1/60

Threat

id.go.pu.eabsensimobile

Bravo

Analyzed on 2022-02-21T15:29:05.593865

14

permissions

61

activities

3

services

2

receivers

14

domains

File sums

MD5 4b9870bf4f93a51860b4f759b036459b
SHA1 493c8da37886713ae383a6438b48c2b1908926db
SHA256 746953fc2d0b0954d5c6035b4283921e540f4c2dd8d2a0d36cd41cbcbaf295ed
Size 32.61MB

APKiD

Information computed with APKiD.

/tmp/tmpu2x8zygd!classes.dex
anti_vm
  • Build.FINGERPRINT check
  • Build.MANUFACTURER check
compiler
  • r8
/tmp/tmpu2x8zygd!classes2.dex
anti_debug
  • Debug.isDebuggerConnected() check
compiler
  • r8 without marker (suspicious)

SSdeep

Information computed with ssdeep.

APK file 786432:P6LtzvG7FrPsin4S6n4SveatejgI295fmD+zkdpm:P4TMjsin4vn4Ceatwozjkdpm
Manifest 384:IZ8r2AmD9obQOe9btynavBKhVkCrAXeaSgJH9SkyCNzxdrOBZTz+Em5:lr2AmD9ob…
classes.dex 98304:Wqzko4OlTQCDXrMfF+u4zQBq39KhEDRf1VcK62ISy4NYE7hkOIv:WSiCDXrMfF+…
classes2.dex 12288:uZoERUSBU8XryCeC9vWEORX11LzbWe3pmryGYm5n5uAlqY6bZZTJV2huz62bL6K…

Dexofuzzy

Information computed with Dexofuzzy.

APK file 6144:sHcXAJCj4ujDsraGwqU7fwCpXet8m5ytXBrk0QYSPbA0NwEBVv3sbisjxwPHavEm…
classes.dex 6144:sHcXAJCj4ujDsraGwqU7fwCpXet8m5ytXBrk0QYSPbA0NwEBVv3sbisjxwPS:sHc…
classes2.dex 1536:yoOOuveCNypPOCvgBimxiAspE0U3syNF6lYIZ5Lh:yaFAspE1NFbIl

APK details

Information computed with AndroGuard and Pithus.

Package id.go.pu.eabsensimobile
App name Bravo
Version name 2.3
Version code 35
SDK 21 - 29
UAID 3f7e2640fafc6a3326330fac502bcbe9f04d8e55
Signature Signature V1 Signature V2 Signature V3
Frosting Frosted
Blocks found within V2 signature:
  • 0x7109871a: Unknown
  • 0xf05368c0: Unknown
  • 0x6dff800d: Source stamp V2 X509 cert
  • 0x2146444e: Google metadata
  • 0x42726577: Verity padding

Certificate details

Information computed with AndroGuard.

MD5 1025422b2016d24c7cc008e938e870d9
SHA1 f77494d9915fd4a0cd8e84e88594f826e3e44dc5
SHA256 b76773eb4a36483bc5bd872a983e72f434dd862916bf683808a50e5eed607aba
Issuer Common Name: Android, Organizational Unit: Android, Organization: Google Inc., Locality: Mountain View, State/Province: California, Country: US
Not before 2019-11-23T17:20:04+00:00
Not after 2049-11-23T17:20:04+00:00

File Analysis

Information computed with MobSF.

Findings Files
Certificate/Key files hardcoded inside the app. META-INF/services/org.acra.config.ConfigurationBuilderFactory
META-INF/services/org.acra.sender.ReportSenderFactory

Manifest analysis

Information computed with MobSF.

Low App has a Network Security Configuration[android:networkSecurityConfig=@xml/network_security_config]
The Network Security Configuration feature lets apps customize their network security settings in a safe, declarative configuration file without modifying app code. These settings can be configured for specific domains and for a specific app.
High Broadcast Receiver (id.go.pu.eabsensimobile.service.AlarmReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Service (com.google.android.play.core.assetpacks.AssetPackExtractionService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.

Main Activity

Information computed with AndroGuard. 

id.go.pu.eabsensimobile.view.activity.SplashActivity

Activities

Information computed with AndroGuard. 

id.go.pu.eabsensimobile.view.activity.VaksinActivity
id.go.pu.eabsensimobile.view.activity.EpelatihanActivity
id.go.pu.eabsensimobile.view.activity.EmailActivity
id.go.pu.eabsensimobile.view.activity.EkinerjaMultiRatingActivity
id.go.pu.eabsensimobile.view.activity.EkinerjaPenyusunanActivity
id.go.pu.eabsensimobile.view.activity.EkinerjaActivity
id.go.pu.eabsensimobile.view.activity.KswpActivity
id.go.pu.eabsensimobile.view.activity.IkpaActivity
id.go.pu.eabsensimobile.view.activity.QrCodeActivity
id.go.pu.eabsensimobile.view.activity.DetailEmonActivity
id.go.pu.eabsensimobile.view.activity.DetailBeritaActivity
id.go.pu.eabsensimobile.view.activity.LoginEhrmActivity
id.go.pu.eabsensimobile.view.activity.InformationActivity
id.go.pu.eabsensimobile.view.activity.QuoteActivity
id.go.pu.eabsensimobile.view.activity.WorkMonitorActivity
id.go.pu.eabsensimobile.view.activity.LoginActivity
id.go.pu.eabsensimobile.view.activity.BravoActivity
id.go.pu.eabsensimobile.view.activity.SplashActivity
id.go.pu.eabsensimobile.view.activity.TestActivity
id.go.pu.eabsensimobile.view.activity.RegisterActivity
id.go.pu.eabsensimobile.view.activity.MainActivity
id.go.pu.eabsensimobile.view.activity.NotificationActivity
id.go.pu.eabsensimobile.view.activity.AbsensiActivity
id.go.pu.eabsensimobile.view.activity.AbsensiAddActivity
id.go.pu.eabsensimobile.view.activity.AbsensiCameraActivity
id.go.pu.eabsensimobile.view.activity.IzinActivity
id.go.pu.eabsensimobile.view.activity.IzinAddActivity
id.go.pu.eabsensimobile.view.activity.PengaduanActivity
id.go.pu.eabsensimobile.view.activity.PengaduanAddActivity
id.go.pu.eabsensimobile.view.activity.LaporanActivity
id.go.pu.eabsensimobile.view.activity.LaporanAddActivity
id.go.pu.eabsensimobile.view.activity.CutiActivity
id.go.pu.eabsensimobile.view.activity.CutiAddActivity
id.go.pu.eabsensimobile.view.activity.SlipGajiActivity
id.go.pu.eabsensimobile.view.activity.SlipGajiAddActivity
id.go.pu.eabsensimobile.view.activity.MedicalActivity
id.go.pu.eabsensimobile.view.activity.MedicalPengobatanActivity
id.go.pu.eabsensimobile.view.activity.ReimburseActivity
id.go.pu.eabsensimobile.view.activity.ReimburseAddActivity
id.go.pu.eabsensimobile.view.activity.TripActivity
id.go.pu.eabsensimobile.view.activity.TripAddActivity
id.go.pu.eabsensimobile.view.activity.TrainingActivity
id.go.pu.eabsensimobile.view.activity.TrainingAddActivity
id.go.pu.eabsensimobile.view.activity.LaporanHarianActivity
id.go.pu.eabsensimobile.view.activity.PengajuanActivity
id.go.pu.eabsensimobile.view.activity.RiwayatPengajuanActivity
id.go.pu.eabsensimobile.view.activity.ProfileActivity
id.go.pu.eabsensimobile.view.activity.CuacaActivity
id.go.pu.eabsensimobile.view.activity.BeritaActivity
id.go.pu.eabsensimobile.view.activity.EhrmActivity
id.go.pu.eabsensimobile.view.activity.EhrmDetailActivity
id.go.pu.eabsensimobile.view.activity.EiptekActivity
id.go.pu.eabsensimobile.view.activity.EiptekDetailActivity
id.go.pu.eabsensimobile.view.activity.TndeActivity
id.go.pu.eabsensimobile.view.activity.TndeDetailActivity
id.go.pu.eabsensimobile.view.activity.JdihActivity
id.go.pu.eabsensimobile.view.activity.JdihDetailActivity
pub.devrel.easypermissions.AppSettingsDialogHolderActivity
com.google.android.gms.common.api.GoogleApiActivity
com.google.android.play.core.missingsplits.PlayCoreMissingSplitsActivity
com.google.android.play.core.common.PlayCoreDialogWrapperActivity

Receivers

Information computed with AndroGuard. 

id.go.pu.eabsensimobile.service.AlarmReceiver
id.go.pu.eabsensimobile.service.AbsenLocalReceiver

Services

Information computed with AndroGuard. 

org.acra.sender.LegacySenderService
org.acra.sender.JobSenderService
com.google.android.play.core.assetpacks.AssetPackExtractionService

NIAP analysis

Information computed with MobSF.

FCS_RBG_EXT.1.1 The application implement DRBG functionality for its cryptographic operations.
Random Bit Generation Services
FCS_STO_EXT.1.1 The application does not store any credentials to non-volatile memory.
Storage of Credentials
FCS_CKM_EXT.1.1 The application implement asymmetric key generation.
Cryptographic Key Generation Services
FDP_DEC_EXT.1.1 The application has access to ['location', 'camera', 'network connectivity'].
Access to Platform Resources
FDP_DEC_EXT.1.2 The application has access to no sensitive information repositories.
Access to Platform Resources
FDP_NET_EXT.1.1 The application has user/application initiated network communications.
Network Communications
FDP_DAR_EXT.1.1 The application implement functionality to encrypt sensitive data in non-volatile memory.
Encryption Of Sensitive Application Data
FMT_MEC_EXT.1.1 The application invoke the mechanisms recommended by the platform vendor for storing and setting configuration options.
Supported Configuration Mechanism
FTP_DIT_EXT.1.1 The application does encrypt some transmitted data with HTTPS/TLS/SSH between itself and another trusted IT product.
Protection of Data in Transit
FCS_RBG_EXT.2.1
FCS_RBG_EXT.2.2		 The application perform all deterministic random bit generation (DRBG) services in accordance with NIST Special Publication 800-90A using Hash_DRBG. The deterministic RBG is seeded by an entropy source that accumulates entropy from a platform-based DRBG and a software-based noise source, with a minimum of 256 bits of entropy at least equal to the greatest security strength (according to NIST SP 800-57) of the keys and hashes that it will generate.
Random Bit Generation from Application
FCS_CKM.1.1(1) The application generate asymmetric cryptographic keys not in accordance with FCS_CKM.1.1(1) using key generation algorithm RSA schemes and cryptographic key sizes of 1024-bit or lower.
Cryptographic Asymmetric Key Generation
FCS_COP.1.1(2) The application perform cryptographic hashing services not in accordance with FCS_COP.1.1(2) and uses the cryptographic algorithm RC2/RC4/MD4/MD5.
Cryptographic Operation - Hashing
FCS_HTTPS_EXT.1.1 The application implement the HTTPS protocol that complies with RFC 2818.
HTTPS Protocol
FCS_HTTPS_EXT.1.2 The application implement HTTPS using TLS.
HTTPS Protocol
FCS_HTTPS_EXT.1.3 The application notify the user and not establish the connection or request application authorization to establish the connection if the peer certificate is deemed invalid.
HTTPS Protocol
FIA_X509_EXT.1.1 The application invoked platform-provided functionality to validate certificates in accordance with the following rules: ['The application validate the revocation status of the certificate using the Online Certificate Status Protocol (OCSP) as specified in RFC 2560 or a Certificate Revocation List (CRL) as specified in RFC 5759 or an OCSP TLS Status Request Extension (i.e., OCSP stapling) as specified in RFC 6066', 'The certificate path must terminate with a trusted CA certificate'].
X.509 Certificate Validation
FIA_X509_EXT.2.1 The application use X.509v3 certificates as defined by RFC 5280 to support authentication for HTTPS , TLS.
X.509 Certificate Authentication
FIA_X509_EXT.2.2 When the application cannot establish a connection to determine the validity of a certificate, the application allow the administrator to choose whether to accept the certificate in these cases or accept the certificate ,or not accept the certificate.
X.509 Certificate Authentication

Code analysis

Information computed with MobSF.

Low
CVSS:7.5
The App logs information. Sensitive information should never be logged.
MASVS: MSTG-STORAGE-3
CWE-532 Insertion of Sensitive Information into Log File
Files: 
 id/go/pu/eabsensimobile/view/activity/MedicalPengobatanActivity.java
 id/go/pu/eabsensimobile/view/activity/TndeActivity.java
 id/go/pu/eabsensimobile/services/DownloadService.java
 id/go/pu/eabsensimobile/view/activity/QrCodeActivity.java
 id/go/pu/eabsensimobile/interactor/AbsensiAddInteractor.java
 org/acra/config/BaseCoreConfigurationBuilder.java
 com/github/mikephil/charting/charts/PieRadarChartBase.java
 id/go/pu/eabsensimobile/adapter/AdapterMedicalPhoto.java
 com/bumptech/glide/load/model/FileLoader.java
 id/go/pu/eabsensimobile/view/activity/TrainingAddActivity.java
 com/bumptech/glide/signature/ApplicationVersionSignature.java
 com/bumptech/glide/load/engine/DecodeJob.java
 androidmads/library/qrgenearator/QRGSaver.java
 com/bumptech/glide/load/resource/gif/StreamGifDecoder.java
 id/go/pu/eabsensimobile/interactor/CutiAddInteractor.java
 org/acra/config/ConfigUtils.java
 com/github/mikephil/charting/charts/Chart.java
 com/bumptech/glide/load/resource/gif/GifDrawableEncoder.java
 org/acra/plugins/ServicePluginLoader.java
 org/acra/sender/ReportDistributor.java
 id/go/pu/eabsensimobile/interactor/PengajuanInteractor.java
 com/bumptech/glide/Glide.java
 com/makeramen/roundedimageview/RoundedDrawable.java
 org/conscrypt/ct/CTVerifier.java
 id/go/pu/eabsensimobile/view/activity/RiwayatPengajuanActivity.java
 com/bumptech/glide/load/data/mediastore/ThumbFetcher.java
 com/bumptech/glide/load/model/StreamEncoder.java
 com/bumptech/glide/load/resource/bitmap/BitmapImageDecoderResourceDecoder.java
 id/go/pu/eabsensimobile/interactor/PengaduanAddInteractor.java
 com/github/mikephil/charting/renderer/ScatterChartRenderer.java
 org/acra/attachment/DefaultAttachmentProvider.java
 com/github/mikephil/charting/utils/FileUtils.java
 com/github/mikephil/charting/charts/BarChart.java
 com/bumptech/glide/load/engine/executor/RuntimeCompat.java
 com/github/mikephil/charting/charts/CombinedChart.java
 id/go/pu/eabsensimobile/view/activity/EiptekActivity.java
 org/acra/builder/LastActivityManager.java
 com/bumptech/glide/load/resource/bitmap/HardwareConfigState.java
 com/bumptech/glide/load/engine/GlideException.java
 com/bumptech/glide/manager/RequestTracker.java
 com/bumptech/glide/load/model/ByteBufferFileLoader.java
 org/acra/util/ProcessFinisher.java
 org/acra/collector/DropBoxCollector.java
 com/github/mikephil/charting/data/LineDataSet.java
 id/go/pu/eabsensimobile/interactor/LoginInteractor.java
 com/github/mikephil/charting/renderer/CombinedChartRenderer.java
 id/go/pu/eabsensimobile/interactor/TrainingAddInteractor.java
 com/github/mikephil/charting/data/PieEntry.java
 pub/devrel/easypermissions/helper/ActivityPermissionHelper.java
 org/acra/sender/NullSender.java
 id/go/pu/eabsensimobile/view/activity/ProfileActivity.java
 com/bumptech/glide/load/resource/gif/ByteBufferGifDecoder.java
 com/github/mikephil/charting/charts/BarLineChartBase.java
 id/go/pu/eabsensimobile/view/activity/ReimburseAddActivity.java
 org/acra/interaction/ReportInteractionExecutor.java
 com/bumptech/glide/manager/DefaultConnectivityMonitor.java
 id/go/pu/eabsensimobile/interactor/IzinAddInteractor.java
 pub/devrel/easypermissions/helper/BaseSupportPermissionsHelper.java
 org/acra/ACRA.java
 com/github/mikephil/charting/components/AxisBase.java
 com/bumptech/glide/load/resource/bitmap/Downsampler.java
 id/go/pu/eabsensimobile/view/activity/RegisterActivity.java
 org/acra/util/InstanceCreator.java
 id/go/pu/eabsensimobile/service/DownloadImageProfile.java
 org/acra/sender/SendingConductor.java
 com/bumptech/glide/load/resource/ImageDecoderResourceDecoder.java
 pub/devrel/easypermissions/EasyPermissions.java
 id/go/pu/eabsensimobile/adapter/AdapterIzinPhoto.java
 com/bumptech/glide/load/engine/bitmap_recycle/LruArrayPool.java
 com/kingfisher/easyviewindicator/GridLayoutSnapHelper.java
 br/com/sapereaude/maskedEditText/MaskedEditText.java
 id/go/pu/eabsensimobile/view/activity/CutiActivity.java
 com/bumptech/glide/load/model/ByteBufferEncoder.java
 com/bumptech/glide/manager/RequestManagerRetriever.java
 com/bumptech/glide/load/resource/bitmap/TransformationUtils.java
 id/go/pu/eabsensimobile/interactor/LaporanInteractor.java
 id/go/pu/eabsensimobile/view/activity/MainActivity.java
 org/acra/data/CrashReportData.java
 com/bumptech/glide/manager/RequestManagerFragment.java
 id/go/pu/eabsensimobile/view/activity/TripActivity.java
 id/go/pu/eabsensimobile/adapter/AdapterReimbursePhoto.java
 id/go/pu/eabsensimobile/interactor/ReimburseAddInteractor.java
 id/go/pu/eabsensimobile/utils/NetMonSignalStrength.java
 com/bumptech/glide/load/resource/bitmap/BitmapEncoder.java
 id/go/pu/eabsensimobile/adapter/AdapterPengaduanPhoto.java
 com/bumptech/glide/load/resource/bitmap/DrawableToBitmapConverter.java
 org/acra/util/PackageManagerWrapper.java
 com/bumptech/glide/load/engine/cache/DiskLruCacheWrapper.java
 org/conscrypt/Platform.java
 com/makeramen/roundedimageview/RoundedImageView.java
 com/github/mikephil/charting/listener/BarLineChartTouchListener.java
 com/bumptech/glide/load/data/LocalUriFetcher.java
 com/bumptech/glide/load/resource/bitmap/VideoDecoder.java
 com/bumptech/glide/load/engine/cache/MemorySizeCalculator.java
 com/bumptech/glide/load/data/HttpUrlFetcher.java
 com/bumptech/glide/request/SingleRequest.java
 org/acra/util/IOUtils.java
 org/acra/reporter/ErrorReporterImpl.java
 com/bumptech/glide/manager/SupportRequestManagerFragment.java
 com/github/mikephil/charting/charts/HorizontalBarChart.java
 id/go/pu/eabsensimobile/interactor/PengaduanInteractor.java
 com/bumptech/glide/load/engine/DecodePath.java
 com/bumptech/glide/request/target/CustomViewTarget.java
 com/bumptech/glide/gifdecoder/GifHeaderParser.java
 com/bumptech/glide/load/engine/SourceGenerator.java
 org/acra/collector/LogCatCollector.java
 com/bumptech/glide/load/engine/Engine.java
 id/go/pu/eabsensimobile/interactor/TripAddInteractor.java
 butterknife/ButterKnife.java
 org/acra/collector/ConfigurationCollector.java
 id/go/pu/eabsensimobile/view/activity/CutiAddActivity.java
 id/go/pu/eabsensimobile/view/activity/LaporanActivity.java
 id/go/pu/eabsensimobile/view/activity/TrainingActivity.java
 id/go/pu/eabsensimobile/service/AlarmReceiver.java
 com/github/mikephil/charting/data/ChartData.java
 id/go/pu/eabsensimobile/view/activity/PengaduanAddActivity.java
 org/acra/log/AndroidLogDelegate.java
 org/acra/util/Installation.java
 org/acra/file/BulkReportDeleter.java
 id/go/pu/eabsensimobile/adapter/AdapterTrainingPhoto.java
 com/github/mikephil/charting/utils/Utils.java
 com/bumptech/glide/module/ManifestParser.java
 com/bumptech/glide/GeneratedAppGlideModuleImpl.java
 org/acra/attachment/AcraContentProvider.java
 org/acra/data/CrashReportDataFactory.java
 com/bumptech/glide/load/engine/executor/GlideExecutor.java
 com/github/barteksc/pdfviewer/PDFView.java
 com/bumptech/glide/load/model/ResourceLoader.java
 id/go/pu/eabsensimobile/view/activity/AbsensiActivity.java
 com/bumptech/glide/load/resource/bitmap/DefaultImageHeaderParser.java
 id/go/pu/eabsensimobile/view/activity/TripAddActivity.java
 id/go/pu/eabsensimobile/interactor/ProfileInteractor.java
 id/go/pu/eabsensimobile/connection/NetworkUtil.java
 id/go/pu/eabsensimobile/view/activity/PengaduanActivity.java
 id/go/pu/eabsensimobile/view/activity/PengajuanActivity.java
 com/bumptech/glide/load/engine/prefill/BitmapPreFillRunner.java
 com/bumptech/glide/util/pool/FactoryPools.java
 id/go/pu/eabsensimobile/adapter/AdapterCutiPhoto.java
 com/bumptech/glide/gifdecoder/StandardGifDecoder.java
 id/go/pu/eabsensimobile/interactor/MedicalAddInteractor.java
 com/bumptech/glide/manager/DefaultConnectivityMonitorFactory.java
 id/go/pu/eabsensimobile/view/activity/IzinAddActivity.java
 id/go/pu/eabsensimobile/service/AbsenLocalReceiver.java
 id/go/pu/eabsensimobile/custom/OkHttpStreamFetcher.java
 com/bumptech/glide/request/target/ViewTarget.java
 com/bumptech/glide/load/engine/bitmap_recycle/LruBitmapPool.java
 id/go/pu/eabsensimobile/view/activity/IzinActivity.java
 com/shockwave/pdfium/PdfiumCore.java
 id/go/pu/eabsensimobile/view/activity/MedicalActivity.java
 org/acra/legacy/ReportMigrator.java
 com/ortiz/touchview/TouchImageView.java
 id/go/pu/eabsensimobile/adapter/AdapterTripPhoto.java
 id/go/pu/eabsensimobile/view/activity/AbsensiAddActivity.java
 id/go/pu/eabsensimobile/view/activity/ReimburseActivity.java
 id/go/pu/eabsensimobile/view/activity/LaporanAddActivity.java
 org/acra/builder/ReportExecutor.java
 id/go/pu/eabsensimobile/view/activity/TestActivity.java
 id/go/pu/eabsensimobile/utils/RecentUtils.java
 org/acra/plugins/SimplePluginLoader.java
 com/bumptech/glide/load/data/AssetPathFetcher.java
 id/go/pu/eabsensimobile/adapter/AdapterLaporanPhoto.java
 com/bumptech/glide/util/ContentLengthInputStream.java
 com/github/mikephil/charting/data/CombinedData.java
 id/go/pu/eabsensimobile/utils/PhotoHandler.java
 org/acra/scheduler/SchedulerStarter.java
 id/go/pu/eabsensimobile/service/DownloadTask.java
 id/go/pu/eabsensimobile/interactor/LaporanAddInteractor.java
High
CVSS:5.5
App can read/write to External Storage. Any App can read data written to External Storage.
MASVS: MSTG-STORAGE-2
CWE-276 Incorrect Default Permissions
M2: Insecure Data Storage
Files: 
 id/go/pu/eabsensimobile/view/activity/ProfileActivity.java
 id/go/pu/eabsensimobile/service/CheckForSDCard.java
 org/acra/file/Directory.java
 id/go/pu/eabsensimobile/view/activity/ReimburseAddActivity.java
 id/go/pu/eabsensimobile/view/activity/MedicalPengobatanActivity.java
 com/github/mikephil/charting/utils/FileUtils.java
 id/go/pu/eabsensimobile/view/activity/IzinAddActivity.java
 com/github/mikephil/charting/charts/Chart.java
 id/go/pu/eabsensimobile/connection/AppConstant.java
 id/go/pu/eabsensimobile/view/activity/AbsensiCameraActivity.java
 id/go/pu/eabsensimobile/view/activity/AbsensiAddActivity.java
 id/go/pu/eabsensimobile/view/activity/LaporanAddActivity.java
 id/go/pu/eabsensimobile/view/activity/CutiAddActivity.java
 id/go/pu/eabsensimobile/view/activity/TripAddActivity.java
 id/go/pu/eabsensimobile/utils/PhotoHandler.java
 id/go/pu/eabsensimobile/utils/Utils.java
 id/go/pu/eabsensimobile/service/DownloadTask.java
 id/go/pu/eabsensimobile/view/activity/TrainingAddActivity.java
 id/go/pu/eabsensimobile/view/activity/PengaduanAddActivity.java
Medium
CVSS:5.5
App creates temp file. Sensitive information should never be written into a temp file.
MASVS: MSTG-STORAGE-2
CWE-276 Incorrect Default Permissions
M2: Insecure Data Storage
Files: 
 id/go/pu/eabsensimobile/view/activity/ProfileActivity.java
 id/go/pu/eabsensimobile/view/activity/ReimburseAddActivity.java
 id/go/pu/eabsensimobile/view/activity/AbsensiCameraActivity.java
 id/go/pu/eabsensimobile/view/activity/AbsensiAddActivity.java
 id/go/pu/eabsensimobile/view/activity/MedicalPengobatanActivity.java
 id/go/pu/eabsensimobile/view/activity/LaporanAddActivity.java
 id/go/pu/eabsensimobile/view/activity/CutiAddActivity.java
 id/go/pu/eabsensimobile/view/activity/TripAddActivity.java
 id/go/pu/eabsensimobile/view/activity/IzinAddActivity.java
 id/go/pu/eabsensimobile/view/activity/TrainingAddActivity.java
 id/go/pu/eabsensimobile/view/activity/PengaduanAddActivity.java
Medium
CVSS:7.4
Files may contain hardcoded sensitive information like usernames, passwords, keys etc.
MASVS: MSTG-STORAGE-14
CWE-312 Cleartext Storage of Sensitive Information
M9: Reverse Engineering
Files: 
 com/bumptech/glide/load/Option.java
 org/conscrypt/OpenSSLRSAKeyFactory.java
 com/bumptech/glide/load/engine/ResourceCacheKey.java
 com/bumptech/glide/load/engine/DataCacheKey.java
 androidmads/library/qrgenearator/QRGContents.java
 com/bumptech/glide/load/engine/EngineResource.java
 org/conscrypt/OpenSSLECKeyFactory.java
 com/scottyab/showhidepasswordedittext/ShowHidePasswordEditText.java
 id/go/pu/eabsensimobile/interactor/JdihInteractor.java
Info
CVSS:0
This App uses SSL certificate pinning to detect or prevent MITM attacks in secure communication channel.
MASVS: MSTG-NETWORK-4
Files: 
 id/go/pu/eabsensimobile/connection/RetrofitSslClient.java
 org/conscrypt/SSLParametersImpl.java
 org/conscrypt/DefaultSSLContextImpl.java
 id/go/pu/eabsensimobile/connection/RetrofitClient.java
Medium
CVSS:4.3
IP Address disclosure
MASVS: MSTG-CODE-2
CWE-200 Information Exposure
Files: 
 org/conscrypt/EvpMdRef.java
 org/conscrypt/OpenSSLCipherRSA.java
 org/conscrypt/OAEPParameters.java
 org/conscrypt/CertificatePriorityComparator.java
 org/conscrypt/OpenSSLSignature.java
 org/conscrypt/ChainStrengthAnalyzer.java
 org/conscrypt/OpenSSLProvider.java
 org/conscrypt/ct/CTConstants.java
 org/conscrypt/OidData.java
 org/conscrypt/TrustManagerImpl.java
Medium
CVSS:5.9
App uses SQLite Database and execute raw SQL query. Untrusted user input in raw SQL queries can cause SQL Injection. Also sensitive information should be encrypted and written to the database.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
M7: Client Code Quality
Files: 
 com/downloader/database/AppDbHelper.java
 com/downloader/database/DatabaseOpenHelper.java
High
CVSS:7.4
Insecure Implementation of SSL. Trusting all the certificates or accepting self signed certificates is a critical Security Hole. This application is vulnerable to MITM attacks
MASVS: MSTG-NETWORK-3
CWE-295 Improper Certificate Validation
M3: Insecure Communication
Files: 
 org/conscrypt/Conscrypt.java
Medium
CVSS:7.4
MD5 is a weak hash known to have hash collisions.
MASVS: MSTG-CRYPTO-4
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files: 
 com/downloader/utils/Utils.java
Pygal Indonesia: 400 Netherlands: 100 United States: 900

Map computed by Pithus.

Network analysis

Information computed with MobSF.

High Base config is insecurely configured to permit clear text traffic to all domains.
Scope: ['*']
Medium Base config is configured to trust system certificates.
Scope: ['*']

Domains analysis

Information computed with MobSF.

US korpripupr.smartcoop.id 172.67.204.130
US eoffice.pu.go.id 34.117.249.119
US bit.ly 67.199.248.11
ID jdih.pu.go.id 103.211.50.246
US github.com 140.82.121.3
US pu.go.id 34.117.204.250
ID bravo.pu.go.id 34.101.92.236
ID epa.pu.go.id 103.211.51.177
US sitaba-dev.pu.go.id 34.102.250.2
US emonitoring.pu.go.id 34.120.159.131
ID simantu.pu.go.id 103.12.84.208
US layanansetjen.pu.go.id 34.117.9.242
NL api.whatsapp.com 157.240.236.60
US kinerja.pu.go.id 34.120.124.47

URL analysis

Information computed with MobSF.

https://api.whatsapp.com/send?phone=+6281119500600
Defined in id/go/pu/eabsensimobile/view/activity/BravoActivity.java
https://eoffice.pu.go.id/services/show_pdf?d=_FileDownload%5Csurat_masuk%5C&f=
Defined in id/go/pu/eabsensimobile/view/activity/TndeDetailActivity.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://bravo.pu.go.id/backend/integrated/Ehrm
https://simantu.pu.go.id/API/bravo.php
https://jdih.pu.go.id/api/
https://eoffice.pu.go.id/services_bravo/get_inbox
https://eoffice.pu.go.id/services_bravo/detil_surat
http://103.211.50.36/notification/
https://kinerja.pu.go.id/
https://emonitoring.pu.go.id/
https://sitaba-dev.pu.go.id/
https://epa.pu.go.id/
http://103.211.50.41/lokasiRahasia/
http://pu.go.id
https://pu.go.id/bravo_api/api/v1/
https://bravo.pu.go.id/backend/
https://bravo.pu.go.id/backend//uploads/splashscreen/ic_splash.jpg
http://bit.ly/cekEmailPUPR
https://korpripupr.smartcoop.id/register
https://layanansetjen.pu.go.id/
https://pu.go.id/vaksin
https://pu.go.id/bravo_api
https://bravo.pu.go.id/backend/AuthMobile
https://eoffice.pu.go.id/services_bravo/set_status_baca
Defined in id/go/pu/eabsensimobile/connection/AppConstant.java
https://eoffice.pu.go.id/services_bravo/get_inbox/{nip}/{val1}/{val2}/{tgl_awal}/{tgl_akhir}
https://eoffice.pu.go.id/services_bravo/detil_surat/{nip}/{no_tnde}
https://eoffice.pu.go.id/services_bravo/get_inbox/{nip}/{val1}/{val2}/{tgl_awal}
https://eoffice.pu.go.id/services_bravo/set_status_baca/{nip}/{val1}/{val2}
Defined in id/go/pu/eabsensimobile/connection/EndPointInterface.java
https://eoffice.pu.go.id/services_bravo/get_inbox/{nip}/{val1}/{val2}/{tgl_awal}/{tgl_akhir}
https://eoffice.pu.go.id/services_bravo/detil_surat/{nip}/{no_tnde}
https://eoffice.pu.go.id/services_bravo/get_inbox/{nip}/{val1}/{val2}/{tgl_awal}
https://eoffice.pu.go.id/services_bravo/set_status_baca/{nip}/{val1}/{val2}
Defined in id/go/pu/eabsensimobile/connection/EndPointInterface.java
https://eoffice.pu.go.id/services_bravo/get_inbox/{nip}/{val1}/{val2}/{tgl_awal}/{tgl_akhir}
https://eoffice.pu.go.id/services_bravo/detil_surat/{nip}/{no_tnde}
https://eoffice.pu.go.id/services_bravo/get_inbox/{nip}/{val1}/{val2}/{tgl_awal}
https://eoffice.pu.go.id/services_bravo/set_status_baca/{nip}/{val1}/{val2}
Defined in id/go/pu/eabsensimobile/connection/EndPointInterface.java
https://eoffice.pu.go.id/services_bravo/get_inbox/{nip}/{val1}/{val2}/{tgl_awal}/{tgl_akhir}
https://eoffice.pu.go.id/services_bravo/detil_surat/{nip}/{no_tnde}
https://eoffice.pu.go.id/services_bravo/get_inbox/{nip}/{val1}/{val2}/{tgl_awal}
https://eoffice.pu.go.id/services_bravo/set_status_baca/{nip}/{val1}/{val2}
Defined in id/go/pu/eabsensimobile/connection/EndPointInterface.java
http://bit.ly/WorkspacePUPR
https://github.com/vinc3m1
https://github.com/vinc3m1/RoundedImageView
https://github.com/vinc3m1/RoundedImageView.git
https://github.com/scottyab/showhidepasswordedittext
Defined in Android String Resource
http://bit.ly/WorkspacePUPR
https://github.com/vinc3m1
https://github.com/vinc3m1/RoundedImageView
https://github.com/vinc3m1/RoundedImageView.git
https://github.com/scottyab/showhidepasswordedittext
Defined in Android String Resource
http://bit.ly/WorkspacePUPR
https://github.com/vinc3m1
https://github.com/vinc3m1/RoundedImageView
https://github.com/vinc3m1/RoundedImageView.git
https://github.com/scottyab/showhidepasswordedittext
Defined in Android String Resource
http://bit.ly/WorkspacePUPR
https://github.com/vinc3m1
https://github.com/vinc3m1/RoundedImageView
https://github.com/vinc3m1/RoundedImageView.git
https://github.com/scottyab/showhidepasswordedittext
Defined in Android String Resource
http://bit.ly/WorkspacePUPR
https://github.com/vinc3m1
https://github.com/vinc3m1/RoundedImageView
https://github.com/vinc3m1/RoundedImageView.git
https://github.com/scottyab/showhidepasswordedittext
Defined in Android String Resource

Permissions analysis

Information computed with MobSF.

High android.permission.READ_PHONE_STATE read phone state and identity
Allows the application to access the phone features of the device. An application with this permission can determine the phone number and serial number of this phone, whether a call is active, the number that call is connected to and so on.
High android.permission.ACCESS_COARSE_LOCATION coarse (network-based) location
Access coarse location sources, such as the mobile network database, to determine an approximate phone location, where available. Malicious applications can use this to determine approximately where you are.
High android.permission.ACCESS_FINE_LOCATION fine (GPS) location
Access fine location sources, such as the Global Positioning System on the phone, where available. Malicious applications can use this to determine where you are and may consume additional battery power.
High android.permission.WRITE_EXTERNAL_STORAGE read/modify/delete external storage contents
Allows an application to write to external storage.
High android.permission.CAMERA take pictures and videos
Allows application to take pictures and videos with the camera. This allows the application to collect images that the camera is seeing at any time.
High android.permission.READ_EXTERNAL_STORAGE read external storage contents
Allows an application to read from external storage.
High android.permission.SYSTEM_ALERT_WINDOW display system-level alerts
Allows an application to show system-alert windows. Malicious applications can take over the entire screen of the phone.
Low android.permission.INTERNET full Internet access
Allows an application to create network sockets.
Low android.permission.ACCESS_NETWORK_STATE view network status
Allows an application to view the status of all networks.
Low android.permission.ACCESS_WIFI_STATE view Wi-Fi status
Allows an application to view the information about the status of Wi-Fi.
Low android.permission.ACCESS_LOCATION_EXTRA_COMMANDS access extra location provider commands
Access extra location provider commands. Malicious applications could use this to interfere with the operation of the GPS or other location sources.
Low android.permission.VIBRATE control vibrator
Allows the application to control the vibrator.
Low android.permission.RECEIVE_BOOT_COMPLETED automatically start at boot
Allows an application to start itself as soon as the system has finished booting. This can make it take longer to start the phone and allow the application to slow down the overall phone by always running.
Low android.permission.FOREGROUND_SERVICE Allows a regular application to use Service.startForeground.

Threat analysis

Information computed with Quark-Engine.

Confidence:
100%
Write HTTP input stream into a file
Confidence:
100%
Load external class
Confidence:
100%
Implicit intent(view a web page, make a phone call, etc.)
Confidence:
100%
Get absolute path of file and put it to JSON object
Confidence:
100%
Find a method from given class name, usually for reflection
Confidence:
100%
Connect to a URL and receive input stream from the server
Confidence:
100%
Method reflection
Confidence:
100%
Install other APKs from file
Confidence:
100%
Connect to a URL and read data from it
Confidence:
100%
Load class from given class name
Confidence:
100%
Retrieve data from broadcast
Confidence:
100%
Read sensitive data(SMS, CALLLOG, etc)
Confidence:
100%
Implicit intent(view a web page, make a phone call, etc.) via setData
Confidence:
100%
Connect to a URL and get the response code
Confidence:
100%
Monitor the broadcast action events (BOOT_COMPLETED)
Confidence:
100%
Get Location of the device and append this info to a string
Confidence:
100%
Get absolute path of the file and store in string
Confidence:
100%
Read file from assets directory
Confidence:
100%
Get last known location of the device
Confidence:
100%
Get calendar information
Confidence:
100%
Get location of the device
Confidence:
100%
Query the IMEI number
Confidence:
100%
Method reflection
Confidence:
100%
Hide the current app's icon
Confidence:
100%
Connect to the remote server through the given URL
Confidence:
100%
Query data from URI (SMS, CALLLOGS)
Confidence:
100%
Read file into a stream and put it into a JSON object
Confidence:
100%
Get the time of current location
Confidence:
100%
Initialize class object dynamically
Confidence:
100%
Read the input stream from given URL
Confidence:
100%
Connect to a URL and set request method
Confidence:
100%
Get specific method from other Dex files
Confidence:
80%
Start another application from current application
Confidence:
80%
Read file and put it into a stream
Confidence:
80%
Open a file from given absolute path of the file
Confidence:
80%
Check if the given file path exist
Confidence:
80%
Get resource file from res/raw directory

Behavior analysis

Information computed with MobSF.

Android notifications 
       id/go/pu/eabsensimobile/service/NotificationScheduler.java
       id/go/pu/eabsensimobile/service/AbsenLocalReceiver.java
       id/go/pu/eabsensimobile/service/ReminderService.java
       com/bumptech/glide/request/target/NotificationTarget.java
Base64 decode 
       id/go/pu/eabsensimobile/adapter/AdapterCutiPhoto.java
       id/go/pu/eabsensimobile/view/activity/ReimburseAddActivity.java
       id/go/pu/eabsensimobile/adapter/AdapterTrainingPhoto.java
       id/go/pu/eabsensimobile/view/activity/MedicalPengobatanActivity.java
       id/go/pu/eabsensimobile/adapter/AdapterReimbursePhoto.java
       id/go/pu/eabsensimobile/view/activity/IzinAddActivity.java
       id/go/pu/eabsensimobile/adapter/AdapterPengaduanPhoto.java
       id/go/pu/eabsensimobile/adapter/AdapterMedicalPhoto.java
       id/go/pu/eabsensimobile/adapter/AdapterTripPhoto.java
       com/bumptech/glide/load/model/DataUrlLoader.java
       id/go/pu/eabsensimobile/view/activity/LaporanAddActivity.java
       id/go/pu/eabsensimobile/view/activity/CutiAddActivity.java
       id/go/pu/eabsensimobile/view/activity/TripAddActivity.java
       id/go/pu/eabsensimobile/adapter/AdapterLaporanPhoto.java
       id/go/pu/eabsensimobile/adapter/AdapterIzinPhoto.java
       id/go/pu/eabsensimobile/view/activity/TrainingAddActivity.java
       org/acra/util/IOUtils.java
       id/go/pu/eabsensimobile/view/activity/PengaduanAddActivity.java
Base64 encode 
       id/go/pu/eabsensimobile/adapter/AdapterCutiPhoto.java
       id/go/pu/eabsensimobile/view/activity/ReimburseAddActivity.java
       id/go/pu/eabsensimobile/adapter/AdapterTrainingPhoto.java
       id/go/pu/eabsensimobile/view/activity/CuacaActivity.java
       id/go/pu/eabsensimobile/view/activity/MedicalPengobatanActivity.java
       id/go/pu/eabsensimobile/adapter/AdapterReimbursePhoto.java
       id/go/pu/eabsensimobile/view/activity/IzinAddActivity.java
       id/go/pu/eabsensimobile/adapter/AdapterPengaduanPhoto.java
       id/go/pu/eabsensimobile/adapter/AdapterMedicalPhoto.java
       id/go/pu/eabsensimobile/adapter/AdapterTripPhoto.java
       id/go/pu/eabsensimobile/view/fragment/BravoFragment.java
       id/go/pu/eabsensimobile/view/activity/LaporanAddActivity.java
       id/go/pu/eabsensimobile/view/activity/CutiAddActivity.java
       id/go/pu/eabsensimobile/view/activity/TripAddActivity.java
       id/go/pu/eabsensimobile/adapter/AdapterLaporanPhoto.java
       id/go/pu/eabsensimobile/adapter/AdapterIzinPhoto.java
       id/go/pu/eabsensimobile/view/activity/TrainingAddActivity.java
       org/acra/util/IOUtils.java
       id/go/pu/eabsensimobile/interactor/JdihInteractor.java
       id/go/pu/eabsensimobile/view/activity/PengaduanAddActivity.java
Certificate handling 
       org/conscrypt/OpenSSLSocketFactoryImpl.java
       org/conscrypt/Platform.java
       org/conscrypt/BaseOpenSSLSocketAdapterFactory.java
       org/conscrypt/OpenSSLContextImpl.java
       id/go/pu/eabsensimobile/connection/UnsafeOkHttpClient.java
       org/conscrypt/Conscrypt.java
Content provider 
       org/acra/attachment/AcraContentProvider.java
Crypto 
       org/conscrypt/ConscryptFileDescriptorSocket.java
       org/conscrypt/DESEDESecretKeyFactory.java
       org/conscrypt/OpenSSLEvpCipherARC4.java
       org/conscrypt/OpenSSLCipherRSA.java
       org/conscrypt/GCMParameters.java
       org/conscrypt/OpenSSLEvpCipherDESEDE.java
       org/conscrypt/OpenSSLX509Certificate.java
       org/conscrypt/Platform.java
       org/conscrypt/DuckTypedPSKKeyManager.java
       org/conscrypt/OpenSSLEvpCipher.java
       okio/Buffer.java
       org/conscrypt/OpenSSLECDHKeyAgreement.java
       org/conscrypt/OpenSSLMac.java
       okio/SegmentedByteString.java
       org/conscrypt/PSKKeyManager.java
       org/conscrypt/NativeCrypto.java
       org/conscrypt/OpenSSLEvpCipherAES.java
       org/conscrypt/OAEPParameters.java
       okio/HashingSource.java
       okio/ByteString.java
       org/conscrypt/OpenSSLAeadCipherAES.java
       org/conscrypt/ConscryptEngine.java
       org/conscrypt/IvParameters.java
       org/conscrypt/OpenSSLCipherChaCha20.java
       okio/HashingSink.java
       org/conscrypt/CryptoUpcalls.java
       org/conscrypt/SSLParametersImpl.java
       org/conscrypt/OpenSSLX509CRL.java
       org/conscrypt/OpenSSLAeadCipher.java
       org/conscrypt/KeyGeneratorImpl.java
       org/conscrypt/OpenSSLCipher.java
Execute os command 
       org/acra/collector/MemoryInfoCollector.java
Gps location 
       id/go/pu/eabsensimobile/view/fragment/BravoFragment.java
       id/go/pu/eabsensimobile/view/activity/AbsensiAddActivity.java
       id/go/pu/eabsensimobile/view/activity/PengaduanAddActivity.java
Get device id, imei,meid/esn etc 
       id/go/pu/eabsensimobile/view/activity/RegisterActivity.java
Get installed applications 
       org/acra/sender/EmailIntentSender.java
Get network interface information 
       org/acra/collector/SimpleValuesCollector.java
Get phone number 
       id/go/pu/eabsensimobile/view/activity/TestActivity.java
       id/go/pu/eabsensimobile/view/activity/RegisterActivity.java
Get sim operator name 
       id/go/pu/eabsensimobile/view/activity/TestActivity.java
       id/go/pu/eabsensimobile/view/activity/RegisterActivity.java
Get sim provider details 
       id/go/pu/eabsensimobile/view/activity/TestActivity.java
       id/go/pu/eabsensimobile/view/activity/RegisterActivity.java
Get sim serial number 
       id/go/pu/eabsensimobile/view/activity/TestActivity.java
       id/go/pu/eabsensimobile/view/activity/RegisterActivity.java
Get system service 
       id/go/pu/eabsensimobile/service/NotificationScheduler.java
       id/go/pu/eabsensimobile/service/AlarmScheduler.java
       com/bumptech/glide/request/target/CustomViewTarget.java
       com/bumptech/glide/manager/DefaultConnectivityMonitor.java
       id/go/pu/eabsensimobile/view/activity/QrCodeActivity.java
       org/acra/scheduler/DefaultSenderScheduler.java
       id/go/pu/eabsensimobile/service/AbsenLocalReceiver.java
       com/bumptech/glide/request/target/ViewTarget.java
       org/acra/util/SystemServices.java
       id/go/pu/eabsensimobile/utils/NetMonSignalStrength.java
       id/go/pu/eabsensimobile/view/activity/RegisterActivity.java
       org/acra/collector/DisplayManagerCollector.java
       id/go/pu/eabsensimobile/view/fragment/BravoFragment.java
       id/go/pu/eabsensimobile/view/activity/AbsensiAddActivity.java
       id/go/pu/eabsensimobile/view/activity/TestActivity.java
       id/go/pu/eabsensimobile/utils/RecentUtils.java
       id/go/pu/eabsensimobile/utils/HideKeyboard.java
       id/go/pu/eabsensimobile/connection/NetworkUtil.java
       id/go/pu/eabsensimobile/service/ReminderService.java
       com/bumptech/glide/load/engine/cache/MemorySizeCalculator.java
       com/bumptech/glide/request/target/NotificationTarget.java
       id/go/pu/eabsensimobile/view/activity/PengaduanAddActivity.java
Http connection 
       com/downloader/httpclient/DefaultHttpClient.java
       id/go/pu/eabsensimobile/service/DownloadTask.java
       com/bumptech/glide/load/data/HttpUrlFetcher.java
Https connection 
       id/go/pu/eabsensimobile/view/activity/TndeDetailActivity.java
       id/go/pu/eabsensimobile/dialog/DialogViewPDF.java
       id/go/pu/eabsensimobile/view/activity/JdihDetailActivity.java
       org/conscrypt/TrustManagerImpl.java
       id/go/pu/eabsensimobile/adapter/JdihAdapter.java
Inter process communication 
       id/go/pu/eabsensimobile/view/activity/MainActivity.java
       id/go/pu/eabsensimobile/view/activity/DetailBeritaActivity.java
       id/go/pu/eabsensimobile/view/activity/MedicalPengobatanActivity.java
       id/go/pu/eabsensimobile/view/activity/TndeActivity.java
       id/go/pu/eabsensimobile/service/AlarmScheduler.java
       id/go/pu/eabsensimobile/view/activity/TripActivity.java
       id/go/pu/eabsensimobile/view/activity/QrCodeActivity.java
       org/acra/scheduler/DefaultSenderScheduler.java
       id/go/pu/eabsensimobile/view/activity/BeritaActivity.java
       id/go/pu/eabsensimobile/view/activity/SplashActivity.java
       id/go/pu/eabsensimobile/adapter/JdihAdapter.java
       id/go/pu/eabsensimobile/view/activity/QuoteActivity.java
       id/go/pu/eabsensimobile/view/activity/AbsensiCameraActivity.java
       id/go/pu/eabsensimobile/view/fragment/BravoFragment.java
       id/go/pu/eabsensimobile/view/activity/EpelatihanActivity.java
       id/go/pu/eabsensimobile/view/activity/EkinerjaActivity.java
       pub/devrel/easypermissions/AppSettingsDialog.java
       id/go/pu/eabsensimobile/view/activity/DetailEmonActivity.java
       id/go/pu/eabsensimobile/view/activity/EiptekDetailActivity.java
       id/go/pu/eabsensimobile/utils/FileOpen.java
       id/go/pu/eabsensimobile/view/activity/TrainingAddActivity.java
       id/go/pu/eabsensimobile/service/NotificationScheduler.java
       org/acra/sender/EmailIntentSender.java
       id/go/pu/eabsensimobile/view/activity/TndeDetailActivity.java
       id/go/pu/eabsensimobile/view/activity/NotificationActivity.java
       id/go/pu/eabsensimobile/view/activity/KswpActivity.java
       id/go/pu/eabsensimobile/view/activity/CutiAddActivity.java
       id/go/pu/eabsensimobile/view/activity/RiwayatPengajuanActivity.java
       org/acra/config/MailSenderConfigurationBuilderImpl.java
       id/go/pu/eabsensimobile/view/activity/LaporanActivity.java
       id/go/pu/eabsensimobile/view/activity/IkpaActivity.java
       id/go/pu/eabsensimobile/view/activity/EmailActivity.java
       id/go/pu/eabsensimobile/view/activity/TrainingActivity.java
       id/go/pu/eabsensimobile/service/AlarmReceiver.java
       id/go/pu/eabsensimobile/view/activity/PengaduanAddActivity.java
       id/go/pu/eabsensimobile/view/activity/EkinerjaPenyusunanActivity.java
       id/go/pu/eabsensimobile/view/activity/EhrmDetailActivity.java
       pub/devrel/easypermissions/AppSettingsDialogHolderActivity.java
       id/go/pu/eabsensimobile/view/activity/BravoActivity.java
       id/go/pu/eabsensimobile/view/activity/EiptekActivity.java
       org/acra/sender/LegacySenderService.java
       id/go/pu/eabsensimobile/view/activity/SlipGajiActivity.java
       id/go/pu/eabsensimobile/view/activity/LaporanHarianActivity.java
       org/acra/util/ProcessFinisher.java
       id/go/pu/eabsensimobile/view/activity/EhrmActivity.java
       id/go/pu/eabsensimobile/view/activity/AbsensiActivity.java
       id/go/pu/eabsensimobile/view/activity/TripAddActivity.java
       id/go/pu/eabsensimobile/view/activity/VaksinActivity.java
       id/go/pu/eabsensimobile/view/activity/InformationActivity.java
       id/go/pu/eabsensimobile/service/ReminderService.java
       id/go/pu/eabsensimobile/view/activity/JdihDetailActivity.java
       id/go/pu/eabsensimobile/view/activity/PengaduanActivity.java
       org/acra/sender/EmailIntentSenderFactory.java
       id/go/pu/eabsensimobile/view/activity/PengajuanActivity.java
       id/go/pu/eabsensimobile/view/activity/ProfileActivity.java
       id/go/pu/eabsensimobile/view/activity/LoginEhrmActivity.java
       id/go/pu/eabsensimobile/view/activity/ReimburseAddActivity.java
       id/go/pu/eabsensimobile/view/activity/EkinerjaMultiRatingActivity.java
       com/bumptech/glide/manager/DefaultConnectivityMonitor.java
       id/go/pu/eabsensimobile/view/activity/JdihActivity.java
       id/go/pu/eabsensimobile/view/activity/IzinAddActivity.java
       id/go/pu/eabsensimobile/view/activity/LoginActivity.java
       id/go/pu/eabsensimobile/service/AbsenLocalReceiver.java
       id/go/pu/eabsensimobile/view/activity/IzinActivity.java
       id/go/pu/eabsensimobile/view/activity/RegisterActivity.java
       id/go/pu/eabsensimobile/service/DownloadImageProfile.java
       id/go/pu/eabsensimobile/view/activity/MedicalActivity.java
       id/go/pu/eabsensimobile/view/activity/AbsensiAddActivity.java
       id/go/pu/eabsensimobile/view/activity/ReimburseActivity.java
       id/go/pu/eabsensimobile/view/activity/LaporanAddActivity.java
       id/go/pu/eabsensimobile/service/DownloadTask.java
       id/go/pu/eabsensimobile/view/activity/CutiActivity.java
Java reflection 
       com/bumptech/glide/module/ManifestParser.java
       retrofit2/ParameterHandler.java
       org/acra/config/BaseCoreConfigurationBuilder.java
       org/conscrypt/TrustManagerImpl.java
       org/conscrypt/Platform.java
       org/conscrypt/DuckTypedPSKKeyManager.java
       retrofit2/RequestFactory.java
       retrofit2/Utils.java
       org/acra/collector/MediaCodecListCollector.java
       retrofit2/Retrofit.java
       retrofit2/Invocation.java
       okio/ByteString.java
       retrofit2/Platform.java
       com/ontbee/legacyforks/cn/pedant/SweetAlert/OptAnimationLoader.java
       com/shockwave/pdfium/PdfiumCore.java
       org/acra/collector/DisplayManagerCollector.java
       retrofit2/HttpServiceMethod.java
       com/bumptech/glide/Glide.java
       org/acra/collector/ConfigurationCollector.java
       org/acra/util/$$Lambda$StubCreator$1g41EUgIau4ZP5PKD5E0IY5m20.java
       org/acra/config/$$Lambda$BaseCoreConfigurationBuilder$bIkqtXdpCl2MC6p3YJQnSsYOLxY.java
       org/acra/util/BundleWrapper.java
       pub/devrel/easypermissions/EasyPermissions.java
       retrofit2/ServiceMethod.java
       org/acra/collector/ReflectionCollector.java
       org/acra/collector/SettingsCollector.java
       org/conscrypt/OpenSSLAeadCipher.java
       retrofit2/KotlinExtensions.java
Kill process 
       org/acra/util/ProcessFinisher.java
Loading native code (shared library) 
       org/conscrypt/NativeCryptoJni.java
       com/shockwave/pdfium/PdfiumCore.java
Local file i/o operations 
       id/go/pu/eabsensimobile/service/CheckForSDCard.java
       org/acra/file/Directory.java
       org/acra/sender/EmailIntentSender.java
       com/bumptech/glide/load/engine/cache/InternalCacheDiskCacheFactory.java
       org/acra/prefs/SharedPreferencesFactory.java
       com/bumptech/glide/load/engine/cache/ExternalCacheDiskCacheFactory.java
       id/go/pu/eabsensimobile/session/LoginManager.java
       com/bumptech/glide/Glide.java
       id/go/pu/eabsensimobile/session/DateManager.java
       com/bumptech/glide/load/engine/cache/ExternalPreferredCacheDiskCacheFactory.java
       com/github/barteksc/pdfviewer/util/FileUtils.java
       com/bumptech/glide/load/engine/cache/DiskLruCacheFactory.java
       org/acra/collector/SharedPreferencesCollector.java
Message digest 
       com/bumptech/glide/load/Key.java
       com/bumptech/glide/load/resource/bitmap/DrawableTransformation.java
       com/bumptech/glide/load/resource/bitmap/GranularRoundedCorners.java
       com/bumptech/glide/load/engine/ResourceCacheKey.java
       com/bumptech/glide/load/resource/bitmap/RoundedCorners.java
       com/bumptech/glide/signature/AndroidResourceSignature.java
       com/bumptech/glide/load/resource/bitmap/BitmapDrawableTransformation.java
       com/bumptech/glide/load/resource/bitmap/CenterCrop.java
       org/conscrypt/OpenSSLMessageDigestJDK.java
       okio/Buffer.java
       com/bumptech/glide/signature/ObjectKey.java
       com/bumptech/glide/load/MultiTransformation.java
       com/bumptech/glide/load/resource/bitmap/FitCenter.java
       com/bumptech/glide/load/resource/bitmap/VideoDecoder.java
       com/bumptech/glide/load/engine/prefill/BitmapPreFillRunner.java
       okio/SegmentedByteString.java
       org/conscrypt/NativeCrypto.java
       com/bumptech/glide/load/Options.java
       okio/HashingSource.java
       com/bumptech/glide/load/resource/UnitTransformation.java
       okio/ByteString.java
       com/bumptech/glide/signature/EmptySignature.java
       com/bumptech/glide/load/resource/bitmap/Rotate.java
       com/bumptech/glide/load/model/GlideUrl.java
       org/conscrypt/ct/CertificateEntry.java
       com/bumptech/glide/load/engine/DataCacheKey.java
       com/downloader/utils/Utils.java
       com/bumptech/glide/load/resource/bitmap/CenterInside.java
       okio/HashingSink.java
       com/bumptech/glide/load/engine/EngineKey.java
       com/bumptech/glide/load/resource/bitmap/CircleCrop.java
       com/bumptech/glide/load/engine/cache/SafeKeyGenerator.java
       org/conscrypt/ct/CTLogInfo.java
       com/bumptech/glide/load/resource/gif/GifDrawableTransformation.java
       com/bumptech/glide/signature/MediaStoreSignature.java
       com/bumptech/glide/load/Option.java
Query database of sms, contacts etc 
       com/bumptech/glide/load/data/mediastore/ThumbFetcher.java
       com/bumptech/glide/load/data/mediastore/ThumbnailStreamOpener.java
       id/go/pu/eabsensimobile/utils/Helper.java
Starting activity 
       id/go/pu/eabsensimobile/view/activity/MainActivity.java
       id/go/pu/eabsensimobile/view/activity/MedicalPengobatanActivity.java
       id/go/pu/eabsensimobile/view/activity/TndeActivity.java
       id/go/pu/eabsensimobile/view/activity/TripActivity.java
       id/go/pu/eabsensimobile/view/activity/QrCodeActivity.java
       id/go/pu/eabsensimobile/view/activity/BeritaActivity.java
       id/go/pu/eabsensimobile/view/activity/SplashActivity.java
       id/go/pu/eabsensimobile/adapter/JdihAdapter.java
       id/go/pu/eabsensimobile/view/activity/AbsensiCameraActivity.java
       id/go/pu/eabsensimobile/view/fragment/BravoFragment.java
       id/go/pu/eabsensimobile/view/activity/EpelatihanActivity.java
       id/go/pu/eabsensimobile/view/activity/EkinerjaActivity.java
       pub/devrel/easypermissions/AppSettingsDialog.java
       id/go/pu/eabsensimobile/view/activity/DetailEmonActivity.java
       id/go/pu/eabsensimobile/view/activity/EiptekDetailActivity.java
       id/go/pu/eabsensimobile/utils/FileOpen.java
       id/go/pu/eabsensimobile/view/activity/TrainingAddActivity.java
       org/acra/sender/EmailIntentSender.java
       id/go/pu/eabsensimobile/view/activity/TndeDetailActivity.java
       id/go/pu/eabsensimobile/view/activity/NotificationActivity.java
       id/go/pu/eabsensimobile/view/activity/KswpActivity.java
       id/go/pu/eabsensimobile/view/activity/CutiAddActivity.java
       id/go/pu/eabsensimobile/view/activity/RiwayatPengajuanActivity.java
       id/go/pu/eabsensimobile/view/activity/LaporanActivity.java
       id/go/pu/eabsensimobile/view/activity/IkpaActivity.java
       id/go/pu/eabsensimobile/view/activity/EmailActivity.java
       id/go/pu/eabsensimobile/view/activity/TrainingActivity.java
       id/go/pu/eabsensimobile/view/activity/PengaduanAddActivity.java
       id/go/pu/eabsensimobile/view/activity/EkinerjaPenyusunanActivity.java
       id/go/pu/eabsensimobile/view/activity/EhrmDetailActivity.java
       pub/devrel/easypermissions/AppSettingsDialogHolderActivity.java
       id/go/pu/eabsensimobile/view/activity/BravoActivity.java
       id/go/pu/eabsensimobile/view/activity/EiptekActivity.java
       id/go/pu/eabsensimobile/view/activity/SlipGajiActivity.java
       id/go/pu/eabsensimobile/view/activity/LaporanHarianActivity.java
       id/go/pu/eabsensimobile/view/activity/EhrmActivity.java
       id/go/pu/eabsensimobile/view/activity/AbsensiActivity.java
       id/go/pu/eabsensimobile/view/activity/TripAddActivity.java
       id/go/pu/eabsensimobile/view/activity/VaksinActivity.java
       id/go/pu/eabsensimobile/view/activity/InformationActivity.java
       id/go/pu/eabsensimobile/view/activity/JdihDetailActivity.java
       id/go/pu/eabsensimobile/view/activity/PengaduanActivity.java
       id/go/pu/eabsensimobile/view/activity/PengajuanActivity.java
       id/go/pu/eabsensimobile/view/activity/ProfileActivity.java
       id/go/pu/eabsensimobile/view/activity/LoginEhrmActivity.java
       id/go/pu/eabsensimobile/view/activity/ReimburseAddActivity.java
       id/go/pu/eabsensimobile/view/activity/EkinerjaMultiRatingActivity.java
       id/go/pu/eabsensimobile/view/activity/JdihActivity.java
       id/go/pu/eabsensimobile/view/activity/IzinAddActivity.java
       id/go/pu/eabsensimobile/view/activity/LoginActivity.java
       id/go/pu/eabsensimobile/view/activity/IzinActivity.java
       id/go/pu/eabsensimobile/view/activity/RegisterActivity.java
       id/go/pu/eabsensimobile/view/activity/MedicalActivity.java
       id/go/pu/eabsensimobile/view/activity/AbsensiAddActivity.java
       id/go/pu/eabsensimobile/view/activity/ReimburseActivity.java
       id/go/pu/eabsensimobile/view/activity/LaporanAddActivity.java
       id/go/pu/eabsensimobile/service/DownloadTask.java
       id/go/pu/eabsensimobile/view/activity/CutiActivity.java
Starting service 
       id/go/pu/eabsensimobile/view/activity/Profi