0/61

Threat

com.xrom.intl.appcenter

App Store

Analyzed on 2022-05-03T14:21:51.943360

63

permissions

79

activities

14

services

13

receivers

26

domains

File sums

MD5 b64499b68722db335a698e0d7271a803
SHA1 417b79f08a9789596dcb0946ecbd7fb40764ae4e
SHA256 b03559261fbd285e9f6e0b7c7f2372499c6562973fc9c1846b3e4332f5f01ab7
Size 11.69MB

APKiD

Information computed with APKiD.

/tmp/tmpt5ud6of9!assets/com.meizu.advertise.plugin.apk!classes.dex
anti_vm
  • Build.MODEL check
  • Build.MANUFACTURER check
compiler
  • dx
/tmp/tmpt5ud6of9!assets/com.meizu.statsapp.v3.lib.plugin.apk!classes.dex
compiler
  • dx
/tmp/tmpt5ud6of9!classes.dex
anti_vm
  • Build.MODEL check
  • Build.MANUFACTURER check
  • possible Build.SERIAL check
  • SIM operator check
  • network operator name check
  • device ID check
  • subscriber ID check
anti_debug
  • Debug.isDebuggerConnected() check
compiler
  • dx
/tmp/tmpt5ud6of9!classes2.dex
compiler
  • dx

SSdeep

Information computed with ssdeep.

APK file 196608:eI/PfoKsLZN4qc4qW4Lia0NfD9elZ5D0oFBjePokHVq:eWfUI4qW4+fNOHFBi7q
Manifest 1536:f/gS1zVyv79+fz7fuzf1c7LdeB2K+KmsOP:f3kv79+fz7fuzf1c7LdeBUP
classes.dex 98304:JheBfID9inLrBeukoK62uptgb4aLn/KS8:PeBgh6nTkkA/w
classes2.dex 24576:SSW2HC/2XwTFITKmsc809LSqxUcRTmOdw53F21PW5x75APY:tR9/rRqO6/21O31

Dexofuzzy

Information computed with Dexofuzzy.

APK file 6144:7RloMk98TVf9z7CtruyfNCMwDCFdxernk6m14TkHtgjy0WhCyxS0Z0zwvkp20Eio…
classes.dex 6144:7RloMk98TVf9z7CtruyfNCMwDCFdxernk6m14TkD:7R2MO8juWudxeZ+D
classes2.dex 3072:jTQolCjWN0WhCyxmpABXZfOPGmTkfHXSFp20tKTuyp7rh6CzH:jtgjy0WhCyxS0Z…

APK details

Information computed with AndroGuard and Pithus.

Package com.xrom.intl.appcenter
App name App Store
Version name 5.0.120-2018050415
Version code 500000120
SDK 21 - 23
UAID 2f1421b3782927b2eed1ada653c8d76ee03771c3
Signature Signature V1
Frosting Not frosted

Certificate details

Information computed with AndroGuard.

MD5 1c44d05f494a1c2dc6cbcbac9c92ecfd
SHA1 62e45913d032f80956b627ed68069934f37e7f35
SHA256 94153299d67ab1b37a39ed5fe17e893df87084fb129077be51863bcbd9132336
Issuer Email Address: m9@meizu.com, Common Name: m9, Organizational Unit: Meizu, Organization: Meizu, Locality: ZhuHai View, State/Province: GuangZhou, Country: CN
Not before 2010-11-27T09:09:19+00:00
Not after 2038-04-14T09:09:19+00:00

File Analysis

Information computed with MobSF.

Findings Files
Certificate/Key files hardcoded inside the app. assets/license.cer

Manifest analysis

Information computed with MobSF.

Medium Application Data can be Backed up[android:allowBackup=true]
This flag allows anyone to backup your application data via adb. It allows users who have enabled USB debugging to copy application data off of the device.
High Activity (com.xrom.intl.appcenter.ui.collection.CollectionActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.xrom.intl.appcenter.ui.collection.CollectionActivityV2) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.xrom.intl.appcenter.ui.detail.AppDetailActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.xrom.intl.appcenter.ui.gmscollection.GmsCollectionActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.xrom.intl.appcenter.ui.me.MeActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.xrom.intl.appcenter.ui.installhistory.InstallHistoryActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.xrom.intl.appcenter.ui.settings.SettingsActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.xrom.intl.appcenter.ui.settings.AboutActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.xrom.intl.appcenter.ui.settings.FeedBackActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.xrom.intl.appcenter.ui.download.DownloadManagementActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.xrom.intl.appcenter.ui.updates.AppUpdateActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.xrom.intl.appcenter.ui.search.AppSearchActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.xrom.intl.appcenter.ui.appwizard.AppWizardActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.xrom.intl.appcenter.ui.activity.HtmlActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.xrom.intl.appcenter.ui.splash.SplashActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Service (com.meizu.cloud.pushsdk.NotificationService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.xrom.intl.appcenter.domain.push.PushMsgReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.xrom.intl.appcenter.receiver.DownloadReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.xrom.intl.appcenter.receiver.AppInstalledReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.xrom.intl.appcenter.receiver.NetworkChangeReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.xrom.intl.appcenter.receiver.BootReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.xrom.intl.appcenter.receiver.ConditionReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.arrkii.nativesdk.core.Receiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.xrom.intl.appcenter.domain.ngp.InstallReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.xrom.intl.appcenter.domain.updates.AppStatusReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.xrom.intl.appcenter.domain.push.SysAppPushReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Activity (com.meizu.customizecenter.SpecialContainerActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.meizu.customizecenter.SpecialActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.meizu.customizecenter.NativeThemeActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.meizu.customizecenter.NativePapActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.meizu.customizecenter.NativeRingtoneActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.meizu.customizecenter.NativeFontActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.meizu.customizecenter.OnlineFontActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.meizu.customizecenter.MtpkInstallerActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.meizu.customizecenter.AdWebActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.meizu.customizecenter.common.helper.ShopDemoReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.meizu.customizecenter.CampaignWebActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.meizu.gslb.push.GslbDataRefreshReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.meizu.customizecenter.aidl.server.CCFileManagerServer) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.meizu.customizecenter.ExportThemeActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.meizu.customizecenter.ExportFontActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.meizu.customizecenter.ExportWallPaperActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.meizu.customizecenter.modules.onlineThemePage.view.OnlineThemeActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity-Alias (com.meizu.customizecenter.OnlineThemeActivity) is not Protected. [android:exported=true]
An Activity-Alias is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.meizu.customizecenter.GuidePageActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.meizu.customizecenter.modules.lockScreenPoster.view.LockScreenPosterActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.

Browsable activities

Information computed with MobSF.

com.xrom.intl.appcenter.ui.detail.AppDetailActivity

Hosts: xrom.com details

Schemes: hotapps:// market://

com.xrom.intl.appcenter.ui.gmscollection.GmsCollectionActivity

Hosts: xrom.com 9apps.com www.9apps.com

Schemes: hotapps:// http:// https://

Main Activity

Information computed with AndroGuard.

com.xrom.intl.appcenter.ui.main.MainActivity

Activities

Information computed with AndroGuard.

com.xrom.intl.appcenter.ui.main.MainActivity
com.xrom.intl.appcenter.ui.collection.CollectionActivity
com.xrom.intl.appcenter.ui.collection.CollectionActivityV2
com.xrom.intl.appcenter.ui.detail.AppDetailActivity
com.xrom.intl.appcenter.ui.detail.AppCommentsActivity
com.xrom.intl.appcenter.ui.detail.AppRecommendActivity
com.xrom.intl.appcenter.ui.detail.PermissonDetailActivity
com.xrom.intl.appcenter.ui.category.AppCategoryPagerActivity
com.xrom.intl.appcenter.ui.category.AppCategoryListActivity
com.xrom.intl.appcenter.ui.detail.FullScreenImageActivity
com.xrom.intl.appcenter.ui.gmscollection.GmsCollectionActivity
com.xrom.intl.appcenter.ui.me.MeActivity
com.xrom.intl.appcenter.ui.installhistory.InstallHistoryActivity
com.xrom.intl.appcenter.ui.settings.SettingsActivity
com.xrom.intl.appcenter.ui.settings.AboutActivity
com.xrom.intl.appcenter.ui.settings.FeedBackActivity
com.xrom.intl.appcenter.ui.download.DownloadManagementActivity
com.xrom.intl.appcenter.ui.updates.AppUpdateActivity
com.xrom.intl.appcenter.ui.search.AppSearchActivity
com.xrom.intl.appcenter.ui.appwizard.AppWizardActivity
com.xrom.intl.appcenter.ui.activity.HtmlActivity
com.xrom.intl.appcenter.ui.splash.SplashActivity
com.meizu.update.display.KeyguardHelperActivity
com.meizu.customizecenter.CustomizeCenterActivity
com.meizu.customizecenter.RankMoreActivity
com.meizu.customizecenter.RankActivity
com.meizu.customizecenter.CategoryContainerActivity
com.meizu.customizecenter.SpecialContainerActivity
com.meizu.customizecenter.SpecialActivity
com.meizu.customizecenter.OnlineOldSysVerThemeActivity
com.meizu.customizecenter.OnlineThemeCommentActivity
com.meizu.customizecenter.OnlineThemeImageActivity
com.meizu.customizecenter.IssueReportActivity
com.meizu.customizecenter.ThemePreviewActivity
com.meizu.customizecenter.ThemeFullPreviewActivity
com.meizu.customizecenter.NativeThemeActivity
com.meizu.customizecenter.NativePapActivity
com.meizu.customizecenter.NativeRingtoneActivity
com.meizu.customizecenter.NativeFontActivity
com.meizu.customizecenter.modules.mixPage.view.MixActivity
com.meizu.customizecenter.ThemeTrialEndDialogActivity
com.meizu.customizecenter.RestoreProgressActivity
com.meizu.customizecenter.modules.wallpaperPreview.view.ApplyWallpaperActivity
com.meizu.customizecenter.OnlineFontActivity
com.meizu.customizecenter.OnlineFontCommentActivity
com.meizu.customizecenter.FontPreviewActivity
com.meizu.customizecenter.FontTrialEndDialogActivity
com.meizu.customizecenter.DownloadManagerActivity
com.meizu.customizecenter.modules.settingactivity.view.SettingActivity
com.meizu.customizecenter.DebugUtilActivity
com.meizu.customizecenter.MtpkInstallerActivity
com.meizu.customizecenter.AdWebActivity
com.meizu.customizecenter.AboutActivity
com.meizu.customizecenter.modules.searchPage.view.OneSearchActivity
com.meizu.customizecenter.SearchThemeActivity
com.meizu.customizecenter.SearchPapActivity
com.meizu.customizecenter.SearchRingtoneActivity
com.meizu.customizecenter.SearchFontActivity
com.meizu.customizecenter.UserDataManagerActivity
com.meizu.customizecenter.AlarmClockListActivity
com.meizu.customizecenter.CampaignWebActivity
com.meizu.customizecenter.ExportThemeActivity
com.meizu.customizecenter.ExportFontActivity
com.meizu.customizecenter.ExportWallPaperActivity
com.meizu.customizecenter.modules.myAccount.view.AccountActivity
com.meizu.customizecenter.CollectDetailActivity
com.meizu.customizecenter.CollectionActivity
com.meizu.customizecenter.modules.mixPage.view.MixDetailActivity
com.meizu.customizecenter.modules.onlineThemePage.view.OnlineThemeActivity
com.meizu.customizecenter.GuidePageActivity
com.meizu.customizecenter.modules.lockScreenPoster.view.LockScreenPosterActivity
com.meizu.customizecenter.LockScreenPosterSettingActivity
com.meizu.customizecenter.modules.integration.view.SignInActivity
com.meizu.open.pay.hybrid.ui.PayAlertActivity
com.meizu.open.pay.hybrid.ui.HybridBaseActivity
com.meizu.open.pay.hybrid.ui.RequestActionActivity
com.ipaynow.wechatpay.plugin.inner_plugin.wechat_plugin.activity.WeChatNotifyActivity
com.alipay.sdk.app.H5PayActivity
com.meizu.adplatform.api.activity.WebSurfingActivity

Receivers

Information computed with AndroGuard.

com.xrom.intl.appcenter.domain.push.PushMsgReceiver
com.xrom.intl.appcenter.receiver.DownloadReceiver
com.xrom.intl.appcenter.receiver.AppInstalledReceiver
com.xrom.intl.appcenter.receiver.NetworkChangeReceiver
com.xrom.intl.appcenter.receiver.BootReceiver
com.xrom.intl.appcenter.receiver.UpdateCheckReceiver
com.xrom.intl.appcenter.receiver.ConditionReceiver
com.arrkii.nativesdk.core.Receiver
com.xrom.intl.appcenter.domain.ngp.InstallReceiver
com.xrom.intl.appcenter.domain.updates.AppStatusReceiver
com.xrom.intl.appcenter.domain.push.SysAppPushReceiver
com.meizu.customizecenter.common.helper.ShopDemoReceiver
com.meizu.gslb.push.GslbDataRefreshReceiver

Services

Information computed with AndroGuard.

com.xrom.intl.appcenter.domain.download.AppDownloadService
com.meizu.update.service.MzUpdateComponentService
com.meizu.cloud.pushsdk.NotificationService
com.xrom.intl.appcenter.usagestats.DataReportService
com.xrom.intl.appcenter.domain.jobscheduler.JobSchedulerService
com.meizu.statsapp.UsageStatsManagerService
com.meizu.customizecenter.common.helper.scannerhelper.CustomizeScannerService
com.meizu.customizecenter.common.theme.ThemeTrialService
com.meizu.customizecenter.service.ThemeRestoreService
com.meizu.customizecenter.common.font.FontTrialService
com.meizu.customizecenter.service.FontRestoreService
com.meizu.customizecenter.aidl.server.CCFileManagerServer
com.meizu.advertise.services.ProxyIntentService
com.meizu.advertise.services.ProxyService

Sample timeline

Oldest file found in APK Nov. 27, 2010, 2:09 a.m.
Latest file found in APK Nov. 27, 2010, 2:09 a.m.
Certificate valid not before Nov. 27, 2010, 9:09 a.m.
First submission on VT Jan. 28, 2021, 6:04 a.m.
Last submission on VT Jan. 28, 2021, 6:04 a.m.
Upload on Pithus May 3, 2022, 2:21 p.m.
Certificate valid not after April 14, 2038, 9:09 a.m.

NIAP analysis

Information computed with MobSF.

FCS_RBG_EXT.1.1 The application invoke platform-provided DRBG functionality for its cryptographic operations.
Random Bit Generation Services
FCS_STO_EXT.1.1 The application does not store any credentials to non-volatile memory.
Storage of Credentials
FCS_CKM_EXT.1.1 The application generate no asymmetric cryptographic keys.
Cryptographic Key Generation Services
FDP_DEC_EXT.1.1 The application has access to ['microphone', 'location', 'bluetooth', 'network connectivity'].
Access to Platform Resources
FDP_DEC_EXT.1.2 The application has access to ['address book'].
Access to Platform Resources
FDP_NET_EXT.1.1 The application has user/application initiated network communications.
Network Communications
FDP_DAR_EXT.1.1 The application implement functionality to encrypt sensitive data in non-volatile memory.
Encryption Of Sensitive Application Data
FMT_MEC_EXT.1.1 The application invoke the mechanisms recommended by the platform vendor for storing and setting configuration options.
Supported Configuration Mechanism
FTP_DIT_EXT.1.1 The application does encrypt some transmitted data with HTTPS/TLS/SSH between itself and another trusted IT product.
Protection of Data in Transit
FCS_RBG_EXT.2.1
FCS_RBG_EXT.2.2
The application perform all deterministic random bit generation (DRBG) services in accordance with NIST Special Publication 800-90A using Hash_DRBG. The deterministic RBG is seeded by an entropy source that accumulates entropy from a platform-based DRBG and a software-based noise source, with a minimum of 256 bits of entropy at least equal to the greatest security strength (according to NIST SP 800-57) of the keys and hashes that it will generate.
Random Bit Generation from Application
FCS_CKM.1.1(3)
FCS_CKM.1.2(3)
A password/passphrase shall perform [Password-based Key Derivation Functions] in accordance with a specified cryptographic algorithm..
Password Conditioning
FCS_COP.1.1(1) The application perform encryption/decryption in accordance with a specified cryptographic algorithm AES-CBC (as defined in NIST SP 800-38A) mode or AES-GCM (as defined in NIST SP 800-38D) and cryptographic key sizes 256-bit/128-bit.
Cryptographic Operation - Encryption/Decryption
FCS_COP.1.1(2) The application perform cryptographic hashing services not in accordance with FCS_COP.1.1(2) and uses the cryptographic algorithm RC2/RC4/MD4/MD5.
Cryptographic Operation - Hashing
FCS_COP.1.1(3) The application perform cryptographic signature services (generation and verification) in accordance with a specified cryptographic algorithm RSA schemes using cryptographic key sizes of 2048-bit or greater.
Cryptographic Operation - Signing
FCS_HTTPS_EXT.1.1 The application implement the HTTPS protocol that complies with RFC 2818.
HTTPS Protocol
FCS_HTTPS_EXT.1.2 The application implement HTTPS using TLS.
HTTPS Protocol
FCS_HTTPS_EXT.1.3 The application notify the user and not establish the connection or request application authorization to establish the connection if the peer certificate is deemed invalid.
HTTPS Protocol
FIA_X509_EXT.1.1 The application invoked platform-provided functionality to validate certificates in accordance with the following rules: ['The certificate path must terminate with a trusted CA certificate'].
X.509 Certificate Validation
FIA_X509_EXT.2.1 The application use X.509v3 certificates as defined by RFC 5280 to support authentication for HTTPS , TLS.
X.509 Certificate Authentication
FIA_X509_EXT.2.2 When the application cannot establish a connection to determine the validity of a certificate, the application allow the administrator to choose whether to accept the certificate in these cases or accept the certificate ,or not accept the certificate.
X.509 Certificate Authentication
FPT_TUD_EXT.2.1 The application shall be distributed using the format of the platform-supported package manager.
Integrity for Installation and Update
FCS_CKM.1.1(2) The application shall generate symmetric cryptographic keys using a Random Bit Generator as specified in FCS_RBG_EXT.1 and specified cryptographic key sizes 128 bit or 256 bit.
Cryptographic Symmetric Key Generation

Code analysis

Information computed with MobSF.

Low
CVSS:7.5
The App logs information. Sensitive information should never be logged.
MASVS: MSTG-STORAGE-3
CWE-532 Insertion of Sensitive Information into Log File
Files:
 com/meizu/customizecenter/RestoreProgressActivity.java
flyme/support/v7/app/AppCompatDelegate.java
com/meizu/customizecenter/common/helper/b/f.java
flyme/support/v7/widget/ListPopupWindow.java
com/xrom/intl/appcenter/util/ab.java
com/meizu/common/widget/BadgeView.java
com/bumptech/glide/load/model/j.java
com/meizu/customizecenter/c/c.java
com/meizu/customizecenter/IssueReportActivity.java
com/meizu/jsbridgesdk/utils/DeviceUtils.java
com/meizu/flyme/activeview/texture/EglCore.java
com/meizu/customizecenter/d/m.java
com/meizu/cloud/download/utils/ThreadPool.java
com/meizu/open/pay/hybrid/ui/a.java
com/meizu/cloud/pushsdk/networking/AndroidNetworking.java
com/meizu/customizecenter/modules/myAccount/presenter/a.java
com/meizu/cloud/download/utils/b.java
com/bumptech/glide/manager/i.java
flyme/support/v7/app/AppCompatActivity.java
com/meizu/common/widget/MzRatingBar.java
com/xrom/intl/appcenter/core/thread/component/ExecBaseActivity.java
com/ipaynow/wechatpay/plugin/manager/route/a.java
com/xrom/intl/appcenter/widget/MstoreMultiRankTabView.java
com/xrom/intl/appcenter/util/y.java
com/xrom/intl/appcenter/util/ad.java
com/meizu/customizecenter/modules/onlineThemePage/view/OnlineThemeActivity.java
com/xrom/intl/appcenter/domain/base/ServerConfigUtil.java
org/greenrobot/eventbus/b.java
com/meizu/cloud/download/utils/d.java
com/xrom/intl/appcenter/util/w.java
com/meizu/flyme/a/b.java
flyme/support/v7/app/AppCompatDelegateImplV14.java
org/greenrobot/eventbus/EventBus.java
com/bumptech/glide/request/c.java
com/meizu/a/a.java
com/xrom/intl/appcenter/ui/base/BaseViewPagerV2Activity.java
flyme/support/v7/widget/MzRecyclerView.java
com/bumptech/glide/manager/g.java
com/bumptech/glide/module/c.java
com/meizu/ptrpullrefreshlayout/footer/AnimLoadFooterView.java
com/nostra13/universalimageloader/cache/disc/a/a/a.java
com/meizu/open/pay/hybrid/ui/HybridContainerActivity.java
com/xrom/intl/appcenter/data/net/i.java
com/meizu/flyme/activeview/moveline/item/ViewFrameStyle.java
com/meizu/open/pay/sdk/a/a.java
flyme/support/v7/widget/LinearLayoutManager.java
flyme/support/v7/view/menu/MenuItemImpl.java
com/meizu/flyme/activeview/moveline/item/GLImageViewFrameStyle.java
com/meizu/b.java
com/xrom/intl/appcenter/ui/settings/SettingsFragment.java
com/xrom/intl/appcenter/domain/ngp/c/a.java
com/bumptech/glide/load/engine/cache/c.java
com/xrom/intl/appcenter/widget/overscroll/OverScrollBounceEffectDecoratorBase.java
net/sourceforge/jeval/samples/MathematicalFunctionsSample.java
com/xrom/intl/appcenter/receiver/BootCompletedReceiver.java
com/meizu/ptrpullrefreshlayout/b/a.java
com/bumptech/glide/e.java
com/meizu/customizecenter/common/integration/IntegrationManager.java
net/sourceforge/jeval/samples/VariablesSample.java
com/bumptech/glide/load/resource/bitmap/Downsampler.java
com/ipaynow/wechatpay/plugin/c/c/b.java
com/arrkii/nativesdk/core/b.java
net/sourceforge/jeval/samples/StringOperatorsSample.java
flyme/support/v7/view/SupportMenuInflater.java
com/meizu/open/pay/hybrid/method/a.java
com/meizu/account/pay/service/ServiceBindHelper.java
com/meizu/customizecenter/common/download/a/a.java
com/bumptech/glide/manager/RequestManagerRetriever.java
com/meizu/jsbridgesdk/updatecomponent/b/a.java
com/arrkii/nativesdk/adpack/interstitial/a.java
com/xrom/intl/appcenter/domain/theme/d.java
com/xrom/intl/appcenter/receiver/PushReceiver.java
flyme/support/v7/util/ResourceUtils.java
com/meizu/open/pay/sdk/e.java
com/meizu/e/d.java
com/xrom/intl/appcenter/ui/activity/d.java
com/meizu/open/pay/hybrid/ui/HybridBaseActivity.java
com/meizu/customizecenter/common/helper/b/a.java
com/meizu/update/a/a.java
com/bumptech/glide/load/data/g.java
com/meizu/common/widget/SelectionButton.java
com/xrom/intl/appcenter/domain/download/c.java
flyme/support/v7/widget/RecyclerView.java
com/xrom/intl/appcenter/widget/PullToZoomGroup.java
com/bumptech/glide/request/target/g.java
com/xrom/intl/appcenter/util/InstallAsyncTask.java
com/meizu/jsbridgesdk/utils/NetWorkUtils.java
com/bumptech/glide/load/engine/cache/MemorySizeCalculator.java
flyme/support/v7/util/AsyncListUtil.java
com/arrkii/nativesdk/d/k.java
com/meizu/customizecenter/OnlineFontActivity.java
flyme/support/v7/widget/PinnedHeader/RecyclerPinnedHeaderTouchListener.java
com/meizu/common/util/j.java
com/xrom/intl/appcenter/receiver/UpdateCheckReceiver.java
com/xrom/intl/appcenter/domain/updates/e.java
com/bumptech/glide/load/model/b.java
com/xrom/intl/appcenter/domain/jobscheduler/JobSchedulerService.java
com/meizu/account/pay/a.java
com/meizu/jsbridgesdk/updatecomponent/b/b.java
net/sourceforge/jeval/samples/BooleanOperationsSample.java
com/xrom/intl/appcenter/domain/a/b.java
com/bumptech/glide/load/resource/bitmap/j.java
com/meizu/jsbridgesdk/updatecomponent/component/ComponentDownloader.java
flyme/support/v7/util/NavigationBarColorManager.java
com/xrom/intl/appcenter/domain/cp/c.java
com/xrom/intl/themplugin/b/b.java
com/meizu/customizecenter/common/html5/CustomizeCenterClientInterface.java
com/meizu/cloud/pushsdk/base/DefaultLog.java
com/bumptech/glide/load/model/a.java
flyme/support/v7/widget/PinnedHeader/RecyclerPinnedHeaderDecoration.java
com/b/a/a/a.java
com/arrkii/nativesdk/adpack/ngp/a.java
org/jdom/p.java
com/meizu/account/pay/f.java
com/meizu/cloud/download/service/a.java
com/meizu/common/renderer/effect/c.java
com/xrom/intl/appcenter/core/thread/component/AsyncExecuteService.java
com/bumptech/glide/load/resource/gif/a.java
com/bumptech/glide/gifdecoder/c.java
com/xrom/intl/appcenter/domain/cp/h.java
com/xrom/intl/appcenter/util/FileUtils.java
com/xrom/intl/appcenter/domain/cp/b.java
com/xrom/intl/appcenter/domain/updates/f.java
com/bumptech/glide/util/pool/FactoryPools.java
com/xrom/intl/appcenter/ui/search/a.java
flyme/support/v7/widget/PinnedHeader/helper/LinearLayoutOrientationProvider.java
com/meizu/jsbridgesdk/updatecomponent/component/b.java
com/meizu/e/e.java
com/meizu/common/renderer/functor/DrawGLFunctor.java
com/meizu/cloud/pushsdk/networking/internal/InternalRunnable.java
com/meizu/advertise/a/a.java
com/bumptech/glide/load/engine/j.java
com/meizu/flyme/a/d.java
com/xrom/intl/appcenter/ui/detail/FullScreenImageActivity.java
com/xrom/intl/appcenter/core/js/a/b.java
com/meizu/customizecenter/common/theme/common/a/c.java
com/meizu/open/pay/hybrid/method/BaseNativeInterface.java
com/bumptech/glide/load/engine/p.java
com/bumptech/glide/load/engine/bitmap_recycle/g.java
com/meizu/customizecenter/service/c.java
com/orhanobut/logger/a.java
com/bumptech/glide/load/resource/bitmap/c.java
com/ipaynow/wechatpay/plugin/b/c.java
com/xrom/intl/appcenter/usagestats/a.java
com/xrom/intl/appcenter/domain/push/SysAppPushReceiver.java
com/meizu/common/preference/EditTextPreference.java
com/meizu/cloud/pushsdk/networking/internal/ANRequestQueue.java
com/xrom/intl/appcenter/domain/updates/AppStatusReceiver.java
com/bumptech/glide/load/resource/gif/i.java
com/meizu/customizecenter/common/theme/common/a/b.java
flyme/support/v7/widget/HeaderAndFooterWrapperAdapter.java
com/xrom/intl/appcenter/util/b/e.java
net/sourceforge/jeval/samples/NestedFunctionsSample.java
com/meizu/a.java
flyme/support/v7/app/AppCompatViewInflater.java
com/bumptech/glide/load/data/a.java
net/sourceforge/jeval/samples/MathematicalOperationsSample.java
com/xrom/intl/appcenter/domain/download/s.java
com/meizu/advertise/api/AdManager.java
com/bumptech/glide/load/model/FileLoader.java
com/meizu/cloud/download/service/e.java
de/greenrobot/dao/e.java
com/meizu/flyme/activeview/moveline/item/ViewTweenItem.java
com/xrom/intl/appcenter/util/ac.java
com/meizu/statsapp/v3/InitConfig.java
com/bumptech/glide/load/engine/DecodeJob.java
com/meizu/cloud/pushsdk/base/EncryptionWriter.java
com/meizu/common/util/ActionBarProxy.java
com/xrom/intl/appcenter/data/net/h.java
com/meizu/cloud/a/a/a.java
com/xrom/intl/appcenter/usagestats/UsageEventProvider.java
com/meizu/cloud/download/service/c.java
com/meizu/flyme/a/c.java
com/xrom/intl/appcenter/widget/CircleImageView.java
com/xrom/intl/appcenter/receiver/NetworkChangeReceiver.java
com/bumptech/glide/load/model/k.java
com/meizu/flyme/activeview/texture/EglSurfaceBase.java
com/meizu/common/widget/StretchSearchView.java
com/meizu/flyme/activeview/graphicsanim/renderable/ParticleSystem.java
com/meizu/customizecenter/c/b.java
com/meizu/account/oauth/a.java
com/xrom/intl/appcenter/domain/updates/a.java
com/meizu/b/a.java
com/meizu/statsapp/v3/utils/log/Logger.java
com/meizu/customizecenter/common/helper/f.java
flyme/support/v7/app/AppCompatPreferenceActivity.java
com/meizu/open/pay/sdk/thread/a.java
com/xrom/intl/appcenter/receiver/ConditionReceiver.java
com/meizu/common/renderer/a.java
com/a/a/a.java
com/xrom/intl/appcenter/util/aj.java
com/xrom/intl/appcenter/core/thread/component/b.java
com/xrom/intl/appcenter/ui/main/x.java
com/xrom/intl/appcenter/usagestats/DataReportService.java
com/meizu/account/oauth/c.java
com/xrom/intl/appcenter/domain/h/a.java
com/xrom/intl/appcenter/util/k.java
com/airbnb/lottie/av.java
com/meizu/logger/b.java
com/arrkii/nativesdk/d.java
flyme/support/v7/app/AppCompatDelegateImplV7.java
com/xrom/intl/appcenter/domain/ngp/act/c.java
com/meizu/flyme/activeview/utils/LogUtil.java
com/bumptech/glide/gifdecoder/b.java
com/meizu/cloud/pushsdk/networking/http/HttpURLConnectionCall.java
com/meizu/jsbridgesdk/updatecomponent/b/c.java
com/bumptech/glide/b.java
com/meizu/open/pay/sdk/f.java
com/xrom/intl/appcenter/domain/updates/d.java
com/xrom/intl/themplugin/d/a.java
com/xrom/intl/appcenter/domain/download/AppDownloadService.java
com/xrom/intl/appcenter/domain/push/PushMsgReceiver.java
com/meizu/customizecenter/d/s.java
com/xrom/intl/appcenter/receiver/DownloadReceiver.java
com/bumptech/glide/load/data/mediastore/c.java
com/meizu/jsbridgesdk/a.java
com/bumptech/glide/load/resource/gif/d.java
com/meizu/common/widget/AnimCheckBox.java
flyme/support/v7/widget/LinearSmoothScroller.java
com/xrom/intl/appcenter/ui/gmscollection/b.java
com/xrom/intl/appcenter/application/AppCenterApplication.java
com/xrom/intl/appcenter/domain/download/y.java
com/bumptech/glide/load/data/HttpUrlFetcher.java
com/meizu/customizecenter/common/dao/c.java
com/meizu/cloud/pushsdk/networking/utils/SourceCloseUtil.java
com/xrom/intl/appcenter/domain/cp/e.java
com/xrom/intl/appcenter/data/net/n.java
com/xrom/intl/appcenter/domain/jobscheduler/b.java
com/meizu/common/widget/TabTopLayout.java
com/meizu/common/widget/ActionMenuItemView.java
com/bumptech/glide/load/engine/f.java
com/bumptech/glide/load/engine/DecodePath.java
com/xrom/intl/appcenter/ui/updates/AppUpdateActivity.java
com/xrom/intl/appcenter/domain/download/DownloadTaskDbHelper.java
flyme/support/v7/app/TwilightManager.java
com/xrom/intl/appcenter/domain/updates/b.java
com/xrom/intl/appcenter/ui/main/ac.java
com/meizu/logger/a.java
com/bumptech/glide/a/a.java
flyme/support/v7/widget/ViewUtils.java
com/meizu/flyme/activeview/texture/GlUtil.java
flyme/support/v7/widget/RecyclerFastScrollLetter.java
com/meizu/cloud/pushsdk/networking/common/ANRequest.java
com/meizu/common/widget/FastScrollLetter.java
com/bumptech/glide/load/resource/bitmap/m.java
com/xrom/intl/appcenter/ui/detail/AppRecommendActivity.java
net/sourceforge/jeval/samples/LoopingWithVariablesSample.java
com/xrom/intl/appcenter/domain/download/a.java
com/meizu/statsapp/v3/utils/log/EncryptLogger.java
flyme/support/v7/util/MessageThreadUtil.java
flyme/support/v7/util/OverScroller.java
com/meizu/customizecenter/common/theme/common/b.java
com/meizu/customizecenter/OnlineCommentBaseActivity.java
flyme/support/v4/view/ViewPager.java
com/meizu/update/util/d.java
com/xrom/intl/appcenter/domain/theme/a.java
meizu/sdk/compaign/a.java
com/meizu/common/util/b.java
com/xrom/intl/appcenter/domain/ngp/a/b.java
com/xrom/intl/appcenter/domain/appwizard/AppWizardInteractor.java
com/airbnb/lottie/x.java
com/bumptech/glide/load/engine/executor/GlideExecutor.java
flyme/support/v7/widget/GridLayoutManager.java
net/sourceforge/jeval/samples/JudgeFunctionsSample.java
com/xrom/intl/appcenter/domain/download/f.java
com/bumptech/glide/load/resource/bitmap/DefaultImageHeaderParser.java
com/meizu/flyme/activeview/utils/Utility.java
flyme/support/v7/util/ChineseToPinyin.java
com/xrom/intl/appcenter/domain/download/l.java
com/meizu/ptrpullrefreshlayout/DownLoadRecyclerView.java
meizu/sdk/compaign/b.java
flyme/support/v7/view/menu/MenuItemWrapperICS.java
com/meizu/cloud/pushsdk/networking/common/ANLog.java
com/meizu/common/app/SlideNoticeManager.java
com/meizu/customizecenter/common/d.java
net/sourceforge/jeval/samples/CustomFunctionsSample.java
com/ipaynow/wechatpay/plugin/c/c/a.java
net/sourceforge/jeval/samples/StringFunctionsSample.java
com/bumptech/glide/load/resource/bitmap/r.java
com/xrom/intl/appcenter/util/b/c.java
com/meizu/common/app/SlideNotice.java
flyme/support/v7/widget/AppCompatPopupWindow.java
com/bumptech/glide/load/engine/bitmap_recycle/LruBitmapPool.java
com/xrom/intl/appcenter/core/thread/a.java
com/meizu/update/util/k.java
flyme/support/v7/widget/ToolbarWidgetWrapper.java
flyme/support/v7/widget/helper/ItemTouchHelper.java
flyme/support/v7/widget/TabView.java
com/meizu/common/widget/CustomViewBehind.java
com/xrom/intl/appcenter/ui/main/d.java
com/xrom/intl/themplugin/c/b.java
com/xrom/intl/appcenter/data/net/m.java
com/xrom/intl/appcenter/util/c.java
flyme/support/v7/widget/ActionBarOverlayLayout.java
Medium
CVSS:7.4
MD5 is a weak hash known to have hash collisions.
MASVS: MSTG-CRYPTO-4
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 com/meizu/statsapp/v3/plugin/PluginMgr.java
com/meizu/customizecenter/common/font/f.java
com/meizu/cloud/pushsdk/networking/http/Util.java
com/arrkii/nativesdk/d/g.java
com/meizu/e/d.java
com/meizu/customizecenter/common/theme/common/a/b.java
com/xrom/intl/appcenter/receiver/DownloadReceiver.java
com/meizu/statsapp/v3/updateapk/util/Md5Helper.java
com/meizu/cloud/pushsdk/networking/okio/Buffer.java
com/meizu/flyme/activeview/utils/Utility.java
com/meizu/open/pay/sdk/c/a.java
com/meizu/flyme/activeview/utils/UpdaterUtils.java
com/meizu/update/util/e.java
com/meizu/cloud/pushsdk/platform/SignUtils.java
com/meizu/customizecenter/d/t.java
com/xrom/intl/appcenter/util/x.java
com/meizu/jsbridgesdk/utils/c.java
com/ipaynow/wechatpay/plugin/c/a/a.java
com/meizu/flyme/activeview/download/DownloadFileChecker.java
com/nostra13/universalimageloader/cache/disc/naming/b.java
com/meizu/e/e.java
com/meizu/update/util/k.java
com/meizu/cloud/a/b/a.java
com/meizu/statsapp/v3/updateapk/util/Utility.java
com/meizu/customizecenter/common/theme/common/a/c.java
com/meizu/b/c.java
com/meizu/gslb2/h.java
com/meizu/flyme/activeview/utils/Md5Helper.java
Medium
CVSS:5.9
App uses SQLite Database and execute raw SQL query. Untrusted user input in raw SQL queries can cause SQL Injection. Also sensitive information should be encrypted and written to the database.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
M7: Client Code Quality
Files:
 com/arrkii/nativesdk/a/d.java
com/meizu/cloud/pushsdk/pushtracer/storage/EventStoreHelper.java
de/greenrobot/dao/query/c.java
com/meizu/customizecenter/common/dao/LocaleDao.java
com/xrom/intl/appcenter/domain/download/DownloadTaskDbHelper.java
com/meizu/customizecenter/common/dao/PapDao.java
com/xrom/intl/appcenter/domain/ngp/b/b.java
com/meizu/customizecenter/common/dao/PatchDao.java
com/meizu/customizecenter/common/dao/FontDao.java
de/greenrobot/dao/a.java
com/xrom/intl/appcenter/usagestats/UsageEventProvider.java
com/meizu/customizecenter/common/dao/DownloadTaskDao.java
com/meizu/customizecenter/common/dao/ApplyThemeDao.java
com/meizu/cloud/download/service/c.java
com/meizu/cloud/download/utils/a.java
com/meizu/customizecenter/common/dao/ThemeDao.java
com/meizu/customizecenter/common/dao/RingtoneDao.java
High
CVSS:5.5
App can read/write to External Storage. Any App can read data written to External Storage.
MASVS: MSTG-STORAGE-2
CWE-276 Incorrect Default Permissions
M2: Insecure Data Storage
Files:
 com/meizu/update/util/d.java
com/meizu/cloud/pushsdk/networking/ssl/SSLExtensionSocketFactory.java
com/meizu/statsapp/v3/plugin/PluginMgr.java
com/meizu/customizecenter/common/ringtone/b.java
com/meizu/customizecenter/common/c.java
com/a/a/a.java
com/meizu/cloud/download/service/a.java
com/meizu/cloud/pushsdk/handler/impl/fileupload/ZipTask.java
com/meizu/update/a/a.java
com/meizu/cloud/pushsdk/notification/android/AndroidVideoNotification.java
com/nostra13/universalimageloader/utils/d.java
com/xrom/intl/appcenter/receiver/DownloadReceiver.java
com/meizu/statsapp/v3/UsageStatsProxy3.java
com/meizu/customizecenter/ThemePreviewActivity.java
com/xrom/intl/appcenter/util/InstallAsyncTask.java
com/xrom/intl/appcenter/util/g.java
com/meizu/customizecenter/d/ai.java
com/arrkii/nativesdk/e.java
com/meizu/customizecenter/common/download/Downloader.java
com/meizu/cloud/b/a.java
com/meizu/cloud/pushsdk/handler/impl/fileupload/LogUploadMessageHandler.java
com/xrom/intl/appcenter/util/v.java
com/arrkii/nativesdk/d/e.java
com/meizu/statsapp/v3/USPMultiProcess3.java
com/meizu/cloud/pushsdk/base/Logger.java
com/meizu/advertise/a/a.java
com/meizu/jsbridgesdk/updatecomponent/component/d.java
com/meizu/customizecenter/common/ringtone/c.java
com/meizu/flyme/activeview/utils/FileUtil.java
com/meizu/customizecenter/common/html5/d.java
com/arrkii/nativesdk/adpack/a/c.java
com/xrom/intl/appcenter/domain/download/a.java
com/meizu/cloud/download/utils/d.java
com/meizu/open/pay/hybrid/d.java
com/meizu/cloud/pushsdk/base/DefaultLog.java
com/meizu/customizecenter/ThemeFullPreviewActivity.java
Medium
CVSS:5.9
SHA-1 is a weak hash known to have hash collisions.
MASVS: MSTG-CRYPTO-4
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 com/meizu/jsbridgesdk/utils/b.java
com/meizu/customizecenter/common/download/e.java
com/meizu/cloud/pushsdk/networking/http/Util.java
com/meizu/cloud/pushsdk/analytics/secure/HttpKeyMgr.java
High
CVSS:5.4
Remote WebView debugging is enabled.
MASVS: MSTG-RESILIENCE-2
CWE-919 - Weaknesses in Mobile Applications
M1: Improper Platform Usage
Files:
 com/xrom/intl/appcenter/ui/activity/d.java
Medium
CVSS:7.5
The App uses an insecure Random Number Generator.
MASVS: MSTG-CRYPTO-6
CWE-330 Use of Insufficiently Random Values
M5: Insufficient Cryptography
Files:
 com/meizu/flyme/activeview/graphicsanim/utils/MathHelper.java
com/meizu/customizecenter/common/wallpaper/media/gallery/render/f.java
com/meizu/customizecenter/common/wallpaper/media/gallery/render/k.java
com/arrkii/nativesdk/c/d.java
com/arrkii/nativesdk/adpack/ngp/a.java
com/meizu/customizecenter/d/w.java
com/meizu/b/c.java
com/meizu/customizecenter/common/wallpaper/media/gallery/render/a.java
High
CVSS:7.4
Weak Encryption algorithm used
MASVS: MSTG-CRYPTO-4
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 com/meizu/e/e.java
com/meizu/customizecenter/common/font/f.java
com/meizu/customizecenter/common/theme/common/a/c.java
com/meizu/b/c.java
Low
CVSS:0
This App copies data to clipboard. Sensitive data should not be copied to clipboard as other applications can access it.
MASVS: MSTG-STORAGE-10
Files:
 com/meizu/customizecenter/AdWebActivity.java
Medium
CVSS:7.4
Files may contain hardcoded sensitive information like usernames, passwords, keys etc.
MASVS: MSTG-STORAGE-14
CWE-312 Cleartext Storage of Sensitive Information
M9: Reverse Engineering
Files:
 com/alibaba/fastjson/JSON.java
com/meizu/cloud/pushsdk/platform/message/StrategyMessage.java
com/bumptech/glide/load/engine/n.java
com/meizu/statsapp/v3/Constants.java
com/bumptech/glide/load/engine/b.java
com/meizu/cloud/pushsdk/constants/PushConstants.java
com/meizu/customizecenter/common/dao/f.java
com/meizu/cloud/pushsdk/notification/model/NotifyOption.java
com/meizu/cloud/pushsdk/platform/pushstrategy/Strategy.java
com/bumptech/glide/load/engine/EngineResource.java
High
CVSS:7.4
The App uses the encryption mode CBC with PKCS5/PKCS7 padding. This configuration is vulnerable to padding oracle attacks.
MASVS: MSTG-CRYPTO-3
CWE-649 Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking
M5: Insufficient Cryptography
Files:
 com/meizu/customizecenter/d/l.java
com/meizu/cloud/pushsdk/analytics/secure/HttpKeyMgr.java
High
CVSS:7.4
Insecure WebView Implementation. WebView ignores SSL Certificate errors and accept any SSL Certificate. This application is vulnerable to MITM attacks
MASVS: MSTG-NETWORK-3
CWE-295 Improper Certificate Validation
M3: Insecure Communication
Files:
 com/arrkii/nativesdk/b/i.java
com/alipay/sdk/app/c.java
com/xrom/intl/appcenter/ui/activity/a.java
com/alipay/sdk/auth/AuthActivity.java
Medium
CVSS:8.8
Insecure WebView Implementation. Execution of user controlled code in WebView is a critical Security Hole.
MASVS: MSTG-PLATFORM-7
CWE-749 Exposed Dangerous Method or Function
M1: Improper Platform Usage
Files:
 com/meizu/customizecenter/CampaignWebActivity.java
Info
CVSS:0
This App uses SSL certificate pinning to detect or prevent MITM attacks in secure communication channel.
MASVS: MSTG-NETWORK-4
Files:
 com/xrom/intl/appcenter/data/net/n.java
com/xrom/intl/appcenter/application/AppCenterApplication.java
Pygal China: 1100 Hong Kong: 500 United States: 700

Map computed by Pithus.

Domains analysis

Information computed with MobSF.

US www.w3.org 128.30.52.100
saapi.ipaynow.cn
US api-push.in.meizu.com 206.161.233.191
CN upush.meizu.com 125.94.213.144
CN pay.meizu.com 14.152.79.149
US realtime.icecyber.org 63.251.235.76
CN posp.ipaynow.cn 211.154.166.174
CN api.ipaynow.cn 103.244.232.20
CN i.flyme.cn 14.152.79.135
HK i.in.meizu.com 116.66.216.83
US play.google.com 142.250.184.238
HK servicecut.meizu.com 116.66.216.89
HK hotapps.in.meizu.com 116.66.216.79
US api-theme.meizu.com 206.161.233.193
CN member.meizu.com 14.152.79.133
CN pay-res.meizu.com 112.65.203.35
CN m.alipay.com 110.75.129.2
CN norma-external-collect.meizu.com 113.106.27.98
schemas.android.com
HK u.in.meizu.com 116.66.216.86
US ak.icecyber.org 63.251.235.76
CN api-push.meizu.com 125.94.213.129
HK cc-api.in.meizu.com 116.66.216.71
CN u.meizu.com 125.94.213.144
US xml.org 104.239.240.11
ns.adobe.com

URL analysis

Information computed with MobSF.

http://realtime.icecyber.org/realtime?p=
Defined in com/arrkii/nativesdk/c/d.java
http://ak.icecyber.org/rule?
Defined in com/arrkii/nativesdk/c/i.java
https://api-push.meizu.com/garcia/api/client/
https://api-push.in.meizu.com/garcia/api/client/
Defined in com/meizu/cloud/pushsdk/platform/api/PushAPI.java
https://api-push.meizu.com/garcia/api/client/
https://api-push.in.meizu.com/garcia/api/client/
Defined in com/meizu/cloud/pushsdk/platform/api/PushAPI.java
http://norma-external-collect.meizu.com/android/exchange/getpublickey.do
Defined in com/meizu/cloud/pushsdk/analytics/secure/HttpKeyMgr.java
http://norma-external-collect.meizu.com/push/android/external/add.do
Defined in com/meizu/cloud/pushsdk/analytics/secure/HttpSecureRequester.java
https://api-push.meizu.com
Defined in com/meizu/cloud/pushsdk/networking/http/HttpURLConnectionCall.java
https://member.meizu.com/uc/oauth/member/getDetail?access_token=%s
https://pay.meizu.com/pay/oauth/account/get?access_token=%s
Defined in com/meizu/customizecenter/d/ai.java
https://member.meizu.com/uc/oauth/member/getDetail?access_token=%s
https://pay.meizu.com/pay/oauth/account/get?access_token=%s
Defined in com/meizu/customizecenter/d/ai.java
https://play.google.com/store/apps/details?id=
Defined in com/meizu/customizecenter/common/html5/a.java
http://cc-api.in.meizu.com
http://api-theme.meizu.com
https://cc-api.in.meizu.com
https://api-theme.meizu.com
Defined in com/meizu/customizecenter/service/c.java
http://cc-api.in.meizu.com
http://api-theme.meizu.com
https://cc-api.in.meizu.com
https://api-theme.meizu.com
Defined in com/meizu/customizecenter/service/c.java
http://cc-api.in.meizu.com
http://api-theme.meizu.com
https://cc-api.in.meizu.com
https://api-theme.meizu.com
Defined in com/meizu/customizecenter/service/c.java
http://cc-api.in.meizu.com
http://api-theme.meizu.com
https://cc-api.in.meizu.com
https://api-theme.meizu.com
Defined in com/meizu/customizecenter/service/c.java
https://u.in.meizu.com
https://upush.meizu.com
Defined in com/meizu/update/b.java
https://u.in.meizu.com
https://upush.meizu.com
Defined in com/meizu/update/b.java
https://servicecut.meizu.com/interface/locate
Defined in com/meizu/update/filetransfer/b/a.java
http://u.meizu.com
http://u.meizu.com/appupgrade/check
Defined in com/meizu/statsapp/v3/updateapk/impl/Constants.java
http://u.meizu.com
http://u.meizu.com/appupgrade/check
Defined in com/meizu/statsapp/v3/updateapk/impl/Constants.java
http://servicecut.meizu.com/interface/locate
Defined in com/meizu/statsapp/v3/updateapk/util/filetransfer/relocate/RelocateHelper.java
https://upush.meizu.com/pluginupgrade/check
Defined in com/meizu/flyme/activeview/utils/Constants.java
https://servicecut.meizu.com/interface/locate
Defined in com/meizu/gslb2/ServerRequest.java
https://i.flyme.cn/uc/oauth/member/getBasicInfo
https://i.in.meizu.com/uc/oauth/member/getBasicInfo
Defined in com/meizu/account/oauth/c.java
https://i.flyme.cn/uc/oauth/member/getBasicInfo
https://i.in.meizu.com/uc/oauth/member/getBasicInfo
Defined in com/meizu/account/oauth/c.java
https://saapi.ipaynow.cn/jpos/
Defined in com/ipaynow/wechatpay/plugin/c/b/c.java
http://m.alipay.com/?action=h5quit
Defined in com/alipay/sdk/util/a.java
http://schemas.android.com/android/skin
Defined in com/xrom/intl/themplugin/c/a.java
http://hotapps.in.meizu.com/c
http://hotapps.in.meizu.com/c/oversea/hotapp/switchKey
http://hotapps.in.meizu.com/c/oversea/hotapp/homePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllCategoryList
http://hotapps.in.meizu.com/c/oversea/hotapp/getmoreapplist
http://hotapps.in.meizu.com/c/oversea/hotapp/appdetail
http://hotapps.in.meizu.com/c/oversea/hotapp/gamePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/suggestAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/searchAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllAdsApp
http://hotapps.in.meizu.com/c/oversea/hotapp/queryShufflingWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryHotWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryGMSWhiteApps
http://hotapps.in.meizu.com/c/oversea/hotapp/getAdsClickUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/getMustHaveInstall
http://hotapps.in.meizu.com/c/oversea/hotapp/appUpdate
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/reviewList
http://hotapps.in.meizu.com/c/oversea/hotapp/getRecommend
http://hotapps.in.meizu.com/c/oversea/hotapp/getCategroyAppList
http://hotapps.in.meizu.com/c/oversea/hotapp/addUserFeedBackInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/addFeedBackScreen
http://hotapps.in.meizu.com/c/oversea/hotapp/getDownloadUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/queryActivity/
http://hotapps.in.meizu.com/c/oversea/hotapp/
http://hotapps.in.meizu.com/c/oversea/hotapp/getSplashInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/getRedDotSwitch
http://hotapps.in.meizu.com/c/oversea/hotapp/latest
http://hotapps.in.meizu.com/c/oversea/hotapp/hottest
http://hotapps.in.meizu.com/c/oversea/hotapp/collections
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/onOffSetting
http://hotapps.in.meizu.com/c/oversea/hotapp/featureUploadModule
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/addReview
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/dyeCodes
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/list
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/sphereList
http://hotapps.in.meizu.com/c/oversea/hotapp/check/systemApplication/getSystemApps
Defined in com/xrom/intl/appcenter/data/net/q.java
http://hotapps.in.meizu.com/c
http://hotapps.in.meizu.com/c/oversea/hotapp/switchKey
http://hotapps.in.meizu.com/c/oversea/hotapp/homePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllCategoryList
http://hotapps.in.meizu.com/c/oversea/hotapp/getmoreapplist
http://hotapps.in.meizu.com/c/oversea/hotapp/appdetail
http://hotapps.in.meizu.com/c/oversea/hotapp/gamePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/suggestAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/searchAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllAdsApp
http://hotapps.in.meizu.com/c/oversea/hotapp/queryShufflingWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryHotWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryGMSWhiteApps
http://hotapps.in.meizu.com/c/oversea/hotapp/getAdsClickUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/getMustHaveInstall
http://hotapps.in.meizu.com/c/oversea/hotapp/appUpdate
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/reviewList
http://hotapps.in.meizu.com/c/oversea/hotapp/getRecommend
http://hotapps.in.meizu.com/c/oversea/hotapp/getCategroyAppList
http://hotapps.in.meizu.com/c/oversea/hotapp/addUserFeedBackInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/addFeedBackScreen
http://hotapps.in.meizu.com/c/oversea/hotapp/getDownloadUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/queryActivity/
http://hotapps.in.meizu.com/c/oversea/hotapp/
http://hotapps.in.meizu.com/c/oversea/hotapp/getSplashInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/getRedDotSwitch
http://hotapps.in.meizu.com/c/oversea/hotapp/latest
http://hotapps.in.meizu.com/c/oversea/hotapp/hottest
http://hotapps.in.meizu.com/c/oversea/hotapp/collections
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/onOffSetting
http://hotapps.in.meizu.com/c/oversea/hotapp/featureUploadModule
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/addReview
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/dyeCodes
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/list
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/sphereList
http://hotapps.in.meizu.com/c/oversea/hotapp/check/systemApplication/getSystemApps
Defined in com/xrom/intl/appcenter/data/net/q.java
http://hotapps.in.meizu.com/c
http://hotapps.in.meizu.com/c/oversea/hotapp/switchKey
http://hotapps.in.meizu.com/c/oversea/hotapp/homePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllCategoryList
http://hotapps.in.meizu.com/c/oversea/hotapp/getmoreapplist
http://hotapps.in.meizu.com/c/oversea/hotapp/appdetail
http://hotapps.in.meizu.com/c/oversea/hotapp/gamePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/suggestAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/searchAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllAdsApp
http://hotapps.in.meizu.com/c/oversea/hotapp/queryShufflingWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryHotWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryGMSWhiteApps
http://hotapps.in.meizu.com/c/oversea/hotapp/getAdsClickUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/getMustHaveInstall
http://hotapps.in.meizu.com/c/oversea/hotapp/appUpdate
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/reviewList
http://hotapps.in.meizu.com/c/oversea/hotapp/getRecommend
http://hotapps.in.meizu.com/c/oversea/hotapp/getCategroyAppList
http://hotapps.in.meizu.com/c/oversea/hotapp/addUserFeedBackInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/addFeedBackScreen
http://hotapps.in.meizu.com/c/oversea/hotapp/getDownloadUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/queryActivity/
http://hotapps.in.meizu.com/c/oversea/hotapp/
http://hotapps.in.meizu.com/c/oversea/hotapp/getSplashInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/getRedDotSwitch
http://hotapps.in.meizu.com/c/oversea/hotapp/latest
http://hotapps.in.meizu.com/c/oversea/hotapp/hottest
http://hotapps.in.meizu.com/c/oversea/hotapp/collections
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/onOffSetting
http://hotapps.in.meizu.com/c/oversea/hotapp/featureUploadModule
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/addReview
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/dyeCodes
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/list
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/sphereList
http://hotapps.in.meizu.com/c/oversea/hotapp/check/systemApplication/getSystemApps
Defined in com/xrom/intl/appcenter/data/net/q.java
http://hotapps.in.meizu.com/c
http://hotapps.in.meizu.com/c/oversea/hotapp/switchKey
http://hotapps.in.meizu.com/c/oversea/hotapp/homePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllCategoryList
http://hotapps.in.meizu.com/c/oversea/hotapp/getmoreapplist
http://hotapps.in.meizu.com/c/oversea/hotapp/appdetail
http://hotapps.in.meizu.com/c/oversea/hotapp/gamePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/suggestAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/searchAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllAdsApp
http://hotapps.in.meizu.com/c/oversea/hotapp/queryShufflingWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryHotWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryGMSWhiteApps
http://hotapps.in.meizu.com/c/oversea/hotapp/getAdsClickUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/getMustHaveInstall
http://hotapps.in.meizu.com/c/oversea/hotapp/appUpdate
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/reviewList
http://hotapps.in.meizu.com/c/oversea/hotapp/getRecommend
http://hotapps.in.meizu.com/c/oversea/hotapp/getCategroyAppList
http://hotapps.in.meizu.com/c/oversea/hotapp/addUserFeedBackInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/addFeedBackScreen
http://hotapps.in.meizu.com/c/oversea/hotapp/getDownloadUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/queryActivity/
http://hotapps.in.meizu.com/c/oversea/hotapp/
http://hotapps.in.meizu.com/c/oversea/hotapp/getSplashInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/getRedDotSwitch
http://hotapps.in.meizu.com/c/oversea/hotapp/latest
http://hotapps.in.meizu.com/c/oversea/hotapp/hottest
http://hotapps.in.meizu.com/c/oversea/hotapp/collections
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/onOffSetting
http://hotapps.in.meizu.com/c/oversea/hotapp/featureUploadModule
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/addReview
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/dyeCodes
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/list
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/sphereList
http://hotapps.in.meizu.com/c/oversea/hotapp/check/systemApplication/getSystemApps
Defined in com/xrom/intl/appcenter/data/net/q.java
http://hotapps.in.meizu.com/c
http://hotapps.in.meizu.com/c/oversea/hotapp/switchKey
http://hotapps.in.meizu.com/c/oversea/hotapp/homePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllCategoryList
http://hotapps.in.meizu.com/c/oversea/hotapp/getmoreapplist
http://hotapps.in.meizu.com/c/oversea/hotapp/appdetail
http://hotapps.in.meizu.com/c/oversea/hotapp/gamePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/suggestAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/searchAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllAdsApp
http://hotapps.in.meizu.com/c/oversea/hotapp/queryShufflingWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryHotWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryGMSWhiteApps
http://hotapps.in.meizu.com/c/oversea/hotapp/getAdsClickUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/getMustHaveInstall
http://hotapps.in.meizu.com/c/oversea/hotapp/appUpdate
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/reviewList
http://hotapps.in.meizu.com/c/oversea/hotapp/getRecommend
http://hotapps.in.meizu.com/c/oversea/hotapp/getCategroyAppList
http://hotapps.in.meizu.com/c/oversea/hotapp/addUserFeedBackInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/addFeedBackScreen
http://hotapps.in.meizu.com/c/oversea/hotapp/getDownloadUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/queryActivity/
http://hotapps.in.meizu.com/c/oversea/hotapp/
http://hotapps.in.meizu.com/c/oversea/hotapp/getSplashInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/getRedDotSwitch
http://hotapps.in.meizu.com/c/oversea/hotapp/latest
http://hotapps.in.meizu.com/c/oversea/hotapp/hottest
http://hotapps.in.meizu.com/c/oversea/hotapp/collections
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/onOffSetting
http://hotapps.in.meizu.com/c/oversea/hotapp/featureUploadModule
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/addReview
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/dyeCodes
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/list
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/sphereList
http://hotapps.in.meizu.com/c/oversea/hotapp/check/systemApplication/getSystemApps
Defined in com/xrom/intl/appcenter/data/net/q.java
http://hotapps.in.meizu.com/c
http://hotapps.in.meizu.com/c/oversea/hotapp/switchKey
http://hotapps.in.meizu.com/c/oversea/hotapp/homePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllCategoryList
http://hotapps.in.meizu.com/c/oversea/hotapp/getmoreapplist
http://hotapps.in.meizu.com/c/oversea/hotapp/appdetail
http://hotapps.in.meizu.com/c/oversea/hotapp/gamePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/suggestAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/searchAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllAdsApp
http://hotapps.in.meizu.com/c/oversea/hotapp/queryShufflingWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryHotWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryGMSWhiteApps
http://hotapps.in.meizu.com/c/oversea/hotapp/getAdsClickUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/getMustHaveInstall
http://hotapps.in.meizu.com/c/oversea/hotapp/appUpdate
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/reviewList
http://hotapps.in.meizu.com/c/oversea/hotapp/getRecommend
http://hotapps.in.meizu.com/c/oversea/hotapp/getCategroyAppList
http://hotapps.in.meizu.com/c/oversea/hotapp/addUserFeedBackInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/addFeedBackScreen
http://hotapps.in.meizu.com/c/oversea/hotapp/getDownloadUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/queryActivity/
http://hotapps.in.meizu.com/c/oversea/hotapp/
http://hotapps.in.meizu.com/c/oversea/hotapp/getSplashInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/getRedDotSwitch
http://hotapps.in.meizu.com/c/oversea/hotapp/latest
http://hotapps.in.meizu.com/c/oversea/hotapp/hottest
http://hotapps.in.meizu.com/c/oversea/hotapp/collections
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/onOffSetting
http://hotapps.in.meizu.com/c/oversea/hotapp/featureUploadModule
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/addReview
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/dyeCodes
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/list
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/sphereList
http://hotapps.in.meizu.com/c/oversea/hotapp/check/systemApplication/getSystemApps
Defined in com/xrom/intl/appcenter/data/net/q.java
http://hotapps.in.meizu.com/c
http://hotapps.in.meizu.com/c/oversea/hotapp/switchKey
http://hotapps.in.meizu.com/c/oversea/hotapp/homePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllCategoryList
http://hotapps.in.meizu.com/c/oversea/hotapp/getmoreapplist
http://hotapps.in.meizu.com/c/oversea/hotapp/appdetail
http://hotapps.in.meizu.com/c/oversea/hotapp/gamePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/suggestAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/searchAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllAdsApp
http://hotapps.in.meizu.com/c/oversea/hotapp/queryShufflingWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryHotWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryGMSWhiteApps
http://hotapps.in.meizu.com/c/oversea/hotapp/getAdsClickUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/getMustHaveInstall
http://hotapps.in.meizu.com/c/oversea/hotapp/appUpdate
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/reviewList
http://hotapps.in.meizu.com/c/oversea/hotapp/getRecommend
http://hotapps.in.meizu.com/c/oversea/hotapp/getCategroyAppList
http://hotapps.in.meizu.com/c/oversea/hotapp/addUserFeedBackInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/addFeedBackScreen
http://hotapps.in.meizu.com/c/oversea/hotapp/getDownloadUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/queryActivity/
http://hotapps.in.meizu.com/c/oversea/hotapp/
http://hotapps.in.meizu.com/c/oversea/hotapp/getSplashInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/getRedDotSwitch
http://hotapps.in.meizu.com/c/oversea/hotapp/latest
http://hotapps.in.meizu.com/c/oversea/hotapp/hottest
http://hotapps.in.meizu.com/c/oversea/hotapp/collections
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/onOffSetting
http://hotapps.in.meizu.com/c/oversea/hotapp/featureUploadModule
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/addReview
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/dyeCodes
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/list
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/sphereList
http://hotapps.in.meizu.com/c/oversea/hotapp/check/systemApplication/getSystemApps
Defined in com/xrom/intl/appcenter/data/net/q.java
http://hotapps.in.meizu.com/c
http://hotapps.in.meizu.com/c/oversea/hotapp/switchKey
http://hotapps.in.meizu.com/c/oversea/hotapp/homePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllCategoryList
http://hotapps.in.meizu.com/c/oversea/hotapp/getmoreapplist
http://hotapps.in.meizu.com/c/oversea/hotapp/appdetail
http://hotapps.in.meizu.com/c/oversea/hotapp/gamePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/suggestAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/searchAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllAdsApp
http://hotapps.in.meizu.com/c/oversea/hotapp/queryShufflingWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryHotWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryGMSWhiteApps
http://hotapps.in.meizu.com/c/oversea/hotapp/getAdsClickUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/getMustHaveInstall
http://hotapps.in.meizu.com/c/oversea/hotapp/appUpdate
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/reviewList
http://hotapps.in.meizu.com/c/oversea/hotapp/getRecommend
http://hotapps.in.meizu.com/c/oversea/hotapp/getCategroyAppList
http://hotapps.in.meizu.com/c/oversea/hotapp/addUserFeedBackInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/addFeedBackScreen
http://hotapps.in.meizu.com/c/oversea/hotapp/getDownloadUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/queryActivity/
http://hotapps.in.meizu.com/c/oversea/hotapp/
http://hotapps.in.meizu.com/c/oversea/hotapp/getSplashInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/getRedDotSwitch
http://hotapps.in.meizu.com/c/oversea/hotapp/latest
http://hotapps.in.meizu.com/c/oversea/hotapp/hottest
http://hotapps.in.meizu.com/c/oversea/hotapp/collections
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/onOffSetting
http://hotapps.in.meizu.com/c/oversea/hotapp/featureUploadModule
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/addReview
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/dyeCodes
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/list
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/sphereList
http://hotapps.in.meizu.com/c/oversea/hotapp/check/systemApplication/getSystemApps
Defined in com/xrom/intl/appcenter/data/net/q.java
http://hotapps.in.meizu.com/c
http://hotapps.in.meizu.com/c/oversea/hotapp/switchKey
http://hotapps.in.meizu.com/c/oversea/hotapp/homePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllCategoryList
http://hotapps.in.meizu.com/c/oversea/hotapp/getmoreapplist
http://hotapps.in.meizu.com/c/oversea/hotapp/appdetail
http://hotapps.in.meizu.com/c/oversea/hotapp/gamePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/suggestAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/searchAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllAdsApp
http://hotapps.in.meizu.com/c/oversea/hotapp/queryShufflingWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryHotWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryGMSWhiteApps
http://hotapps.in.meizu.com/c/oversea/hotapp/getAdsClickUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/getMustHaveInstall
http://hotapps.in.meizu.com/c/oversea/hotapp/appUpdate
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/reviewList
http://hotapps.in.meizu.com/c/oversea/hotapp/getRecommend
http://hotapps.in.meizu.com/c/oversea/hotapp/getCategroyAppList
http://hotapps.in.meizu.com/c/oversea/hotapp/addUserFeedBackInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/addFeedBackScreen
http://hotapps.in.meizu.com/c/oversea/hotapp/getDownloadUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/queryActivity/
http://hotapps.in.meizu.com/c/oversea/hotapp/
http://hotapps.in.meizu.com/c/oversea/hotapp/getSplashInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/getRedDotSwitch
http://hotapps.in.meizu.com/c/oversea/hotapp/latest
http://hotapps.in.meizu.com/c/oversea/hotapp/hottest
http://hotapps.in.meizu.com/c/oversea/hotapp/collections
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/onOffSetting
http://hotapps.in.meizu.com/c/oversea/hotapp/featureUploadModule
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/addReview
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/dyeCodes
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/list
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/sphereList
http://hotapps.in.meizu.com/c/oversea/hotapp/check/systemApplication/getSystemApps
Defined in com/xrom/intl/appcenter/data/net/q.java
http://hotapps.in.meizu.com/c
http://hotapps.in.meizu.com/c/oversea/hotapp/switchKey
http://hotapps.in.meizu.com/c/oversea/hotapp/homePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllCategoryList
http://hotapps.in.meizu.com/c/oversea/hotapp/getmoreapplist
http://hotapps.in.meizu.com/c/oversea/hotapp/appdetail
http://hotapps.in.meizu.com/c/oversea/hotapp/gamePageList
http://hotapps.in.meizu.com/c/oversea/hotapp/suggestAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/searchAppInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/queryAllAdsApp
http://hotapps.in.meizu.com/c/oversea/hotapp/queryShufflingWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryHotWord
http://hotapps.in.meizu.com/c/oversea/hotapp/queryGMSWhiteApps
http://hotapps.in.meizu.com/c/oversea/hotapp/getAdsClickUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/getMustHaveInstall
http://hotapps.in.meizu.com/c/oversea/hotapp/appUpdate
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/reviewList
http://hotapps.in.meizu.com/c/oversea/hotapp/getRecommend
http://hotapps.in.meizu.com/c/oversea/hotapp/getCategroyAppList
http://hotapps.in.meizu.com/c/oversea/hotapp/addUserFeedBackInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/addFeedBackScreen
http://hotapps.in.meizu.com/c/oversea/hotapp/getDownloadUrl
http://hotapps.in.meizu.com/c/oversea/hotapp/queryActivity/
http://hotapps.in.meizu.com/c/oversea/hotapp/
http://hotapps.in.meizu.com/c/oversea/hotapp/getSplashInfo
http://hotapps.in.meizu.com/c/oversea/hotapp/getRedDotSwitch
http://hotapps.in.meizu.com/c/oversea/hotapp/latest
http://hotapps.in.meizu.com/c/oversea/hotapp/hottest
http://hotapps.in.meizu.com/c/oversea/hotapp/collections
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/onOffSetting
http://hotapps.in.meizu.com/c/oversea/hotapp/featureUploadModule
http://hotapps.in.meizu.com/c/oversea/hotapp/check/review/addReview
http://hotapps.in.meizu.com/c/oversea/hotapp/setting/dyeCodes
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/list
http://hotapps.in.meizu.com/c/oversea/hotapp/check/festivalActivity/sphereList
http://hotapps.in.meizu.com/c/oversea/hotapp/check/systemApplication/getSystemApps
Defined in com/xrom/intl/appcenter/data/net/q.java
http://hotapps.in.meizu.com/c
http://hotapps.in.meizu.com/c/oversea/hotapp/switchKey
http://h