导航菜单
平台声明

本平台专为移动应用安全风险研究与合规评估设计，严禁用于任何非法用途。 如有疑问或建议，欢迎加入微信群交流。

应用基础信息

应用图标 应用评分

文件基本信息

文件名称 DENVER FIT 2 v1.0.13.apk
文件大小 75.61MB
MD5 d058b555fbd65ec34ecaad726cc13d0b
SHA1 50470acc921973e4b30b4c75a6205fbb7ba541a8
SHA256 6be659b36fab2923930e5968efb859d55fef0ef16ec5ab8647b4d7175ffac9d9
病毒检测 文件安全

应用基础信息

应用名称 DENVER FIT 2
包名 com.yc.denverfit2
主活动 com.yc.pedometer.SplashActivity
目标SDK 34
最小SDK 21
版本号 1.0.13
子版本号 13
加固信息 未加壳
开发框架 Java/Kotlin

Google Play 应用市场信息

标题 DENVER FIT 2
评分 3.9268293
安装 100,000+   次下载
价格 0
Android版本支持
分类 健康与健身
Play 商店链接 com.yc.denverfit2
开发者 Denver A/S
开发者 ID 5559142796544275433
开发者 地址 None
开发者 主页 None
开发者 Email intersalesplay@gmail.com
发布日期 2021年4月19日
隐私政策 Privacy link

关于此应用 
DENVER FIT 2 是智能手表 (DENVER M2) 支持的应用程序。
App会通过【Accessibility API】获取消息推送内容，实现消息推送功能，并将消息内容推送到智能手表（DENVER M2）
记录步数、睡眠、心率、运动等数据
记录运动轨迹
接收来电提醒、短信提醒、应用提醒、一键拒绝功能
快来体验吧！

组件导出状态统计

查看 Activity 组件
查看 Service 组件
查看 Receiver 组件
查看 Provider 组件

扫描与分析选项

重新扫描 管理规则   动态分析

反编译与源码导出

Manifest文件 查看
APK文件 成为会员，解锁下载
Java源代码 查看 -- 下载

文件结构与资源列表

    应用签名证书信息 

    APK已签名
v1 签名: True
v2 签名: True
v3 签名: True
v4 签名: False
主题: C=US, ST=California, L=Mountain View, O=Google Inc., OU=Android, CN=Android
签名算法: rsassa_pkcs1v15
有效期自: 2022-04-29 16:10:59+00:00
有效期至: 2052-04-29 16:10:59+00:00
发行人: C=US, ST=California, L=Mountain View, O=Google Inc., OU=Android, CN=Android
序列号: 0x86b84e6e6ab4241999393ec140794ac8eaaf8318
哈希算法: sha256
证书MD5: 0095de5c635c587faac644e339e7b5ee
证书SHA1: 57ea6a725c7db80cc776507ec8f2d8363f6f0e01
证书SHA256: db76c60b816ad292f0ac9382899c48b6921fc92889ca9976c6e89552757db841
证书SHA512: 1e93e8e3d7cf5647271ec5931515ca519f9711c813e188119700a79c0f900f8b8bcbd1f28ed89918a01b4bd18846d9c37f51d859f6d93608eeddfc41e9558a4e
公钥算法: rsa
密钥长度: 4096
指纹: 640094519d8241c84ecefb0104f34fc7eacc6295922c9a06d7ec2bec8ec9bfc3
共检测到 1 个唯一证书

    权限声明与风险分级

    权限名称 安全等级 权限内容 权限描述 关联代码
    android.permission.BLUETOOTH 危险 创建蓝牙连接 允许应用程序查看或创建蓝牙连接。
    android.permission.BLUETOOTH_ADMIN 危险 管理蓝牙 允许程序发现和配对新的蓝牙设备。
    android.permission.BLUETOOTH_SCAN 危险 新蓝牙运行时权限 Android 12 系统引入了新的运行时权限，需要能够发现和配对附近的蓝牙设备。
    android.permission.BLUETOOTH_CONNECT 危险 新蓝牙运行时权限 Android 12 系统引入了新的运行时权限，需要能够连接到配对的蓝牙设备。
    android.permission.WAKE_LOCK 危险 防止手机休眠 允许应用程序防止手机休眠，在手机屏幕关闭后后台进程仍然运行。
    android.permission.INTERNET 危险 完全互联网访问 允许应用程序创建网络套接字。
    android.permission.ACCESS_FINE_LOCATION 危险 获取精确位置 通过GPS芯片接收卫星的定位信息，定位精度达10米以内。恶意程序可以用它来确定您所在的位置。
    android.permission.ACCESS_WIFI_STATE 普通 查看Wi-Fi状态 允许应用程序查看有关Wi-Fi状态的信息。
    android.permission.ACCESS_NETWORK_STATE 普通 获取网络状态 允许应用程序查看所有网络的状态。
    android.permission.RECEIVE_SMS 危险 接收短信 允许应用程序接收短信。 恶意程序会在用户未知的情况下监视或删除。
    android.permission.READ_CONTACTS 危险 读取联系人信息 允允许应用程序读取您手机上存储的所有联系人（地址）数据。恶意应用程序可借此将您的数据发送给其他人。
    android.permission.ACCESS_COARSE_LOCATION 危险 获取粗略位置 通过WiFi或移动基站的方式获取用户粗略的经纬度信息，定位精度大概误差在30~1500米。恶意程序可以用它来确定您的大概位置。
    android.permission.CHANGE_WIFI_STATE 危险 改变Wi-Fi状态 允许应用程序改变Wi-Fi状态。 无
    android.permission.WRITE_EXTERNAL_STORAGE 危险 读取/修改/删除外部存储内容 允许应用程序写入外部存储。
    android.permission.READ_MEDIA_IMAGES 危险 允许从外部存储读取图像文件 允许应用程序从外部存储读取图像文件。
    android.permission.READ_PHONE_STATE 危险 读取手机状态和标识 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号，是否正在通话，以及对方的号码等。
    android.permission.READ_CALL_LOG 危险 读取通话记录 允许应用程序读取用户的通话记录
    android.permission.ANSWER_PHONE_CALLS 危险 允许应用程序接听来电 一个用于以编程方式应答来电的运行时权限。
    android.permission.CAMERA 危险 拍照和录制视频 允许应用程序拍摄照片和视频，且允许应用程序收集相机在任何时候拍到的图像。
    android.permission.POST_NOTIFICATIONS 危险 发送通知的运行时权限 允许应用发布通知，Android 13 引入的新权限。
    android.permission.VIBRATE 普通 控制振动器 允许应用程序控制振动器，用于消息通知振动功能。
    android.permission.ACCESS_LOCATION_EXTRA_COMMANDS 普通 访问定位额外命令 访问额外位置提供程序命令，恶意应用程序可能会使用它来干扰GPS或其他位置源的操作。 无
    android.permission.CALL_PHONE 危险 直接拨打电话 允许应用程序直接拨打电话。恶意程序会在用户未知的情况下拨打电话造成损失。但不被允许拨打紧急电话。
    android.permission.SCHEDULE_EXACT_ALARM 普通 精确的闹钟权限 允许应用程序使用准确的警报 API。 无
    android.permission.FLASHLIGHT 普通 控制闪光灯 允许应用程序控制闪光灯。 无
    android.permission.GET_ACCOUNTS 普通 探索已知账号 允许应用程序访问帐户服务中的帐户列表。 无
    android.permission.FOREGROUND_SERVICE 普通 创建前台Service Android 9.0以上允许常规应用程序使用 Service.startForeground，用于podcast播放（推送悬浮播放，锁屏播放）
    android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE 普通 通过连接的设备使用启用前台服务 允许常规应用程序使用类型为“connectedDevice”的 Service.startForeground。 无
    android.permission.ACCESS_BACKGROUND_LOCATION 危险 获取后台定位权限 允许应用程序访问后台位置。如果您正在请求此权限，则还必须请求ACCESS COARSE LOCATION或ACCESS FINE LOCATION。单独请求此权限不会授予您位置访问权限。
    android.permission.ACTIVITY_RECOGNITION 危险 允许应用程序识别身体活动 允许应用程序识别身体活动。 无
    android.gms.permission.ACTIVITY_RECOGNITION 危险 允许应用程序识别身体活动 允许应用程序识别身体活动。 无
    android.permission.DISABLE_KEYGUARD 危险 禁用键盘锁 允许应用程序停用键锁和任何关联的密码安全设置。例如，在手机上接听电话时停用键锁，在通话结束后重新启用键锁。
    android.permission.READ_EXTERNAL_STORAGE 危险 读取SD卡内容 允许应用程序从SD卡读取信息。
    com.google.android.gms.permission.AD_ID 普通 应用程序显示广告 此应用程序使用 Google 广告 ID，并且可能会投放广告。 无
    com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE 普通 Google 定义的权限 由 Google 定义的自定义权限。 无

    证书安全合规分析

    高危
    0
    警告
    1
    信息
    1
    标题 严重程度 描述信息
    已签名应用 信息 应用已使用代码签名证书进行签名。

    Manifest 配置安全分析

    高危
    0
    警告
    4
    信息
    0
    屏蔽
    0
    序号 问题 严重程度 描述信息 操作
    1 应用已启用明文网络流量
    [android:usesCleartextTraffic=true]     		警告 应用允许明文网络流量（如 HTTP、FTP 协议、DownloadManager、MediaPlayer 等）。API 级别 27 及以下默认启用，28 及以上默认禁用。明文流量缺乏机密性、完整性和真实性保护，攻击者可窃听或篡改传输数据。建议关闭明文流量，仅使用加密协议。
    对应用 com.yc.denverfit2 屏蔽 clear_text_traffic 规则
    2 应用已配置网络安全策略
    [android:networkSecurityConfig=@xml/network_security_config]     		信息 网络安全配置允许应用通过声明式配置文件自定义网络安全策略，无需修改代码。可针对特定域名或应用范围进行灵活配置。
    对应用 com.yc.denverfit2 屏蔽 has_network_security 规则
    3 Activity (com.yc.gloryfit.wxapi.WXEntryActivity) 未受保护。
    [android:exported=true]     		警告 检测到 Activity 已导出，未受任何权限保护，任意应用均可访问。
    对应用 com.yc.denverfit2 屏蔽 activity_explicitly_exported 规则
    4 Activity (com.facebook.CustomTabActivity) 未受保护。
    [android:exported=true]     		警告 检测到 Activity 已导出，未受任何权限保护，任意应用均可访问。
    对应用 com.yc.denverfit2 屏蔽 activity_explicitly_exported 规则
    5 Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护，但应检查权限保护级别。
    Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION
    [android:exported=true]     		警告 检测到 Service 已导出并受未在本应用定义的权限保护。请在权限定义处核查其保护级别。若为 normal 或 dangerous，恶意应用可申请并与组件交互；若为 signature，仅同证书签名应用可访问。
    对应用 com.yc.denverfit2 屏蔽 service_exported_protected_permission_not_defined 规则

    可浏览 Activity 组件分析

    ACTIVITY INTENT
    com.yc.pedometer.SplashActivity Schemes: um.59156a5ef29d981c560020e5://,
    com.facebook.CustomTabActivity Schemes: @string/fb_login_protocol_scheme://, fbconnect://,
    Hosts: cct.com.yc.denverfit2,
    com.tencent.tauth.AuthActivity Schemes: tencent1105976837://,

    网络通信安全风险分析

    高危
    2
    警告
    0
    信息
    0
    安全
    0
    序号 范围 严重级别 描述
    1 *
    		高危 基本配置不安全地配置为允许到所有域的明文流量。
    2 secure.example.com
    android.bugly.qq.com
    		高危 域配置不安全地配置为允许明文流量到达范围内的这些域。

    API调用分析

    API功能 源码文件
    一般功能-> 文件操作
    a/a.java
    com/actions/aticonsota/OTAManager.java
    com/actions/ibluz/device/bluzdevice/BluzDeviceSpp.java
    com/actions/ibluz/util/Utils.java
    com/aigestudio/wheelpicker/model/City.java
    com/aigestudio/wheelpicker/model/Province.java
    com/aigestudio/wheelpicker/widgets/WheelAreaPicker.java
    com/github/mikephil/charting/charts/Chart.java
    com/github/mikephil/charting/utils/FileUtils.java
    com/hp/hpl/sparta/DefaultLog.java
    com/hp/hpl/sparta/Document.java
    com/hp/hpl/sparta/Element.java
    com/hp/hpl/sparta/Node.java
    com/hp/hpl/sparta/NodeListWithPosition.java
    com/hp/hpl/sparta/ParseByteStream.java
    com/hp/hpl/sparta/ParseCharStream.java
    com/hp/hpl/sparta/Parser.java
    com/hp/hpl/sparta/Text.java
    com/hp/hpl/sparta/xpath/ExprFactory.java
    com/hp/hpl/sparta/xpath/SimpleStreamTokenizer.java
    com/hp/hpl/sparta/xpath/Step.java
    com/hp/hpl/sparta/xpath/XPath.java
    com/hp/hpl/sparta/xpath/XPathException.java
    com/nineoldandroids/animation/AnimatorInflater.java
    com/realsil/android/blehub/dfu/BinInputStream.java
    com/realsil/android/blehub/dfu/DfuService.java
    com/realsil/sdk/core/bluetooth/connection/legacy/BluetoothSpp.java
    com/realsil/sdk/core/utility/DataConverter.java
    com/realsil/sdk/core/utility/FileUtils.java
    com/realsil/sdk/dfu/DfuService.java
    com/realsil/sdk/dfu/d/a.java
    com/realsil/sdk/dfu/d/b.java
    com/realsil/sdk/dfu/f/a.java
    com/realsil/sdk/dfu/f/b.java
    com/realsil/sdk/dfu/f/c.java
    com/realsil/sdk/dfu/f/d.java
    com/realsil/sdk/dfu/f/e.java
    com/realsil/sdk/dfu/i/a.java
    com/realsil/sdk/dfu/image/pack/SubFileInfo.java
    com/realsil/sdk/dfu/image/pack/a.java
    com/realsil/sdk/dfu/image/stream/BaseBinInputStream.java
    com/realsil/sdk/dfu/internal/base/BaseDfuTask.java
    com/realsil/sdk/dfu/l/c.java
    com/realsil/sdk/dfu/l/e.java
    com/realsil/sdk/dfu/l/f.java
    com/realsil/sdk/dfu/l/g.java
    com/realsil/sdk/dfu/m/c.java
    com/realsil/sdk/dfu/m/d.java
    com/realsil/sdk/dfu/m/e.java
    com/realsil/sdk/dfu/m/f.java
    com/realsil/sdk/dfu/model/BinInfo.java
    com/realsil/sdk/dfu/n/c.java
    com/realsil/sdk/dfu/n/d.java
    com/realsil/sdk/dfu/o/b.java
    com/realsil/sdk/dfu/o/c.java
    com/realsil/sdk/dfu/p/c.java
    com/realsil/sdk/dfu/p/d.java
    com/realsil/sdk/dfu/p/e.java
    com/realsil/sdk/dfu/p/f.java
    com/realsil/sdk/dfu/q/d.java
    com/realsil/sdk/dfu/q/e.java
    com/realsil/sdk/dfu/q/g.java
    com/realsil/sdk/dfu/r/b.java
    com/realsil/sdk/dfu/t/c.java
    com/realsil/sdk/dfu/u/g.java
    com/realsil/sdk/dfu/u/h.java
    com/realsil/sdk/dfu/u/i.java
    com/realsil/sdk/dfu/u/l.java
    com/realsil/sdk/dfu/u/n.java
    com/realsil/sdk/dfu/u/o.java
    com/realsil/sdk/dfu/u/p.java
    com/realsil/sdk/dfu/u/q.java
    com/realsil/sdk/dfu/utils/BluetoothDfuAdapter.java
    com/realsil/sdk/dfu/utils/DfuHelper.java
    com/realsil/sdk/dfu/utils/DfuUtils.java
    com/realsil/sdk/dfu/v/d.java
    com/realsil/sdk/dfu/v/e.java
    com/theartofdev/edmodo/cropper/BitmapUtils.java
    com/theartofdev/edmodo/cropper/CropImage.java
    com/theartofdev/edmodo/cropper/CropImageActivity.java
    com/ute/camera/AndroidCameraManagerImpl.java
    com/ute/camera/CameraBackupAgent.java
    com/ute/camera/CameraPreference.java
    com/ute/camera/CameraSettings.java
    com/ute/camera/ComboPreferences.java
    com/ute/camera/Exif.java
    com/ute/camera/ListPreference.java
    com/ute/camera/MediaSaveService.java
    com/ute/camera/PhotoModule.java
    com/ute/camera/PreferenceInflater.java
    com/ute/camera/RecordLocationPreference.java
    com/ute/camera/Storage.java
    com/ute/camera/Thumbnail.java
    com/ute/camera/VideoModule.java
    com/ute/camera/WideAnglePanoramaModule.java
    com/ute/camera/crop/CropActivity.java
    com/ute/camera/crop/ImageLoader.java
    com/ute/camera/crop/SaveImage.java
    com/ute/camera/crop/Utils.java
    com/ute/camera/data/CameraDataAdapter.java
    com/ute/camera/data/LocalMediaData.java
    com/ute/camera/data/MediaDetails.java
    com/ute/camera/exif/ByteBufferInputStream.java
    com/ute/camera/exif/CountedDataInputStream.java
    com/ute/camera/exif/ExifData.java
    com/ute/camera/exif/ExifInterface.java
    com/ute/camera/exif/ExifModifier.java
    com/ute/camera/exif/ExifOutputStream.java
    com/ute/camera/exif/ExifParser.java
    com/ute/camera/exif/ExifReader.java
    com/ute/camera/exif/OrderedDataOutputStream.java
    com/ute/camera/tinyplanet/TinyPlanetFragment.java
    com/ute/camera/ui/ZoomView.java
    com/ute/camera/util/CameraUtil.java
    com/ute/camera/util/XmpUtil.java
    com/yc/jianyou_ecg/ECGHttpPostUtils.java
    com/yc/pedometer/ActivitySwitchCity.java
    com/yc/pedometer/CreateQRCodeActivity.java
    com/yc/pedometer/DataCleanManager.java
    com/yc/pedometer/FirmwareActivity.java
    com/yc/pedometer/Friends/FriendsHttpPostUtils.java
    com/yc/pedometer/MainActivity.java
    com/yc/pedometer/PersonageActivity.java
    com/yc/pedometer/QQandWxLogin.java
    com/yc/pedometer/ScanResultsActivity.java
    com/yc/pedometer/SplashActivity.java
    com/yc/pedometer/SystemSettingsActivity.java
    com/yc/pedometer/TimeZoneRegionActivity.java
    com/yc/pedometer/WeatherActivity.java
    com/yc/pedometer/bodyfat/BodyReportActivity.java
    com/yc/pedometer/bodyfat/utils/ScreenShoot.java
    com/yc/pedometer/cache/FileCacheUtils.java
    com/yc/pedometer/ecg/EcgDetailActivity.java
    com/yc/pedometer/feedback/FeedbackInfo.java
    com/yc/pedometer/feedback/Feedback_Content_New.java
    com/yc/pedometer/feedback/GetFeedbackList.java
    com/yc/pedometer/feedback/GetFeedbackResp.java
    com/yc/pedometer/feedback/GetSTSKey.java
    com/yc/pedometer/feedback/PostNewFeedback.java
    com/yc/pedometer/fragment/FragmentHomePage.java
    com/yc/pedometer/fragment/FragmentMine.java
    com/yc/pedometer/frota/FrkBleOTAUtils.java
    com/yc/pedometer/listener/FileService.java
    com/yc/pedometer/log/LogCrashHandler.java
    com/yc/pedometer/log/LogShareUtils.java
    com/yc/pedometer/log/LogWrite.java
    com/yc/pedometer/log/upload/LogUploadUtils.java
    com/yc/pedometer/log/upload/LogcatHelper.java
    com/yc/pedometer/log/upload/OssUploadFile.java
    com/yc/pedometer/onlinedial/CustomDialActivity.java
    com/yc/pedometer/onlinedial/CustomWatchFragment.java
    com/yc/pedometer/onlinedial/OnlineDialUtil.java
    com/yc/pedometer/onlinedial/PicUtils.java
    com/yc/pedometer/onlinedial/Rgb.java
    com/yc/pedometer/onlinedial/WatchTransferDialog.java
    com/yc/pedometer/onlinedial/ZipUtils.java
    com/yc/pedometer/onlinedial/acts/ActsDialCommandUtil.java
    com/yc/pedometer/onlinedial/acts/ImageWatchFaceActivity.java
    com/yc/pedometer/onlinedial/acts/LocalImageWatchFaceInfo.java
    com/yc/pedometer/onlinedial/acts/WatchFaceUtil.java
    com/yc/pedometer/sdk/WriteCommandToBLE.java
    com/yc/pedometer/sports/device/Utils.java
    com/yc/pedometer/sports/entity/Device.java
    com/yc/pedometer/sports/entity/ExerciseData.java
    com/yc/pedometer/sports/entity/GPSData.java
    com/yc/pedometer/sports/entity/TargetSet.java
    com/yc/pedometer/sports/fragment/HistoryGoogleMapFragment.java
    com/yc/pedometer/sports/fragment/HistoryMapFragment.java
    com/yc/pedometer/sports/util/ACache.java
    com/yc/pedometer/sports/util/FileUtil.java
    com/yc/pedometer/sports/util/HttpRequestor.java
    com/yc/pedometer/sports/util/OSUtil.java
    com/yc/pedometer/sports/util/OSUtils.java
    com/yc/pedometer/update/CustomUpdate.java
    com/yc/pedometer/update/Updates.java
    com/yc/pedometer/utils/ByteUtil.java
    com/yc/pedometer/utils/CustomShareUtils.java
    com/yc/pedometer/utils/DeleteUtils.java
    com/yc/pedometer/utils/EmojiUtil.java
    com/yc/pedometer/utils/GBUtils.java
    com/yc/pedometer/utils/GPSUtils.java
    com/yc/pedometer/utils/GetBitmapFromFile.java
    com/yc/pedometer/utils/HttpUtil.java
    com/yc/pedometer/utils/PhoneLoginUtil.java
    com/yc/pedometer/utils/SPUtil.java
    com/yc/pedometer/utils/SyncDateUtils.java
    com/yc/pedometer/utils/TmallGenieUtil.java
    com/yc/pedometer/utils2/HttpPostUtils.java
    com/yc/pedometer/weather/CityCode.java
    com/yc/pedometer/web/GetWebToken.java
    com/yc/pedometer/wechat/CreateFiles.java
    com/yc/pedometer/wechat/DownloadData.java
    com/yc/pedometer/wechat/GetHeadPortrait.java
    com/yc/pedometer/wechat/MD5Sig.java
    com/yc/pedometer/wechat/RateUploadData.java
    com/yc/pedometer/wechat/SetUsersInformation.java
    com/yc/pedometer/wechat/SettingInfo.java
    com/yc/pedometer/wechat/UploadDataTest.java
    com/yc/pedometer/wechat/UploadEcgData.java
    com/yc/pedometer/wechat/UploadRateData.java
    com/yc/pedometer/wechat/UploadSwimData.java
    com/yc/pedometer/wechat/UploadTemperatureData.java
    com/yc/pedometer/wechat/UploadTrackData.java
    com/yc/pedometer/wechat/WXLoad.java
    com/yc/server/yc_sdk/Agent.java
    com/yc/server/yc_sdk/common/UpdateManager.java
    com/yc/server/yc_sdk/dao/PostInfoFromFile.java
    com/yc/server/yc_sdk/dao/SaveInfo.java
    com/yzq/zxinglibrary/android/BeepManager.java
    com/yzq/zxinglibrary/android/CaptureActivity.java
    com/yzq/zxinglibrary/bean/ZxingConfig.java
    com/yzq/zxinglibrary/camera/CameraManager.java
    d/b.java
    h/a.java
    h/c.java
    net/jpountz/lz4/LZ4BlockInputStream.java
    net/jpountz/lz4/LZ4BlockOutputStream.java
    net/jpountz/util/Native.java
    net/sourceforge/pinyin4j/ChineseToPinyinResource.java
    net/sourceforge/pinyin4j/GwoyeuRomatzyhResource.java
    net/sourceforge/pinyin4j/PinyinRomanizationResource.java
    net/sourceforge/pinyin4j/ResourceHelper.java
    no/nordicsemi/android/dfu/BaseCustomDfuImpl.java
    no/nordicsemi/android/dfu/BaseDfuImpl.java
    no/nordicsemi/android/dfu/DfuBaseService.java
    no/nordicsemi/android/dfu/DfuService.java
    no/nordicsemi/android/dfu/SecureDfuImpl.java
    no/nordicsemi/android/dfu/internal/ArchiveInputStream.java
    no/nordicsemi/android/dfu/internal/HexInputStream.java
    no/nordicsemi/android/dfu/internal/exception/HexFileValidationException.java
    no/nordicsemi/android/dfu/internal/exception/SizeValidationException.java
    rx/exceptions/CompositeException.java
    rx/exceptions/OnErrorThrowable.java
    rx/internal/operators/NotificationLite.java
    taobe/tec/jcc/JChineseConvertor.java
    组件-> 启动 Activity
    com/floatview/permission/FloatWindowManager.java
    com/floatview/permission/rom/HuaweiUtils.java
    com/floatview/permission/rom/MeizuUtils.java
    com/floatview/permission/rom/MiuiUtils.java
    com/floatview/permission/rom/QikuUtils.java
    com/theartofdev/edmodo/cropper/CropImage.java
    com/ute/camera/CameraActivity.java
    com/ute/camera/CameraButtonIntentReceiver.java
    com/ute/camera/PhotoModule.java
    com/ute/camera/ProxyLauncher.java
    com/ute/camera/VideoModule.java
    com/ute/camera/crop/CropActivity.java
    com/ute/camera/util/CameraUtil.java
    com/yc/pedometer/AboutActivity.java
    com/yc/pedometer/AliPayActivity.java
    com/yc/pedometer/AppRemindActivity.java
    com/yc/pedometer/BackgroundPermissionsActivity.java
    com/yc/pedometer/BpDetailsActivity.java
    com/yc/pedometer/BpELModelActivity.java
    com/yc/pedometer/BpElDetailsActivity.java
    com/yc/pedometer/BpSettingActivity.java
    com/yc/pedometer/BtCallActivity.java
    com/yc/pedometer/BtCallOpneActivity.java
    com/yc/pedometer/CallRemindActivity.java
    com/yc/pedometer/ContactsActivity.java
    com/yc/pedometer/FindPhoneActivity.java
    com/yc/pedometer/FriendsActivity.java
    com/yc/pedometer/GeneralSettingActivity.java
    com/yc/pedometer/GuideActivity.java
    com/yc/pedometer/HomeItemManageActivity.java
    com/yc/pedometer/JavaScriptinterface.java
    com/yc/pedometer/MainActivity.java
    com/yc/pedometer/MoreRemindActivity.java
    com/yc/pedometer/PermissionSettingsActivity.java
    com/yc/pedometer/PersonageActivity.java
    com/yc/pedometer/Physiological.java
    com/yc/pedometer/PhysiologicalSetting.java
    com/yc/pedometer/PushMessageActivity.java
    com/yc/pedometer/QQandWxLogin.java
    com/yc/pedometer/Rate24HourSetting.java
    com/yc/pedometer/RateDetailsActivity.java
    com/yc/pedometer/RateDynamicHistoryNew.java
    com/yc/pedometer/RateMonitorActivity.java
    com/yc/pedometer/RateStatusDescriptionActivity.java
    com/yc/pedometer/ScanHeadsetGuiActivity.java
    com/yc/pedometer/SmsRemindActivity.java
    com/yc/pedometer/SosCallActivity.java
    com/yc/pedometer/SplashActivity.java
    com/yc/pedometer/SystemSettingsActivity.java
    com/yc/pedometer/ThirdPartyProgramActivity.java
    com/yc/pedometer/TimeZoneActivity.java
    com/yc/pedometer/TimeZoneAddActivity.java
    com/yc/pedometer/TmallGenieActivity.java
    com/yc/pedometer/TrainCycleSetActivity.java
    com/yc/pedometer/TrainSetActivity.java
    com/yc/pedometer/TrainStartTimeSetActivity.java
    com/yc/pedometer/TrainingGoalActivity.java
    com/yc/pedometer/TrainingPlanActivity.java
    com/yc/pedometer/TurnWristActivity.java
    com/yc/pedometer/WeatherActivity.java
    com/yc/pedometer/WechatActivity.java
    com/yc/pedometer/alarm/AlarmClockActivity.java
    com/yc/pedometer/ble/SearchDeviceActivity.java
    com/yc/pedometer/bloodsugar/BloodSugarDetailsActivity.java
    com/yc/pedometer/bodyfat/BodyEmptyActivity.java
    com/yc/pedometer/bodyfat/BodyHistoryActivity.java
    com/yc/pedometer/bodyfat/BodyReportActivity.java
    com/yc/pedometer/bodyfat/BodyTestingActivity.java
    com/yc/pedometer/customizesms/CustomizeSMSActivity.java
    com/yc/pedometer/ecg/EcgDetailActivity.java
    com/yc/pedometer/ecg/EcgEmptyActivity.java
    com/yc/pedometer/ecg/EcgHistoryActivity.java
    com/yc/pedometer/ecg/EcgHistoryDetailsActivity.java
    com/yc/pedometer/ecg/EcgJianYouAnalysisActivity.java
    com/yc/pedometer/ecg/EcgReportActivity.java
    com/yc/pedometer/ecg/EcgTestingActivity.java
    com/yc/pedometer/ecg/cs/CsEcgHistoryFragment.java
    com/yc/pedometer/ecg/cs/CsEcgHistoryReportActivity.java
    com/yc/pedometer/ecg/cs/CsEcgReportActivity.java
    com/yc/pedometer/event/EventActivity.java
    com/yc/pedometer/feedback/Feedback_Content_New.java
    com/yc/pedometer/feedback/Feedback_Type.java
    com/yc/pedometer/fragment/BtConnectGuideDialogFragment.java
    com/yc/pedometer/fragment/BtConnectGuideFragment_0.java
    com/yc/pedometer/fragment/BtConnectGuideFragment_1.java
    com/yc/pedometer/fragment/BtConnectGuideFragment_2.java
    com/yc/pedometer/fragment/BtConnectGuideMainDialogFragment.java
    com/yc/pedometer/fragment/FragmentHomeItemAdapter.java
    com/yc/pedometer/fragment/FragmentHomePage.java
    com/yc/pedometer/fragment/FragmentMine.java
    com/yc/pedometer/fragment/FragmentSmartPlay.java
    com/yc/pedometer/fragment/FragmentStepDetailsDay.java
    com/yc/pedometer/fragment/FragmentWeekly.java
    com/yc/pedometer/googlefit/GoogleFitActivity.java
    com/yc/pedometer/log/LogShareUtils.java
    com/yc/pedometer/mood/FatigueDetailsActivity.java
    com/yc/pedometer/mood/MoodDetailsActivity.java
    com/yc/pedometer/mood/MoodSettingsActivity.java
    com/yc/pedometer/mood/PressureDetailsActivity.java
    com/yc/pedometer/onlinedial/CustomDialActivity.java
    com/yc/pedometer/onlinedial/CustomWatchFragment.java
    com/yc/pedometer/onlinedial/OnlineDialActivity.java
    com/yc/pedometer/onlinedial/acts/ImageWatchFaceActivity.java
    com/yc/pedometer/oxygen/OxygenSettingActivity.java
    com/yc/pedometer/remind/SelectedAppActivity.java
    com/yc/pedometer/sdk/BluetoothLeService.java
    com/yc/pedometer/sports/activity/GoogleSportMapActivity.java
    com/yc/pedometer/sports/activity/SportGuideNoMapActivity.java
    com/yc/pedometer/sports/activity/SportMapActivity.java
    com/yc/pedometer/sports/activity/SportNoMapActivity.java
    com/yc/pedometer/sports/activity/SportTargetSetActivity.java
    com/yc/pedometer/sports/fragment/HistoryFragment.java
    com/yc/pedometer/sports/fragment/HomepageFragment.java
    com/yc/pedometer/sports/fragment/PageFragment.java
    com/yc/pedometer/sports/fragment/TargetSetFragment.java
    com/yc/pedometer/temperature/TemperatureSettingActivity.java
    com/yc/pedometer/update/NotificationActivity.java
    com/yc/pedometer/utils/CustomShareUtils.java
    com/yc/pedometer/utils/GoogleSignInHelper.java
    com/yc/pedometer/utils/MarketUtil.java
    com/yc/pedometer/utils/NotificationsUtils.java
    com/yc/pedometer/utils/ShowAlphaDialog.java
    com/yc/server/yc_sdk/common/UpdateManager.java
    com/yzq/zxinglibrary/android/CaptureActivity.java
    一般功能-> IPC通信
    com/actions/ibluz/IBluetooth.java
    com/actions/ibluz/IBluetoothA2dp.java
    com/actions/ibluz/device/BluzDeviceA2dp.java
    com/actions/ibluz/device/BluzDeviceA2dpBase.java
    com/actions/ibluz/device/BluzDeviceA2dpCompat.java
    com/actions/ibluz/device/bluzdevice/BluzDeviceBase.java
    com/floatview/permission/FloatWindowManager.java
    com/floatview/permission/rom/HuaweiUtils.java
    com/floatview/permission/rom/MeizuUtils.java
    com/floatview/permission/rom/MiuiUtils.java
    com/floatview/permission/rom/QikuUtils.java
    com/realsil/android/blehub/dfu/DfuService.java
    com/realsil/android/blehub/dfu/IRealsilDfu.java
    com/realsil/android/blehub/dfu/IRealsilDfuCallback.java
    com/realsil/android/blehub/dfu/RealsilDfu.java
    com/realsil/sdk/core/base/BaseService.java
    com/realsil/sdk/core/bluetooth/BluetoothProfileManager.java
    com/realsil/sdk/core/bluetooth/RtkBluetoothManager.java
    com/realsil/sdk/core/bluetooth/utils/ReflectionHelper.java
    com/realsil/sdk/core/c/a.java
    com/realsil/sdk/core/c/b.java
    com/realsil/sdk/dfu/DfuService.java
    com/realsil/sdk/dfu/a.java
    com/realsil/sdk/dfu/b.java
    com/realsil/sdk/dfu/w/a.java
    com/theartofdev/edmodo/cropper/CropImage.java
    com/theartofdev/edmodo/cropper/CropImageActivity.java
    com/theartofdev/edmodo/cropper/CropImageView.java
    com/ute/camera/CameraActivity.java
    com/ute/camera/CameraButtonIntentReceiver.java
    com/ute/camera/CameraModule.java
    com/ute/camera/DisableCameraReceiver.java
    com/ute/camera/MediaSaveService.java
    com/ute/camera/PhotoController.java
    com/ute/camera/PhotoModule.java
    com/ute/camera/PhotoUI.java
    com/ute/camera/ProxyLauncher.java
    com/ute/camera/VideoController.java
    com/ute/camera/VideoModule.java
    com/ute/camera/VideoUI.java
    com/ute/camera/WideAnglePanoramaModule.java
    com/ute/camera/crop/CropActivity.java
    com/ute/camera/util/CameraUtil.java
    com/ute/camera/util/HelpUtils.java
    com/ute/camera/util/IntentHelper.java
    com/ute/camera/util/UsageStatistics.java
    com/yc/gloryfit/wxapi/WXEntryActivity.java
    com/yc/pedometer/AboutActivity.java
    com/yc/pedometer/ActivitySwitchCity.java
    com/yc/pedometer/AliPayActivity.java
    com/yc/pedometer/AppRemindActivity.java
    com/yc/pedometer/BackgroundPermissionsActivity.java
    com/yc/pedometer/BandLanguageSettingActivity.java
    com/yc/pedometer/BpCalibrateActivity.java
    com/yc/pedometer/BpCustomDetailsActivity.java
    com/yc/pedometer/BpDetailsActivity.java
    com/yc/pedometer/BpELCalibrateActivity.java
    com/yc/pedometer/BpELModelActivity.java
    com/yc/pedometer/BpElDetailsActivity.java
    com/yc/pedometer/BpSettingActivity.java
    com/yc/pedometer/BpTimedAddActivity.java
    com/yc/pedometer/BtCallActivity.java
    com/yc/pedometer/BtCallOpneActivity.java
    com/yc/pedometer/CallRemindActivity.java
    com/yc/pedometer/ContactsActivity.java
    com/yc/pedometer/CreateQRCodeActivity.java
    com/yc/pedometer/FindPhoneActivity.java
    com/yc/pedometer/FirmwareActivity.java
    com/yc/pedometer/FriendsActivity.java
    com/yc/pedometer/GeneralSettingActivity.java
    com/yc/pedometer/GoalActivity.java
    com/yc/pedometer/GuideActivity.java
    com/yc/pedometer/HomeItemManageActivity.java
    com/yc/pedometer/JavaScriptinterface.java
    com/yc/pedometer/MainActivity.java
    com/yc/pedometer/MoreRemindActivity.java
    com/yc/pedometer/PassWordActivity.java
    com/yc/pedometer/PassWordActivity_KeyBorad.java
    com/yc/pedometer/PermissionSettingsActivity.java
    com/yc/pedometer/PersonageActivity.java
    com/yc/pedometer/Physiological.java
    com/yc/pedometer/PhysiologicalSetting.java
    com/yc/pedometer/PushMessageActivity.java
    com/yc/pedometer/QQandWxLogin.java
    com/yc/pedometer/Rate24HourSetting.java
    com/yc/pedometer/RateDetailsActivity.java
    com/yc/pedometer/RateDynamicHistoryNew.java
    com/yc/pedometer/RateMonitorActivity.java
    com/yc/pedometer/RateStatusDescriptionActivity.java
    com/yc/pedometer/ScanConnectProcess.java
    com/yc/pedometer/ScanHeadsetGuiActivity.java
    com/yc/pedometer/ScanResultsActivity.java
    com/yc/pedometer/SleepDetailsActivity.java
    com/yc/pedometer/SmsRemindActivity.java
    com/yc/pedometer/SosCallActivity.java
    com/yc/pedometer/SplashActivity.java
    com/yc/pedometer/StepDetailsActivity.java
    com/yc/pedometer/SystemSettingsActivity.java
    com/yc/pedometer/ThirdPartyProgramActivity.java
    com/yc/pedometer/TimeZoneActivity.java
    com/yc/pedometer/TimeZoneAddActivity.java
    com/yc/pedometer/TimeZoneRegionActivity.java
    com/yc/pedometer/TmallGenieActivity.java
    com/yc/pedometer/TrainCycleSetActivity.java
    com/yc/pedometer/TrainSetActivity.java
    com/yc/pedometer/TrainStartTimeSetActivity.java
    com/yc/pedometer/TrainingGoalActivity.java
    com/yc/pedometer/TrainingPlanActivity.java
    com/yc/pedometer/TurnWristActivity.java
    com/yc/pedometer/TwitterPlatform.java
    com/yc/pedometer/UVActivity.java
    com/yc/pedometer/WeatherActivity.java
    com/yc/pedometer/WechatActivity.java
    com/yc/pedometer/alarm/AlarmAddActivity.java
    com/yc/pedometer/alarm/AlarmClockActivity.java
    com/yc/pedometer/ble/SearchDeviceActivity.java
    com/yc/pedometer/bloodsugar/BloodSugarDetailsActivity.java
    com/yc/pedometer/bodyfat/BodyAgeActivity.java
    com/yc/pedometer/bodyfat/BodyDetailsActivity.java
    com/yc/pedometer/bodyfat/BodyEmptyActivity.java
    com/yc/pedometer/bodyfat/BodyHistoryActivity.java
    com/yc/pedometer/bodyfat/BodyReportActivity.java
    com/yc/pedometer/bodyfat/BodyScoreActivity.java
    com/yc/pedometer/bodyfat/BodyStatisticsActivity.java
    com/yc/pedometer/bodyfat/BodyStatisticsActivity0.java
    com/yc/pedometer/bodyfat/BodyTestingActivity.java
    com/yc/pedometer/bodyfat/BodyTypeActivity.java
    com/yc/pedometer/calendar/CalendarDialog24HourRate.java
    com/yc/pedometer/calendar/CalendarDialogCommon.java
    com/yc/pedometer/calendar/CalendarDialogMenstruation.java
    com/yc/pedometer/calendar/RateVariabilityCalendarDialog.java
    com/yc/pedometer/customizesms/CustomizeSMSActivity.java
    com/yc/pedometer/ecg/EcgAnalysisActivity.java
    com/yc/pedometer/ecg/EcgDetailActivity.java
    com/yc/pedometer/ecg/EcgEmptyActivity.java
    com/yc/pedometer/ecg/EcgHistoryActivity.java
    com/yc/pedometer/ecg/EcgHistoryDetailsActivity.java
    com/yc/pedometer/ecg/EcgJianYouAnalysisActivity.java
    com/yc/pedometer/ecg/EcgReportActivity.java
    com/yc/pedometer/ecg/EcgStatisticsActivity.java
    com/yc/pedometer/ecg/EcgTestingActivity.java
    com/yc/pedometer/ecg/cs/CsEcgHistoryFragment.java
    com/yc/pedometer/ecg/cs/CsEcgHistoryReportActivity.java
    com/yc/pedometer/ecg/cs/CsEcgReportActivity.java
    com/yc/pedometer/event/EventActivity.java
    com/yc/pedometer/event/EventAddActivity.java
    com/yc/pedometer/feedback/Feedback_Content_New.java
    com/yc/pedometer/feedback/Feedback_Type.java
    com/yc/pedometer/feedback/PostNewFeedback.java
    com/yc/pedometer/fragment/BtConnectGuideDialogFragment.java
    com/yc/pedometer/fragment/BtConnectGuideFragment_0.java
    com/yc/pedometer/fragment/BtConnectGuideFragment_1.java
    com/yc/pedometer/fragment/BtConnectGuideFragment_2.java
    com/yc/pedometer/fragment/BtConnectGuideMainDialogFragment.java
    com/yc/pedometer/fragment/FragmentHomeItemAdapter.java
    com/yc/pedometer/fragment/FragmentHomePage.java
    com/yc/pedometer/fragment/FragmentMine.java
    com/yc/pedometer/fragment/FragmentSleepDetailsDay.java
    com/yc/pedometer/fragment/FragmentSmartPlay.java
    com/yc/pedometer/fragment/FragmentStepDetailsDay.java
    com/yc/pedometer/fragment/FragmentWeekly.java
    com/yc/pedometer/fragment/Rate24HourDetail.java
    com/yc/pedometer/fragment/ScannerFragment.java
    com/yc/pedometer/googlefit/GoogleFitActivity.java
    com/yc/pedometer/log/LogShareUtils.java
    com/yc/pedometer/mood/FatigueDetailsActivity.java
    com/yc/pedometer/mood/MoodDetailsActivity.java
    com/yc/pedometer/mood/MoodSettingsActivity.java
    com/yc/pedometer/mood/PressureDetailsActivity.java
    com/yc/pedometer/onlinedial/CustomDialActivity.java
    com/yc/pedometer/onlinedial/CustomWatchFragment.java
    com/yc/pedometer/onlinedial/OnlineDialActivity.java
    com/yc/pedometer/onlinedial/acts/ImageWatchFaceActivity.java
    com/yc/pedometer/oxygen/OxygenDetailsActivity.java
    com/yc/pedometer/oxygen/OxygenSettingActivity.java
    com/yc/pedometer/region/CountryActivity.java
    com/yc/pedometer/remind/MessageAccessibilityService.java
    com/yc/pedometer/remind/NotificationClickReceiver.java
    com/yc/pedometer/remind/SelectedAppActivity.java
    com/yc/pedometer/remind/StatusbarMsgNotificationListener.java
    com/yc/pedometer/sdk/BLEServiceOperate.java
    com/yc/pedometer/sdk/BluetoothLeService.java
    com/yc/pedometer/sdk/DataProcessing.java
    com/yc/pedometer/sdk/MusicControl.java
    com/yc/pedometer/sports/activity/GoogleSportMapActivity.java
    com/yc/pedometer/sports/activity/HistoryActivity.java
    com/yc/pedometer/sports/activity/HistoryDetailActivity.java
    com/yc/pedometer/sports/activity/SportGuideNoMapActivity.java
    com/yc/pedometer/sports/activity/SportItemSelectActivity.java
    com/yc/pedometer/sports/activity/SportMapActivity.java
    com/yc/pedometer/sports/activity/SportNoMapActivity.java
    com/yc/pedometer/sports/activity/SportTargetSetActivity.java
    com/yc/pedometer/sports/activity/TargetEditActivity.java
    com/yc/pedometer/sports/device/Utils.java
    com/yc/pedometer/sports/fragment/HistoryFragment.java
    com/yc/pedometer/sports/fragment/HomepageFragment.java
    com/yc/pedometer/sports/fragment/PageFragment.java
    com/yc/pedometer/sports/fragment/TargetSetFragment.java
    com/yc/pedometer/sports/service/AdmapLocationService.java
    com/yc/pedometer/sports/service/GoogleLocationService.java
    com/yc/pedometer/temperature/TemperatureDetailsActivity.java
    com/yc/pedometer/temperature/TemperatureSettingActivity.java
    com/yc/pedometer/update/NotificationActivity.java
    com/yc/pedometer/update/Updates.java
    com/yc/pedometer/utils/ActsOtaUtil.java
    com/yc/pedometer/utils/CustomShareUtils.java
    com/yc/pedometer/utils/GoogleSignInHelper.java
    com/yc/pedometer/utils/MarketUtil.java
    com/yc/pedometer/utils/NotificationsUtils.java
    com/yc/pedometer/utils/RegisterReceiverUtils.java
    com/yc/pedometer/utils/ShowAlphaDialog.java
    com/yc/pedometer/weather/CityCode.java
    com/yc/pedometer/weather/GetWeather.java
    com/yc/pedometer/web/GetWebToken.java
    com/yc/pedometer/wechat/Download.java
    com/yc/pedometer/wechat/DownloadData.java
    com/yc/pedometer/wechat/GetHeadPortrait.java
    com/yc/pedometer/wechat/GetUserKey.java
    com/yc/pedometer/wechat/RateUploadData.java
    com/yc/pedometer/wechat/UploadBallSportData.java
    com/yc/pedometer/wechat/UploadBloodPressureData.java
    com/yc/pedometer/wechat/UploadEcgData.java
    com/yc/pedometer/wechat/UploadMoodData.java
    com/yc/pedometer/wechat/UploadMultipleSportsData.java
    com/yc/pedometer/wechat/UploadOxygenData.java
    com/yc/pedometer/wechat/UploadRateData.java
    com/yc/pedometer/wechat/UploadRideData.java
    com/yc/pedometer/wechat/UploadRunStepData.java
    com/yc/pedometer/wechat/UploadSkipData.java
    com/yc/pedometer/wechat/UploadSleepData.java
    com/yc/pedometer/wechat/UploadStepData.java
    com/yc/pedometer/wechat/UploadTemperatureData.java
    com/yc/pedometer/wechat/UploadTrackData.java
    com/yc/pedometer/wechat/UploadWalkStepData.java
    com/yc/server/yc_sdk/common/UpdateManager.java
    com/yzq/zxinglibrary/android/CaptureActivity.java
    com/yzq/zxinglibrary/android/CaptureActivityHandler.java
    com/yzq/zxinglibrary/android/InactivityTimer.java
    com/yzq/zxinglibrary/android/Intents.java
    com/yzq/zxinglibrary/decode/DecodeFormatManager.java
    no/nordicsemi/android/dfu/BaseButtonlessDfuImpl.java
    no/nordicsemi/android/dfu/BaseCustomDfuImpl.java
    no/nordicsemi/android/dfu/BaseDfuImpl.java
    no/nordicsemi/android/dfu/ButtonlessDfuImpl.java
    no/nordicsemi/android/dfu/ButtonlessDfuWithBondSharingImpl.java
    no/nordicsemi/android/dfu/ButtonlessDfuWithoutBondSharingImpl.java
    no/nordicsemi/android/dfu/DfuBaseService.java
    no/nordicsemi/android/dfu/DfuService.java
    no/nordicsemi/android/dfu/DfuServiceController.java
    no/nordicsemi/android/dfu/DfuServiceInitiator.java
    no/nordicsemi/android/dfu/DfuServiceListenerHelper.java
    no/nordicsemi/android/dfu/DfuServiceProvider.java
    no/nordicsemi/android/dfu/ExperimentalButtonlessDfuImpl.java
    no/nordicsemi/android/dfu/LegacyButtonlessDfuImpl.java
    no/nordicsemi/android/dfu/LegacyDfuImpl.java
    no/nordicsemi/android/dfu/SecureDfuImpl.java
    no/nordicsemi/android/dfu/UuidHelper.java
    org/repackage/a/a/a/a.java
    org/repackage/a/a/a/a/b.java
    org/repackage/a/a/a/a/c.java
    一般功能-> 获取系统服务(getSystemService)
    com/actions/ibluz/device/bluzdevice/BluzDeviceBle.java
    com/actions/ibluz/device/bluzdevice/BluzDeviceEdr.java
    com/actions/ibluz/device/scan/ble/JellyBeanBleScanner.java
    com/actions/ibluz/util/Utils.java
    com/floatview/permission/rom/HuaweiUtils.java
    com/floatview/permission/rom/MeizuUtils.java
    com/floatview/permission/rom/MiuiUtils.java
    com/floatview/permission/rom/QikuUtils.java
    com/realsil/android/blehub/dfu/DfuService.java
    com/realsil/ota/GlobalGatt.java
    com/realsil/sdk/core/a/a.java
    com/realsil/sdk/core/b/a.java
    com/realsil/sdk/core/base/BaseService.java
    com/realsil/sdk/dfu/DfuService.java
    com/realsil/sdk/dfu/i/b.java
    com/realsil/sdk/dfu/v/c.java
    com/realsil/sdk/dfu/v/e.java
    com/ute/camera/LocationManager.java
    com/ute/camera/OnScreenHint.java
    com/ute/camera/PhotoModule.java
    com/ute/camera/VideoMenu.java
    com/ute/camera/WideAnglePanoramaModule.java
    com/ute/camera/WideAnglePanoramaUI.java
    com/ute/camera/ui/CameraRootView.java
    com/ute/camera/util/AccessibilityUtils.java
    com/ute/camera/util/CameraUtil.java
    com/yc/pedometer/ActivitySwitchCity.java
    com/yc/pedometer/AssistDevelopersActivity.java
    com/yc/pedometer/ContactsSelectActivity.java
    com/yc/pedometer/FirmwareActivity.java
    com/yc/pedometer/FriendsActivity.java
    com/yc/pedometer/MainActivity.java
    com/yc/pedometer/QQandWxLogin.java
    com/yc/pedometer/ScanConnectProcess.java
    com/yc/pedometer/TmallGenieActivity.java
    com/yc/pedometer/WeatherActivity.java
    com/yc/pedometer/alarm/AlarmCycleDialog.java
    com/yc/pedometer/alarm/AlarmCycleStatusDialog.java
    com/yc/pedometer/alarm/AlarmShakeCountDialog.java
    com/yc/pedometer/alarm/AlarmShakeCountDialog2.java
    com/yc/pedometer/alarm/AlarmTimeSetDialog.java
    com/yc/pedometer/amap/gpsstatus/GpsStatusProxy.java
    com/yc/pedometer/ble/LeDeviceListAdapter.java
    com/yc/pedometer/ble/SearchDeviceActivity.java
    com/yc/pedometer/bodyfat/view/BodyAutoQuitDialog.java
    com/yc/pedometer/bodyfat/view/BodyInformationConfirmDialog.java
    com/yc/pedometer/bodyfat/view/BodyInformationSelectDialog.java
    com/yc/pedometer/bodyfat/view/BodyTestDialog.java
    com/yc/pedometer/bodyfat/view/BodyTestDialog2.java
    com/yc/pedometer/bpprotocol/BpTimedTestTimeSetDialog.java
    com/yc/pedometer/customizesms/CustomizeSMSDialog.java
    com/yc/pedometer/customview/Android10AccessBackgroundDialog.java
    com/yc/pedometer/customview/BackGroundUpdateBLEProgressDialog.java
    com/yc/pedometer/customview/BottomAnimDialog.java
    com/yc/pedometer/customview/BpCalibrateStatusDialog.java
    com/yc/pedometer/customview/BpCalibrateValueDialog.java
    com/yc/pedometer/customview/BpNightTimeSetDialog.java
    com/yc/pedometer/customview/BpTimeSetDialog.java
    com/yc/pedometer/customview/CSBPPersonalInfoConfirmDialog.java
    com/yc/pedometer/customview/CloseBtCallDialog.java
    com/yc/pedometer/customview/CountSetDialog.java
    com/yc/pedometer/customview/CustomAutoQuitDialog.java
    com/yc/pedometer/customview/CustomCardProgressDialog.java
    com/yc/pedometer/customview/CustomCheckBoxDialog.java
    com/yc/pedometer/customview/CustomCheckBoxScreenDialog.java
    com/yc/pedometer/customview/CustomCheckBoxTimedTestDialog.java
    com/yc/pedometer/customview/CustomECGCheckBoxDialog.java
    com/yc/pedometer/customview/CustomECGCheckBoxDialogGain.java
    com/yc/pedometer/customview/CustomRenameDialog.java
    com/yc/pedometer/customview/CustomSelectDialog.java
    com/yc/pedometer/customview/CustomSetHeadDialog.java
    com/yc/pedometer/customview/CustomVersionInformationDialog.java
    com/yc/pedometer/customview/GoalSelectDialog.java
    com/yc/pedometer/customview/MyHorizontalScrollView.java
    com/yc/pedometer/customview/NoTitleDoubleDialog.java
    com/yc/pedometer/customview/NormalDialogNoTitle.java
    com/yc/pedometer/customview/OpenGpsDialog.java
    com/yc/pedometer/customview/RateSelectDialog.java
    com/yc/pedometer/customview/ScanQRCodeInvalidDialog.java
    com/yc/pedometer/customview/SportTypeHorizontalScrollView.java
    com/yc/pedometer/customview/SwitchCityDialog.java
    com/yc/pedometer/customview/TargetDistanceDialog.java
    com/yc/pedometer/customview/TimeSetDialog.java
    com/yc/pedometer/customview/TimeZoneDialog.java
    com/yc/pedometer/customview/UserAgreementDialog.java
    com/yc/pedometer/customview/WeatherExceptionDialog.java
    com/yc/pedometer/customview/offScreenTimeDialog.java
    com/yc/pedometer/datetime/AbstractWheelTextAdapter.java
    com/yc/pedometer/ecg/EcgInformationConfirmDialog.java
    com/yc/pedometer/ecg/EcgLabelDialog.java
    com/yc/pedometer/ecg/EcgShareDialog.java
    com/yc/pedometer/ecg/EcgTestDialog.java
    com/yc/pedometer/event/EventCycleDialog.java
    com/yc/pedometer/event/EventCycleStatusDialog.java
    com/yc/pedometer/event/EventTimeSetDialog.java
    com/yc/pedometer/fragment/BtConnectGuideMainDialogFragment.java
    com/yc/pedometer/fragment/FragmentHomePage.java
    com/yc/pedometer/fragment/FragmentSmartPlay.java
    com/yc/pedometer/fragment/FragmentWeekly.java
    com/yc/pedometer/fragment/ScannerFragment.java
    com/yc/pedometer/onlinedial/DialColorPickerDialog.java
    com/yc/pedometer/onlinedial/DialSelectPicDialog.java
    com/yc/pedometer/oxygen/OxygenCircleSetDialog.java
    com/yc/pedometer/remind/ContactsUtils.java
    com/yc/pedometer/remind/SelectedListAdapter.java
    com/yc/pedometer/remind/SlideCutListView.java
    com/yc/pedometer/sdk/BLEServiceOperate.java
    com/yc/pedometer/sdk/BluetoothLeService.java
    com/yc/pedometer/sdk/MusicControl.java
    com/yc/pedometer/sports/activity/GoogleSportMapActivity.java
    com/yc/pedometer/sports/activity/SportMapActivity.java
    com/yc/pedometer/sports/activity/SportNoMapActivity.java
    com/yc/pedometer/sports/service/GoogleLocationService.java
    com/yc/pedometer/sports/util/AudioManagerUtil.java
    com/yc/pedometer/sports/util/ScreenUtils.java
    com/yc/pedometer/sports/util/SoundPoolHelper.java
    com/yc/pedometer/sports/widget/DensityUtil.java
    com/yc/pedometer/temperature/TemperatureCircleSetDialog.java
    com/yc/pedometer/temperature/TemperatureHighAlarmSetDialog.java
    com/yc/pedometer/temperature/TemperatureUnitDialog.java
    com/yc/pedometer/utils/EditTextShakeHelper.java
    com/yc/pedometer/utils/EndCallUtil.java
    com/yc/pedometer/utils/GattDeviveConnection.java
    com/yc/pedometer/utils/NetworkUtils.java
    com/yc/pedometer/utils/NotificationsUtils.java
    com/yc/pedometer/utils/ScanPairingBtUtil.java
    com/yc/pedometer/utils/SimCardUtil.java
    com/yc/server/yc_sdk/common/CommonUtil.java
    com/yzq/zxinglibrary/android/BeepManager.java
    com/yzq/zxinglibrary/camera/CameraConfigurationManager.java
    no/nordicsemi/android/dfu/DfuBaseService.java
    no/nordicsemi/android/dfu/DfuServiceInitiator.java
    调用java反射机制
    com/actions/ibluz/device/BluzDeviceA2dp.java
    com/actions/ibluz/device/BluzDeviceA2dpBase.java
    com/actions/ibluz/device/BluzDeviceA2dpCompat.java
    com/actions/ibluz/device/bluzdevice/BluzDeviceBle.java
    com/nineoldandroids/animation/PropertyValuesHolder.java
    com/nineoldandroids/util/ReflectiveProperty.java
    com/realsil/android/blehub/dfu/DfuService.java
    com/realsil/ota/GlobalGatt.java
    com/realsil/sdk/core/bluetooth/impl/BluetoothAdapterImpl.java
    com/realsil/sdk/core/bluetooth/impl/BluetoothDeviceImpl.java
    com/realsil/sdk/core/bluetooth/impl/BluetoothGattImpl.java
    com/realsil/sdk/core/bluetooth/impl/BluetoothProfileImpl.java
    com/realsil/sdk/core/bluetooth/utils/BluetoothHelper.java
    com/realsil/sdk/core/bluetooth/utils/ReflectionHelper.java
    com/yanzhenjie/recyclerview/AdapterWrapper.java
    com/yc/pedometer/SystemBarTintManager.java
    com/yc/pedometer/ble/ClsUtils.java
    com/yc/pedometer/customview/SuperEditText.java
    com/yc/pedometer/sdk/UTESQLUtil.java
    com/yc/pedometer/sports/util/ScreenUtils.java
    com/yc/pedometer/sports/util/StatusBarUtil.java
    com/yc/pedometer/sports/widget/OverScrollView.java
    com/yc/pedometer/utils/EndCallUtil.java
    com/yc/pedometer/utils/NotificationsUtils.java
    net/jpountz/util/UnsafeUtils.java
    net/sourceforge/pinyin4j/ResourceHelper.java
    no/nordicsemi/android/dfu/BaseDfuImpl.java
    no/nordicsemi/android/dfu/DfuBaseService.java
    org/greenrobot/eventbus/SubscriberMethod.java
    org/greenrobot/eventbus/SubscriberMethodFinder.java
    rx/internal/schedulers/NewThreadWorker.java
    rx/internal/util/PlatformDependent.java
    rx/internal/util/unsafe/UnsafeAccess.java
    rx/plugins/RxJavaPlugins.java
    网络通信-> DefaultHttpClient Connection
    组件-> 启动 Service
    组件-> 发送广播
    com/actions/ibluz/device/bluzdevice/BluzDeviceBase.java
    com/ute/camera/CameraActivity.java
    com/ute/camera/VideoModule.java
    com/ute/camera/util/CameraUtil.java
    com/yc/gloryfit/wxapi/WXEntryActivity.java
    com/yc/pedometer/CallRemindActivity.java
    com/yc/pedometer/CreateQRCodeActivity.java
    com/yc/pedometer/FirmwareActivity.java
    com/yc/pedometer/FriendsActivity.java
    com/yc/pedometer/GoalActivity.java
    com/yc/pedometer/MainActivity.java
    com/yc/pedometer/PassWordActivity.java
    com/yc/pedometer/PassWordActivity_KeyBorad.java
    com/yc/pedometer/SystemSettingsActivity.java
    com/yc/pedometer/TwitterPlatform.java
    com/yc/pedometer/WeatherActivity.java
    com/yc/pedometer/calendar/CalendarDialog24HourRate.java
    com/yc/pedometer/calendar/CalendarDialogCommon.java
    com/yc/pedometer/calendar/CalendarDialogMenstruation.java
    com/yc/pedometer/calendar/RateVariabilityCalendarDialog.java
    com/yc/pedometer/feedback/PostNewFeedback.java
    com/yc/pedometer/fragment/FragmentHomePage.java
    com/yc/pedometer/fragment/FragmentMine.java
    com/yc/pedometer/fragment/FragmentSmartPlay.java
    com/yc/pedometer/fragment/FragmentWeekly.java
    com/yc/pedometer/remind/MessageAccessibilityService.java
    com/yc/pedometer/remind/NotificationClickReceiver.java
    com/yc/pedometer/remind/StatusbarMsgNotificationListener.java
    com/yc/pedometer/sdk/BluetoothLeService.java
    com/yc/pedometer/sdk/DataProcessing.java
    com/yc/pedometer/sdk/MusicControl.java
    com/yc/pedometer/sports/device/Utils.java
    com/yc/pedometer/sports/fragment/PageFragment.java
    com/yc/pedometer/update/Updates.java
    com/yc/pedometer/weather/CityCode.java
    com/yc/pedometer/weather/GetWeather.java
    com/yc/pedometer/web/GetWebToken.java
    com/yc/pedometer/wechat/Download.java
    com/yc/pedometer/wechat/DownloadData.java
    com/yc/pedometer/wechat/GetHeadPortrait.java
    com/yc/pedometer/wechat/GetUserKey.java
    com/yc/pedometer/wechat/RateUploadData.java
    com/yc/pedometer/wechat/UploadBallSportData.java
    com/yc/pedometer/wechat/UploadBloodPressureData.java
    com/yc/pedometer/wechat/UploadEcgData.java
    com/yc/pedometer/wechat/UploadMoodData.java
    com/yc/pedometer/wechat/UploadMultipleSportsData.java
    com/yc/pedometer/wechat/UploadOxygenData.java
    com/yc/pedometer/wechat/UploadRateData.java
    com/yc/pedometer/wechat/UploadRideData.java
    com/yc/pedometer/wechat/UploadRunStepData.java
    com/yc/pedometer/wechat/UploadSkipData.java
    com/yc/pedometer/wechat/UploadSleepData.java
    com/yc/pedometer/wechat/UploadStepData.java
    com/yc/pedometer/wechat/UploadTemperatureData.java
    com/yc/pedometer/wechat/UploadTrackData.java
    com/yc/pedometer/wechat/UploadWalkStepData.java
    no/nordicsemi/android/dfu/DfuBaseService.java
    no/nordicsemi/android/dfu/DfuServiceController.java
    网络通信-> 蓝牙连接
    com/actions/ibluz/IBluetooth.java
    com/actions/ibluz/IBluetoothA2dp.java
    com/actions/ibluz/device/BluzDeviceA2dp.java
    com/actions/ibluz/device/BluzDeviceA2dpBase.java
    com/actions/ibluz/device/BluzDeviceA2dpCompat.java
    com/actions/ibluz/device/GetConnectedDeviceList.java
    com/actions/ibluz/device/IA2dpListener.java
    com/actions/ibluz/device/IBluzDeviceA2dp.java
    com/actions/ibluz/device/bluzdevice/BluzDeviceBase.java
    com/actions/ibluz/device/bluzdevice/BluzDeviceBle.java
    com/actions/ibluz/device/bluzdevice/BluzDeviceEdr.java
    com/actions/ibluz/device/bluzdevice/BluzDeviceSpp.java
    com/actions/ibluz/device/scan/SimpleScanCallback.java
    com/actions/ibluz/device/scan/ble/JellyBeanBleScanner.java
    com/actions/ibluz/device/scan/ble/LollipopBleScanner.java
    com/actions/ibluz/factory/BluzDeviceFactory.java
    com/actions/ibluz/factory/IBluzDevice.java
    com/realsil/android/blehub/dfu/DfuService.java
    com/realsil/android/blehub/dfu/RealsilDfu.java
    com/realsil/ota/ExtendedBluetoothDevice.java
    com/realsil/ota/GlobalGatt.java
    com/realsil/sdk/bbpro/core/gatt/GattTransportConnParams.java
    com/realsil/sdk/bbpro/core/gatt/GattTransportLayer.java
    com/realsil/sdk/bbpro/core/gatt/MultiGattTransportLayer.java
    com/realsil/sdk/bbpro/core/transportlayer/SppTransportLayer.java
    com/realsil/sdk/bbpro/core/transportlayer/TransportConnParams.java
    com/realsil/sdk/bbpro/core/transportlayer/TransportLayer.java
    com/realsil/sdk/bbpro/core/transportlayer/TransportLayerCallback.java
    com/realsil/sdk/core/a/a.java
    com/realsil/sdk/core/b/a.java
    com/realsil/sdk/core/bluetooth/BluetoothProfileCallback.java
    com/realsil/sdk/core/bluetooth/BluetoothProfileManager.java
    com/realsil/sdk/core/bluetooth/RtkBluetoothManager.java
    com/realsil/sdk/core/bluetooth/RtkBluetoothManagerCallback.java
    com/realsil/sdk/core/bluetooth/connection/BluetoothClient.java
    com/realsil/sdk/core/bluetooth/connection/le/BluetoothGattClient.java
    com/realsil/sdk/core/bluetooth/connection/le/BluetoothGattClientImpl.java
    com/realsil/sdk/core/bluetooth/connection/legacy/BluetoothSpp.java
    com/realsil/sdk/core/bluetooth/connection/legacy/BluetoothSppManager.java
    com/realsil/sdk/core/bluetooth/connection/legacy/SppConnParameters.java
    com/realsil/sdk/core/bluetooth/gatt/RtkGattBearInterface.java
    com/realsil/sdk/core/bluetooth/gatt/RtkGattBearInterfaceImpl.java
    com/realsil/sdk/core/bluetooth/impl/BluetoothAdapterImpl.java
    com/realsil/sdk/core/bluetooth/impl/BluetoothDeviceImpl.java
    com/realsil/sdk/core/bluetooth/impl/BluetoothHeadsetImpl.java
    com/realsil/sdk/core/bluetooth/impl/BluetoothProfileImpl.java
    com/realsil/sdk/core/bluetooth/scanner/BrEdrScannerPresenter.java
    com/realsil/sdk/core/bluetooth/scanner/ExtendedBluetoothDevice.java
    com/realsil/sdk/core/bluetooth/scanner/LeScannerPresenter.java
    com/realsil/sdk/core/bluetooth/scanner/LegacyScannerPresenter.java
    com/realsil/sdk/core/bluetooth/scanner/compat/CompatScanFilter.java
    com/realsil/sdk/core/bluetooth/utils/BluetoothHelper.java
    com/realsil/sdk/core/bluetooth/utils/ReflectionHelper.java
    com/realsil/sdk/core/c/a.java
    com/realsil/sdk/core/c/b.java
    com/realsil/sdk/core/e/a.java
    com/realsil/sdk/core/e/d.java
    com/realsil/sdk/core/e/e.java
    com/realsil/sdk/dfu/DfuService.java
    com/realsil/sdk/dfu/i/b.java
    com/realsil/sdk/dfu/k/d.java
    com/realsil/sdk/dfu/m/d.java
    com/realsil/sdk/dfu/n/f.java
    com/realsil/sdk/dfu/o/e.java
    com/realsil/sdk/dfu/p/d.java
    com/realsil/sdk/dfu/q/i.java
    com/realsil/sdk/dfu/q/j.java
    com/realsil/sdk/dfu/s/b.java
    com/realsil/sdk/dfu/t/c.java
    com/realsil/sdk/dfu/u/m.java
    com/realsil/sdk/dfu/utils/BluetoothDfuAdapter.java
    com/realsil/sdk/dfu/utils/GattDfuAdapter.java
    com/realsil/sdk/dfu/utils/HeadsetDfuAdapter.java
    com/realsil/sdk/dfu/utils/HidDfuAdapter.java
    com/realsil/sdk/dfu/utils/SppDfuAdapter.java
    com/realsil/sdk/dfu/w/a.java
    com/yc/pedometer/MainActivity.java
    com/yc/pedometer/ScanConnectProcess.java
    com/yc/pedometer/ble/BleDevices.java
    com/yc/pedometer/ble/ClsUtils.java
    com/yc/pedometer/ble/SearchDeviceActivity.java
    com/yc/pedometer/fragment/FragmentHomePage.java
    com/yc/pedometer/fragment/FragmentSmartPlay.java
    com/yc/pedometer/fragment/ScannerFragment.java
    com/yc/pedometer/sdk/BLEServiceOperate.java
    com/yc/pedometer/sdk/BluetoothLeService.java
    com/yc/pedometer/sdk/DeviceScanInterfacer.java
    com/yc/pedometer/sdk/WriteCommandToBLE.java
    com/yc/pedometer/utils/BluetoothUtil.java
    com/yc/pedometer/utils/GattDeviveConnection.java
    com/yc/pedometer/utils/ScanPairingBtUtil.java
    no/nordicsemi/android/dfu/BaseDfuImpl.java
    no/nordicsemi/android/dfu/DfuBaseService.java
    no/nordicsemi/android/dfu/internal/scanner/BootloaderScannerJB.java
    no/nordicsemi/android/dfu/internal/scanner/BootloaderScannerLollipop.java
    网络通信-> HTTP建立连接
    进程操作-> 杀死进程 com/yc/pedometer/MainActivity.java
    com/yc/server/yc_sdk/common/UpdateManager.java
    demo/Pinyin4jAppletDemo.java
    命令执行-> getRuntime.exec() com/yc/pedometer/log/upload/LogcatHelper.java
    com/yc/pedometer/sports/util/OSUtils.java
    隐私数据-> 读写通讯录
    隐私数据-> 获取GPS位置信息
    加密解密-> Crypto加解密组件
    加密解密-> Base64 解密 com/tencent/mm/a/a.java
    com/yc/pedometer/wechat/RSAUtils.java
    加密解密-> 信息摘要算法
    一般功能-> 获取活动网路信息 com/yc/pedometer/utils/SimCardUtil.java
    com/yc/server/yc_sdk/common/CommonUtil.java
    一般功能-> 设置手机铃声，媒体音量 com/yc/pedometer/sdk/MusicControl.java
    com/yc/pedometer/sports/util/SoundPoolHelper.java
    网络通信-> WebView JavaScript接口
    网络通信-> WebView 相关
    隐私数据-> 屏幕截图，截取自己应用内部界面
    隐私数据-> 拍照摄像
    隐私数据-> 获取已安装的应用程序
    进程操作-> 获取进程pid
    进程操作-> 获取运行的进程\服务 com/actions/ibluz/util/Utils.java
    com/realsil/sdk/core/base/BaseService.java
    com/yc/pedometer/sdk/BluetoothLeService.java
    DEX-> 动态加载 com/ute/camera/PreferenceInflater.java
    net/jpountz/lz4/LZ4Factory.java
    net/jpountz/xxhash/XXHashFactory.java
    辅助功能accessibility相关 com/ute/camera/ui/Switch.java
    一般功能-> 加载so文件
    隐私数据-> 屏幕截图，截取自己应用内部界面
    加密解密-> Base64 加密 com/yc/pedometer/ecg/EcgAnalysisActivity.java
    com/yc/pedometer/wechat/RSAUtils.java
    一般功能-> Android通知 com/yc/pedometer/fragment/FragmentSmartPlay.java
    com/yc/pedometer/sdk/BluetoothLeService.java
    no/nordicsemi/android/dfu/DfuBaseService.java
    设备指纹-> getSimOperator com/yc/pedometer/utils/SimCardUtil.java
    设备指纹-> 查看运营商信息 com/yc/pedometer/utils/SimCardUtil.java
    隐私数据-> 剪贴板数据读写操作 com/yc/pedometer/AssistDevelopersActivity.java
    com/yc/pedometer/TmallGenieActivity.java
    网络通信-> URLConnection com/yc/pedometer/sports/util/HttpRequestor.java
    网络通信-> HTTPS建立连接 h/b.java
    h/c.java
    组件-> ContentProvider com/ute/camera/PhotoModule.java
    组件-> Provider openFile com/ute/camera/PhotoModule.java
    一般功能-> 传感器相关操作 com/ute/camera/PhotoModule.java
    JavaScript 接口方法 com/yc/pedometer/JavaScriptinterface.java
    隐私数据-> 发送SMS短信息 com/yc/pedometer/sdk/BluetoothLeService.java
    一般功能-> PowerManager操作 com/yc/pedometer/sdk/BluetoothLeService.java
    网络通信-> SSL证书处理 h/c.java
    一般功能-> 查看\修改Android系统属性 com/yc/pedometer/SystemBarTintManager.java
    隐私数据-> 录制视频 com/ute/camera/VideoModule.java

    安全漏洞检测

    高危
    2
    警告
    9
    信息
    2
    安全
    1
    屏蔽
    0
    序号 问题 等级 参考标准 文件位置 操作
    1 应用程序使用不安全的随机数生成器 警告 CWE: CWE-330: 使用不充分的随机数
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-6     		升级会员：解锁高级权限
    对应用 com.yc.denverfit2 屏蔽 android_insecure_random 规则 仅对这些文件屏蔽 android_insecure_random 规则
    2 应用程序记录日志信息,不得记录敏感信息 信息 CWE: CWE-532: 通过日志文件的信息暴露
    OWASP MASVS: MSTG-STORAGE-3     		升级会员：解锁高级权限
    对应用 com.yc.denverfit2 屏蔽 android_logging 规则 仅对这些文件屏蔽 android_logging 规则
    3 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 警告 CWE: CWE-276: 默认权限不正确
    OWASP Top 10: M2: Insecure Data Storage
    OWASP MASVS: MSTG-STORAGE-2     		升级会员：解锁高级权限
    对应用 com.yc.denverfit2 屏蔽 android_read_write_external 规则 仅对这些文件屏蔽 android_read_write_external 规则
    4 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 警告 CWE: CWE-312: 明文存储敏感信息
    OWASP Top 10: M9: Reverse Engineering
    OWASP MASVS: MSTG-STORAGE-14     		升级会员：解锁高级权限
    对应用 com.yc.denverfit2 屏蔽 android_hardcoded 规则 仅对这些文件屏蔽 android_hardcoded 规则
    5 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 警告 CWE: CWE-276: 默认权限不正确
    OWASP Top 10: M2: Insecure Data Storage
    OWASP MASVS: MSTG-STORAGE-2     		升级会员：解锁高级权限
    对应用 com.yc.denverfit2 屏蔽 android_temp_file 规则 仅对这些文件屏蔽 android_temp_file 规则
    6 SHA-1是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用了破损或被认为是不安全的加密算法
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-4     		升级会员：解锁高级权限
    对应用 com.yc.denverfit2 屏蔽 android_sha1 规则 仅对这些文件屏蔽 android_sha1 规则
    7 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 警告 CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当（'SQL 注入'）
    OWASP Top 10: M7: Client Code Quality     		升级会员：解锁高级权限
    对应用 com.yc.denverfit2 屏蔽 android_sql_raw_query 规则 仅对这些文件屏蔽 android_sql_raw_query 规则
    8 不安全的Web视图实现。可能存在WebView任意代码执行漏洞 警告 CWE: CWE-749: 暴露危险方法或函数
    OWASP Top 10: M1: Improper Platform Usage
    OWASP MASVS: MSTG-PLATFORM-7     		升级会员：解锁高级权限
    对应用 com.yc.denverfit2 屏蔽 android_webview 规则 仅对这些文件屏蔽 android_webview 规则
    9 MD5是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用了破损或被认为是不安全的加密算法
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-4     		升级会员：解锁高级权限
    对应用 com.yc.denverfit2 屏蔽 android_md5 规则 仅对这些文件屏蔽 android_md5 规则
    10 IP地址泄露 警告 CWE: CWE-200: 信息泄露
    OWASP MASVS: MSTG-CODE-2     		升级会员：解锁高级权限
    对应用 com.yc.denverfit2 屏蔽 android_ip_disclosure 规则 仅对这些文件屏蔽 android_ip_disclosure 规则
    11 启用了调试配置。生产版本不能是可调试的 高危 CWE: CWE-919: 移动应用程序中的弱点
    OWASP Top 10: M1: Improper Platform Usage
    OWASP MASVS: MSTG-RESILIENCE-2     		升级会员：解锁高级权限
    对应用 com.yc.denverfit2 屏蔽 android_aar_jar_debug_enabled 规则 仅对这些文件屏蔽 android_aar_jar_debug_enabled 规则
    12 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 信息
    OWASP MASVS: MSTG-STORAGE-10     		升级会员：解锁高级权限
    对应用 com.yc.denverfit2 屏蔽 android_clipboard_copy 规则 仅对这些文件屏蔽 android_clipboard_copy 规则
    13 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 高危 CWE: CWE-649: 依赖于混淆或加密安全相关输入而不进行完整性检查
    OWASP Top 10: M5: Insufficient Cryptography
    OWASP MASVS: MSTG-CRYPTO-3     		升级会员：解锁高级权限
    对应用 com.yc.denverfit2 屏蔽 cbc_padding_oracle 规则 仅对这些文件屏蔽 cbc_padding_oracle 规则
    14 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 安全
    OWASP MASVS: MSTG-NETWORK-4     		升级会员：解锁高级权限
    对应用 com.yc.denverfit2 屏蔽 android_ssl_pinning 规则 仅对这些文件屏蔽 android_ssl_pinning 规则

    Native库安全分析

    序号 动态库 NX(堆栈禁止执行) PIE STACK CANARY(栈保护) RELRO RPATH（指定SO搜索路径） RUNPATH（指定SO搜索路径） FORTIFY(常用函数加强检查) SYMBOLS STRIPPED(裁剪符号表)
    1 arm64-v8a/libJni_wgs2gcj.so True
    info
    二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。    		 动态共享对象 (DSO)
    info
    共享库是使用 -fPIC 标志构建的，该标志启用与地址无关的代码。这使得面向返回的编程 （ROP） 攻击更难可靠地执行。    		 True
    info
    这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出    		 Full RELRO
    info
    此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。    		 None
    info
    二进制文件没有设置运行时搜索路径或RPATH    		 None
    info
    二进制文件没有设置 RUNPATH    		 False
    warning
    二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用    		 True
    info
    符号被剥离
    2 arm64-v8a/libRtkAesJni.so True
    info
    二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。    		 动态共享对象 (DSO)
    info
    共享库是使用 -fPIC 标志构建的，该标志启用与地址无关的代码。这使得面向返回的编程 （ROP） 攻击更难可靠地执行。    		 True
    info
    这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出    		 Full RELRO
    info
    此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。    		 None
    info
    二进制文件没有设置运行时搜索路径或RPATH    		 None
    info
    二进制文件没有设置 RUNPATH    		 False
    warning
    二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用    		 True
    info
    符号被剥离

    文件分析

    序号 问题 文件
    1 检测到应用内硬编码的证书或密钥文件。 assets/srca.cer

    行为分析

    编号 行为 标签 文件
    00022 从给定的文件绝对路径打开文件 文件
    		升级会员：解锁高级权限
    00063 隐式意图（查看网页、拨打电话等） 控制
    		升级会员：解锁高级权限
    00072 将 HTTP 输入流写入文件 命令
    网络
    文件
    		升级会员：解锁高级权限
    00089 连接到 URL 并接收来自服务器的输入流 命令
    网络
    		升级会员：解锁高级权限
    00030 通过给定的 URL 连接到远程服务器 网络
    		升级会员：解锁高级权限
    00094 连接到 URL 并从中读取数据 命令
    网络
    		升级会员：解锁高级权限
    00108 从给定的 URL 读取输入流 网络
    命令
    		升级会员：解锁高级权限
    00054 从文件安装其他APK 反射
    		升级会员：解锁高级权限
    00125 检查给定的文件路径是否存在 文件
    		升级会员：解锁高级权限
    00051 通过setData隐式意图（查看网页、拨打电话等） 控制
    		升级会员：解锁高级权限
    00036 从 res/raw 目录获取资源文件 反射
    		升级会员：解锁高级权限
    00183 获取当前相机参数并更改设置 相机
    		升级会员：解锁高级权限
    00013 读取文件并将其放入流中 文件
    		升级会员：解锁高级权限
    00003 将压缩后的位图数据放入JSON对象中 相机
    		升级会员：解锁高级权限
    00005 获取文件的绝对路径并将其放入 JSON 对象 文件
    		升级会员：解锁高级权限
    00001 初始化位图对象并将数据（例如JPEG）压缩为位图对象 相机
    		升级会员：解锁高级权限
    00112 获取日历事件的日期 信息收集
    日历
    		升级会员：解锁高级权限
    00018 准备好 JSON 对象并填写位置信息 位置
    信息收集
    		升级会员：解锁高级权限
    00016 获取设备的位置信息并将其放入 JSON 对象 位置
    信息收集
    		升级会员：解锁高级权限
    00012 读取数据并放入缓冲流 文件
    		升级会员：解锁高级权限
    00142 获取日历信息 信息收集
    日历
    		升级会员：解锁高级权限
    00121 创建目录 文件
    命令
    		升级会员：解锁高级权限
    00104 检查给定路径是否是目录 文件
    		升级会员：解锁高级权限
    00187 查询 URI 并检查结果 信息收集
    短信
    通话记录
    日历
    		升级会员：解锁高级权限
    00077 读取敏感数据（短信、通话记录等） 信息收集
    短信
    通话记录
    日历
    		升级会员：解锁高级权限
    00192 获取短信收件箱中的消息 短信
    		升级会员：解锁高级权限
    00028 从assets目录中读取文件 文件
    		升级会员：解锁高级权限
    00191 获取短信收件箱中的消息 短信
    		升级会员：解锁高级权限
    00096 连接到 URL 并设置请求方法 命令
    网络
    		升级会员：解锁高级权限
    00109 连接到 URL 并获取响应代码 网络
    命令
    		升级会员：解锁高级权限
    00153 通过 HTTP 发送二进制数据 http
    		升级会员：解锁高级权限
    00091 从广播中检索数据 信息收集
    		升级会员：解锁高级权限
    00023 从当前应用程序启动另一个应用程序 反射
    控制
    		升级会员：解锁高级权限
    00079 隐藏当前应用程序的图标 规避
    		升级会员：解锁高级权限
    00065 获取SIM卡提供商的国家代码 信息收集
    		升级会员：解锁高级权限
    00189 获取短信内容 短信
    		升级会员：解锁高级权限
    00188 获取短信地址 短信
    		升级会员：解锁高级权限
    00011 从 URI 查询数据（SMS、CALLLOGS） 短信
    通话记录
    信息收集
    		升级会员：解锁高级权限
    00200 从联系人列表中查询数据 信息收集
    联系人
    		升级会员：解锁高级权限
    00201 从通话记录中查询数据 信息收集
    通话记录
    		升级会员：解锁高级权限
    00009 将游标中的数据放入JSON对象 文件
    		升级会员：解锁高级权限
    00035 查询已安装的包列表 反射
    		升级会员：解锁高级权限
    00193 发送短信 短信
    		升级会员：解锁高级权限
    00014 将文件读入流并将其放入 JSON 对象中 文件
    		升级会员：解锁高级权限
    00080 将录制的音频/视频保存到文件 录制音视频
    文件
    		升级会员：解锁高级权限
    00101 初始化录音机 录制音视频
    		升级会员：解锁高级权限
    00198 初始化录音机并开始录音 录制音视频
    		升级会员：解锁高级权限
    00138 设置音频源（MIC） 录制音视频
    		升级会员：解锁高级权限
    00133 开始录音 录制音视频
    命令
    		升级会员：解锁高级权限
    00041 将录制的音频/视频保存到文件 录制音视频
    		升级会员：解锁高级权限

    敏感权限分析

    恶意软件常用权限 11/30
    android.permission.WAKE_LOCK
    android.permission.ACCESS_FINE_LOCATION
    android.permission.RECEIVE_SMS
    android.permission.READ_CONTACTS
    android.permission.ACCESS_COARSE_LOCATION
    android.permission.READ_PHONE_STATE
    android.permission.READ_CALL_LOG
    android.permission.CAMERA
    android.permission.VIBRATE
    android.permission.CALL_PHONE
    android.permission.GET_ACCOUNTS
    其它常用权限 16/46
    android.permission.BLUETOOTH
    android.permission.BLUETOOTH_ADMIN
    android.permission.INTERNET
    android.permission.ACCESS_WIFI_STATE
    android.permission.ACCESS_NETWORK_STATE
    android.permission.CHANGE_WIFI_STATE
    android.permission.WRITE_EXTERNAL_STORAGE
    android.permission.READ_MEDIA_IMAGES
    android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
    android.permission.FLASHLIGHT
    android.permission.FOREGROUND_SERVICE
    android.permission.ACCESS_BACKGROUND_LOCATION
    android.permission.ACTIVITY_RECOGNITION
    android.permission.READ_EXTERNAL_STORAGE
    com.google.android.gms.permission.AD_ID
    com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

    恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
    其它常用权限 是已知恶意软件经常滥用的权限。

    IP地理位置

    恶意域名检测

    域名 状态 中国境内 位置信息 解析
    www.kangyuanai.com 安全
    		 是 IP地址: 43.139.88.175
    国家: 中国
    地区: 广东
    城市: 广州
    查看: 高德地图
    api.nebulalive.com 安全
    		 否 IP地址: 8.209.119.36
    国家: 德国
    地区: 黑森
    城市: 美因河畔法兰克福
    查看: Google 地图
    ap.ute-tech.com.cn 安全
    		 否 IP地址: 13.126.203.50
    国家: 印度
    地区: 马哈拉施特拉邦
    城市: 孟买
    查看: Google 地图
    health.vita-course.com 安全
    		 是 IP地址: 123.59.144.156
    国家: 中国
    地区: 北京
    城市: 北京
    查看: 高德地图
    www.samsungapps.com 安全
    		 否 IP地址: 54.229.93.185
    国家: 爱尔兰
    地区: 都柏林
    城市: 都柏林
    查看: Google 地图
    tt-smartband-weixin.ute-tech.com.cn 安全
    		 是 IP地址: 121.40.142.20
    国家: 中国
    地区: 浙江
    城市: 杭州
    查看: 高德地图
    app.help-document.com 安全
    		 是 IP地址: 58.220.52.239
    国家: 中国
    地区: 江苏
    城市: 扬州
    查看: 高德地图
    nuuneoi.com 安全
    		 否 IP地址: 104.21.10.157
    国家: 美国
    地区: 加利福尼亚
    城市: 旧金山
    查看: Google 地图
    www.ute-tech.com.cn 安全
    		 是 IP地址: 121.41.174.175
    国家: 中国
    地区: 浙江
    城市: 杭州
    查看: 高德地图
    api.aicaring.com 安全
    		 是 IP地址: 39.107.99.42
    国家: 中国
    地区: 北京
    城市: 北京
    查看: 高德地图
    mobile.ute-tech.com.cn 安全
    		 是 IP地址: 61.160.192.98
    国家: 中国
    地区: 江苏
    城市: 常州
    查看: 高德地图
    apsouth.uteasy.com 安全
    		 否 IP地址: 15.207.154.43
    国家: 印度
    地区: 马哈拉施特拉邦
    城市: 孟买
    查看: Google 地图
    twitter.com 安全
    		 否 IP地址: 172.66.0.227
    国家: 美国
    地区: 加利福尼亚
    城市: 旧金山
    查看: Google 地图
    question.uteasy.com 安全
    		 是 IP地址: 122.228.214.101
    国家: 中国
    地区: 浙江
    城市: 温州
    查看: 高德地图
    m.sonyselect.cn 安全
    		 否 没有可用的地理位置信息。
    jyalgorithmtest.jianyouhealth.com 安全
    		 是 IP地址: 47.106.98.209
    国家: 中国
    地区: 广东
    城市: 深圳
    查看: 高德地图

    手机号提取

    手机号 源码文件
    18707736693
    		com/yc/pedometer/ecg/EcgAnalysisActivity.java

    URL链接分析

    URL信息 源码文件
    https://www.ute-tech.com.cn/ci3/index.php/weather/sdkweather
    https://www.ute-tech.com.cn/ci3/index.php/weather/getweathercharge
    https://apsouth.uteasy.com/ci3/index.php/weather/sdkweather
    https://ap.ute-tech.com.cn/ci3/index.php/weather/getweatherchargeaws
    		com/yc/pedometer/weather/GetWeather.java
    https://app.help-document.com/privacy-policy/denverfit2_en.html
    		com/yc/pedometer/PrivacyPolicyActivity.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/deviceinfo
    		com/yc/pedometer/wechat/UploadPhoneInfo.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/upload_spo2_data
    		com/yc/pedometer/wechat/UploadOxygenData.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/upload_24movement_data
    		com/yc/pedometer/wechat/UploadMultipleSportsData.java
    https://github.com/nordicsemiconductor/pc-nrfutil/
    		no/nordicsemi/android/dfu/internal/ArchiveInputStream.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/upload_mpf_data
    		com/yc/pedometer/wechat/UploadMoodData.java
    https://oss-cn-shanghai.aliyuncs.com
    https://www.ute-tech.com.cn/ci3/index.php/api/user/upload_ecg_data
    		com/yc/pedometer/wechat/UploadEcgData.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/upload_bp_data
    		com/yc/pedometer/wechat/UploadBloodPressureData.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/upload_jump_data
    		com/yc/pedometer/wechat/UploadDataTest.java
    https://www.ute-tech.com.cn/ci3/index.php/api/activation/addactivation
    		com/yc/pedometer/wechat/UploadBandInfo.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/
    		com/yc/pedometer/wechat/UploadBallSportData.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/getuserkey
    		com/yc/pedometer/utils/TmallGenieUtil.java
    https://api.aicaring.com/api/v0/
    https://api.aicaring.com/api/v0/health/bp/model/list
    https://api.aicaring.com/api/v0/health/bp/model
    https://api.aicaring.com/api/v0/entrance/user/login
    https://api.aicaring.com/api/v0/health/bp/measurement
    https://api.aicaring.com/api/v0/health/emotion/measurement
    https://api.aicaring.com/api/v0/health/bp/model/sink
    https://api.aicaring.com/api/v0/health/bp/model/delete
    https://api.aicaring.com/api/v0/health/bp/calibration
    https://api.aicaring.com/api/v0/sinklib/activation/feedback
    https://api.aicaring.com/api/v0/sinklib/activation
    		com/yc/pedometer/bpprotocol/el/net/ElBpHttpPostUtils.java
    https://tt-smartband-weixin.ute-tech.com.cn/foyal_wechat/index.php/app/device/authorize
    		com/yc/pedometer/utils2/HttpPostUtils.java
    https://www.ute-tech.com.cn/ci-yc/index.php/api/client/getwatchzips
    https://www.ute-tech.com.cn/ci-yc/index.php/api/client/getwatchs
    https://www.ute-tech.com.cn/ci-yc/index.php/api/client/getwatchsbybleid
    https://www.ute-tech.com.cn/ci-yc/index.php/api/client/uploadhasgoogle
    https://www.ute-tech.com.cn/ci-yc/index.php/api/client/addwatch
    https://www.ute-tech.com.cn/ci-yc/index.php/api/client/issetwatch
    https://www.ute-tech.com.cn/ci-yc/index.php/api/client/getisocode
    		com/yc/pedometer/onlinedial/PostUtil.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/setuser
    		com/yc/pedometer/wechat/SetUsersInformation.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/setuser
    		com/yc/pedometer/wechat/SettingInfo.java
    https://api.weixin.qq.com/sns/oauth2/access_token?appid=
    https://api.weixin.qq.com/sns/oauth2/refresh_token?appid=
    		com/yc/pedometer/wechat/WXLoad.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/upload_mstep_data
    		com/yc/pedometer/wechat/UploadWalkStepData.java
    https://api.aicaring.com/alg/exterior/sinklib/activation
    https://api.aicaring.com/alg/exterior/health/allrslts
    		com/yc/pedometer/mood/MoodHttpPostUtils.java
    https://oss-cn-shanghai.aliyuncs.com
    https://www.ute-tech.com.cn/ci3/index.php/api/user/upload_npath_data
    		com/yc/pedometer/wechat/UploadTrackData.java
    https://app.help-document.com/user-agreement/denverfit2_en.html
    		com/yc/pedometer/UserAgreementActivity.java
    https://oss-cn-shanghai.aliyuncs.com
    https://www.ute-tech.com.cn/ci3/index.php/api/user/upload_bodytemp_data
    		com/yc/pedometer/wechat/UploadTemperatureData.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/upload_swim_data
    		com/yc/pedometer/wechat/UploadSwimData.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/upload_steps_data
    		com/yc/pedometer/wechat/UploadStepData.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/upload_sleep_data
    		com/yc/pedometer/wechat/UploadSleepData.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/upload_jump_data
    		com/yc/pedometer/wechat/UploadSkipData.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/upload_rstep_data
    		com/yc/pedometer/wechat/UploadRunStepData.java
    http://ns.google.com/photos/1.0/panorama/
    		com/ute/camera/util/XmpUtil.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/upload_cycling_data
    		com/yc/pedometer/wechat/UploadRideData.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/upload_bpm_data
    		com/yc/pedometer/wechat/UploadRateData.java
    https://oss-cn-shanghai.aliyuncs.com
    https://www.ute-tech.com.cn/ci3/index.php/api/user/getpublicstskey
    		com/yc/pedometer/log/upload/OssUploadFile.java
    tcp://iot-06z00c6kgq6t1w4.mqtt.iothub.aliyuncs.com
    		b/b.java
    https://oss-cn-shanghai.aliyuncs.com
    https://www.ute-tech.com.cn/ci3/index.php/api/user/upload_24bpm_data
    		com/yc/pedometer/wechat/RateUploadData.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/getfeedbackresp
    		com/yc/pedometer/feedback/GetFeedbackResp.java
    tcp://iot-06z00c6kgq6t1w4.mqtt.iothub.aliyuncs.com
    		d/a.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/getfeedbacklist
    		com/yc/pedometer/feedback/GetFeedbackList.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/bindble
    https://www.ute-tech.com.cn/ci3/index.php/api/user/unbindble
    https://www.ute-tech.com.cn/ci3/index.php/api/user/cancelfriends
    https://www.ute-tech.com.cn/ci3/index.php/api/user/becomefriends
    https://www.ute-tech.com.cn/ci3/index.php/api/user/friend_baseinfo
    		com/yc/pedometer/Friends/FriendsHttpPostUtils.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/getuserkey
    		com/yc/pedometer/wechat/GetUserKey.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/getuser
    		com/yc/pedometer/wechat/GetSingleUser.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/getlocalopenid
    		com/yc/pedometer/wechat/GetLocalOpenId.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/
    		com/yc/pedometer/wechat/GetLastUploadDate.java
    https://oss-cn-shanghai.aliyuncs.com
    		com/yc/pedometer/feedback/Feedback_Content_New.java
    https://oss-cn-shanghai.aliyuncs.com
    https://www.ute-tech.com.cn/ci3/index.php/api/user/
    		com/yc/pedometer/wechat/DownloadData.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/getstskey
    https://www.ute-tech.com.cn/ci3/index.php/api/user/getpublicstskey
    		com/yc/pedometer/feedback/GetSTSKey.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/removeuser
    		com/yc/pedometer/wechat/DeleteAccount.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/issetuser
    		com/yc/pedometer/wechat/CheckAccountIsExist.java
    https://mobile.ute-tech.com.cn/test/headset-week.html
    https://mobile.ute-tech.com.cn/test/week.html
    https://mobile.ute-tech.com.cn/friend.html#mycard?openid=
    https://mobile.ute-tech.com.cn/ftest/friend.html?openid=
    		com/yc/pedometer/web/WebUtil.java
    http://we.qq.com/d/aqaafxo46hv966ccimnaf5qrjdc43rvex8a49sqx
    		com/yc/pedometer/utils/SPUtil.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/getwebtoken
    		com/yc/pedometer/web/GetWebToken.java
    https://api.nebulalive.com/welife/appdownload?app=health&pid=0x000000040e0310100a&mac=
    		com/yc/pedometer/utils/ShowAlphaDialog.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/postnewnfeedback
    		com/yc/pedometer/feedback/PostNewFeedback.java
    http://ns.google.com/photos/1.0/panorama/
    		com/ute/camera/tinyplanet/TinyPlanetFragment.java
    http://jyalgorithmtest.jianyouhealth.com/algm/getway/algorithm/getheartratearchiving
    http://jyalgorithmtest.jianyouhealth.com/algm/
    http://jyalgorithmtest.jianyouhealth.com/algm/getway/algorithm/getchangedata
    http://jyalgorithmtest.jianyouhealth.com/algm/getway/algorithm/getecghr
    http://jyalgorithmtest.jianyouhealth.com/algm/getway/algorithm/getavghr
    http://jyalgorithmtest.jianyouhealth.com/algm/getway/algorithm/getsensordata
    		com/yc/jianyou_ecg/ECGHttpPostUtils.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/checkcaptcha
    https://www.ute-tech.com.cn/ci3/index.php/api/user/getcaptcha
    		com/yc/pedometer/utils/PhoneLoginUtil.java
    https://www.kangyuanai.com/api/ecg_report/userecgreportgeneralthird
    https://www.kangyuanai.com/api/login/thirdlogin
    		com/yc/pedometer/ecg/EcgAnalysisActivity.java
    http://www.samsungapps.com/appquery/appdetail.as?appid=
    http://m.sonyselect.cn/
    		com/yc/pedometer/utils/MarketUtil.java
    file:anonymous-string
    		com/hp/hpl/sparta/Parser.java
    https://www.ute-tech.com.cn/ci3/index.php/api/user/checkemailcaptcha
    https://www.ute-tech.com.cn/ci3/index.php/api/user/getemailcaptcha
    		com/yc/pedometer/utils/EmailLoginUtil.java
    https://iot-auth.cn-shanghai.aliyuncs.com
    		h/c.java
    1.0.0.1
    		com/realsil/sdk/dfu/utils/AesJni.java
    https://health.vita-course.com//gromit/exterior/information/
    https://health.vita-course.com/gromit/multi/calibrate/fetchpar/v2/s2
    https://health.vita-course.com/gromit/entry/enterpriselogin
    https://health.vita-course.com/gromit/multi/calibrate/updateload/v2/s2
    		com/yc/pedometer/utils/CSUtils.java
    http://nuuneoi.com/uploads/source/playstore/cover.jpg
    		com/yc/pedometer/sports/util/BitmapUtil.java
    https://www.ute-tech.com.cn/ci-yc/index.php/api/client/hasxindian
    		com/yc/pedometer/ecg/JudgeHasEcgAnalyze.java
    https://a.app.qq.com/o/simple.jsp?pkgname=com.yc.denverfit2
    https://question.uteasy.com/es_index.html
    https://question.uteasy.com/en_gloryfit_common.html
    https://question.uteasy.com/index.html
    https://question.uteasy.com/en_index.html
    https://question.uteasy.com/ru_index.html
    https://app.help-document.com/privacy-policy/denverfit2.html
    https://question.uteasy.com/it_index.html
    https://question.uteasy.com/helpmanual/gloryfitdizo/index.html
    https://play.google.com/store/apps/details?id=com.yc.denverfit2
    https://app.help-document.com/user-agreement/denverfit2_en.html
    https://question.uteasy.com/ja_index.html
    https://app.help-document.com/privacy-policy/denverfit2_en.html
    https://question.uteasy.com/ar_index.html
    https://question.uteasy.com/gloryfit_common.html
    https://question.uteasy.com/de_index.html
    https://question.uteasy.com/helpmanual/gloryfitdizo/en_index.html
    https://question.uteasy.com/fr_index.html
    https://app.help-document.com/user-agreement/denverfit2.html
    		com/yc/pedometer/column/GlobalVariable.java
    https://www.ute-tech.com.cn/ci-yc/index.php
    		com/yc/pedometer/update/Updates.java
    https://github.com/vinc3m1/roundedimageview
    https://twitter.com/%1$s/status/%2$s
    https://github.com/vinc3m1
    https://github.com/vinc3m1/roundedimageview.git
    		自研引擎-S

    Firebase配置检测

    邮箱地址提取

    EMAIL 源码文件
    115871318@qq.com
    		com/yc/pedometer/utils/SPUtil.java

    第三方追踪器

    名称 类别 网址
    AutoNavi / Amap Location https://reports.exodus-privacy.eu.org/trackers/361
    Facebook Analytics Analytics https://reports.exodus-privacy.eu.org/trackers/66
    Facebook Login Identification https://reports.exodus-privacy.eu.org/trackers/67
    Facebook Share https://reports.exodus-privacy.eu.org/trackers/70
    Google CrashLytics Crash reporting https://reports.exodus-privacy.eu.org/trackers/27
    Umeng Analytics https://reports.exodus-privacy.eu.org/trackers/119
    Yueying Crash SDK Analytics, Crash reporting https://reports.exodus-privacy.eu.org/trackers/448

    敏感凭证泄露

    已显示 91 个secrets
    1、 凭证信息=> "com.google.android.geo.API_KEY" : "AIzaSyCNCm6H3AOILvhKV2vF5lJoa5sIXBgGKoY"
    2、 高德地图的=> "com.amap.api.v2.apikey" : "3d390abce24a8a6a2c8f4dec7fde3286"
    3、 凭证信息=> "YCAPPKEY" : "937c3d4a43528cf5a952385e7bd97cfc"
    4、 友盟统计的=> "UMENG_APPKEY" : "606427d2de41b946ab37d8ae"
    5、 "facebook_app_id" : "1370780056617699"
    6、 "es_hockey" : "Hockey"
    7、 "de_hockey" : "Feldhockey"
    8、 "cs_hockey" : "Hokej"
    9、 "tr_hockey" : "Hokey"
    10、 "sport_ice_hockey" : "Eishockey"
    11、 "sport_ice_hockey" : "Hockey"
    12、 "sport_ice_hockey" : "Hochei"
    13、 "facebook_client_token" : "0d5d542aca3eed404431ca6d4c08d8c2"
    14、 "bracelet_interface_hockey" : "Hockey"
    15、 "in_hockey" : "Hoki"
    16、 "sport_ice_hockey" : "Hokej"
    17、 "sport_ice_hockey" : "Hokey"
    18、 "it_hockey" : "Hockey"
    19、 "pl_hockey" : "Hokej"
    20、 "en_hockey" : "Hockey"
    21、 "bracelet_interface_hockey" : "Hokej"
    22、 "bracelet_interface_hockey" : "Hochei"
    23、 "bracelet_interface_hockey" : "Eishockey"
    24、 "pt_hockey" : "Hockey"
    25、 "sk_hockey" : "Hokej"
    26、 "fr_hockey" : "Hockey"
    27、 "ro_hockey" : "Hochei"
    28、 "bracelet_interface_hockey" : "Kriket"
    29、 "kakao_app_key" : "483d818d7beeabab0f45a5be89f8f028"
    30、 "sport_ice_hockey" : "Hoki"
    31、 "library_roundedimageview_authorWebsite" : "https://github.com/vinc3m1"
    32、 "nl_hockey" : "Hockey"
    33、 "bracelet_interface_hockey" : "Hokey"
    34、 a4b7452e2ed8f5f191058ca7bbfd26b0d3214bfc
    35、 103e325c29ea5368ed421b75f07bdd49
    36、 000002fd-3C17-D293-8E48-14FE2E4DA212
    37、 sha1/1S4TwavjSdrotJWU73w4Q2BkZr0=
    38、 IadmKxj8cMzh3QXIE3HnMlEtcZ15krdzqOzX5MAhGzK2IGOxgV
    39、 2438bce1ddb7bd026d5ff89f598b3b5e5bb824b3
    40、 sha1/VRmyeKyygdftp6vBg5nDu2kEJLU=
    41、 e49a28e1-f69a-11e8-8eb2-f2801f1b9fd1
    42、 sha1/u8I+KQuzKHcdrT6iTb30I70GsD0=
    43、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
    44、 e49a25e0-f69a-11e8-8eb2-f2801f1b9fd1
    45、 020002fd-3c17-d293-8e48-14fe2e4da212
    46、 cc2751449a350f668590264ed76692694a80308a
    47、 sha1/I0PRSKJViZuUfUYaeX7ATP7RcLc=
    48、 606427d2de41b946ab37d8ae
    49、 5f78df94-798c-46f5-990a-b3eb6a065c88
    50、 c56fb7d591ba6704df047fd98f535372fea00211
    51、 8UURCyttNkYuy7U79fPErquWf6h6Dv3JSc6hgNXUwRcv
    52、 00006387-3c17-d293-8e48-14fe2e4da212
    53、 937c3d4a43528cf5a952385e7bd97cfc
    54、 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
    55、 sha1/GiG0lStik84Ys2XsnA6TTLOB5tQ=
    56、 308203523082023aa00302010202044fd0006b300d06092a864886f70d0101050500306b310b3009060355040613025553310b3009060355040813024341311630140603550407130d53616e204672616e636973636f3110300e060355040a130754776974746572310f300d060355040b13064d6f62696c65311430120603550403130b4a6f6e617468616e204c65301e170d3132303630373031313431395a170d3339313032343031313431395a306b310b3009060355040613025553310b3009060355040813024341311630140603550407130d53616e204672616e636973636f3110300e060355040a130754776974746572310f300d060355040b13064d6f62696c65311430120603550403130b4a6f6e617468616e204c6530820122300d06092a864886f70d01010105000382010f003082010a028201010089e6cbdfed4288a9c0a215d33d4fa978a5bdd20be426ef4b497d358a9fd1c6efec9684f059f6955e60e5fda1b5910bb2d097e7421a78f9c81e95cd8ef3bf50add7f8d9f073c0478736a6c7fd38c5871559783a76420d37f3f874f2114ec02532e85587791d24037485b1b95ec8cbc75b52042867988b51c7c3589d5b5972fd20a2e8a7c9ced986873f5008a418b2921daa7cfb78afc174eecdb8a79dc0961bea9740d09c4656ac9b8c86263a788e35af1d4a3f86ce053a1aefb5369def91614a390219f896f378712376baa05934a341798950e229f4f735b86004952b259f23cc9fc3b8c1bc8171984884dc92940e91f2e9a78a84a78f0c2946b7e37bbf3b9b0203010001300d06092a864886f70d010105050003820101001cf15250365e66cc87bb5054de1661266cf87907841016b20dfa1f9f59842020cbc33f9b4d41717db0428d11696a0bade6a4950a48cc4fa8ae56c850647379a5c2d977436b644162c453dd36b7745ccb9ff0b5fc070125024de73dab6dcda5c69372e978a49865f569927199ed0f61d7cbee1839079a7da2e83f8c90f7421a8c81b3f17f1cc05d52aedac9acd6e092ffd9ad572960e779a5b91a78e1aeb2b3c7b24464bd223c745e40abd74fc586310809520d183443fcca3c6ade3be458afedbd3325df9c0e552636e35bb55b240eb8c0ba3973c4fb81213f22363be2d70e85014650c2f4fc679747a7ec31ea7b08da7dd9b9ba279a7fbbc1bd440fbe831bf4
    57、 457871e8-d516-4ca1-9116-57d0b17b9cb2
    58、 sha1/PANDaGiVHPNpKri0Jtq6j+ki5b0=
    59、 BEB007A4150201101E1A35
    60、 00006587-3c17-d293-8e48-14fe2e4da212
    61、 6A24EEAB-4B65-4693-986B-3C26C352264F
    62、 1210e11e4c178e0b7f8ed502cb86f594
    63、 e19d340fb9a9b09babd2c9a2c33ae203
    64、 6c53db25-47a1-45fe-a022-7c92fb334fd4
    65、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
    66、 00006287-3c17-d293-8e48-14fe2e4da212
    67、 93301e3040b96dfaf77beca9c3ca7cd4
    68、 0000d0ff-3c17-d293-8e48-14fe2e4da212
    69、 sha1/7WYxNdMb1OymFMQp4xkGn5TBJlA=
    70、 31d929517a17de8df8528167397202b8
    71、 sha1/sYEIGhmkwJQf+uiVKMEkyZs0rMc=
    72、 8a3c4b262d721acd49a4bf97d5213199c86fa2b9
    73、 00006487-3c17-d293-8e48-14fe2e4da212
    74、 8082caa8-41a6-4021-91c6-56f9b954cc34
    75、 sha1/wHqYaI2J+6sFZAwRfap9ZbjKzE4=
    76、 9b8f518b086098de3d77736f9458a3d2f6f95a37
    77、 sha1/IvGeLsbqzPxdI0b0wuj2xVTdXgc=
    78、 sha1/aDMOYTWFIVkpg6PI0tLhQG56s8E=
    79、 19e0d8a6485655628224c5162b19498b
    80、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
    81、 2c92f3bc8c37fa96018c4321ee9d0002
    82、 e49a25f8-f69a-11e8-8eb2-f2801f1b9fd1
    83、 sha1/gzF+YoVCU9bXeDGQ7JGQVumRueM=
    84、 9d84b9a3-000c-49d8-9183-855b673fda31
    85、 32bdc32fa70c3b148cbd77fd1234dd70
    86、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
    87、 sha1/nKmNAK90Dd2BgNITRaWLjy6UONY=
    88、 3408f41e532ae116dbd4d956b16908d2
    89、 sha1/cTg28gIxU0crbrplRqkQFVggBQk=
    90、 724249f0-5ec3-4b5f-8804-42345af08651
    91、 df6b721c8b4d3b6eb44c861d4415007e5a35fc95

    字符串信息

    建议导出为TXT，方便查看。

    活动列表

    显示所有 182 个 activities

    服务列表

    显示 13 个 services

    广播接收者列表

    显示 3 个 receivers

    内容提供者列表

    显示 3 个 providers

    第三方SDK

    SDK名称 开发者 描述信息
    高德 SDK 高德 高德地图 Android SDK 是一套地图开发调用接口，开发者可以轻松地在自己的 Android 应用中加入地图相关的功能，包括：地图显示（含室内、室外地图）、与地图交互、在地图上绘制、兴趣点搜索、地理编码、离线地图等功能。
    岳鹰全景监控 Alibaba 岳鹰全景监控，是阿里 UC 官方出品的先进移动应用线上监控平台，为多家知名企业提供服务。
    wgs2gcj 无 WGS84 为一种大地坐标系，也是目前广泛使用的 GPS 全球卫星定位系统使用的坐标系。GCJ02 又称火星坐标系，是由中国国家测绘局制定的地理坐标系统，是由 WGS84 加密后得到的坐标系。在中国，所有的坐标都必须经过国家测绘局进行偏移，因此需要将 GPS 坐标进行转换。
    MMKV Tencent MMKV 是基于 mmap 内存映射的 key-value 组件，底层序列化/反序列化使用 protobuf 实现，性能高，稳定性强。
    移动统计分析 Umeng U-App 作为一款专业、免费的移动统计分析产品。在日常业务中帮您解决多种数据相关问题，如数据采集与管理、业务监测、用户行为分析、App 稳定性监控及实现多种运营方案等。助力互联网企业充分挖掘用户行为数据价值，找到产品更新迭代方向，实现精细化运营，全面提升业务增长效能。
    Google Sign-In Google 提供使用 Google 登录的 API。
    Google Play Service Google 借助 Google Play 服务，您的应用可以利用由 Google 提供的最新功能，例如地图，Google+ 等，并通过 Google Play 商店以 APK 的形式分发自动平台更新。 这样一来，您的用户可以更快地接收更新，并且可以更轻松地集成 Google 必须提供的最新信息。
    腾讯开放平台 Tencent 腾讯核心内部服务，二十年技术沉淀，助你成就更高梦想。
    File Provider Android FileProvider 是 ContentProvider 的特殊子类，它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。
    Jetpack Media Google 与其他应用共享媒体内容和控件。已被 media2 取代。

    污点分析

    当apk较大时，代码量会很大，造成数据流图（ICFG）呈现爆炸式增长，所以该功能比较耗时，请先喝杯咖啡，耐心等待……
    规则名称 描述信息 操作
    病毒分析 使用安卓恶意软件常用的API进行污点分析 开始分析  
    漏洞挖掘 漏洞挖掘场景下的污点分析 开始分析  
    隐私合规 隐私合规场景下的污点分析：组件内污点传播、组件间污点传播、组件与库函数之间的污点传播 开始分析  
    密码分析 分析加密算法是否使用常量密钥、静态初始化的向量（IV）、加密模式是否使用ECB等 开始分析  
    Callback 因为Android中系统级的Callback并不会出现显式地进行回调方法的调用，所以如果需要分析Callback方法需要在声明文件中将其声明，这里提供一份AndroidCallbacks.txt文件，里面是一些常见的原生回调接口或类，如果有特殊接口需求，可以联系管理员 开始分析