcloud/i/m.java
io/dcloud/i/n.java
io/dcloud/invocation/a.java
io/dcloud/js/camera/CameraFeatureImpl.java
io/dcloud/js/gallery/GalleryFeatureImpl.java
io/dcloud/share/a.java
io/src/dcloud/adapter/DCloudBaseActivity.java
io/src/dcloud/adapter/DCloudBaseService.java
网络通信-> WebView JavaScript接口
网络通信-> WebView GET请求 io/dcloud/common/adapter/ui/AdaWebview.java
io/dcloud/common/sonic/SonicSessionClientImpl.java
网络通信-> WebView 相关
加密解密-> Base64 解密
加密解密-> Crypto加解密组件 io/dcloud/common/util/AESUtil.java
io/dcloud/f/d/a.java
网络通信-> HTTP建立连接
网络通信-> TCP套接字
网络通信-> HTTPS建立连接
一般功能-> 查看\修改Android系统属性 io/dcloud/common/util/PdrUtil.java
io/dcloud/common/util/ReflectUtils.java
io/dcloud/common/util/emulator/CommandUtil.java
JavaScript 接口方法
一般功能-> 获取系统服务(getSystemService)
com/bumptech/glide/load/engine/cache/MemorySizeCalculator.java
com/bumptech/glide/manager/DefaultConnectivityMonitor.java
com/bumptech/glide/request/target/CustomViewTarget.java
com/bumptech/glide/request/target/NotificationTarget.java
com/bumptech/glide/request/target/ViewTarget.java
com/dcloud/android/downloader/DownloadService.java
com/dcloud/android/v4/view/ViewParentCompat.java
com/dmcbig/mediapicker/adapter/FolderAdapter.java
com/dmcbig/mediapicker/utils/ScreenUtils.java
io/dcloud/WebviewActivity.java
io/dcloud/application/DCLoudApplicationImpl.java
io/dcloud/b.java
io/dcloud/common/adapter/ui/WaitingView.java
io/dcloud/common/adapter/util/DeviceInfo.java
io/dcloud/common/adapter/util/DownloadUtil.java
io/dcloud/common/adapter/util/PermissionUtil.java
io/dcloud/common/adapter/util/UEH.java
io/dcloud/common/ui/PermissionGuideWindow.java
io/dcloud/common/util/AppPermissionUtil.java
io/dcloud/common/util/BaseInfo.java
io/dcloud/common/util/NetTool.java
io/dcloud/common/util/NetworkTypeUtil.java
io/dcloud/common/util/NotificationUtil.java
io/dcloud/common/util/PdrUtil.java
io/dcloud/common/util/RuningAcitvityUtil.java
io/dcloud/common/util/ServiceUtil.java
io/dcloud/common/util/TelephonyUtil.java
io/dcloud/common/util/emulator/EmulatorCheckUtil.java
io/dcloud/feature/ad/dcloud/ADHandler.java
io/dcloud/feature/ad/dcloud/ADHandler_wanka.java
io/dcloud/feature/audio/AudioFeatureImpl.java
io/dcloud/feature/audio/AudioPlayer.java
io/dcloud/feature/barcode2/BarcodeFrameItem.java
io/dcloud/feature/device/DeviceFeatureImpl.java
io/dcloud/feature/nativeObj/NativeView.java
io/dcloud/feature/nativeObj/photoview/subscaleview/decoder/SkiaPooledImageRegionDecoder.java
io/dcloud/feature/pdr/RuntimeFeatureImpl.java
io/dcloud/feature/sensor/b.java
io/dcloud/feature/sensor/c.java
io/dcloud/feature/sensor/e.java
io/dcloud/feature/ui/nativeui/a.java
io/dcloud/feature/ui/nativeui/c.java
io/dcloud/js/geolocation/system/a.java
io/dcloud/js/geolocation/system/b.java
io/dcloud/js/geolocation/system/c.java
一般功能-> 传感器相关操作
一般功能-> 加载so文件
组件-> 启动 Activity
进程操作-> 杀死进程 io/dcloud/b.java
io/dcloud/common/adapter/util/UEH.java
io/dcloud/feature/ad/dcloud/ADResult.java
进程操作-> 获取进程pid
组件-> 启动 Service com/bun/miitmdid/c/g/a.java
com/bun/miitmdid/supplier/sumsung/SumsungCore.java
com/dcloud/android/downloader/DownloadService.java
隐私数据-> 获取已安装的应用程序
隐私数据-> 拍照摄像 io/dcloud/feature/barcode2/BarcodeFrameItem.java
io/dcloud/feature/barcode2/camera/CameraManager.java
io/dcloud/feature/barcode2/camera/FlashlightManager.java
进程操作-> 获取运行的进程\服务
加密解密-> Base64 加密
一般功能-> Android通知 com/bumptech/glide/request/target/NotificationTarget.java
io/dcloud/common/util/NotificationUtil.java
io/dcloud/feature/pdr/RuntimeFeatureImpl.java
网络通信-> SSL证书处理
一般功能-> 获取活动网路信息
隐私数据-> 获取GPS位置信息 io/dcloud/js/geolocation/system/a.java
io/dcloud/js/geolocation/system/b.java
io/dcloud/js/geolocation/system/c.java
辅助功能accessibility相关 com/dcloud/android/v4/view/accessibility/AccessibilityNodeInfoCompatIcs.java
com/dcloud/android/v4/view/accessibility/AccessibilityNodeInfoCompatJellybeanMr2.java
一般功能-> 查询数据库(短信、联系人、通话记录、浏览器历史等)
一般功能-> 设置手机铃声,媒体音量 io/dcloud/feature/device/DeviceFeatureImpl.java
命令执行-> getRuntime.exec() com/bun/miitmdid/core/Utils.java
io/dcloud/common/constant/DataInterface.java
隐私数据-> 录制音频行为 io/dcloud/feature/audio/recorder/RecorderTask.java
网络通信-> URLConnection io/dcloud/i/m.java
隐私数据-> 屏幕截图,截取自己应用内部界面 com/bumptech/glide/load/resource/bitmap/TransformationUtils.java
io/dcloud/feature/nativeObj/photoview/subscaleview/SubsamplingScaleImageView.java
DEX-> 动态加载 io/dcloud/feature/ui/navigator/QueryNotchTool.java
网络通信-> WebView使用File协议 io/dcloud/WebviewActivity.java
io/dcloud/common/adapter/ui/webview/SysWebView.java
io/dcloud/feature/ad/dcloud/ADWebView.java
隐私数据-> 录制视频 io/dcloud/common/adapter/util/PermissionUtil.java
io/dcloud/feature/audio/recorder/AudioRecorder.java
设备指纹-> 获取蜂窝位置信息 io/dcloud/common/adapter/util/DeviceInfo.java
io/dcloud/feature/ad/dcloud/ADHandler.java
设备指纹-> 查看本机SIM卡序列号 io/dcloud/feature/ad/dcloud/ADHandler.java
设备指纹-> getSimOperator io/dcloud/common/adapter/util/DeviceInfo.java

源代码分析

高危
7
警告
9
信息
1
安全
1
屏蔽
0
序号 问题 等级 参考标准 文件位置 操作
1 应用程序记录日志信息,不得记录敏感信息 信息 CWE: CWE-532: 通过日志文件的信息暴露
OWASP MASVS: MSTG-STORAGE-3
com/bumptech/glide/Glide.java
com/bumptech/glide/disklrucache/DiskLruCache.java
com/bumptech/glide/gifdecoder/GifHeaderParser.java
com/bumptech/glide/gifdecoder/StandardGifDecoder.java
com/bumptech/glide/load/data/AssetPathFetcher.java
com/bumptech/glide/load/data/HttpUrlFetcher.java
com/bumptech/glide/load/data/LocalUriFetcher.java
com/bumptech/glide/load/data/mediastore/ThumbFetcher.java
com/bumptech/glide/load/data/mediastore/ThumbnailStreamOpener.java
com/bumptech/glide/load/engine/DecodeJob.java
com/bumptech/glide/load/engine/DecodePath.java
com/bumptech/glide/load/engine/Engine.java
com/bumptech/glide/load/engine/GlideException.java
com/bumptech/glide/load/engine/SourceGenerator.java
com/bumptech/glide/load/engine/bitmap_recycle/LruArrayPool.java
com/bumptech/glide/load/engine/bitmap_recycle/LruBitmapPool.java
com/bumptech/glide/load/engine/cache/DiskLruCacheWrapper.java
com/bumptech/glide/load/engine/cache/MemorySizeCalculator.java
com/bumptech/glide/load/engine/executor/GlideExecutor.java
com/bumptech/glide/load/engine/executor/RuntimeCompat.java
com/bumptech/glide/load/engine/prefill/BitmapPreFillRunner.java
com/bumptech/glide/load/model/ByteBufferEncoder.java
com/bumptech/glide/load/model/ByteBufferFileLoader.java
com/bumptech/glide/load/model/FileLoader.java
com/bumptech/glide/load/model/ResourceLoader.java
com/bumptech/glide/load/model/StreamEncoder.java
com/bumptech/glide/load/resource/bitmap/BitmapEncoder.java
com/bumptech/glide/load/resource/bitmap/DefaultImageHeaderParser.java
com/bumptech/glide/load/resource/bitmap/Downsampler.java
com/bumptech/glide/load/resource/bitmap/DrawableToBitmapConverter.java
com/bumptech/glide/load/resource/bitmap/HardwareConfigState.java
com/bumptech/glide/load/resource/bitmap/TransformationUtils.java
com/bumptech/glide/load/resource/bitmap/VideoDecoder.java
com/bumptech/glide/load/resource/gif/ByteBufferGifDecoder.java
com/bumptech/glide/load/resource/gif/GifDrawableEncoder.java
com/bumptech/glide/load/resource/gif/StreamGifDecoder.java
com/bumptech/glide/manager/DefaultConnectivityMonitor.java
com/bumptech/glide/manager/DefaultConnectivityMonitorFactory.java
com/bumptech/glide/manager/RequestManagerFragment.java
com/bumptech/glide/manager/RequestManagerRetriever.java
com/bumptech/glide/manager/RequestTracker.java
com/bumptech/glide/manager/SupportRequestManagerFragment.java
com/bumptech/glide/module/ManifestParser.java
com/bumptech/glide/request/SingleRequest.java
com/bumptech/glide/request/target/CustomViewTarget.java
com/bumptech/glide/request/target/ViewTarget.java
com/bumptech/glide/signature/ApplicationVersionSignature.java
com/bumptech/glide/util/ContentLengthInputStream.java
com/bumptech/glide/util/pool/FactoryPools.java
com/bun/miitmdid/core/MdidSdkHelper.java
com/bun/miitmdid/core/Utils.java
com/dcloud/android/downloader/core/DownloadResponseImpl.java
com/dcloud/android/downloader/core/thread/DownloadThread.java
com/dcloud/android/v4/view/ViewCompat.java
com/dcloud/android/v4/view/ViewCompatEclairMr1.java
com/dcloud/android/v4/view/ViewParentCompatLollipop.java
com/dcloud/android/v4/widget/SwipeRefreshLayout.java
com/dmcbig/mediapicker/PreviewActivity.java
com/dmcbig/mediapicker/data/VideoLoader.java
io/dcloud/WebAppActivity.java
io/dcloud/b.java
io/dcloud/common/adapter/ui/AdaFrameView.java
io/dcloud/common/adapter/ui/AdaWebview.java
io/dcloud/common/adapter/ui/webview/WebJsEvent.java
io/dcloud/common/adapter/ui/webview/WebLoadEvent.java
io/dcloud/common/adapter/util/AndroidResources.java
io/dcloud/common/adapter/util/DownloadUtil.java
io/dcloud/common/adapter/util/Logger.java
io/dcloud/common/adapter/util/MobilePhoneModel.java
io/dcloud/common/core/a/a.java
io/dcloud/common/core/ui/a.java
io/dcloud/common/util/ADUtils.java
io/dcloud/common/util/AppConsoleLogUtil.java
io/dcloud/common/util/BaseInfo.java
io/dcloud/common/util/CreateShortResultReceiver.java
io/dcloud/common/util/LoadAppUtils.java
io/dcloud/common/util/net/NetWork.java
io/dcloud/f/a/a.java
io/dcloud/f/a/e.java
io/dcloud/f/d/a.java
io/dcloud/feature/ad/AdSplashUtil.java
io/dcloud/feature/ad/dcloud/SplashADView.java
io/dcloud/feature/barcode2/camera/AutoFocusCallback.java
io/dcloud/feature/barcode2/camera/CameraConfigurationManager.java
io/dcloud/feature/barcode2/camera/FlashlightManager.java
io/dcloud/feature/barcode2/camera/PreviewCallback.java
io/dcloud/feature/barcode2/decoding/CaptureActivityHandler.java
io/dcloud/feature/nativeObj/photoview/subscaleview/SubsamplingScaleImageView.java
io/dcloud/feature/nativeObj/photoview/subscaleview/decoder/SkiaPooledImageRegionDecoder.java
io/dcloud/feature/nativeObj/richtext/RichTextParser.java
io/dcloud/feature/nativeObj/richtext/dom/ImgDomElement.java
io/dcloud/feature/pdr/RuntimeFeatureImpl.java
io/dcloud/feature/pdr/b.java
io/dcloud/feature/ui/c.java
io/dcloud/feature/ui/e.java
io/dcloud/feature/ui/nativeui/NativeUIFeatureImpl.java
io/dcloud/h/b.java
io/dcloud/invocation/a.java
io/dcloud/invocation/c.java
io/dcloud/js/geolocation/a.java
io/dcloud/js/geolocation/system/a.java
io/dcloud/net/JsDownload.java
io/dcloud/net/UploadNetWork.java
io/dcloud/nineoldandroids/animation/PropertyValuesHolder.java
2 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击 高危 CWE: CWE-79: 在Web页面生成时对输入的转义处理不恰当('跨站脚本')
OWASP Top 10: M1: Improper Platform Usage
OWASP MASVS: MSTG-PLATFORM-6
io/dcloud/common/adapter/ui/AdaWebview.java
io/dcloud/common/sonic/SonicSessionClientImpl.java
3 MD5是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-4
com/nostra13/dcloudimageloader/cache/disc/naming/Md5FileNameGenerator.java
4 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 警告 CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当('SQL 注入')
OWASP Top 10: M7: Client Code Quality
5 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等 警告 CWE: CWE-312: 明文存储敏感信息
OWASP Top 10: M9: Reverse Engineering
OWASP MASVS: MSTG-STORAGE-14
6 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据 警告 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2
7 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 警告 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2
com/dmcbig/mediapicker/TakePhotoActivity.java
com/dmcbig/mediapicker/utils/FileUtils.java
8 SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击 高危 CWE: CWE-295: 证书验证不恰当
OWASP Top 10: M3: Insecure Communication
OWASP MASVS: MSTG-NETWORK-3
io/dcloud/common/adapter/util/DCloudTrustManager.java
io/dcloud/i/r.java
9 不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击 高危 CWE: CWE-295: 证书验证不恰当
OWASP Top 10: M3: Insecure Communication
OWASP MASVS: MSTG-NETWORK-3
io/dcloud/WebviewActivity.java
io/dcloud/common/adapter/ui/webview/WebLoadEvent.java
io/dcloud/feature/ad/dcloud/ADWebView.java
10 应用程序使用不安全的随机数生成器 警告 CWE: CWE-330: 使用不充分的随机数
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-6
io/dcloud/i/j.java
11 该文件是World Writable。任何应用程序都可以写入文件 高危 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2
io/dcloud/common/util/TestUtil.java
12 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 安全
OWASP MASVS: MSTG-NETWORK-4
com/nostra13/dcloudimageloader/core/download/BaseImageDownloader.java
io/dcloud/i/m.java
13 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 高危 CWE: CWE-649: 依赖于混淆或加密安全相关输入而不进行完整性检查
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-3
io/dcloud/f/d/a.java
14 SHA-1是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-4
io/dcloud/f/d/a.java
io/dcloud/i/s.java
15 不安全的Web视图实现。可能存在WebView任意代码执行漏洞 警告 CWE: CWE-749: 暴露危险方法或函数
OWASP Top 10: M1: Improper Platform Usage
OWASP MASVS: MSTG-PLATFORM-7
io/dcloud/common/adapter/ui/webview/SysWebView.java
16 WebView域控制不严格漏洞 高危 CWE: CWE-73: 外部控制文件名或路径 io/dcloud/WebviewActivity.java
io/dcloud/common/adapter/ui/webview/SysWebView.java
io/dcloud/feature/ad/dcloud/ADWebView.java
17 该文件是World Readable。任何应用程序都可以读取文件 高危 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2
io/dcloud/common/adapter/util/PermissionUtil.java
18 IP地址泄露 警告 CWE: CWE-200: 信息泄露
OWASP MASVS: MSTG-CODE-2
io/dcloud/common/util/emulator/EmulatorCheckUtil.java

动态库分析

No Shared Objects found.
序号 动态库 NX(堆栈禁止执行) STACK CANARY(栈保护) RELRO RPATH(指定SO搜索路径) RUNPATH(指定SO搜索路径) FORTIFY(常用函数加强检查) SYMBOLS STRIPPED(裁剪符号表)

文件分析

序号 问题 文件

VIRUSTOTAL扫描

  检出率: 1 / 62       完整报告

反病毒引擎 检出结果
Trustlook Android.Malware.General (score:7)

滥用权限

恶意软件常用权限 10/30
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.CALL_PHONE
android.permission.CAMERA
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.READ_PHONE_STATE
其它常用权限 7/46
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.FLASHLIGHT
android.permission.READ_EXTERNAL_STORAGE

恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。

IP地图

域名检测

域名 状态 中国境内 位置信息 解析
ask.dcloud.net.cn 安全
IP地址: 58.216.6.113
国家: China
地区: Jiangsu
城市: Changzhou
查看: 高德地图





stream.dcloud.net.cn 安全
IP地址: 124.220.154.50
国家: China
地区: Beijing
城市: Beijing
查看: 高德地图





96f0e031-f37a-48ef-84c7-2023f6360c0a.bspapp.com 安全
没有可用的地理位置信息。




stream.mobihtml5.com 安全
IP地址: 23.27.132.60
国家: United States of America
地区: California
城市: Santa Clara
查看: Google 地图





www.dcloud.io 安全
IP地址: 122.224.48.93
国家: China
地区: Zhejiang
城市: Shaoxing
查看: 高德地图





service.dcloud.net.cn 安全
IP地址: 111.229.199.57
国家: China
地区: Beijing
城市: Beijing
查看: 高德地图





m3w.cn 安全
IP地址: 61.170.44.188
国家: China
地区: Shanghai
城市: Shanghai
查看: 高德地图





手机号码

网址

网址信息 源码文件
https://www.t543143as.com/packzh_cn
自研引擎分析结果
data:text/html,
javascript:var
javascript:(function(){var
io/dcloud/common/adapter/ui/AdaWebview.java
javascript:(function(){var
javascript:settimeout(function(){location.__page__load__over__
data:text/html,chromewebdata
io/dcloud/common/adapter/ui/webview/WebLoadEvent.java
4.5.4.1
4.5.4.2
io/dcloud/common/adapter/util/MobilePhoneModel.java
javascript:(function(){if(!((window.__html5plus__&&__html5plus__.isready)?__html5plus__:(navigator.plus&&navigator.plus.isready)?navigator.plus:window.plus)){window.__load__plus__&&window.__load__plus__();}var
io/dcloud/common/constant/AbsoluteConst.java
http://ask.dcloud.net.cn/article/282
https://ask.dcloud.net.cn/article/36199
io/dcloud/common/constant/DOMException.java
https://stream.mobihtml5.com/
https://stream.dcloud.net.cn/
io/dcloud/common/constant/StringConst.java
javascript:(function(){if(!((window.__html5plus__&&__html5plus__.isready)?__html5plus__:(navigator.plus&&navigator.plus.isready)?navigator.plus:window.plus)){window.__load__plus__&&window.__load__plus__();}var
io/dcloud/common/core/ui/DCKeyboardManager.java
javascript:window.__neednotifynative__=true;
io/dcloud/common/core/ui/g.java
http://m3w.cn/s/
http://www.dcloud.io/streamapp/streamapp.apk
io/dcloud/common/util/ShortCutUtil.java
http://ask.dcloud.net.cn/article/35627
https://ask.dcloud.net.cn/article/35877
io/dcloud/f/a/a.java
https://service.dcloud.net.cn/sta/so?p=a&pn=%s&ver=%s&appid=%s
io/dcloud/f/b/c.java
https://service.dcloud.net.cn/pdz
https://96f0e031-f37a-48ef-84c7-2023f6360c0a.bspapp.com/http/rewarded-video/report?p=a&t=
io/dcloud/f/b/e/a.java
https://96f0e031-f37a-48ef-84c7-2023f6360c0a.bspapp.com/http/splash-screen/report
io/dcloud/feature/ad/dcloud/ADHandler.java
http://ask.dcloud.net.cn/article/35058
io/dcloud/feature/audio/AudioRecorderMgr.java
file://%s',
io/dcloud/feature/nativeObj/NativeBitmapMgr.java
file://%s',
io/dcloud/feature/pdr/a.java
http://ask.dcloud.net.cn/article/283
io/dcloud/h/b.java
data:find
data:sessionid(
io/dcloud/i/s.java
data:%s;base64,%s
io/dcloud/js/file/FileFeatureImpl.java
http://ask.dcloud.net.cn/article/287
io/dcloud/share/IFShareApi.java
javascript:var
javascript:(function(){var
https://service.dcloud.net.cn/pdz
https://stream.mobihtml5.com/
4.5.4.1
data:sessionid(
http://ask.dcloud.net.cn/article/35058
https://96f0e031-f37a-48ef-84c7-2023f6360c0a.bspapp.com/http/rewarded-video/report?p=a&t=
https://ask.dcloud.net.cn/article/35877
data:text/html,
data:%s;base64,%s
javascript:(function(){if(!((window.__html5plus__&&__html5plus__.isready)?__html5plus__:(navigator.plus&&navigator.plus.isready)?navigator.plus:window.plus)){window.__load__plus__&&window.__load__plus__();}var
http://ask.dcloud.net.cn/article/287
https://stream.dcloud.net.cn/
4.5.4.2
http://www.dcloud.io/streamapp/streamapp.apk
https://service.dcloud.net.cn/sta/so?p=a&pn=%s&ver=%s&appid=%s
http://ask.dcloud.net.cn/article/283
http://ask.dcloud.net.cn/article/282
javascript:settimeout(function(){location.__page__load__over__
https://ask.dcloud.net.cn/article/36199
data:find
file://%s',
javascript:window.__neednotifynative__=true;
http://m3w.cn/s/
data:text/html,chromewebdata
https://96f0e031-f37a-48ef-84c7-2023f6360c0a.bspapp.com/http/splash-screen/report
http://ask.dcloud.net.cn/article/35627
自研引擎分析结果

FIREBASE实例

邮箱

追踪器

名称 类别 网址

密钥凭证

已显示 39 个secrets
1、 DCLOUD的 "DCLOUD_AD_ID" : "1.25677257E11"
2、 DCLOUD的 "CHANNEL" : "common"
3、 DCLOUD的 "ApplicationId" : "plus.BAIRUIXINTUODFdf45gdh"
4、 DCLOUD的 "DCLOUD_STREAMAPP_CHANNEL" : "plus.BAIRUIXINTUODFdf45gdh|H51F32E74|125677260403|common"
5、 DCLOUD的 "APPID" : "H51F32E74"
6、 DCLOUD的 "AD_ID" : "125677260403"
7、 258EAFA5-E914-47DA-95CA-C5AB0DC85B11
8、 2BGSU2QqUAXYXuDA9OkD2SztJLGWMXqJb5xjvxk4w6dV7K0u
9、 YHx8eHsyJyc8bTFqOGowaSU4bDw8JTw6bmwlMTA7bCU6P2wxMTlsbGw6Ozomant4aXh4JmtnZSdgfHx4J2tpaQ==
10、 YHx8eHsyJydpbjxqO24+PCUxbG45JTxqamwlMT45PSU9OmwxbGw7aztubGomant4aXh4JmtnZSdgfHx4J2lr
11、 YHx8eHsyJydrO2k/Pzs7OCU7a207JTw5Pm0lMWowOSU9Pzk4aT9tbjhtaj8mant4aXh4JmtnZSdgfHx4J3hscg==
12、 YHx8eHsyJydpazombGtkZ31sJmZtfCZrZidpbH5tenwnfGBhemxLZ2ZuYW8=
13、 CEroA9kVcgb5YW85GtDBLrVZfsAsUrOdkBRjB/Uh1+E=
14、 YHx8eHsyJydpazkmbGtkZ31sJmZtfCZrZidpbH5tenwne3hkaXtg
15、 5rPjudJDczZ5DrTBECwfWTgDdS2gcsFO81sUMHkOFd8+11U2ZJ6oEJjGrCWFZqzY
16、 YHx8eHsyJydpezombGtkZ31sJmZtfCZrZidrZ2RkbWt8J3hkfXtpeHgnaWt8YWdm
17、 evs6OIME2yLCyUChqtQTGtxDh4/6wcSpdRw8lh8NGkyLXZQtZ1A7NDehilU2yXH5
18、 amwtZ2BvbHZnLWBsbm5sbS1gcC1HTyo2YTNkODhmYS00YmEwLTQ3OWYtOTQyMi1lNWFhYmUxNTg5N2I2Nw==
19、 W3v2HgaLzgcTXlUiOoZ7E6RDsIpMd2Glz1MxJdRxdis
20、 5rPjudJDczZ5DrTBECwfWbr6jIGaA05lJJ4z8IfXa1gko92nDYCi7GietE6VgZMY
21、 YHx8eHsyJydpazombGtkZ31sJmZtfCZrZidpbH5tenwne3hkaXtg
22、 YHx8eHsyJydpbjxqO24+PCUxbG45JTxqamwlMT45PSU9OmwxbGw7aztubGomant4aXh4JmtnZSdgfHx4J2l7
23、 YHx8eHsyJydrO2k/Pzs7OCU7a207JTw5Pm0lMWowOSU9Pzk4aT9tbjhtaj8mant4aXh4JmtnZSdgfHx4J2tpew==
24、 Y29tLmFuZHJvaWQuaW50ZXJuYWwuUiRzdHlsZWFibGU=
25、 YHx8eHsyJyd8OiZsa2RnfWwmZm18JmtmJ2tnZGRta3wneGR9e2l4eCdpa3xhZ2Y=
26、 YHx8eHsyJyd8OSZsa2RnfWwmZm18JmtmJ2tnZGRta3wneGR9e2l4eCdpa3xhZ2Y=
27、 5rPjudJDczZ5DrTBECwfWZpHpwkanLRAUH9zESvTX1gd/3FRL1fG+sFe1kf2pwVg
28、 NcnBDcMwCEDRXThXDJBtSKAWiQErjtVWVXcvB0f60j+8L1wrLLCF4UWxUszBA3aesKsXDi9IraFRrYmNb30PN0ls6jwiS+XPxN6RnM9QxlE2pJeYpB/9dtMqWPRpdMgJvz8=
29、 amwtZ2BvbHZnLWVmYnd2cWYtYGUtYEVmYnd2cWZKbnNvKjZhM2Q4OGZhLTRiYTAtNDc5Zi05NDIyLWU1YWFiZTE1ODk3YjY3
30、 5rPjudJDczZ5DrTBECwfWer9fxhAWnoxI7Hr0jS/XKKlD9cg1eZLP+WDaj1U0IQ9
31、 YHx8eHsyJydrOSZsa2RnfWwmZm18JmtmJ2tnZGRta3wneGR9e2l4eCdraWw=
32、 p2WH3ao/DPQajXDOBOngAQRJy7HFI6I+rNVrL72Tvjg=
33、 YHx8eHsyJyd7OiZsa2RnfWwmZm18JmtmJ3hscg==
34、 96f0e031-f37a-48ef-84c7-2023f6360c0a
35、 YHx8eHsyJyd7OSZsa2RnfWwmZm18JmtmJ3hscg==
36、 YHx8eHsyJydpezkmbGtkZ31sJmZtfCZrZidrZ2RkbWt8J3hkfXtpeHgnaWt8YWdm
37、 YHx8eHsyJydpazkmbGtkZ31sJmZtfCZrZidpbH5tenwnfGBhemxLZ2ZuYW8=
38、 YHx8eHsyJyd7OiZsa2RnfWwmZm18JmtmJ2tnZGRta3wneGR9e2l4eCd7fGl6fH14
39、 YHx8eHsyJyd7OSZsa2RnfWwmZm18JmtmJ2tnZGRta3wneGR9e2l4eCd7fGl6fH14

字符串列表

建议导出为TXT,方便查看。

活动列表

已显示 9 个activities
1、 io.dcloud.PandoraEntry
2、 io.dcloud.PandoraEntryActivity
3、 io.dcloud.imagepick.CustomGalleryActivity
4、 io.dcloud.feature.nativeObj.photoview.PhotoActivity
5、 io.dcloud.WebAppActivity
6、 io.dcloud.ProcessMediator
7、 io.dcloud.WebviewActivity
8、 com.dmcbig.mediapicker.PickerActivity
9、 com.dmcbig.mediapicker.PreviewActivity

服务列表

已显示 1 个services
1、 io.dcloud.common.adapter.io.MiniServerService

广播接收者列表

已显示 2 个receivers
1、 io.dcloud.common.adapter.io.PushReceiver
2、 io.dcloud.common.adapter.io.DownloadReceiver

内容提供者列表

已显示 1 个providers
1、 io.dcloud.common.util.DCloud_FileProvider

第三方SDK

SDK名称 开发者 描述信息
MSA SDK 移动安全联盟 移动智能终端补充设备标识体系统一调用 SDK 由中国信息通信研究院泰尔终端实验室、移动安全联盟整合提供,知识产权归中国信息通信研究院所有。
android-gif-drawable koral-- android-gif-drawable 是在 Android 上显示动画 GIF 的绘制库。
File Provider Android FileProvider 是 ContentProvider 的特殊子类,它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。

文件列表

AndroidManifest.xml
classes.dex
lib/arm64-v8a/lib39285EFA.so
lib/arm64-v8a/libpl_droidsonroids_gif.so
lib/armeabi-v7a/lib39285EFA.so
lib/armeabi-v7a/libpl_droidsonroids_gif.so
lib/x86/lib39285EFA.so
lib/x86/libpl_droidsonroids_gif.so
res/anim/abc_fade_in.xml
res/anim/abc_fade_out.xml
res/anim/abc_grow_fade_in_from_bottom.xml
res/anim/abc_popup_enter.xml
res/anim/abc_popup_exit.xml
res/anim/abc_shrink_fade_out_from_bottom.xml
res/anim/abc_slide_in_bottom.xml
res/anim/abc_slide_in_top.xml
res/anim/abc_slide_out_bottom.xml
res/anim/abc_slide_out_top.xml
res/anim/dcloud_page_close_enter.xml
res/anim/dcloud_page_close_exit.xml
res/anim/dcloud_page_open_enter.xml
res/anim/dcloud_page_open_exit.xml
res/anim/dcloud_slide_in_from_right.xml
res/anim/dcloud_slide_in_from_top.xml
res/anim/dcloud_slide_out_to_right.xml
res/anim/dcloud_slide_out_to_top.xml
res/anim/dcloud_slide_right_in.xml
res/anim/dcloud_slide_right_out.xml
res/anim/dcloud_slide_static.xml
res/anim/tooltip_enter.xml
res/anim/tooltip_exit.xml
res/color/abc_background_cache_hint_selector_material_dark.xml
res/color/abc_background_cache_hint_selector_material_light.xml
res/color/abc_btn_colored_borderless_text_material.xml
res/color/abc_btn_colored_text_material.xml
res/color/abc_hint_foreground_material_dark.xml
res/color/abc_hint_foreground_material_light.xml
res/color/abc_primary_text_disable_only_material_dark.xml
res/color/abc_primary_text_disable_only_material_light.xml
res/color/abc_primary_text_material_dark.xml
res/color/abc_primary_text_material_light.xml
res/color/abc_search_url_text.xml
res/color/abc_secondary_text_material_dark.xml
res/color/abc_secondary_text_material_light.xml
res/color/abc_tint_btn_checkable.xml
res/color/abc_tint_default.xml
res/color/abc_tint_edittext.xml
res/color/abc_tint_seek_thumb.xml
res/color/abc_tint_spinner.xml
res/color/abc_tint_switch_track.xml
res/color/dcloud_gallery_default_text_color.xml
res/color/dcloud_slt_about_text_color.xml
res/color/switch_thumb_material_dark.xml
res/color/switch_thumb_material_light.xml
res/color-v23/abc_btn_colored_borderless_text_material.xml
res/color-v23/abc_btn_colored_text_material.xml
res/color-v23/abc_color_highlight_material.xml
res/color-v23/abc_tint_btn_checkable.xml
res/color-v23/abc_tint_default.xml
res/color-v23/abc_tint_edittext.xml
res/color-v23/abc_tint_seek_thumb.xml
res/color-v23/abc_tint_spinner.xml
res/color-v23/abc_tint_switch_track.xml
res/drawable/abc_btn_borderless_material.xml
res/drawable/abc_btn_check_material.xml
res/drawable/abc_btn_colored_material.xml
res/drawable/abc_btn_default_mtrl_shape.xml
res/drawable/abc_btn_radio_material.xml
res/drawable/abc_cab_background_internal_bg.xml
res/drawable/abc_cab_background_top_material.xml
res/drawable/abc_dialog_material_background.xml
res/drawable/abc_edit_text_material.xml
res/drawable/abc_ic_ab_back_material.xml
res/drawable/abc_ic_arrow_drop_right_black_24dp.xml
res/drawable/abc_ic_clear_material.xml
res/drawable/abc_ic_go_search_api_material.xml
res/drawable/abc_ic_menu_overflow_material.xml
res/drawable/abc_ic_search_api_material.xml
res/drawable/abc_ic_voice_search_api_material.xml
res/drawable/abc_item_background_holo_dark.xml
res/drawable/abc_item_background_holo_light.xml
res/drawable/abc_list_selector_background_transition_holo_dark.xml
res/drawable/abc_list_selector_background_transition_holo_light.xml
res/drawable/abc_list_selector_holo_dark.xml
res/drawable/abc_list_selector_holo_light.xml
res/drawable/abc_ratingbar_indicator_material.xml
res/drawable/abc_ratingbar_material.xml
res/drawable/abc_ratingbar_small_material.xml
res/drawable/abc_seekbar_thumb_material.xml
res/drawable/abc_seekbar_tick_mark_material.xml
res/drawable/abc_seekbar_track_material.xml
res/drawable/abc_spinner_textfield_background_material.xml
res/drawable/abc_switch_thumb_material.xml
res/drawable/abc_tab_indicator_material.xml
res/drawable/abc_textfield_search_material.xml
res/drawable/abc_text_cursor_material.xml
res/drawable/abc_vector_test.xml
res/drawable/ad_dcloud_main_ad_tag.xml
res/drawable/ad_dcloud_main_skip_bg.xml
res/drawable/ad_dcloud_main_skip_shape.xml
res/drawable/ak_layer_ad_bg.xml
res/drawable/ak_layer_ad_btn.xml
res/drawable/dcloud_about_buttons_bg.xml
res/drawable/dcloud_about_buttons_button_bg.xml
res/drawable/dcloud_debug_shape.xml
res/drawable/dcloud_dialog_shape.xml
res/drawable/dcloud_dialog_shape_bg.xml
res/drawable/dcloud_gallery_action_btn.xml
res/drawable/dcloud_gallery_btn_selected.png
res/drawable/dcloud_gallery_btn_unselected.png
res/drawable/dcloud_gallery_ic_back.png
res/drawable/dcloud_longding_bg.xml
res/drawable/dcloud_point_dd524d.xml
res/drawable/dcloud_point_f32720.xml
res/drawable/dcloud_shortcut_guide_huawei.gif
res/drawable/dcloud_shortcut_guide_meizu.gif
res/drawable/dcloud_shortcut_guide_xiaomi.gif
res/drawable/dcloud_slt_as_ios7_cancel_bt.xml
res/drawable/dcloud_slt_as_ios7_other_bt_bottom.xml
res/drawable/dcloud_slt_as_ios7_other_bt_middle.xml
res/drawable/dcloud_slt_as_ios7_other_bt_single.xml
res/drawable/dcloud_slt_as_ios7_other_bt_title.xml
res/drawable/dcloud_slt_as_ios7_other_bt_top.xml
res/drawable/dcloud_streamapp_about_first_start_short_cut_checkbox.xml
res/drawable/dcloud_tabbar_badge.xml
res/drawable/dcloud_tabbar_dot.xml
res/drawable/dcloud_webview_activity_title_bg.xml
res/drawable/notification_bg.xml
res/drawable/notification_bg_low.xml
res/drawable/notification_icon_background.xml
res/drawable/notification_tile_bg.xml
res/drawable/toast_bg.xml
res/drawable/tooltip_frame_dark.xml
res/drawable/tooltip_frame_light.xml
res/drawable-hdpi/abc_ab_share_pack_mtrl_alpha.9.png
res/drawable-hdpi/abc_btn_check_to_on_mtrl_000.png
res/drawable-hdpi/abc_btn_check_to_on_mtrl_015.png
res/drawable-hdpi/abc_btn_radio_to_on_mtrl_000.png
res/drawable-hdpi/abc_btn_radio_to_on_mtrl_015.png
res/drawable-hdpi/abc_btn_switch_to_on_mtrl_00001.9.png
res/drawable-hdpi/abc_btn_switch_to_on_mtrl_00012.9.png
res/drawable-hdpi/abc_cab_background_top_mtrl_alpha.9.png
res/drawable-hdpi/abc_ic_commit_search_api_mtrl_alpha.png
res/drawable-hdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-hdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-hdpi/abc_ic_menu_paste_mtrl_am_alpha.png
res/drawable-hdpi/abc_ic_menu_selectall_mtrl_alpha.png
res/drawable-hdpi/abc_ic_menu_share_mtrl_alpha.png
res/drawable-hdpi/abc_ic_star_black_16dp.png
res/drawable-hdpi/abc_ic_star_black_36dp.png
res/drawable-hdpi/abc_ic_star_black_48dp.png
res/drawable-hdpi/abc_ic_star_half_black_16dp.png
res/drawable-hdpi/abc_ic_star_half_black_36dp.png
res/drawable-hdpi/abc_ic_star_half_black_48dp.png
res/drawable-hdpi/abc_list_divider_mtrl_alpha.9.png
res/drawable-hdpi/abc_list_focused_holo.9.png
res/drawable-hdpi/abc_list_longpressed_holo.9.png
res/drawable-hdpi/abc_list_pressed_holo_dark.9.png
res/drawable-hdpi/abc_list_pressed_holo_light.9.png
res/drawable-hdpi/abc_list_selector_disabled_holo_dark.9.png
res/drawable-hdpi/abc_list_selector_disabled_holo_light.9.png
res/drawable-hdpi/abc_menu_hardkey_panel_mtrl_mult.9.png
res/drawable-hdpi/abc_popup_background_mtrl_mult.9.png
res/drawable-hdpi/abc_scrubber_control_off_mtrl_alpha.png
res/drawable-hdpi/abc_scrubber_control_to_pressed_mtrl_000.png
res/drawable-hdpi/abc_scrubber_control_to_pressed_mtrl_005.png
res/drawable-hdpi/abc_scrubber_primary_mtrl_alpha.9.png
res/drawable-hdpi/abc_scrubber_track_mtrl_alpha.9.png
res/drawable-hdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-hdpi/abc_switch_track_mtrl_alpha.9.png
res/drawable-hdpi/abc_tab_indicator_mtrl_alpha.9.png
res/drawable-hdpi/abc_textfield_activated_mtrl_alpha.9.png
res/drawable-hdpi/abc_textfield_default_mtrl_alpha.9.png
res/drawable-hdpi/abc_textfield_search_activated_mtrl_alpha.9.png
res/drawable-hdpi/abc_textfield_search_default_mtrl_alpha.9.png
res/drawable-hdpi/abc_text_select_handle_left_mtrl_dark.png
res/drawable-hdpi/abc_text_select_handle_left_mtrl_light.png
res/drawable-hdpi/abc_text_select_handle_middle_mtrl_dark.png
res/drawable-hdpi/abc_text_select_handle_middle_mtrl_light.png
res/drawable-hdpi/abc_text_select_handle_right_mtrl_dark.png
res/drawable-hdpi/abc_text_select_handle_right_mtrl_light.png
res/drawable-hdpi/dcloud_assistan_loc.png
res/drawable-hdpi/dcloud_circle_black_progress.xml
res/drawable-hdpi/dcloud_circle_white_progress.xml
res/drawable-hdpi/dcloud_left_arrow.png
res/drawable-hdpi/dcloud_record_border.xml
res/drawable-hdpi/dcloud_record_view_line.png
res/drawable-hdpi/dcloud_right_arrow.png
res/drawable-hdpi/dcloud_shadow_left.png
res/drawable-hdpi/dcloud_snow_black.png
res/drawable-hdpi/dcloud_snow_black_progress.xml
res/drawable-hdpi/dcloud_snow_white.png
res/drawable-hdpi/dcloud_snow_white_progress.xml
res/drawable-hdpi/icon.png
res/drawable-hdpi/notification_bg_low_normal.9.png
res/drawable-hdpi/notification_bg_low_pressed.9.png
res/drawable-hdpi/notification_bg_normal.9.png
res/drawable-hdpi/notification_bg_normal_pressed.9.png
res/drawable-hdpi/notify_panel_notification_icon_bg.png
res/drawable-hdpi/splash.png
res/drawable-ldrtl-hdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-ldrtl-hdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-ldrtl-hdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-ldrtl-mdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-ldrtl-mdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-ldrtl-mdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-ldrtl-xhdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-ldrtl-xhdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-ldrtl-xhdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-ldrtl-xxhdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-ldrtl-xxhdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-ldrtl-xxhdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-ldrtl-xxxhdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-ldrtl-xxxhdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-ldrtl-xxxhdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-mdpi/abc_ab_share_pack_mtrl_alpha.9.png
res/drawable-mdpi/abc_btn_check_to_on_mtrl_000.png
res/drawable-mdpi/abc_btn_check_to_on_mtrl_015.png
res/drawable-mdpi/abc_btn_radio_to_on_mtrl_000.png
res/drawable-mdpi/abc_btn_radio_to_on_mtrl_015.png
res/drawable-mdpi/abc_btn_switch_to_on_mtrl_00001.9.png
res/drawable-mdpi/abc_btn_switch_to_on_mtrl_00012.9.png
res/drawable-mdpi/abc_cab_background_top_mtrl_alpha.9.png
res/drawable-mdpi/abc_ic_commit_search_api_mtrl_alpha.png
res/drawable-mdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-mdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-mdpi/abc_ic_menu_paste_mtrl_am_alpha.png
res/drawable-mdpi/abc_ic_menu_selectall_mtrl_alpha.png
res/drawable-mdpi/abc_ic_menu_share_mtrl_alpha.png
res/drawable-mdpi/abc_ic_star_black_16dp.png
res/drawable-mdpi/abc_ic_star_black_36dp.png
res/drawable-mdpi/abc_ic_star_black_48dp.png
res/drawable-mdpi/abc_ic_star_half_black_16dp.png
res/drawable-mdpi/abc_ic_star_half_black_36dp.png
res/drawable-mdpi/abc_ic_star_half_black_48dp.png
res/drawable-mdpi/abc_list_divider_mtrl_alpha.9.png
res/drawable-mdpi/abc_list_focused_holo.9.png
res/drawable-mdpi/abc_list_longpressed_holo.9.png
res/drawable-mdpi/abc_list_pressed_holo_dark.9.png
res/drawable-mdpi/abc_list_pressed_holo_light.9.png
res/drawable-mdpi/abc_list_selector_disabled_holo_dark.9.png
res/drawable-mdpi/abc_list_selector_disabled_holo_light.9.png
res/drawable-mdpi/abc_menu_hardkey_panel_mtrl_mult.9.png
res/drawable-mdpi/abc_popup_background_mtrl_mult.9.png
res/drawable-mdpi/abc_scrubber_control_off_mtrl_alpha.png
res/drawable-mdpi/abc_scrubber_control_to_pressed_mtrl_000.png
res/drawable-mdpi/abc_scrubber_control_to_pressed_mtrl_005.png
res/drawable-mdpi/abc_scrubber_primary_mtrl_alpha.9.png
res/drawable-mdpi/abc_scrubber_track_mtrl_alpha.9.png
res/drawable-mdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-mdpi/abc_switch_track_mtrl_alpha.9.png
res/drawable-mdpi/abc_tab_indicator_mtrl_alpha.9.png
res/drawable-mdpi/abc_textfield_activated_mtrl_alpha.9.png
res/drawable-mdpi/abc_textfield_default_mtrl_alpha.9.png
res/drawable-mdpi/abc_textfield_search_activated_mtrl_alpha.9.png
res/drawable-mdpi/abc_textfield_search_default_mtrl_alpha.9.png
res/drawable-mdpi/abc_text_select_handle_left_mtrl_dark.png
res/drawable-mdpi/abc_text_select_handle_left_mtrl_light.png
res/drawable-mdpi/abc_text_select_handle_middle_mtrl_dark.png
res/drawable-mdpi/abc_text_select_handle_middle_mtrl_light.png
res/drawable-mdpi/abc_text_select_handle_right_mtrl_dark.png
res/drawable-mdpi/abc_text_select_handle_right_mtrl_light.png
res/drawable-mdpi/notification_bg_low_normal.9.png
res/drawable-mdpi/notification_bg_low_pressed.9.png
res/drawable-mdpi/notification_bg_normal.9.png
res/drawable-mdpi/notification_bg_normal_pressed.9.png
res/drawable-mdpi/notify_panel_notification_icon_bg.png
res/drawable-v21/abc_action_bar_item_background_material.xml
res/drawable-v21/abc_btn_colored_material.xml
res/drawable-v21/abc_edit_text_material.xml
res/drawable-v21/abc_ratingbar_indicator_material.xml
res/drawable-v21/abc_ratingbar_material.xml
res/drawable-v21/abc_ratingbar_small_material.xml
res/drawable-v21/notification_action_background.xml
res/drawable-v23/abc_control_background_material.xml
res/drawable-xhdpi/abc_ab_share_pack_mtrl_alpha.9.png
res/drawable-xhdpi/abc_btn_check_to_on_mtrl_000.png
res/drawable-xhdpi/abc_btn_check_to_on_mtrl_015.png
res/drawable-xhdpi/abc_btn_radio_to_on_mtrl_000.png
res/drawable-xhdpi/abc_btn_radio_to_on_mtrl_015.png
res/drawable-xhdpi/abc_btn_switch_to_on_mtrl_00001.9.png
res/drawable-xhdpi/abc_btn_switch_to_on_mtrl_00012.9.png
res/drawable-xhdpi/abc_cab_background_top_mtrl_alpha.9.png
res/drawable-xhdpi/abc_ic_commit_search_api_mtrl_alpha.png
res/drawable-xhdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-xhdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-xhdpi/abc_ic_menu_paste_mtrl_am_alpha.png
res/drawable-xhdpi/abc_ic_menu_selectall_mtrl_alpha.png
res/drawable-xhdpi/abc_ic_menu_share_mtrl_alpha.png
res/drawable-xhdpi/abc_ic_star_black_16dp.png
res/drawable-xhdpi/abc_ic_star_black_36dp.png
res/drawable-xhdpi/abc_ic_star_black_48dp.png
res/drawable-xhdpi/abc_ic_star_half_black_16dp.png
res/drawable-xhdpi/abc_ic_star_half_black_36dp.png
res/drawable-xhdpi/abc_ic_star_half_black_48dp.png
res/drawable-xhdpi/abc_list_divider_mtrl_alpha.9.png
res/drawable-xhdpi/abc_list_focused_holo.9.png
res/drawable-xhdpi/abc_list_longpressed_holo.9.png
res/drawable-xhdpi/abc_list_pressed_holo_dark.9.png
res/drawable-xhdpi/abc_list_pressed_holo_light.9.png
res/drawable-xhdpi/abc_list_selector_disabled_holo_dark.9.png
res/drawable-xhdpi/abc_list_selector_disabled_holo_light.9.png
res/drawable-xhdpi/abc_menu_hardkey_panel_mtrl_mult.9.png
res/drawable-xhdpi/abc_popup_background_mtrl_mult.9.png
res/drawable-xhdpi/abc_scrubber_control_off_mtrl_alpha.png
res/drawable-xhdpi/abc_scrubber_control_to_pressed_mtrl_000.png
res/drawable-xhdpi/abc_scrubber_control_to_pressed_mtrl_005.png
res/drawable-xhdpi/abc_scrubber_primary_mtrl_alpha.9.png
res/drawable-xhdpi/abc_scrubber_track_mtrl_alpha.9.png
res/drawable-xhdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-xhdpi/abc_switch_track_mtrl_alpha.9.png
res/drawable-xhdpi/abc_tab_indicator_mtrl_alpha.9.png
res/drawable-xhdpi/abc_textfield_activated_mtrl_alpha.9.png
res/drawable-xhdpi/abc_textfield_default_mtrl_alpha.9.png
res/drawable-xhdpi/abc_textfield_search_activated_mtrl_alpha.9.png
res/drawable-xhdpi/abc_textfield_search_default_mtrl_alpha.9.png
res/drawable-xhdpi/abc_text_select_handle_left_mtrl_dark.png
res/drawable-xhdpi/abc_text_select_handle_left_mtrl_light.png
res/drawable-xhdpi/abc_text_select_handle_middle_mtrl_dark.png
res/drawable-xhdpi/abc_text_select_handle_middle_mtrl_light.png
res/drawable-xhdpi/abc_text_select_handle_right_mtrl_dark.png
res/drawable-xhdpi/abc_text_select_handle_right_mtrl_light.png
res/drawable-xhdpi/dcloud_actionsheet_bottom_normal.9.png
res/drawable-xhdpi/dcloud_actionsheet_bottom_pressed.9.png
res/drawable-xhdpi/dcloud_actionsheet_middle_normal.9.png
res/drawable-xhdpi/dcloud_actionsheet_middle_pressed.9.png
res/drawable-xhdpi/dcloud_actionsheet_single_normal.9.png
res/drawable-xhdpi/dcloud_actionsheet_single_pressed.9.png
res/drawable-xhdpi/dcloud_actionsheet_top_normal.9.png
res/drawable-xhdpi/dcloud_actionsheet_top_pressed.9.png
res/drawable-xhdpi/dcloud_as_bg_ios6.9.png
res/drawable-xhdpi/dcloud_as_cancel_bt_bg.9.png
res/drawable-xhdpi/dcloud_as_other_bt_bg.9.png
res/drawable-xhdpi/dcloud_gallery_default_check.png
res/drawable-xhdpi/dcloud_gallery_default_image.png
res/drawable-xhdpi/dcloud_gallery_text_indicator.png
res/drawable-xhdpi/dcloud_gallery_video.png
res/drawable-xhdpi/dcloud_recent.png
res/drawable-xhdpi/dcloud_streamapp_about_feedback.png
res/drawable-xhdpi/dcloud_streamapp_about_first_start_short_cut_cheked.png
res/drawable-xhdpi/dcloud_streamapp_about_first_start_short_cut_normal.png
res/drawable-xhdpi/dcloud_streamapp_about_right_arrow.png
res/drawable-xhdpi/dcloud_streamapp_about_share.png
res/drawable-xhdpi/dcloud_streamapp_about_update.png
res/drawable-xhdpi/dcloud_streamapp_icon.png
res/drawable-xhdpi/dcloud_streamapp_icon_appdefault.png
res/drawable-xhdpi/icon.png
res/drawable-xhdpi/notification_bg_low_normal.9.png
res/drawable-xhdpi/notification_bg_low_pressed.9.png
res/drawable-xhdpi/notification_bg_normal.9.png
res/drawable-xhdpi/notification_bg_normal_pressed.9.png
res/drawable-xhdpi/notify_panel_notification_icon_bg.png
res/drawable-xhdpi/offline_pin.png
res/drawable-xhdpi/offline_pin_round.png
res/drawable-xhdpi/shortcut_permission_guide_bg.9.png
res/drawable-xhdpi/shortcut_permission_guide_close.png
res/drawable-xhdpi/shortcut_permission_guide_play.png
res/drawable-xhdpi/sidebar_shortcut.png
res/drawable-xhdpi/side_bar_bg.9.png
res/drawable-xhdpi/side_bar_close.png
res/drawable-xhdpi/side_bar_closebar.png
res/drawable-xhdpi/side_bar_custom_menu_item_bg.9.png
res/drawable-xhdpi/side_bar_custom_menu_item_line.9.png
res/drawable-xhdpi/side_bar_custom_menu_item_selected.png
res/drawable-xhdpi/side_bar_favorite.png
res/drawable-xhdpi/side_bar_home.png
res/drawable-xhdpi/side_bar_openbar.png
res/drawable-xhdpi/side_bar_refresh.png
res/drawable-xhdpi/side_bar_share.png
res/drawable-xhdpi/splash.png
res/drawable-xxhdpi/abc_ab_share_pack_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_btn_check_to_on_mtrl_000.png
res/drawable-xxhdpi/abc_btn_check_to_on_mtrl_015.png
res/drawable-xxhdpi/abc_btn_radio_to_on_mtrl_000.png
res/drawable-xxhdpi/abc_btn_radio_to_on_mtrl_015.png
res/drawable-xxhdpi/abc_btn_switch_to_on_mtrl_00001.9.png
res/drawable-xxhdpi/abc_btn_switch_to_on_mtrl_00012.9.png
res/drawable-xxhdpi/abc_cab_background_top_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_ic_commit_search_api_mtrl_alpha.png
res/drawable-xxhdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-xxhdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-xxhdpi/abc_ic_menu_paste_mtrl_am_alpha.png
res/drawable-xxhdpi/abc_ic_menu_selectall_mtrl_alpha.png
res/drawable-xxhdpi/abc_ic_menu_share_mtrl_alpha.png
res/drawable-xxhdpi/abc_ic_star_black_16dp.png
res/drawable-xxhdpi/abc_ic_star_black_36dp.png
res/drawable-xxhdpi/abc_ic_star_black_48dp.png
res/drawable-xxhdpi/abc_ic_star_half_black_16dp.png
res/drawable-xxhdpi/abc_ic_star_half_black_36dp.png
res/drawable-xxhdpi/abc_ic_star_half_black_48dp.png
res/drawable-xxhdpi/abc_list_divider_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_list_focused_holo.9.png
res/drawable-xxhdpi/abc_list_longpressed_holo.9.png
res/drawable-xxhdpi/abc_list_pressed_holo_dark.9.png
res/drawable-xxhdpi/abc_list_pressed_holo_light.9.png
res/drawable-xxhdpi/abc_list_selector_disabled_holo_dark.9.png
res/drawable-xxhdpi/abc_list_selector_disabled_holo_light.9.png
res/drawable-xxhdpi/abc_menu_hardkey_panel_mtrl_mult.9.png
res/drawable-xxhdpi/abc_popup_background_mtrl_mult.9.png
res/drawable-xxhdpi/abc_scrubber_control_off_mtrl_alpha.png
res/drawable-xxhdpi/abc_scrubber_control_to_pressed_mtrl_000.png
res/drawable-xxhdpi/abc_scrubber_control_to_pressed_mtrl_005.png
res/drawable-xxhdpi/abc_scrubber_primary_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_scrubber_track_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-xxhdpi/abc_switch_track_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_tab_indicator_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_textfield_activated_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_textfield_default_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_textfield_search_activated_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_textfield_search_default_mtrl_alpha.9.png
res/drawable-xxhdpi/abc_text_select_handle_left_mtrl_dark.png
res/drawable-xxhdpi/abc_text_select_handle_left_mtrl_light.png
res/drawable-xxhdpi/abc_text_select_handle_middle_mtrl_dark.png
res/drawable-xxhdpi/abc_text_select_handle_middle_mtrl_light.png
res/drawable-xxhdpi/abc_text_select_handle_right_mtrl_dark.png
res/drawable-xxhdpi/abc_text_select_handle_right_mtrl_light.png
res/drawable-xxhdpi/dcloud_assistan_loc.png
res/drawable-xxhdpi/icon.png
res/drawable-xxhdpi/splash.png
res/drawable-xxxhdpi/abc_btn_check_to_on_mtrl_000.png
res/drawable-xxxhdpi/abc_btn_check_to_on_mtrl_015.png
res/drawable-xxxhdpi/abc_btn_radio_to_on_mtrl_000.png
res/drawable-xxxhdpi/abc_btn_radio_to_on_mtrl_015.png
res/drawable-xxxhdpi/abc_btn_switch_to_on_mtrl_00001.9.png
res/drawable-xxxhdpi/abc_btn_switch_to_on_mtrl_00012.9.png
res/drawable-xxxhdpi/abc_ic_menu_copy_mtrl_am_alpha.png
res/drawable-xxxhdpi/abc_ic_menu_cut_mtrl_alpha.png
res/drawable-xxxhdpi/abc_ic_menu_paste_mtrl_am_alpha.png
res/drawable-xxxhdpi/abc_ic_menu_selectall_mtrl_alpha.png
res/drawable-xxxhdpi/abc_ic_menu_share_mtrl_alpha.png
res/drawable-xxxhdpi/abc_ic_star_black_16dp.png
res/drawable-xxxhdpi/abc_ic_star_black_36dp.png
res/drawable-xxxhdpi/abc_ic_star_black_48dp.png
res/drawable-xxxhdpi/abc_ic_star_half_black_16dp.png
res/drawable-xxxhdpi/abc_ic_star_half_black_36dp.png
res/drawable-xxxhdpi/abc_ic_star_half_black_48dp.png
res/drawable-xxxhdpi/abc_scrubber_control_to_pressed_mtrl_000.png
res/drawable-xxxhdpi/abc_scrubber_control_to_pressed_mtrl_005.png
res/drawable-xxxhdpi/abc_spinner_mtrl_am_alpha.9.png
res/drawable-xxxhdpi/abc_switch_track_mtrl_alpha.9.png
res/drawable-xxxhdpi/abc_tab_indicator_mtrl_alpha.9.png
res/drawable-xxxhdpi/abc_text_select_handle_left_mtrl_dark.png
res/drawable-xxxhdpi/abc_text_select_handle_left_mtrl_light.png
res/drawable-xxxhdpi/abc_text_select_handle_right_mtrl_dark.png
res/drawable-xxxhdpi/abc_text_select_handle_right_mtrl_light.png
res/drawable-xxxhdpi/icon.png
res/layout/abc_action_bar_title_item.xml
res/layout/abc_action_bar_up_container.xml
res/layout/abc_action_bar_view_list_nav_layout.xml
res/layout/abc_action_menu_item_layout.xml
res/layout/abc_action_menu_layout.xml
res/layout/abc_action_mode_bar.xml
res/layout/abc_action_mode_close_item_material.xml
res/layout/abc_activity_chooser_view.xml
res/layout/abc_activity_chooser_view_list_item.xml
res/layout/abc_alert_dialog_button_bar_material.xml
res/layout/abc_alert_dialog_material.xml
res/layout/abc_alert_dialog_title_material.xml
res/layout/abc_dialog_title_material.xml
res/layout/abc_expanded_menu_layout.xml
res/layout/abc_list_menu_item_checkbox.xml
res/layout/abc_list_menu_item_icon.xml
res/layout/abc_list_menu_item_layout.xml
res/layout/abc_list_menu_item_radio.xml
res/layout/abc_popup_menu_header_item_layout.xml
res/layout/abc_popup_menu_item_layout.xml
res/layout/abc_screen_content_include.xml
res/layout/abc_screen_simple.xml
res/layout/abc_screen_simple_overlay_action_mode.xml
res/layout/abc_screen_toolbar.xml
res/layout/abc_search_dropdown_item_icons_2line.xml
res/layout/abc_search_view.xml
res/layout/abc_select_dialog_material.xml
res/layout/ad_360_large_pic.xml
res/layout/ad_360_large_video.xml
res/layout/ad_base_group_pic.xml
res/layout/ad_base_large_pic.xml
res/layout/ad_base_large_video.xml
res/layout/ad_base_small_pic.xml
res/layout/ad_dcloud_main.xml
res/layout/ad_dcloud_splash.xml
res/layout/ad_gdt_group_pic.xml
res/layout/ad_gdt_large_pic.xml
res/layout/ad_gdt_large_video.xml
res/layout/ad_gdt_small_pic.xml
res/layout/ad_include_ad_text.xml
res/layout/ad_include_download_btn.xml
res/layout/ad_include_icon_source.xml
res/layout/ad_include_title_creative_btn.xml
res/layout/dcloud_activity_main_market.xml
res/layout/dcloud_custom_alert_dialog_layout.xml
res/layout/dcloud_custom_notification.xml
res/layout/dcloud_custom_notification_dark.xml
res/layout/dcloud_custom_notification_mi.xml
res/layout/dcloud_custom_notification_transparent.xml
res/layout/dcloud_custom_notification_white.xml
res/layout/dcloud_dialog.xml
res/layout/dcloud_gallery_folders_view_item.xml
res/layout/dcloud_gallery_media_view_item.xml
res/layout/dcloud_gallery_picker_actionbar.xml
res/layout/dcloud_gallery_picker_main.xml
res/layout/dcloud_gallery_preview_actionbar.xml
res/layout/dcloud_gallery_preview_bottombar.xml
res/layout/dcloud_gallery_preview_fragment_item.xml
res/layout/dcloud_gallery_preview_main.xml
res/layout/dcloud_loadingview.xml
res/layout/dcloud_main_test_activity.xml
res/layout/dcloud_market_fragment_base.xml
res/layout/dcloud_record_address.xml
res/layout/dcloud_record_default.xml
res/layout/dcloud_shortcut_permission_guide_layout.xml
res/layout/dcloud_snow_black_progress.xml
res/layout/dcloud_snow_white_progress.xml
res/layout/dcloud_streamapp_custom_dialog_layout.xml
res/layout/dcloud_tabbar_item.xml
res/layout/dcloud_tabbar_mid.xml
res/layout/dcloud_weex_debug_progress.xml
res/layout/notification_action.xml
res/layout/notification_action_tombstone.xml
res/layout/notification_media_action.xml
res/layout/notification_media_cancel_action.xml
res/layout/notification_template_big_media.xml
res/layout/notification_template_big_media_custom.xml
res/layout/notification_template_big_media_narrow.xml
res/layout/notification_template_big_media_narrow_custom.xml
res/layout/notification_template_custom_big.xml
res/layout/notification_template_icon_group.xml
res/layout/notification_template_lines_media.xml
res/layout/notification_template_media.xml
res/layout/notification_template_media_custom.xml
res/layout/notification_template_part_chronometer.xml
res/layout/notification_template_part_time.xml
res/layout/select_dialog_item_material.xml
res/layout/select_dialog_multichoice_material.xml
res/layout/select_dialog_singlechoice_material.xml
res/layout/side_bar_layout.xml
res/layout/support_simple_spinner_dropdown_item.xml
res/layout/tooltip.xml
res/layout/webview_layout.xml
res/layout-v21/abc_screen_toolbar.xml
res/layout-v21/notification_action.xml
res/layout-v21/notification_action_tombstone.xml
res/layout-v21/notification_template_custom_big.xml
res/layout-v21/notification_template_icon_group.xml
res/layout-v22/abc_alert_dialog_button_bar_material.xml
res/layout-v26/abc_screen_toolbar.xml
res/xml/dcloud_file_provider.xml
resources.arsc
assets/39285EFA.dex
assets/apps/H51F32E74/www/index.html
assets/apps/H51F32E74/www/manifest.json
assets/data/dcloud_control.xml
assets/data/dcloud_error.html
assets/data/dcloud_properties.xml
assets/data/dcloud_url.json
assets/fonts/dcloud_iconfont.ttf
assets/res/dcloud_beep.ogg
assets/res/dcloud_prograss_snow1.png
assets/res/HBuilder.png
assets/res/point.png
assets/supplierconfig.json
androidsupportmultidexversion.txt
io/dcloud/weexUniJs.js
io/dcloud/all.js
io/dcloud/uni-app-service.js
dc/squareup/okhttp3/internal/publicsuffix/publicsuffixes.gz
META-INF/TEST.SF
META-INF/TEST.RSA
META-INF/MANIFEST.MF

污点分析

当apk较大时,代码量会很大,造成数据流图(ICFG)呈现爆炸式增长,所以该功能比较耗时,请先喝杯咖啡,耐心等待……
规则名称 描述信息 操作
病毒分析 使用安卓恶意软件常用的API进行污点分析 开始分析  
漏洞挖掘 漏洞挖掘场景下的污点分析 开始分析  
隐私合规 隐私合规场景下的污点分析:组件内污点传播、组件间污点传播、组件与库函数之间的污点传播 开始分析  
密码分析 分析加密算法是否使用常量密钥、静态初始化的向量(IV)、加密模式是否使用ECB等 开始分析  
Callback 因为Android中系统级的Callback并不会出现显式地进行回调方法的调用,所以如果需要分析Callback方法需要在声明文件中将其声明,这里提供一份AndroidCallbacks.txt文件,里面是一些常见的原生回调接口或类,如果有特殊接口需求,可以联系管理员 开始分析