安全分析报告： JuanHand v6.4.1

安全分数


安全分数 41/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

6

用户/设备跟踪器


调研结果

高危 5
中危 15
信息 1
安全 1
关注 3

高危 基本配置不安全地配置为允许到所有域的明文流量。 

Scope:
*

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击 

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
com/xinye/xmp/cache/OKHttpManager.java, line(s) 135,11

高危 该文件是World Writable。任何应用程序都可以写入文件 

该文件是World Writable。任何应用程序都可以写入文件
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
cn/tongdun/android/p020EEEEE/p021EEEEEE/EEEEEEEE.java, line(s) 52,17

高危 不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击 

不安全的Web视图实现。Web视图忽略SSL证书错误并接受任何SSL证书。此应用程序易受MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#webview-server-certificate-verification

Files:
com/xinye/xmp/ui/XMPWebView.java, line(s) 127,135,665,673,748,756,72,125,291,663,746

高危 应用程序包含隐私跟踪程序 

此应用程序有多个6隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危 Broadcast Receiver (com.global.loan.receiver.SMSBroadcastReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.gms.auth.api.phone.permission.SEND [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity (com.sensorsdata.analytics.android.sdk.dialog.SchemeActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (androidx.compose.ui.tooling.PreviewActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (androidx.profileinstaller.ProfileInstallReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.DUMP [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
coil/request/C1li.java, line(s) 365
com/global/loan/dialog/FQuestionnaireDialog.java, line(s) 278
com/ppdai/sdk/tracker/DeviceAssembleHandler.java, line(s) 19
com/ppdai/sdk/tracker/storage/CipherSharedPreferenceWrapper.java, line(s) 26

中危 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/appsflyer/internal/AFb1gSDK.java, line(s) 16
com/global/loan/model/bean/C2.java, line(s) 4
com/global/loan/model/bean/api/BindMobile.java, line(s) 4
com/global/loan/model/bean/api/CanChangeMobile.java, line(s) 6
com/global/loan/model/bean/api/CanModifyKtp.java, line(s) 4
com/global/loan/model/bean/api/CheckAccountActive.java, line(s) 4
com/global/loan/model/bean/api/CheckProdSource.java, line(s) 4
com/global/loan/model/bean/api/CheckinEntrance.java, line(s) 4
com/global/loan/model/bean/api/ClickCheckin.java, line(s) 4
com/global/loan/model/bean/api/Exchange.java, line(s) 5
com/global/loan/model/bean/api/FullMemberMessage.java, line(s) 7
com/global/loan/model/bean/api/GetBnkItemsV2.java, line(s) 6
com/global/loan/model/bean/api/GetRepayChannelList.java, line(s) 9
com/global/loan/model/bean/api/GetWithdrawCode.java, line(s) 6
com/global/loan/model/bean/api/IdValidate.java, line(s) 4
com/global/loan/model/bean/api/IsHaveQuota.java, line(s) 5
com/global/loan/model/bean/api/LiveValidate.java, line(s) 4
com/global/loan/model/bean/api/PrePubList.java, line(s) 5
com/global/loan/model/bean/api/QueryCheckinDetailInfo.java, line(s) 6
com/global/loan/model/bean/api/QueryGoodsList.java, line(s) 6
com/global/loan/model/bean/api/QueryMsgList.java, line(s) 7
com/global/loan/model/bean/api/RewardPointDetail.java, line(s) 6
com/global/loan/model/bean/api/SaveLivenessInfo.java, line(s) 5
com/global/loan/model/bean/api/SurveyQuery.java, line(s) 7
com/ppdai/sdk/tracker/crypto/PPDDataEncrypter.java, line(s) 7

中危 MD5是已知存在哈希冲突的弱哈希 

MD5是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
cn/tongdun/android/bugly/p015EEEEEEEEE/EEEEEEE.java, line(s) 23
com/ijiami/residconfusion/ConfusionUtils.java, line(s) 267
com/ppdai/sdk/tracker/crypto/MD5.java, line(s) 21,37

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞 

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
com/finv/datacollect/WebDialogFragment.java, line(s) 159,174
com/global/loan/activity/AWeb.java, line(s) 215,342
com/global/loan/fragment/FWeb.java, line(s) 124,185
com/xinye/xmp/ui/XMPWebView.java, line(s) 220,223,224,186,198

中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/global/loan/util/FileUtils.java, line(s) 81,96
com/module/permission/FileProvider.java, line(s) 150
com/ppdai/sdk/tracker/processor/PhoneStorageDataProcessor.java, line(s) 20,21
com/xinye/xmp/permission/C2.java, line(s) 36

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
com/global/loan/util/FileUtils.java, line(s) 85

中危 IP地址泄露 

IP地址泄露


Files:
com/snail/antifake/deviceid/IpScanner.java, line(s) 70

中危 可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息 

可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-6

Files:
com/finv/datacollect/WebDialogFragment.java, line(s) 180,174

中危 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
"google_api_key" : "AIzaSyD0eGSKm33CbcIsfL4NuLCDC4cLQW3ATDQ"
"firebase_database_url" : "https://new-juanhand.firebaseio.com"
"google_crash_reporting_api_key" : "AIzaSyD0eGSKm33CbcIsfL4NuLCDC4cLQW3ATDQ"
09674a515a4051123266425e
177c6a67697b5d4a7079736a6c7770
76425050584f081f5e444c46545e05054e541e0c51560b09475441524e4c
331d01055f5f031c1600283e1c07
38717f3e24637a776b606b2a3f7069667076706a
383c716b2a303832202a717e3e3b272c373c7b73323d33242c373071fd5110c2313131313131835102d0835110705110705102625102625110c2835102d031835110705102df293a
6243465a514a410612595b5348564c564a4d0c234e4c4a5a4c4055434b47565f4f404e59514a4d
7c0700262717160a1334360d16
38313f7e6a2d25253532347472382f2a32303b3c2a2b2c3d203a34
17414b647c4a5e595b516b7c4b59035753
280e1d36271d0f14111524201617160a073c3610
574f4d7362704e48627e6f595b
380709484016100d020b0e0304060d40411a1f06060306
53484d515a414a0d085647192865505a58585a4a6a7b5d504342
382c22636f2c2467622d343b2d2b252831263d
6e7c6864734f5e6d6a595c6662746f7374444f7e7a767b7c
3a2d28343f242f68652538332938786d20353f2423624e213722333529243e292b2d2b2023
765042424a5d1a0d4c565e54464c17175c460c1b554653405c5e
5f4350746c416e67484164664948
4d202e6f6a213021393d726d3339272b21
6c4a071d5c464e44565c0708484d515a414a0d0b50554c52102b70554c52
38595716195b4c45435240575d4d0839645262795755595a5f617748595343554948
71131d5c531c17120e445c060852500e1f031c171118
3a46435f544f4403175c5e564d5349534f4809264b494f5f4945415746465f454e5c5c58
3b6167626061454f686c6669414079746f63
38151b5a5c021310445f1410050c0e081f1203080e
4f30252f3433727f3e3071743f2e3f27236c732d2739353f78532d273923243f293e2425362d3834
6b622f35746e666c7e742f2060657972696225327462666f2d076463496d6475
3712584f0e1e074b5c1c19050e151e59451b0c0f05125954140e14061e131a04
7d3b2c313121302329202736273a2137372d2a3d272528
7d10071a1a0a1916070813091b011d1a0f1e1c1006
3f505e4f5d4a4943546e6b46530f0849
705d450c155d4e4f5e524d4b41
38050b4a4a0d0318141016120f53401b150408
30733e24657f777d6f653e3171746863787334206f7c7674787c777b64797923b21e5f8d7e7e7e7e7e7ecc1e4d9fcc1e5f3f1e5f3f1e4d2d1e4d2d1e5f8dcc1e4d9f7ecc1e5f3f1e4d907162
37dbd151eb3ca24477bc27cf0febcbe3
1e2a587e637061786364317f
2e405c585f15495c114b4e574943484f5c1306475d555f4d471c1c574d
cb072839e1e240a23baae123ca6cf165
38050b4a4606031f140f044343081a1a000a1614010213
5f03103b2a1002191c18292d1b1a1b070a313b1d
1e773a20617b73796b613a3575706c677c7730276c7167666726b61a5b897a7a7a7a7a7ac81a499bc81a5b3b1a5b3b1a49291a49291a5b89c81a499b7ac81a5b3b1a49947667
021c1b2e281d191506183e28070a0409080236341716203d190a091d
1f0b2d280206110a1c103d36160c
38020c4d4200171e18091b0c06165348090c06
4c6a6b676f5d5f6c607972777f6e7b
71313f7e713e35302c667e242a706a372b2a2e
3a2a2f333823286f6829243f342e3f7f7b3866423c14272d2f23270d092a2a2327327352022432635107383224
610d170d1f070a363b0802000c081c3c2105090403
2914484c071e1502004b561d0111
3a05001c170c0740571c1d0e15000c4145081d170c0b4a491418
38555b1a034852545f524303004b48484f5e
38525c1d1b5450415b1b5e5f410443565144435651595a56
FFE391E0EA186D0734ED601E4E70E3224B7309D48E2075BAC46D8C667EAE7212
511c110a011b0a5e05105c1c125353181c031f4b581a0504185b510f051b171d07071f54
3a2a2f333823286f7b30323a213f253f2324654a27252333252939292b3624333f3626292730382324
691e08050b193f28121b11080e1512
293b3573702d21653c27657067707d3b3528253f373d2f257e6322
571d1c2230221c1730213d0b09
30737d3c226d6b78647d3a2279686e78796c6a6e
1a310920240d171f0f252104111d1b0d
2a014c56170d050f1d174c4303061a110a01464e0f000e19110a0d4cc06c2dff0c0c0c0c0c0cbe6c3fedbe6c2d4d6c2d4d6c3f5f6c3f5f6c2dffbe6c3fed0cbe6c2d4d6c3fe21407
6b59140e4f555d57454f141b5b5e424952591e094f595d54163c5f5872565f4e
542874792229303d7f6d2622342f33347572323824223d3d3e2f2038
370e445312021b57400005191209024559071013190e45480812081a020f0618
7d05120f0f1f09131a10090f141303070b0e13
1b5957161c5d555d5e5c1e1a5a5f434853581f1c5f4b080b40424a514f554f5354153a504e4358
742d66767362673a703925716c297e79687b
774d405b504a5b0f54410d4d4302195e5e5800195a5f1c266c75635c585e4c40561c276c404a5b5c4e4e4d567a6c0a3856494c5a
5f55466d7c46544f4a4e7368424044424c4a
2e15090d0a401c0945044a421f57461810141943490218524706031f140f0442504e
38125f5802041f1c004247045c411d02081e
306f61203e7177647861263e6574726465707672
157b6b6a46426f70616b7b6d
1620331b0a2a203f2912052a2b
1026323e291504373003063c382e35292e1e1524202c2126
38505e1f1052454c171a414853550a5a451e5148475157514b
7a1f03181f1f1120330d0a002c2213171b1611
4c170b143729131f07071a0c
775f52494258491d46531f5f51100b4c4c4a120b484d0e347e67714e4a4c5e52440e357e5258494e5c5c5f44687e18335d5b5e
767070677c656372323e7f656d67757f24246f75
5e09131b110309233e1514010703100c342509
2147565942584a504c4b5e4f4d4157
29336f73383f2f2b29303d353d38646d2c252f
38494706094b5c550e0358514a4c13435c0a43474e5f
7403555503145e4c4055594903035555584e571d134c5a05134c5a1a40134c5a4c4b484b01034f5d525a58566763495872664b484b
164b586e724e544f7874454f5a
37656d7a7f62253d6a6a677168230a417d4851757c44457a67
2b160102081f180e05131d1c
3421297575292b38292e283b202166733336216b7b3834
3BAF59A2E5331C30675FAB35FF5FFF0D116142D3D4664F1C3CB804068B40614F
1b1816575d1c141c1f1d5f5b1b1e020912195e5d1e0a
164b587f674a45416165535253
1e0548521309010b1913484707021e150e0542551e0315141554c46829fb080808080808ba683be9ba682949682949683b5b683b5b6829fbba683be908ba682949683be60415
5716142a3b29171c3b2a360017
385e50111d5e56151843484e545746574743450e094e
16677455496e765c426d6c
W6VLf6PitAIkKiFuVXBeTe54CSc8jB
100f0a161d060d4a411c5d7d2a0a0711083d221d1f1517061d0c16
35544e01165e5c46405b525c
3a53564a415a511602494b4358465c465a5d1c335e5c5a4a5c5045535b57464f5f505e49415a5d
372c6671302039756222273b302b20677b2532313b2c675b0532313b2c0b1d36202e2f
7c213d393e74283d742b392c2b3a6767263c343e2c267d7d362c
381d0c0b1c00113e291c16141416062637111c0f0e
15647475595d706f7e746472
1b7f71303a7b737b787a383c7c79656e757e393a796d2e3c76642e347e7278696e7c7c7f642f34746962646f7c7e31147b56616064756e6969747a5d5e444564776c7975
3838367776373f29636c2b2f32352039
2b7371677c7c613c387e61676d2d216b
2e332f2b2c663a2f752971643971603e36323f656f243e
2e716d696e24786d207a7f66787d6067622237766c646e7c762d2d667c
2e0f1317105a06135f1e5058054d5c020a0e0359531802
526f223879636b617379222d6d68747f646f283c73606a6864606b677865653fae024391626262626262d0025183d0024323024323025131025131024391d002518362d002432302518c6d7e
1121100b1e0c49590a4355180d141d
49668163590f816aaf863df014568115
2843507964464a153e7a594e4656
1f372d37253d300c0132383a363226061b3f333e39
107a7f585d727f717c7d7756486c7f7c68
3a3e0d485e12111e142821110b444f1a0a1c1a0a1c
3a0f0a161d060d4a5e15171f041a001a0601406f02000616000c190f070b1a13030c02151d0601
490e0041560d1e454803111d08040e0f151415061d0804
2e081410175d0114480015024a4e0f151d17050f54541f05
165a497c605f59536975514d
381719584300190746560e000511111c0a1302001b18
440b34242e6c7c2c352a272c77336c6c3434
343b1b01011411190f0f1b1557104c0015180e0a59481a17455d1a1a141b525011090d0b
650a5354151f161100435e175304
38757b3a3a7d7368646066627f233a717161657d71
29707e636e747c76646e352869
5c3836776e323332332435323e2e2e32357476312b273f3f22346979206d7b252d734e24230f332c0f112b273f3f2234041639343a37363c
38555b1a0641585e59181a555f5753
2853407368575b57797d5954736a495e5646
7d786f7272627e607a72707c757d677e736864
29050b4d57400e6969021b43050b161b010903111b405d1c
74782e2e23352c66692f236566202e35393d3b3f2234
383578622339313b2923787737322e253e3572652e3325242564f45819cb3838383838388a580bd98a581979581979580b6b580b6b5819cb8a580bd9388a581979580bd63425
61656b2a357e686b666e606b7e352b647d726462647e
7c322e2a2d673b2e723a2f387074352f272d3f356e6e253f
386b65243a6d7a2d00636f
5f10362b3829302b2c7937
243a34757a212d76752824797934212b3037766b312325306c6b202132293c30
713c32737c33383d216b7d212d2823202126376a73323d3b35393c373839
3016185947080e1d01185f471c0d0b1d1c090f0b5179046d0c
690a5748591919465049525d5c
380d034242050b101c181e1a075b420d12180f10
066f6d786f69534272757f
3c2c3f0a1f2c2624282c06022121282c39
164d5e75645e4c5752566b705a585c5a545273604347
6d2824281b1b2e08062a353f0e1e28293228
377e342362726b27307075696279723529776063697e35387862786a727f7668
382f21606f2d3a33352436212b3b7e6f2d3a33352436212b3b3c202f21363e25223d213e3a3c2e2234
1e3a2622090d3b222e1c163c27
889109d126886bd98bc8f6a70d138545
3c5f69646a782136737a70696f7473
76445f464051111d5c464e44565c07074c56
19555f5b4c57414d76704a5b4a51
19585256415a4c407b7d4756475c
74603d223373662c283e25393e
385d53121d5a5f58504607135c454a5c5a5c46
1e2d607a3b212923313b606f2f2a363d262d6a7d362b3d3c3d7cec4001d3202020202020924013c1924001614001614013734013734001d3924013c120924001614013ce2c3d
2a602d37766c646e7c762d2262677b706b6027317a696879756a6c6626a10d4c9e6d6d6d6d6d6ddf0d5e8cdf0d4c2c0d4c2c0d5e3e0d5e3e0d4c9edf0d5e8c6ddf0d4c2c0d5e83606f
2b7e6f736a656d7a72696e2e2f63787e7e36316869786b63
384d43021b5c494e5b5c494e01064549
38757b3a357760696f7e6c7b7161243668797a6f6879647e706d
372f657233233a76612124383328236478263132382f6458063132382f081e35232d2c
30030d4c521d1b08140d4a5209181e08091c1a1e
38222c6d622520272f3978613f2e707329353339656822
5c5408055e554c4103115a5e48534f48090856495654544b
286b7859487a76636f5f55607b6a7f7a7e5a5a7e68736f68
38141a5b41061f120e050e4f5f1c10
5e411c0312524208171457571c55145f
254a776160614b57737f7275
3652111853074c1555504c475c575f485a40405d
382a24656b29253c376c642b323d2b2d2b3167
1e6d71755e5a6c75794b416b70
5f65765245707a78744c4c76647f7a7e45406f6e
6d906db145cb4547aba86ddf75edfcef
385e50111d5d58444f545f18195a4a4b5f47494f0e0f4c50565c4343445555
192f7671303a333425667b327621
2e485450571d4154125956420a0e4f555d57454f14145f45
38333d7c70333b7862352832382e25233f29283b20353929
a01625815f3428cb69100cc5d613fa7d
2a165b41001a12180a005b5414110d061d1651570c09100e4c772c09100e
162d3e08152b0d103a383c3a343213002327
5f43507b6a5042595c58657e545652545a5c7d6e4d49
6b4a5a5b77735e41505a4a5c
323d3d2760673f2f77622e372d7a3421642c2b3b3f
2e574b4f48025e4b065c59405e1c11504a42485a500b0b405a
692d6c69757e656e283a24
6a674d53160c4359515b4943160b4f5713145b50
197977363a67737328366b673a08537075697c7d7d7e6f60667e4878781f08537075697c7d7d7e6f60667e487878624362716a7f73
160e1d2e350a060a242004092e3714030b1b
704b593325494e223054475f292a7e4a4f424846
2a6c213b7a606862707a212e6e6b777c676c2b387f6e6e6166696820ad014092616161616161d3015280d3014020014020015232015232014092d301528061d301402001528f6970
023f381208221f122e320d0b3e3a36253b1d0b2429272a2b21
30251b1a49541a05041913585d3b16113b1f1607475a1a1a00095d5b12061c1a481d1d
1b5c5213195850585b591b1f5f5a464d565d1a195a4e0d1f55470d175d515b4a4d5f5f5c470c0d4647544f5a561b2d57454356
743a6c6c61776e242b6d61272d707b606b362a333b647b79
7c0e1216115b07125f050019070d0601125d4809131b11030952521903
1b49465b5051537f62585c4a514d4a
49515f1e0952411a175c4e42575b51504a4b4a5942575b16377c4e42575b51506a6b4a5942575b
515d100a4b515953414b101f5f5a464d565d1a094e5f5f50575859119c3071a3505050505050e23063b1e23071113071113063033063033071a3e23063b150e23071113063be5841
023a3d080e3b3f33203e1f01362f302134
3412CD505AAAF5FD80A5DF6890C308BB
58003b6e75337c6d2c3227273d337d6e273e326520
6235302c273c3770642f2d253e203a203c3b7a55383a3c2c3a36322435352c363d2f2f2b
2d3b0410161c105c5d18101401
5954576c6b5a5e525f5850
2a3a776d2c363e34262c7778383d212a313a7d6e29383837303f3e76fb5716c4373737373737855704d6855716765716765704645704645716c4855704d637855716765704d93f26
1427242b2120243e0e1b253022333a36
660d405a1b010903111b404d021104170b090d050b4c7a10062b070a27221104170b09
7c706c686f25796c20612f277a32237d75717c262c677d
47722b2c2c29656075797f
38464809075059480c004a57
2e697571763c60753c632b2f6e747c76646e35357e64
38000e4f571a415a0c0e05
125a54151f5e565e5d5f1d19595c404b505b1c1f5c480b1953410b115b575d4c4b59595a410a11514c47414a595b14315e73444541504b4c4c515f787b61604152495c50
7d26312c2c3c293320362726352e3b372b202a2831
29303e787b262a3d31363e716e74637b76303e232e343c36242e756829
7d31263b3b2b29243b2f29232f3c3d272f2b3e
51141902091302560d1854141a5b5b10140b174350120d0c105359070d131f150f0f175c
7b5d5a706a607c4b56567a67404a626e514c5a40405c0351
592a2f2b0509372d372a24030a373c3a293a20
2a4c011b5a404842505a010e4e4b575c474c0b0d56534a54162d76534a54
3a51544843585314004b49415a445e44585f1e315c5e58485e5247515955444d5d525c4b43585f
7c3a2622256f33266f32352130787c3d272f25373d66662d37
5834312d263d36717b302a6176373a3b7b56373a3b303d2c26242426363d273032343239
77565b404b5140144f5a16565819024545431b024144073d776e78474345575b4d073c775b5140475555564d6177113a545257
0680a29ff5b8c98955942d7f37cb2b25
360546541f011716105646100512111b0c4766300512111b0c2b3d16000e0f
746f39396f6d273b2b191835203135
286d7e48556b5159787467624d5477606878
575c5d6371635d5671607c4a5d
38717f3e30676e7f3b326c7d60716e64736c
154e5e5f435a6a77494d44
77101d060d170652091c50101e5f440303055d440702417b31283e010503111d0b417a311d1706011313100b273157721c141107
7c667a7e79336f7a376d68716f656e697a3520617b73796b613a3a716b
381c51560c0a11120e4c490a524c0d18030e1f0d0a1c1f0207
2855466d7c5b59585d5a4a4c505e73715e5772705f5e
2e534f4b4c065a4f065b5c48591115544e464c5e540f0f445e
7c021e1a1d570b1e420a54550840510f07030e545e150f
38545a1b14535651594f0e1749580606405f5953
173829352c232b3c342f28181f24
5c0d03425b070607061100070b1b1b07004143041e120a0a17015c4c15584e1018467b1109241e120a0a17015667361d04090016
710f01404f000b0e12584e121e1b10131215045940010e08060a0f040b0a
4c263a25180a393820140c3b3f
3f616f7e6c7b7872655f5a77623e3978
3206061c5b5c04144c5e15091910
7466283838632c6123343d3b2a382f253570732f3032
3969435d18024d575f55474d180541591d1a555e
7432786a2025657571776822276d716168
27514c4e4f45727648424a5e5c
4f2c2e3b27362a0c11363c
165b486e7f5059797a555b4c445f58
2b7e70313f7e72716e6377383873616d78747e7f657477726d6f74281853616d78745e5f454465766d7874
6217120e051e1552460d0f071c0218021e19587f1f02090f041309
7c45595d5a104c59035f07124f07164840444913195248
7d3a2a06073d343e27213a3d
162437160735392c20101a2f3425303531151531273c2027
5732330d1f0d33351f03122426
246e60212e757922217c702d3c7371716e213c796e6b6d6e6a
5f4655607c43454f75694d51
7d190e13130318090913051d0d000b1502121e1202110708141315081b0a13080f
28786b5d407e58456f6d696f616746557672
160d1e2b3e0d0705090d23280706
3a52574b405b501703484a4259475d475b5c1d325f5d5b4b5d514151534e5c4b474e5e515f48405b5c
194872747f72632000486f7e41547a
1a3638796120313720677b252f31303b2925303c715b252f313d372d36362c2d3e25303c
657679646f6e6c405d6763756e7275
5f2330061b251f17363a292c031a392e2636
71707e3f307f74716d273f656b31336d7c607f74727b
4b634c414d4500105f0b0346551012534c49000250594609175253405b4e42
160112332819140d0a233e0f0510
0b2c707d262d34397b692226302b3730717a39292d
740650505d4b521817515d1b1b5b4d0f07584745
6e1816574906180a120f1d5d5b1b1e020912195e5e15070b1e121819030203100b1e125f7e35070b1e123839232203100b1e12
7a657677495d6a7573794848797d717c7b
3a313428233833747c3d323c2b23383f7e5c1d323c2b23383f1d123131383c29
696425203c372c277d464d3d75283723252f23616e33362b
27071a18191324201e141c080a
017d6c6c474f6145486c606d6a
620f0a161d060d4a5e15171f041a001a0601406c0e1910111b001b1c
74633535382e377d7c3a34727c3a343e030d33323f3c3303043e38282d07112b3727646223
242a2465652f2b2b6c653834
69165b41001a12180a005b5414110d061d1651591817190e061d1a5bd77b3ae81b1b1b1b1b1ba97b28faa97b3a5a7b3a5a7b28487b28487b3ae8a97b28fa1ba97b3a5a7b28f50310
157f68757565767968677c66746e73696e7963616c63716f606d
38343a7b743621282e3f2d3a30206565797a
1657446d7847526a70544d4c7776595740485354
1f5d475d4f575a666b5852505c584c6c7155595453
2a6579692a2c6439337e764a4a707a6c6b6c7c
681d405f4e0e0e51475e454a4b
5f7f6c5b5a667d7a7a744e486f6565
740751515c4a531916505c1a054f5343030659464458
0f40415448564a41121e4d04194c4e57
38111f5e5113040d0b1a081f150540400b0c1d001a1409
1b2728353e3f3d110c3632243f2324
527f322869737b716369323d7d78646f747f382c63707a7874707b776875752fbe125381727272727272c0124193c0125333125333124121124121125381c012419372c012533312419c7d6e
14393a353f3e3a2010053b2e3c2d2428
28293a11003a283336320f143e3c383e303617042723
2a1459430218101a0802595616130f041f1453450e1d1c0d011e181252d57938ea191919191919ab792af8ab793858793858792a4a792a4a7938eaab792af819ab793858792af7141b
042e32292e2e2011023c3b311d1322262a2720
103d38242f343f78732e6f4f183835233a0f102f2d2725342f3e24
1a3e3071742f2624203e75742d2c3f
165f4c657052544f495b5f
162132190832203b3e3a0b0f393839252813193f
38222c6d62203b7964213532233b
7c2b7d7d70667f353e7e766d702b
1d797e7b48407a6b697b796c
38545a1b1259535f44031b40414045
3a4f4a565d464d0a015c1d3d7657445f4a46686c4f4f464257
25360b1d1c1d372b0f030e09
384f41000f4d5a53554456414b5b1e1a5d4449485b47564c464a4b4f4c4c454154
1e64787c5753657c7042486279
7c4f5357501a46531e4441584659471a0948525a50424813135842
1f56475b424d45525a4146090e5d14095c5e47
327373692e297161392e74566f6653347a6f2a62657571
383e3071703a78653e292f35292f25
2e54484c4b015d48055f5a435d444e15125349414b595308084359
646361776c6c712c2b7c7c2b317b777d6c6b79797a616d7b3c2b707376696b706777
1f486e6b414552495f537e75554f
386f61202c6c69757e656e29296270706a607c7e6b6879484f7572637e646a77
3a30352922393275702e3f61501d282220202232120325283b3a
54124e4c0b131348571c180e15090e4f4203040e3524120b07
714578632a347168657e723d31706b2a3b7e7972373d786c7b6e7f7b6c687831752965707d6b6f3c2b6e7a7a6e2b2d62362d65743c307e63687b6c6a6c647f78373d72756f617172636c6c647f7839
60404e0f05444c444745070343465a514a41060546521112595b5348564c564a4d0c2349575a41
386f61202f686d6a6274352c72633d236274687574677c6965
2e776b6f68227e6b316d7e7d3531706a62687a702b2b607a
3a17120e051e15525f1f0209130242571a0f051e1958741b0d18090f131e04131117111a19
760e1c1c140344531208000a18124949021852530f55450b180d1e0200
345a5b020b5e4f52545f4c4e
7d3e293434243f2e2e34223a2a272c3225353934322f373b293f382e25302e212c302e3e
7b38352e253f2e7a2134783974742f233f3c7b7339353f2e292939627239353f2e292939
3a162560763a39363c000939236c67322234322234
1b3d2c6472362e6a672623232420070e2c33217262232e21203a756326646f3a3821
385759181e5155445e1e5b5a440146535441465354464d4c5f484c
2a001c0c4f49015c5c131e1a2e2816181c0307
385a5415004d454a5b4e01004d595b424d5b5d5b41
541a4644031b1b405c1b405f1410061d0106474a0b0c06
6260657972696225317a78706b756f75696e2f006d6f69796f637363617c6e79757c6c636d7a72696e
1d5a5d586b6359484a585a4f
2a0548521309010b1913484707021e150e0542551e0315141554c46829fb080808080808ba683be9ba682949682949683b5b683b5b6829fbba683be908ba682949683be60415
3a0d3e7b6d21222d271b122238777c29392f29392f
575c5e6071635d5b716d7c4a5d
52367b61203a32382a207b7434312d263d3671652a3933313d39323e213c3c66f75b1ac83b3b3b3b3b3b895b08da895b1a7a5b1a7a5b08685b08685b1ac8895b08da3b895b1a7a5b08d53427
791800494e0c030d1a12090e
3344585c06065a454f59697f445f
6b034e54150f070d1f154e4101041813080344531503070e4c4909141f19526605042c1f3820030c062723193522050f282c030e000d0c06
161a092233091b0005012735110d
E3F9E1E0CF99D0E56A055BA65E241B3399F7CEA524326B0CDD6EC1327ED0FDC1
4c1819151d2f2d1e120b00050d1c09
5f0f1c3d21061e342a0504
61353b7a652e383b363e303b2e657b342d223432342e
74612b3973743e2232000533333f
1f5c0c0754591817574a1d1b4b5a080c
386e60212d6d68747f646f282a67606e6a7571
631e191c2f271d0c0e1c1e0b
7c524e4a4d075b4e03595c455b1914554f474d5f550e0e455f
2a6a273d7c666e64767c2728686d717a616a2d25646b65727a616627ab074694676767676767d5075486d5074626074626075434075434074694d507548667d50746260754897f6c
3a2f627839232b213339626d2d28343f242f687c33202a2824202b273825257fee4203d1222222222222904211c3904203634203634211714211714203d1904211c322904203634211cc2d3e
7c726e6a6d277b6e28636c783034756f676d7f752e2e657f
166d7e524872687a626f66784d5e6d6765696d44406367
436a574c051b5e474a515d121e5f44051451565d18125743544150544347571e5a064a5f52444013044155554104024d19024a5b131f514c47544345434b505718125d5a404e5e5d4c43434b505716
66134f561111174f4f1253561d190f14080f
38252b6a6b272f63632934392d21
343b336f6f333122333432213a3b7c69292c3b716937263b2427213b3d3b
5f3427061725293c301a1b
0c5f5e5c607b405942450a0d5e170a5f5d44
4d1b1554511a0b1a0206495608021c101a5d703a161c0d0a18083d210013081d11
74260841450c060a464d021857461e12190404
7c130f0b0c461a0f440e47441951401e16121f454f041e
040f3e76722233283d2f6a70313c33322867713476763b2e373e663f632f3a3721257661243030246167287c672f3e767a342922312620262e35327d77383f252b3b382926262e353273
74237575786e773d3274783e377d7468647c6d69787c7075
28081b30211b091217132e351f1d191f1117
4b406f626e6623337c282065763328696f6a2321737a652a34717063786d61
04465a41464648796a545359757b4a4e424f48
38747a3b21667f726e656e2f3a756c637573756f
3a5d58444f545f1810515e50474f5453123557715e50474f5453717e5d5d54504504257553451426704f4553
382b667c3d272f25373d6669292c303b202b6c64252a24333b202766ea4607d5262626262626944615c7944607674607674615754615754607d5944615c726944607674615c83e2d
5d7b263928682e656f66283527
1f795f4f4a585a4f69745958535e4f49591c58135a5d5814085a45545e4e5870
1c353e272a2335706b38716c393b22
53311158521d0748551b0405181259551b1b01
74266d7d78696c317b322e7a
161b082c2e0e111c141a17103e371a151101263a1810
38212f6e6222273b302b20676d2c3a25282b36
0d61793d3f71716b22307971716c6d7b773221686b6a3e626c6b6b6a6a6a
3238382265623a2a726239150b242d2e13043a3b373d3e
163625021a37383c0c0e272b1d17353d
28273412032c250506292730382324
66733e24657f777d6f653e337c6f7a697577737b7532046e78557974595c6f7a697577
1859607e495b414553697d435240
7c091158470e18090c150b
143f3c3339383c2616033d283a2b222e
387b75343c6a6e7b6a6b7e3c38787d616a717a3d38666e6d
315c717a3b2c63303978777a767e35
6f1102253d1e111b3a3e045109
38703d3a60667d7e6220326a6f74716e64736c
2e3b2723246e32276a30352c322d336e7d3c262e24363c67672c36
382c22637b366d762022297d652e3c3b2d2e3336
164251766d404349444f6b7d4c4653
7045573d2b47402c3e5a495127247044414c4648
5822273b302b20676d263c7760212c2d6d40212c2d262b3a30323230202b31262422242f
1f1d4d4615185956160b5c5a0a1b494d
1004101c0b3726151221241e1a0c170b0c3c3706020e0304
570908362436080e2438291f1d
6b1459430218101a0802595616130f041f145344021410195b7112153f1b1203
5711102e3c2e101b3c2d310705
12787e757b5c426957597b28
384d43020a5c5a47484144494e4c470a1b47524e5c544e4448
5a3e30716c27252d362832283433727e222f3c3735302035686822
38707e3f3072656c6a7b697e746421216a6d7d79
324c7d35206163766a7b672233727f70716b2432773535786d747d257c206c7974626635226773736722246b3f246c7d3539776a61726563656d76713e347b7c6668787b6a65656d767130
3a35302c273c3770642f2d253e203a203c3b7a55383a3c2c3a3623353d3120293936382f273c3b
766c7e7e76612631706a62687a702b2b607a30377f2327697a6f7c6062
38727c3d3c76342972656368697a617478
3a36332f243f34737b3a353b2c243f38795e3c1a353b2c243f381a1536363f3b2e6f4e1e382e7f4d1b242e38
1620330518261c1435392a2f00193a2d2535
38464809124c524d4b41484c4c4c05024d5a4c584d
671f0a0711154651140000145157184c571f0e464a041912011610161e05024d47080f151b0b081916161e050243
3413124b4217061b1d160507
62796e7373636469707d7466736a6368756f7f7b666b
5a41565f5e544f545378714a4f5958594f
19767c786f74626e555369786972
160417303d0b17263b0a0015
1946480905584c4c1709545805376c4f4a5643424241505f5941774747
6c4508125349414b5953080747425e554e4502045f5a435d1f247f5a435d
622c29353e252e697d36343c273923392522634c21232535232f322832203b3e3a372f24363632
16071438221f3438090316
296b373378616a7d7f3439797c606b707b3c29627e6e67
3210100a4d4a12025a48031f0f4f4a150a0814
381917564f041e18131e0f4f4c07040403124f48091c070a1b090e181b0603
71353b7a753a313428627a202e74762839253a31373e7963282f3e
387a7435337c786973337677692c6b7e796c6b7e7971727e
383f726829333b312329727d3d38242f343f786e253637262a35333979fe5213c1323232323232805201d3805213735213735201615201615213c1805201d332805213735201dc3f30
2e110d090e44180d441b091c1b0a5757160c040e1c164d4d061c
29252b6d6e333f2824232b6663252b363b212923313b607d3c
29257974353823203b363d392f
38090746490b1c154e4d0a000c0d090a0a030712
1f7f595c7672657e686449426278
290f01475d4a0413490f011c110b03091b114a5716
366c2f226d6c60682b22696d7877626f7e7573
584915165d5f554d4d15164e520a0c4743554e5255
5126110c0c43460e1c1a5f430615141c161856521d100b001a0b3726070d120b02064358165f
04190a0b352116090f05343405010d0007
0356466a6b5158524b4d5651
5f7b684352687a6164604654706c
1d7578636864752d30632a3778622d185b6e64666664742036642b184879657c737b6c647f78
1e3479632238303a2822797636332f243f3473752e2b322c6e550e2b322c
047c6f6e5044736c6a6051516064686562
571b192736241a1c362a3b0d1a
7768657e756f7e2a7164286866273c7b7b7d253c7f7a3903495046797d7b696573390249656f7e796b6b68735f492f0a646c697f
51317c66273d353f2d277c7333362a213a3176652233333c3b34357df05c1dcf3c3c3c3c3c3c8e5c0fdd8e5c1d7d5c1d7d5c0f6f5c0f6f5c1dcf8e5c0fdd3c8e5c1d7d5c0fd2342d
70594b21375b5c302246554d3b386c585d505a54
74276d7f3530706064627d37216f7e7a6b6f636657546e677b71
6f4655726a49464c6d6953065e
165a497f7f5e435f517a65545e4b
381a574d0c161e14060c5758181d010a111a5d4a011c0a0b0a4bdb7736e4171717171717a57724f6a57736567736567724447724447736e4a57724f617a57736567724f91b0a
24313f7e712a267d7e232f72723f2a203b3c7d71363a372d267c602b2a3922373b
38060849480705080f1a065149061913041b
41475f160a4e5f5f50575859
3274332a653d396f7a6d6e6473
32407b2e35733c2d6c7267677d733d2e677e722560
38545a1b1757524e455e551215494f5c4d4345
38434d0c0d414804115e5c5c424f4646
5f1201342112181a16123c371819
303f31706e2127342831766e3524223435202622
3a16130f041f1453470c0e061d0319031f1859761b191f0f1915041a1b11150c04030213020a1a151b0c041f18
117b4a51445613034d525d474f4702461a56434e585c0f185d49495d181e51051e56470f034d505b485f595f574c4b040e41465c524241505f5f574c4b0a
151a0602054f13064b11140d13515c1d070f05171d46460d17
5f389fef5fd41c84a33a91c6574cbf51
380608494c171e0503434d0e02
295b616963717b2e33776f2b2c636e652433667660667660
2116070813091b011d0f1a030a
6b2e637938222a203238636c2c29353e252e697e382e2a23614b282f05212839
5c4d4f4b585554677a4b52494d677e445d504b47
16584b7e6b5852505c5871755652
287f6c59457a7c764c507468
4b426d606c6421317e2a2267743124656d68212371786728367372617a6f63
5b7d3c262e24363c67672c36
7c584440470d51440953564f514842191e5f454d47555f04044f55
635d5a495b4a51484e5f1f135248404a585209094258
6500595e1f151c1b0a49541d590e
1671624159707d66424e7f7560
68b1f506b9f9036892dcf6d0fd463c0c0d2aec0d
60226f75342e262c3e346f602025393229226573382b2a3b37282e2464e34f0edc2f2f2f2f2f2f9d4f1cce9d4f0e6e4f0e6e4f1c7c4f1c7c4f0edc9d4f1cce2f9d4f0e6e4f1cc1222d
5710122c3d2f111a3d2c300611
510d545312181116074459105403
7433796b21216c756f757e6e6f
7a21161f1e140f1413262a0a1e0b1e18
5f5e4d78645b5d577a70464746
6c1816575219081901054a550b011f13195e73122b011f3319
74227474796f763c3375793f307174686347651e237c6361
4f2a3f3d393b3f1e0f3d2e2a19152c20223229
24252b6a6a202424636a373b66743f3e2d36232f624a173b01041e1f3e2d36232f
57311c13120847551a090819575a1e57471e1a06
654e1710515b525544071a531740
16190a2d35181713333701000123381a12
5f5241776a54726f454743454b4d6c7f5c58
382d236268232a3635233a3c2720616c2e2438332c2f323735233c3620
38404d565d514016054e5d7e6349455a7b6157164d4505561f0257554c
527c312b6a707872606a313e7e7b676c777c3b2f6073797b777378746b76762cbd115082717171717171c3114290c3115030115030114222114222115082c311429071c311503011429f7e6d
FBA3AF4E7757D9016E953FB3EE4671CA2BD9AF725F9A53D52ED4A38EAAA08901
38606e2f2a656468607a7a632c32696a77
2e35292d2a603c296f2460623f77663830343963692238
7c736f6b6c267a6f22787d647a3835746e666c7e742f2f647e
5f6a794c596a60626e6a444f606154526661675d4e6f787e
10786c60774b5a696e5d586266706b7770404b7a7e727f78
0438243f38383607142a2d270b0534303c3136
740943511b1b564f555d50525445
7472242472652f3d3124283872722424293f266c623d2b74623d2b6b31623d2b3d3a393a70623d2b322926271e1c223709173a393a
5e5c4943585f63794b585c6f635a5654445f
38276a70312b23293b316a6525203c372c2760763d2e2f3e322d2b2161e64a0bd92a2a2a2a2a2a984a19cb984a0b6b4a0b6b4a19794a19794a0bd9984a19cb2a984a0b6b4a19c42728
60307d67263c343e2c267d7232372b203b3077612a393829253a3c3676f15d1cce3d3d3d3d3d3d8f5d0edc8f5d1c7c5d1c7c5d0e6e5d0e6e5d1cce8f5d0edc3d8f5d1c7c5d0ed3303f
1e420f15544e464c5e540f004045595249420503585d445a1823785d445a
2e6d7175723864713d7c323a672f3e60686c613b317a602a3f7e7b676c777c3a2836
3241445853484304105b59514a544e54484f0e2949545f5952455f
1a6b59595f4f74654950767a5558555b56516e7f5e4b4d495a46
663479632238303a282279743b283d2e3230343c3275541b283d2e32301b15383136377a5f0e253c31382e
74256e7e7b6a6f3278312d796406417e7872555e717038312d79
2e5f4347400a564308420b08551d0c525a5e5309034852
2847547068456a634c4560624d4c
38121c5d5210070e5558030a1117481807591a16
6b3b34373e31201c043e24243e
747f3121217a7737383639776f2d296b6f23787636393f313d3032363f2e
3a23263a312a216661202d363d27367672316f4b351d2e24262a2e040023232a2e3b7a5b0b2d3b6a580e313b2d
3c35260c0f2e3c201506353f3d31351c183b3f
743872602a2f6f7f7b7d62283b7178646e
1e561b01405a52584a401b1454514d465d5611064d5046474607973b7aa85b5b5b5b5b5be93b68bae93b7a1a3b7a1a3b68083b68083b7aa8e93b68ba5be93b7a1a3b68b55746
0625273225231908383f35
2d340b1f19131f5352171f1b0e
3a5a5415195b535d55555519154f4e14155f4208135a44424540
2a5c110b4a505852404a111e5e5b474c575c1b0f4053595b575358544b56560c9d3170a2515151515151e33162b0e33170103170103162023162023170a2e33162b051e33170103162bf5e4d
044b515953414b617c5756434541524e76695e
6a50535c56575349796c524755444d41
066f6120256e7f6e76723d227c7668646e2904655c7668446e
667f322869737b716369323f70637665797b7f77793e1a797c50637665797b50507f725c51707a
3a1c19050e151e594d06040c170913091512537c11131505131f0f1f1d0012050900101f11060e1512
741543434e58410b0a4c42040a4c424f5f544f4419051f1455
1903393f3439286b4b0324350a1f31
284342445358626e43485d5c4f49584553
1822071b38272a3b3a30121d382e2f2e38
8cd0604ba33e2ba7f38a56f0aec08a54
3a4947060a48404e4646460a065c5d07064c511b004957515653
1100312a3f2d68742c39282a2630
12757b3a307179717270323676736f647f743330736724367c6e243e74787263647676756e253e7e63686e6576743b1e715c6b6a6e7f6463637e7057544e4f6e7d66737f
172e240b13253136343e041324366c383c
e2380b201325a8f252636350338aeae8
6e1917564807190b130e1c5c5a1a1f030813185f5f14060a1f131918020302110a1f13
51277e7938323b3c2d6e733a7e29
7c475b5f58124e5b015d4e4d0501405a52584a401b1b504a
323e3e2463643c2c747a3d3328242026223f29
377e766164793e2671717c6a7338115a66534a6e675f5e617c2b1a527273737061
5b0e332524250f13373b3631
7b420f15544e464c5e540f004045595249420512594452535213832f6ebc4f4f4f4f4f4ffd2f7caefd2f6e0e2f6e0e2f7c1c2f7c1c2f6ebcfd2f7cae4ffd2f6e0e2f7ca14352
5f0e1d3b200d0c070a1b110a0d2b2b0405
3217170d4a4d15055d5a060d161d405c
3a23263a312a216672393b3328362c362a2d6c432e2c2a3a2c203020223f2d3a363f2f202e39312a2d
16534077764a515656586264434949
45515f1e1252574b405b50171a50171a5940411f3a70697f404442505c4a66794041
784e4c594e48726353545e
7159571619565d58440e164c4218155e477d675754505b49020f444352
3a3d38242f0b29516a263f25150a2721232a0500303933
31545d57444e521d105055494259524f4e4840
693f2e322b242c3b33282f1f1823
4c3428371e08272a1118392936370b1e292d
38646a2b2767627e756e65222f6f72797f7467652a2265726b7465703f257e697372693223607071657d756e69282360702d69
167b684f577a757141436a66
5f485b6d6c5d5b5a5b51414d5d7167
3a1b1e020912195e5b05144a7b3603090b0b091939280e031011
1d5a6b677f3a38717f6467677f2d3d6e27317869687963263a6f6d74383b6926317c697079
38686627297e7766222e64793339747573646f797f637f
38040a4b4707020803021e554a051c130503051f
600709484404011d160d0641551e1c140f110b110d0a4b62091a001d0c160c1e060b020a10151a0b08
2e05191d1a500c19500f1d080f1e43430218101a080259591208425716130f041f1452405e
735d5849524b4d5c1c10514b43495b510a0a415b
7c2f3337307a26337e242138263f356e6928323a30222873733822
382c2263783b223c7d6d353b2c32203a3a27352f3a
2c112c377e60253c312a266965243f7e6f2a2d2663692c382f3a2b2f383c2c65217d3124293f3b687f3a2e2e3a7f79366279312068642a373c2f383e38302b2c636926213b352526373838302b2c6d
5f3e2d0b1a353c1c1f303e29213a3d
2429276669323e65663b376a7b34363629667b3e292c2a292d
257a743528636169726c766c7077363a666b7873717464712c2c66
7b175a40011b13190b015a5515100c071c1750470c1107060746d67a3be91a1a1a1a1a1aa87a29fba87a3b5b7a3b5b7a29497a29497a3be9a87a29fb1aa87a3b5b7a29f41607
013a3d0a1b2829292f2225
747721212c3a236966202c6a702b09304b76293634
6b367b61203a32382a207b7434312d263d3671662036323b797c3c212a2c6753303519363b35383933
1502150808180b04151a011b09130f081d0c0e0214
043a29281602352a2c26171726222e2324
2843507160525e4b476d6c
2a7169203b77646e6c60646f637c61
092b06070c01105341000f020e064f0b5510110418061a1142440b0c0642
387876372a61636b706e746e7275343864697a71737666732e2e64
160d1e293c1937260f1a191e
6240455952494205115a58504b554f55494e0f264d5e44445a5d5757
bc8f6a70d138545889109d126886bd98
113c0d1603115444175e440a151a00080045015d1104091f1b485f1a0e0e1a5f59164259110048440a171c0f181e18100b0c434906011b150506171818100b0c4d
b3c61531d3a785d8af140218304940e5b24834d3
027671444277737f6c7254426d606e636268
573d3f0110023c3a100c1d2b29
24343a7b7b313535727b262a77652e2f3c27323e735b062a121f070e2f3c27323e
5f0e1d2e350a060a242004092e3714030b1b
38313f7e7b20292b2f317a6037373a2c357e510a2138351c00
5c000e4f560a0b0a0b1c0d0a0616160a0d4c4e09131f07071a0c51411855431d154b761c0429131f07071a0c
2e3c2024236935207c346a6b367e6f31393d306a602b31
0653514453556f7e4e4943
74025454594f561c1355591f06405954484348425f
38014c4b11170c0f135154174f4e0118170107011b
2d447b6f69636f2322676f6b7e
3c3f09040a184156131a10090f1413
7c3c2024236935206d37322b352a34697a3b212923313b60602b31
6055494d6662544d4173795348
767b0d4d110d0947180d0b58594d110d090e44180d0b0a08191b0b
6948051f5e444c46545e050a4a4f535843480f074649475058434405892564b6454545454545f72576a4f72564042564042576162576162564b6f72576a445f72564042576ab5d4e
71030d4c430c07021e544c1618424f041d273d0d0e0a011358551e1908
360b0832282928372724353a3a32292e
5e1b4659480818524d4e0d084051595e41
77115c46071d151f0d075c571a1d1d51662c3d3a1d1d
161704223e1c062228191306
2b37397876373b38272a3e71713a2824313d37362c3d3e3b24263d
281c0f3a26191f153832040504
1b444b565d5c5e726f5551475c4047
5761635d4c5e606b4c5d417775
170f052a32041017151f253205174d191d
809bd36cf78612fd1f11b739c382bfac
167162495862706b6e6a51546962646774717565
7d30273a3a2a3936272833293b213c2621362c2e232c3e202f22
7c564a4e49035f4a075d58415f1d10514b43495b510a0a415b
7373420a1a4851030c4d404f4e541b0d480a0a47524b421a431f53464b5d590a1d584c4c581d1b54001b53420a0648555e4d5a5c5a52494e010b444359574744555a5a52494e0f
776528327369616b797328236e6969251258494e6969
b62f7aea9613b98976498a9ecabe537b
74580e0e03150c46490f034546000e15191d1b1f025d5906191b
3a013277612d2e212b171e2e347b70253523253523
3a1459430218101a0802595616130f041f145347081b11131f1b101c031e1e44d57938ea191919191919ab792af8ab793858793858792a4a792a4a7938eaab792af819ab793858792af71605
714d43020d42494c501a0258560c0e50415d42494f46011b505746
1f705653797d6a71676b464d6d77
154252534f56667b454148
3654171a55545850131353564a415a51594e5c46465b
7c190501064c10054812170e1015080f0a4a5f1e040c06141e45450e14
3808455f1e040c06141e454a0a0f131803084f5c1b0a0a05020d0c44c96524f6050505050505b76536e4b76524446524446536566536566524f6b76536e405b76524446536eb0d14
1531263b3b2b3837262932283a203c2e3b222b203d2737332e23
6214110d061d1651450e0c041f011b011d1a5b670c1f1e0014031c1a1001171c0e0e0a
1f5349534159546865565c5e525642627f5b575a5d
16736044466679747c727f78565f727d7969
3f535155464b4a7964554c575379605a434e5559
7c617d797e34687d346b2327667c747e6c663d3d766c
2a430e14554f474d5f550e014144585348430413584553525312822e6fbd4e4e4e4e4e4efc2e7daffc2e6f0f2e6f0f2e7d1d2e7d1d2e6fbdfc2e7daf4efc2e6f0f2e7da04253
1646557c61434f103b7f5c4b4353
253e031514153f23070b0601
7d180f1212020318080d1c191416000a06
2a2a677d3c262e24363c6768282d313a212a6d7936252f2d21252e223d20207aeb4706d4272727272727954714c6954706664706664714744714744706d4954714c627954706664714c9283b
777e73686379683c67723e7e70312a6d6d6b332a696c2f155f46506f6b6d7f73652f145f7379686f7d7d7e65495f390b657a7f69
3829647e3f252d27353f646b2b2e323922296e662728263139222564e84405d7242424242424964417c5964405654405654417774417774405d7964417c524964405654417ca3c2f
0b1027242e391e0823353b3a737c332b
7f3f534e2722545121680720225450204871516e225455252b2a71122a7104483d3b4f534e2722545121680720225450204871516e225455252b2a71122a7104491b010710
54366a682f37376c70376c73383c2a312d2a6b6b242723
383f31706b28312f6e6f2e313b2e
3a44415d56725028135f465c6c705f52
306f61202c6c69757e656e2924647972747f6c6e21227f3e17407d6b78724f44647e

信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
cn/tongdun/android/p012EEEEEEEE/p013EEEEE/p014EEEEE/EEEEEEE.java, line(s) 102
cn/tongdun/android/p020EEEEE/p021EEEEEE/EEEEEE.java, line(s) 41,11
cn/tongdun/mobrisk/p024EEEEEEEE/EEEEEE.java, line(s) 18,46,13
com/app/hubert/guide/core/GuideLayout.java, line(s) 123
com/appsflyer/internal/AFa1aSDK.java, line(s) 68
com/appsflyer/internal/AFb1vSDK.java, line(s) 147,427,582,1006,1398,1917,2141,2148,2198
com/appsflyer/internal/AFc1uSDK.java, line(s) 36
com/appsflyer/internal/AFc1vSDK.java, line(s) 70,78
com/appsflyer/internal/AFf1cSDK.java, line(s) 83,92,134
com/appsflyer/internal/AFf1dSDK.java, line(s) 132
com/appsflyer/internal/AFf1hSDK.java, line(s) 170
com/appsflyer/internal/AFf1tSDK.java, line(s) 64,69,94,100
com/appsflyer/internal/AFg1hSDK.java, line(s) 51,97,66,55,61,59
com/appsflyer/internal/AFg1jSDK.java, line(s) 941,988
com/appsflyer/internal/AFg1nSDK.java, line(s) 47
com/appsflyer/share/CrossPromotionHelper.java, line(s) 27
com/appsflyer/share/LinkGenerator.java, line(s) 77,217
com/global/loan/MyApplication$setRxJavaErrHandler$1.java, line(s) 21
com/global/loan/activity/ABase.java, line(s) 200,212,268,274,683,691,695,963
com/global/loan/activity/ABaseInfo.java, line(s) 891
com/global/loan/activity/ACertificationDetail.java, line(s) 129,134,466
com/global/loan/activity/ACodeLogin.java, line(s) 139
com/global/loan/activity/ACreditAmount.java, line(s) 298
com/global/loan/activity/ADebug.java, line(s) 478
com/global/loan/activity/AForget.java, line(s) 223
com/global/loan/activity/AIdInfo.java, line(s) 194,202,452,1142,1179,1551,1552,1558,1569
com/global/loan/activity/AInputPhone.java, line(s) 232
com/global/loan/activity/ALivenessResult$flashUploadData$1.java, line(s) 53
com/global/loan/activity/ALivenessResult.java, line(s) 204
com/global/loan/activity/AMain.java, line(s) 468,534,554,561,562,568
com/global/loan/activity/APasswordLogin.java, line(s) 135
com/global/loan/activity/APersonalInfo.java, line(s) 146
com/global/loan/activity/APublish.java, line(s) 513,518,530
com/global/loan/activity/ARegister.java, line(s) 130,133
com/global/loan/activity/AStartLiveness.java, line(s) 142,196,204,239,264,276,288,412
com/global/loan/activity/ActivityCreditAmountV4.java, line(s) 407
com/global/loan/activity/ActivityFaceResult$flashUploadData$1.java, line(s) 53
com/global/loan/activity/ActivityFaceResult.java, line(s) 195
com/global/loan/activity/ActivityFaceResultV4$flashUploadData$1.java, line(s) 53
com/global/loan/activity/ActivityFaceResultV4.java, line(s) 187
com/global/loan/activity/ActivityFaceStart.java, line(s) 214,224,227,240,288,383
com/global/loan/activity/ActivityFaceStartForOld.java, line(s) 226,244,256,269,422
com/global/loan/activity/ActivityPersonalInfo.java, line(s) 293
com/global/loan/activity/ActivityPersonalInfoForOld.java, line(s) 106
com/global/loan/activity/ActivityPersonalInfoV4.java, line(s) 140,165
com/global/loan/activity/progress/v4/ActivityFaceStartV4.java, line(s) 279,297,309,322,395
com/global/loan/controller/Controller.java, line(s) 714
com/global/loan/dialog/AreaPickerV2Dialog.java, line(s) 139,188,684
com/global/loan/dialog/FAreaPickerDialog.java, line(s) 157,182,206
com/global/loan/fragment/FAccount.java, line(s) 167
com/global/loan/fragment/FArea.java, line(s) 168
com/global/loan/fragment/FCurrentLoan.java, line(s) 123,128,133
com/global/loan/fragment/FMain.java, line(s) 622,627,632,637,642,647,653,676
com/global/loan/model/Model.java, line(s) 213,292,379,474
com/global/loan/model/bean/js/JsBridge.java, line(s) 265,272,279,295,301,308,338,410,437,443,450,478,485,549,582,618,625,632
com/global/loan/service/FirebaseMessaging.java, line(s) 35,41,43,49,68,74,90
com/global/loan/util/C4.java, line(s) 49
com/global/loan/util/C5.java, line(s) 171
com/global/loan/view/CameraSurfaceView.java, line(s) 118,144,145,147,177,178,228,357,362,402,55,200,211
com/global/loan/view/TextViewClickMovement.java, line(s) 51,69
com/makeramen/roundedimageview/RoundedImageView.java, line(s) 126,144
com/ppdai/sdk/tracker/DataTracker.java, line(s) 248
com/ppdai/sdk/tracker/DeviceAssembleHandler.java, line(s) 53,92,110,118,141
com/ppdai/sdk/tracker/DeviceTracker.java, line(s) 167,172,182,254,266,299,160,251,319
com/ppdai/sdk/tracker/PPDTracker.java, line(s) 142,158
com/ppdai/sdk/tracker/processor/CalendarDataProcessor.java, line(s) 79
com/raizlabs/android/dbflow/config/FlowLog.java, line(s) 19,37,25,13,31,43
com/snail/antifake/deviceid/IpScanner.java, line(s) 39,100,78
com/xinye/xmp/cache/OKHttpManager.java, line(s) 91,92,93
com/xinye/xmp/ui/XMPWebView.java, line(s) 120,149,167,658,687,705,741,770,788

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
cn/tongdun/android/p020EEEEE/EEEEEE.java, line(s) 41,178

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (bucket-download.slamtec.com) 通信。 

{'ip': '10.114.161.188', 'country_short': 'CN', 'country_long': '中国', 'region': '山东', 'city': '青岛', 'latitude': '36.098610', 'longitude': '120.371941'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (bugly.tongdun.net) 通信。 

{'ip': '60.12.226.19', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '杭州', 'latitude': '30.293650', 'longitude': '120.161583'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (privacy.juanhand.com) 通信。 

{'ip': '163.181.35.236', 'country_short': 'HK', 'country_long': '中国', 'region': '香港', 'city': '香港', 'latitude': '22.285521', 'longitude': '114.157692'}

安全评分: ( JuanHand 6.4.1)