温馨提示:本平台仅供研究软件风险、安全评估,禁止用于非法用途。由于展示的数据过于全面,请耐心等待加载完成。如有疑问或建议, 可加入我们的微信群讨论

APP评分

病毒检测 无法判定

安全评分

文件信息

文件名称 and.apk
文件大小 16.03MB
MD5 fb49124dcdc7cf5bb1d1fc4abb13a370
SHA1 4b8b19aff334cc1d272b5bcf661a354dcb78e858
SHA256 887d0c02bb5d7d6a13a11aa64a991c47002d38720964b7f27895f0c29bfc493e

应用信息

应用名称 小财迷
包名 com.h841827844.rcb
主活动 com.uzmap.pkg.LauncherUI
目标SDK 26     最小SDK 21
版本号 0.0.26     子版本号 26
加固信息 未加壳

组件导出信息

反编译代码

Manifest文件 查看
APK文件 下载
Java源代码 查看 -- 下载

证书信息

二进制文件已签名
v1 签名: True
v2 签名: True
v3 签名: False
v4 签名: False
主题: C=(zh), ST=(Beijing), L=(Beijing), O=(841827844@qq.com), OU=(841827844@qq.com), CN=(j841827844)
签名算法: rsassa_pkcs1v15
有效期自: 2022-05-25 08:41:37+00:00
有效期至: 2122-05-01 08:41:37+00:00
发行人: C=(zh), ST=(Beijing), L=(Beijing), O=(841827844@qq.com), OU=(841827844@qq.com), CN=(j841827844)
序列号: 0x23eb468f
哈希算法: sha256
证书MD5: db2d9bfa5df13cbbb6ef0819d79f3ca0
证书SHA1: 6de20e2bb4eea5f65d72f9c82dde6953cc73095d
证书SHA256: 91d2ae46e82a42c9014e1ea735444dc9f164408fb371b9cf89ead9e8fd164e16
证书SHA512: e4d3236b81a6e041692188d531483fd80b15ce5d1a3606a4e6f07fc0b14274dc09517793553f056e92fb58d92f14ad7268e2cbc360492db841c66ad3cc3aa5ec
公钥算法: rsa
密钥长度: 1024
指纹: 5960da97d1458cd512d4a2474c18c67d124e684558cae8ea2bc740880ab3e8a5
找到 1 个唯一证书

应用程序权限

权限名称 安全等级 权限内容 权限描述 关联代码
android.permission.INTERNET 危险 完全互联网访问 允许应用程序创建网络套接字。
com/apicloud/a/a/c.java
com/apicloud/dvcontacts/utils/ImageUtil.java
com/apicloud/meiqiaplus/Utils/ImageUtil.java
com/deepe/c/j/d/g.java
com/deepe/c/j/e/c.java
com/deepe/c/j/k.java
com/deepe/c/l/a/b.java
com/eclipsesource/v8/debug/V8DebugServer.java
com/lidroid/xutils/HttpUtils.java
com/lidroid/xutils/bitmap/download/DefaultDownloader.java
com/lidroid/xutils/http/RequestParams.java
com/lidroid/xutils/http/ResponseInfo.java
com/lidroid/xutils/http/ResponseStream.java
com/lidroid/xutils/http/SyncHttpHandler.java
com/lidroid/xutils/http/callback/DefaultHttpRedirectHandler.java
com/lidroid/xutils/http/callback/FileDownloadHandler.java
com/lidroid/xutils/http/callback/StringDownloadHandler.java
com/lidroid/xutils/http/client/HttpRequest.java
com/lidroid/xutils/http/client/entity/BodyParamsEntity.java
com/lidroid/xutils/http/client/entity/DecompressingEntity.java
com/lidroid/xutils/http/client/entity/GZipDecompressingEntity.java
com/lidroid/xutils/http/client/entity/InputStreamUploadEntity.java
com/lidroid/xutils/http/client/multipart/HttpMultipart.java
com/lidroid/xutils/http/client/multipart/MultipartEntity.java
com/meiqia/core/MeiQiaService.java
com/meiqia/core/a/e.java
com/meiqia/core/h.java
com/nostra13/universalimageloader/core/download/BaseImageDownloader.java
com/uzmap/pkg/b/c/o.java
com/uzmap/pkg/uzcore/i/b/a.java
com/uzmap/pkg/uzmodules/uzimageBrowser/AsyncImageLoader.java
com/uzmap/pkg/uzmodules/uzimageBrowser/ImageLoader.java
com/uzmap/pkg/uzmodules/uzimageBrowser/utils/ImageDownLoader.java
com.huawei.android.launcher.permission.CHANGE_BADGE 普通 在应用程序上显示通知计数 在华为手机的应用程序启动图标上显示通知计数或徽章。
android.permission.WRITE_EXTERNAL_STORAGE 危险 读取/修改/删除外部存储内容 允许应用程序写入外部存储。
android.permission.ACCESS_COARSE_LOCATION 危险 获取粗略位置 通过WiFi或移动基站的方式获取用户错略的经纬度信息,定位精度大概误差在30~1500米。恶意程序可以用它来确定您的大概位置。
android.permission.ACCESS_FINE_LOCATION 危险 获取精确位置 通过GPS芯片接收卫星的定位信息,定位精度达10米以内。恶意程序可以用它来确定您所在的位置。
android.permission.ACCESS_NETWORK_STATE 普通 获取网络状态 允许应用程序查看所有网络的状态。
android.permission.ACCESS_WIFI_STATE 普通 查看Wi-Fi状态 允许应用程序查看有关Wi-Fi状态的信息。
android.permission.WAKE_LOCK 危险 防止手机休眠 允许应用程序防止手机休眠,在手机屏幕关闭后后台进程仍然运行。
android.permission.VIBRATE 普通 控制振动器 允许应用程序控制振动器,用于消息通知振动功能。
android.permission.CAMERA 危险 拍照和录制视频 允许应用程序拍摄照片和视频,且允许应用程序收集相机在任何时候拍到的图像。
android.permission.SEND_SMS 危险 发送短信 允许应用程序发送短信。恶意应用程序可能会不经您的确认就发送信息,给您带来费用。
android.permission.READ_CONTACTS 危险 读取联系人信息 允允许应用程序读取您手机上存储的所有联系人(地址)数据。恶意应用程序可借此将您的数据发送给其他人。
android.permission.WRITE_CONTACTS 危险 写入联系人信息 允许应用程序修改您手机上存储的联系人(地址)数据。恶意应用程序可借此清除或修改您的联系人数据。
android.permission.RECORD_AUDIO 危险 获取录音权限 允许应用程序获取录音权限。
android.permission.FLASHLIGHT 普通 控制闪光灯 允许应用程序控制闪光灯。
android.permission.BLUETOOTH_ADMIN 危险 管理蓝牙 允许程序发现和配对新的蓝牙设备。
android.permission.BLUETOOTH 危险 创建蓝牙连接 允许应用程序查看或创建蓝牙连接。
android.permission.FOREGROUND_SERVICE 普通 创建前台Service Android 9.0以上允许常规应用程序使用 Service.startForeground,用于podcast播放(推送悬浮播放,锁屏播放)
android.permission.REQUEST_INSTALL_PACKAGES 危险 允许安装应用程序 Android8.0 以上系统允许安装未知来源应用程序权限。
android.permission.READ_EXTERNAL_STORAGE 危险 读取SD卡内容 允许应用程序从SD卡读取信息。
android.permission.READ_SMS 危险 读取短信 允许应用程序读取您的手机或 SIM 卡中存储的短信。恶意应用程序可借此读取您的机密信息。
android.permission.ACCESS_MOCK_LOCATION 危险 获取模拟定位信息 获取模拟定位信息,一般用于帮助开发者调试应用。恶意程序可以用它来覆盖真实位置信息源。
android.permission.READ_LOGS 危险 读取系统日志文件 允许应用程序从系统的各日志文件中读取信息。这样应用程序可以发现您的手机使用情况,这些信息还可能包含用户个人信息或保密信息,造成隐私数据泄露。
android.permission.READ_CALENDAR 危险 读取日历活动 允许应用程序读取您手机上存储的所有日历活动。恶意应用程序可借此将您的日历活动发送给其他人。
android.permission.WRITE_CALENDAR 危险 添加或修改日历活动以及向邀请对象发送电子邮件 允许应用程序添加或更改日历中的活动,这可能会向邀请对象发送电子邮件。恶意应用程序可能会借此清除或修改您的日历活动,或者向邀请对象发送电子邮件。
android.permission.BODY_SENSORS 危险 授予对身体传感器的访问权限,例如心率 允许应用程序访问来自传感器的数据,用户使用这些传感器来测量身体内部发生的事情,例如心率。
android.permission.RECEIVE_SMS 危险 接收短信 允许应用程序接收短信。 恶意程序会在用户未知的情况下监视或删除。
android.permission.BLUETOOTH_SCAN 危险 新蓝牙运行时权限 Android 12 系统引入了新的运行时权限,需要能够发现和配对附近的蓝牙设备。
android.permission.BLUETOOTH_ADVERTISE 危险 新蓝牙运行时权限 Android 12 系统引入了新的运行时权限,需要能够向附近的蓝牙设备进行广告。
android.permission.BLUETOOTH_CONNECT 危险 新蓝牙运行时权限 Android 12 系统引入了新的运行时权限,需要能够连接到配对的蓝牙设备。
android.permission.READ_MEDIA_IMAGES 危险 允许从外部存储读取图像文件 允许应用程序从外部存储读取图像文件。
android.permission.READ_MEDIA_VIDEO 危险 允许从外部存储读取视频文件 允许应用程序从外部存储读取视频文件。
android.permission.READ_MEDIA_AUDIO 危险 允许从外部存储读取音频文件 允许应用程序从外部存储读取音频文件。
com.h841827844.rcb.permission.JPUSH_MESSAGE 未知 未知权限 来自 android 引用的未知权限。
android.permission.POST_NOTIFICATIONS 危险 发送通知的运行时权限 允许应用发布通知,Android 13 引入的新权限。
com.vivo.notification.permission.BADGE_ICON 普通 桌面图标角标 vivo平台桌面图标角标,接入vivo平台后需要用户手动开启,开启完成后收到新消息时,在已安装的应用桌面图标右上角显示“数字角标”。
android.permission.ACCESS_BACKGROUND_LOCATION 危险 获取后台定位权限 允许应用程序访问后台位置。如果您正在请求此权限,则还必须请求ACCESS COARSE LOCATION或ACCESS FINE LOCATION。单独请求此权限不会授予您位置访问权限。
android.permission.QUERY_ALL_PACKAGES 普通 获取已安装应用程序列表 Android 11引入与包可见性相关的权限,允许查询设备上的任何普通应用程序,而不考虑清单声明。
android.permission.GET_TASKS 危险 检索当前运行的应用程序 允许应用程序检索有关当前和最近运行的任务的信息。恶意应用程序可借此发现有关其他应用程序的保密信息。
com.h841827844.rcb.permission.MIPUSH_RECEIVE 未知 未知权限 来自 android 引用的未知权限。
com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE 未知 未知权限 来自 android 引用的未知权限。
com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE 未知 未知权限 来自 android 引用的未知权限。
com.meizu.flyme.permission.PUSH 未知 未知权限 来自 android 引用的未知权限。

证书分析

高危
0
警告
1
信息
1
标题 严重程度 描述信息
已签名应用 信息 应用程序已使用代码签名证书进行签名

MANIFEST分析

高危
7
警告
9
信息
0
屏蔽
0
序号 问题 严重程度 描述信息 操作
1 应用程序可以安装在有漏洞的已更新 Android 版本上
Android 5.0-5.0.2, [minSdk=21]
信息 该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。
2 应用程序已启用明文网络流量
[android:usesCleartextTraffic=true]
警告 应用程序打算使用明文网络流量,例如明文HTTP,FTP协议,DownloadManager和MediaPlayer。针对API级别27或更低的应用程序,默认值为“true”。针对API级别28或更高的应用程序,默认值为“false”。避免使用明文流量的主要原因是缺乏机密性,真实性和防篡改保护;网络攻击者可以窃听传输的数据,并且可以在不被检测到的情况下修改它。
3 Activity (com.uzmap.pkg.LauncherUI) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (26) 更新到 29 或更高版本以在平台级别修复此问题。
4 Activity (com.uzmap.pkg.EntranceActivity) 容易受到 Android Task Hijacking/StrandHogg 的攻击。 高危 活动不应将启动模式属性设置为“singleTask”。 然后,其他应用程序可以将恶意活动放置在活动栈顶部,从而导致任务劫持/StrandHogg 1.0 漏洞。 这使应用程序成为网络钓鱼攻击的易受攻击目标。 可以通过将启动模式属性设置为“singleInstance”或设置空 taskAffinity (taskAffinity="") 属性来修复此漏洞。 您还可以将应用的目标 SDK 版本 (26) 更新到 28 或更高版本以在平台级别修复此问题。
5 Activity (cn.jpush.android.ui.PopWinActivity) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (26) 更新到 29 或更高版本以在平台级别修复此问题。
6 Activity (cn.jpush.android.ui.PopWinActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
7 Activity (cn.jpush.android.ui.PushActivity) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (26) 更新到 29 或更高版本以在平台级别修复此问题。
8 Activity (cn.jpush.android.ui.PushActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
9 Content Provider (cn.jpush.android.service.DownloadProvider) 未被保护。
[android:exported=true]
警告 发现 Content Provider与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
10 Activity (cn.jpush.android.service.JNotifyActivity) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (26) 更新到 29 或更高版本以在平台级别修复此问题。
11 Activity (cn.jpush.android.service.JNotifyActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
12 Activity (cn.android.service.JTransitActivity) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (26) 更新到 29 或更高版本以在平台级别修复此问题。
13 Activity (cn.android.service.JTransitActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
14 Service (cn.jpush.android.service.DaemonService) 未被保护。
[android:exported=true]
警告 发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
15 Activity (cn.jpush.android.service.DActivity) is vulnerable to StrandHogg 2.0 高危 已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时,其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部,从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (26) 更新到 29 或更高版本以在平台级别修复此问题。
16 Activity (cn.jpush.android.service.DActivity) 未被保护。
[android:exported=true]
警告 发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。
17 高优先级的Intent (1000)
[android:priority]
警告 通过设置一个比另一个Intent更高的优先级,应用程序有效地覆盖了其他请求。

可浏览的ACTIVITIES

ACTIVITY INTENT

网络安全配置

序号 范围 严重级别 描述

API调用分析

API功能 源码文件
组件-> 启动 Activity
一般功能-> 文件操作
com/apicloud/NVNavigationBar/Common.java
com/apicloud/a/a/b.java
com/apicloud/a/a/c.java
com/apicloud/a/a/e.java
com/apicloud/a/c/c.java
com/apicloud/a/d/g.java
com/apicloud/a/g/a/i.java
com/apicloud/a/i/a/ah/a/i.java
com/apicloud/a/i/a/ah/a/j.java
com/apicloud/a/i/a/d/a/b.java
com/apicloud/a/i/a/d/a/c.java
com/apicloud/a/i/a/d/a/e.java
com/apicloud/a/i/a/d/a/f.java
com/apicloud/a/i/a/d/a/o.java
com/apicloud/a/i/a/d/a/p.java
com/apicloud/a/i/a/d/a/q.java
com/apicloud/a/i/a/d/a/r.java
com/apicloud/a/i/a/d/b.java
com/apicloud/a/i/a/d/g.java
com/apicloud/a/i/a/e/c/d.java
com/apicloud/a/i/a/e/e.java
com/apicloud/a/i/a/y/a/h.java
com/apicloud/dialogBox/dialogs/InputBox.java
com/apicloud/dialogBox/dialogs/InputDialog.java
com/apicloud/dialogBox/logger/Logger.java
com/apicloud/dvcontacts/UZDVCModule.java
com/apicloud/dvcontacts/UpdateContact.java
com/apicloud/dvcontacts/utils/ImageUtil.java
com/apicloud/dvcontacts/utils/LogUtil.java
com/apicloud/dvcontacts/utils/MouleUtil.java
com/apicloud/meiqiaplus/Utils/ImageUtil.java
com/apicloud/meiqiaplus/Utils/LogUtil.java
com/apicloud/meiqiaplus/Utils/MouleUtil.java
com/apicloud/third/gif/GifAnimationMetaData.java
com/apicloud/third/gif/GifDecoder.java
com/apicloud/third/gif/GifDrawable.java
com/apicloud/third/gif/GifDrawableInit.java
com/apicloud/third/gif/GifIOException.java
com/apicloud/third/gif/GifInfoHandle.java
com/apicloud/third/gif/GifTexImage2D.java
com/apicloud/third/gif/GifTextView.java
com/apicloud/third/gif/GifTextureView.java
com/apicloud/third/gif/GifViewUtils.java
com/apicloud/third/gif/InputSource.java
com/deepe/a/a/b.java
com/deepe/a/c/c.java
com/deepe/a/c/d.java
com/deepe/a/c/e.java
com/deepe/a/c/f.java
com/deepe/a/d/a/a.java
com/deepe/a/e/a.java
com/deepe/b/a/c.java
com/deepe/b/c/a.java
com/deepe/b/d.java
com/deepe/b/d/a.java
com/deepe/b/d/b.java
com/deepe/b/e.java
com/deepe/b/f.java
com/deepe/b/f/a.java
com/deepe/b/f/b.java
com/deepe/c/a/b.java
com/deepe/c/a/c.java
com/deepe/c/a/d.java
com/deepe/c/a/j.java
com/deepe/c/c/aa.java
com/deepe/c/c/b.java
com/deepe/c/c/e.java
com/deepe/c/c/f.java
com/deepe/c/c/h.java
com/deepe/c/c/j.java
com/deepe/c/c/t.java
com/deepe/c/c/v.java
com/deepe/c/c/w.java
com/deepe/c/f/b.java
com/deepe/c/i/a.java
com/deepe/c/i/g.java
com/deepe/c/j/c/b.java
com/deepe/c/j/c/c.java
com/deepe/c/j/d/a.java
com/deepe/c/j/d/c.java
com/deepe/c/j/d/f.java
com/deepe/c/j/d/g.java
com/deepe/c/j/d/i.java
com/deepe/c/j/d/k.java
com/deepe/c/j/e.java
com/deepe/c/j/e/a/a.java
com/deepe/c/j/e/a/b.java
com/deepe/c/j/e/a/c.java
com/deepe/c/j/e/a/d.java
com/deepe/c/j/e/a/f.java
com/deepe/c/j/e/a/g.java
com/deepe/c/j/e/a/h.java
com/deepe/c/j/e/a/i.java
com/deepe/c/j/e/a/j.java
com/deepe/c/j/e/a/k.java
com/deepe/c/j/e/j.java
com/deepe/c/j/f.java
com/deepe/c/j/j.java
com/deepe/c/j/k.java
com/deepe/c/k/g.java
com/deepe/c/l/a/b.java
com/deepe/c/l/d.java
com/deepe/c/l/i/a.java
com/deepe/f/a/f.java
com/deepe/f/b.java
com/deepe/f/c.java
com/deepe/sdk/RESResponse.java
com/deepe/sdk/StringStream.java
com/eclipsesource/v8/LibraryLoader.java
com/eclipsesource/v8/NodeJS.java
com/eclipsesource/v8/PlatformDetector.java
com/eclipsesource/v8/Releasable.java
com/eclipsesource/v8/debug/V8DebugServer.java
com/jhnrjhnr/baiduTextReader/baiduTextReader.java
com/lidroid/xutils/BitmapUtils.java
com/lidroid/xutils/DbUtils.java
com/lidroid/xutils/HttpUtils.java
com/lidroid/xutils/bitmap/core/BitmapCache.java
com/lidroid/xutils/bitmap/core/BitmapDecoder.java
com/lidroid/xutils/bitmap/download/DefaultDownloader.java
com/lidroid/xutils/bitmap/download/Downloader.java
com/lidroid/xutils/cache/LruDiskCache.java
com/lidroid/xutils/http/HttpHandler.java
com/lidroid/xutils/http/RequestParams.java
com/lidroid/xutils/http/ResponseStream.java
com/lidroid/xutils/http/SyncHttpHandler.java
com/lidroid/xutils/http/callback/FileDownloadHandler.java
com/lidroid/xutils/http/callback/StringDownloadHandler.java
com/lidroid/xutils/http/client/DefaultSSLSocketFactory.java
com/lidroid/xutils/http/client/RetryHandler.java
com/lidroid/xutils/http/client/entity/BodyParamsEntity.java
com/lidroid/xutils/http/client/entity/DecompressingEntity.java
com/lidroid/xutils/http/client/entity/FileUploadEntity.java
com/lidroid/xutils/http/client/entity/GZipDecompressingEntity.java
com/lidroid/xutils/http/client/entity/InputStreamUploadEntity.java
com/lidroid/xutils/http/client/multipart/HttpMultipart.java
com/lidroid/xutils/http/client/multipart/MultipartEntity.java
com/lidroid/xutils/http/client/multipart/content/ByteArrayBody.java
com/lidroid/xutils/http/client/multipart/content/ContentBody.java
com/lidroid/xutils/http/client/multipart/content/FileBody.java
com/lidroid/xutils/http/client/multipart/content/InputStreamBody.java
com/lidroid/xutils/http/client/multipart/content/StringBody.java
com/lidroid/xutils/http/client/util/URLEncodedUtils.java
com/lidroid/xutils/task/PriorityObjectBlockingQueue.java
com/lidroid/xutils/util/IOUtils.java
com/lidroid/xutils/util/OtherUtils.java
com/lidroid/xutils/util/PreferencesCookieStore.java
com/meiqia/core/MQManager.java
com/meiqia/core/MeiQiaService.java
com/meiqia/core/a/a.java
com/meiqia/core/a/b.java
com/meiqia/core/a/e.java
com/meiqia/core/a/i.java
com/meiqia/core/a/k.java
com/meiqia/core/d.java
com/meiqia/core/g.java
com/meiqia/core/h.java
com/nostra13/universalimageloader/cache/disc/DiskCache.java
com/nostra13/universalimageloader/cache/disc/impl/BaseDiskCache.java
com/nostra13/universalimageloader/cache/disc/impl/LimitedAgeDiskCache.java
com/nostra13/universalimageloader/cache/disc/impl/UnlimitedDiskCache.java
com/nostra13/universalimageloader/cache/disc/impl/ext/DiskLruCache.java
com/nostra13/universalimageloader/cache/disc/impl/ext/LruDiskCache.java
com/nostra13/universalimageloader/cache/disc/impl/ext/StrictLineReader.java
com/nostra13/universalimageloader/cache/disc/impl/ext/Util.java
com/nostra13/universalimageloader/core/DefaultConfigurationFactory.java
com/nostra13/universalimageloader/core/ImageLoaderConfiguration.java
com/nostra13/universalimageloader/core/ImageLoaderEngine.java
com/nostra13/universalimageloader/core/LoadAndDisplayImageTask.java
com/nostra13/universalimageloader/core/assist/ContentLengthInputStream.java
com/nostra13/universalimageloader/core/assist/FlushedInputStream.java
com/nostra13/universalimageloader/core/assist/deque/LinkedBlockingDeque.java
com/nostra13/universalimageloader/core/decode/BaseImageDecoder.java
com/nostra13/universalimageloader/core/decode/ImageDecoder.java
com/nostra13/universalimageloader/core/download/BaseImageDownloader.java
com/nostra13/universalimageloader/core/download/ImageDownloader.java
com/nostra13/universalimageloader/utils/DiskCacheUtils.java
com/nostra13/universalimageloader/utils/IoUtils.java
com/nostra13/universalimageloader/utils/StorageUtils.java
com/nrs/utils/tools/CrashHandler.java
com/open/apicloud/jpush/JPushNotification.java
com/open/apicloud/jpush/SharedPrefe.java
com/uzmap/pkg/b/a/g.java
com/uzmap/pkg/b/a/h.java
com/uzmap/pkg/b/c/d.java
com/uzmap/pkg/b/c/j.java
com/uzmap/pkg/b/c/o.java
com/uzmap/pkg/openapi/FileSystem.java
com/uzmap/pkg/uzapp/DataProvider.java
com/uzmap/pkg/uzapp/UPExtraBridge.java
com/uzmap/pkg/uzapp/b.java
com/uzmap/pkg/uzcore/UZCoreUtil.java
com/uzmap/pkg/uzcore/b/f.java
com/uzmap/pkg/uzcore/b/j.java
com/uzmap/pkg/uzcore/e/c.java
com/uzmap/pkg/uzcore/f/c.java
com/uzmap/pkg/uzcore/g/b.java
com/uzmap/pkg/uzcore/g/c.java
com/uzmap/pkg/uzcore/g/d.java
com/uzmap/pkg/uzcore/g/e.java
com/uzmap/pkg/uzcore/g/f.java
com/uzmap/pkg/uzcore/g/g.java
com/uzmap/pkg/uzcore/g/h.java
com/uzmap/pkg/uzcore/i/a/b.java
com/uzmap/pkg/uzcore/i/a/c.java
com/uzmap/pkg/uzcore/i/b/a.java
com/uzmap/pkg/uzcore/i/b/g.java
com/uzmap/pkg/uzcore/m.java
com/uzmap/pkg/uzcore/uzmodule/a/c.java
com/uzmap/pkg/uzcore/uzmodule/a/f.java
com/uzmap/pkg/uzkit/UZUtility.java
com/uzmap/pkg/uzkit/data/UZWidgetInfo.java
com/uzmap/pkg/uzkit/request/APICloudHttpClient.java
com/uzmap/pkg/uzkit/request/HttpDownload.java
com/uzmap/pkg/uzkit/request/HttpParams.java
com/uzmap/pkg/uzkit/request/HttpPost.java
com/uzmap/pkg/uzmodules/UIActionSelector/UIActionSelector.java
com/uzmap/pkg/uzmodules/uzimageBrowser/AsyncImageLoader.java
com/uzmap/pkg/uzmodules/uzimageBrowser/ImageLoader.java
com/uzmap/pkg/uzmodules/uzimageBrowser/activity/BaseActivity.java
com/uzmap/pkg/uzmodules/uzimageBrowser/activity/GalleryActivity.java
com/uzmap/pkg/uzmodules/uzimageBrowser/activity/ImageActivity.java
com/uzmap/pkg/uzmodules/uzimageBrowser/utils/ImageDownLoader.java
com/uzmap/pkg/uzmodules/uzimageBrowser/view/largeimage/factory/BitmapDecoderFactory.java
com/uzmap/pkg/uzmodules/uzimageBrowser/view/largeimage/factory/FileBitmapDecoderFactory.java
com/uzmap/pkg/uzmodules/uzimageBrowser/view/largeimage/factory/InputStreamBitmapDecoderFactory.java
一般功能-> IPC通信
cn/android/service/JTransitActivity.java
com/apicloud/a/a.java
com/apicloud/a/a/a.java
com/apicloud/a/b.java
com/apicloud/a/d/a.java
com/apicloud/a/d/b.java
com/apicloud/a/i/a/ah/f.java
com/apicloud/a/i/a/d/b.java
com/apicloud/a/i/a/y/a/a/f.java
com/apicloud/dvcontacts/UZDVCModule.java
com/apicloud/meiqiaplus/ApiMessageReceiver.java
com/apicloud/meiqiaplus/MeiqiaPlusKTModule.java
com/deepe/a/b/a.java
com/deepe/c/a/d.java
com/deepe/c/f/a/c.java
com/deepe/c/f/d.java
com/deepe/c/j/a/a.java
com/deepe/f/a/f.java
com/deepe/f/b/a.java
com/meiqia/core/MQManager.java
com/meiqia/core/MeiQiaService.java
com/meiqia/core/a/k.java
com/meiqia/core/c.java
com/meiqia/core/d.java
com/open/apicloud/jpush/JPushNotification.java
com/open/apicloud/jpush/JPushReceiver.java
com/open/apicloud/jpush/PushMessageReceiver.java
com/uzmap/pkg/LauncherUI.java
com/uzmap/pkg/b/a/a.java
com/uzmap/pkg/b/a/g.java
com/uzmap/pkg/b/c/i.java
com/uzmap/pkg/b/c/m.java
com/uzmap/pkg/b/f/a.java
com/uzmap/pkg/openapi/SuperWebview.java
com/uzmap/pkg/openapi/ViewClient.java
com/uzmap/pkg/uzapp/DataProvider.java
com/uzmap/pkg/uzapp/UPExtraBridge.java
com/uzmap/pkg/uzapp/b.java
com/uzmap/pkg/uzcore/UZAppActivity.java
com/uzmap/pkg/uzcore/UZCoreUtil.java
com/uzmap/pkg/uzcore/UZPlatformBridge.java
com/uzmap/pkg/uzcore/ad.java
com/uzmap/pkg/uzcore/aj.java
com/uzmap/pkg/uzcore/d/c.java
com/uzmap/pkg/uzcore/external/j.java
com/uzmap/pkg/uzcore/f.java
com/uzmap/pkg/uzcore/g/e.java
com/uzmap/pkg/uzcore/h.java
com/uzmap/pkg/uzcore/h/m.java
com/uzmap/pkg/uzcore/i.java
com/uzmap/pkg/uzcore/i/a.java
com/uzmap/pkg/uzcore/i/b/a.java
com/uzmap/pkg/uzcore/i/b/g.java
com/uzmap/pkg/uzcore/i/b/h.java
com/uzmap/pkg/uzcore/i/b/i.java
com/uzmap/pkg/uzcore/k.java
com/uzmap/pkg/uzcore/l.java
com/uzmap/pkg/uzcore/o.java
com/uzmap/pkg/uzcore/uzmodule/ActivityResult.java
com/uzmap/pkg/uzcore/uzmodule/UZModule.java
com/uzmap/pkg/uzcore/uzmodule/a.java
com/uzmap/pkg/uzcore/uzmodule/a/a.java
com/uzmap/pkg/uzcore/uzmodule/a/c.java
com/uzmap/pkg/uzcore/uzmodule/a/f.java
com/uzmap/pkg/uzmodules/uzimageBrowser/UZImageBrowser.java
com/uzmap/pkg/uzmodules/uzimageBrowser/activity/BaseActivity.java
com/uzmap/pkg/uzmodules/uzimageBrowser/activity/GalleryActivity.java
com/uzmap/pkg/uzmodules/uzimageBrowser/activity/ImageActivity.java
com/uzmap/pkg/uzsocket/UPnsService.java
com/uzmap/pkg/uzsocket/api/Receiver.java
com/uzmap/pkg/uzsocket/b/c.java
调用java反射机制
网络通信-> SSL证书处理
网络通信-> WebView 相关
网络通信-> TCP服务器套接字 com/eclipsesource/v8/debug/V8DebugServer.java
网络通信-> TCP套接字
一般功能-> 获取系统服务(getSystemService)
隐私数据-> 剪贴板数据读写操作 com/deepe/a/b/c.java
com/deepe/c/a/i.java
com/uzmap/pkg/uzmodules/uzclipboard/UzClipBoard.java
网络通信-> HTTP建立连接
隐私数据-> 读写通讯录
网络通信-> HTTPS建立连接 com/deepe/c/j/d/g.java
com/lidroid/xutils/util/OtherUtils.java
com/uzmap/pkg/uzmodules/uzimageBrowser/utils/ImageDownLoader.java
加密解密-> 信息摘要算法
网络通信-> OkHttpClient Connection com/meiqia/core/MeiQiaService.java
com/meiqia/core/a/e.java
com/meiqia/core/h.java
组件-> 发送广播
命令执行-> getRuntime.exec()
隐私数据-> 获取已安装的应用程序 com/deepe/c/f/a/c.java
com/uzmap/pkg/uzcore/UZCoreUtil.java
进程操作-> 获取进程pid
网络通信-> HTTP请求、连接和会话 com/lidroid/xutils/HttpUtils.java
com/lidroid/xutils/http/HttpHandler.java
com/lidroid/xutils/http/SyncHttpHandler.java
网络通信-> DefaultHttpClient Connection com/lidroid/xutils/HttpUtils.java
网络通信-> WebView GET请求
一般功能-> 传感器相关操作 com/deepe/a/b/j.java
com/deepe/c/a/i.java
com/uzmap/pkg/b/a/j.java
网络通信-> WebView JavaScript接口
网络通信-> WebView POST请求 com/uzmap/pkg/openapi/SuperWebview.java
网络通信-> WebView使用File协议 com/apicloud/dialogBox/dialogs/WebViewDialog.java
进程操作-> 杀死进程 com/meiqia/core/a/e.java
com/nrs/utils/tools/CrashHandler.java
com/uzmap/pkg/uzcore/UZAppActivity.java
组件-> ContentProvider
网络通信-> URLConnection
一般功能-> Android通知 com/open/apicloud/jpush/JPushNotification.java
com/uzmap/pkg/b/a/g.java
一般功能-> 加载so文件
一般功能-> 查看\修改Android系统属性 com/apicloud/meiqiaplus/Utils/ViewUtil.java
com/deepe/a/b/d.java
隐私数据-> 拍照摄像 com/apicloud/a/i/a/d/a/b.java
JavaScript 接口方法 com/apicloud/a/c/f.java
com/uzmap/pkg/uzcore/uzmodule/a/a.java
com/uzmap/pkg/uzcore/uzmodule/a/e.java
设备指纹-> getSimOperator com/deepe/f/a.java
设备指纹-> 查看运营商信息 com/deepe/f/a.java
组件-> 启动 Service com/meiqia/core/MQManager.java
com/meiqia/core/d.java
com/uzmap/pkg/uzsocket/b/c.java
组件-> Provider openFile com/uzmap/pkg/uzapp/DataProvider.java
加密解密-> Crypto加解密组件 com/deepe/c/g/b.java
com/meiqia/core/a/a.java
加密解密-> Base64 加密 com/meiqia/core/a/a.java
加密解密-> Base64 解密 com/meiqia/core/a/a.java
隐私数据-> 录制音频行为 com/deepe/a/c/f.java
一般功能-> 获取活动网路信息 com/meiqia/core/a/k.java
隐私数据-> 录制视频 com/apicloud/a/i/a/d/a/q.java
com/apicloud/a/i/a/d/a/r.java
com/deepe/a/c/d.java
隐私数据-> 获取GPS位置信息 com/uzmap/pkg/b/a/e.java
进程操作-> 获取运行的进程\服务 com/deepe/c/i/l.java

源代码分析

高危
7
警告
7
信息
2
安全
2
屏蔽
0
序号 问题 等级 参考标准 文件位置 操作
1 应用程序记录日志信息,不得记录敏感信息 信息 CWE: CWE-532: 通过日志文件的信息暴露
OWASP MASVS: MSTG-STORAGE-3
com/apicloud/NVNavigationBar/NVNavigationBar.java
com/apicloud/NVNavigationBar/NaviItem.java
com/apicloud/NVNavigationBar/NavigationBar.java
com/apicloud/a/d/g.java
com/apicloud/a/i/a/ah/a/d.java
com/apicloud/a/i/a/ah/a/j.java
com/apicloud/a/i/a/d/a/c.java
com/apicloud/a/i/a/r/s.java
com/apicloud/a/i/a/v/g.java
com/apicloud/a/i/a/y/a/a/f.java
com/apicloud/c/a/a/g.java
com/apicloud/c/a/a/j.java
com/apicloud/c/b/d.java
com/apicloud/dialogBox/logger/Logger.java
com/apicloud/dvcontacts/utils/LogUtil.java
com/apicloud/meiqiaplus/Utils/LogUtil.java
com/apicloud/meiqiaplus/Utils/ViewUtil.java
com/deepe/b/a/a.java
com/deepe/b/e.java
com/deepe/b/f.java
com/deepe/c/b/c/e.java
com/deepe/c/b/d/b.java
com/deepe/c/b/j.java
com/deepe/c/j/e/b.java
com/deepe/c/j/q.java
com/deepe/d/a.java
com/deepe/f/a/d.java
com/deepe/f/a/e.java
com/deepe/f/a/f.java
com/eclipsesource/v8/debug/V8DebugServer.java
com/lidroid/xutils/util/LogUtils.java
com/meiqia/core/a/a.java
com/meiqia/core/a/e.java
com/meiqia/core/a/f.java
com/meiqia/core/f.java
com/meiqia/core/g.java
com/nostra13/universalimageloader/cache/disc/impl/ext/DiskLruCache.java
com/nrs/utils/tools/CrashHandler.java
com/uzmap/pkg/uzcore/UZCoreUtil.java
com/uzmap/pkg/uzcore/b/a.java
com/uzmap/pkg/uzcore/i/b/a.java
com/uzmap/pkg/uzkit/request/Request.java
com/uzmap/pkg/uzmodules/UIActionSelector/UIActionSelector.java
com/uzmap/pkg/uzmodules/UIActionSelector/adapter/AbstractWheelTextAdapter.java
com/uzmap/pkg/uzmodules/UIActionSelector/widget/WheelLinearLayout.java
com/uzmap/pkg/uzmodules/UIActionSelector/widget/WheelRecycle.java
com/uzmap/pkg/uzmodules/UIActionSelector/widget/WheelScroller.java
com/uzmap/pkg/uzmodules/UIActionSelector/widget/WheelView.java
com/uzmap/pkg/uzmodules/uzimageBrowser/ImageLoader.java
com/uzmap/pkg/uzmodules/uzimageBrowser/PhotoViewAttacher.java
com/uzmap/pkg/uzmodules/uzimageBrowser/activity/BaseActivity.java
com/uzmap/pkg/uzmodules/uzimageBrowser/activity/GalleryActivity.java
com/uzmap/pkg/uzmodules/uzimageBrowser/activity/ImageActivity.java
com/uzmap/pkg/uzmodules/uzimageBrowser/activity/SeekArc.java
com/uzmap/pkg/uzmodules/uzimageBrowser/gestures/CupcakeGestureDetector.java
com/uzmap/pkg/uzmodules/uzimageBrowser/log/LoggerDefault.java
com/uzmap/pkg/uzmodules/uzimageBrowser/view/largeimage/BlockImageLoader.java
2 此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改 信息
OWASP MASVS: MSTG-PLATFORM-4
com/uzmap/pkg/uzmodules/uzclipboard/UzClipBoard.java
3 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据 警告 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2
4 不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击 高危 CWE: CWE-295: 证书验证不恰当
OWASP Top 10: M3: Insecure Communication
OWASP MASVS: MSTG-NETWORK-3
com/uzmap/pkg/uzcore/i/d.java
5 MD5是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-4
6 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 警告 CWE: CWE-89: SQL命令中使用的特殊元素转义处理不恰当('SQL 注入')
OWASP Top 10: M7: Client Code Quality
7 应用程序使用不安全的随机数生成器 警告 CWE: CWE-330: 使用不充分的随机数
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-6
8 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 安全
OWASP MASVS: MSTG-NETWORK-4
com/deepe/c/j/c/d.java
9 SHA-1是已知存在哈希冲突的弱哈希 警告 CWE: CWE-327: 使用已被攻破或存在风险的密码学算法
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-4
com/deepe/c/g/f.java
com/deepe/c/j/f.java
com/deepe/c/l/b/b.java
10 该文件是World Writable。任何应用程序都可以写入文件 高危 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2
com/deepe/c/k/g.java
11 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击 高危 CWE: CWE-79: 在Web页面生成时对输入的转义处理不恰当('跨站脚本')
OWASP Top 10: M1: Improper Platform Usage
OWASP MASVS: MSTG-PLATFORM-6
com/uzmap/pkg/openapi/SuperWebview.java
com/uzmap/pkg/uzcore/i/b/f.java
12 WebView域控制不严格漏洞 高危 CWE: CWE-73: 外部控制文件名或路径 com/apicloud/dialogBox/dialogs/WebViewDialog.java
13 该文件是World Readable。任何应用程序都可以读取文件 高危 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2
com/deepe/b/f/a.java
14 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等 警告 CWE: CWE-312: 明文存储敏感信息
OWASP Top 10: M9: Reverse Engineering
OWASP MASVS: MSTG-STORAGE-14
com/uzmap/pkg/uzkit/fineHttp/RequestParam.java
compile/Properties.java
15 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 高危 CWE: CWE-649: 依赖于混淆或加密安全相关输入而不进行完整性检查
OWASP Top 10: M5: Insufficient Cryptography
OWASP MASVS: MSTG-CRYPTO-3
com/meiqia/core/a/a.java
16 此应用程序可能具有Root检测功能 安全
OWASP MASVS: MSTG-RESILIENCE-1
com/deepe/c/a/c.java
17 SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击 高危 CWE: CWE-295: 证书验证不恰当
OWASP Top 10: M3: Insecure Communication
OWASP MASVS: MSTG-NETWORK-3
com/lidroid/xutils/http/client/DefaultSSLSocketFactory.java
com/lidroid/xutils/util/OtherUtils.java
18 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 警告 CWE: CWE-276: 默认权限不正确
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2
com/eclipsesource/v8/NodeJS.java

动态库分析

序号 动态库 NX(堆栈禁止执行) STACK CANARY(栈保护) RELRO RPATH(指定SO搜索路径) RUNPATH(指定SO搜索路径) FORTIFY(常用函数加强检查) SYMBOLS STRIPPED(裁剪符号表)
1 armeabi/libavmJni.so
True
info
二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
True
info
这个二进制文件在栈上添加了一个栈哨兵值,以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出
Full RELRO
info
此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
None
info
二进制文件没有设置运行时搜索路径或RPATH
None
info
二进制文件没有设置 RUNPATH
False
warning
二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数(如 strcpy,gets 等)的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用
False
warning
符号可用
2 armeabi/libavmJni_gif.so
True
info
二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
True
info
这个二进制文件在栈上添加了一个栈哨兵值,以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出
Full RELRO
info
此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
None
info
二进制文件没有设置运行时搜索路径或RPATH
None
info
二进制文件没有设置 RUNPATH
True
info
二进制文件有以下加固函数: ['__strncat_chk', '__memcpy_chk']
False
warning
符号可用
3 armeabi/libocr-sdk.so
True
info
二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
True
info
这个二进制文件在栈上添加了一个栈哨兵值,以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出
Full RELRO
info
此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
None
info
二进制文件没有设置运行时搜索路径或RPATH
None
info
二进制文件没有设置 RUNPATH
False
warning
二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数(如 strcpy,gets 等)的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用
False
warning
符号可用
4 armeabi/libsec.so
True
info
二进制文件设置了 NX 位。这标志着内存页面不可执行,使得攻击者注入的 shellcode 不可执行。
True
info
这个二进制文件在栈上添加了一个栈哨兵值,以便它会被溢出返回地址的栈缓冲区覆盖。这样可以通过在函数返回之前验证栈哨兵的完整性来检测溢出
Full RELRO
info
此共享对象已完全启用 RELRO。 RELRO 确保 GOT 不会在易受攻击的 ELF 二进制文件中被覆盖。在完整 RELRO 中,整个 GOT(.got 和 .got.plt 两者)被标记为只读。
None
info
二进制文件没有设置运行时搜索路径或RPATH
None
info
二进制文件没有设置 RUNPATH
False
warning
二进制文件没有任何加固函数。加固函数提供了针对 glibc 的常见不安全函数(如 strcpy,gets 等)的缓冲区溢出检查。使用编译选项 -D_FORTIFY_SOURCE=2 来加固函数。这个检查对于 Dart/Flutter 库不适用
False
warning
符号可用

文件分析

序号 问题 文件

VIRUSTOTAL扫描

  该文件并未在病毒库中,文件上传功能被禁用。

滥用权限

恶意软件常用权限 15/30
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.CAMERA
android.permission.SEND_SMS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.RECORD_AUDIO
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.READ_SMS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.RECEIVE_SMS
android.permission.GET_TASKS
其它常用权限 14/46
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.FLASHLIGHT
android.permission.BLUETOOTH_ADMIN
android.permission.BLUETOOTH
android.permission.FOREGROUND_SERVICE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_MOCK_LOCATION
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.READ_MEDIA_AUDIO
android.permission.ACCESS_BACKGROUND_LOCATION

恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。

IP地图

域名检测

域名 状态 中国境内 位置信息 解析
p.app3c.cn 安全
没有可用的地理位置信息。




aip.baidubce.com 安全
IP地址: 59.110.247.93
国家: 中国
地区: 江苏
城市: 苏州
查看: 高德地图





new-api.meiqia.com 安全
IP地址: 59.110.247.93
国家: 中国
地区: 浙江
城市: 杭州
查看: 高德地图





d.app3c.cn 安全
没有可用的地理位置信息。




s.app3c.com 安全
没有可用的地理位置信息。




meiqia.com 安全
IP地址: 203.107.60.151
国家: 中国
地区: 浙江
城市: 杭州
查看: 高德地图





verify.baidubce.com 安全
IP地址: 59.110.247.93
国家: 中国
地区: 江苏
城市: 苏州
查看: 高德地图





eco-push-api-client.meiqia.com 安全
IP地址: 59.110.247.93
国家: 中国
地区: 浙江
城市: 杭州
查看: 高德地图





notify.bugsnag.com 安全
IP地址: 35.186.205.6
国家: 美利坚合众国
地区: 密苏里州
城市: 堪萨斯城
查看: Google 地图





www.ccil.org 安全
IP地址: 142.251.42.211
国家: 日本
地区: 东京
城市: 东京
查看: Google 地图





iuap-yonbuilder-mamservice.yyuap.com 安全
IP地址: 59.110.247.93
国家: 中国
地区: 北京
城市: 北京
查看: 高德地图





as.app3c.com 安全
没有可用的地理位置信息。




手机号码

网址

网址信息 源码文件
http://www.gygyg.cn
http://linhuabaohou.net
http://www.auicss.com
http://www.apicloud.com
自研引擎-A
https://github.com/tootallnate/java-websocket/wiki/lost-connection-detection
com/deepe/c/l/a.java
http://www.ccil.org/~cowan/tagsoup/properties/schema
com/deepe/c/i/o.java
https://notify.bugsnag.com
http://meiqia.com/
com/meiqia/core/a/e.java
https://new-api.meiqia.com/client/send_msg
com/meiqia/core/d.java
wss://eco-push-api-client.meiqia.com/pusher/websocket
com/meiqia/core/MeiQiaService.java
https://new-api.meiqia.com/client/send_msg
https://new-api.meiqia.com/knowledge/questions/
https://new-api.meiqia.com/client/file_downloaded
https://new-api.meiqia.com/client/tickets_v2/
https://new-api.meiqia.com/client/msg_delivered
https://new-api.meiqia.com/unified-api/conversations/v1/client/sdk/mass_message_receipts
https://new-api.meiqia.com/client/end_conversation
https://new-api.meiqia.com/client/queue/position
https://new-api.meiqia.com/client/tickets_v2/categories
https://new-api.meiqia.com/upload?user_id=
https://new-api.meiqia.com/upload/oss/policies
https://new-api.meiqia.com/client/inputting
https://new-api.meiqia.com/conversation/
https://new-api.meiqia.com/sdk/init_sdk_user
https://new-api.meiqia.com/client/device_token
https://new-api.meiqia.com/client/prechat-survey-msg
https://new-api.meiqia.com/unified-api/conversations/v1/client/unreceived_mass_messages
https://new-api.meiqia.com/sdk/statistics
https://new-api.meiqia.com/client/forms
https://new-api.meiqia.com/client/attrs
https://new-api.meiqia.com/client/
https://new-api.meiqia.com/scheduler
https://new-api.meiqia.com/sdk/init
https://new-api.meiqia.com/client/tickets_v2
https://new-api.meiqia.com/client/tickets
https://new-api.meiqia.com/client/msg_read
https://new-api.meiqia.com/unified-api/conversations/v1/client/sdk/mass_messages/
https://new-api.meiqia.com/sdk/get_dev_client_id
https://new-api.meiqia.com/sdk/refresh_push_info
https://new-api.meiqia.com/client/client_events
https://new-api.meiqia.com/mpush/copy/statistics
com/meiqia/core/h.java
https://iuap-yonbuilder-mamservice.yyuap.com/iuap-yonbuilder-mobile/v2
https://d.app3c.cn
https://s.app3c.com
https://p.app3c.cn
https://as.app3c.com
compile/Properties.java
https://new-api.meiqia.com/client/forms
https://aip.baidubce.com/rest/2.0/ocr/v1/accurate?
https://new-api.meiqia.com/client/prechat-survey-msg
https://aip.baidubce.com/rest/2.0/ocr/v1/business_card?
https://aip.baidubce.com/rest/2.0/ocr/v1/license_plate?
https://new-api.meiqia.com/client/
https://iuap-yonbuilder-mamservice.yyuap.com/iuap-yonbuilder-mobile/v2
https://github.com/tootallnate/java-websocket/wiki/lost-connection-detection
https://new-api.meiqia.com/upload?user_id=
https://new-api.meiqia.com/sdk/refresh_push_info
https://new-api.meiqia.com/client/send_msg
https://new-api.meiqia.com/scheduler
https://new-api.meiqia.com/knowledge/questions/
https://notify.bugsnag.com
https://new-api.meiqia.com/sdk/init_sdk_user
https://new-api.meiqia.com/client/queue/position
https://new-api.meiqia.com
https://aip.baidubce.com/rest/2.0/ocr/v1/driving_license?
https://new-api.meiqia.com/unified-api/conversations/v1/client/sdk/mass_messages/
https://aip.baidubce.com/rest/2.0/ocr/v1/general_enhanced?
https://new-api.meiqia.com/client/inputting
https://aip.baidubce.com/rest/2.0/ocr/v1/general?
https://new-api.meiqia.com/unified-api/conversations/v1/client/unreceived_mass_messages
https://aip.baidubce.com/rest/2.0/ocr/v1/general_basic?
https://p.app3c.cn
https://new-api.meiqia.com/client/tickets_v2
https://aip.baidubce.com/rest/2.0/ocr/v1/qrcode?
https://new-api.meiqia.com/client/msg_read
http://meiqia.com/
https://aip.baidubce.com/rest/2.0/ocr/v1/receipt?
https://aip.baidubce.com/rest/2.0/ocr/v1/numbers?
https://aip.baidubce.com/rest/2.0/ocr/v1/vehicle_license?
https://new-api.meiqia.com/client/attrs
https://aip.baidubce.com/rest/2.0/ocr/v1/vat_invoice?
https://new-api.meiqia.com/sdk/statistics
https://aip.baidubce.com/rest/2.0/ocr/v1/business_license?
https://s.app3c.com
https://new-api.meiqia.com/client/tickets_v2/categories
https://new-api.meiqia.com/sdk/get_dev_client_id
https://new-api.meiqia.com/mpush/copy/statistics
10.0.2.15
https://new-api.meiqia.com/client/client_events
https://aip.baidubce.com/rest/2.0/ocr/v1/lottery?
https://new-api.meiqia.com/sdk/init
https://new-api.meiqia.com/client/tickets
http://www.ccil.org/~cowan/tagsoup/properties/schema
https://new-api.meiqia.com/conversation/
https://verify.baidubce.com/verify/1.0/token/bin?sdkversion=1_4_4
https://aip.baidubce.com/rest/2.0/ocr/v1/webimage?
https://new-api.meiqia.com/upload/oss/policies
https://aip.baidubce.com/rest/2.0/ocr/v1/bankcard?
https://new-api.meiqia.com/client/tickets_v2/
https://verify.baidubce.com/verify/1.0/sdk/report
https://as.app3c.com
https://new-api.meiqia.com/client/device_token
https://verify.baidubce.com/verify/1.0/token/sk?sdkversion=1_4_4
https://aip.baidubce.com/rest/2.0/ocr/v1/accurate_basic?
https://d.app3c.cn
https://new-api.meiqia.com/client/file_downloaded
https://aip.baidubce.com/rest/2.0/solution/v1/iocr/recognise?
https://new-api.meiqia.com/client/end_conversation
https://aip.baidubce.com/rest/2.0/ocr/v1/passport?
https://aip.baidubce.com/rest/2.0/ocr/v1/handwriting?
https://new-api.meiqia.com/unified-api/conversations/v1/client/sdk/mass_message_receipts
https://aip.baidubce.com/rest/2.0/ocr/v1/idcard?
wss://eco-push-api-client.meiqia.com/pusher/websocket
https://new-api.meiqia.com/client/msg_delivered
自研引擎-S

FIREBASE实例

邮箱

追踪器

名称 类别 网址
JiGuang Aurora Mobile JPush Analytics https://reports.exodus-privacy.eu.org/trackers/343

密钥凭证

已显示 8 个secrets
1、 "mq_auth_code" : "CAPTCHA"
2、 aHR0cHM6Ly93d3cuZ29vZ2xlLWFuYWx5dGljcy5jb20vYmF0Y2g=
3、 62587239-AD3C-8190-47B4-37DE080D7E9D
4、 ce86b33875bdf14452a94a745b9b042c
5、 aHR0cHM6Ly93d3cuZ29vZ2xlLWFuYWx5dGljcy5jb20vY29sbGVjdA==
6、 3pFUwVC/xsQEGShRKpWVoJ1p4ImhrCb8agie9z4Mt0P9umvC
7、 YW5kcm9pZC50ZWxlcGhvbnkuU21zTWFuYWdlcg==
8、 ZGlzdC9iYXNlL2FwaWJhc2UuanM=

字符串列表

建议导出为TXT,方便查看。

活动列表

已显示 18 个activities
1、 com.uzmap.pkg.LauncherUI
2、 com.uzmap.pkg.EntranceActivity
3、 com.deepe.sdk.LoloAppActivity
4、 com.uzmap.pkg.uzmodules.uzimageBrowser.activity.GalleryActivity
5、 com.uzmap.pkg.uzmodules.uzimageBrowser.activity.ImageActivity
6、 com.meiqia.meiqiasdk.activity.MQConversationActivity
7、 com.meiqia.meiqiasdk.activity.MQPhotoPreviewActivity
8、 com.meiqia.meiqiasdk.activity.MQPhotoPickerActivity
9、 com.meiqia.meiqiasdk.activity.MQPhotoPickerPreviewActivity
10、 com.meiqia.meiqiasdk.activity.MQMessageFormActivity
11、 com.meiqia.meiqiasdk.activity.MQWebViewActivity
12、 com.meiqia.meiqiasdk.activity.MQInquiryFormActivity
13、 com.meiqia.meiqiasdk.activity.MQCollectInfoActivity
14、 cn.jpush.android.ui.PopWinActivity
15、 cn.jpush.android.ui.PushActivity
16、 cn.jpush.android.service.JNotifyActivity
17、 cn.android.service.JTransitActivity
18、 cn.jpush.android.service.DActivity

服务列表

已显示 6 个services
1、 com.uzmap.pkg.uzsocket.UPnsService
2、 com.meiqia.core.MeiQiaService
3、 cn.jpush.android.service.MessagingIntentService
4、 cn.jpush.android.service.PushService
5、 cn.jpush.android.service.DaemonService
6、 com.open.apicloud.jpush.PushService

广播接收者列表

已显示 6 个receivers
1、 com.uzmap.pkg.uzapp.UPExtraBridge
2、 cn.jpush.android.service.SchedulerReceiver
3、 cn.jpush.android.asus.AsusPushMessageReceiver
4、 cn.jpush.android.service.PushReceiver
5、 com.open.apicloud.jpush.JPushReceiver
6、 com.open.apicloud.jpush.PushMessageReceiver

内容提供者列表

已显示 6 个providers
1、 com.uzmap.pkg.uzapp.UProvider
2、 com.uzmap.pkg.uzapp.DataProvider
3、 com.meiqia.meiqiasdk.util.MQFileProvider
4、 com.meiqia.core.MQInitializeContentProvider
5、 cn.jpush.android.service.DataProvider
6、 cn.jpush.android.service.DownloadProvider

第三方SDK

SDK名称 开发者 描述信息
极光推送 极光 JPush 是经过考验的大规模 App 推送平台,每天推送消息数超过 5 亿条。 开发者集成 SDK 后,可以通过调用 API 推送消息。同时,JPush 提供可视化的 web 端控制台发送通知,统计分析推送效果。 JPush 全面支持 Android, iOS, Winphone 三大手机平台。
File Provider Android FileProvider 是 ContentProvider 的特殊子类,它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。
美洽客服 SDK 美洽 在线客服,连接一切客户。

文件列表

AndroidManifest.xml
META-INF/CERT.RSA
META-INF/CERT.SF
META-INF/MANIFEST.MF
META-INF/jvm.kotlin_module
META-INF/kotlin-stdlib-common.kotlin_module
META-INF/kotlin-stdlib-jdk7.kotlin_module
META-INF/kotlin-stdlib.kotlin_module
META-INF/okhttp.kotlin_module
assets/dist/api.min.js.sec
assets/dist/avm.min.js.sec
assets/uzmap/module.json
assets/widget/config.xml
assets/widget/css/api.css
assets/widget/css/aui-slide.css
assets/widget/css/font/iconfont.eot
assets/widget/css/font/iconfont.svg
assets/widget/css/font/iconfont.ttf
assets/widget/css/font/iconfont.woff
assets/widget/css/font/iconfont.woff2
assets/widget/css/style.css
assets/widget/css/style_new.css
assets/widget/forgetpassword.html
assets/widget/html/frame_accept_tips.html
assets/widget/html/frame_acceptance_rule.html
assets/widget/html/frame_account.html
assets/widget/html/frame_account_alipay.html
assets/widget/html/frame_account_bank.html
assets/widget/html/frame_account_cert.html
assets/widget/html/frame_account_dy.html
assets/widget/html/frame_account_jd.html
assets/widget/html/frame_account_pdd.html
assets/widget/html/frame_account_qq.html
assets/widget/html/frame_account_taobao.html
assets/widget/html/frame_account_taobao_info.html
assets/widget/html/frame_appeal_0.html
assets/widget/html/frame_appeal_1.html
assets/widget/html/frame_appeal_add.html
assets/widget/html/frame_appeal_detail.html
assets/widget/html/frame_appeal_msg.html
assets/widget/html/frame_auth.html
assets/widget/html/frame_auth_taobao.html
assets/widget/html/frame_back_tips.html
assets/widget/html/frame_benjin.html
assets/widget/html/frame_cert_example.html
assets/widget/html/frame_extension.html
assets/widget/html/frame_extension_record.html
assets/widget/html/frame_feedback.html
assets/widget/html/frame_feedback_add.html
assets/widget/html/frame_index.html
assets/widget/html/frame_index_notice.html
assets/widget/html/frame_msg.html
assets/widget/html/frame_notice.html
assets/widget/html/frame_notice_detail.html
assets/widget/html/frame_password.html
assets/widget/html/frame_personal_notice.html
assets/widget/html/frame_personal_notice_detail.html
assets/widget/html/frame_question.html
assets/widget/html/frame_question_category.html
assets/widget/html/frame_question_list.html
assets/widget/html/frame_receiving_jd.html
assets/widget/html/frame_receiving_pdd.html
assets/widget/html/frame_receiving_tb.html
assets/widget/html/frame_review_detail.html
assets/widget/html/frame_set.html
assets/widget/html/frame_task.html
assets/widget/html/frame_task_detail.html
assets/widget/html/frame_task_item_0.html
assets/widget/html/frame_task_item_1.html
assets/widget/html/frame_task_item_2.html
assets/widget/html/frame_task_item_3.html
assets/widget/html/frame_task_item_4.html
assets/widget/html/frame_task_list_cancel.html
assets/widget/html/frame_task_list_success.html
assets/widget/html/frame_tixian_benjin.html
assets/widget/html/frame_tixian_yongjin.html
assets/widget/html/frame_unread_amount.html
assets/widget/html/frame_user.html
assets/widget/html/frame_wechat.html
assets/widget/html/frame_yongjin.html
assets/widget/html/main.html
assets/widget/html/window_acceptance_rule.html
assets/widget/html/window_account.html
assets/widget/html/window_account_alipay.html
assets/widget/html/window_account_bank.html
assets/widget/html/window_account_cert.html
assets/widget/html/window_account_dy.html
assets/widget/html/window_account_jd.html
assets/widget/html/window_account_pdd.html
assets/widget/html/window_account_qq.html
assets/widget/html/window_account_taobao.html
assets/widget/html/window_account_taobao_info.html
assets/widget/html/window_appeal.html
assets/widget/html/window_appeal_add.html
assets/widget/html/window_appeal_course.html
assets/widget/html/window_appeal_detail.html
assets/widget/html/window_appeal_msg.html
assets/widget/html/window_auth.html
assets/widget/html/window_auth_taobao.html
assets/widget/html/window_cert_example.html
assets/widget/html/window_eos.html
assets/widget/html/window_extension.html
assets/widget/html/window_extension_record.html
assets/widget/html/window_feedback.html
assets/widget/html/window_feedback_add.html
assets/widget/html/window_fund_details.html
assets/widget/html/window_msg.html
assets/widget/html/window_notice.html
assets/widget/html/window_notice_detail.html
assets/widget/html/window_password.html
assets/widget/html/window_personal_notice.html
assets/widget/html/window_personal_notice_detail.html
assets/widget/html/window_question.html
assets/widget/html/window_question_category.html
assets/widget/html/window_question_list.html
assets/widget/html/window_receiving_information.html
assets/widget/html/window_review_detail.html
assets/widget/html/window_set.html
assets/widget/html/window_task.html
assets/widget/html/window_task_detail.html
assets/widget/html/window_task_list_cancel.html
assets/widget/html/window_task_list_on.html
assets/widget/html/window_task_list_success.html
assets/widget/html/window_tixian.html
assets/widget/html/window_version.html
assets/widget/icon/icon100X100.png
assets/widget/icon/icon150x150.png
assets/widget/image/advise-icon.png
assets/widget/image/all-task-icon.png
assets/widget/image/appeal-course.png
assets/widget/image/bind-cert-icon.png
assets/widget/image/cert-example.jpg
assets/widget/image/chk_1.png
assets/widget/image/chk_1_1.png
assets/widget/image/circle.png
assets/widget/image/click-me.png
assets/widget/image/error-img.png
assets/widget/image/extension-pic.png
assets/widget/image/eye-close.png
assets/widget/image/eye-open.png
assets/widget/image/file-img.png
assets/widget/image/finish-percent-icon.png
assets/widget/image/gift-icon.png
assets/widget/image/help-service-icon.png
assets/widget/image/index_img_1.png
assets/widget/image/index_img_2.png
assets/widget/image/index_img_3.png
assets/widget/image/jd-eos.jpg
assets/widget/image/loading_more.gif
assets/widget/image/login-banner.jpg
assets/widget/image/message-icon.png
assets/widget/image/nav-001.png
assets/widget/image/nav-002.png
assets/widget/image/nav-003.png
assets/widget/image/nav-004.png
assets/widget/image/nav-005.png
assets/widget/image/nav-006.png
assets/widget/image/nav-007.png
assets/widget/image/nav-008.png
assets/widget/image/nav-009.png
assets/widget/image/nav-010.png
assets/widget/image/nav-011.png
assets/widget/image/nav-012.png
assets/widget/image/nav-013.png
assets/widget/image/nav-014.png
assets/widget/image/nav-015.png
assets/widget/image/nav-016.png
assets/widget/image/nav-017.png
assets/widget/image/nav-018.png
assets/widget/image/nav-019.png
assets/widget/image/nav-020.png
assets/widget/image/nav-021.png
assets/widget/image/nav-022.png
assets/widget/image/nav-023.png
assets/widget/image/nav-024.png
assets/widget/image/nav-025.png
assets/widget/image/nav-026.png
assets/widget/image/nav-027.png
assets/widget/image/pdd-eos.jpg
assets/widget/image/personal-code.png
assets/widget/image/psw-icon.png
assets/widget/image/question-icon.png
assets/widget/image/question_head_bg.jpg
assets/widget/image/question_li_bg01.jpg
assets/widget/image/question_li_bg02.jpg
assets/widget/image/question_li_bg03.jpg
assets/widget/image/question_li_bg04.jpg
assets/widget/image/share-bg.png
assets/widget/image/share-code.png
assets/widget/image/share-icon.png
assets/widget/image/share-link.png
assets/widget/image/sp1.png
assets/widget/image/sp2.png
assets/widget/image/sp3.png
assets/widget/image/sp4.png
assets/widget/image/ss-center.png
assets/widget/image/task-icon.png
assets/widget/image/tb-eos.jpg
assets/widget/image/tb01.png
assets/widget/image/tb02.png
assets/widget/image/tb03.png
assets/widget/image/tel-icon.png
assets/widget/image/time-icon.png
assets/widget/image/title.png
assets/widget/image/tuiguang-icon.png
assets/widget/image/user-code-icon.png
assets/widget/image/user.png
assets/widget/image/user_tx.jpg
assets/widget/image/version-icon.png
assets/widget/image/wechat.png
assets/widget/image/wo-yao-tx.png
assets/widget/image/yzm-icon.png
assets/widget/index.html
assets/widget/jsconfig.json
assets/widget/launch/launch1080x1920.png
assets/widget/login.html
assets/widget/pages/main/main.js
assets/widget/register.html
assets/widget/res/city.json
assets/widget/res/manifest.xml
assets/widget/res/music.mp3
assets/widget/script/api.js
assets/widget/script/aui-slide.js
assets/widget/script/jquery.min.js
classes.dex
kotlin/ArithmeticException.kotlin_metadata
kotlin/AssertionError.kotlin_metadata
kotlin/BuilderInference.kotlin_metadata
kotlin/ClassCastException.kotlin_metadata
kotlin/Comparator.kotlin_metadata
kotlin/ConcurrentModificationException.kotlin_metadata
kotlin/DeepRecursiveFunction.kotlin_metadata
kotlin/DeepRecursiveKt.kotlin_metadata
kotlin/DeepRecursiveScope.kotlin_metadata
kotlin/DeepRecursiveScopeImpl.kotlin_metadata
kotlin/Error.kotlin_metadata
kotlin/Exception.kotlin_metadata
kotlin/ExceptionsHKt.kotlin_metadata
kotlin/Experimental.kotlin_metadata
kotlin/ExperimentalMultiplatform.kotlin_metadata
kotlin/ExperimentalStdlibApi.kotlin_metadata
kotlin/ExperimentalUnsignedTypes.kotlin_metadata
kotlin/HashCodeKt.kotlin_metadata
kotlin/IllegalArgumentException.kotlin_metadata
kotlin/IllegalStateException.kotlin_metadata
kotlin/IndexOutOfBoundsException.kotlin_metadata
kotlin/InitializedLazyImpl.kotlin_metadata
kotlin/KotlinHKt.kotlin_metadata
kotlin/KotlinNothingValueException.kotlin_metadata
kotlin/KotlinVersion.kotlin_metadata
kotlin/LateinitKt.kotlin_metadata
kotlin/Lazy.kotlin_metadata
kotlin/LazyKt.kotlin_metadata
kotlin/LazyThreadSafetyMode.kotlin_metadata
kotlin/NoSuchElementException.kotlin_metadata
kotlin/NoWhenBranchMatchedException.kotlin_metadata
kotlin/NotImplementedError.kotlin_metadata
kotlin/NullPointerException.kotlin_metadata
kotlin/NumberFormatException.kotlin_metadata
kotlin/NumbersKt.kotlin_metadata
kotlin/OptIn.kotlin_metadata
kotlin/OptionalExpectation.kotlin_metadata
kotlin/OverloadResolutionByLambdaReturnType.kotlin_metadata
kotlin/Pair.kotlin_metadata
kotlin/PreconditionsKt.kotlin_metadata
kotlin/PropertyReferenceDelegatesKt.kotlin_metadata
kotlin/RequiresOptIn.kotlin_metadata
kotlin/Result.kotlin_metadata
kotlin/ResultKt.kotlin_metadata
kotlin/RuntimeException.kotlin_metadata
kotlin/StandardKt.kotlin_metadata
kotlin/SuspendKt.kotlin_metadata
kotlin/Throws.kotlin_metadata
kotlin/Triple.kotlin_metadata
kotlin/TuplesKt.kotlin_metadata
kotlin/UByte.kotlin_metadata
kotlin/UByteArray.kotlin_metadata
kotlin/UByteArrayKt.kotlin_metadata
kotlin/UByteKt.kotlin_metadata
kotlin/UInt.kotlin_metadata
kotlin/UIntArray.kotlin_metadata
kotlin/UIntArrayKt.kotlin_metadata
kotlin/UIntKt.kotlin_metadata
kotlin/ULong.kotlin_metadata
kotlin/ULongArray.kotlin_metadata
kotlin/ULongArrayKt.kotlin_metadata
kotlin/ULongKt.kotlin_metadata
kotlin/UNINITIALIZED_VALUE.kotlin_metadata
kotlin/UNumbersKt.kotlin_metadata
kotlin/UShort.kotlin_metadata
kotlin/UShortArray.kotlin_metadata
kotlin/UShortArrayKt.kotlin_metadata
kotlin/UShortKt.kotlin_metadata
kotlin/UninitializedPropertyAccessException.kotlin_metadata
kotlin/UnsafeLazyImpl.kotlin_metadata
kotlin/UnsignedUtilsKt.kotlin_metadata
kotlin/UnsupportedOperationException.kotlin_metadata
kotlin/UseExperimental.kotlin_metadata
kotlin/WasExperimental.kotlin_metadata
kotlin/annotation/annotation.kotlin_builtins
kotlin/collections/AbstractCollection.kotlin_metadata
kotlin/collections/AbstractIterator.kotlin_metadata
kotlin/collections/AbstractList.kotlin_metadata
kotlin/collections/AbstractMap.kotlin_metadata
kotlin/collections/AbstractMutableCollection.kotlin_metadata
kotlin/collections/AbstractMutableList.kotlin_metadata
kotlin/collections/AbstractMutableMap.kotlin_metadata
kotlin/collections/AbstractMutableSet.kotlin_metadata
kotlin/collections/AbstractSet.kotlin_metadata
kotlin/collections/ArrayAsCollection.kotlin_metadata
kotlin/collections/ArrayDeque.kotlin_metadata
kotlin/collections/ArrayList.kotlin_metadata
kotlin/collections/ArraysKt.kotlin_metadata
kotlin/collections/CollectionsHKt.kotlin_metadata
kotlin/collections/CollectionsKt.kotlin_metadata
kotlin/collections/EmptyIterator.kotlin_metadata
kotlin/collections/EmptyList.kotlin_metadata
kotlin/collections/EmptyMap.kotlin_metadata
kotlin/collections/EmptySet.kotlin_metadata
kotlin/collections/Grouping.kotlin_metadata
kotlin/collections/GroupingKt.kotlin_metadata
kotlin/collections/HashMap.kotlin_metadata
kotlin/collections/HashSet.kotlin_metadata
kotlin/collections/IndexedValue.kotlin_metadata
kotlin/collections/IndexingIterable.kotlin_metadata
kotlin/collections/IndexingIterator.kotlin_metadata
kotlin/collections/IterablesKt.kotlin_metadata
kotlin/collections/IteratorsKt.kotlin_metadata
kotlin/collections/LinkedHashMap.kotlin_metadata
kotlin/collections/LinkedHashSet.kotlin_metadata
kotlin/collections/MapAccessorsKt.kotlin_metadata
kotlin/collections/MapWithDefault.kotlin_metadata
kotlin/collections/MapWithDefaultImpl.kotlin_metadata
kotlin/collections/MapWithDefaultKt.kotlin_metadata
kotlin/collections/MapsKt.kotlin_metadata
kotlin/collections/MovingSubList.kotlin_metadata
kotlin/collections/MutableCollectionsKt.kotlin_metadata
kotlin/collections/MutableMapWithDefault.kotlin_metadata
kotlin/collections/MutableMapWithDefaultImpl.kotlin_metadata
kotlin/collections/RandomAccess.kotlin_metadata
kotlin/collections/ReversedList.kotlin_metadata
kotlin/collections/ReversedListReadOnly.kotlin_metadata
kotlin/collections/ReversedViewsKt.kotlin_metadata
kotlin/collections/RingBuffer.kotlin_metadata
kotlin/collections/SetsKt.kotlin_metadata
kotlin/collections/SlidingWindowKt.kotlin_metadata
kotlin/collections/State.kotlin_metadata
kotlin/collections/UArraySortingKt.kotlin_metadata
kotlin/collections/UByteIterator.kotlin_metadata
kotlin/collections/UIntIterator.kotlin_metadata
kotlin/collections/ULongIterator.kotlin_metadata
kotlin/collections/UShortIterator.kotlin_metadata
kotlin/collections/collections.kotlin_builtins
kotlin/comparisons/ComparisonsKt.kotlin_metadata
kotlin/comparisons/NaturalOrderComparator.kotlin_metadata
kotlin/comparisons/ReverseOrderComparator.kotlin_metadata
kotlin/comparisons/ReversedComparator.kotlin_metadata
kotlin/contracts/CallsInPlace.kotlin_metadata
kotlin/contracts/ConditionalEffect.kotlin_metadata
kotlin/contracts/ContractBuilder.kotlin_metadata
kotlin/contracts/ContractBuilderKt.kotlin_metadata
kotlin/contracts/Effect.kotlin_metadata
kotlin/contracts/ExperimentalContracts.kotlin_metadata
kotlin/contracts/InvocationKind.kotlin_metadata
kotlin/contracts/Returns.kotlin_metadata
kotlin/contracts/ReturnsNotNull.kotlin_metadata
kotlin/contracts/SimpleEffect.kotlin_metadata
kotlin/coroutines/AbstractCoroutineContextElement.kotlin_metadata
kotlin/coroutines/AbstractCoroutineContextKey.kotlin_metadata
kotlin/coroutines/CombinedContext.kotlin_metadata
kotlin/coroutines/Continuation.kotlin_metadata
kotlin/coroutines/ContinuationInterceptor.kotlin_metadata
kotlin/coroutines/ContinuationKt.kotlin_metadata
kotlin/coroutines/CoroutineContext.kotlin_metadata
kotlin/coroutines/CoroutineContextImplKt.kotlin_metadata
kotlin/coroutines/EmptyCoroutineContext.kotlin_metadata
kotlin/coroutines/RestrictsSuspension.kotlin_metadata
kotlin/coroutines/SafeContinuation.kotlin_metadata
kotlin/coroutines/cancellation/CancellationException.kotlin_metadata
kotlin/coroutines/cancellation/CancellationExceptionHKt.kotlin_metadata
kotlin/coroutines/coroutines.kotlin_builtins
kotlin/coroutines/intrinsics/CoroutineSingletons.kotlin_metadata
kotlin/coroutines/intrinsics/CoroutinesIntrinsicsHKt.kotlin_metadata
kotlin/coroutines/intrinsics/IntrinsicsKt.kotlin_metadata
kotlin/experimental/BitwiseOperationsKt.kotlin_metadata
kotlin/experimental/ExperimentalTypeInference.kotlin_metadata
kotlin/internal/AccessibleLateinitPropertyLiteral.kotlin_metadata
kotlin/internal/ContractsDsl.kotlin_metadata
kotlin/internal/DynamicExtension.kotlin_metadata
kotlin/internal/Exact.kotlin_metadata
kotlin/internal/HidesMembers.kotlin_metadata
kotlin/internal/InlineOnly.kotlin_metadata
kotlin/internal/LowPriorityInOverloadResolution.kotlin_metadata
kotlin/internal/NoInfer.kotlin_metadata
kotlin/internal/OnlyInputTypes.kotlin_metadata
kotlin/internal/RequireKotlin.kotlin_metadata
kotlin/internal/RequireKotlinVersionKind.kotlin_metadata
kotlin/internal/UProgressionUtilKt.kotlin_metadata
kotlin/internal/internal.kotlin_builtins
kotlin/io/IoHKt.kotlin_metadata
kotlin/io/Serializable.kotlin_metadata
kotlin/js/ExperimentalJsExport.kotlin_metadata
kotlin/js/JsExport.kotlin_metadata
kotlin/js/JsName.kotlin_metadata
kotlin/jvm/JvmField.kotlin_metadata
kotlin/jvm/JvmMultifileClass.kotlin_metadata
kotlin/jvm/JvmName.kotlin_metadata
kotlin/jvm/JvmOverloads.kotlin_metadata
kotlin/jvm/JvmPackageName.kotlin_metadata
kotlin/jvm/JvmStatic.kotlin_metadata
kotlin/jvm/JvmSuppressWildcards.kotlin_metadata
kotlin/jvm/JvmSynthetic.kotlin_metadata
kotlin/jvm/JvmWildcard.kotlin_metadata
kotlin/jvm/Strictfp.kotlin_metadata
kotlin/jvm/Synchronized.kotlin_metadata
kotlin/jvm/Transient.kotlin_metadata
kotlin/jvm/Volatile.kotlin_metadata
kotlin/kotlin.kotlin_builtins
kotlin/math/MathHKt.kotlin_metadata
kotlin/math/UMathKt.kotlin_metadata
kotlin/native/concurrent/SharedImmutable.kotlin_metadata
kotlin/native/concurrent/ThreadLocal.kotlin_metadata
kotlin/properties/Delegates.kotlin_metadata
kotlin/properties/NotNullVar.kotlin_metadata
kotlin/properties/ObservableProperty.kotlin_metadata
kotlin/properties/PropertyDelegateProvider.kotlin_metadata
kotlin/properties/ReadOnlyProperty.kotlin_metadata
kotlin/properties/ReadWriteProperty.kotlin_metadata
kotlin/random/Random.kotlin_metadata
kotlin/random/RandomKt.kotlin_metadata
kotlin/random/URandomKt.kotlin_metadata
kotlin/random/XorWowRandom.kotlin_metadata
kotlin/ranges/ClosedDoubleRange.kotlin_metadata
kotlin/ranges/ClosedFloatRange.kotlin_metadata
kotlin/ranges/ClosedFloatingPointRange.kotlin_metadata
kotlin/ranges/ComparableRange.kotlin_metadata
kotlin/ranges/RangesKt.kotlin_metadata
kotlin/ranges/UIntProgression.kotlin_metadata
kotlin/ranges/UIntProgressionIterator.kotlin_metadata
kotlin/ranges/UIntRange.kotlin_metadata
kotlin/ranges/ULongProgression.kotlin_metadata
kotlin/ranges/ULongProgressionIterator.kotlin_metadata
kotlin/ranges/ULongRange.kotlin_metadata
kotlin/ranges/ranges.kotlin_builtins
kotlin/reflect/KCallable.kotlin_metadata
kotlin/reflect/KClass.kotlin_metadata
kotlin/reflect/KClassesKt.kotlin_metadata
kotlin/reflect/KClassifier.kotlin_metadata
kotlin/reflect/KFunction.kotlin_metadata
kotlin/reflect/KMutableProperty.kotlin_metadata
kotlin/reflect/KMutableProperty0.kotlin_metadata
kotlin/reflect/KMutableProperty1.kotlin_metadata
kotlin/reflect/KMutableProperty2.kotlin_metadata
kotlin/reflect/KProperty.kotlin_metadata
kotlin/reflect/KProperty0.kotlin_metadata
kotlin/reflect/KProperty1.kotlin_metadata
kotlin/reflect/KProperty2.kotlin_metadata
kotlin/reflect/KType.kotlin_metadata
kotlin/reflect/KTypeParameter.kotlin_metadata
kotlin/reflect/KTypeProjection.kotlin_metadata
kotlin/reflect/KVariance.kotlin_metadata
kotlin/reflect/TypeOfKt.kotlin_metadata
kotlin/reflect/reflect.kotlin_builtins
kotlin/sequences/ConstrainedOnceSequence.kotlin_metadata
kotlin/sequences/DistinctIterator.kotlin_metadata
kotlin/sequences/DistinctSequence.kotlin_metadata
kotlin/sequences/DropSequence.kotlin_metadata
kotlin/sequences/DropTakeSequence.kotlin_metadata
kotlin/sequences/DropWhileSequence.kotlin_metadata
kotlin/sequences/EmptySequence.kotlin_metadata
kotlin/sequences/FilteringSequence.kotlin_metadata
kotlin/sequences/FlatteningSequence.kotlin_metadata
kotlin/sequences/GeneratorSequence.kotlin_metadata
kotlin/sequences/IndexingSequence.kotlin_metadata
kotlin/sequences/MergingSequence.kotlin_metadata
kotlin/sequences/Sequence.kotlin_metadata
kotlin/sequences/SequenceBuilderIterator.kotlin_metadata
kotlin/sequences/SequenceBuilderKt.kotlin_metadata
kotlin/sequences/SequenceScope.kotlin_metadata
kotlin/sequences/SequencesKt.kotlin_metadata
kotlin/sequences/SubSequence.kotlin_metadata
kotlin/sequences/TakeSequence.kotlin_metadata
kotlin/sequences/TakeWhileSequence.kotlin_metadata
kotlin/sequences/TransformingIndexedSequence.kotlin_metadata
kotlin/sequences/TransformingSequence.kotlin_metadata
kotlin/text/Appendable.kotlin_metadata
kotlin/text/AppendableKt.kotlin_metadata
kotlin/text/CharKt.kotlin_metadata
kotlin/text/CharacterCodingException.kotlin_metadata
kotlin/text/DelimitedRangesSequence.kotlin_metadata
kotlin/text/IndentKt.kotlin_metadata
kotlin/text/MatchGroup.kotlin_metadata
kotlin/text/MatchGroupCollection.kotlin_metadata
kotlin/text/MatchNamedGroupCollection.kotlin_metadata
kotlin/text/MatchResult.kotlin_metadata
kotlin/text/Regex.kotlin_metadata
kotlin/text/RegexExtensionsKt.kotlin_metadata
kotlin/text/RegexOption.kotlin_metadata
kotlin/text/StringBuilder.kotlin_metadata
kotlin/text/StringBuilderKt.kotlin_metadata
kotlin/text/StringNumberConversionsKt.kotlin_metadata
kotlin/text/StringsKt.kotlin_metadata
kotlin/text/TextHKt.kotlin_metadata
kotlin/text/Typography.kotlin_metadata
kotlin/text/UStringsKt.kotlin_metadata
kotlin/time/AbstractDoubleTimeSource.kotlin_metadata
kotlin/time/AbstractLongTimeSource.kotlin_metadata
kotlin/time/AdjustedTimeMark.kotlin_metadata
kotlin/time/Duration.kotlin_metadata
kotlin/time/DurationKt.kotlin_metadata
kotlin/time/DurationUnit.kotlin_metadata
kotlin/time/DurationUnitKt.kotlin_metadata
kotlin/time/ExperimentalTime.kotlin_metadata
kotlin/time/MeasureTimeKt.kotlin_metadata
kotlin/time/MonotonicTimeSource.kotlin_metadata
kotlin/time/TestTimeSource.kotlin_metadata
kotlin/time/TimeMark.kotlin_metadata
kotlin/time/TimeSource.kotlin_metadata
kotlin/time/TimeSourceKt.kotlin_metadata
kotlin/time/TimeSourcesKt.kotlin_metadata
kotlin/time/TimedValue.kotlin_metadata
lib/armeabi/libavmJni.so
lib/armeabi/libavmJni_gif.so
lib/armeabi/libj2v8.so
lib/armeabi/libjcore324.so
lib/armeabi/libjcore410.so
lib/armeabi/libjcore420.so
lib/armeabi/libocr-sdk.so
lib/armeabi/libsec.so
okhttp3/internal/publicsuffix/NOTICE
okhttp3/internal/publicsuffix/publicsuffixes.gz
res/anim/dialog_box_enter_anim.xml
res/anim/dialog_box_exit_anim.xml
res/anim/mq_loading.xml
res/anim/mq_message_form_enter.xml
res/anim/mq_message_form_exit.xml
res/color/mq_selector_evaluate_button.xml
res/drawable-hdpi-v4/add_btn_bg.png
res/drawable-hdpi-v4/jpush_btn_bg_green_playable.xml
res/drawable-hdpi-v4/jpush_ic_action_cancle.png
res/drawable-hdpi-v4/jpush_ic_action_close.png
res/drawable-hdpi-v4/jpush_ic_action_close2.png
res/drawable-hdpi-v4/jpush_ic_richpush_actionbar_back.png
res/drawable-hdpi-v4/jpush_ic_richpush_actionbar_divider.png
res/drawable-hdpi-v4/jpush_richpush_btn_selector.xml
res/drawable-hdpi-v4/jpush_richpush_progressbar.xml
res/drawable-hdpi-v4/mid_edit_bg.png
res/drawable-hdpi-v4/notification_bg_low_normal.9.png
res/drawable-hdpi-v4/notification_bg_low_pressed.9.png
res/drawable-hdpi-v4/notification_bg_normal.9.png
res/drawable-hdpi-v4/notification_bg_normal_pressed.9.png
res/drawable-hdpi-v4/notify_panel_notification_icon_bg.png
res/drawable-hdpi-v4/subtract_btn_bg.png
res/drawable-hdpi-v4/uz_copyright.png
res/drawable-hdpi-v4/uz_icon.png
res/drawable-hdpi-v4/uz_pull_down_refresh_arrow.png
res/drawable-hdpi-v4/uz_splash_bg.png
res/drawable-mdpi-v4/notification_bg_low_normal.9.png
res/drawable-mdpi-v4/notification_bg_low_pressed.9.png
res/drawable-mdpi-v4/notification_bg_normal.9.png
res/drawable-mdpi-v4/notification_bg_normal_pressed.9.png
res/drawable-mdpi-v4/notify_panel_notification_icon_bg.png
res/drawable-mdpi-v4/uz_icon.png
res/drawable-mdpi-v4/uz_splash_bg.png
res/drawable-nodpi-v4/stat_sys_third_app_notify.png
res/drawable-v21/notification_action_background.xml
res/drawable-xhdpi-v4/mq_arrow_right.png
res/drawable-xhdpi-v4/mq_bg_edit_view.9.png
res/drawable-xhdpi-v4/mq_bg_msg_left.9.png
res/drawable-xhdpi-v4/mq_bg_msg_right.9.png
res/drawable-xhdpi-v4/mq_bg_title.9.png
res/drawable-xhdpi-v4/mq_emoji_1.png
res/drawable-xhdpi-v4/mq_emoji_10.png
res/drawable-xhdpi-v4/mq_emoji_11.png
res/drawable-xhdpi-v4/mq_emoji_12.png
res/drawable-xhdpi-v4/mq_emoji_13.png
res/drawable-xhdpi-v4/mq_emoji_14.png
res/drawable-xhdpi-v4/mq_emoji_15.png
res/drawable-xhdpi-v4/mq_emoji_16.png
res/drawable-xhdpi-v4/mq_emoji_17.png
res/drawable-xhdpi-v4/mq_emoji_18.png
res/drawable-xhdpi-v4/mq_emoji_19.png
res/drawable-xhdpi-v4/mq_emoji_2.png
res/drawable-xhdpi-v4/mq_emoji_20.png
res/drawable-xhdpi-v4/mq_emoji_21.png
res/drawable-xhdpi-v4/mq_emoji_22.png
res/drawable-xhdpi-v4/mq_emoji_23.png
res/drawable-xhdpi-v4/mq_emoji_24.png
res/drawable-xhdpi-v4/mq_emoji_25.png
res/drawable-xhdpi-v4/mq_emoji_26.png
res/drawable-xhdpi-v4/mq_emoji_27.png
res/drawable-xhdpi-v4/mq_emoji_28.png
res/drawable-xhdpi-v4/mq_emoji_29.png
res/drawable-xhdpi-v4/mq_emoji_3.png
res/drawable-xhdpi-v4/mq_emoji_30.png
res/drawable-xhdpi-v4/mq_emoji_31.png
res/drawable-xhdpi-v4/mq_emoji_32.png
res/drawable-xhdpi-v4/mq_emoji_33.png
res/drawable-xhdpi-v4/mq_emoji_34.png
res/drawable-xhdpi-v4/mq_emoji_35.png
res/drawable-xhdpi-v4/mq_emoji_36.png
res/drawable-xhdpi-v4/mq_emoji_4.png
res/drawable-xhdpi-v4/mq_emoji_5.png
res/drawable-xhdpi-v4/mq_emoji_6.png
res/drawable-xhdpi-v4/mq_emoji_7.png
res/drawable-xhdpi-v4/mq_emoji_8.png
res/drawable-xhdpi-v4/mq_emoji_9.png
res/drawable-xhdpi-v4/mq_emoji_delete.png
res/drawable-xhdpi-v4/mq_ic_back.png
res/drawable-xhdpi-v4/mq_ic_msg_failed.png
res/drawable-xhdpi-v4/mq_ic_video_active.png
res/drawable-xhdpi-v4/mq_ic_video_normal.png
res/drawable-xhdpi-v4/mq_ic_video_play.png
res/drawable-xhdpi-v4/mq_info_icon.png
res/drawable-xhdpi-v4/mq_loading_1.png
res/drawable-xhdpi-v4/mq_loading_2.png
res/drawable-xhdpi-v4/mq_loading_3.png
res/drawable-xhdpi-v4/notification_bg_low_normal.9.png
res/drawable-xhdpi-v4/notification_bg_low_pressed.9.png
res/drawable-xhdpi-v4/notification_bg_normal.9.png
res/drawable-xhdpi-v4/notification_bg_normal_pressed.9.png
res/drawable-xhdpi-v4/notify_panel_notification_icon_bg.png
res/drawable-xhdpi-v4/push_pure_close.png
res/drawable-xhdpi-v4/stat_sys_third_app_notify.png
res/drawable-xhdpi-v4/uz_icon.png
res/drawable-xhdpi-v4/uz_splash_bg.png
res/drawable-xxhdpi-v4/mq_arrow_right.png
res/drawable-xxhdpi-v4/mq_checkbox_uncheck.png
res/drawable-xxhdpi-v4/mq_checkbox_unchecked.png
res/drawable-xxhdpi-v4/mq_conversation_edit_bg.9.png
res/drawable-xxhdpi-v4/mq_evaluate_bad.png
res/drawable-xxhdpi-v4/mq_evaluate_good.png
res/drawable-xxhdpi-v4/mq_evaluate_medium.png
res/drawable-xxhdpi-v4/mq_ic_add_img.png
res/drawable-xxhdpi-v4/mq_ic_angry_face.png
res/drawable-xxhdpi-v4/mq_ic_back_white.png
res/drawable-xxhdpi-v4/mq_ic_camera_active.png
res/drawable-xxhdpi-v4/mq_ic_camera_normal.png
res/drawable-xxhdpi-v4/mq_ic_cb_checked.png
res/drawable-xxhdpi-v4/mq_ic_cb_normal.png
res/drawable-xxhdpi-v4/mq_ic_delete_icon.png
res/drawable-xxhdpi-v4/mq_ic_download.png
res/drawable-xxhdpi-v4/mq_ic_download_gray.png
res/drawable-xxhdpi-v4/mq_ic_emoji_active.png
res/drawable-xxhdpi-v4/mq_ic_emoji_normal.png
res/drawable-xxhdpi-v4/mq_ic_evaluate_active.png
res/drawable-xxhdpi-v4/mq_ic_evaluate_normal.png
res/drawable-xxhdpi-v4/mq_ic_evaluate_outline.png
res/drawable-xxhdpi-v4/mq_ic_file.png
res/drawable-xxhdpi-v4/mq_ic_gallery_arrow_down.png
res/drawable-xxhdpi-v4/mq_ic_gallery_arrow_up.png
res/drawable-xxhdpi-v4/mq_ic_gallery_camera.png
res/drawable-xxhdpi-v4/mq_ic_holder_avatar.png
res/drawable-xxhdpi-v4/mq_ic_holder_dark.png
res/drawable-xxhdpi-v4/mq_ic_holder_light.png
res/drawable-xxhdpi-v4/mq_ic_holder_white.png
res/drawable-xxhdpi-v4/mq_ic_image_active.png
res/drawable-xxhdpi-v4/mq_ic_image_normal.png
res/drawable-xxhdpi-v4/mq_ic_mic_active.png
res/drawable-xxhdpi-v4/mq_ic_mic_normal.png
res/drawable-xxhdpi-v4/mq_ic_neutral_face.png
res/drawable-xxhdpi-v4/mq_ic_send_icon_grey.png
res/drawable-xxhdpi-v4/mq_ic_send_icon_white.png
res/drawable-xxhdpi-v4/mq_ic_smiling_face.png
res/drawable-xxhdpi-v4/mq_ic_video_active.png
res/drawable-xxhdpi-v4/mq_ic_video_normal.png
res/drawable-xxhdpi-v4/mq_ic_video_play.png
res/drawable-xxhdpi-v4/mq_info_icon.png
res/drawable-xxhdpi-v4/mq_radio_btn_checked.png
res/drawable-xxhdpi-v4/mq_radio_btn_uncheck.png
res/drawable-xxhdpi-v4/mq_redirect_queue_00.png
res/drawable-xxhdpi-v4/mq_redirect_queue_01.png
res/drawable-xxhdpi-v4/mq_redirect_queue_02.png
res/drawable-xxhdpi-v4/mq_redirect_queue_03.png
res/drawable-xxhdpi-v4/mq_redirect_queue_04.png
res/drawable-xxhdpi-v4/mq_redirect_queue_05.png
res/drawable-xxhdpi-v4/mq_redirect_queue_06.png
res/drawable-xxhdpi-v4/mq_redirect_queue_07.png
res/drawable-xxhdpi-v4/mq_redirect_queue_08.png
res/drawable-xxhdpi-v4/mq_redirect_queue_09.png
res/drawable-xxhdpi-v4/mq_redirect_queue_10.png
res/drawable-xxhdpi-v4/mq_redirect_queue_11.png
res/drawable-xxhdpi-v4/mq_redirect_queue_12.png
res/drawable-xxhdpi-v4/mq_redirect_queue_13.png
res/drawable-xxhdpi-v4/mq_redirect_queue_14.png
res/drawable-xxhdpi-v4/mq_redirect_queue_15.png
res/drawable-xxhdpi-v4/mq_redirect_queue_16.png
res/drawable-xxhdpi-v4/mq_redirect_queue_17.png
res/drawable-xxhdpi-v4/mq_redirect_queue_18.png
res/drawable-xxhdpi-v4/mq_redirect_queue_19.png
res/drawable-xxhdpi-v4/mq_redirect_queue_20.png
res/drawable-xxhdpi-v4/mq_redirect_queue_21.png
res/drawable-xxhdpi-v4/mq_redirect_queue_22.png
res/drawable-xxhdpi-v4/mq_redirect_queue_23.png
res/drawable-xxhdpi-v4/mq_redirect_queue_24.png
res/drawable-xxhdpi-v4/mq_redirect_queue_25.png
res/drawable-xxhdpi-v4/mq_redirect_queue_26.png
res/drawable-xxhdpi-v4/mq_redirect_queue_27.png
res/drawable-xxhdpi-v4/mq_redirect_queue_28.png
res/drawable-xxhdpi-v4/mq_redirect_queue_29.png
res/drawable-xxhdpi-v4/mq_redirect_queue_30.png
res/drawable-xxhdpi-v4/mq_redirect_queue_31.png
res/drawable-xxhdpi-v4/mq_voice_left_normal.png
res/drawable-xxhdpi-v4/mq_voice_left_playing_level1.png
res/drawable-xxhdpi-v4/mq_voice_left_playing_level2.png
res/drawable-xxhdpi-v4/mq_voice_left_playing_level3.png
res/drawable-xxhdpi-v4/mq_voice_level1.png
res/drawable-xxhdpi-v4/mq_voice_level2.png
res/drawable-xxhdpi-v4/mq_voice_level3.png
res/drawable-xxhdpi-v4/mq_voice_level4.png
res/drawable-xxhdpi-v4/mq_voice_level5.png
res/drawable-xxhdpi-v4/mq_voice_level6.png
res/drawable-xxhdpi-v4/mq_voice_level7.png
res/drawable-xxhdpi-v4/mq_voice_level8.png
res/drawable-xxhdpi-v4/mq_voice_level9.png
res/drawable-xxhdpi-v4/mq_voice_right_normal.png
res/drawable-xxhdpi-v4/mq_voice_right_playing_level1.png
res/drawable-xxhdpi-v4/mq_voice_right_playing_level2.png
res/drawable-xxhdpi-v4/mq_voice_right_playing_level3.png
res/drawable-xxhdpi-v4/mq_voice_want_cancel.png
res/drawable-xxhdpi-v4/push_pure_close.png
res/drawable-xxhdpi-v4/stat_sys_third_app_notify.png
res/drawable-xxhdpi-v4/uz_icon.png
res/drawable-xxhdpi-v4/uz_splash_bg.png
res/drawable-xxxhdpi-v4/push_pure_close.png
res/drawable-xxxhdpi-v4/stat_sys_third_app_notify.png
res/drawable/mo_imagebrowser_back.png
res/drawable/mo_imagebrowser_error.jpg
res/drawable/mo_imagebrowser_nv_default_bg.png
res/drawable/mo_imagebrowser_save.png
res/drawable/mo_imagebrowser_save1.png
res/drawable/mq_anim_voice_left_playing.xml
res/drawable/mq_anim_voice_right_playing.xml
res/drawable/mq_bg_card.xml
res/drawable/mq_bg_card_primary.xml
res/drawable/mq_rectangle_primary_16dp.xml
res/drawable/mq_rotate_progress_bar.xml
res/drawable/mq_rotate_progress_bar_photopicker.xml
res/drawable/mq_selector_btn_photo_send.xml
res/drawable/mq_selector_checkbox.xml
res/drawable/mq_selector_emotion_indicator.xml
res/drawable/mq_selector_evaluate_et.xml
res/drawable/mq_selector_evaluate_rb.xml
res/drawable/mq_selector_ic_camera.xml
res/drawable/mq_selector_ic_evaluate.xml
res/drawable/mq_selector_ic_image.xml
res/drawable/mq_selector_ic_video.xml
res/drawable/mq_selector_input_bg.xml
res/drawable/mq_selector_item_bottom.xml
res/drawable/mq_selector_item_bottom_left.xml
res/drawable/mq_selector_item_bottom_right.xml
res/drawable/mq_selector_item_center.xml
res/drawable/mq_selector_item_folder.xml
res/drawable/mq_selector_item_top.xml
res/drawable/mq_selector_radio_btn.xml
res/drawable/mq_shape_agent_status_off_duty.xml
res/drawable/mq_shape_agent_status_offline.xml
res/drawable/mq_shape_agent_status_online.xml
res/drawable/mq_shape_bg_rich_text.xml
res/drawable/mq_shape_chat_unread_circle_bg.xml
res/drawable/mq_shape_circle_gray_outline.xml
res/drawable/mq_shape_cursor.xml
res/drawable/mq_shape_dialog_bg.xml
res/drawable/mq_shape_evaluate_angry.xml
res/drawable/mq_shape_evaluate_neutral.xml
res/drawable/mq_shape_evaluate_smiling.xml
res/drawable/mq_shape_gray_dot.xml
res/drawable/mq_shape_leave_tip_gradient_line.xml
res/drawable/mq_shape_photo_folder_pw_bg.xml
res/drawable/mq_shape_send_back_normal.xml
res/drawable/mq_shape_send_back_pressed.xml
res/drawable/mq_shape_send_button.xml
res/drawable/notification_bg.xml
res/drawable/notification_bg_low.xml
res/drawable/notification_icon_background.xml
res/drawable/notification_tile_bg.xml
res/drawable/uz_thumb_hor.png
res/drawable/uz_thumb_ver.9.png
res/layout-v21/notification_action.xml
res/layout-v21/notification_action_tombstone.xml
res/layout-v21/notification_template_custom_big.xml
res/layout-v21/notification_template_icon_group.xml
res/layout-v21/push_notification.xml
res/layout-v21/push_notification_large.xml
res/layout-v21/push_notification_middle.xml
res/layout/actionmenu_item_layout.xml
res/layout/dialog_box_actionmenu_layout.xml
res/layout/dialog_box_alert_layout.xml
res/layout/dialog_box_amount_layout.xml
res/layout/dialog_box_confirm_layout.xml
res/layout/dialog_box_discount_layout.xml
res/layout/dialog_box_evaluation_layout.xml
res/layout/dialog_box_input_layout.xml
res/layout/dialog_box_inputbox_layout.xml
res/layout/dialog_box_list_layout.xml
res/layout/dialog_box_multi_line_menu_layout.xml
res/layout/dialog_box_multi_line_menu_row_layout.xml
res/layout/dialog_box_popupalert_layout.xml
res/layout/dialog_box_raffle_layout.xml
res/layout/dialog_box_receipt_layout.xml
res/layout/dialog_box_scene_layout.xml
res/layout/dialog_box_sendmessage_layout.xml
res/layout/dialog_box_share_layout.xml
res/layout/dialog_box_taskplan_layout.xml
res/layout/dialog_box_tips_layout.xml
res/layout/dialog_box_webview_layout.xml
res/layout/item_dialog_list_layout.xml
res/layout/jpush_inapp_banner.xml
res/layout/jpush_popwin_layout.xml
res/layout/jpush_webview_layout.xml
res/layout/menu_list_item_layout.xml
res/layout/mn_popups_layout.xml
res/layout/mo_demo_main_activity.xml
res/layout/mo_imagebrowser_gallery_picker_item.xml
res/layout/mo_imagebrowser_gallerypicker.xml
res/layout/mo_imagebrowser_image_activity.xml
res/layout/mo_ui_action_selector_citys.xml
res/layout/mo_ui_action_selector_main.xml
res/layout/mq_activity_collect_info.xml
res/layout/mq_activity_conversation.xml
res/layout/mq_activity_inquiry_form.xml
res/layout/mq_activity_message_form.xml
res/layout/mq_activity_photo_picker.xml
res/layout/mq_activity_photo_picker_preview.xml
res/layout/mq_activity_photo_preview.xml
res/layout/mq_activity_webview.xml
res/layout/mq_dialog_confirm.xml
res/layout/mq_dialog_evaluate.xml
res/layout/mq_dialog_input.xml
res/layout/mq_dialog_loading.xml
res/layout/mq_dialog_loading_photopicker.xml
res/layout/mq_dialog_ticket_categry.xml
res/layout/mq_item_action.xml
res/layout/mq_item_chat_left.xml
res/layout/mq_item_chat_right.xml
res/layout/mq_item_chat_time.xml
res/layout/mq_item_clue_card.xml
res/layout/mq_item_clue_card_checkbox.xml
res/layout/mq_item_clue_card_input_edit.xml
res/layout/mq_item_clue_card_radio.xml
res/layout/mq_item_clue_card_send.xml
res/layout/mq_item_clue_card_time_picker.xml
res/layout/mq_item_conv_divider.xml
res/layout/mq_item_emotion_keyboard.xml
res/layout/mq_item_file_layout.xml
res/layout/mq_item_fill_color_action.xml
res/layout/mq_item_form_checkbox.xml
res/layout/mq_item_form_inquiry.xml
res/layout/mq_item_form_radio_btn.xml
res/layout/mq_item_form_radio_btn_left.xml
res/layout/mq_item_form_type_auth_code.xml
res/layout/mq_item_form_type_date.xml
res/layout/mq_item_form_type_multiple_choice.xml
res/layout/mq_item_form_type_single_choice.xml
res/layout/mq_item_form_type_text.xml
res/layout/mq_item_hybrid.xml
res/layout/mq_item_msg_evaluate.xml
res/layout/mq_item_msg_tip.xml
res/layout/mq_item_no_agent.xml
res/layout/mq_item_photo_folder.xml
res/layout/mq_item_product_card.xml
res/layout/mq_item_redirect_queue.xml
res/layout/mq_item_rich_text.xml
res/layout/mq_item_robot.xml
res/layout/mq_item_robot_faq_tab.xml
res/layout/mq_item_robot_menu.xml
res/layout/mq_item_robot_menu_faq.xml
res/layout/mq_item_square_image.xml
res/layout/mq_item_text_list.xml
res/layout/mq_item_useless_redirect.xml
res/layout/mq_item_video_layout.xml
res/layout/mq_layout_custom_keyboard.xml
res/layout/mq_layout_emotion_keyboard.xml
res/layout/mq_layout_form_check.xml
res/layout/mq_layout_form_date.xml
res/layout/mq_layout_form_input.xml
res/layout/mq_layout_form_radio.xml
res/layout/mq_layout_recorder_keyboard.xml
res/layout/mq_net_status_top_pop_tip.xml
res/layout/mq_notification_card.xml
res/layout/mq_pw_photo_folder.xml
res/layout/mq_robot_faq_container.xml
res/layout/mq_top_pop_tip.xml
res/layout/notification_media_action.xml
res/layout/notification_media_cancel_action.xml
res/layout/notification_template_big_media.xml
res/layout/notification_template_big_media_custom.xml
res/layout/notification_template_big_media_narrow.xml
res/layout/notification_template_big_media_narrow_custom.xml
res/layout/notification_template_lines_media.xml
res/layout/notification_template_media.xml
res/layout/notification_template_media_custom.xml
res/layout/notification_template_part_chronometer.xml
res/layout/notification_template_part_time.xml
res/layout/nvnavigation_item_layout.xml
res/layout/push_download_notification_layout.xml
res/layout/push_expandable_big_image_notification.xml
res/layout/push_expandable_big_text_notification.xml
res/layout/push_pure_pic_notification_f6.xml
res/layout/push_pure_pic_notification_f7.xml
res/layout/push_pure_pic_notification_f8.xml
res/layout/push_pure_pic_notification_f9.xml
res/layout/push_pure_pic_notification_f9_275.xml
res/layout/receipt_item_layout.xml
res/layout/scene_dialog_item_layout.xml
res/layout/share_item_layout.xml
res/layout/taskplan_item_layout.xml
res/layout/tip_bottom_item_layout.xml
res/raw/mq_new_message.ogg
res/raw/mq_send_message.ogg
res/xml/jpush_file_paths.xml
res/xml/mq_file_paths.xml
resources.arsc

污点分析

当apk较大时,代码量会很大,造成数据流图(ICFG)呈现爆炸式增长,所以该功能比较耗时,请先喝杯咖啡,耐心等待……
规则名称 描述信息 操作
病毒分析 使用安卓恶意软件常用的API进行污点分析 开始分析  
漏洞挖掘 漏洞挖掘场景下的污点分析 开始分析  
隐私合规 隐私合规场景下的污点分析:组件内污点传播、组件间污点传播、组件与库函数之间的污点传播 开始分析  
密码分析 分析加密算法是否使用常量密钥、静态初始化的向量(IV)、加密模式是否使用ECB等 开始分析  
Callback 因为Android中系统级的Callback并不会出现显式地进行回调方法的调用,所以如果需要分析Callback方法需要在声明文件中将其声明,这里提供一份AndroidCallbacks.txt文件,里面是一些常见的原生回调接口或类,如果有特殊接口需求,可以联系管理员 开始分析