SubsidiosGLP 1.0版本 | 静态分析 _南明离火移动安全分析平台

安全声明：本平台专为移动应用安全风险研究与合规评估设计，严禁用于任何非法用途。如有疑问或建议，欢迎加入微信群交流。

应用图标

应用评分

文件基本信息

文件名称

SubsidiosGLP.apk

文件大小

15.93MB

MD5

f7d504a0a600815140778fc511bd3942

SHA1

52ede025b324e99d2c7971abe7df2e3d180f4f5a

SHA256

e3ab2b03ce8537a124c22697350517c3b8ebf453d91ff39371db6d31fe7e8bd3

病毒检测

⚠️ 3 个厂商报毒⚠️

应用基础信息

应用名称

SubsidiosGLP

包名

com.glp.subsidiosonline

主活动

com.bexsoluciones.bexmovilprovigas.Home

目标SDK

29

最小SDK

23

版本号

1.0

子版本号

1

加固信息

未加壳

组件导出状态统计

查看 Activity 组件

查看 Service 组件

查看 Receiver 组件

查看 Provider 组件

扫描与分析选项

重新扫描管理规则动态分析

反编译与源码导出

Manifest文件查看

APK文件成为会员，解锁下载

Java源代码查看 -- 下载

文件结构与资源列表

应用签名证书信息

二进制文件已签名
v1 签名: True
v2 签名: True
v3 签名: False
v4 签名: False
主题: CN=Andres, OU=Bex Soluciones, O=Bex, L=Medellin, ST=Colombia, C=57
签名算法: rsassa_pkcs1v15
有效期自: 2024-02-08 20:11:39+00:00
有效期至: 2049-02-01 20:11:39+00:00
发行人: CN=Andres, OU=Bex Soluciones, O=Bex, L=Medellin, ST=Colombia, C=57
序列号: 0x1
哈希算法: sha256
证书MD5: 77a9da7a7d4ddb4b6aa7c312451030bd
证书SHA1: 312fc30a6ac202ddfea0851cb2ec7ab96ac975b1
证书SHA256: 315d72210ce6659cd6b167a5247a6458068e96697b626d397fb5f3df904437c2
证书SHA512: c2cd1d85117d37c308ad1d15cf01a2b3a926182eab1c2891ac8ca0781ed6fc91b4d181be7c6d942f61ea35ad56c333f66a5ac5fee04531cb2def7469efb89a15
公钥算法: rsa
密钥长度: 2048
指纹: 2e1b56d39d821ed98a215a1a2e29b2556ed2d7a2e4186611fd2bb67b5026d8dd
找到 1 个唯一证书

权限声明与风险分级

权限名称	安全等级	权限内容	权限描述	关联代码
android.permission.READ_PHONE_STATE	危险	读取手机状态和标识	允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号，是否正在通话，以及对方的号码等。	显示文件 co/gov/minminas/subsidiosGLP/publico/Mediador.java
android.permission.READ_PRIVILEGED_PHONE_STATE	未知	未知权限	来自 android 引用的未知权限。
android.permission.CAMERA	危险	拍照和录制视频	允许应用程序拍摄照片和视频，且允许应用程序收集相机在任何时候拍到的图像。	显示文件 com/microblink/hardware/camera/llIIlIlIIl.java com/microblink/util/DeviceInformation.java com/microblink/util/RecognizerCompatibility.java
android.permission.FLASHLIGHT	普通	控制闪光灯	允许应用程序控制闪光灯。
android.permission.INTERNET	危险	完全互联网访问	允许应用程序创建网络套接字。	显示文件 co/gov/minminas/subsidiosGLP/publico/Mediador.java com/bexsoluciones/bexmovilprovigas/ApiClient.java com/fasterxml/jackson/core/JsonFactory.java com/fasterxml/jackson/databind/ObjectReader.java org/codehaus/jackson/JsonFactory.java org/ksoap2/transport/HttpTransportSE.java org/ksoap2/transport/HttpsServiceConnectionSE.java org/ksoap2/transport/ServiceConnectionSE.java org/restlet/data/ClientInfo.java org/restlet/engine/Engine.java org/restlet/engine/adapter/ClientCall.java org/restlet/engine/application/TunnelFilter.java org/restlet/engine/connector/ConnectionClosingRepresentation.java org/restlet/engine/connector/FtpClientHelper.java org/restlet/engine/connector/HttpUrlConnectionCall.java org/restlet/engine/local/ClapClientHelper.java org/restlet/engine/log/IdentClient.java org/restlet/ext/httpclient/internal/HttpMethodCall.java org/springframework/core/io/AbstractFileResolvingResource.java org/springframework/core/io/AbstractResource.java org/springframework/core/io/ClassPathResource.java org/springframework/core/io/FileSystemResource.java org/springframework/core/io/UrlResource.java org/springframework/http/HttpHeaders.java org/springframework/http/client/CommonsClientHttpRequestFactory.java org/springframework/http/client/HttpComponentsClientHttpRequest.java org/springframework/http/client/HttpComponentsClientHttpRequestFactory.java org/springframework/http/client/SimpleBufferingClientHttpRequest.java org/springframework/http/client/SimpleClientHttpRequestFactory.java org/springframework/http/client/SimpleClientHttpResponse.java org/springframework/http/client/SimpleStreamingClientHttpRequest.java org/springframework/web/client/RestTemplate.java
android.permission.ACCESS_FINE_LOCATION	危险	获取精确位置	通过GPS芯片接收卫星的定位信息，定位精度达10米以内。恶意程序可以用它来确定您所在的位置。
android.permission.ACCESS_NETWORK_STATE	普通	获取网络状态	允许应用程序查看所有网络的状态。	显示文件 co/gov/minminas/subsidiosGLP/publico/Mediador.java com/bexsoluciones/bexmovilprovigas/Utils.java
android.permission.ACCESS_COARSE_LOCATION	危险	获取粗略位置	通过WiFi或移动基站的方式获取用户错略的经纬度信息，定位精度大概误差在30~1500米。恶意程序可以用它来确定您的大概位置。
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS	普通	访问定位额外命令	访问额外位置提供程序命令，恶意应用程序可能会使用它来干扰GPS或其他位置源的操作。
android.permission.ACCESS_WIFI_STATE	普通	查看Wi-Fi状态	允许应用程序查看有关Wi-Fi状态的信息。
com.google.android.c2dm.permission.RECEIVE	普通	接收推送通知	允许应用程序接收来自云的推送通知。
android.permission.WAKE_LOCK	危险	防止手机休眠	允许应用程序防止手机休眠，在手机屏幕关闭后后台进程仍然运行。	显示文件 com/microblink/activity/BaseScanActivity.java
android.permission.BLUETOOTH	危险	创建蓝牙连接	允许应用程序查看或创建蓝牙连接。	显示文件 com/bexsoluciones/bexmovilprovigas/Utils.java
android.permission.BLUETOOTH_ADMIN	危险	管理蓝牙	允许程序发现和配对新的蓝牙设备。
android.permission.WRITE_EXTERNAL_STORAGE	危险	读取/修改/删除外部存储内容	允许应用程序写入外部存储。	显示文件 co/gov/minminas/subsidiosGLP/publico/Mediador.java com/datecs/api/hub/HUB.java com/fasterxml/jackson/core/JsonFactory.java org/codehaus/jackson/JsonFactory.java org/jf/dexlib2/analysis/DumpFields.java org/jf/dexlib2/analysis/DumpVtables.java org/jf/dexlib2/writer/io/FileDeferredOutputStream.java org/ksoap2/transport/HttpTransportSE.java org/restlet/engine/local/FileClientHelper.java org/springframework/core/io/FileSystemResource.java org/springframework/util/FileCopyUtils.java org/springframework/util/support/Base64.java
android.permission.WRITE_MEDIA_STORAGE	签名(系统)	获取外置SD卡的写权限	允许应用程序在外置SD卡中进行写入操作。
android.permission.READ_EXTERNAL_STORAGE	危险	读取SD卡内容	允许应用程序从SD卡读取信息。	显示文件 com/datecs/api/hub/HUB.java com/fasterxml/jackson/core/JsonFactory.java com/fasterxml/jackson/databind/ObjectReader.java org/codehaus/jackson/JsonFactory.java org/jf/dexlib2/DexFileFactory.java org/jf/dexlib2/writer/io/FileDeferredOutputStream.java org/ksoap2/transport/HttpTransportSE.java org/restlet/engine/io/IoUtils.java org/restlet/engine/local/FileClientHelper.java org/restlet/engine/ssl/DefaultSslContextFactory.java org/restlet/representation/FileRepresentation.java org/springframework/core/io/FileSystemResource.java org/springframework/util/FileCopyUtils.java org/springframework/util/support/Base64.java
android.permission.WRITE_INTERNAL_STORAGE	未知	未知权限	来自 android 引用的未知权限。
android.permission.READ_INTERNAL_STORAGE	未知	未知权限	来自 android 引用的未知权限。
com.glp.subsidiosonline.permission.C2D_MESSAGE	未知	未知权限	来自 android 引用的未知权限。

证书安全合规分析

高危

0

警告

1

信息

1

标题	严重程度	描述信息
已签名应用	信息	应用程序已使用代码签名证书进行签名
应用程序存在Janus漏洞	警告	应用程序使用了v1签名方案进行签名，如果只使用v1签名方案，那么它就容易受到安卓5.0-8.0上的Janus漏洞的攻击。在安卓5.0-7.0上运行的使用了v1签名方案的应用程序，以及同时使用了v2/v3签名方案的应用程序也同样存在漏洞。

Manifest 配置安全分析

高危

1

警告

12

信息

0

屏蔽

0

序号	问题	严重程度	描述信息	操作
1	应用程序可以安装在有漏洞的已更新 Android 版本上 Android 6.0-6.0.1, [minSdk=23]	警告	该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。	对应用 com.glp.subsidiosonline 屏蔽 vulnerable_os_version 规则
2	应用程序已启用明文网络流量 [android:usesCleartextTraffic=true]	警告	应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。	对应用 com.glp.subsidiosonline 屏蔽 clear_text_traffic 规则
3	程序可被任意调试 [android:debuggable=true]	高危	应用可调试标签被开启，这使得逆向工程师更容易将调试器挂接到应用程序上。这允许导出堆栈跟踪和访问调试助手类。	对应用 com.glp.subsidiosonline 屏蔽 app_is_debuggable 规则
4	应用程序数据可以被备份 [android:allowBackup=true]	警告	这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。	对应用 com.glp.subsidiosonline 屏蔽 app_allowbackup 规则
5	Broadcast Receiver (com.google.android.gms.gcm.GcmReceiver) 受权限保护, 但是应该检查权限的保护级别。 Permission: com.google.android.c2dm.permission.SEND [android:exported=true]	警告	发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。	对应用 com.glp.subsidiosonline 屏蔽 receiver_exported_protected_permission_not_defined 规则
6	Activity (com.bexsoluciones.bexmovilprovigas.InicioSubsidios) 未被保护。存在一个intent-filter。	警告	发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。	对应用 com.glp.subsidiosonline 屏蔽 activity_exported_intent_filter_exists 规则
7	Activity (com.google.android.gms.appinvite.PreviewActivity) 未被保护。 [android:exported=true]	警告	发现 Activity与设备上的其他应用程序共享，因此使其对设备上的任何其他应用程序都可访问。	对应用 com.glp.subsidiosonline 屏蔽 activity_explicitly_exported 规则
8	Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护, 但是应该检查权限的保护级别。 Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]	警告	发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。	对应用 com.glp.subsidiosonline 屏蔽 service_exported_protected_permission_not_defined 规则
9	Service (com.google.firebase.messaging.FirebaseMessagingService) 未被保护。 [android:exported=true]	警告	发现 Service与设备上的其他应用程序共享，因此使其对设备上的任何其他应用程序都可访问。	对应用 com.glp.subsidiosonline 屏蔽 service_explicitly_exported 规则
10	Activity (com.google.android.gms.tagmanager.TagManagerPreviewActivity) 未被保护。 [android:exported=true]	警告	发现 Activity与设备上的其他应用程序共享，因此使其对设备上的任何其他应用程序都可访问。	对应用 com.glp.subsidiosonline 屏蔽 activity_explicitly_exported 规则
11	Broadcast Receiver (com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver) 受权限保护, 但是应该检查权限的保护级别。 Permission: android.permission.INSTALL_PACKAGES [android:exported=true]	警告	发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。	对应用 com.glp.subsidiosonline 屏蔽 receiver_exported_protected_permission_not_defined 规则
12	Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。 Permission: com.google.android.c2dm.permission.SEND [android:exported=true]	警告	发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。	对应用 com.glp.subsidiosonline 屏蔽 receiver_exported_protected_permission_not_defined 规则
13	Service (com.google.firebase.iid.FirebaseInstanceIdService) 未被保护。 [android:exported=true]	警告	发现 Service与设备上的其他应用程序共享，因此使其对设备上的任何其他应用程序都可访问。	对应用 com.glp.subsidiosonline 屏蔽 service_explicitly_exported 规则

可浏览 Activity 组件分析

ACTIVITY	INTENT
com.google.android.gms.tagmanager.TagManagerPreviewActivity	Schemes: tagmanager.c.com.glp.subsidiosonline://,

网络通信安全风险分析

序号	范围	严重级别	描述

API调用分析

API功能	源码文件
一般功能-> 文件操作	显示文件 co/gov/minminas/subsidiosGLP/publico/Mediador.java com/bexsoluciones/bexmovilprovigas/CalcularSubsidio.java com/bexsoluciones/bexmovilprovigas/DetalleSubsidio.java com/bexsoluciones/bexmovilprovigas/Home.java com/bexsoluciones/bexmovilprovigas/InicioSubsidios.java com/bexsoluciones/bexmovilprovigas/Utils.java com/bexsoluciones/bexmovilprovigas/model/TransactionVO.java com/datecs/api/biometric/TouchChip.java com/datecs/api/biometric/TouchChipException.java com/datecs/api/emsr/EMSR.java com/datecs/api/emsr/EMSRException.java com/datecs/api/hub/HUB.java com/datecs/api/hub/HUBException.java com/datecs/api/hub/SerialPort.java com/datecs/api/linea/LineaPro.java com/datecs/api/linea/LineaProException.java com/datecs/api/linea/LineaProInformation.java com/datecs/api/printer/Printer.java com/datecs/api/printer/ProtocolAdapter.java com/datecs/api/rfid/ContactlessCard.java com/datecs/api/rfid/FeliCaCard.java com/datecs/api/rfid/ISO14443Card.java com/datecs/api/rfid/ISO15693Card.java com/datecs/api/rfid/RC663.java com/datecs/api/rfid/RFID.java com/datecs/api/rfid/RFIDException.java com/datecs/api/rfid/STSRICard.java com/datecs/api/universalreader/UniversalReader.java com/datecs/api/universalreader/UniversalReaderException.java com/fasterxml/jackson/annotation/JsonFormat.java com/fasterxml/jackson/annotation/JsonInclude.java com/fasterxml/jackson/annotation/ObjectIdGenerator.java com/fasterxml/jackson/core/Base64Variant.java com/fasterxml/jackson/core/JsonFactory.java com/fasterxml/jackson/core/JsonGenerator.java com/fasterxml/jackson/core/JsonLocation.java com/fasterxml/jackson/core/JsonParser.java com/fasterxml/jackson/core/JsonProcessingException.java com/fasterxml/jackson/core/ObjectCodec.java com/fasterxml/jackson/core/PrettyPrinter.java com/fasterxml/jackson/core/SerializableString.java com/fasterxml/jackson/core/TreeCodec.java com/fasterxml/jackson/core/Version.java com/fasterxml/jackson/core/base/GeneratorBase.java com/fasterxml/jackson/core/base/ParserBase.java com/fasterxml/jackson/core/base/ParserMinimalBase.java com/fasterxml/jackson/core/filter/FilteringGeneratorDelegate.java com/fasterxml/jackson/core/filter/FilteringParserDelegate.java com/fasterxml/jackson/core/filter/TokenFilter.java com/fasterxml/jackson/core/filter/TokenFilterContext.java com/fasterxml/jackson/core/format/DataFormatDetector.java com/fasterxml/jackson/core/format/DataFormatMatcher.java com/fasterxml/jackson/core/format/InputAccessor.java com/fasterxml/jackson/core/io/CharacterEscapes.java com/fasterxml/jackson/core/io/InputDecorator.java com/fasterxml/jackson/core/io/MergedStream.java com/fasterxml/jackson/core/io/OutputDecorator.java com/fasterxml/jackson/core/io/SegmentedStringWriter.java com/fasterxml/jackson/core/io/SerializedString.java com/fasterxml/jackson/core/io/UTF32Reader.java com/fasterxml/jackson/core/io/UTF8Writer.java com/fasterxml/jackson/core/json/ByteSourceJsonBootstrapper.java com/fasterxml/jackson/core/json/JsonGeneratorImpl.java com/fasterxml/jackson/core/json/ReaderBasedJsonParser.java com/fasterxml/jackson/core/json/UTF8JsonGenerator.java com/fasterxml/jackson/core/json/UTF8StreamJsonParser.java com/fasterxml/jackson/core/json/WriterBasedJsonGenerator.java com/fasterxml/jackson/core/util/ByteArrayBuilder.java com/fasterxml/jackson/core/util/DefaultIndenter.java com/fasterxml/jackson/core/util/DefaultPrettyPrinter.java com/fasterxml/jackson/core/util/JsonGeneratorDelegate.java com/fasterxml/jackson/core/util/JsonParserDelegate.java com/fasterxml/jackson/core/util/JsonParserSequence.java com/fasterxml/jackson/core/util/MinimalPrettyPrinter.java com/fasterxml/jackson/core/util/VersionUtil.java com/fasterxml/jackson/databind/AnnotationIntrospector.java com/fasterxml/jackson/databind/DeserializationConfig.java com/fasterxml/jackson/databind/DeserializationContext.java com/fasterxml/jackson/databind/InjectableValues.java com/fasterxml/jackson/databind/JavaType.java com/fasterxml/jackson/databind/JsonDeserializer.java com/fasterxml/jackson/databind/JsonMappingException.java com/fasterxml/jackson/databind/JsonNode.java com/fasterxml/jackson/databind/JsonSerializable.java com/fasterxml/jackson/databind/JsonSerializer.java com/fasterxml/jackson/databind/KeyDeserializer.java com/fasterxml/jackson/databind/MappingIterator.java com/fasterxml/jackson/databind/MappingJsonFactory.java com/fasterxml/jackson/databind/ObjectMapper.java com/fasterxml/jackson/databind/ObjectReader.java com/fasterxml/jackson/databind/ObjectWriter.java com/fasterxml/jackson/databind/PropertyMetadata.java com/fasterxml/jackson/databind/PropertyName.java com/fasterxml/jackson/databind/PropertyNamingStrategy.java com/fasterxml/jackson/databind/SequenceWriter.java com/fasterxml/jackson/databind/SerializationConfig.java com/fasterxml/jackson/databind/SerializerProvider.java com/fasterxml/jackson/databind/cfg/BaseSettings.java com/fasterxml/jackson/databind/cfg/ContextAttributes.java com/fasterxml/jackson/databind/cfg/DeserializerFactoryConfig.java com/fasterxml/jackson/databind/cfg/MapperConfig.java com/fasterxml/jackson/databind/cfg/MapperConfigBase.java com/fasterxml/jackson/databind/cfg/SerializerFactoryConfig.java com/fasterxml/jackson/databind/deser/AbstractDeserializer.java com/fasterxml/jackson/databind/deser/BasicDeserializerFactory.java com/fasterxml/jackson/databind/deser/BeanDeserializer.java com/fasterxml/jackson/databind/deser/BeanDeserializerBase.java com/fasterxml/jackson/databind/deser/BeanDeserializerFactory.java com/fasterxml/jackson/databind/deser/BuilderBasedDeserializer.java com/fasterxml/jackson/databind/deser/CreatorProperty.java com/fasterxml/jackson/databind/deser/DataFormatReaders.java com/fasterxml/jackson/databind/deser/DefaultDeserializationContext.java com/fasterxml/jackson/databind/deser/DeserializationProblemHandler.java com/fasterxml/jackson/databind/deser/DeserializerCache.java com/fasterxml/jackson/databind/deser/SettableAnyProperty.java com/fasterxml/jackson/databind/deser/SettableBeanProperty.java com/fasterxml/jackson/databind/deser/ValueInstantiator.java com/fasterxml/jackson/databind/deser/impl/BeanAsArrayBuilderDeserializer.java com/fasterxml/jackson/databind/deser/impl/BeanAsArrayDeserializer.java com/fasterxml/jackson/databind/deser/impl/BeanPropertyMap.java com/fasterxml/jackson/databind/deser/impl/CreatorCollector.java com/fasterxml/jackson/databind/deser/impl/ExternalTypeHandler.java com/fasterxml/jackson/databind/deser/impl/FieldProperty.java com/fasterxml/jackson/databind/deser/impl/InnerClassProperty.java com/fasterxml/jackson/databind/deser/impl/ManagedReferenceProperty.java com/fasterxml/jackson/databind/deser/impl/MethodProperty.java com/fasterxml/jackson/databind/deser/impl/NoClassDefFoundDeserializer.java com/fasterxml/jackson/databind/deser/impl/NullProvider.java com/fasterxml/jackson/databind/deser/impl/ObjectIdReader.java com/fasterxml/jackson/databind/deser/impl/ObjectIdReferenceProperty.java com/fasterxml/jackson/databind/deser/impl/ObjectIdValueProperty.java com/fasterxml/jackson/databind/deser/impl/PropertyBasedCreator.java com/fasterxml/jackson/databind/deser/impl/PropertyValue.java com/fasterxml/jackson/databind/deser/impl/PropertyValueBuffer.java com/fasterxml/jackson/databind/deser/impl/ReadableObjectId.java com/fasterxml/jackson/databind/deser/impl/SetterlessProperty.java com/fasterxml/jackson/databind/deser/impl/TypeWrappedDeserializer.java com/fasterxml/jackson/databind/deser/impl/UnwrappedPropertyHandler.java com/fasterxml/jackson/databind/deser/impl/ValueInjector.java com/fasterxml/jackson/databind/deser/std/ArrayBlockingQueueDeserializer.java com/fasterxml/jackson/databind/deser/std/AtomicBooleanDeserializer.java com/fasterxml/jackson/databind/deser/std/AtomicReferenceDeserializer.java com/fasterxml/jackson/databind/deser/std/BaseNodeDeserializer.java com/fasterxml/jackson/databind/deser/std/ByteBufferDeserializer.java com/fasterxml/jackson/databind/deser/std/CollectionDeserializer.java com/fasterxml/jackson/databind/deser/std/ContainerDeserializerBase.java com/fasterxml/jackson/databind/deser/std/DateDeserializers.java com/fasterxml/jackson/databind/deser/std/DelegatingDeserializer.java com/fasterxml/jackson/databind/deser/std/EnumDeserializer.java com/fasterxml/jackson/databind/deser/std/EnumMapDeserializer.java com/fasterxml/jackson/databind/deser/std/EnumSetDeserializer.java com/fasterxml/jackson/databind/deser/std/FromStringDeserializer.java com/fasterxml/jackson/databind/deser/std/JsonNodeDeserializer.java com/fasterxml/jackson/databind/deser/std/MapDeserializer.java com/fasterxml/jackson/databind/deser/std/MapEntryDeserializer.java com/fasterxml/jackson/databind/deser/std/NullifyingDeserializer.java com/fasterxml/jackson/databind/deser/std/NumberDeserializers.java com/fasterxml/jackson/databind/deser/std/ObjectArrayDeserializer.java com/fasterxml/jackson/databind/deser/std/PrimitiveArrayDeserializers.java com/fasterxml/jackson/databind/deser/std/StackTraceElementDeserializer.java com/fasterxml/jackson/databind/deser/std/StdDelegatingDeserializer.java com/fasterxml/jackson/databind/deser/std/StdDeserializer.java com/fasterxml/jackson/databind/deser/std/StdKeyDeserializer.java com/fasterxml/jackson/databind/deser/std/StdKeyDeserializers.java com/fasterxml/jackson/databind/deser/std/StdNodeBasedDeserializer.java com/fasterxml/jackson/databind/deser/std/StdScalarDeserializer.java com/fasterxml/jackson/databind/deser/std/StdValueInstantiator.java com/fasterxml/jackson/databind/deser/std/StringArrayDeserializer.java com/fasterxml/jackson/databind/deser/std/StringCollectionDeserializer.java com/fasterxml/jackson/databind/deser/std/StringDeserializer.java com/fasterxml/jackson/databind/deser/std/ThrowableDeserializer.java com/fasterxml/jackson/databind/deser/std/TokenBufferDeserializer.java com/fasterxml/jackson/databind/deser/std/UUIDDeserializer.java com/fasterxml/jackson/databind/deser/std/UntypedObjectDeserializer.java com/fasterxml/jackson/databind/exc/InvalidFormatException.java com/fasterxml/jackson/databind/ext/CoreXMLDeserializers.java com/fasterxml/jackson/databind/ext/CoreXMLSerializers.java com/fasterxml/jackson/databind/ext/DOMDeserializer.java com/fasterxml/jackson/databind/ext/DOMSerializer.java com/fasterxml/jackson/databind/ext/OptionalHandlerFactory.java com/fasterxml/jackson/databind/ext/PathDeserializer.java com/fasterxml/jackson/databind/introspect/AnnotatedConstructor.java com/fasterxml/jackson/databind/introspect/AnnotatedField.java com/fasterxml/jackson/databind/introspect/AnnotatedMember.java com/fasterxml/jackson/databind/introspect/AnnotatedMethod.java com/fasterxml/jackson/databind/introspect/AnnotationIntrospectorPair.java com/fasterxml/jackson/databind/introspect/BasicClassIntrospector.java com/fasterxml/jackson/databind/introspect/ConcreteBeanPropertyBase.java com/fasterxml/jackson/databind/introspect/JacksonAnnotationIntrospector.java com/fasterxml/jackson/databind/introspect/NopAnnotationIntrospector.java com/fasterxml/jackson/databind/introspect/SimpleMixInResolver.java com/fasterxml/jackson/databind/introspect/VirtualAnnotatedMember.java com/fasterxml/jackson/databind/introspect/VisibilityChecker.java com/fasterxml/jackson/databind/jsontype/NamedType.java com/fasterxml/jackson/databind/jsontype/TypeDeserializer.java com/fasterxml/jackson/databind/jsontype/TypeSerializer.java com/fasterxml/jackson/databind/jsontype/impl/AsArrayTypeDeserializer.java com/fasterxml/jackson/databind/jsontype/impl/AsArrayTypeSerializer.java com/fasterxml/jackson/databind/jsontype/impl/AsExistingPropertyTypeSerializer.java com/fasterxml/jackson/databind/jsontype/impl/AsExternalTypeSerializer.java com/fasterxml/jackson/databind/jsontype/impl/AsPropertyTypeDeserializer.java com/fasterxml/jackson/databind/jsontype/impl/AsPropertyTypeSerializer.java com/fasterxml/jackson/databind/jsontype/impl/AsWrapperTypeDeserializer.java com/fasterxml/jackson/databind/jsontype/impl/AsWrapperTypeSerializer.java com/fasterxml/jackson/databind/jsontype/impl/StdSubtypeResolver.java com/fasterxml/jackson/databind/jsontype/impl/TypeDeserializerBase.java com/fasterxml/jackson/databind/module/SimpleAbstractTypeResolver.java com/fasterxml/jackson/databind/module/SimpleDeserializers.java com/fasterxml/jackson/databind/module/SimpleKeyDeserializers.java com/fasterxml/jackson/databind/module/SimpleModule.java com/fasterxml/jackson/databind/module/SimpleSerializers.java com/fasterxml/jackson/databind/module/SimpleValueInstantiators.java com/fasterxml/jackson/databind/node/ArrayNode.java com/fasterxml/jackson/databind/node/BaseJsonNode.java com/fasterxml/jackson/databind/node/BigIntegerNode.java com/fasterxml/jackson/databind/node/BinaryNode.java com/fasterxml/jackson/databind/node/BooleanNode.java com/fasterxml/jackson/databind/node/DecimalNode.java com/fasterxml/jackson/databind/node/DoubleNode.java com/fasterxml/jackson/databind/node/FloatNode.java com/fasterxml/jackson/databind/node/IntNode.java com/fasterxml/jackson/databind/node/JsonNodeFactory.java com/fasterxml/jackson/databind/node/LongNode.java com/fasterxml/jackson/databind/node/MissingNode.java com/fasterxml/jackson/databind/node/NullNode.java com/fasterxml/jackson/databind/node/ObjectNode.java com/fasterxml/jackson/databind/node/POJONode.java com/fasterxml/jackson/databind/node/ShortNode.java com/fasterxml/jackson/databind/node/TextNode.java com/fasterxml/jackson/databind/node/TreeTraversingParser.java com/fasterxml/jackson/databind/node/ValueNode.java com/fasterxml/jackson/databind/ser/BasicSerializerFactory.java com/fasterxml/jackson/databind/ser/BeanPropertyWriter.java com/fasterxml/jackson/databind/ser/BeanSerializer.java com/fasterxml/jackson/databind/ser/BeanSerializerFactory.java com/fasterxml/jackson/databind/ser/DefaultSerializerProvider.java com/fasterxml/jackson/databind/ser/PropertyWriter.java com/fasterxml/jackson/databind/ser/VirtualBeanPropertyWriter.java com/fasterxml/jackson/databind/ser/impl/BeanAsArraySerializer.java com/fasterxml/jackson/databind/ser/impl/FailingSerializer.java com/fasterxml/jackson/databind/ser/impl/FilteredBeanPropertyWriter.java com/fasterxml/jackson/databind/ser/impl/IndexedListSerializer.java com/fasterxml/jackson/databind/ser/impl/IndexedStringListSerializer.java com/fasterxml/jackson/databind/ser/impl/IteratorSerializer.java com/fasterxml/jackson/databind/ser/impl/MapEntrySerializer.java com/fasterxml/jackson/databind/ser/impl/SimpleBeanPropertyFilter.java com/fasterxml/jackson/databind/ser/impl/SimpleFilterProvider.java com/fasterxml/jackson/databind/ser/impl/StringArraySerializer.java com/fasterxml/jackson/databind/ser/impl/StringCollectionSerializer.java com/fasterxml/jackson/databind/ser/impl/TypeWrappedSerializer.java com/fasterxml/jackson/databind/ser/impl/UnknownSerializer.java com/fasterxml/jackson/databind/ser/impl/UnwrappingBeanPropertyWriter.java com/fasterxml/jackson/databind/ser/impl/UnwrappingBeanSerializer.java com/fasterxml/jackson/databind/ser/impl/WritableObjectId.java com/fasterxml/jackson/databind/ser/std/ArraySerializerBase.java com/fasterxml/jackson/databind/ser/std/AsArraySerializerBase.java com/fasterxml/jackson/databind/ser/std/AtomicReferenceSerializer.java com/fasterxml/jackson/databind/ser/std/BeanSerializerBase.java com/fasterxml/jackson/databind/ser/std/BooleanSerializer.java com/fasterxml/jackson/databind/ser/std/ByteArraySerializer.java com/fasterxml/jackson/databind/ser/std/ByteBufferSerializer.java com/fasterxml/jackson/databind/ser/std/CalendarSerializer.java com/fasterxml/jackson/databind/ser/std/ClassSerializer.java com/fasterxml/jackson/databind/ser/std/CollectionSerializer.java com/fasterxml/jackson/databind/ser/std/DateSerializer.java com/fasterxml/jackson/databind/ser/std/DateTimeSerializerBase.java com/fasterxml/jackson/databind/ser/std/EnumSerializer.java com/fasterxml/jackson/databind/ser/std/EnumSetSerializer.java com/fasterxml/jackson/databind/ser/std/FileSerializer.java com/fasterxml/jackson/databind/ser/std/InetAddressSerializer.java com/fasterxml/jackson/databind/ser/std/InetSocketAddressSerializer.java com/fasterxml/jackson/databind/ser/std/IterableSerializer.java com/fasterxml/jackson/databind/ser/std/JsonValueSerializer.java com/fasterxml/jackson/databind/ser/std/MapProperty.java com/fasterxml/jackson/databind/ser/std/MapSerializer.java com/fasterxml/jackson/databind/ser/std/NonTypedScalarSerializerBase.java com/fasterxml/jackson/databind/ser/std/NullSerializer.java com/fasterxml/jackson/databind/ser/std/NumberSerializer.java com/fasterxml/jackson/databind/ser/std/NumberSerializers.java com/fasterxml/jackson/databind/ser/std/ObjectArraySerializer.java com/fasterxml/jackson/databind/ser/std/RawSerializer.java com/fasterxml/jackson/databind/ser/std/SerializableSerializer.java com/fasterxml/jackson/databind/ser/std/SqlDateSerializer.java com/fasterxml/jackson/databind/ser/std/SqlTimeSerializer.java com/fasterxml/jackson/databind/ser/std/StdArraySerializers.java com/fasterxml/jackson/databind/ser/std/StdDelegatingSerializer.java com/fasterxml/jackson/databind/ser/std/StdJdkSerializers.java com/fasterxml/jackson/databind/ser/std/StdKeySerializer.java com/fasterxml/jackson/databind/ser/std/StdKeySerializers.java com/fasterxml/jackson/databind/ser/std/StdScalarSerializer.java com/fasterxml/jackson/databind/ser/std/StdSerializer.java com/fasterxml/jackson/databind/ser/std/StringSerializer.java com/fasterxml/jackson/databind/ser/std/TimeZoneSerializer.java com/fasterxml/jackson/databind/ser/std/ToStringSerializer.java com/fasterxml/jackson/databind/ser/std/TokenBufferSerializer.java com/fasterxml/jackson/databind/ser/std/UUIDSerializer.java com/fasterxml/jackson/databind/type/ClassKey.java com/fasterxml/jackson/databind/type/TypeBase.java com/fasterxml/jackson/databind/type/TypeBindings.java com/fasterxml/jackson/databind/type/TypeFactory.java com/fasterxml/jackson/databind/type/TypeParser.java com/fasterxml/jackson/databind/util/ByteBufferBackedInputStream.java com/fasterxml/jackson/databind/util/ByteBufferBackedOutputStream.java com/fasterxml/jackson/databind/util/CompactStringObjectMap.java com/fasterxml/jackson/databind/util/EnumResolver.java com/fasterxml/jackson/databind/util/EnumValues.java com/fasterxml/jackson/databind/util/ISO8601Utils.java com/fasterxml/jackson/databind/util/JSONPObject.java com/fasterxml/jackson/databind/util/JSONWrappedObject.java com/fasterxml/jackson/databind/util/LRUMap.java com/fasterxml/jackson/databind/util/NameTransformer.java com/fasterxml/jackson/databind/util/RawValue.java com/fasterxml/jackson/databind/util/RootNameLookup.java com/fasterxml/jackson/databind/util/TokenBuffer.java com/fasterxml/jackson/databind/util/ViewMatcher.java com/microblink/hardware/DeviceManager.java com/microblink/locale/LanguageUtils.java com/microblink/nineoldandroids/animation/AnimatorInflater.java com/microblink/results/barcode/BarcodeDetailedData.java com/microblink/util/IllIIIllII.java com/microblink/util/Log.java com/microblink/view/recognition/llIIlIlIIl.java org/codehaus/jackson/JsonFactory.java org/codehaus/jackson/JsonGenerator.java org/codehaus/jackson/JsonLocation.java org/codehaus/jackson/JsonNode.java org/codehaus/jackson/JsonParser.java org/codehaus/jackson/JsonProcessingException.java org/codehaus/jackson/ObjectCodec.java org/codehaus/jackson/PrettyPrinter.java org/codehaus/jackson/format/DataFormatDetector.java org/codehaus/jackson/format/DataFormatMatcher.java org/codehaus/jackson/format/InputAccessor.java org/codehaus/jackson/impl/ByteSourceBootstrapper.java org/codehaus/jackson/impl/Indenter.java org/codehaus/jackson/impl/JsonGeneratorBase.java org/codehaus/jackson/impl/JsonParserBase.java org/codehaus/jackson/impl/JsonParserMinimalBase.java org/codehaus/jackson/impl/ReaderBasedParser.java org/codehaus/jackson/impl/ReaderBasedParserBase.java org/codehaus/jackson/impl/StreamBasedParserBase.java org/codehaus/jackson/impl/Utf8Generator.java org/codehaus/jackson/impl/Utf8StreamParser.java org/codehaus/jackson/impl/WriterBasedGenerator.java org/codehaus/jackson/io/BaseReader.java org/codehaus/jackson/io/InputDecorator.java org/codehaus/jackson/io/MergedStream.java org/codehaus/jackson/io/OutputDecorator.java org/codehaus/jackson/io/SegmentedStringWriter.java org/codehaus/jackson/io/UTF32Reader.java org/codehaus/jackson/io/UTF8Writer.java org/codehaus/jackson/map/DeserializationContext.java org/codehaus/jackson/map/DeserializationProblemHandler.java org/codehaus/jackson/map/JsonDeserializer.java org/codehaus/jackson/map/JsonMappingException.java org/codehaus/jackson/map/JsonSerializable.java org/codehaus/jackson/map/JsonSerializableWithType.java org/codehaus/jackson/map/JsonSerializer.java org/codehaus/jackson/map/KeyDeserializer.java org/codehaus/jackson/map/MappingIterator.java org/codehaus/jackson/map/MappingJsonFactory.java org/codehaus/jackson/map/ObjectMapper.java org/codehaus/jackson/map/ObjectReader.java org/codehaus/jackson/map/ObjectWriter.java org/codehaus/jackson/map/SerializerProvider.java org/codehaus/jackson/map/TypeDeserializer.java org/codehaus/jackson/map/TypeSerializer.java org/codehaus/jackson/map/deser/AbstractDeserializer.java org/codehaus/jackson/map/deser/BeanDeserializer.java org/codehaus/jackson/map/deser/JsonNodeDeserializer.java org/codehaus/jackson/map/deser/SettableAnyProperty.java org/codehaus/jackson/map/deser/SettableBeanProperty.java org/codehaus/jackson/map/deser/StdDeserializationContext.java org/codehaus/jackson/map/deser/StdDeserializer.java org/codehaus/jackson/map/deser/StdDeserializerProvider.java org/codehaus/jackson/map/deser/ValueInstantiator.java org/codehaus/jackson/map/deser/impl/CreatorProperty.java org/codehaus/jackson/map/deser/impl/ExternalTypeHandler.java org/codehaus/jackson/map/deser/impl/PropertyBasedCreator.java org/codehaus/jackson/map/deser/impl/PropertyValue.java org/codehaus/jackson/map/deser/impl/UnwrappedPropertyHandler.java org/codehaus/jackson/map/deser/impl/ValueInjector.java org/codehaus/jackson/map/deser/std/AtomicBooleanDeserializer.java org/codehaus/jackson/map/deser/std/AtomicReferenceDeserializer.java org/codehaus/jackson/map/deser/std/BaseNodeDeserializer.java org/codehaus/jackson/map/deser/std/CalendarDeserializer.java org/codehaus/jackson/map/deser/std/ClassDeserializer.java org/codehaus/jackson/map/deser/std/CollectionDeserializer.java org/codehaus/jackson/map/deser/std/DateDeserializer.java org/codehaus/jackson/map/deser/std/EnumDeserializer.java org/codehaus/jackson/map/deser/std/EnumMapDeserializer.java org/codehaus/jackson/map/deser/std/EnumSetDeserializer.java org/codehaus/jackson/map/deser/std/FromStringDeserializer.java org/codehaus/jackson/map/deser/std/JavaTypeDeserializer.java org/codehaus/jackson/map/deser/std/JsonNodeDeserializer.java org/codehaus/jackson/map/deser/std/MapDeserializer.java org/codehaus/jackson/map/deser/std/ObjectArrayDeserializer.java org/codehaus/jackson/map/deser/std/PrimitiveArrayDeserializers.java org/codehaus/jackson/map/deser/std/StdDeserializer.java org/codehaus/jackson/map/deser/std/StdKeyDeserializer.java org/codehaus/jackson/map/deser/std/StdScalarDeserializer.java org/codehaus/jackson/map/deser/std/StdValueInstantiator.java org/codehaus/jackson/map/deser/std/StringCollectionDeserializer.java org/codehaus/jackson/map/deser/std/StringDeserializer.java org/codehaus/jackson/map/deser/std/ThrowableDeserializer.java org/codehaus/jackson/map/deser/std/TimestampDeserializer.java org/codehaus/jackson/map/deser/std/TokenBufferDeserializer.java org/codehaus/jackson/map/deser/std/UntypedObjectDeserializer.java org/codehaus/jackson/map/ext/CoreXMLDeserializers.java org/codehaus/jackson/map/ext/CoreXMLSerializers.java org/codehaus/jackson/map/ext/DOMDeserializer.java org/codehaus/jackson/map/ext/DOMSerializer.java org/codehaus/jackson/map/ext/JodaDeserializers.java org/codehaus/jackson/map/ext/JodaSerializers.java org/codehaus/jackson/map/jsontype/impl/AsArrayTypeDeserializer.java org/codehaus/jackson/map/jsontype/impl/AsArrayTypeSerializer.java org/codehaus/jackson/map/jsontype/impl/AsExternalTypeSerializer.java org/codehaus/jackson/map/jsontype/impl/AsPropertyTypeDeserializer.java org/codehaus/jackson/map/jsontype/impl/AsPropertyTypeSerializer.java org/codehaus/jackson/map/jsontype/impl/AsWrapperTypeDeserializer.java org/codehaus/jackson/map/jsontype/impl/AsWrapperTypeSerializer.java org/codehaus/jackson/map/jsontype/impl/TypeDeserializerBase.java org/codehaus/jackson/map/ser/BeanSerializer.java org/codehaus/jackson/map/ser/StdSerializerProvider.java org/codehaus/jackson/map/ser/StdSerializers.java org/codehaus/jackson/map/ser/impl/FailingSerializer.java org/codehaus/jackson/map/ser/impl/UnknownSerializer.java org/codehaus/jackson/map/ser/impl/UnwrappingBeanSerializer.java org/codehaus/jackson/map/ser/std/AsArraySerializerBase.java org/codehaus/jackson/map/ser/std/BeanSerializerBase.java org/codehaus/jackson/map/ser/std/CalendarSerializer.java org/codehaus/jackson/map/ser/std/CollectionSerializer.java org/codehaus/jackson/map/ser/std/DateSerializer.java org/codehaus/jackson/map/ser/std/EnumMapSerializer.java org/codehaus/jackson/map/ser/std/EnumSerializer.java org/codehaus/jackson/map/ser/std/EnumSetSerializer.java org/codehaus/jackson/map/ser/std/IndexedStringListSerializer.java org/codehaus/jackson/map/ser/std/InetAddressSerializer.java org/codehaus/jackson/map/ser/std/IterableSerializer.java org/codehaus/jackson/map/ser/std/JsonValueSerializer.java org/codehaus/jackson/map/ser/std/MapSerializer.java org/codehaus/jackson/map/ser/std/NonTypedScalarSerializerBase.java org/codehaus/jackson/map/ser/std/NullSerializer.java org/codehaus/jackson/map/ser/std/ObjectArraySerializer.java org/codehaus/jackson/map/ser/std/RawSerializer.java org/codehaus/jackson/map/ser/std/ScalarSerializerBase.java org/codehaus/jackson/map/ser/std/SerializableSerializer.java org/codehaus/jackson/map/ser/std/SerializableWithTypeSerializer.java org/codehaus/jackson/map/ser/std/SerializerBase.java org/codehaus/jackson/map/ser/std/StdArraySerializers.java org/codehaus/jackson/map/ser/std/StdContainerSerializers.java org/codehaus/jackson/map/ser/std/StdJdkSerializers.java org/codehaus/jackson/map/ser/std/StdKeySerializer.java org/codehaus/jackson/map/ser/std/StdKeySerializers.java org/codehaus/jackson/map/ser/std/StringCollectionSerializer.java org/codehaus/jackson/map/ser/std/StringSerializer.java org/codehaus/jackson/map/ser/std/TimeZoneSerializer.java org/codehaus/jackson/map/ser/std/ToStringSerializer.java org/codehaus/jackson/map/ser/std/TokenBufferSerializer.java org/codehaus/jackson/map/type/TypeBase.java org/codehaus/jackson/map/util/JSONPObject.java org/codehaus/jackson/map/util/JSONWrappedObject.java org/codehaus/jackson/node/ArrayNode.java org/codehaus/jackson/node/BaseJsonNode.java org/codehaus/jackson/node/BigIntegerNode.java org/codehaus/jackson/node/BinaryNode.java org/codehaus/jackson/node/BooleanNode.java org/codehaus/jackson/node/DecimalNode.java org/codehaus/jackson/node/DoubleNode.java org/codehaus/jackson/node/IntNode.java org/codehaus/jackson/node/LongNode.java org/codehaus/jackson/node/MissingNode.java org/codehaus/jackson/node/NullNode.java org/codehaus/jackson/node/ObjectNode.java org/codehaus/jackson/node/POJONode.java org/codehaus/jackson/node/TextNode.java org/codehaus/jackson/node/TreeTraversingParser.java org/codehaus/jackson/node/ValueNode.java org/codehaus/jackson/util/ByteArrayBuilder.java org/codehaus/jackson/util/DefaultPrettyPrinter.java org/codehaus/jackson/util/JsonGeneratorDelegate.java org/codehaus/jackson/util/JsonParserDelegate.java org/codehaus/jackson/util/JsonParserSequence.java org/codehaus/jackson/util/MinimalPrettyPrinter.java org/codehaus/jackson/util/TokenBuffer.java org/codehaus/jackson/util/VersionUtil.java org/jf/dexlib2/DexFileFactory.java org/jf/dexlib2/analysis/ClassPath.java org/jf/dexlib2/analysis/CustomInlineMethodResolver.java org/jf/dexlib2/analysis/DumpFields.java org/jf/dexlib2/analysis/DumpVtables.java org/jf/dexlib2/analysis/RegisterType.java org/jf/dexlib2/dexbacked/DexBackedDexFile.java org/jf/dexlib2/dexbacked/DexBackedOdexFile.java org/jf/dexlib2/dexbacked/OatFile.java org/jf/dexlib2/dexbacked/raw/RawDexFile.java org/jf/dexlib2/dexbacked/raw/util/DexAnnotator.java org/jf/dexlib2/util/AnnotatedBytes.java org/jf/dexlib2/util/ReferenceUtil.java org/jf/dexlib2/writer/ClassSection.java org/jf/dexlib2/writer/DebugWriter.java org/jf/dexlib2/writer/DexDataWriter.java org/jf/dexlib2/writer/DexWriter.java org/jf/dexlib2/writer/EncodedValueWriter.java org/jf/dexlib2/writer/InstructionWriter.java org/jf/dexlib2/writer/builder/BuilderClassPool.java org/jf/dexlib2/writer/builder/DexBuilder.java org/jf/dexlib2/writer/io/DeferredOutputStream.java org/jf/dexlib2/writer/io/DeferredOutputStreamFactory.java org/jf/dexlib2/writer/io/DexDataStore.java org/jf/dexlib2/writer/io/FileDataStore.java org/jf/dexlib2/writer/io/FileDeferredOutputStream.java org/jf/dexlib2/writer/io/MemoryDataStore.java org/jf/dexlib2/writer/io/MemoryDeferredOutputStream.java org/jf/dexlib2/writer/pool/ClassPool.java org/jf/dexlib2/writer/pool/DexPool.java org/kobjects/base64/Base64.java org/kobjects/crypt/Crypt.java org/kobjects/io/BoundInputStream.java org/kobjects/io/LookAheadReader.java org/kobjects/mime/Decoder.java org/kobjects/pim/PimParser.java org/kobjects/pim/PimWriter.java org/kobjects/rss/RssReader.java org/kobjects/util/Util.java org/kobjects/xml/XmlReader.java org/kobjects/xmlrpc/Driver.java org/kobjects/xmlrpc/XmlRpcParser.java org/ksoap2/SoapEnvelope.java org/ksoap2/SoapFault.java org/ksoap2/SoapFault12.java org/ksoap2/serialization/DM.java org/ksoap2/serialization/Marshal.java org/ksoap2/serialization/MarshalBase64.java org/ksoap2/serialization/MarshalDate.java org/ksoap2/serialization/MarshalFloat.java org/ksoap2/serialization/MarshalHashtable.java org/ksoap2/serialization/PropertyInfo.java org/ksoap2/serialization/SoapSerializationEnvelope.java org/ksoap2/transport/HttpResponseException.java org/ksoap2/transport/HttpTransportSE.java org/ksoap2/transport/HttpsServiceConnectionSE.java org/ksoap2/transport/HttpsServiceConnectionSEIgnoringConnectionClose.java org/ksoap2/transport/HttpsTransportSE.java org/ksoap2/transport/KeepAliveHttpTransportSE.java org/ksoap2/transport/KeepAliveHttpsTransportSE.java org/ksoap2/transport/ServiceConnection.java org/ksoap2/transport/ServiceConnectionSE.java org/ksoap2/transport/Transport.java org/kxml2/io/KXmlParser.java org/kxml2/io/KXmlSerializer.java org/kxml2/kdom/Document.java org/kxml2/kdom/Element.java org/kxml2/kdom/Node.java org/kxml2/wap/WbxmlParser.java org/kxml2/wap/WbxmlSerializer.java org/kxml2/wap/wv/WV.java org/restlet/Component.java org/restlet/Message.java org/restlet/Request.java org/restlet/Response.java org/restlet/data/ClientInfo.java org/restlet/data/Form.java org/restlet/data/LocalReference.java org/restlet/data/MediaType.java org/restlet/data/Parameter.java org/restlet/data/Reference.java org/restlet/data/ReferenceList.java org/restlet/engine/Engine.java org/restlet/engine/adapter/Call.java org/restlet/engine/adapter/ClientCall.java org/restlet/engine/adapter/HttpRequest.java org/restlet/engine/adapter/ServerAdapter.java org/restlet/engine/adapter/ServerCall.java org/restlet/engine/application/DecodeRepresentation.java org/restlet/engine/application/EncodeRepresentation.java org/restlet/engine/application/RangeRepresentation.java org/restlet/engine/application/StatusInfo.java org/restlet/engine/application/TunnelFilter.java org/restlet/engine/connector/FtpClientHelper.java org/restlet/engine/connector/HttpClientHelper.java org/restlet/engine/connector/HttpUrlConnectionCall.java org/restlet/engine/converter/ConverterHelper.java org/restlet/engine/converter/ConverterUtils.java org/restlet/engine/converter/DefaultConverter.java org/restlet/engine/converter/StatusInfoHtmlConverter.java org/restlet/engine/header/CacheDirectiveReader.java org/restlet/engine/header/ChallengeRequestReader.java org/restlet/engine/header/ContentType.java org/restlet/engine/header/ContentTypeReader.java org/restlet/engine/header/CookieReader.java org/restlet/engine/header/CookieSettingReader.java org/restlet/engine/header/DimensionReader.java org/restlet/engine/header/DispositionReader.java org/restlet/engine/header/EncodingReader.java org/restlet/engine/header/ExpectationReader.java org/restlet/engine/header/HeaderReader.java org/restlet/engine/header/HeaderUtils.java org/restlet/engine/header/LanguageReader.java org/restlet/engine/header/MethodReader.java org/restlet/engine/header/PreferenceReader.java org/restlet/engine/header/RecipientInfoReader.java org/restlet/engine/header/StringReader.java org/restlet/engine/header/TokenReader.java org/restlet/engine/header/WarningReader.java org/restlet/engine/io/InputStreamChannel.java org/restlet/engine/io/IoUtils.java org/restlet/engine/io/NbChannelInputStream.java org/restlet/engine/io/NbChannelOutputStream.java org/restlet/engine/io/PipeStream.java org/restlet/engine/io/RangeInputStream.java org/restlet/engine/io/ReaderInputStream.java org/restlet/engine/io/SelectorFactory.java org/restlet/engine/io/UnclosableInputStream.java org/restlet/engine/io/UnclosableOutputStream.java org/restlet/engine/io/WakeupListener.java org/restlet/engine/io/WriterOutputStream.java org/restlet/engine/local/ClapClientHelper.java org/restlet/engine/local/DirectoryServerResource.java org/restlet/engine/local/FileClientHelper.java org/restlet/engine/local/FileEntity.java org/restlet/engine/local/ZipClientHelper.java org/restlet/engine/local/ZipEntryRepresentation.java org/restlet/engine/log/AccessLogFileHandler.java org/restlet/engine/log/IdentClient.java org/restlet/engine/log/SimplerFormatter.java org/restlet/engine/log/SimplestFormatter.java org/restlet/engine/resource/AnnotationUtils.java org/restlet/engine/resource/MethodAnnotationInfo.java org/restlet/engine/security/AuthenticatorHelper.java org/restlet/engine/security/AuthenticatorUtils.java org/restlet/engine/security/HttpBasicHelper.java org/restlet/engine/security/SmtpPlainHelper.java org/restlet/engine/ssl/DefaultSslContextFactory.java org/restlet/engine/ssl/WrapperSslServerSocketFactory.java org/restlet/engine/ssl/WrapperSslSocketFactory.java org/restlet/engine/util/AlphabeticalComparator.java org/restlet/engine/util/DefaultSaxHandler.java org/restlet/engine/util/EngineClassLoader.java org/restlet/engine/util/FormReader.java org/restlet/engine/util/FormUtils.java org/restlet/ext/httpclient/HttpClientHelper.java org/restlet/ext/httpclient/internal/HttpMethodCall.java org/restlet/ext/jackson/JacksonConverter.java org/restlet/ext/jackson/JacksonRepresentation.java org/restlet/ext/json/JsonConverter.java org/restlet/ext/json/JsonRepresentation.java org/restlet/ext/json/JsonpRepresentation.java org/restlet/representation/AppendableRepresentation.java org/restlet/representation/BufferingRepresentation.java org/restlet/representation/ByteArrayRepresentation.java org/restlet/representation/ChannelRepresentation.java org/restlet/representation/CharacterRepresentation.java org/restlet/representation/DigesterRepresentation.java org/restlet/representation/EmptyRepresentation.java org/restlet/representation/FileRepresentation.java org/restlet/representation/InputRepresentation.java org/restlet/representation/ObjectRepresentation.java org/restlet/representation/OutputRepresentation.java org/restlet/representation/ReadableRepresentation.java org/restlet/representation/ReaderRepresentation.java org/restlet/representation/Representation.java org/restlet/representation/StreamRepresentation.java org/restlet/representation/StringRepresentation.java org/restlet/representation/WritableRepresentation.java org/restlet/representation/WriterRepresentation.java org/restlet/resource/ClientResource.java org/restlet/resource/Resource.java org/restlet/resource/ServerResource.java org/restlet/service/ConverterService.java org/restlet/util/ByteReadingListener.java org/restlet/util/CharacterReadingListener.java org/restlet/util/ReadingListener.java org/restlet/util/SelectionListener.java org/restlet/util/SelectionRegistration.java org/restlet/util/StringReadingListener.java org/restlet/util/WrapperRepresentation.java org/springframework/core/NestedIOException.java org/springframework/core/io/AbstractFileResolvingResource.java org/springframework/core/io/AbstractResource.java org/springframework/core/io/AssetResource.java org/springframework/core/io/ByteArrayResource.java org/springframework/core/io/ClassPathResource.java org/springframework/core/io/FileSystemResource.java org/springframework/core/io/InputStreamResource.java org/springframework/core/io/InputStreamSource.java org/springframework/core/io/Resource.java org/springframework/core/io/UrlResource.java org/springframework/core/io/WritableResource.java org/springframework/http/HttpInputMessage.java org/springframework/http/HttpOutputMessage.java org/springframework/http/client/AbstractBufferingClientHttpRequest.java org/springframework/http/client/AbstractClientHttpRequest.java org/springframework/http/client/AbstractClientHttpRequestFactoryWrapper.java org/springframework/http/client/AbstractClientHttpResponse.java org/springframework/http/client/BufferingClientHttpRequestFactory.java org/springframework/http/client/BufferingClientHttpRequestWrapper.java org/springframework/http/client/BufferingClientHttpResponseWrapper.java org/springframework/http/client/ClientHttpRequest.java org/springframework/http/client/ClientHttpRequestExecution.java org/springframework/http/client/ClientHttpRequestFactory.java org/springframework/http/client/ClientHttpRequestInterceptor.java org/springframework/http/client/ClientHttpResponse.java org/springframework/http/client/CommonsClientHttpRequest.java org/springframework/http/client/CommonsClientHttpRequestFactory.java org/springframework/http/client/CommonsClientHttpResponse.java org/springframework/http/client/HttpComponentsClientHttpRequest.java org/springframework/http/client/HttpComponentsClientHttpRequestFactory.java org/springframework/http/client/HttpComponentsClientHttpResponse.java org/springframework/http/client/InterceptingClientHttpRequest.java org/springframework/http/client/SimpleBufferingClientHttpRequest.java org/springframework/http/client/SimpleClientHttpRequestFactory.java org/springframework/http/client/SimpleClientHttpResponse.java org/springframework/http/client/SimpleStreamingClientHttpRequest.java org/springframework/http/client/support/HttpAccessor.java org/springframework/http/converter/AbstractHttpMessageConverter.java org/springframework/http/converter/ByteArrayHttpMessageConverter.java org/springframework/http/converter/FormHttpMessageConverter.java org/springframework/http/converter/HttpMessageConverter.java org/springframework/http/converter/ResourceHttpMessageConverter.java org/springframework/http/converter/StringHttpMessageConverter.java org/springframework/http/converter/feed/AbstractWireFeedHttpMessageConverter.java org/springframework/http/converter/feed/SyndFeedHttpMessageConverter.java org/springframework/http/converter/json/GsonHttpMessageConverter.java org/springframework/http/converter/json/MappingJackson2HttpMessageConverter.java org/springframework/http/converter/json/MappingJacksonHttpMessageConverter.java org/springframework/http/converter/xml/AbstractXmlHttpMessageConverter.java org/springframework/http/converter/xml/SimpleXmlHttpMessageConverter.java org/springframework/http/converter/xml/SourceHttpMessageConverter.java org/springframework/util/Base64Utils.java org/springframework/util/CollectionUtils.java org/springframework/util/FileCopyUtils.java org/springframework/util/LinkedMultiValueMap.java org/springframework/util/ResourceUtils.java org/springframework/util/support/Base64.java org/springframework/web/client/DefaultResponseErrorHandler.java org/springframework/web/client/HttpMessageConverterExtractor.java org/springframework/web/client/HttpStatusCodeException.java org/springframework/web/client/RequestCallback.java org/springframework/web/client/ResourceAccessException.java org/springframework/web/client/ResponseErrorHandler.java org/springframework/web/client/ResponseExtractor.java org/springframework/web/client/RestTemplate.java org/springframework/web/util/UriComponents.java org/springframework/web/util/UriTemplate.java org/springframework/web/util/UriUtils.java
调用java反射机制	显示文件 com/fasterxml/jackson/core/util/VersionUtil.java com/fasterxml/jackson/databind/BeanDescription.java com/fasterxml/jackson/databind/deser/BasicDeserializerFactory.java com/fasterxml/jackson/databind/deser/impl/FieldProperty.java com/fasterxml/jackson/databind/deser/impl/MethodProperty.java com/fasterxml/jackson/databind/deser/impl/SetterlessProperty.java com/fasterxml/jackson/databind/deser/std/EnumDeserializer.java com/fasterxml/jackson/databind/deser/std/StdKeyDeserializer.java com/fasterxml/jackson/databind/deser/std/StdKeyDeserializers.java com/fasterxml/jackson/databind/ext/OptionalHandlerFactory.java com/fasterxml/jackson/databind/introspect/AnnotatedClass.java com/fasterxml/jackson/databind/introspect/AnnotatedField.java com/fasterxml/jackson/databind/introspect/AnnotatedMethod.java com/fasterxml/jackson/databind/introspect/AnnotatedMethodMap.java com/fasterxml/jackson/databind/introspect/BasicBeanDescription.java com/fasterxml/jackson/databind/introspect/JacksonAnnotationIntrospector.java com/fasterxml/jackson/databind/introspect/MemberKey.java com/fasterxml/jackson/databind/introspect/VirtualAnnotatedMember.java com/fasterxml/jackson/databind/introspect/VisibilityChecker.java com/fasterxml/jackson/databind/ser/BasicSerializerFactory.java com/fasterxml/jackson/databind/ser/BeanPropertyWriter.java com/fasterxml/jackson/databind/ser/std/JsonValueSerializer.java com/fasterxml/jackson/databind/type/TypeFactory.java com/fasterxml/jackson/databind/util/ClassUtil.java com/fasterxml/jackson/databind/util/EnumResolver.java com/honeywell/mobility/print/Printer.java com/microblink/nineoldandroids/animation/PropertyValuesHolder.java com/microblink/nineoldandroids/util/ReflectiveProperty.java org/codehaus/jackson/map/deser/BasicDeserializerFactory.java org/codehaus/jackson/map/deser/SettableAnyProperty.java org/codehaus/jackson/map/deser/SettableBeanProperty.java org/codehaus/jackson/map/deser/std/ClassDeserializer.java org/codehaus/jackson/map/deser/std/EnumDeserializer.java org/codehaus/jackson/map/deser/std/StdKeyDeserializer.java org/codehaus/jackson/map/deser/std/StdKeyDeserializers.java org/codehaus/jackson/map/ext/OptionalHandlerFactory.java org/codehaus/jackson/map/introspect/AnnotatedClass.java org/codehaus/jackson/map/introspect/AnnotatedField.java org/codehaus/jackson/map/introspect/AnnotatedMethod.java org/codehaus/jackson/map/introspect/AnnotatedMethodMap.java org/codehaus/jackson/map/introspect/BasicBeanDescription.java org/codehaus/jackson/map/introspect/BasicClassIntrospector.java org/codehaus/jackson/map/introspect/MemberKey.java org/codehaus/jackson/map/introspect/MethodFilter.java org/codehaus/jackson/map/introspect/VisibilityChecker.java org/codehaus/jackson/map/ser/AnyGetterWriter.java org/codehaus/jackson/map/ser/BasicSerializerFactory.java org/codehaus/jackson/map/ser/BeanPropertyWriter.java org/codehaus/jackson/map/ser/PropertyBuilder.java org/codehaus/jackson/map/ser/std/JsonValueSerializer.java org/codehaus/jackson/map/util/ClassUtil.java org/jf/dexlib2/analysis/reflection/ReflectionClassDef.java org/jf/dexlib2/analysis/reflection/ReflectionField.java org/jf/dexlib2/analysis/reflection/ReflectionMethod.java org/kobjects/util/ChainedRuntimeException.java org/ksoap2/serialization/MarshalFloat.java org/ksoap2/serialization/SoapObject.java org/ksoap2/serialization/SoapSerializationEnvelope.java org/restlet/engine/adapter/HttpClientHelper.java org/restlet/engine/resource/AnnotationInfo.java org/restlet/engine/resource/AnnotationUtils.java org/restlet/engine/resource/ClientInvocationHandler.java org/restlet/engine/resource/MethodAnnotationInfo.java org/restlet/engine/ssl/SslUtils.java org/restlet/engine/util/EngineClassLoader.java org/restlet/representation/ObjectRepresentation.java org/springframework/core/GenericCollectionTypeResolver.java org/springframework/core/GenericTypeResolver.java org/springframework/core/MethodParameter.java org/springframework/core/ParameterNameDiscoverer.java org/springframework/util/ClassUtils.java org/springframework/util/ReflectionUtils.java org/springframework/util/support/Base64.java
一般功能-> IPC通信	显示文件 co/gov/minminas/subsidiosGLP/actividad/EscanerBarras.java co/gov/minminas/subsidiosGLP/publico/RegistroSubsidio.java co/gov/minminas/subsidiosGLP/sms/MmsReciver.java co/gov/minminas/subsidiosGLP/sms/SmsReciver.java co/gov/minminas/subsidiosGLP/sms/SmsResponse.java co/gov/minminas/subsidiosGLP/util/PermisosUtil.java com/bexsoluciones/bexmovilprovigas/Aprobar.java com/bexsoluciones/bexmovilprovigas/CalcularSubsidio.java com/bexsoluciones/bexmovilprovigas/CuestionarioSubsidios.java com/bexsoluciones/bexmovilprovigas/DetalleSubsidio.java com/bexsoluciones/bexmovilprovigas/Home.java com/bexsoluciones/bexmovilprovigas/InicioSubsidios.java com/bexsoluciones/bexmovilprovigas/R.java com/glp/subsidiosonline/R.java com/honeywell/mobility/print/AndroidPrinter.java com/intermec/print/service/ILinePrintListener.java com/intermec/print/service/ILinePrintService.java com/microblink/activity/BaseScanActivity.java com/microblink/activity/Pdf417ScanActivity.java com/microblink/view/overlay/IlIllIlIIl.java
进程操作-> 杀死进程	com/bexsoluciones/bexmovilprovigas/LocationUtils.java org/jf/dexlib2/analysis/DumpFields.java org/jf/dexlib2/analysis/DumpVtables.java
隐私数据-> 获取GPS位置信息	com/bexsoluciones/bexmovilprovigas/LocationUtils.java
进程操作-> 获取进程pid	com/bexsoluciones/bexmovilprovigas/LocationUtils.java
网络通信-> HTTP建立连接	显示文件 co/gov/minminas/subsidiosGLP/publico/Mediador.java org/ksoap2/transport/HttpTransportSE.java org/ksoap2/transport/ServiceConnectionSE.java org/restlet/engine/connector/ConnectionClosingRepresentation.java org/restlet/engine/connector/HttpUrlConnectionCall.java org/restlet/ext/httpclient/HttpClientHelper.java org/restlet/ext/httpclient/internal/HttpMethodCall.java org/restlet/resource/Delete.java org/restlet/resource/Get.java org/restlet/resource/Options.java org/restlet/resource/Post.java org/restlet/resource/Put.java org/springframework/core/io/AbstractFileResolvingResource.java org/springframework/core/io/UrlResource.java org/springframework/http/client/HttpComponentsClientHttpRequest.java org/springframework/http/client/HttpComponentsClientHttpRequestFactory.java org/springframework/http/client/SimpleBufferingClientHttpRequest.java org/springframework/http/client/SimpleClientHttpRequestFactory.java org/springframework/http/client/SimpleClientHttpResponse.java org/springframework/http/client/SimpleStreamingClientHttpRequest.java
DEX-> 动态加载	显示文件 co/gov/minminas/subsidiosGLP/publico/Mediador.java com/fasterxml/jackson/databind/introspect/AnnotatedClass.java org/restlet/engine/Engine.java org/restlet/engine/adapter/HttpServerHelper.java org/restlet/engine/component/ComponentXmlParser.java org/restlet/engine/util/EngineClassLoader.java org/restlet/ext/httpclient/HttpClientHelper.java org/springframework/util/ClassUtils.java
网络通信-> HTTP请求、连接和会话	显示文件 org/restlet/ext/httpclient/HttpClientHelper.java org/restlet/ext/httpclient/internal/HttpIdleConnectionReaper.java org/springframework/http/client/HttpComponentsClientHttpRequest.java org/springframework/http/client/HttpComponentsClientHttpRequestFactory.java
网络通信-> DefaultHttpClient Connection	org/restlet/ext/httpclient/HttpClientHelper.java org/springframework/http/client/HttpComponentsClientHttpRequestFactory.java
一般功能-> 获取系统服务(getSystemService)	显示文件 co/gov/minminas/subsidiosGLP/publico/Mediador.java com/bexsoluciones/bexmovilprovigas/Utils.java com/microblink/activity/Pdf417ScanActivity.java com/microblink/hardware/accelerometer/llIIlIlIIl.java com/microblink/hardware/camera/llIIlIlIIl.java com/microblink/hardware/orientation/llIIlIlIIl.java com/microblink/util/DeviceInformation.java
隐私数据-> 剪贴板数据读写操作	com/microblink/activity/Pdf417ScanActivity.java
网络通信-> SSL证书处理	显示文件 org/ksoap2/transport/HttpsServiceConnectionSE.java org/restlet/engine/ssl/WrapperSslContextSpi.java org/restlet/engine/ssl/WrapperSslSocketFactory.java org/springframework/http/client/HttpComponentsClientHttpRequestFactory.java
网络通信-> URLConnection	显示文件 org/restlet/engine/Engine.java org/restlet/engine/connector/FtpClientHelper.java org/springframework/core/io/AbstractFileResolvingResource.java org/springframework/core/io/UrlResource.java org/springframework/http/client/SimpleClientHttpRequestFactory.java
隐私数据-> 拍照摄像	com/microblink/hardware/camera/llIIlIIlll.java com/microblink/hardware/camera/llIIlIlIIl.java
网络通信-> TCP服务器套接字	org/restlet/engine/connector/ServerHelper.java org/restlet/engine/ssl/WrapperSslServerSocketFactory.java
组件-> 启动 Activity	显示文件 co/gov/minminas/subsidiosGLP/actividad/EscanerBarras.java co/gov/minminas/subsidiosGLP/util/PermisosUtil.java com/bexsoluciones/bexmovilprovigas/Aprobar.java com/bexsoluciones/bexmovilprovigas/CalcularSubsidio.java com/bexsoluciones/bexmovilprovigas/CuestionarioSubsidios.java com/bexsoluciones/bexmovilprovigas/DetalleSubsidio.java com/bexsoluciones/bexmovilprovigas/Home.java com/bexsoluciones/bexmovilprovigas/InicioSubsidios.java com/microblink/activity/BaseScanActivity.java com/microblink/view/overlay/IlIllIlIIl.java
加密解密-> Crypto加解密组件	com/datecs/api/rfid/ISO14443Card.java
网络通信-> HTTPS建立连接	org/ksoap2/transport/HttpsServiceConnectionSE.java org/restlet/engine/connector/HttpUrlConnectionCall.java
加密解密-> 信息摘要算法	com/microblink/security/llIIlIlIIl.java org/jf/dexlib2/writer/DexWriter.java org/restlet/representation/DigesterRepresentation.java
网络通信-> TCP套接字	org/restlet/engine/connector/HttpUrlConnectionCall.java org/restlet/engine/log/IdentClient.java org/restlet/engine/ssl/WrapperSslSocketFactory.java
网络通信-> Volley Connection	com/bexsoluciones/bexmovilprovigas/CalcularSubsidio.java
网络通信-> OkHttpClient Connection	com/bexsoluciones/bexmovilprovigas/ApiClient.java
一般功能-> 传感器相关操作	com/microblink/hardware/accelerometer/llIIlIlIIl.java
一般功能-> 加载so文件	com/microblink/recognition/NativeRecognizerWrapper.java com/microblink/recognition/ResourceManager.java
组件-> 启动 Service	com/honeywell/mobility/print/AndroidPrinter.java
加密解密-> Base64 加密	org/springframework/util/Base64Utils.java
加密解密-> Base64 解密	org/springframework/util/Base64Utils.java

安全漏洞检测

高危

2

警告

6

信息

2

安全

1

屏蔽

0

序号	问题	等级	参考标准	文件位置	操作
1	应用程序记录日志信息,不得记录敏感信息	信息	CWE: CWE-532: 通过日志文件的信息暴露 OWASP MASVS: MSTG-STORAGE-3	升级会员：解锁高级权限	对应用 com.glp.subsidiosonline 屏蔽 android_logging 规则仅对这些文件屏蔽 android_logging 规则
2	文件可能包含硬编码的敏感信息，如用户名、密码、密钥等	警告	CWE: CWE-312: 明文存储敏感信息 OWASP Top 10: M9: Reverse Engineering OWASP MASVS: MSTG-STORAGE-14	升级会员：解锁高级权限	对应用 com.glp.subsidiosonline 屏蔽 android_hardcoded 规则仅对这些文件屏蔽 android_hardcoded 规则
3	此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它	信息	OWASP MASVS: MSTG-STORAGE-10	升级会员：解锁高级权限	对应用 com.glp.subsidiosonline 屏蔽 android_clipboard_copy 规则仅对这些文件屏蔽 android_clipboard_copy 规则
4	应用程序使用不安全的随机数生成器	警告	CWE: CWE-330: 使用不充分的随机数 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-6	升级会员：解锁高级权限	对应用 com.glp.subsidiosonline 屏蔽 android_insecure_random 规则仅对这些文件屏蔽 android_insecure_random 规则
5	使用弱加密算法	高危	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4	升级会员：解锁高级权限	对应用 com.glp.subsidiosonline 屏蔽 android_weak_ciphers 规则仅对这些文件屏蔽 android_weak_ciphers 规则
6	应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据	警告	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	升级会员：解锁高级权限	对应用 com.glp.subsidiosonline 屏蔽 android_read_write_external 规则仅对这些文件屏蔽 android_read_write_external 规则
7	应用程序创建临时文件。敏感信息永远不应该被写进临时文件	警告	CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2	升级会员：解锁高级权限	对应用 com.glp.subsidiosonline 屏蔽 android_temp_file 规则仅对这些文件屏蔽 android_temp_file 规则
8	SHA-1是已知存在哈希冲突的弱哈希	警告	CWE: CWE-327: 使用已被攻破或存在风险的密码学算法 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-4	升级会员：解锁高级权限	对应用 com.glp.subsidiosonline 屏蔽 android_sha1 规则仅对这些文件屏蔽 android_sha1 规则
9	IP地址泄露	警告	CWE: CWE-200: 信息泄露 OWASP MASVS: MSTG-CODE-2	升级会员：解锁高级权限	对应用 com.glp.subsidiosonline 屏蔽 android_ip_disclosure 规则仅对这些文件屏蔽 android_ip_disclosure 规则
10	此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击	安全	OWASP MASVS: MSTG-NETWORK-4	升级会员：解锁高级权限	对应用 com.glp.subsidiosonline 屏蔽 android_ssl_pinning 规则仅对这些文件屏蔽 android_ssl_pinning 规则
11	启用了调试配置。生产版本不能是可调试的	高危	CWE: CWE-919: 移动应用程序中的弱点 OWASP Top 10: M1: Improper Platform Usage OWASP MASVS: MSTG-RESILIENCE-2	升级会员：解锁高级权限	对应用 com.glp.subsidiosonline 屏蔽 android_aar_jar_debug_enabled 规则仅对这些文件屏蔽 android_aar_jar_debug_enabled 规则

Native库安全分析

序号	动态库	NX(堆栈禁止执行)	PIE	STACK CANARY(栈保护)	RELRO	RPATH（指定SO搜索路径）	RUNPATH（指定SO搜索路径）	FORTIFY(常用函数加强检查)	SYMBOLS STRIPPED(裁剪符号表)
1	armeabi/libBlinkBarcode.so	True info 二进制文件设置了 NX 位。这标志着内存页面不可执行，使得攻击者注入的 shellcode 不可执行。		True info 这个二进制文件在栈上添加了一个栈哨兵值，以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出	Full RELRO info 此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中，整个 GOT（.got 和 .got.plt 两者）被标记为只读。	None info 二进制文件没有设置运行时搜索路径或RPATH	None info 二进制文件没有设置 RUNPATH	False warning 二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数（如 strcpy，gets 等）的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用	False warning 符号可用

文件分析

序号	问题	文件

敏感权限分析

恶意软件常用权限 5/30

android.permission.READ_PHONE_STATE
android.permission.CAMERA
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.WAKE_LOCK

其它常用权限 10/46

android.permission.FLASHLIGHT
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.ACCESS_WIFI_STATE
com.google.android.c2dm.permission.RECEIVE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE

恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。

IP地理位置

恶意域名检测

域名	状态	中国境内	位置信息
gcm-client-datagas.firebaseio.com	安全	否	IP地址: 34.120.206.254 国家: United States of America 地区: Missouri 城市: Kansas City 查看: Google 地图
login.live.com	安全	否	IP地址: 20.190.144.166 国家: Korea (Republic of) 地区: Seoul-teukbyeolsi 城市: Seoul 查看: Google 地图
restlet.org	安全	否	IP地址: 147.75.40.150 国家: United States of America 地区: New York 城市: New York City 查看: Google 地图
goo.gl	安全	否	IP地址: 142.250.217.174 国家: United States of America 地区: California 城市: Mountain View 查看: Google 地图
www.webdav.org	安全	否	IP地址: 140.211.9.38 国家: United States of America 地区: Oregon 城市: Eugene 查看: Google 地图
www.linkedin.com	安全	是	IP地址: 52.130.75.155 国家: China 地区: Shanghai 城市: Shanghai 查看: 高德地图
www.paypal.com	安全	否	IP地址: 192.229.232.89 国家: Japan 地区: Tokyo 城市: Tokyo 查看: Google 地图
www.openmobilealliance.org	安全	否	IP地址: 104.26.8.105 国家: United States of America 地区: California 城市: San Francisco 查看: Google 地图
pdf417.mobi	安全	否	IP地址: 172.67.134.202 国家: United States of America 地区: California 城市: San Francisco 查看: Google 地图
provigas.bexsoluciones.com	安全	否	IP地址: 35.188.44.247 国家: United States of America 地区: Iowa 城市: Council Bluffs 查看: Google 地图
www.wireless-village.org	安全	否	IP地址: 172.67.131.214 国家: United States of America 地区: California 城市: San Francisco 查看: Google 地图
schema.org	安全	否	IP地址: 192.178.50.46 国家: United States of America 地区: California 城市: Mountain View 查看: Google 地图
twitter.com	安全	否	IP地址: 104.244.42.1 国家: United States of America 地区: California 城市: San Francisco 查看: Google 地图
login.yahoo.com	安全	否	IP地址: 106.10.248.157 国家: Singapore 地区: Singapore 城市: Singapore 查看: Google 地图
pagead2.googlesyndication.com	安全	否	IP地址: 142.250.64.130 国家: United States of America 地区: California 城市: Mountain View 查看: Google 地图
tools.ietf.org	安全	否	IP地址: 104.16.45.99 国家: United States of America 地区: Texas 城市: Dallas 查看: Google 地图
webglp.minminas.gov.co	安全	否	IP地址: 179.1.211.143 国家: Colombia 地区: Antioquia 城市: Medellin 查看: Google 地图
schemas.xmlsoap.org	安全	否	IP地址: 13.107.213.58 国家: United States of America 地区: Washington 城市: Redmond 查看: Google 地图

手机号提取

URL链接分析

URL信息	源码文件
http://webglp.minminas.gov.co:8081/libreria?idMovil=	co/gov/minminas/subsidiosGLP/publico/Mediador.java
https://provigas.bexsoluciones.com/bexmovil/api/	com/bexsoluciones/bexmovilprovigas/ApiClient.java
https://provigas.bexsoluciones.com/bexmovil/api/datastock/?apikey=16e35825b92499c930a33be03f6f4ba597fd9e8b&method=getCalculoSubsidios&deviceid=	com/bexsoluciones/bexmovilprovigas/CalcularSubsidio.java
https://provigas.bexsoluciones.com/bexmovil/api/	com/bexsoluciones/bexmovilprovigas/InicioSubsidios.java
https://provigas.bexsoluciones.com/bexmovil/api/datastock/?apikey=16e35825b92499c930a33be03f6f4ba597fd9e8b&method=getCalculoSubsidios http://3.223.225.176/api/v1/datagas/echo https://provigas.bexsoluciones.com/bexmovil/api/datastock/?apikey=16e35825b92499c930a33be03f6f4ba597fd9e8b&method=	com/bexsoluciones/bexmovilprovigas/model/Constants.java
http://pdf417.mobi	com/microblink/view/overlay/IlIllIlIIl.java
file:///	org/kobjects/util/Util.java
http://schemas.xmlsoap.org/soap/encoding/ http://schemas.xmlsoap.org/soap/envelope/	org/ksoap2/SoapEnvelope.java
http://xml.apache.org/xml-soap	org/ksoap2/serialization/MarshalHashtable.java
http://www.wireless-village.org/CSP http://www.wireless-village.org/PA http://www.wireless-village.org/TRC http://www.openmobilealliance.org/DTD/WV-CSP http://www.openmobilealliance.org/DTD/WV-PA http://www.openmobilealliance.org/DTD/WV-TRC www.wireless-village.org	org/kxml2/wap/wv/WV.java
http://www.webdav.org/specs/rfc2518.html http://www.webdav.org/specs/rfc2518.html#METHOD_COPY http://www.webdav.org/specs/rfc2518.html#METHOD_LOCK http://www.webdav.org/specs/rfc2518.html#METHOD_MKCOL http://www.webdav.org/specs/rfc2518.html#METHOD_MOVE http://tools.ietf.org/html/rfc5789 http://www.webdav.org/specs/rfc2518.html#METHOD_PROPFIND http://www.webdav.org/specs/rfc2518.html#METHOD_PROPPATCH http://www.webdav.org/specs/rfc2518.html#METHOD_UNLOCK	org/restlet/data/Method.java
http://tools.ietf.org/html/rfc6585 http://www.webdav.org/specs/rfc2518.html http://restlet.org/learn/javadocs/2.3/ http://www.webdav.org/specs/rfc2518.html#STATUS_102 http://www.webdav.org/specs/rfc2518.html#STATUS_207 http://www.webdav.org/specs/rfc2518.html#STATUS_422 http://www.webdav.org/specs/rfc2518.html#STATUS_423 http://www.webdav.org/specs/rfc2518.html#STATUS_424 http://tools.ietf.org/html/rfc6585#section-4 http://www.webdav.org/specs/rfc2518.html#STATUS_507	org/restlet/data/Status.java
https://github.com/restlet/restlet-framework-java/issues/778),	org/restlet/representation/ObjectRepresentation.java
http://schema.org/ListenAction http://schema.org/SearchAction https://plus.google.com/ http://schema.org/FilmAction https://accounts.google.com http://schema.org/PhotographAction http://schema.org/WantAction https://twitter.com https://www.googleapis.com/auth/drive.appdata https://www.facebook.com https://www.googleapis.com/auth/plus.login https://www.linkedin.com https://www.googleapis.com/auth/drive http://hostname/? https://www.googleapis.com/auth/fitness.body.write https://www.googleapis.com/auth/plus.me https://www.googleapis.com/auth/fitness.activity.write https://www.googleapis.com/auth/drive.apps https://www.googleapis.com/auth/drive.file https://gcm-client-datagas.firebaseio.com https://www.googleapis.com/auth/datastoremobile https://login.live.com http://goo.gl/8Rd3yj http://schema.org/CommunicateAction https://www.googleapis.com/auth/games https://pagead2.googlesyndication.com/pagead/gen_204?id=gmob-apps http://schema.org/ActiveActionStatus https://www.paypal.com http://schema.org/AddAction https://login.yahoo.com http://schema.org/FailedActionStatus https://www.googleapis.com/auth/fitness.body.read http://schema.org/ReserveAction https://www.googleapis.com/auth/fitness.location.read http://schema.org/BookmarkAction http://webglp.minminas.gov.co:8081/libreria?idMovil= http://schema.org/LikeAction https://www.googleapis.com/auth/appstate http://schema.org/ViewAction data:image/png;base64, https://www.googleapis.com/auth/games_lite https://www.googleapis.com/auth/fitness.nutrition.write https://www.googleapis.com/auth/fitness.location.write http://schema.org/CompletedActionStatus https://www.googleapis.com/auth/fitness.nutrition.read https://www.googleapis.com/auth/games.firstparty https://www.googleapis.com/auth/fitness.activity.read http://schema.org/ActivateAction http://schema.org/WatchAction	自研引擎分析结果

Firebase配置检测

标题	严重程度	描述信息

邮箱地址提取

EMAIL	源码文件
android@android.com0	自研引擎分析结果
yay@y.u5vcghyy	lib/armeabi/libBlinkBarcode.so

第三方追踪器

名称	类别	网址
Google AdMob	Advertisement	https://reports.exodus-privacy.eu.org/trackers/312
Google Analytics	Analytics	https://reports.exodus-privacy.eu.org/trackers/48
Google CrashLytics	Crash reporting	https://reports.exodus-privacy.eu.org/trackers/27
Google Firebase Analytics	Analytics	https://reports.exodus-privacy.eu.org/trackers/49
Google Tag Manager	Analytics	https://reports.exodus-privacy.eu.org/trackers/105

敏感凭证泄露

已显示 4 个secrets

1、 "google_api_key" : "AIzaSyBVEwb57re0jihe8LaisyMEa5KdCy6K2jk"
2、 "firebase_database_url" : "https://gcm-client-datagas.firebaseio.com"
3、 "google_crash_reporting_api_key" : "AIzaSyBVEwb57re0jihe8LaisyMEa5KdCy6K2jk"
4、 16e35825b92499c930a33be03f6f4ba597fd9e8b

字符串信息

建议导出为TXT，方便查看。

活动列表

显示 12 个 activities

服务列表

显示 8 个 services

广播接收者列表

显示 6 个 receivers

内容提供者列表

显示 1 个 providers

1 . com.google.firebase.provider.FirebaseInitProvider

第三方SDK

SDK名称	开发者	描述信息
Google Sign-In	Google	提供使用 Google 登录的 API。
Google Play Service	Google	借助 Google Play 服务，您的应用可以利用由 Google 提供的最新功能，例如地图，Google+ 等，并通过 Google Play 商店以 APK 的形式分发自动平台更新。这样一来，您的用户可以更快地接收更新，并且可以更轻松地集成 Google 必须提供的最新信息。
File Provider	Android	FileProvider 是 ContentProvider 的特殊子类，它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。
Firebase	Google	Firebase 提供了分析、数据库、消息传递和崩溃报告等功能，可助您快速采取行动并专注于您的用户。
Google Analytics	Google	提供各种 API，可帮助您收集、配置和报告用户与您的在线内容进行互动的数据。
Google Cast	Google	使用 Google Cast SDK，您可以扩展 Android，iOS 或 Chrome 应用，以将其流式视频和音频定向到电视或声音系统。您的应用程序成为播放，暂停，搜索，倒带，停止和控制媒体的遥控器。
Firebase Analytics	Google	Google Analytics（分析）是一款免费的应用衡量解决方案，可提供关于应用使用情况和用户互动度的分析数据。

污点分析

当apk较大时，代码量会很大，造成数据流图（ICFG）呈现爆炸式增长，所以该功能比较耗时，请先喝杯咖啡，耐心等待……

规则名称	描述信息	操作
病毒分析	使用安卓恶意软件常用的API进行污点分析	开始分析
漏洞挖掘	漏洞挖掘场景下的污点分析	开始分析
隐私合规	隐私合规场景下的污点分析：组件内污点传播、组件间污点传播、组件与库函数之间的污点传播	开始分析
密码分析	分析加密算法是否使用常量密钥、静态初始化的向量（IV）、加密模式是否使用ECB等	开始分析
Callback	因为Android中系统级的Callback并不会出现显式地进行回调方法的调用，所以如果需要分析Callback方法需要在声明文件中将其声明，这里提供一份AndroidCallbacks.txt文件，里面是一些常见的原生回调接口或类，如果有特殊接口需求，可以联系管理员	开始分析