安全中心 4.9.2版本 | 静态分析 _南明离火移动安全分析平台

温馨提示：本平台仅供研究软件风险、安全评估，禁止用于非法用途。由于展示的数据过于全面，请耐心等待加载完成。如有疑问或建议，可加入我们的微信群讨论

应用图标

文件信息

文件名称 2a26b6be224bb8d6c7d02e019f9890b1021dc8024000711b20bf715284025e7a.apk
文件大小 27.92MB
MD5 d64c0ec7920c532fa6e6d9bb001cf9bf
SHA1 c0948307ed00eaf55b6a2319c00150a710eebdf0
SHA256 2a26b6be224bb8d6c7d02e019f9890b1021dc8024000711b20bf715284025e7a
病毒检测 ⚠️ 18 个厂商报毒⚠️

应用信息

应用名称安全中心
包名 com.anguanjia.security
主活动 com.tencent.qqpimsecure.ui.activity.SplashActivity
目标SDK 23 最小SDK 7
版本号 4.9.2 子版本号 1419
加固信息未加壳

非法应用检测（该功能即将上线，识别赌博、诈骗、色情和黑产等类型应用）

组件导出信息

查看

扫描选项

重新扫描管理规则动态分析

反编译代码

Manifest文件查看

APK文件成为会员，解锁下载

Java源代码查看 -- 下载

证书信息

二进制文件已签名
v1 签名: True
v2 签名: False
v3 签名: False
v4 签名: False
主题: C=CN, ST=China, L=Beijing, O=Beijing AnGuanJia Technology Co. Ltd., OU=AnGuanJia, CN=AnGuanJia
签名算法: rsassa_pkcs1v15
有效期自: 2010-11-25 14:39:20+00:00
有效期至: 3010-03-28 14:39:20+00:00
发行人: C=CN, ST=China, L=Beijing, O=Beijing AnGuanJia Technology Co. Ltd., OU=AnGuanJia, CN=AnGuanJia
序列号: 0x4cee7518
哈希算法: sha1
证书MD5: d96a400b3079c1838e0818fa5f1e4e7a
证书SHA1: c9a13285f1afe1000e8b032f8048e8be27e1c964
证书SHA256: a5d37a5fbaa66986e976fb69404f50583fec5c95aa025329aef84d2c17a6eac3
证书SHA512: 40ff20b32a1159c8fdf466e76ff05221821a1fd5421644995e7da1a1354240e878024bcc1b5e3836ad88a76e2613cbab676a0cfa1393d555420172cd5495cd3c
找到 1 个唯一证书

应用程序权限

权限名称	安全等级	权限内容	权限描述	关联代码
android.permission.RUN_INSTRUMENTATION	未知	未知权限	来自 android 引用的未知权限。
android.permission.BATTERY_STATS	普通	修改电池统计	允许对手机电池统计信息进行修改
android.permission.READ_CONTACTS	危险	读取联系人信息	允允许应用程序读取您手机上存储的所有联系人（地址）数据。恶意应用程序可借此将您的数据发送给其他人。	显示文件 com/anguanjia/framework/phone/ContactManager.java com/tencent/qqpimsecure/dao/p.java com/tencent/qqpimsecure/storage/v.java meri/service/aresengine/u.java tcs/act.java tcs/acx.java tcs/acz.java tcs/auo.java tcs/bok.java tcs/jl.java tcs/og.java tcs/ub.java tcs/we.java tcs/wj.java tcs/wl.java tcs/wu.java tcs/xb.java tcs/yc.java
android.permission.WRITE_CONTACTS	危险	写入联系人信息	允许应用程序修改您手机上存储的联系人（地址）数据。恶意应用程序可借此清除或修改您的联系人数据。	显示文件 com/tencent/qqpimsecure/dao/p.java tcs/amr.java tcs/ata.java tcs/og.java
android.permission.READ_SMS	危险	读取短信	允许应用程序读取您的手机或 SIM 卡中存储的短信。恶意应用程序可借此读取您的机密信息。	显示文件 com/tencent/kingkong/AbstractCursor.java com/tencent/kingkong/Cursor.java com/tencent/kingkong/CursorWrapper.java com/tencent/qqpimsecure/storage/b.java com/tencent/qqpimsecure/storage/s.java com/tencent/qqpimsecure/storage/x.java oicq/wlogin_sdk/tools/util.java tcs/act.java tcs/akj.java tcs/auv.java
android.permission.SEND_SMS	危险	发送短信	允许应用程序发送短信。恶意应用程序可能会不经您的确认就发送信息，给您带来费用。	显示文件 tcs/acq.java tcs/acx.java tcs/acz.java tcs/adc.java tcs/adg.java tcs/adh.java tcs/akf.java tcs/ali.java tcs/alo.java tcs/bok.java tcs/wu.java tcs/yc.java
android.permission.RECEIVE_SMS	危险	接收短信	允许应用程序接收短信。恶意程序会在用户未知的情况下监视或删除。	显示文件 com/king/uranus/bF.java com/tencent/halley/common/downloader_detector/DownloaderApn.java com/tencent/tmassistantsdk/downloadservice/NetworkMonitorReceiver.java com/tencent/tmassistantsdk/openSDK/QQDownloader/QQDownloaderInstalled.java meri/service/aresengine/sms/MessageReceiver.java meri/service/aresengine/sms/e.java meri/util/BaseReceiver.java tcs/adh.java tmsdk/common/BaseTMSReceiver.java
android.permission.READ_PHONE_STATE	危险	读取手机状态和标识	允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号，是否正在通话，以及对方的号码等。	显示文件 com/king/uranus/ga.java com/tencent/halley/common/downloader_detector/DownloaderApn.java com/tencent/halley/common/downloader_detector/b.java com/tencent/halley/common/downloader_detector/c.java oicq/wlogin_sdk/tools/util.java tcs/ack.java tcs/acl.java tcs/adc.java tcs/adg.java tcs/adh.java tcs/aht.java tcs/akf.java tcs/arc.java tcs/aur.java tcs/bde.java tcs/bdj.java tcs/beg.java tcs/bjn.java tcs/tu.java tcs/wn.java tcs/wy.java
android.permission.PROCESS_OUTGOING_CALLS	危险	拦截外拨电话	允许应用程序处理外拨电话或更改要拨打的号码。恶意应用程序可能会借此监视、另行转接甚至阻止外拨电话。	显示文件 com/king/uranus/bF.java com/tencent/halley/common/downloader_detector/DownloaderApn.java com/tencent/tmassistantsdk/downloadservice/NetworkMonitorReceiver.java com/tencent/tmassistantsdk/openSDK/QQDownloader/QQDownloaderInstalled.java meri/util/BaseReceiver.java tmsdk/common/BaseTMSReceiver.java
android.permission.MODIFY_PHONE_STATE	签名(系统)	修改手机状态	允许应用程序控制设备的电话功能。拥有此权限的应用程序可自行切换网络、打开和关闭无线通信等，而不会通知您。	显示文件 com/meri/service/bg/ares/h.java meri/service/aresengine/i.java tcs/ack.java tcs/acl.java tcs/acq.java tcs/acr.java tcs/act.java tcs/acw.java tcs/acx.java tcs/acz.java tcs/adc.java tcs/adg.java tcs/adh.java tcs/agt.java tcs/ajy.java tcs/ali.java tcs/alo.java tcs/alq.java tcs/byw.java tcs/jl.java tcs/tz.java tcs/ub.java tcs/xe.java
android.permission.CALL_PHONE	危险	直接拨打电话	允许应用程序直接拨打电话。恶意程序会在用户未知的情况下拨打电话造成损失。但不被允许拨打紧急电话。	显示文件 meri/service/aresengine/i.java
android.permission.WRITE_SMS	危险	编辑短信或彩信	允许应用程序写入手机或 SIM 卡中存储的短信。恶意应用程序可借此删除您的信息。
android.permission.INTERNET	危险	完全互联网访问	允许应用程序创建网络套接字。	显示文件 com/king/uranus/bs.java com/king/uranus/cp.java com/meri/service/daemon/a.java com/tencent/apkupdate/logic/protocol/a.java com/tencent/qqpimsecure/h5/f.java com/tencent/qqpimsecure/plugin/main/card/h.java oicq/wlogin_sdk/request/h.java oicq/wlogin_sdk/request/i.java oicq/wlogin_sdk/request/j.java tcs/agf.java tcs/ajt.java tcs/aka.java tcs/ako.java tcs/bcs.java tcs/beg.java tcs/bjt.java tcs/blu.java tcs/bmf.java tcs/bmj.java tcs/bot.java tcs/boy.java tcs/byg.java tcs/byn.java tcs/byw.java tcs/tc.java tcs/uh.java tcs/xx.java tmsdk/common/internal/utils/k.java tmsdk/common/internal/utils/l.java tmsdk/common/internal/utils/m.java tmsdk/common/module/sdknetpool/tcpnetwork/n.java
android.permission.VIBRATE	普通	控制振动器	允许应用程序控制振动器，用于消息通知振动功能。	显示文件 com/tencent/qqpimsecure/plugin/passwordsystem/password/ac.java tcs/akq.java tcs/akr.java tcs/bvh.java
android.permission.GET_TASKS	危险	检索当前运行的应用程序	允许应用程序检索有关当前和最近运行的任务的信息。恶意应用程序可借此发现有关其他应用程序的保密信息。	显示文件 com/anguanjia/security/plugin/ctsecurity/model/clientupgrade/a.java com/king/uranus/bz.java com/king/uranus/di.java com/king/uranus/dm.java com/meri/service/performance/PerformanceWatchDog.java com/meri/service/rqd/k.java com/tencent/qqpimsecure/service/d.java com/tencent/server/fore/b.java com/tencent/server/task/l.java tcs/ada.java tcs/adi.java tcs/aik.java tcs/bfc.java tcs/bhy.java tcs/bhz.java tcs/bib.java tcs/bim.java tcs/bps.java tcs/sm.java tmsdk/common/internal/utils/aa.java
android.permission.RESTART_PACKAGES	普通	重启进程	允许程序自己重启或重启其他程序
android.permission.GET_PACKAGE_SIZE	普通	测量应用程序空间大小	允许一个程序获取任何package占用空间容量。
android.permission.ACCESS_WIFI_STATE	普通	查看Wi-Fi状态	允许应用程序查看有关Wi-Fi状态的信息。	显示文件 com/anguanjia/framework/utils/SystemUtil.java com/king/uranus/ga.java com/meri/service/daemon/a.java com/meri/service/netsetting/b.java com/tencent/halley/common/downloader_detector/DownloaderApn.java com/tencent/halley/common/downloader_detector/c.java meri/service/aresengine/q.java oicq/wlogin_sdk/tools/util.java tcs/ahs.java tcs/bde.java tcs/bjn.java tcs/ub.java tcs/uh.java
android.permission.ACCESS_NETWORK_STATE	普通	获取网络状态	允许应用程序查看所有网络的状态。	显示文件 com/king/uranus/cr.java com/king/uranus/ga.java com/meri/service/daemon/a.java com/meri/service/netsetting/b.java com/meri/service/phoneinfo/NetworkInfoManager.java com/meri/service/phoneinfo/j.java com/meri/service/phoneinfo/k.java com/tencent/halley/common/downloader_detector/DownloaderApn.java com/tencent/halley/common/downloader_detector/c.java com/tencent/qqpimsecure/h5/f.java com/tencent/qqpimsecure/plugin/optimus/bg/b.java com/tencent/qqpimsecure/plugin/optimus/bg/f.java com/tencent/tmassistantsdk/downloadservice/a.java meri/service/aresengine/i.java meri/service/aresengine/q.java oicq/wlogin_sdk/tools/util.java tcs/ack.java tcs/acl.java tcs/acq.java tcs/act.java tcs/acx.java tcs/acz.java tcs/adc.java tcs/ade.java tcs/adg.java tcs/ahd.java tcs/aht.java tcs/ajt.java tcs/ajy.java tcs/akf.java tcs/aos.java tcs/aot.java tcs/ata.java tcs/auo.java tcs/aur.java tcs/avc.java tcs/bde.java tcs/bdj.java tcs/beg.java tcs/bgi.java tcs/bgl.java tcs/bjl.java tcs/bjn.java tcs/bkp.java tcs/blj.java tcs/bot.java tcs/boy.java tcs/bxw.java tcs/la.java tcs/tz.java tcs/ub.java tcs/uh.java tcs/we.java tcs/wi.java tcs/wj.java tcs/wq.java tcs/wy.java tcs/xd.java tcs/zc.java tmsdk/common/internal/utils/x.java tmsdk/common/internal/utils/y.java tmsdk/common/module/sdknetpool/sharknetwork/SharkNetworkReceiver.java tmsdk/common/module/sdknetpool/tcpnetwork/n.java
android.permission.CHANGE_WIFI_STATE	危险	改变Wi-Fi状态	允许应用程序改变Wi-Fi状态。	显示文件 com/meri/service/netsetting/b.java oicq/wlogin_sdk/tools/util.java tcs/uh.java
android.permission.WAKE_LOCK	危险	防止手机休眠	允许应用程序防止手机休眠，在手机屏幕关闭后后台进程仍然运行。	显示文件 com/king/uranus/ar.java com/king/uranus/bg.java com/meri/service/daemon/a.java com/meri/service/netsetting/b.java com/meri/service/viruskiller/j.java com/tencent/qqpimsecure/plugin/deskassistant/common/mini/b.java meri/service/aresengine/q.java oicq/wlogin_sdk/tools/util.java tcs/ahp.java tcs/bde.java tcs/bgl.java tcs/blj.java tcs/buu.java tcs/ub.java tcs/uh.java
android.permission.WRITE_EXTERNAL_STORAGE	危险	读取/修改/删除外部存储内容	允许应用程序写入外部存储。	显示文件 com/anguanjia/framework/userhabit/UHRecorderDefault.java com/anguanjia/security/plugin/ctsecurity/model/clientupgrade/a.java com/king/uranus/da.java com/king/uranus/eh.java com/king/uranus/em.java com/king/uranus/fr.java com/king/uranus/fw.java com/meri/service/daemon/a.java com/meri/service/daemon/c.java com/meri/service/permission/j.java com/meri/service/viruskiller/d.java com/meri/service/viruskiller/f.java com/tencent/kingkong/DefaultDatabaseErrorHandler.java com/tencent/kingkong/FileUtils.java com/tencent/qqpimsecure/dao/l.java com/tencent/qqpimsecure/h5/f.java com/tencent/qqpimsecure/plugin/main/card/h.java com/tencent/qqpimsecure/plugin/passwordsystem/password/k.java com/tencent/qqpimsecure/storage/v.java com/tencent/server/back/BackEngine.java com/tencent/server/base/s.java com/tencent/server/base/u.java com/tencent/server/task/g.java meri/service/aresengine/model/MmsPart.java oicq/wlogin_sdk/request/d.java oicq/wlogin_sdk/tools/util.java tcs/ahe.java tcs/ahk.java tcs/ahv.java tcs/aiy.java tcs/ajq.java tcs/ajs.java tcs/ajt.java tcs/amr.java tcs/aof.java tcs/auk.java tcs/bet.java tcs/bfd.java tcs/bfg.java tcs/bfp.java tcs/bgi.java tcs/bjh.java tcs/bkq.java tcs/bnz.java tcs/boc.java tcs/boy.java tcs/bqb.java tcs/buw.java tcs/byn.java tcs/byw.java tcs/pc.java tcs/tx.java tcs/yx.java tmsdk/common/internal/utils/i.java tmsdk/common/internal/utils/l.java
android.permission.WRITE_APN_SETTINGS	危险	写入访问点名称设置	允许应用程序写入访问点名称设置。
android.permission.READ_APN_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
android.permission.WRITE_SETTINGS	危险	修改全局系统设置	允许应用程序修改系统设置方面的数据。恶意应用程序可借此破坏您的系统配置。
android.permission.CHANGE_NETWORK_STATE	危险	改变网络连通性	允许应用程序改变网络连通性。	显示文件 meri/service/aresengine/q.java
android.permission.READ_LOGS	危险	读取系统日志文件	允许应用程序从系统的各日志文件中读取信息。这样应用程序可以发现您的手机使用情况，这些信息还可能包含用户个人信息或保密信息，造成隐私数据泄露。
android.permission.RECEIVE_BOOT_COMPLETED	普通	开机自启	允许应用程序在系统完成启动后即自行启动。这样会延长手机的启动时间，而且如果应用程序一直运行，会降低手机的整体速度。	显示文件 com/king/uranus/bF.java com/meri/service/bg/ares/p.java com/tencent/halley/common/downloader_detector/DownloaderApn.java com/tencent/server/base/f.java com/tencent/tmassistantsdk/downloadservice/NetworkMonitorReceiver.java com/tencent/tmassistantsdk/openSDK/QQDownloader/QQDownloaderInstalled.java meri/pluginsdk/t.java meri/service/aresengine/sms/MessageReceiver.java meri/util/BaseReceiver.java tcs/tu.java tmsdk/common/BaseTMSReceiver.java
android.intent.action.ACTION_SHUTDOWN	未知	未知权限	来自 android 引用的未知权限。
android.intent.action.REBOOT	签名(系统)	强行重新启动手机	允许应用程序强行重新启动手机。
android.permission.BLUETOOTH	危险	创建蓝牙连接	允许应用程序查看或创建蓝牙连接。	显示文件 com/anguanjia/framework/utils/SystemUtil.java com/king/uranus/cr.java com/meri/service/netsetting/b.java com/meri/service/phoneinfo/NetworkInfoManager.java com/tencent/halley/common/downloader_detector/DownloaderApn.java com/tencent/qqpimsecure/plugin/optimus/bg/b.java com/tencent/tmassistantsdk/downloadservice/a.java meri/service/aresengine/q.java oicq/wlogin_sdk/tools/util.java tcs/adb.java tcs/aos.java tcs/bde.java tcs/bgl.java tcs/bjl.java tcs/bjn.java tcs/bkp.java tcs/blj.java tcs/bot.java tcs/bxw.java tcs/tz.java
android.permission.BLUETOOTH_ADMIN	危险	管理蓝牙	允许程序发现和配对新的蓝牙设备。	显示文件 com/meri/service/netsetting/b.java com/meri/service/phoneinfo/NetworkInfoManager.java meri/service/aresengine/q.java tcs/bgl.java
android.permission.READ_EXTERNAL_STORAGE	危险	读取SD卡内容	允许应用程序从SD卡读取信息。	显示文件 com/anguanjia/framework/utils/FileUtil.java com/anguanjia/framework/utils/SystemTool.java com/king/uranus/ar.java com/king/uranus/bq.java com/king/uranus/bt.java com/king/uranus/dx.java com/king/uranus/eh.java com/king/uranus/em.java com/king/uranus/fr.java com/king/uranus/fv.java com/king/uranus/fw.java com/king/uranus/p.java com/king/uranus/q.java com/meri/service/daemon/a.java com/meri/service/daemon/d.java com/meri/service/monitor/d.java com/meri/service/monitor/e.java com/meri/service/performance/PerformanceWatchDog.java com/meri/service/permission/c.java com/meri/service/permission/j.java com/tencent/kingkong/DefaultDatabaseErrorHandler.java com/tencent/kingkong/FileUtils.java com/tencent/mm/dbsupport/newcursor/DBDumpUtil.java com/tencent/permissionfw/permission/f.java com/tencent/qqpimsecure/plugin/passwordsystem/password/k.java com/tencent/qqpimsecure/service/d.java com/tencent/qqpimsecure/storage/v.java com/tencent/server/back/BackEngine.java com/tencent/server/base/d.java com/tencent/server/base/s.java com/tencent/server/base/u.java meri/service/aresengine/model/MmsPart.java oicq/wlogin_sdk/tools/util.java tcs/acb.java tcs/aiy.java tcs/ajq.java tcs/ajs.java tcs/akn.java tcs/anx.java tcs/aof.java tcs/apj.java tcs/auk.java tcs/aun.java tcs/bde.java tcs/bdi.java tcs/bdj.java tcs/bfc.java tcs/bfd.java tcs/bfi.java tcs/bfs.java tcs/bhy.java tcs/bhz.java tcs/bik.java tcs/bjh.java tcs/bjk.java tcs/bjo.java tcs/bjt.java tcs/bkq.java tcs/blj.java tcs/bnv.java tcs/boy.java tcs/buw.java tcs/byn.java tcs/cao.java tcs/cba.java tcs/sm.java tcs/ty.java tcs/ub.java tmsdk/common/internal/utils/i.java tmsdk/common/internal/utils/l.java tmsdk/common/internal/utils/z.java
android.permission.BROADCAST_STICKY	普通	发送置顶广播	允许应用程序发送顽固广播，这些广播在结束后仍会保留。恶意应用程序可能会借此使手机耗用太多内存，从而降低其速度或稳定性。	显示文件 com/anguanjia/security/plugin/ctsecurity/bg/PiCtSecurityUD.java com/anguanjia/security/plugin/ctsecurity/fg/PiCtSecurity.java com/anguanjia/security/plugin/ctsecurity/fg/clientupgrade/view/CUDialogView.java com/anguanjia/security/plugin/ctsecurity/model/clientupgrade/a.java com/meri/service/bg/ares/p.java com/meri/service/daemon/strategy/RebootStrategy.java com/meri/service/monitor/f.java com/meri/service/performance/PerformanceWatchDog.java com/meri/service/phoneinfo/b.java com/meri/ui/guide/a.java com/meri/ui/guide/e.java com/meri/ui/guide/f.java com/meri/ui/guide/xiaomi/GuideXiaomiActivity.java com/tencent/qqpimsecure/plugin/account/fg/PiAccount.java com/tencent/qqpimsecure/plugin/cloud/PiCloud.java com/tencent/qqpimsecure/plugin/commontools/view/page/DetailDialog.java com/tencent/qqpimsecure/plugin/commontools/view/page/EnableFunctionDialogView.java com/tencent/qqpimsecure/plugin/commontools/view/page/b.java com/tencent/qqpimsecure/plugin/commontools/view/page/c.java com/tencent/qqpimsecure/plugin/commontools/view/view/DesktopUpgradeDialog.java com/tencent/qqpimsecure/plugin/commontools/view/view/ToolNeedRebootDialog.java com/tencent/qqpimsecure/plugin/deepclean/fg/remainapk/RemainApkView.java com/tencent/qqpimsecure/plugin/deepclean/fg/view/RemindRubbishDialogView.java com/tencent/qqpimsecure/plugin/deskassistant/fg/view/FloatGuideDialog.java com/tencent/qqpimsecure/plugin/deskassistant/fg/view/a.java com/tencent/qqpimsecure/plugin/deskassistant/task/expanded/a.java com/tencent/qqpimsecure/plugin/download/view/DialogNoSdPermission.java com/tencent/qqpimsecure/plugin/download/view/DialogNoSdSpace.java com/tencent/qqpimsecure/plugin/download/view/DialogNoWifiNotes.java com/tencent/qqpimsecure/plugin/main/PiMain.java com/tencent/qqpimsecure/plugin/main/page/f.java com/tencent/qqpimsecure/plugin/main/qqbrowser/BrowserChooseDialog.java com/tencent/qqpimsecure/plugin/optimus/fg/PiOptimus.java com/tencent/qqpimsecure/plugin/passwordsystem/fg/PiPasswordSystem.java com/tencent/qqpimsecure/plugin/passwordsystem/password/ClearDataDialog.java com/tencent/qqpimsecure/plugin/passwordsystem/password/x.java com/tencent/qqpimsecure/uninstallprotect/UninstallProtectActivity.java com/tencent/server/back/SyncAuthService.java com/tencent/server/back/SyncTaskService.java com/tencent/server/base/QQSecureApplication.java com/tencent/server/base/a.java com/tencent/server/base/f.java com/tencent/server/base/v.java com/tencent/server/fore/ActiveActivity.java com/tencent/server/fore/BaseActivity.java com/tencent/server/fore/DataManagerActivity.java com/tencent/server/fore/DeskTopActivity.java com/tencent/server/fore/QuickLoadActivity.java com/tencent/server/fore/c.java com/tencent/server/fore/e.java com/tencent/server/fore/guide/GuideDesktopView.java com/tencent/server/task/h.java com/tencent/tmassistantsdk/downloadservice/NetworkMonitorReceiver.java com/tencent/tmassistantsdk/openSDK/BaseQQDownloaderOpenSDK.java com/tencent/tmassistantsdk/openSDK/QQDownloader/QQDownloaderInstalled.java de/greenrobot/event/util/ErrorDialogFragments.java meri/pluginsdk/t.java meri/service/aresengine/sms/MessageReceiver.java meri/service/aresengine/sms/b.java meri/service/usespermission/PermissionsActivity.java meri/service/usespermission/d.java tcs/akc.java tcs/ako.java tcs/aos.java tcs/bds.java tcs/bdu.java tcs/bdx.java tcs/bhz.java tcs/bib.java tcs/bih.java tcs/bim.java tcs/bjt.java tcs/boe.java tcs/bog.java tcs/boh.java tcs/boi.java tcs/boj.java tcs/bom.java tcs/boq.java tcs/bor.java tcs/box.java tcs/bpb.java tcs/bpc.java tcs/bpg.java tcs/bpn.java tcs/bqs.java tcs/bqz.java tcs/brf.java tcs/cam.java tcs/cao.java tcs/cbb.java tcs/za.java tmsdk/common/TMSDKContext.java uilib/components/DesktopBaseView.java uilib/components/QDesktopDialogView.java uilib/frame/a.java uilib/frame/b.java uilib/templates/g.java
com.android.launcher.permission.INSTALL_SHORTCUT	签名	创建快捷方式	这个权限是允许应用程序创建桌面快捷方式。
com.android.launcher.permission.UNINSTALL_SHORTCUT	签名	删除快捷方式	这个权限是允许应用程序删除桌面快捷方式。
android.permission.SYSTEM_ALERT_WINDOW	危险	弹窗	允许应用程序弹窗。恶意程序可以接管手机的整个屏幕。	显示文件 com/anguanjia/security/plugin/ctsecurity/fg/ads/net800/view/c.java com/anguanjia/security/plugin/ctsecurity/fg/ads/net800/view/d.java com/meri/ui/guide/xiaomi/b.java com/tencent/permissionfw/sms/client/HookSmsDebugLogFloatView.java com/tencent/qqpimsecure/plugin/commontools/view/ad/AdvertiseView.java com/tencent/qqpimsecure/plugin/commontools/view/page/a.java com/tencent/qqpimsecure/plugin/deskassistant/common/mini/MiniView.java com/tencent/qqpimsecure/plugin/deskassistant/common/mini/b.java com/tencent/qqpimsecure/plugin/deskassistant/common/mini/c.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/a.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/coloregg/ColorEggView.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/coloregg/FestivalColorEggView.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/coloregg/LotteryColorEggView.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/coloregg/PerformanceView.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/coloregg/d.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/coloregg/e.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/lampstand/FireCrackerLampstandView.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/lampstand/RocketLampstandView.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/lampstand/SecureLampstandView.java com/tencent/qqpimsecure/plugin/deskassistant/task/expanded/ExpandedView.java com/tencent/qqpimsecure/plugin/deskassistant/task/expanded/a.java com/tencent/qqpimsecure/plugin/deskassistant/task/strongrocket/tips/b.java com/tencent/qqpimsecure/plugin/deskassistant/task/strongrocket/view/GuideDialogLayout.java com/tencent/qqpimsecure/plugin/deskassistant/task/strongrocket/view/StrongRocketBgView.java com/tencent/qqpimsecure/plugin/deskassistant/task/strongrocket/view/StrongRocketWrapperLayout.java com/tencent/qqpimsecure/plugin/main/components/QSlidiingMenuView.java com/tencent/qqpimsecure/plugin/main/page/f.java com/tencent/qqpimsecure/plugin/main/page/h.java com/tencent/qqpimsecure/plugin/processmanager/common/g.java com/tencent/qqpimsecure/uninstallprotect/UninstallProtectActivity.java com/tencent/qqpimsecure/uninstallprotect/a.java com/tencent/server/fore/DeskTopActivity.java com/tencent/server/fore/RealtimeProtectGuideActivity.java com/tencent/server/fore/f.java meri/service/usespermission/b.java meri/service/usespermission/d.java meri/util/AccessHelper.java tcs/aik.java tcs/bde.java tcs/bgw.java tcs/bja.java tcs/blj.java tcs/bsr.java tcs/bws.java tcs/bwt.java tcs/bxb.java tcs/bzr.java tcs/bzs.java tcs/ub.java tcs/xu.java uilib/components/c.java uilib/frame/f.java uilib/pages/viewpager/QPageIndicator.java
android.permission.CLEAR_APP_CACHE	危险	删除所有应用程序缓存数据	允许应用程序通过删除应用程序缓存目录中的文件释放手机存储空间。通常此权限只适用于系统进程。
android.permission.DISABLE_KEYGUARD	危险	禁用键盘锁	允许应用程序停用键锁和任何关联的密码安全设置。例如，在手机上接听电话时停用键锁，在通话结束后重新启用键锁。	显示文件 tcs/ahp.java
android.permission.CAMERA	危险	拍照和录制视频	允许应用程序拍摄照片和视频，且允许应用程序收集相机在任何时候拍到的图像。
android.permission.FLASHLIGHT	普通	控制闪光灯	允许应用程序控制闪光灯。
android.permission.RECEIVE_MMS	危险	接收彩信	允许应用程序接收和处理彩信。恶意应用程序可借此监视您的信息，或者将信息删除而不向您显示。	显示文件 com/king/uranus/bF.java com/tencent/halley/common/downloader_detector/DownloaderApn.java com/tencent/tmassistantsdk/downloadservice/NetworkMonitorReceiver.java com/tencent/tmassistantsdk/openSDK/QQDownloader/QQDownloaderInstalled.java meri/util/BaseReceiver.java tmsdk/common/BaseTMSReceiver.java
android.permission.READ_MMS	未知	未知权限	来自 android 引用的未知权限。
android.permission.RECEIVE_WAP_PUSH	危险	接收WAP	允许应用程序接收和处理 WAP 信息。恶意应用程序可借此监视您的信息，或者将信息删除而不向您显示。	显示文件 com/king/uranus/bF.java com/tencent/halley/common/downloader_detector/DownloaderApn.java com/tencent/tmassistantsdk/downloadservice/NetworkMonitorReceiver.java com/tencent/tmassistantsdk/openSDK/QQDownloader/QQDownloaderInstalled.java meri/util/BaseReceiver.java tmsdk/common/BaseTMSReceiver.java
com.android.launcher.permission.READ_SETTINGS	危险	读取桌面快捷方式	这种权限的作用是允许应用读取桌面快捷方式的设置。
android.permission.REBOOT_IPO	未知	未知权限	来自 android 引用的未知权限。
com.anguanjia.security.INNER_BROCAST	未知	未知权限	来自 android 引用的未知权限。
android.permission.MOUNT_UNMOUNT_FILESYSTEMS	危险	装载和卸载文件系统	允许应用程序装载和卸载可移动存储器的文件系统。
android.permission.ACCESS_FINE_LOCATION	危险	获取精确位置	通过GPS芯片接收卫星的定位信息，定位精度达10米以内。恶意程序可以用它来确定您所在的位置。	显示文件 tcs/ahs.java tcs/aht.java tcs/bdv.java
android.permission.ACCESS_COARSE_LOCATION	危险	获取粗略位置	通过WiFi或移动基站的方式获取用户错略的经纬度信息，定位精度大概误差在30~1500米。恶意程序可以用它来确定您的大概位置。	显示文件 com/tencent/halley/common/downloader_detector/DownloaderApn.java com/tencent/halley/common/downloader_detector/b.java tcs/ack.java tcs/ahs.java tcs/aht.java tcs/bdv.java
android.permission.ACCESS_SURFACE_FLINGER	签名	访问SurfaceFlinger	允许应用程序使用SurfaceFlinger低级别功能。
android.permission.SET_ANIMATION_SCALE	危险	修改全局动画速度	允许应用程序随时更改全局动画速度（加快或放慢动画）。
android.permission.WRITE_SYNC_SETTINGS	危险	修改同步设置	允许应用程序修改同步设置。	显示文件 com/meri/service/daemon/a.java
android.permission.READ_INPUT_STATE	签名	记录您键入的内容和执行的操作	允许应用程序查看您按的键，即使在与其他应用程序交互（例如输入密码）时也不例外。普通应用程序从不需要使用此权限。
android.permission.KILL_BACKGROUND_PROCESSES	普通	结束进程	允许应用程序结束其他应用程序的后台进程。	显示文件 tcs/bhz.java tcs/cbb.java
com.android.browser.permission.READ_HISTORY_BOOKMARKS	危险	获取自带浏览器上网记录	恶意代码可有利用此权限窃取用户的上网记录和书签。
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS	危险	修改自带浏览器上网记录	恶意代码可有利用此权限篡改用户的上网记录和书签。
android.permission.CHANGE_CONFIGURATION	危险	改变UI设置	允许应用程序允许应用程序更改当前配置，例如语言区域或整体的字体大小。
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS	普通	访问定位额外命令	访问额外位置提供程序命令，恶意应用程序可能会使用它来干扰GPS或其他位置源的操作。
android.permission.CLEAR_APP_USER_DATA	签名	清除用户数据	允许应用程序清除用户数据。
android.permission.INSTALL_PACKAGES	签名(系统)	请求安装APP	允许应用程序安装全新的或更新的 Android 包。恶意应用程序可能会借此添加其具有任意权限的新应用程序。
android.permission.DELETE_PACKAGES	签名(系统)	删除应用程序	允许应用程序删除 Android 包。恶意应用程序可借此删除重要的应用程序。
com.anguanjia.security.permission.FORE_SERVICE	未知	未知权限	来自 android 引用的未知权限。
com.anguanjia.security.permission.BACK_ENGINE	未知	未知权限	来自 android 引用的未知权限。
android.permission.READ_CALL_LOG	危险	读取通话记录	允许应用程序读取用户的通话记录	显示文件 com/tencent/kingkong/AbstractCursor.java com/tencent/kingkong/Cursor.java com/tencent/kingkong/CursorWrapper.java com/tencent/qqpimsecure/storage/b.java com/tencent/qqpimsecure/storage/s.java com/tencent/qqpimsecure/storage/x.java oicq/wlogin_sdk/tools/util.java tcs/act.java tcs/akj.java tcs/auv.java
android.permission.WRITE_CALL_LOG	危险	写入通话记录	允许应用程序写入（但不读取）用户的通话记录数据。	显示文件 com/meri/service/daemon/a.java com/tencent/qqpimsecure/storage/b.java com/tencent/qqpimsecure/storage/s.java com/tencent/qqpimsecure/storage/x.java oicq/wlogin_sdk/tools/util.java tcs/auv.java
android.permission.REORDER_TASKS	危险	对正在运行的应用程序重新排序	允许应用程序将任务移至前端和后台。恶意应用程序可借此强行进入前端，而不受您的控制。
android.permission.ACCESS_MTK_MMHW	未知	未知权限	来自 android 引用的未知权限。
android.permission.DIAGNOSTIC	签名	读取/写入诊断所拥有的资源	允许应用程序读取/写入诊断组所拥有的任何资源（例如，/dev 中的文件）。这可能会影响系统稳定性和安全性。此权限仅供制造商或运营商诊断硬件问题。
android.permission.CHANGE_WIFI_MULTICAST_STATE	危险	允许接收WLAN多播	允许应用程序接收并非直接向您的设备发送的数据包。这样在查找附近提供的服务时很有用。这种操作所耗电量大于非多播模式。
android.permission.ACCESS_CACHE_FILESYSTEM	签名(系统)	访问缓存文件系统	允许应用程序读取和写入缓存文件系统。
android.permission.GET_ACCOUNTS	普通	探索已知账号	允许应用程序访问帐户服务中的帐户列表。	显示文件 com/meri/service/daemon/a.java tcs/ahq.java
android.permission.PACKAGE_USAGE_STATS	签名	更新组件使用统计	允许修改组件使用情况统计
android.permission.EXPAND_STATUS_BAR	普通	展开/收拢状态栏	允许应用程序展开或折叠状态条。
com.android.launcher2.permission.READ_SETTINGS	危险	读取桌面快捷方式	这种权限的作用是允许应用读取桌面快捷方式的设置。
com.android.launcher3.permission.READ_SETTINGS	危险	读取桌面快捷方式	这种权限的作用是允许应用读取桌面快捷方式的设置。
org.adw.launcher.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
com.htc.launcher.permission.READ_SETTINGS	普通	在应用程序上显示通知计数	在HTC手机的应用程序启动图标上显示通知计数或徽章。
com.qihoo360.launcher.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
com.lge.launcher.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
net.qihoo.launcher.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
org.adwfreak.launcher.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
org.adw.launcher_donut.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
com.huawei.launcher3.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
com.fede.launcher.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
com.sec.android.app.twlauncher.settings.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
com.anddoes.launcher.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
com.tencent.qqlauncher.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
com.huawei.launcher2.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
com.android.mylauncher.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
com.ebproductions.android.launcher.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
com.oppo.launcher.permission.READ_SETTINGS	普通	在应用程序上显示通知计数	在OPPO手机的应用程序启动图标上显示通知计数或徽章。
com.miui.mihome2.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
com.huawei.android.launcher.permission.READ_SETTINGS	普通	在应用程序上显示通知计数	在华为手机的应用程序启动图标上显示通知计数或徽章。
telecom.mdesk.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
com.lenovo.launcher.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
com.google.android.launcher.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
com.yulong.android.launcher3.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
com.bbk.launcher2.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
com.meizu.flyme.launcher.permission.READ_SETTINGS	未知	未知权限	来自 android 引用的未知权限。
dianxin.permission.ACCESS_LAUNCHER_DATA	未知	未知权限	来自 android 引用的未知权限。
android.permission.READ_CALENDAR	危险	读取日历活动	允许应用程序读取您手机上存储的所有日历活动。恶意应用程序可借此将您的日历活动发送给其他人。	显示文件 com/tencent/kingkong/AbstractCursor.java com/tencent/kingkong/Cursor.java com/tencent/kingkong/CursorWrapper.java com/tencent/qqpimsecure/storage/b.java com/tencent/qqpimsecure/storage/s.java com/tencent/qqpimsecure/storage/x.java oicq/wlogin_sdk/tools/util.java tcs/act.java tcs/akj.java tcs/auv.java
android.permission.WRITE_CALENDAR	危险	添加或修改日历活动以及向邀请对象发送电子邮件	允许应用程序添加或更改日历中的活动，这可能会向邀请对象发送电子邮件。恶意应用程序可能会借此清除或修改您的日历活动，或者向邀请对象发送电子邮件。	显示文件 com/tencent/qqpimsecure/storage/b.java com/tencent/qqpimsecure/storage/s.java com/tencent/qqpimsecure/storage/x.java oicq/wlogin_sdk/tools/util.java tcs/auv.java
android.permission.USE_CREDENTIALS	危险	使用帐户的身份验证凭据	允许应用程序请求身份验证标记。
android.permission.MANAGE_ACCOUNTS	危险	管理帐户列表	允许应用程序执行添加、删除帐户及删除其密码之类的操作。
android.permission.AUTHENTICATE_ACCOUNTS	危险	作为帐户身份验证程序	允许应用程序使用 AccountManager 的帐户身份验证程序功能，包括创建帐户以及获取和设置其密码。	显示文件 com/meri/service/daemon/a.java
android.permission.WRITE_SECURE_SETTINGS	签名(系统)	修改安全系统设置	允许应用程序修改系统的安全设置数据。普通应用程序不能使用此权限。	显示文件 tcs/abh.java
android.permission.READ_SYNC_STATS	普通	读取同步统计信息	允许应用程序读取同步统计信息；例如已发生的同步历史记录。
android.permission.READ_SYNC_SETTINGS	普通	读取同步设置	允许应用程序读取同步设置，例如是否为联系人启用同步。
android.permission.RECORD_AUDIO	危险	获取录音权限	允许应用程序获取录音权限。
android.permission.DEVICE_POWER	签名	开机或关机	允许应用程序启动/关闭设备。

证书安全分析

高危

1

警告

0

信息

1

标题	严重程度	描述信息
已签名应用	信息	应用程序已使用代码签名证书进行签名
应用程序存在Janus漏洞	高危	应用程序使用了v1签名方案进行签名，如果只使用v1签名方案，那么它就容易受到安卓5.0-8.0上的Janus漏洞的攻击。在安卓5.0-7.0上运行的使用了v1签名方案的应用程序，以及同时使用了v2/v3签名方案的应用程序也同样存在漏洞。

MANIFEST分析

高危

11

警告

38

信息

0

屏蔽

0

序号	问题	严重程度	描述信息	操作
1	应用程序可以安装在有漏洞的已更新 Android 版本上 Android XX, [minSdk=7]	信息	该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。	对应用 com.anguanjia.security 禁止使用 vulnerable_os_version 规则
2	Service (com.tencent.qqpimsecure.service.TMSLiteService) 未被保护。 [android:exported=true]	警告	发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.anguanjia.security 禁止使用 service_explicitly_exported 规则
3	Service (com.tencent.server.back.DaemonService) 未被保护。 [android:exported=true]	警告	发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.anguanjia.security 禁止使用 service_explicitly_exported 规则
4	Service (com.meri.service.daemon.DaemonServiceO) 未被保护。 [android:exported=true]	警告	发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.anguanjia.security 禁止使用 service_explicitly_exported 规则
5	Service (com.meri.service.monitor.NtMonitorService) 受权限保护, 但是应该检查权限的保护级别。 Permission: android.permission.BIND_NOTIFICATION_LISTENER_SERVICE [android:exported=true]	警告	发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。	对应用 com.anguanjia.security 禁止使用 service_exported_protected_permission_not_defined 规则
6	Content Provider (com.tencent.qqpimsecure.dao.DummyProvider) 未被保护。 [android:exported=true]	警告	发现 Content Provider与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.anguanjia.security 禁止使用 provider_explicitly_exported 规则
7	Broadcast Receiver (com.tencent.qqpimsecure.service.InOutCallReceiver) 未被保护。存在一个intent-filter。	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。	对应用 com.anguanjia.security 禁止使用 receiver_exported_intent_filter_exists 规则
8	Broadcast Receiver (com.tencent.qqpimsecure.uninstallprotect.UninstallProtectReceiver) 受权限保护, 但是应该检查权限的保护级别。 Permission: android.permission.BIND_DEVICE_ADMIN [android:exported=true]	警告	发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。	对应用 com.anguanjia.security 禁止使用 receiver_exported_protected_permission_not_defined 规则
9	Service (com.tmsdk.bg.module.hook.HookSmsLocalService) 未被保护。 [android:exported=true]	警告	发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.anguanjia.security 禁止使用 service_explicitly_exported 规则
10	Broadcast Receiver (com.tmsdk.bg.module.hook.HookSmsReceiver) 未被保护。 [android:exported=true]	警告	发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.anguanjia.security 禁止使用 receiver_explicitly_exported 规则
11	Service (com.tencent.server.back.SyncAuthService) 未被保护。 [android:exported=true]	警告	发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.anguanjia.security 禁止使用 service_explicitly_exported 规则
12	Service (com.tencent.server.back.SyncTaskService) 未被保护。 [android:exported=true]	警告	发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.anguanjia.security 禁止使用 service_explicitly_exported 规则
13	Activity (com.tencent.server.fore.SysSetActivity) 未被保护。存在一个intent-filter。	警告	发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。	对应用 com.anguanjia.security 禁止使用 activity_exported_intent_filter_exists 规则
14	Activity (com.tencent.server.fore.MeriActivity) 的启动模式不是standard模式	高危	Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。	对应用 com.anguanjia.security 禁止使用 activity_non_standard_launchmode 规则
15	Activity （com.tencent.server.fore.MeriActivity）容易受到 Android Task Hijacking/StrandHogg 的攻击。	高危	活动不应将启动模式属性设置为“singleTask”。然后，其他应用程序可以将恶意活动放置在活动栈顶部，从而导致任务劫持/StrandHogg 1.0 漏洞。这使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。您还可以将应用的目标 SDK 版本 (23) 更新到 28 或更高版本以在平台级别修复此问题。	对应用 com.anguanjia.security 禁止使用 activity_task_hijacking 规则
16	Activity (com.tencent.server.fore.DeskTopActivity) 未被保护。存在一个intent-filter。	警告	发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。	对应用 com.anguanjia.security 禁止使用 activity_exported_intent_filter_exists 规则
17	Activity (com.tencent.server.fore.QuickLoadActivity) is vulnerable to StrandHogg 2.0	高危	已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时，其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部，从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (23) 更新到 29 或更高版本以在平台级别修复此问题。	对应用 com.anguanjia.security 禁止使用 activity_task_hijacking2 规则
18	Activity (com.tencent.server.fore.QuickLoadActivity) 未被保护。 [android:exported=true]	警告	发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.anguanjia.security 禁止使用 activity_explicitly_exported 规则
19	Activity (com.tencent.server.fore.ActiveActivity) 的启动模式不是standard模式	高危	Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。	对应用 com.anguanjia.security 禁止使用 activity_non_standard_launchmode 规则
20	Activity (com.tencent.server.fore.SingleInstanceActivity) 的启动模式不是standard模式	高危	Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。	对应用 com.anguanjia.security 禁止使用 activity_non_standard_launchmode 规则
21	Activity设置了TaskAffinity属性 (com.tencent.server.fore.SingleSmsActivity)	警告	如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名	对应用 com.anguanjia.security 禁止使用 activity_task_affinity_set 规则
22	Activity (com.tencent.server.fore.SingleSmsActivity) 的启动模式不是standard模式	高危	Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。	对应用 com.anguanjia.security 禁止使用 activity_non_standard_launchmode 规则
23	Activity （com.tencent.server.fore.SingleSmsActivity）容易受到 Android Task Hijacking/StrandHogg 的攻击。	高危	活动不应将启动模式属性设置为“singleTask”。然后，其他应用程序可以将恶意活动放置在活动栈顶部，从而导致任务劫持/StrandHogg 1.0 漏洞。这使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。您还可以将应用的目标 SDK 版本 (23) 更新到 28 或更高版本以在平台级别修复此问题。	对应用 com.anguanjia.security 禁止使用 activity_task_hijacking 规则
24	Activity设置了TaskAffinity属性 (com.tencent.server.fore.MmsStandardActivity)	警告	如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名	对应用 com.anguanjia.security 禁止使用 activity_task_affinity_set 规则
25	Activity设置了TaskAffinity属性 (com.tencent.server.fore.MmsQuickLoadActivity)	警告	如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名	对应用 com.anguanjia.security 禁止使用 activity_task_affinity_set 规则
26	Activity (com.tencent.server.fore.MmsQuickLoadActivity) is vulnerable to StrandHogg 2.0	高危	已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时，其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部，从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (23) 更新到 29 或更高版本以在平台级别修复此问题。	对应用 com.anguanjia.security 禁止使用 activity_task_hijacking2 规则
27	Activity (com.tencent.server.fore.MmsQuickLoadActivity) 未被保护。 [android:exported=true]	警告	发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.anguanjia.security 禁止使用 activity_explicitly_exported 规则
28	Activity设置了TaskAffinity属性 (com.tencent.server.fore.GameBoxActivity)	警告	如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名	对应用 com.anguanjia.security 禁止使用 activity_task_affinity_set 规则
29	Activity (com.tencent.server.fore.GameBoxActivity) is vulnerable to StrandHogg 2.0	高危	已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时，其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部，从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (23) 更新到 29 或更高版本以在平台级别修复此问题。	对应用 com.anguanjia.security 禁止使用 activity_task_hijacking2 规则
30	Activity (com.tencent.server.fore.GameBoxActivity) 未被保护。 [android:exported=true]	警告	发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.anguanjia.security 禁止使用 activity_explicitly_exported 规则
31	Activity (com.tencent.qqpimsecure.wxapi.WXEntryActivity) is vulnerable to StrandHogg 2.0	高危	已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时，其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部，从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (23) 更新到 29 或更高版本以在平台级别修复此问题。	对应用 com.anguanjia.security 禁止使用 activity_task_hijacking2 规则
32	Activity (com.tencent.qqpimsecure.wxapi.WXEntryActivity) 未被保护。 [android:exported=true]	警告	发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.anguanjia.security 禁止使用 activity_explicitly_exported 规则
33	Activity (com.tencent.qqpimsecure.wxapi.WXPayEntryActivity) is vulnerable to StrandHogg 2.0	高危	已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时，其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部，从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (23) 更新到 29 或更高版本以在平台级别修复此问题。	对应用 com.anguanjia.security 禁止使用 activity_task_hijacking2 规则
34	Activity (com.tencent.qqpimsecure.wxapi.WXPayEntryActivity) 未被保护。 [android:exported=true]	警告	发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.anguanjia.security 禁止使用 activity_explicitly_exported 规则
35	Activity (com.tencent.server.fore.SafeDownloadActivity) 未被保护。存在一个intent-filter。	警告	发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。	对应用 com.anguanjia.security 禁止使用 activity_exported_intent_filter_exists 规则
36	Activity (com.meri.ui.guide.xiaomi.GuideXiaomiActivity) 未被保护。存在一个intent-filter。	警告	发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。	对应用 com.anguanjia.security 禁止使用 activity_exported_intent_filter_exists 规则
37	Activity (com.tencent.server.fore.RealtimeProtectGuideActivity) 未被保护。存在一个intent-filter。	警告	发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。	对应用 com.anguanjia.security 禁止使用 activity_exported_intent_filter_exists 规则
38	Service (meri.service.aresengine.sms.MmsTransactionService) 未被保护。 [android:exported=true]	警告	发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.anguanjia.security 禁止使用 service_explicitly_exported 规则
39	Broadcast Receiver (com.tmsdk.bg.module.aresengine.SmsReciver) 受权限保护, 但是应该检查权限的保护级别。 Permission: android.permission.BROADCAST_SMS [android:exported=true]	警告	发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。	对应用 com.anguanjia.security 禁止使用 receiver_exported_protected_permission_not_defined 规则
40	Broadcast Receiver (com.tmsdk.bg.module.aresengine.SmsReciver) 受权限保护, 但是应该检查权限的保护级别。 Permission: android.permission.BROADCAST_WAP_PUSH [android:exported=true]	警告	发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。	对应用 com.anguanjia.security 禁止使用 receiver_exported_protected_permission_not_defined 规则
41	Activity (com.tencent.server.fore.ComposeSmsActivity) 未被保护。存在一个intent-filter。	警告	发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。	对应用 com.anguanjia.security 禁止使用 activity_exported_intent_filter_exists 规则
42	Service (com.meri.service.bg.ares.HeadlessSmsSendService) 受权限保护, 但是应该检查权限的保护级别。 Permission: android.permission.SEND_RESPOND_VIA_MESSAGE [android:exported=true]	警告	发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。	对应用 com.anguanjia.security 禁止使用 service_exported_protected_permission_not_defined 规则
43	Service (com.tencent.server.back.ProductService) 未被保护。 [android:exported=true]	警告	发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。	对应用 com.anguanjia.security 禁止使用 service_explicitly_exported 规则
44	Service (com.tencent.server.task.MutilPluginProcessService) 未被保护。存在一个intent-filter。	警告	发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。	对应用 com.anguanjia.security 禁止使用 service_exported_intent_filter_exists 规则
45	高优先级的Intent (1000) [android:priority]	警告	通过设置一个比另一个Intent更高的优先级，应用程序有效地覆盖了其他请求。	对应用 com.anguanjia.security 禁止使用 high_intent_priority_found 规则
46	高优先级的Intent (1000) [android:priority]	警告	通过设置一个比另一个Intent更高的优先级，应用程序有效地覆盖了其他请求。	对应用 com.anguanjia.security 禁止使用 high_intent_priority_found 规则
47	高优先级的Intent (1000) [android:priority]	警告	通过设置一个比另一个Intent更高的优先级，应用程序有效地覆盖了其他请求。	对应用 com.anguanjia.security 禁止使用 high_intent_priority_found 规则
48	高优先级的Intent (2147483647) [android:priority]	警告	通过设置一个比另一个Intent更高的优先级，应用程序有效地覆盖了其他请求。	对应用 com.anguanjia.security 禁止使用 high_intent_priority_found 规则
49	高优先级的Intent (2147483647) [android:priority]	警告	通过设置一个比另一个Intent更高的优先级，应用程序有效地覆盖了其他请求。	对应用 com.anguanjia.security 禁止使用 high_intent_priority_found 规则
50	高优先级的Intent (2147483647) [android:priority]	警告	通过设置一个比另一个Intent更高的优先级，应用程序有效地覆盖了其他请求。	对应用 com.anguanjia.security 禁止使用 high_intent_priority_found 规则

可浏览的Activity组件

ACTIVITY	INTENT
com.tencent.server.fore.QuickLoadActivity	Schemes: com.anguanjia.security://,
com.tencent.server.fore.SafeDownloadActivity	Schemes: http://, Hosts: apps.wandoujia.com, apps.wandoujia.cn, , Mime Types:* application/, Path Patterns:* .download, .\\..download, .\\..\\..download, .\\..\\..\\..download, .\\..\\..\\..\\..download, .\\..\\..\\..\\..\\..download, .\\..\\..\\..\\..\\..\\..download, .\\..\\..\\..\\..\\..\\..\\..download, .\\.apk, .\\.apk., .\\..\\.apk., .\\..\\..\\.apk., .\\..\\..\\..\\.apk., .\\..\\..\\..\\..\\.apk., .\\..\\..\\..\\..\\..\\.apk., .\\..\\..\\..\\..\\..\\..\\.apk., .\\..\\..\\..\\..\\..\\..\\..\\.apk., .\\.APK, .\\.APK., .\\..\\.APK., .\\..\\..\\.APK., .\\..\\..\\..\\.APK., .\\..\\..\\..\\..\\.APK., .\\..\\..\\..\\..\\..\\.APK., .\\..\\..\\..\\..\\..\\..\\.APK., .\\..\\..\\..\\..\\..\\..\\..\\.APK.,
com.tencent.server.fore.ComposeSmsActivity	Schemes: sms://, smsto://, Mime Types: vnd.android-dir/mms-sms, text/plain,

网络通信安全

序号	范围	严重级别	描述

API调用分析

API功能	源码文件
一般功能-> 获取系统服务(getSystemService)	显示文件 com/anguanjia/framework/utils/SystemUtil.java com/anguanjia/security/plugin/ctsecurity/fg/ads/net800/view/c.java com/anguanjia/security/plugin/ctsecurity/fg/ads/net800/view/d.java com/anguanjia/security/plugin/ctsecurity/model/clientupgrade/a.java com/king/uranus/bg.java com/king/uranus/cr.java com/king/uranus/di.java com/king/uranus/dm.java com/king/uranus/ga.java com/meri/service/daemon/a.java com/meri/service/monitor/NtGuardService.java com/meri/service/monitor/a.java com/meri/service/netsetting/b.java com/meri/service/performance/PerformanceWatchDog.java com/meri/service/performance/a.java com/meri/service/phoneinfo/NetworkInfoManager.java com/meri/service/phoneinfo/i.java com/meri/service/rqd/k.java com/meri/service/viruskiller/j.java com/meri/ui/guide/xiaomi/a.java com/meri/ui/guide/xiaomi/b.java com/tencent/halley/common/downloader_detector/DownloaderApn.java com/tencent/halley/common/downloader_detector/b.java com/tencent/halley/common/downloader_detector/c.java com/tencent/permissionfw/sms/client/HookSmsDebugLogFloatView.java com/tencent/qqpimsecure/h5/f.java com/tencent/qqpimsecure/plugin/commontools/bg/c.java com/tencent/qqpimsecure/plugin/commontools/view/ad/AdvertiseView.java com/tencent/qqpimsecure/plugin/commontools/view/page/a.java com/tencent/qqpimsecure/plugin/deepclean/bg/PiDeepCleanUD.java com/tencent/qqpimsecure/plugin/deskassistant/common/mini/MiniView.java com/tencent/qqpimsecure/plugin/deskassistant/common/mini/b.java com/tencent/qqpimsecure/plugin/deskassistant/common/mini/c.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/a.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/coloregg/ColorEggView.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/coloregg/FestivalColorEggView.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/coloregg/LotteryColorEggView.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/coloregg/PerformanceView.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/coloregg/d.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/coloregg/e.java com/tencent/qqpimsecure/plugin/deskassistant/task/expanded/a.java com/tencent/qqpimsecure/plugin/deskassistant/task/strongrocket/tips/b.java com/tencent/qqpimsecure/plugin/main/components/QSlidiingMenuView.java com/tencent/qqpimsecure/plugin/main/page/a.java com/tencent/qqpimsecure/plugin/main/page/h.java com/tencent/qqpimsecure/plugin/optimus/bg/b.java com/tencent/qqpimsecure/plugin/optimus/bg/c.java com/tencent/qqpimsecure/plugin/passwordsystem/password/a.java com/tencent/qqpimsecure/plugin/passwordsystem/password/ac.java com/tencent/qqpimsecure/plugin/processmanager/bg/PiProcessManagerUD.java com/tencent/qqpimsecure/plugin/processmanager/common/g.java com/tencent/qqpimsecure/service/d.java com/tencent/qqpimsecure/service/x.java com/tencent/qqpimsecure/uninstallprotect/UninstallProtectLockedView.java com/tencent/qqpimsecure/uninstallprotect/UninstallProtectReceiver.java com/tencent/qqpimsecure/uninstallprotect/a.java com/tencent/server/back/BackEngine.java com/tencent/server/base/v.java com/tencent/server/fore/DataManagerActivity.java com/tencent/server/fore/RealtimeProtectGuideActivity.java com/tencent/server/fore/b.java com/tencent/server/fore/c.java com/tencent/server/fore/f.java com/tencent/server/task/l.java com/tencent/tmassistantsdk/downloadservice/a.java com/tencent/tmassistantsdk/f/f.java meri/pluginsdk/h.java meri/service/aresengine/i.java meri/service/aresengine/q.java meri/service/usespermission/b.java meri/service/usespermission/d.java meri/util/AccessHelper.java oicq/wlogin_sdk/tools/util.java tcs/ack.java tcs/acl.java tcs/acq.java tcs/acr.java tcs/act.java tcs/acw.java tcs/acx.java tcs/acz.java tcs/ada.java tcs/adc.java tcs/ade.java tcs/adg.java tcs/adh.java tcs/adi.java tcs/agt.java tcs/ahd.java tcs/ahp.java tcs/aht.java tcs/ahv.java tcs/aik.java tcs/aip.java tcs/ajy.java tcs/akn.java tcs/akq.java tcs/akr.java tcs/ali.java tcs/alq.java tcs/amr.java tcs/amz.java tcs/aos.java tcs/ata.java tcs/auc.java tcs/avl.java tcs/avr.java tcs/axu.java tcs/bde.java tcs/bdj.java tcs/bdv.java tcs/beg.java tcs/bfc.java tcs/bgl.java tcs/bgw.java tcs/bhr.java tcs/bhy.java tcs/bhz.java tcs/bib.java tcs/bim.java tcs/bja.java tcs/bjl.java tcs/bjn.java tcs/bkp.java tcs/blj.java tcs/bom.java tcs/bot.java tcs/boy.java tcs/bpa.java tcs/bps.java tcs/bsr.java tcs/bvh.java tcs/bws.java tcs/bwt.java tcs/bxb.java tcs/bxw.java tcs/bys.java tcs/bzr.java tcs/bzs.java tcs/cam.java tcs/caw.java tcs/cbb.java tcs/cbc.java tcs/cbq.java tcs/la.java tcs/sm.java tcs/tu.java tcs/tz.java tcs/ub.java tcs/uh.java tcs/we.java tcs/wj.java tcs/wn.java tcs/wq.java tcs/wy.java tcs/xb.java tcs/xd.java tcs/xf.java tmsdk/common/e.java tmsdk/common/internal/utils/aa.java tmsdk/common/internal/utils/ab.java tmsdk/common/internal/utils/x.java tmsdk/common/internal/utils/y.java tmsdk/common/module/sdknetpool/tcpnetwork/a.java uilib/frame/f.java uilib/pages/viewpager/QPageIndicator.java
调用java反射机制	显示文件 com/anguanjia/framework/common/PluginResUtil.java com/anguanjia/framework/utils/FileUtil.java com/anguanjia/framework/utils/ReflectionUtils.java com/king/uranus/al.java com/king/uranus/ao.java com/king/uranus/ar.java com/king/uranus/as.java com/king/uranus/ga.java com/king/uranus/ge.java com/meri/service/daemon/strategy/RebootStrategy.java com/meri/service/monitor/AccessibilityDispatcher.java com/meri/service/netsetting/b.java com/meri/service/permission/f.java com/meri/service/phoneinfo/i.java com/meri/util/a.java com/meri/util/b.java com/tencent/kingkong/database/SQLiteDatabase.java com/tencent/kingkong/database/SQLiteDebug.java com/tencent/kingkong/database/SQLiteGlobal.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/a.java com/tencent/qqpimsecure/plugin/passwordsystem/password/a.java com/tencent/qqpimsecure/service/d.java com/tencent/qqpimsecure/uninstallprotect/UninstallProtectLockedView.java com/tencent/server/base/t.java com/tencent/server/base/v.java com/tencent/server/base/x.java com/tencent/server/fore/DataManagerActivity.java com/tencent/tmassistantsdk/downloadclient/e.java com/tencent/tmassistantsdk/downloadclient/i.java com/tencent/tmassistantsdk/openSDK/param/a.java meri/pluginsdk/j.java meri/pluginsdk/q.java meri/service/aresengine/sms/e.java oicq/wlogin_sdk/request/c.java tcs/acl.java tcs/acq.java tcs/acr.java tcs/act.java tcs/acu.java tcs/acw.java tcs/acx.java tcs/acz.java tcs/ada.java tcs/adb.java tcs/adc.java tcs/ade.java tcs/adf.java tcs/adh.java tcs/agt.java tcs/aht.java tcs/ahv.java tcs/aik.java tcs/akd.java tcs/ali.java tcs/alk.java tcs/alq.java tcs/alr.java tcs/alw.java tcs/alx.java tcs/anc.java tcs/aos.java tcs/apj.java tcs/arc.java tcs/ari.java tcs/ata.java tcs/aub.java tcs/auc.java tcs/awd.java tcs/awy.java tcs/axa.java tcs/axf.java tcs/axu.java tcs/bdc.java tcs/bgi.java tcs/bgp.java tcs/bhq.java tcs/bhr.java tcs/bhy.java tcs/bje.java tcs/bnu.java tcs/bok.java tcs/bwp.java tcs/byl.java tcs/bys.java tcs/byw.java tcs/cbb.java tcs/gf.java tcs/gs.java tcs/jl.java tcs/nd.java tcs/nm.java tcs/tg.java tcs/ub.java tcs/vl.java tcs/vv.java tcs/we.java tcs/wj.java tcs/wl.java tcs/wn.java tcs/wq.java tcs/wu.java tcs/wy.java tcs/xf.java tcs/xi.java tcs/yc.java tcs/yw.java tcs/yx.java tcs/yy.java tmsdk/common/e.java tmsdk/common/internal/utils/p.java tmsdk/common/internal/utils/r.java tmsdk/common/internal/utils/v.java tmsdk/common/internal/utils/w.java uilib/components/QProgressBar.java uilib/components/QRippleLayout.java uilib/components/QScrollView.java uilib/components/list/QListView.java
一般功能-> IPC通信	显示文件 com/anguanjia/security/plugin/ctsecurity/bg/PiCtSecurityUD.java com/anguanjia/security/plugin/ctsecurity/fg/PiCtSecurity.java com/anguanjia/security/plugin/ctsecurity/fg/ads/net800/view/c.java com/anguanjia/security/plugin/ctsecurity/fg/ads/net800/view/d.java com/anguanjia/security/plugin/ctsecurity/fg/clientupgrade/view/CUDialogView.java com/anguanjia/security/plugin/ctsecurity/fg/main/b.java com/anguanjia/security/plugin/ctsecurity/model/clientupgrade/a.java com/king/uranus/as.java com/king/uranus/bF.java com/king/uranus/bw.java com/king/uranus/daemon/e.java com/king/uranus/dd.java com/king/uranus/di.java com/king/uranus/dm.java com/king/uranus/dr.java com/king/uranus/ds.java com/king/uranus/e.java com/king/uranus/eb.java com/king/uranus/fg.java com/king/uranus/o.java com/king/uranus/t.java com/king/uranus/x.java com/mediatek/common/mom/ICallInterceptionListener.java com/mediatek/common/mom/IMessageInterceptListener.java com/mediatek/common/mom/IMobileConnectionCallback.java com/mediatek/common/mom/IMobileManagerService.java com/mediatek/common/mom/INotificationListener.java com/mediatek/common/mom/IPackageInstallCallback.java com/mediatek/common/mom/IPermissionListener.java com/mediatek/common/mom/IRequestedPermissionCallback.java com/meri/service/bg/ares/HeadlessSmsSendService.java com/meri/service/bg/ares/p.java com/meri/service/daemon/DaemonServiceO.java com/meri/service/daemon/a.java com/meri/service/daemon/strategy/RebootStrategy.java com/meri/service/feature/a.java com/meri/service/monitor/AccessibilityDispatcher.java com/meri/service/monitor/NtGuardService.java com/meri/service/monitor/NtMonitorService.java com/meri/service/monitor/a.java com/meri/service/monitor/b.java com/meri/service/monitor/e.java com/meri/service/monitor/f.java com/meri/service/performance/PerformanceWatchDog.java com/meri/service/performance/c.java com/meri/service/permission/TRC.java com/meri/service/permission/f.java com/meri/service/phoneinfo/NetworkInfoManager.java com/meri/service/phoneinfo/a.java com/meri/service/phoneinfo/b.java com/meri/service/phoneinfo/g.java com/meri/service/phoneinfo/j.java com/meri/service/phoneinfo/k.java com/meri/service/viruskiller/k.java com/meri/service/viruskiller/l.java com/meri/ui/guide/a.java com/meri/ui/guide/e.java com/meri/ui/guide/f.java com/meri/ui/guide/xiaomi/GuideXiaomiActivity.java com/meri/ui/guide/xiaomi/a.java com/meri/ui/notification/FixNtInhost.java com/meri/util/a.java com/tencent/halley/common/downloader_detector/DownloaderApn.java com/tencent/kingkong/BulkCursorNative.java com/tencent/kingkong/CursorToBulkCursorAdaptor.java com/tencent/kingkong/a.java com/tencent/permissionfw/permission/adapter/special/a.java com/tencent/permissionfw/reboot/interfaces/BinderBean.java com/tencent/permissionfw/reboot/interfaces/a.java com/tencent/permissionfw/sms/bean/FiltSms.java com/tencent/qqpimlite/autobackup/IShareAutoBackup.java com/tencent/qqpimlite/changenotice/IShareChangeNotice.java com/tencent/qqpimlite/commom/ServiceManager.java com/tencent/qqpimlite/commom/ShareCallbackStub.java com/tencent/qqpimlite/mergecontact/ShareContactMergeStub.java com/tencent/qqpimsecure/h5/a.java com/tencent/qqpimsecure/h5/c.java com/tencent/qqpimsecure/h5/e.java com/tencent/qqpimsecure/h5/f.java com/tencent/qqpimsecure/h5/h.java com/tencent/qqpimsecure/model/w.java com/tencent/qqpimsecure/plugin/account/bg/PiAccountUD.java com/tencent/qqpimsecure/plugin/cloud/PiCloud.java com/tencent/qqpimsecure/plugin/cloud/ud/PiCloudUD.java com/tencent/qqpimsecure/plugin/commontools/bg/c.java com/tencent/qqpimsecure/plugin/commontools/e.java com/tencent/qqpimsecure/plugin/commontools/view/ad/SingleSoftwareRecommandView.java com/tencent/qqpimsecure/plugin/commontools/view/ad/ThreeAppAdView.java com/tencent/qqpimsecure/plugin/commontools/view/page/AddCardHaveALookView.java com/tencent/qqpimsecure/plugin/commontools/view/page/DetailDialog.java com/tencent/qqpimsecure/plugin/commontools/view/page/EnableFunctionDialogView.java com/tencent/qqpimsecure/plugin/commontools/view/page/b.java com/tencent/qqpimsecure/plugin/commontools/view/page/c.java com/tencent/qqpimsecure/plugin/commontools/view/page/d.java com/tencent/qqpimsecure/plugin/commontools/view/view/CardItemLayout.java com/tencent/qqpimsecure/plugin/commontools/view/view/DesktopUpgradeDialog.java com/tencent/qqpimsecure/plugin/deepclean/bg/PiDeepCleanUD.java com/tencent/qqpimsecure/plugin/deepclean/fg/a.java com/tencent/qqpimsecure/plugin/deepclean/fg/view/a.java com/tencent/qqpimsecure/plugin/deskassistant/bg/PiDeskAssistantUD.java com/tencent/qqpimsecure/plugin/deskassistant/common/mini/MiniView.java com/tencent/qqpimsecure/plugin/deskassistant/common/mini/b.java com/tencent/qqpimsecure/plugin/deskassistant/common/mini/d.java com/tencent/qqpimsecure/plugin/deskassistant/dao/HotWordsModel.java com/tencent/qqpimsecure/plugin/deskassistant/fg/PiDeskAssistant.java com/tencent/qqpimsecure/plugin/deskassistant/fg/view/FloatGuideDialog.java com/tencent/qqpimsecure/plugin/deskassistant/fg/view/b.java com/tencent/qqpimsecure/plugin/deskassistant/task/expanded/BigWindowBottomTipsView.java com/tencent/qqpimsecure/plugin/deskassistant/task/expanded/ExpandedView.java com/tencent/qqpimsecure/plugin/deskassistant/task/expanded/TaskBarView.java com/tencent/qqpimsecure/plugin/deskassistant/task/expanded/a.java com/tencent/qqpimsecure/plugin/download/PiDownload.java com/tencent/qqpimsecure/plugin/download/view/DialogNoSdPermission.java com/tencent/qqpimsecure/plugin/download/view/DialogNoSdSpace.java com/tencent/qqpimsecure/plugin/main/PiMain.java com/tencent/qqpimsecure/plugin/main/card/b.java com/tencent/qqpimsecure/plugin/main/components/MainCardScrollView.java com/tencent/qqpimsecure/plugin/main/components/MainFooterView.java com/tencent/qqpimsecure/plugin/main/components/MsgADBar.java com/tencent/qqpimsecure/plugin/main/components/mainadcard/d.java com/tencent/qqpimsecure/plugin/main/msgcenter/MessageItemAdView.java com/tencent/qqpimsecure/plugin/main/msgcenter/b.java com/tencent/qqpimsecure/plugin/main/msgcenter/c.java com/tencent/qqpimsecure/plugin/main/page/PersonalCenterView.java com/tencent/qqpimsecure/plugin/main/page/a.java com/tencent/qqpimsecure/plugin/main/page/b.java com/tencent/qqpimsecure/plugin/main/page/c.java com/tencent/qqpimsecure/plugin/main/page/d.java com/tencent/qqpimsecure/plugin/main/page/e.java com/tencent/qqpimsecure/plugin/main/page/f.java com/tencent/qqpimsecure/plugin/main/page/k.java com/tencent/qqpimsecure/plugin/main/page/l.java com/tencent/qqpimsecure/plugin/main/qqbrowser/BrowserChooseDialog.java com/tencent/qqpimsecure/plugin/main/qqbrowser/a.java com/tencent/qqpimsecure/plugin/optimus/bg/f.java com/tencent/qqpimsecure/plugin/optimus/fg/PiOptimus.java com/tencent/qqpimsecure/plugin/passwordsystem/password/h.java com/tencent/qqpimsecure/plugin/passwordsystem/password/n.java com/tencent/qqpimsecure/plugin/passwordsystem/password/p.java com/tencent/qqpimsecure/plugin/passwordsystem/password/r.java com/tencent/qqpimsecure/plugin/passwordsystem/password/s.java com/tencent/qqpimsecure/plugin/passwordsystem/password/t.java com/tencent/qqpimsecure/plugin/passwordsystem/password/x.java com/tencent/qqpimsecure/plugin/passwordsystem/password/y.java com/tencent/qqpimsecure/plugin/processmanager/bg/PiProcessManagerUD.java com/tencent/qqpimsecure/plugin/processmanager/fg/PiProcessManager.java com/tencent/qqpimsecure/plugin/processmanager/fg/a.java com/tencent/qqpimsecure/plugin/processmanager/fg/view/b.java com/tencent/qqpimsecure/plugin/processmanager/fg/view/c.java com/tencent/qqpimsecure/plugin/processmanager/fg/view/d.java com/tencent/qqpimsecure/plugin/processmanager/fg/view/e.java com/tencent/qqpimsecure/plugin/processmanager/fg/view/f.java com/tencent/qqpimsecure/plugin/ud/softusage/PiSoftUsageUD.java com/tencent/qqpimsecure/service/InOutCallReceiver.java com/tencent/qqpimsecure/service/SupdateReceiver.java com/tencent/qqpimsecure/service/TMSLiteService.java com/tencent/qqpimsecure/service/d.java com/tencent/qqpimsecure/service/q.java com/tencent/qqpimsecure/service/x.java com/tencent/qqpimsecure/ui/activity/SplashActivity.java com/tencent/qqpimsecure/uninstallprotect/UninstallProtectActivity.java com/tencent/qqpimsecure/uninstallprotect/UninstallProtectReceiver.java com/tencent/qqpimsecure/wxapi/WXEntryActivity.java com/tencent/qqpimsecure/wxapi/WXPayEntryActivity.java com/tencent/server/back/BackEngine.java com/tencent/server/back/BackService.java com/tencent/server/back/BackTimerReceiver.java com/tencent/server/back/BootReceiver.java com/tencent/server/back/DaemonService.java com/tencent/server/back/FastBootReceiver.java com/tencent/server/back/ProductService.java com/tencent/server/back/SyncAuthService.java com/tencent/server/back/SyncTaskService.java com/tencent/server/back/a.java com/tencent/server/back/c.java com/tencent/server/back/d.java com/tencent/server/back/e.java com/tencent/server/back/f.java com/tencent/server/base/MeriService.java com/tencent/server/base/QQSecureApplication.java com/tencent/server/base/f.java com/tencent/server/base/h.java com/tencent/server/base/i.java com/tencent/server/base/j.java com/tencent/server/base/k.java com/tencent/server/base/l.java com/tencent/server/base/r.java com/tencent/server/base/v.java com/tencent/server/fore/ActiveActivity.java com/tencent/server/fore/BaseActivity.java com/tencent/server/fore/BasePiActivity.java com/tencent/server/fore/BaseSafeActivity.java com/tencent/server/fore/ComposeSmsActivity.java com/tencent/server/fore/DeskTopActivity.java com/tencent/server/fore/ForeService.java com/tencent/server/fore/QuickLoadActivity.java com/tencent/server/fore/RealtimeProtectGuideActivity.java com/tencent/server/fore/RebootActivity.java com/tencent/server/fore/SafeDownloadActivity.java com/tencent/server/fore/StandardActivity.java com/tencent/server/fore/UIActivity.java com/tencent/server/fore/b.java com/tencent/server/fore/c.java com/tencent/server/fore/e.java com/tencent/server/fore/g.java com/tencent/server/task/MutilPluginProcessService.java com/tencent/server/task/TaskPiActivity.java com/tencent/server/task/TaskService.java com/tencent/server/task/b.java com/tencent/server/task/c.java com/tencent/server/task/d.java com/tencent/server/task/e.java com/tencent/server/task/f.java com/tencent/server/task/g.java com/tencent/server/task/h.java com/tencent/server/task/i.java com/tencent/server/task/m.java com/tencent/server/task/n.java com/tencent/tmassistantsdk/a/b.java com/tencent/tmassistantsdk/a/c.java com/tencent/tmassistantsdk/a/e.java com/tencent/tmassistantsdk/a/f.java com/tencent/tmassistantsdk/downloadclient/c.java com/tencent/tmassistantsdk/downloadclient/e.java com/tencent/tmassistantsdk/downloadclient/f.java com/tencent/tmassistantsdk/downloadclient/i.java com/tencent/tmassistantsdk/downloadservice/NetworkMonitorReceiver.java com/tencent/tmassistantsdk/openSDK/BaseQQDownloaderOpenSDK.java com/tencent/tmassistantsdk/openSDK/QQDownloader/QQDownloaderInstalled.java com/tencent/tmassistantsdk/openSDK/TMQQDownloaderOpenSDK_V2.java com/tencent/tmsecurelite/accountsc/AccountSecureProxy.java com/tencent/tmsecurelite/accountsc/AccountSecureStub.java com/tencent/tmsecurelite/base/ITmsProvider.java com/tencent/tmsecurelite/base/TmsCallbackExProxy.java com/tencent/tmsecurelite/base/TmsCallbackExStub.java com/tencent/tmsecurelite/base/TmsConnectionProxy.java com/tencent/tmsecurelite/base/TmsConnectionStub.java com/tencent/tmsecurelite/commom/ServiceManager.java com/tencent/tmsecurelite/commom/TmsCallbackProxy.java com/tencent/tmsecurelite/commom/TmsCallbackStub.java com/tencent/tmsecurelite/filesafe/DecryptListenerProxy.java com/tencent/tmsecurelite/filesafe/DecryptListenerStub.java com/tencent/tmsecurelite/filesafe/DeleteListenerProxy.java com/tencent/tmsecurelite/filesafe/DeleteListenerStub.java com/tencent/tmsecurelite/filesafe/EncryptDataChangeListenerProxy.java com/tencent/tmsecurelite/filesafe/EncryptDataChangeListenerStub.java com/tencent/tmsecurelite/filesafe/EncryptListenerProxy.java com/tencent/tmsecurelite/filesafe/EncryptListenerStub.java com/tencent/tmsecurelite/filesafe/FileSafeEncryptProxy.java com/tencent/tmsecurelite/filesafe/FileSafeEncryptStub.java com/tencent/tmsecurelite/filesafe/GetEncryptFileSetListenerProxy.java com/tencent/tmsecurelite/filesafe/GetEncryptFileSetListenerStub.java com/tencent/tmsecurelite/intercept/DisturbInterceptProxy.java com/tencent/tmsecurelite/intercept/DisturbInterceptStub.java com/tencent/tmsecurelite/networkmgr/NetworkMgrServiceProxy.java com/tencent/tmsecurelite/networkmgr/NetworkMgrServiceStub.java com/tencent/tmsecurelite/optimize/MemoryListenerProxy.java com/tencent/tmsecurelite/optimize/MemoryListenerStub.java com/tencent/tmsecurelite/optimize/RubbishScanListenerExProxy.java com/tencent/tmsecurelite/optimize/RubbishScanListenerExStub.java com/tencent/tmsecurelite/optimize/RubbishScanListenerProxy.java com/tencent/tmsecurelite/optimize/RubbishScanListenerStub.java com/tencent/tmsecurelite/optimize/SystemOptimizeProxy.java com/tencent/tmsecurelite/optimize/SystemOptimizeStub.java com/tencent/tmsecurelite/password/PassWordSystemProxy.java com/tencent/tmsecurelite/password/PassWordSystemStub.java com/tencent/tmsecurelite/paysecure/PaySecureProxy.java com/tencent/tmsecurelite/paysecure/PaySecureStub.java com/tencent/tmsecurelite/root/RootServiceProxy.java com/tencent/tmsecurelite/root/RootServiceStub.java com/tencent/tmsecurelite/softwaremove/SoftMoveServiceProxy.java com/tencent/tmsecurelite/softwaremove/SoftMoveServiceStub.java com/tencent/tmsecurelite/virusscan/ScanListenerProxy.java com/tencent/tmsecurelite/virusscan/ScanListenerStub.java com/tencent/tmsecurelite/virusscan/VirusScanProxy.java com/tencent/tmsecurelite/virusscan/VirusScanStub.java com/tmsdk/bg/module/aresengine/SmsReciver.java com/tmsdk/bg/module/hook/HookSmsLocalService.java com/tmsdk/bg/module/hook/HookSmsReceiver.java meri/pluginsdk/PluginIntent.java meri/pluginsdk/a.java meri/pluginsdk/b.java meri/pluginsdk/s.java meri/pluginsdk/t.java meri/service/aresengine/model/SmsEntity.java meri/service/aresengine/sms/MessageReceiver.java meri/service/aresengine/sms/MmsTransactionService.java meri/service/aresengine/sms/MsgSendReceiver.java meri/service/aresengine/sms/b.java meri/service/aresengine/sms/c.java meri/service/aresengine/sms/d.java meri/service/aresengine/sms/e.java meri/service/aresengine/sms/f.java meri/service/usespermission/PermissionsActivity.java meri/service/usespermission/b.java meri/service/usespermission/d.java meri/util/AccessHelper.java meri/util/BaseReceiver.java oicq/wlogin_sdk/request/WtloginHelper.java tcs/aaf.java tcs/aao.java tcs/abk.java tcs/acl.java tcs/acq.java tcs/acr.java tcs/act.java tcs/acu.java tcs/acv.java tcs/acw.java tcs/acx.java tcs/acy.java tcs/acz.java tcs/adb.java tcs/adc.java tcs/add.java tcs/adg.java tcs/adh.java tcs/adw.java tcs/agi.java tcs/ago.java tcs/agq.java tcs/agt.java tcs/ahd.java tcs/ahe.java tcs/ahi.java tcs/ahj.java tcs/ahk.java tcs/ahu.java tcs/ajw.java tcs/ajy.java tcs/akf.java tcs/akj.java tcs/akn.java tcs/ako.java tcs/ali.java tcs/alo.java tcs/alq.java tcs/ant.java tcs/aos.java tcs/aot.java tcs/atb.java tcs/aub.java tcs/aur.java tcs/aus.java tcs/aut.java tcs/avc.java tcs/avk.java tcs/avr.java tcs/awf.java tcs/awk.java tcs/awt.java tcs/awu.java tcs/axu.java tcs/azp.java tcs/bdk.java tcs/bds.java tcs/bdu.java tcs/bdv.java tcs/bdw.java tcs/bdx.java tcs/bgi.java tcs/bgl.java tcs/bgq.java tcs/bgr.java tcs/bgv.java tcs/bha.java tcs/bhb.java tcs/bhm.java tcs/bhn.java tcs/bhp.java tcs/bhq.java tcs/bhr.java tcs/bhs.java tcs/bht.java tcs/bhw.java tcs/bhz.java tcs/bib.java tcs/bid.java tcs/bie.java tcs/big.java tcs/bih.java tcs/bim.java tcs/bja.java tcs/bjt.java tcs/bnx.java tcs/boh.java tcs/boi.java tcs/boj.java tcs/bok.java tcs/bom.java tcs/boq.java tcs/bor.java tcs/box.java tcs/boy.java tcs/bpb.java tcs/bpc.java tcs/bpe.java tcs/bpf.java tcs/bpg.java tcs/bpl.java tcs/bpn.java tcs/bpo.java tcs/bqs.java tcs/bqx.java tcs/bqz.java tcs/brb.java tcs/brf.java tcs/bsx.java tcs/bsy.java tcs/btf.java tcs/btu.java tcs/bul.java tcs/bvf.java tcs/bvg.java tcs/bvz.java tcs/bwo.java tcs/bws.java tcs/bwt.java tcs/bwv.java tcs/bwx.java tcs/bxv.java tcs/bxw.java tcs/bye.java tcs/byf.java tcs/byq.java tcs/byr.java tcs/bys.java tcs/byt.java tcs/byw.java tcs/byy.java tcs/bza.java tcs/bzc.java tcs/bzr.java tcs/bzs.java tcs/bzt.java tcs/bzx.java tcs/cab.java tcs/cad.java tcs/cam.java tcs/cao.java tcs/cat.java tcs/cbc.java tcs/cbf.java tcs/cbg.java tcs/cbp.java tcs/cbr.java tcs/cbs.java tcs/cbw.java tcs/ccb.java tcs/ccc.java tcs/jl.java tcs/la.java tcs/lo.java tcs/nd.java tcs/ng.java tcs/oo.java tcs/pg.java tcs/pl.java tcs/qz.java tcs/rk.java tcs/rl.java tcs/sf.java tcs/sk.java tcs/sn.java tcs/tg.java tcs/tu.java tcs/tz.java tcs/ub.java tcs/ul.java tcs/uz.java tcs/vl.java tcs/vp.java tcs/vq.java tcs/vs.java tcs/vt.java tcs/vw.java tcs/vx.java tcs/vy.java tcs/vz.java tcs/wc.java tcs/wl.java tcs/wn.java tcs/wu.java tcs/wz.java tcs/xe.java tcs/xg.java tcs/xn.java tcs/xr.java tcs/xx.java tcs/yc.java tcs/yn.java tcs/yq.java tcs/yr.java tcs/yw.java tcs/yy.java tcs/za.java tcs/zv.java tcs/zw.java tcs/zy.java tmsdk/common/BaseSafeIntentService.java tmsdk/common/BaseTMSReceiver.java tmsdk/common/SafeIntent.java tmsdk/common/TMSDKContext.java tmsdk/common/TMSService.java tmsdk/common/c.java tmsdk/common/e.java tmsdk/common/internal/utils/ab.java tmsdk/common/internal/utils/o.java tmsdk/common/internal/utils/w.java tmsdk/common/module/sdknetpool/sharknetwork/SharkNetworkReceiver.java tmsdk/common/module/sdknetpool/tcpnetwork/a.java tmsdk/common/module/sdknetpool/tcpnetwork/c.java tmsdk/common/module/sdknetpool/tcpnetwork/d.java uilib/components/DesktopBaseView.java uilib/frame/a.java
组件-> ContentProvider	显示文件 com/anguanjia/security/fore/ForePiContentProvider.java com/meri/service/feature/FeatureTunnelDB.java com/meri/service/rqd/m.java com/tencent/qqpimsecure/dao/DummyProvider.java com/tencent/qqpimsecure/dao/p.java com/tencent/qqpimsecure/plugin/passwordsystem/password/l.java com/tencent/qqpimsecure/storage/BaseDbProviderWithMonitor.java com/tencent/qqpimsecure/storage/SpProvider.java com/tencent/qqpimsecure/storage/a.java com/tencent/qqpimsecure/storage/b.java com/tencent/qqpimsecure/storage/f.java com/tencent/qqpimsecure/storage/i.java com/tencent/qqpimsecure/storage/q.java com/tencent/qqpimsecure/storage/x.java com/tencent/server/back/BackPiContentProvider.java com/tencent/server/back/SyncProvider.java com/tencent/server/back/SyncTaskService.java com/tencent/server/base/BasePiContentProvider.java com/tencent/server/base/ConfigProvider.java com/tencent/server/base/NewPiInfoDB.java meri/pluginsdk/PiDBProvider.java meri/pluginsdk/PiEncryptDBProvider.java meri/pluginsdk/o.java oicq/wlogin_sdk/request/WloginProvider.java tcs/ado.java tcs/aha.java tcs/aie.java tcs/amu.java tcs/auo.java tcs/aur.java tcs/ayu.java tcs/ayz.java tcs/bhp.java tcs/bhr.java tcs/bri.java tcs/brk.java tcs/brr.java tcs/bta.java tcs/bxp.java tcs/bze.java tcs/cbm.java tcs/cbn.java tcs/xm.java tcs/xq.java
一般功能-> Android通知	显示文件 com/anguanjia/security/plugin/ctsecurity/model/clientupgrade/a.java com/meri/ui/guide/xiaomi/a.java com/tencent/server/base/v.java tcs/bhr.java
网络通信-> HTTP建立连接	显示文件 com/king/uranus/cp.java com/meri/service/daemon/a.java com/tencent/apkupdate/logic/protocol/a.java com/tencent/qqpimsecure/h5/f.java com/tencent/qqpimsecure/plugin/main/card/h.java com/tencent/tmassistantsdk/d/a.java oicq/wlogin_sdk/request/h.java oicq/wlogin_sdk/request/i.java oicq/wlogin_sdk/request/j.java tcs/agf.java tcs/ajt.java tcs/aka.java tcs/ako.java tcs/avc.java tcs/bcs.java tcs/beg.java tcs/bjl.java tcs/blu.java tcs/bmj.java tcs/bot.java tcs/boy.java tcs/byg.java tcs/byn.java tcs/byw.java tcs/uh.java tmsdk/common/internal/utils/k.java
一般功能-> 加载so文件	显示文件 com/anguanjia/framework/utils/SystemUtil.java com/meri/service/daemon/strategy/RebootStrategy.java com/meri/service/viruskiller/ApkParser.java com/tencent/kingkong/database/SQLiteDatabase.java com/tencent/nvwa/jni/HookBridge.java com/tencent/qqpimsecure/plugin/optimus/bg/Optimus.java com/tencent/tcuser/util/Encode.java mars/tvcontroler/Native/TVControler.java meri/util/UUGen.java oicq/wlogin_sdk/tools/RSACrypt.java oicq/wlogin_sdk/tools/util.java tmsdk/common/internal/utils/p.java tmsdk/common/module/bumblebee/Bumblebee.java tmsdk/common/tcc/DeepCleanSoLoader.java tmsdk/common/tcc/SdcardScannerFactory.java
一般功能-> 文件操作	显示文件 com/anguanjia/framework/network/PretreatmentUtil.java com/anguanjia/framework/network/RequestUtil.java com/anguanjia/framework/userhabit/UHRecorderDefault.java com/anguanjia/framework/utils/FileUtil.java com/anguanjia/framework/utils/SystemTool.java com/anguanjia/framework/utils/SystemUtil.java com/anguanjia/security/plugin/ctsecurity/model/clientupgrade/a.java com/king/uranus/ac.java com/king/uranus/ae.java com/king/uranus/ag.java com/king/uranus/ah.java com/king/uranus/ai.java com/king/uranus/aj.java com/king/uranus/aq.java com/king/uranus/ar.java com/king/uranus/bm.java com/king/uranus/bn.java com/king/uranus/bq.java com/king/uranus/bt.java com/king/uranus/bu.java com/king/uranus/by.java com/king/uranus/cd.java com/king/uranus/ce.java com/king/uranus/cn.java com/king/uranus/cp.java com/king/uranus/cy.java com/king/uranus/da.java com/king/uranus/dm.java com/king/uranus/ds.java com/king/uranus/dx.java com/king/uranus/ef.java com/king/uranus/eh.java com/king/uranus/ej.java com/king/uranus/em.java com/king/uranus/eu.java com/king/uranus/fe.java com/king/uranus/ff.java com/king/uranus/fh.java com/king/uranus/fr.java com/king/uranus/fs.java com/king/uranus/ft.java com/king/uranus/fu.java com/king/uranus/fv.java com/king/uranus/fw.java com/king/uranus/fx.java com/king/uranus/fz.java com/king/uranus/i.java com/king/uranus/l.java com/king/uranus/p.java com/king/uranus/q.java com/king/uranus/r.java com/king/uranus/w.java com/meri/service/daemon/a.java com/meri/service/daemon/c.java com/meri/service/daemon/d.java com/meri/service/daemon/strategy/RebootStrategy.java com/meri/service/feature/a.java com/meri/service/monitor/d.java com/meri/service/monitor/e.java com/meri/service/performance/PerformanceWatchDog.java com/meri/service/performance/a.java com/meri/service/performance/b.java com/meri/service/permission/a.java com/meri/service/permission/c.java com/meri/service/permission/i.java com/meri/service/permission/j.java com/meri/service/phoneinfo/b.java com/meri/service/phoneinfo/e.java com/meri/service/usefulnumber/UsefulNumberEntity.java com/meri/service/usefulnumber/a.java com/meri/service/viruskiller/d.java com/meri/service/viruskiller/f.java com/meri/service/viruskiller/g.java com/meri/service/viruskiller/j.java com/meri/service/viruskiller/k.java com/meri/service/viruskiller/l.java com/meri/util/d.java com/meri/util/e.java com/tencent/apkupdate/logic/protocol/a.java com/tencent/apkupdate/logic/protocol/b.java com/tencent/apkupdate/logic/protocol/jce/JceCmd.java com/tencent/halley/common/downloader_detector/c.java com/tencent/kingkong/DatabaseUtils.java com/tencent/kingkong/DefaultDatabaseErrorHandler.java com/tencent/kingkong/FileUtils.java com/tencent/kingkong/ParcelFileDescriptor.java com/tencent/kingkong/database/SQLiteClosable.java com/tencent/kingkong/database/SQLiteConnectionPool.java com/tencent/kingkong/database/SQLiteDatabase.java com/tencent/kingkong/database/SQLiteOpenHelper.java com/tencent/kingkong/support/Context.java com/tencent/mm/dbsupport/newcursor/DBDumpUtil.java com/tencent/permissionfw/permission/adapter/special/a.java com/tencent/permissionfw/permission/f.java com/tencent/qqpimsecure/dao/l.java com/tencent/qqpimsecure/dao/r.java com/tencent/qqpimsecure/h5/e.java com/tencent/qqpimsecure/h5/f.java com/tencent/qqpimsecure/model/AppDownloadTask.java com/tencent/qqpimsecure/model/a.java com/tencent/qqpimsecure/model/b.java com/tencent/qqpimsecure/model/q.java com/tencent/qqpimsecure/model/u.java com/tencent/qqpimsecure/model/x.java com/tencent/qqpimsecure/plugin/cloud/PiCloud.java com/tencent/qqpimsecure/plugin/commontools/a.java com/tencent/qqpimsecure/plugin/deepclean/bg/a.java com/tencent/qqpimsecure/plugin/deepclean/fg/remainapk/a.java com/tencent/qqpimsecure/plugin/deskassistant/common/mini/d.java com/tencent/qqpimsecure/plugin/deskassistant/common/window/coloregg/b.java com/tencent/qqpimsecure/plugin/main/card/h.java com/tencent/qqpimsecure/plugin/main/page/n.java com/tencent/qqpimsecure/plugin/passwordsystem/password/c.java com/tencent/qqpimsecure/plugin/passwordsystem/password/k.java com/tencent/qqpimsecure/service/a.java com/tencent/qqpimsecure/service/b.java com/tencent/qqpimsecure/service/d.java com/tencent/qqpimsecure/service/f.java com/tencent/qqpimsecure/service/i.java com/tencent/qqpimsecure/service/t.java com/tencent/qqpimsecure/service/x.java com/tencent/qqpimsecure/storage/SpProvider.java com/tencent/qqpimsecure/storage/r.java com/tencent/qqpimsecure/storage/s.java com/tencent/qqpimsecure/storage/t.java com/tencent/qqpimsecure/storage/v.java com/tencent/qqpimsecure/storage/w.java com/tencent/qqpimsecure/storage/x.java com/tencent/qqpimsecure/uninstallprotect/b.java com/tencent/server/back/BackEngine.java com/tencent/server/base/BasePiContentProvider.java com/tencent/server/base/QQSecureApplication.java com/tencent/server/base/d.java com/tencent/server/base/f.java com/tencent/server/base/m.java com/tencent/server/base/q.java com/tencent/server/base/r.java com/tencent/server/base/s.java com/tencent/server/base/u.java com/tencent/server/base/v.java com/tencent/server/base/x.java com/tencent/server/fore/c.java com/tencent/server/fore/e.java com/tencent/server/task/MutilPluginProcessService.java com/tencent/server/task/e.java com/tencent/server/task/g.java com/tencent/server/task/j.java com/tencent/tcuser/util/a.java com/tencent/tmassistantsdk/b/a.java com/tencent/tmassistantsdk/b/c.java com/tencent/tmassistantsdk/f/a.java com/tencent/tmassistantsdk/f/e.java com/tencent/tmassistantsdk/f/f.java com/tencent/tmassistantsdk/openSDK/param/jce/IPCCmd.java meri/pluginsdk/i.java meri/service/aresengine/model/MmsContentConfigHeader.java meri/service/aresengine/model/MmsPart.java meri/service/aresengine/sms/f.java meri/service/userfulnum/UsefulNumberEntity.java meri/service/usespermission/b.java meri/service/viruskiller/entity/QScanResultEntity.java oicq/wlogin_sdk/oidb/NameUinInfo.java oicq/wlogin_sdk/request/UinInfo.java oicq/wlogin_sdk/request/WFastLoginInfo.java oicq/wlogin_sdk/request/WloginAllSigInfo.java oicq/wlogin_sdk/request/WloginLastLoginInfo.java oicq/wlogin_sdk/request/d.java oicq/wlogin_sdk/request/i.java oicq/wlogin_sdk/request/j.java oicq/wlogin_sdk/sharemem/WloginLoginInfo.java oicq/wlogin_sdk/sharemem/WloginSigInfo.java oicq/wlogin_sdk/sharemem/WloginSimpleInfo.java oicq/wlogin_sdk/tools/a.java oicq/wlogin_sdk/tools/e.java oicq/wlogin_sdk/tools/util.java tcs/acb.java tcs/adi.java tcs/adj.java tcs/adk.java tcs/adm.java tcs/adu.java tcs/ae.java tcs/afo.java tcs/afp.java tcs/afs.java tcs/afv.java tcs/agf.java tcs/agh.java tcs/ahe.java tcs/ahk.java tcs/ahv.java tcs/aie.java tcs/ain.java tcs/aip.java tcs/aiy.java tcs/ajg.java tcs/ajj.java tcs/ajk.java tcs/ajm.java tcs/ajp.java tcs/ajq.java tcs/ajs.java tcs/ajt.java tcs/ajw.java tcs/ajx.java tcs/ajy.java tcs/aka.java tcs/akc.java tcs/akk.java tcs/akn.java tcs/ako.java tcs/alh.java tcs/alj.java tcs/alu.java tcs/alv.java tcs/amr.java tcs/amv.java tcs/anx.java tcs/any.java tcs/aof.java tcs/aos.java tcs/ap.java tcs/apj.java tcs/aru.java tcs/arw.java tcs/atf.java tcs/aug.java tcs/auh.java tcs/aui.java tcs/auj.java tcs/auk.java tcs/aum.java tcs/aun.java tcs/ay.java tcs/az.java tcs/aza.java tcs/azc.java tcs/azw.java tcs/ba.java tcs/bc.java tcs/bca.java tcs/bcb.java tcs/bch.java tcs/bcs.java tcs/bct.java tcs/bd.java tcs/bdc.java tcs/bdd.java tcs/bde.java tcs/bdi.java tcs/bdj.java tcs/bdk.java tcs/bdp.java tcs/bdx.java tcs/be.java tcs/bec.java tcs/bed.java tcs/bee.java tcs/beg.java tcs/ben.java tcs/bet.java tcs/bfc.java tcs/bfd.java tcs/bfg.java tcs/bfh.java tcs/bfi.java tcs/bfj.java tcs/bfm.java tcs/bfo.java tcs/bfp.java tcs/bfq.java tcs/bfr.java tcs/bfs.java tcs/bft.java tcs/bgd.java tcs/bgi.java tcs/bgy.java tcs/bh.java tcs/bhm.java tcs/bhy.java tcs/bhz.java tcs/bib.java tcs/bik.java tcs/bim.java tcs/bje.java tcs/bjg.java tcs/bjh.java tcs/bjj.java tcs/bjk.java tcs/bjm.java tcs/bjn.java tcs/bjo.java tcs/bjt.java tcs/bkq.java tcs/bkr.java tcs/bkt.java tcs/bku.java tcs/bkv.java tcs/bl.java tcs/blg.java tcs/blj.java tcs/blu.java tcs/bm.java tcs/bmc.java tcs/bme.java tcs/bmi.java tcs/bmj.java tcs/bn.java tcs/bnb.java tcs/bnt.java tcs/bnv.java tcs/bnw.java tcs/bnx.java tcs/bny.java tcs/bnz.java tcs/boa.java tcs/bob.java tcs/boc.java tcs/boh.java tcs/bot.java tcs/boy.java tcs/bpw.java tcs/bqb.java tcs/bqn.java tcs/bqq.java tcs/bqs.java tcs/bra.java tcs/brd.java tcs/bsk.java tcs/bsq.java tcs/bsr.java tcs/bss.java tcs/bsu.java tcs/bsv.java tcs/btg.java tcs/bth.java tcs/bts.java tcs/btu.java tcs/bur.java tcs/buu.java tcs/buw.java tcs/bvb.java tcs/bvf.java tcs/bwd.java tcs/bww.java tcs/bxb.java tcs/bxc.java tcs/bxi.java tcs/bxp.java tcs/bxw.java tcs/byg.java tcs/byn.java tcs/bys.java tcs/byw.java tcs/byy.java tcs/bzz.java tcs/caa.java tcs/cab.java tcs/cad.java tcs/cae.java tcs/cao.java tcs/cba.java tcs/ccp.java tcs/ccr.java tcs/ccs.java tcs/ei.java tcs/go.java tcs/gs.java tcs/gt.java tcs/gu.java tcs/gz.java tcs/ki.java tcs/kj.java tcs/kk.java tcs/kr.java tcs/kt.java tcs/lz.java tcs/mf.java tcs/mg.java tcs/mh.java tcs/mi.java tcs/nf.java tcs/nk.java tcs/nl.java tcs/oy.java tcs/pc.java tcs/pw.java tcs/qt.java tcs/qv.java tcs/qw.java tcs/qx.java tcs/qy.java tcs/rh.java tcs/rk.java tcs/sj.java tcs/sk.java tcs/sm.java tcs/sn.java tcs/ss.java tcs/th.java tcs/tn.java tcs/to.java tcs/tp.java tcs/tr.java tcs/ts.java tcs/tv.java tcs/tw.java tcs/tx.java tcs/ty.java tcs/ua.java tcs/ub.java tcs/uf.java tcs/ug.java tcs/uh.java tcs/ui.java tcs/wz.java tcs/xk.java tcs/xx.java tcs/yx.java tcs/zb.java tmsdk/common/NumMarker.java tmsdk/common/SafeIntent.java tmsdk/common/TMSDKContext.java tmsdk/common/YellowPages.java tmsdk/common/a.java tmsdk/common/internal/utils/f.java tmsdk/common/internal/utils/h.java tmsdk/common/internal/utils/i.java tmsdk/common/internal/utils/k.java tmsdk/common/internal/utils/l.java tmsdk/common/internal/utils/m.java tmsdk/common/internal/utils/p.java tmsdk/common/internal/utils/s.java tmsdk/common/internal/utils/z.java tmsdk/common/module/bumblebee/Bumblebee.java tmsdk/common/module/sdknetpool/tcpnetwork/j.java tmsdk/common/module/sdknetpool/tcpnetwork/n.java tmsdk/common/module/update/g.java tmsdk/common/tcc/QFile.java
进程操作-> 获取进程pid	显示文件 com/king/uranus/dm.java com/meri/service/daemon/a.java com/meri/service/daemon/strategy/RebootStrategy.java com/meri/service/monitor/NtGuardService.java com/meri/service/permission/c.java com/meri/service/permission/f.java com/meri/service/rqd/h.java com/meri/service/rqd/k.java com/meri/util/c.java com/tencent/kingkong/CursorWindow.java com/tencent/kingkong/support/Log.java com/tencent/server/back/BackEngine.java com/tencent/server/back/a.java com/tencent/server/base/d.java com/tencent/server/base/v.java com/tencent/server/fore/ActiveActivity.java com/tencent/server/fore/RebootActivity.java com/tencent/server/fore/c.java com/tencent/server/task/TaskService.java tcs/adi.java tcs/adj.java tcs/agh.java tcs/agq.java tcs/aip.java tcs/aja.java tcs/ajp.java tcs/avq.java tcs/bgv.java tcs/tn.java tcs/zz.java
组件-> 启动 Activity	显示文件 com/anguanjia/security/plugin/ctsecurity/fg/clientupgrade/view/CUDialogView.java com/anguanjia/security/plugin/ctsecurity/model/clientupgrade/a.java com/meri/service/monitor/AccessibilityDispatcher.java com/meri/service/phoneinfo/b.java com/meri/ui/guide/a.java com/meri/ui/guide/e.java com/meri/ui/guide/xiaomi/GuideXiaomiActivity.java com/meri/util/a.java com/tencent/qqpimsecure/h5/f.java com/tencent/qqpimsecure/plugin/deskassistant/dao/HotWordsModel.java com/tencent/qqpimsecure/plugin/main/PiMain.java com/tencent/qqpimsecure/plugin/main/components/mainadcard/d.java com/tencent/qqpimsecure/plugin/main/page/b.java com/tencent/qqpimsecure/plugin/main/page/f.java com/tencent/qqpimsecure/plugin/main/qqbrowser/a.java com/tencent/qqpimsecure/plugin/passwordsystem/password/x.java com/tencent/qqpimsecure/plugin/processmanager/bg/PiProcessManagerUD.java com/tencent/qqpimsecure/uninstallprotect/UninstallProtectReceiver.java com/tencent/server/back/BackEngine.java com/tencent/server/fore/BaseActivity.java com/tencent/server/fore/QuickLoadActivity.java com/tencent/server/fore/RebootActivity.java com/tencent/server/fore/c.java com/tencent/server/fore/e.java com/tencent/server/fore/g.java com/tencent/server/task/g.java com/tencent/tmassistantsdk/openSDK/BaseQQDownloaderOpenSDK.java meri/pluginsdk/s.java meri/service/usespermission/PermissionsActivity.java meri/service/usespermission/d.java meri/util/AccessHelper.java tcs/acl.java tcs/acq.java tcs/acr.java tcs/act.java tcs/acw.java tcs/acx.java tcs/acz.java tcs/adc.java tcs/adg.java tcs/adh.java tcs/agt.java tcs/ahe.java tcs/ahj.java tcs/ahk.java tcs/ajy.java tcs/akf.java tcs/akn.java tcs/ako.java tcs/ali.java tcs/alo.java tcs/alq.java tcs/aos.java tcs/bdu.java tcs/bdv.java tcs/bdx.java tcs/bgv.java tcs/boh.java tcs/bqs.java tcs/bqz.java tcs/bvz.java tcs/bws.java tcs/bwt.java tcs/bwv.java tcs/cbg.java tcs/jl.java tcs/oo.java tcs/rk.java tcs/rl.java tcs/sk.java tcs/tz.java tcs/ub.java tcs/xe.java tcs/za.java tcs/zv.java
设备指纹-> 查看本机IMSI	显示文件 com/king/uranus/ga.java oicq/wlogin_sdk/tools/util.java tcs/ack.java tcs/acl.java tcs/acq.java tcs/act.java tcs/acw.java tcs/acx.java tcs/acz.java tcs/adc.java tcs/ade.java tcs/adh.java tcs/agt.java tcs/aht.java tcs/alk.java tcs/aub.java tcs/bde.java tcs/beg.java tcs/bjn.java tcs/wy.java tcs/yy.java
隐私数据-> 发送SMS短信息	显示文件 tcs/acq.java tcs/acr.java tcs/act.java tcs/acu.java tcs/adc.java tcs/adg.java tcs/akf.java tcs/aur.java tcs/wu.java tcs/yc.java tcs/yy.java
网络通信-> UDP数据包	mars/tvcontroler/Native/b.java
一般功能-> PowerManager操作	显示文件 com/meri/service/viruskiller/j.java com/tencent/qqpimsecure/plugin/commontools/bg/c.java tcs/amz.java tcs/avr.java tcs/cbq.java
组件-> 发送广播	显示文件 com/meri/service/permission/f.java com/meri/service/viruskiller/l.java com/meri/util/a.java com/tencent/permissionfw/permission/adapter/special/a.java com/tencent/qqpimsecure/h5/a.java com/tencent/qqpimsecure/h5/c.java com/tencent/qqpimsecure/h5/e.java com/tencent/qqpimsecure/h5/f.java com/tencent/qqpimsecure/h5/h.java com/tencent/qqpimsecure/model/w.java com/tencent/qqpimsecure/plugin/account/bg/PiAccountUD.java com/tencent/qqpimsecure/plugin/cloud/ud/PiCloudUD.java com/tencent/qqpimsecure/wxapi/WXEntryActivity.java com/tencent/server/base/f.java com/tencent/server/fore/g.java com/tencent/server/task/f.java com/tencent/server/task/h.java com/tencent/server/task/m.java tcs/acx.java tcs/acy.java tcs/acz.java tcs/agi.java tcs/ago.java tcs/akj.java tcs/akn.java tcs/bgl.java tcs/bgq.java tcs/bhm.java tcs/ccc.java tcs/xe.java tcs/xx.java tcs/zw.java
命令执行-> getRuntime.exec()	显示文件 com/king/uranus/l.java com/meri/service/performance/PerformanceWatchDog.java com/tencent/permissionfw/permission/f.java com/tencent/qqpimsecure/service/d.java com/tencent/server/fore/g.java tcs/akn.java tcs/bdk.java tcs/bet.java tcs/bfc.java tcs/bfm.java tcs/bim.java tcs/bjt.java tcs/bkr.java tcs/blj.java tcs/sm.java tmsdk/common/internal/utils/f.java
隐私数据-> 获取已安装的应用程序	显示文件 com/meri/service/phoneinfo/a.java com/meri/service/phoneinfo/b.java com/meri/service/phoneinfo/e.java com/meri/service/viruskiller/j.java com/meri/service/viruskiller/o.java com/tencent/qqpimsecure/plugin/main/qqbrowser/BrowserChooseDialog.java com/tencent/qqpimsecure/plugin/main/qqbrowser/a.java com/tencent/qqpimsecure/service/d.java com/tencent/server/task/g.java tcs/ahe.java tcs/akj.java tcs/akn.java tcs/aos.java tcs/btt.java tcs/sk.java
一般功能-> 查看\修改Android系统属性	显示文件 com/meri/service/performance/a.java com/meri/util/b.java com/tencent/kingkong/database/SQLiteGlobal.java tcs/ada.java tcs/ahd.java tcs/ub.java tcs/wj.java tcs/wm.java
一般功能-> 获取活动网路信息	显示文件 com/king/uranus/cr.java com/meri/service/netsetting/b.java com/meri/service/phoneinfo/NetworkInfoManager.java com/tencent/halley/common/downloader_detector/DownloaderApn.java com/tencent/tmassistantsdk/downloadservice/a.java oicq/wlogin_sdk/tools/util.java tcs/aos.java tcs/bde.java tcs/bgl.java tcs/bjl.java tcs/bjn.java tcs/bkp.java tcs/bot.java tcs/bxw.java tcs/tz.java
加密解密-> 信息摘要算法	显示文件 com/king/uranus/cg.java com/tencent/qqpimsecure/plugin/main/card/b.java com/tencent/qqpimsecure/plugin/main/card/h.java com/tencent/qqpimsecure/plugin/main/components/mainadcard/d.java tcs/abf.java tcs/ako.java tcs/amr.java tcs/bdd.java tcs/bdg.java tcs/bdj.java tcs/bee.java tcs/bfc.java tcs/bfg.java tcs/bjo.java tcs/bjt.java tcs/bnv.java tcs/bvz.java tmsdk/common/internal/utils/i.java tmsdk/common/internal/utils/q.java
设备指纹-> getSimOperator	显示文件 oicq/wlogin_sdk/tools/util.java tcs/act.java tcs/adc.java tcs/ade.java tcs/ajy.java tcs/ata.java tcs/aub.java tcs/wq.java
网络通信-> Volley Connection	显示文件 com/anguanjia/framework/network/RequestManager.java com/anguanjia/framework/network/SCRequest.java com/anguanjia/framework/utils/SslUtileExt.java com/anguanjia/security/plugin/ctsecurity/bg/PiCtSecurityUD.java com/anguanjia/security/plugin/ctsecurity/fg/PiCtSecurity.java tcs/bdt.java
DEX-> 动态加载	显示文件 com/meri/service/permission/j.java com/tencent/server/base/f.java com/tencent/server/task/MutilPluginProcessService.java com/tencent/server/task/j.java meri/pluginsdk/q.java tcs/axf.java tcs/bnu.java tcs/bnz.java
DEX-> 加载和操作Dex文件	tcs/bnu.java
组件-> 启动 Service	显示文件 com/meri/service/daemon/strategy/RebootStrategy.java com/meri/service/viruskiller/k.java com/meri/util/a.java com/tencent/qqpimsecure/plugin/main/card/b.java com/tencent/qqpimsecure/plugin/passwordsystem/password/h.java com/tencent/qqpimsecure/plugin/passwordsystem/password/n.java com/tencent/qqpimsecure/service/TMSLiteService.java com/tencent/server/back/BackEngine.java com/tencent/server/back/BackService.java com/tencent/server/back/SyncAuthService.java com/tencent/server/back/SyncTaskService.java com/tencent/server/back/c.java com/tencent/server/back/d.java com/tencent/server/back/e.java com/tencent/server/back/f.java com/tencent/server/base/QQSecureApplication.java com/tencent/server/base/f.java com/tencent/server/base/l.java com/tencent/server/base/v.java com/tencent/server/fore/ForeService.java com/tencent/server/fore/c.java com/tencent/server/task/n.java com/tencent/tmassistantsdk/downloadclient/f.java meri/pluginsdk/s.java meri/pluginsdk/t.java tcs/aao.java tcs/bpo.java tcs/byq.java tcs/cbp.java tcs/xg.java tmsdk/common/TMSDKContext.java
加密解密-> Crypto加解密组件	显示文件 com/king/uranus/ch.java oicq/wlogin_sdk/request/d.java oicq/wlogin_sdk/tools/util.java tcs/abe.java tcs/ago.java tcs/bdd.java tcs/bdj.java tcs/bec.java tcs/bfx.java tcs/bjt.java
网络通信-> TCP套接字	显示文件 com/king/uranus/cp.java oicq/wlogin_sdk/request/j.java oicq/wlogin_sdk/request/s.java oicq/wlogin_sdk/request/v.java tcs/agf.java tcs/beg.java tcs/bmf.java tcs/bmj.java tcs/xx.java tmsdk/common/internal/utils/k.java tmsdk/common/internal/utils/l.java tmsdk/common/module/sdknetpool/tcpnetwork/n.java
进程操作-> 杀死进程	显示文件 com/meri/service/daemon/a.java com/meri/service/daemon/strategy/RebootStrategy.java com/tencent/qqpimsecure/uninstallprotect/UninstallProtectReceiver.java com/tencent/server/fore/b.java com/tencent/server/task/MutilPluginProcessService.java com/tencent/server/task/TaskService.java tcs/bhz.java tcs/cbb.java tcs/sm.java
进程操作-> 获取运行的进程\服务	显示文件 com/anguanjia/security/plugin/ctsecurity/model/clientupgrade/a.java com/king/uranus/bz.java com/king/uranus/di.java com/king/uranus/dm.java com/meri/service/monitor/NtGuardService.java com/meri/service/performance/PerformanceWatchDog.java com/meri/service/rqd/k.java com/tencent/qqpimsecure/service/d.java com/tencent/server/fore/b.java com/tencent/server/task/l.java tcs/ada.java tcs/adi.java tcs/aik.java tcs/bfc.java tcs/bhy.java tcs/bhz.java tcs/bib.java tcs/bim.java tcs/bps.java tcs/sm.java tmsdk/common/internal/utils/aa.java
设备指纹-> getAllCellInfo	tcs/aht.java
设备指纹-> 获取蜂窝位置信息	tcs/aht.java
设备指纹-> 查看本机SIM卡序列号	com/king/uranus/ga.java tcs/aht.java
设备指纹-> 查看本机号码	tcs/aht.java tcs/beg.java
一般功能-> 获取WiFi相关信息	显示文件 com/anguanjia/framework/utils/SystemUtil.java com/king/uranus/ga.java com/meri/service/daemon/a.java com/meri/service/netsetting/b.java com/tencent/halley/common/downloader_detector/DownloaderApn.java com/tencent/halley/common/downloader_detector/c.java oicq/wlogin_sdk/tools/util.java tcs/bde.java tcs/bjn.java tcs/ub.java tcs/uh.java
网络通信-> HTTP请求、连接和会话	显示文件 com/tencent/apkupdate/logic/protocol/a.java tcs/bjl.java tcs/blu.java tmsdk/common/internal/utils/j.java tmsdk/common/internal/utils/l.java
网络通信-> SSL证书处理	tcs/bjl.java
网络通信-> DefaultHttpClient Connection	显示文件 com/tencent/server/task/e.java tcs/ajt.java tcs/bdv.java tcs/bjl.java tcs/blu.java tmsdk/common/internal/utils/j.java
加密解密-> Base64 解密	tcs/abe.java tcs/bjt.java
一般功能-> 设置手机铃声，媒体音量	meri/service/aresengine/i.java
辅助功能accessibility相关	com/meri/service/monitor/AccessibilityDispatcher.java
加密解密-> Base64 加密	tcs/bjy.java
设备指纹-> 查看运营商信息	oicq/wlogin_sdk/tools/util.java
一般功能-> 查询数据库(短信、联系人、通话记录、浏览器历史等)	显示文件 com/tencent/qqpimsecure/storage/b.java com/tencent/qqpimsecure/storage/s.java oicq/wlogin_sdk/tools/util.java tcs/act.java tcs/akj.java tcs/auv.java
网络通信-> WebView JavaScript接口	显示文件 com/tencent/qqpimsecure/h5/f.java com/tencent/qqpimsecure/h5/g.java com/tencent/server/task/e.java tcs/bdv.java
网络通信-> WebView POST请求	com/tencent/server/task/e.java
网络通信-> WebView 相关	com/tencent/qqpimsecure/h5/f.java com/tencent/server/task/e.java tcs/bdv.java
隐私数据-> 屏幕截图，截取自己应用内部界面	com/tencent/qqpimsecure/h5/f.java
隐私数据-> 读写通讯录	meri/service/aresengine/u.java tcs/auo.java tcs/og.java
隐私数据-> 获取通话记录	tcs/bik.java
网络通信-> 蓝牙连接	显示文件 com/anguanjia/framework/utils/SystemUtil.java com/king/uranus/ar.java com/meri/service/netsetting/b.java tcs/awh.java tcs/blj.java
隐私数据-> 屏幕截图，截取自己应用内部界面	显示文件 com/tencent/qqpimsecure/plugin/deskassistant/task/expanded/CircleWaterView.java com/tencent/qqpimsecure/plugin/deskassistant/task/expanded/b.java com/tencent/qqpimsecure/plugin/deskassistant/task/strongrocket/view/AnimateRingView.java com/tencent/qqpimsecure/plugin/main/msgcenter/QBannerView.java uilib/components/AnimateRingView.java
隐私数据-> 用户账户管理	com/meri/service/daemon/a.java tcs/ahq.java
隐私数据-> 读取短信	meri/service/aresengine/sms/e.java
一般功能-> 传感器相关操作	tcs/blj.java

安全漏洞检测

高危

5

警告

7

信息

1

安全

1

屏蔽

0

序号	问题	等级	参考标准	文件位置	操作
1	文件可能包含硬编码的敏感信息，如用户名、密码、密钥等	警告	CWE: CWE-312: 明文存储敏感信息 OWASP Top 10: M9: Reverse Engineering OWASP MASVS: MSTG-STORAGE-14	升级会员：解锁高级权限	Suppress the rule android_hardcoded in com.anguanjia.security Suppress the rule android_hardcoded in com.anguanjia.security only from these files
2	应用程序记录日志信息,不得记录敏感信息	信息	CWE: CWE-532: 通过日志文件的信息暴露 OWASP MASVS: MSTG-STORAGE-3	升级会员：解锁高级权限	Suppress the rule android_logging in com.anguanjia.security Suppress the rule android_logging in com.anguanjia.security only from these files
3	应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据	警告	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	升级会员：解锁高级权限	Suppress the rule android_read_write_external in com.anguanjia.security Suppress the rule android_read_write_external in com.anguanjia.security only from these files
4	应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库	警告	CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当（'SQL 注入'） OWASP Top 10: M7: Client Code Quality	升级会员：解锁高级权限	Suppress the rule android_sql_raw_query in com.anguanjia.security Suppress the rule android_sql_raw_query in com.anguanjia.security only from these files
5	IP地址泄露	警告	CWE: CWE-200: 信息泄露 OWASP MASVS: MSTG-CODE-2	升级会员：解锁高级权限	Suppress the rule android_ip_disclosure in com.anguanjia.security Suppress the rule android_ip_disclosure in com.anguanjia.security only from these files
6	应用程序使用不安全的随机数生成器	警告	CWE: CWE-330: 使用不充分的随机数 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-6	升级会员：解锁高级权限	Suppress the rule android_insecure_random in com.anguanjia.security Suppress the rule android_insecure_random in com.anguanjia.security only from these files
7	此应用程序可能具有Root检测功能	安全	OWASP MASVS: MSTG-RESILIENCE-1	升级会员：解锁高级权限	Suppress the rule android_detect_root in com.anguanjia.security Suppress the rule android_detect_root in com.anguanjia.security only from these files
8	MD5是已知存在哈希冲突的弱哈希	警告	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4	升级会员：解锁高级权限	Suppress the rule android_md5 in com.anguanjia.security Suppress the rule android_md5 in com.anguanjia.security only from these files
9	应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。	高危	CWE: CWE-649: 依赖于混淆或加密安全相关输入而不进行完整性检查 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-3	升级会员：解锁高级权限	Suppress the rule cbc_padding_oracle in com.anguanjia.security Suppress the rule cbc_padding_oracle in com.anguanjia.security only from these files
10	该文件是World Readable。任何应用程序都可以读取文件	高危	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	升级会员：解锁高级权限	Suppress the rule android_world_readable in com.anguanjia.security Suppress the rule android_world_readable in com.anguanjia.security only from these files
11	使用弱加密算法	高危	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4	升级会员：解锁高级权限	Suppress the rule android_weak_ciphers in com.anguanjia.security Suppress the rule android_weak_ciphers in com.anguanjia.security only from these files
12	默认情况下，调用Cipher.getInstance("AES")将返回AES ECB模式。众所周知，ECB模式很弱，因为它导致相同明文块的密文相同	高危	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-2	升级会员：解锁高级权限	Suppress the rule android_aws_ecb_default in com.anguanjia.security Suppress the rule android_aws_ecb_default in com.anguanjia.security only from these files
13	SHA-1是已知存在哈希冲突的弱哈希	警告	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4	升级会员：解锁高级权限	Suppress the rule android_sha1 in com.anguanjia.security Suppress the rule android_sha1 in com.anguanjia.security only from these files
14	该文件是World Writable。任何应用程序都可以写入文件	高危	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	升级会员：解锁高级权限	Suppress the rule android_world_writable in com.anguanjia.security Suppress the rule android_world_writable in com.anguanjia.security only from these files

Native库安全分析

序号	动态库	NX(堆栈禁止执行)	STACK CANARY(栈保护)	RELRO	RPATH（指定SO搜索路径）	RUNPATH（指定SO搜索路径）	FORTIFY(常用函数加强检查)	SYMBOLS STRIPPED(裁剪符号表)
1	armeabi/libaddresshelper.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	False high 这个二进制文件没有在栈上添加栈哨兵值。栈哨兵是用于检测和防止攻击者覆盖返回地址的一种技术。使用选项-fstack-protector-all来启用栈哨兵。这对于Dart/Flutter库不适用，除非使用了Dart FFI	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用
2	armeabi/libaes128.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	True info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用
3	armeabi/libbumblebee-1.0.2.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	True info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用
4	armeabi/libclassverify.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	True info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用
5	armeabi/libdce-1.1.0.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	True info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用
6	armeabi/libkk-1.0.2.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	True info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用
7	armeabi/libml.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	False high 这个二进制文件没有在栈上添加栈哨兵值。栈哨兵是用于检测和防止攻击者覆盖返回地址的一种技术。使用选项-fstack-protector-all来启用栈哨兵。这对于Dart/Flutter库不适用，除非使用了Dart FFI	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用
8	armeabi/libNativeRQD.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	True info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用
9	armeabi/liboptimus_prime-1.0.1.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	True info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用
10	armeabi/libTms2-Ams-1.4.9.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	True info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用
11	armeabi/libTmsdk-2.2.0.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	True info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用
12	armeabi/libTVControler_jni.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	True info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用
13	armeabi/libuugen-1.0.1.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	False high 这个二进制文件没有在栈上添加栈哨兵值。栈哨兵是用于检测和防止攻击者覆盖返回地址的一种技术。使用选项-fstack-protector-all来启用栈哨兵。这对于Dart/Flutter库不适用，除非使用了Dart FFI	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用
14	armeabi/libxy.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。	True info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用

文件分析

序号	问题	文件
1	应用程序中硬编码的证书/密钥文件	assets/krsdk.cert

敏感权限分析

恶意软件常用权限 26/30

android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.CALL_PHONE
android.permission.WRITE_SMS
android.permission.VIBRATE
android.permission.GET_TASKS
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CAMERA
android.permission.RECEIVE_MMS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.READ_CALL_LOG
android.permission.WRITE_CALL_LOG
android.permission.GET_ACCOUNTS
android.permission.PACKAGE_USAGE_STATS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.RECORD_AUDIO

其它常用权限 18/46

android.permission.BATTERY_STATS
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CHANGE_NETWORK_STATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.READ_EXTERNAL_STORAGE
android.permission.BROADCAST_STICKY
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.FLASHLIGHT
android.permission.ACCESS_SURFACE_FLINGER
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.REORDER_TASKS
android.permission.DIAGNOSTIC
android.permission.AUTHENTICATE_ACCOUNTS

恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。

IP地理位置

恶意域名检测

域名	状态	中国境内	位置信息
upload.189qas.com	安全	否	没有可用的地理位置信息。
mmsc.myuni.com.cn	安全	是	IP地址: 10.0.0.172 国家: 中国地区: 北京城市: 北京查看: 高德地图
wapmail.10086.cn	安全	是	IP地址: 10.0.0.172 国家: 中国地区: 广东城市: 广州查看: 高德地图
lstest.map.soso.com	安全	是	IP地址: 125.39.120.62 国家: 中国地区: 天津城市: 天津查看: 高德地图
sec.aqgj.cn	安全	否	没有可用的地理位置信息。
mmsc.monternet.com	安全	否	IP地址: 10.0.0.172 国家: - 地区: - 城市: - 查看: Google 地图
mmsc.vnet.mobi	安全	否	没有可用的地理位置信息。
m.aqgj.cn	安全	否	没有可用的地理位置信息。
secp.aqgj.cn	安全	否	没有可用的地理位置信息。
hb.118114.net	安全	是	IP地址: 116.228.55.174 国家: 中国地区: 上海城市: 上海查看: 高德地图
ls.map.soso.com	安全	是	IP地址: 183.47.97.240 国家: 中国地区: 广东城市: 惠州查看: 高德地图

手机号提取

手机号	源码文件
13800138000	tcs/sl.java
13826512148 13632545744 13800000000	tcs/oo.java
13800138000 13800000000 13826512148 13632545744	自研引擎-S

URL链接分析

URL信息	源码文件
http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/PiPrivacySpace_20161124213654 http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/gallery_2.4.8.1140_android_2016112203_20161124175026_102001_20161124185053 http://mmgr.gtimg.com/gjsmall/package/1452514473734.png http://mmgr.gtimg.com/gjsmall/plugin/1444794547847.png http://mmgr.gtimg.com/gjsmall/package/1443174054594.png http://3gimg.qq.com/webapp_scan/icon_cleaner/heath_guide.png http://mmgr.gtimg.com/gjsmall/plugin/1457594470523.png http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/PiHongbaoReminder_20161124213614 http://mmgr.gtimg.com/gjsmall/plugin/1457580441291.png http://mmgr.gtimg.com/gjsmall/plugin/1473324151549.png http://mmgr.gtimg.com/gjsmall/package/1444636796498.png http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/PiPickproof_20161124213646 http://mmgr.gtimg.com/gjsmall/plugin/1457580952991.png http://mmgr.gtimg.com/gjsmall/package/1452592388141.png http://mmgr.gtimg.com/gjsmall/plugin/1457594433778.png http://mmgr.gtimg.com/gjsmall/package/1461243523022.png http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/PiUrlBlocking_20161124213748 http://mmgr.gtimg.com/gjsmall/plugin/1457594074849.png http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/PiAdBlocking_20161124213550 http://mmgr.gtimg.com/gjsmall/package/1443174346013.png http://mmgr.gtimg.com/gjsmall/package/1461248121769.png http://mmgr.gtimg.com/gjsmall/package/1452514834471.png http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/transfer_1.3.7.390_android_20151201112907_20151202153025 http://mmgr.gtimg.com/gjsmall/plugin/1468219990282.png http://mmgr.gtimg.com/gjsmall/plugin/1457580242368.png http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/PiLocker_20161124213622 http://mmgr.gtimg.com/gjsmall/package/1472802513148.png http://mmgr.gtimg.com/gjsmall/package/1443174774087.png http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/PiFastboot_20161124213607 http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/PiSoftwareLock_20161124213724 http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/PiPaySecure_20161124213639 http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/PiNetworkManager_20161124213631 http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/1478766034812_qlauncher.lite_1.5.2_13001_3121_20161110173322 http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/tencentwifimanager_2.3.1.1486_android_20161118195750-reunion-release_wifi_20161121202336_110001_20161122162436 http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/PiSceneSms_20161124213717 http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/qqpim_6.5.8.1850_android_20161110202657_signed_20161114133900_103006_20161115102441 http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/PiAlice_20161124213558 http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/Weiyun_3.9.3.861_android_r45027_20161021132856_release_68_20161102144749 http://3gimg.qq.com/webapp_scan/icon_cleaner/flower.png http://mmgr.gtimg.com/gjsmall/package/1443174370338.png http://mmgr.gtimg.com/gjsmall/package/1461248335339.png http://mmgr.gtimg.com/gjsmall/package/1440728579870.png http://mmgr.gtimg.com/gjsmall/package/1468416368813.png http://3gimg.qq.com/gjsmall/plugin/1432193283579.png http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/PiSoftwareUninstall_20161124213731 http://mmgr.gtimg.com/gjsmall/package/1444990537394.png http://mmgr.gtimg.com/gjsmall/plugin/1477297081962.png http://mmgr.gtimg.com/gjsmall/plugin/1444794358747.png http://mmgr.gtimg.com/gjsmall/package/1453206717425.png http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/qqbrowser_7.1.0.2830_21399_20161111174311 http://mmgr.gtimg.com/gjsmall/package/1443174546332.png http://mmgr.gtimg.com/gjsmall/plugin/1476244049175.png http://mmgr.gtimg.com/gjsmall/package/1443174618316.png http://mmgr.gtimg.com/gjsmall/package/1449226907592.jpeg http://mmgr.gtimg.com/gjsmall/plugin/1474864585973.png http://mmgr.gtimg.com/gjsmall/package/1443174645662.png http://mmgr.gtimg.com/gjsmall/package/1443174300503.png http://mmgr.gtimg.com/gjsmall/package/1443174603827.png http://mmgr.gtimg.com/gjsmall/plugin/1457594039713.png http://mmgr.gtimg.com/gjsmall/package/1443174396166.png http://mmgr.gtimg.com/gjsmall/plugin/1471939801110.png http://3gimg.qq.com/webapp_scan/icon_home/qqsafe.png http://mmgr.gtimg.com/gjsmall/package/1443174461051.png http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/NewKingrootV5.0.0_C161_B376_normal_release_2016_11_15_20161116140839_105133_20161116141859 http://mmgr.gtimg.com/gjsmall/package/1453087058071.png http://mmgr.gtimg.com/gjsmall/plugin/1457331655326.png http://mmgr.gtimg.com/gjsmall/plugin/1475915826628.png http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/KoMobileArenaChannels-qqpimsecure-release-161111_20161115175548 http://mmgr.gtimg.com/gjsmall/package/1476425472034.png http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/PiWeixinSecure_20161124213755 http://mmgr.gtimg.com/gjsmall/plugin/1457580861751.png http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/KingMaster_v1.7.0.364_c170_7755EB6EDCAA9433_2016-11-11_20161114095451_105007_20161114150508 http://mmgr.gtimg.com/gjsmall/package/1477296826283.png http://mmgr.gtimg.com/gjsmall/package/1443174726926.png http://mmgr.gtimg.com/gjsmall/plugin/1457580661501.png http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/996687_54595114_1478788083391_20161111152342 http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/PiQrcode_20161124213702 http://mmgr.gtimg.com/gjsmall/package/1443174579706.png http://mmgr.gtimg.com/gjsmall/plugin/1458901506052.png http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/PiSpaceMgrUI_20161124213738 http://mmgr.gtimg.com/gjsmall/plugin/1457580331505.png http://mmgr.gtimg.com/gjsmall/plugin/1457594385869.png http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/PiQuickPanel_20161124213709 http://mmgr.myapp.com/myapp/gjbig/plugininfo/plugin/plugins/SpecificCleaner2.2.1build21-signed_20160523183252 http://3gimg.qq.com/webapp_scan/icon_cleaner/shoujishoushen_guide.png http://mmgr.gtimg.com/gjsmall/package/1443174113812.png http://mmgr.gtimg.com/gjsmall/plugin/1444794430606.png http://mmgr.gtimg.com/gjsmall/plugin/1457594321011.png http://mmgr.gtimg.com/gjsmall/package/1443174691215.png	自研引擎-A
http://sec.aqgj.cn/test.cgi http://sec.aqgj.cn/security.cgi	com/anguanjia/framework/network/RequestUtil.java
http://secp.aqgj.cn/s.php?a=comaction&mid=4001&idx=28d9d4c2f6&skey=6dcdc626ece5fa255776484f1fa81b71&data=	com/anguanjia/security/plugin/ctsecurity/fg/main/b.java
http://m.qq.com/wap/survey/index.jsp?value=%s	com/meri/service/daemon/a.java
http://m.aqgj.cn/index.php/index/agreement/id/2	com/meri/ui/guide/a.java
http://m.aqgj.cn/index.php/index/agreement/id/10 http://www.qq.com/privacy.htm	com/meri/ui/guide/e.java
10.0.0.172 10.0.0.200	com/tencent/halley/common/downloader_detector/DownloaderApn.java
file:///sdcard/demo.html	com/tencent/qqpimsecure/h5/f.java
http://m.baidu.com/s?from=1000953a	com/tencent/qqpimsecure/plugin/deskassistant/dao/HotWordsModel.java
http://mp.weixin.qq.com/s?__biz=mza4nta5nzm3oa==&mid=404556357&idx=1&sn=e7a4d07508bb89d17bfc9fed70329dcb#rd http://bbs.m.qq.com http://m.qq.com http://m.aqgj.cn/index.php/index/agreement/id/10 http://m.qq.com/index.jsp?g_f=23754	com/tencent/qqpimsecure/plugin/main/page/a.java
http://feedback.qq.com/?productid=1#!/detail/qid/6	com/tencent/server/fore/RealtimeProtectGuideActivity.java
224.0.0.251	mars/tvcontroler/Native/b.java
http://mmsc.monternet.com 10.0.0.172 http://mmsc.myuni.com.cn http://mmsc.vnet.mobi 10.0.0.200	meri/service/aresengine/h.java
http://mmsc.monternet.com 10.0.0.172 http://mmsc.myuni.com.cn http://mmsc.vnet.mobi 10.0.0.200	meri/service/aresengine/r.java
http://feedback.qq.com/?productid=1#!/detail/qid/140430	meri/service/usespermission/b.java
183.60.18.138 112.90.85.191 112.90.85.193 183.60.18.150 120.196.212.233 120.204.200.34 27.115.124.244 112.90.141.41 112.90.141.48 113.108.11.157 113.108.11.159 120.196.212.232	oicq/wlogin_sdk/request/j.java
5.2.0.8	oicq/wlogin_sdk/tools/util.java
http://hb.118114.net:9080/hy114/apponoff	tcs/bei.java
http://oth.str.mdt.qq.com:8080/analytics/upload http://oth.eve.mdt.qq.com:8080/analytics/upload http://jrlt.beacon.qq.com/analytics/upload	tcs/bjy.java
http://upload.189qas.com/statisgether/androidgzipencodegether.html	tcs/bct.java
www.qq.com	tcs/xx.java
2.0.0.9	tcs/bcn.java
http://hb.118114.net:9080/hy114/telinfo	tcs/beh.java
http://180.153.50.195:8888/hy114/rightget	tcs/bel.java
1.9.2.16	tcs/bcs.java
http://upload.189qas.com/statisgether/idblank.html?idtype=imsi-sha1&id=	tcs/bdb.java
10.0.0.172	tcs/bot.java
http://m.qq.com/wap/scam/	tcs/on.java
http://m.aqgj.cn/public/admin/js/kindeditor/attached/image/20170328/20170328163651_74824.png http://m.aqgj.cn/public/admin/js/kindeditor/attached/image/20170328/20170328163624_98373.png http://m.aqgj.cn/public/admin/js/kindeditor/attached/image/20170328/20170328162803_42708.png http://m.aqgj.cn/public/admin/js/kindeditor/attached/image/20170330/20170330101131_60063.png http://m.aqgj.cn/public/admin/js/kindeditor/attached/image/20170707/20170707111508_14108.png	tcs/bss.java
http://strategy.beacon.qq.com/analytics/upload	tcs/blx.java
183.232.125.162 163.177.71.153 120.198.203.156	tcs/pv.java
http://monitor.uu.qq.com/analytics/rqdsync http://android.rqd.qq.com/analytics/async	tcs/aru.java
10.0.0.172 10.0.0.200	tcs/bjl.java
127.0.0.1	tcs/pc.java
10.0.0.172	tcs/ajt.java
http://w.aq.qq.com/cn/mbtoken3/mbtoken3_get_photo_v2?uin= https://api.weixin.qq.com/sns/oauth2/refresh_token?appid=&grant_type=refresh_token&refresh_token= https://api.weixin.qq.com/sns/userinfo?access_token=	tcs/boh.java
http://feedback.qq.com/?productid=1	tcs/bzd.java
http://aq.qq.com/lost_pwd?lang=zh_cn&login_type=normal?source_id=2411	tcs/bpn.java
http://feedback.qq.com/?productid=1#!/detail/qid/6	tcs/bzs.java
10.0.0.172	tmsdk/common/internal/utils/k.java
10.0.0.200	tmsdk/common/internal/utils/y.java
112.90.85.191 http://hb.118114.net:9080/hy114/telinfo http://m.aqgj.cn/public/admin/js/kindeditor/attached/image/20170328/20170328163651_74824.png 1.9.2.16 http://rqd.uu.qq.com/rqd/sync 27.115.124.244 https://api.weixin.qq.com/sns/userinfo 120.204.200.34 http://m.aqgj.cn/index.php/index/agreement/id/10 http://aq.qq.com/lost_pwd?lang=zh_cn&login_type=normal?source_id=2411 10.0.0.172 112.90.85.193 http://m.aqgj.cn/public/admin/js/kindeditor/attached/image/20170707/20170707111508_14108.png http://hb.118114.net:9080/hy114/apponoff http://sec.aqgj.cn/test.cgi http://mmsc.myuni.com.cn http://m.qq.com/wap/scam/ http://mmsc.vnet.mobi 224.0.0.251 http://m.aqgj.cn/public/admin/js/kindeditor/attached/image/20170328/20170328162803_42708.png http://oth.str.mdt.qq.com:8080/analytics/upload http://monitor.uu.qq.com/analytics/rqdsync http://m.aqgj.cn/public/admin/js/kindeditor/attached/image/20170330/20170330101131_60063.png https://api.weixin.qq.com/sns/oauth2/refresh_token http://jrlt.beacon.qq.com/analytics/upload http://secp.aqgj.cn/s.php?a=comaction&mid=4001&idx=28d9d4c2f6&skey=6dcdc626ece5fa255776484f1fa81b71&data= 163.177.71.153 10.0.0.200 113.108.11.157 120.196.212.233 http://oth.eve.mdt.qq.com:8080/analytics/upload http://180.153.50.195:8888/hy114/rightget http://bbs.m.qq.com http://sec.aqgj.cn/security.cgi www.qq.com http://m.aqgj.cn/index.php/index/agreement/id/2 http://strategy.beacon.qq.com/analytics/upload 113.108.11.159 http://android.rqd.qq.com/analytics/async http://m.qq.com/index.jsp?g_f=23754 http://m.aqgj.cn/public/admin/js/kindeditor/attached/image/20170328/20170328163624_98373.png http://m.qq.com http://upload.189qas.com/statisgether/androidgzipencodegether.html http://feedback.qq.com/?productid=1 112.90.141.41 file:///sdcard/demo.html 127.0.0.1 183.232.125.162 120.196.212.232 120.198.203.156 http://m.baidu.com/s?from=1000953a 183.60.18.138 http://upload.189qas.com/statisgether/idblank.html?idtype=imsi-sha1&id= http://m.qq.com/wap/survey/index.jsp?value=%s 5.2.0.8 http://feedback.qq.com/?productid=1#!/detail/qid/6 http://feedback.qq.com/?productid=1#!/detail/qid/140430 http://w.aq.qq.com/cn/mbtoken3/mbtoken3_get_photo_v2?uin= http://mmsc.monternet.com http://www.qq.com/privacy.htm 183.60.18.150 112.90.141.48 2.0.0.9 http://mp.weixin.qq.com/s?__biz=mza4nta5nzm3oa==&mid=404556357&idx=1&sn=e7a4d07508bb89d17bfc9fed70329dcb#rd	自研引擎-S
http://wapmail.10086.cn/	lib/armeabi/libbumblebee-1.0.2.so
file:sendandcheckrecv file:error:file file:sendend:cdata:%d:%s	lib/armeabi/libTVControler_jni.so

Firebase配置检测

邮箱地址提取

第三方追踪器

名称	类别	网址
Bugly		https://reports.exodus-privacy.eu.org/trackers/190

敏感凭证泄露

已显示 20 个secrets

1、腾讯云信鸽推送SDK的=> "com.tencent.rdm.uuid" : "c9a5b9ff-9112-46d1-966e-c79a651f12a6"
2、灯塔 SDK的=> "APPKEY_DENGTA" : "0M300MNJT8094NF6"
3、 e7a4d07508bb89d17bfc9fed70329dcb
4、 020b03cf3d99541f29ffec281bebbd4ea211292ac1f53d7128
5、 6dcdc626ece5fa255776484f1fa81b71
6、 SENNGR0mdamffHhLjTMmmAuOA7UBc5etA
7、 nv4afaMqEmoLCKb0mUZYvYOoVN7LPMi2IVY2MRaFJvuND3glVw1RDm2VJJtjQkwUd
8、 04928D8850673088B343264E0C6BACB8496D697799F37211DEB25BB73906CB089FEA9639B4E0260498B51A992D50813DA8
9、 191240FCB048127DB9110D1B30537FDE
10、 58BE6699F356292927DC2540FF08BD78
11、 00b1208638de0fcd3e920886d658daf6
12、 30818902818100daaa2a418b271f3dfcf8f0a9120326d47f07618593d8d71d61a4fe987cc47740e491105bf8e68bd479bf51dfe19d3b06e12017df6d87a0f43bb82b57f59bd4220f2a3d8d68904a6ddb51197989e6e82512d8d8fa6c41b755a8ca962595d3e1e1be7ea01677249be4794cd7c6682d611c1bd81f0a16231fb83517515b94d13e5d0203010001
13、 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
14、 Y29tLmRpYW54aW5vcy5zdXBlcnVzZXI=
15、 18C867F0717AA67B2AB7347505BA07ED
16、 MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCsAxNCSLyNUCOP1QqYStE8ZeiU
17、 4da0f614fc9f29c2054c77048a6566d7
18、 7CC749CFC0FB5677E6ABA342EDBDBA5A
19、 191240fcb048127db9110d1b30537fde
20、 00B1208638DE0FCD3E920886D658DAF6

字符串信息

建议导出为TXT，方便查看。

活动列表

显示 28 个 activities

服务列表

显示 18 个 services

广播接收者列表

显示 10 个 receivers

内容提供者列表

显示 4 个 providers

第三方SDK

SDK名称	开发者	描述信息
腾讯流量联盟	Tencent	腾讯移动开放平台是为广大移动端应用开发者提供的平台。

文件列表

污点分析

当apk较大时，代码量会很大，造成数据流图（ICFG）呈现爆炸式增长，所以该功能比较耗时，请先喝杯咖啡，耐心等待……

规则名称	描述信息	操作
病毒分析	使用安卓恶意软件常用的API进行污点分析	开始分析
漏洞挖掘	漏洞挖掘场景下的污点分析	开始分析
隐私合规	隐私合规场景下的污点分析：组件内污点传播、组件间污点传播、组件与库函数之间的污点传播	开始分析
密码分析	分析加密算法是否使用常量密钥、静态初始化的向量（IV）、加密模式是否使用ECB等	开始分析
Callback	因为Android中系统级的Callback并不会出现显式地进行回调方法的调用，所以如果需要分析Callback方法需要在声明文件中将其声明，这里提供一份AndroidCallbacks.txt文件，里面是一些常见的原生回调接口或类，如果有特殊接口需求，可以联系管理员	开始分析