1/61

Threat

com.meizu.safe

Security

Analyzed on 2022-05-03T16:20:14.271839

74

permissions

70

activities

33

services

30

receivers

42

domains

File sums

MD5 c4c6d1ebf30e2100f5e40945bc6a7fab
SHA1 a9d8597dff581b35cc29fc39b25c3b76391b3329
SHA256 ea120ebf50973bdef64593c9a236330fe525db7cc446085275b570b078ce2f1a
Size 32.7MB

APKiD

Information computed with APKiD.

/tmp/tmpi1a70tkg!assets/com.meizu.advertise.plugin.apk!classes.dex
anti_vm
  • Build.MODEL check
  • Build.MANUFACTURER check
compiler
  • dx
/tmp/tmpi1a70tkg!assets/dmss_v2.jar!classes.dex
anti_vm
  • Build.MODEL check
compiler
  • dx
/tmp/tmpi1a70tkg!assets/oclt_v2.jar!classes.dex
anti_vm
  • Build.MODEL check
  • Build.MANUFACTURER check
compiler
  • dx
/tmp/tmpi1a70tkg!assets/qsms.jar!assets/p1.jar!classes.dex
compiler
  • dx
/tmp/tmpi1a70tkg!assets/qsms.jar!classes.dex
anti_vm
  • device ID check
  • subscriber ID check
compiler
  • dx
/tmp/tmpi1a70tkg!classes.dex
anti_vm
  • Build.MODEL check
  • Build.MANUFACTURER check
  • Build.PRODUCT check
  • Build.BOARD check
  • possible Build.SERIAL check
  • SIM operator check
  • network operator name check
  • subscriber ID check
  • ro.build.type check
  • ro.product.device check
compiler
  • dx
/tmp/tmpi1a70tkg!classes2.dex
anti_vm
  • Build.FINGERPRINT check
  • Build.MANUFACTURER check
  • Build.BOARD check
  • possible Build.SERIAL check
  • device ID check
  • subscriber ID check
compiler
  • dx

SSdeep

Information computed with ssdeep.

APK file 786432:L7e1eLTRKpHzjbmwQz8A7cE3XugxrvMPgzpoc+GcT:LC1ePsHzm3XuorvMemxGcT
Manifest 768:O4GgSGC3O8iwmsDa65yngH35M+8tiM8Itm83Iqm5jAwaTIU3pzGFnLSEyIPJCRin:…
classes.dex 49152:HtZSPal9pHOUUcSpYBROfQxbWcABWApVVL0jSXTBeWENrOvIglvH2EpOK62qMA9…
classes2.dex 49152:e9QyJfSPe4tkqZ1Dqh2Iq+jVHYbbt1Bz3Gd3I6MHOnVLI3YtU:fyJsekAqOmN3Ye

Dexofuzzy

Information computed with Dexofuzzy.

APK file 12288:oKFY0lsHK0bxtePOZObTEruuHafMdxHmIUSYxDQaJiW:y0lsHKWxZwcuuHQMLmd…
classes.dex 6144:faZAVFY5KzJUSsHzS70b80BmeDucfkCTFXiKMHDcrwAObTZmSTjCuuHa7:oKFY0l…
classes2.dex 6144:zMd1JhfRpSPykFcLVnUDmYD1DbK3sq8CAuw41aJ8lGnuq:zMdxHmIUSYxDQaJiW

APK details

Information computed with AndroGuard and Pithus.

Package com.meizu.safe
App name Security
Version name 5.1.80-2018072309
Version code 5001080
SDK 22 - 23
UAID b96c0f0a473996be1359afb69ea89958656341eb
Signature Signature V1
Frosting Not frosted

Certificate details

Information computed with AndroGuard.

MD5 1c44d05f494a1c2dc6cbcbac9c92ecfd
SHA1 62e45913d032f80956b627ed68069934f37e7f35
SHA256 94153299d67ab1b37a39ed5fe17e893df87084fb129077be51863bcbd9132336
Issuer Email Address: m9@meizu.com, Common Name: m9, Organizational Unit: Meizu, Organization: Meizu, Locality: ZhuHai View, State/Province: GuangZhou, Country: CN
Not before 2010-11-27T09:09:19+00:00
Not after 2038-04-14T09:09:19+00:00

Manifest analysis

Information computed with MobSF.

High Broadcast Receiver (com.meizu.safe.viruscanner.utils.VirusLibUpdater) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.meizu.safe.engine.virus.qihoo.UserUpdateReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
Low Service (com.meizu.safe.service.UrlCheckRealService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.meizu.safe.permission.QR_CODE_SCAN_SERVICE
protectionLevel: signatureOrSystem [android:exported=true]
A Service is found to be exported, but is protected by a permission. However, the protection level of the permission is set to signatureOrSystem. It is recommended that signature level is used instead. Signature level should suffice for most purposes, and does not depend on where the applications are installed on the device.
High Broadcast Receiver (com.meizu.safe.NotificationTooMuchReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.meizu.safe.InstallReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.meizu.safe.SafeBootReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.meizu.safe.PermBootReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Service (com.meizu.cloud.pushsdk.NotificationService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.meizu.safe.push.AppPushReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.meizu.flyme.push.permission.SEND [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Service (com.meizu.safe.DetectingService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.meizu.safe.SocketService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.meizu.safe.PermissionQueryService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.meizu.safe.RubbishCleanService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.meizu.networkmanager.boradcast.WallPaperColorChangeListener) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.meizu.networkmanager.boradcast.NetworkChangeReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.meizu.networkmanager.boradcast.TrafficSavingStatusReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.meizu.networkmanager.boradcast.TrafficGlobalReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.meizu.networkmanager.boradcast.SMSReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Activity (com.meizu.networkmanager.trafficui.TrafficAppListActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Broadcast Receiver (com.meizu.networkmanager.boradcast.SmsSendFailedReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.meizu.networkmanager.boradcast.AlphaDbUpdateFinishReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.meizu.networkmanager.boradcast.AppInstallReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Activity (com.meizu.networkmanager.unittest.TestTrafficBackgrdActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
Low Content Provider (com.meizu.networkmanager.monitor.TrafficNetStatusProvider) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.meizu.networkmanager.permission.OFFER_OR_UPDATE_DATA
protectionLevel: signatureOrSystem [android:exported=true]
A Content Provider is found to be exported, but is protected by a permission. However, the protection level of the permission is set to signatureOrSystem. It is recommended that signature level is used instead. Signature level should suffice for most purposes, and does not depend on where the applications are installed on the device.
Low Content Provider (com.meizu.networkmanager.provider.TrafficDataStatisticProvider) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.meizu.networkmanager.permission.OFFER_OR_UPDATE_DATA
protectionLevel: signatureOrSystem [android:exported=true]
A Content Provider is found to be exported, but is protected by a permission. However, the protection level of the permission is set to signatureOrSystem. It is recommended that signature level is used instead. Signature level should suffice for most purposes, and does not depend on where the applications are installed on the device.
High Content Provider (com.meizu.networkmanager.provider.TrafficAppNetStatusProvider) is not Protected. [android:exported=true]
A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.meizu.safe.permission.PermissionMainActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.meizu.safe.permission.SmartBGActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.meizu.safe.blockService.blockui.ContactsListActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.meizu.safe.blockService.receiver.PowerConnectionReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.qihoo360.mobilesafe.block.core.BlockUpdateReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
Low Content Provider (com.qihoo360.mobilesafe.provider.SafeGuardProvider) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.meizu.safe.SDK_PROVIDER
protectionLevel: signatureOrSystem [android:exported=true]
A Content Provider is found to be exported, but is protected by a permission. However, the protection level of the permission is set to signatureOrSystem. It is recommended that signature level is used instead. Signature level should suffice for most purposes, and does not depend on where the applications are installed on the device.
Low Activity (com.meizu.safe.blockService.blockui.BlockPreference) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.meizu.safe.SDK_PROVIDER
protectionLevel: signatureOrSystem [android:exported=true]
An Activity is found to be exported, but is protected by a permission. However, the protection level of the permission is set to signatureOrSystem. It is recommended that signature level is used instead. Signature level should suffice for most purposes, and does not depend on where the applications are installed on the device.
High Broadcast Receiver (com.meizu.safe.blockService.utils.NotificationUtil) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.meizu.safe.blockService.receiver.DateTimeReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Content Provider (com.meizu.safe.blockService.provider.BlockMessagesProvider) is not Protected. [android:exported=true]
A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Content Provider (com.meizu.safe.blockService.provider.BlockCallsProvider) is not Protected. [android:exported=true]
A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Content Provider (com.meizu.safe.blockService.provider.BlackListProvider) is not Protected. [android:exported=true]
A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Content Provider (com.meizu.safe.blockService.provider.SMSUnSubscribeProvider) is not Protected. [android:exported=true]
A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Content Provider (com.meizu.safe.blockService.provider.WhiteListProvider) is not Protected. [android:exported=true]
A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Content Provider (com.meizu.safe.blockService.provider.BlockResultProvider) is not Protected. [android:exported=true]
A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Content Provider (com.meizu.safe.blockService.provider.BSNoteSyncProvider) is not Protected. [android:exported=true]
A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
Low Content Provider (com.meizu.safe.blockService.provider.SDKBlockResultProvider) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.meizu.safe.blockService.SDKBlockResultProvider.QUERY_BLOCK_RESULT
protectionLevel: signatureOrSystem [android:exported=true]
A Content Provider is found to be exported, but is protected by a permission. However, the protection level of the permission is set to signatureOrSystem. It is recommended that signature level is used instead. Signature level should suffice for most purposes, and does not depend on where the applications are installed on the device.
High Activity (com.meizu.safe.blockService.blockui.AddBlackListDialog) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.meizu.safe.ramcleaner.RAMCleanerOneClick) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Broadcast Receiver (com.meizu.safe.permission.lockedScreenViewMgr.receiver.InterceptLockedScreenShowReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.meizu.safe.permission.UsbInstallActivity$UninstallReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Service (com.meizu.safe.permission.UsbInstallService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.meizu.safe.permission.usb.install [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
Low Broadcast Receiver (com.meizu.safe.ramcleaner.broadcast.RAMClearBroadcast) is Protected by a permission, but the protection level of the permission should be checked.
Permission: android.permission.send.MEIZU_ACCELERATOR_EXECUTING
protectionLevel: signatureOrSystem [android:exported=true]
A Broadcast Receiver is found to be exported, but is protected by a permission. However, the protection level of the permission is set to signatureOrSystem. It is recommended that signature level is used instead. Signature level should suffice for most purposes, and does not depend on where the applications are installed on the device.
Low Content Provider (com.meizu.safe.alphame.AlphaMeContentProvider) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.meizu.safe.alphame.provider.permission
protectionLevel: signatureOrSystem [android:exported=true]
A Content Provider is found to be exported, but is protected by a permission. However, the protection level of the permission is set to signatureOrSystem. It is recommended that signature level is used instead. Signature level should suffice for most purposes, and does not depend on where the applications are installed on the device.
Low Service (com.meizu.safe.alphame.DataService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.meizu.safe.alphame.permission.DATA
protectionLevel: signatureOrSystem [android:exported=true]
A Service is found to be exported, but is protected by a permission. However, the protection level of the permission is set to signatureOrSystem. It is recommended that signature level is used instead. Signature level should suffice for most purposes, and does not depend on where the applications are installed on the device.
High Activity (com.meizu.safe.QrCodeScanActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Content Provider (com.meizu.safe.security.QrCodeUrlLocalDbProvider) is not Protected. [android:exported=true]
A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.meizu.safe.feature.FeatureSwitchActivity) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.meizu.functionmanager [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Activity (com.meizu.safe.feature.TransformActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.meizu.safe.newpermission.ui.ManagePermissionsActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.meizu.safe.newpermission.ui.AdaptLegacyActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
Low Content Provider (com.meizu.safe.alphame.SmartBGProvider) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.meizu.safe.alphame.permission.DATA
protectionLevel: signatureOrSystem [android:exported=true]
A Content Provider is found to be exported, but is protected by a permission. However, the protection level of the permission is set to signatureOrSystem. It is recommended that signature level is used instead. Signature level should suffice for most purposes, and does not depend on where the applications are installed on the device.
High Broadcast Receiver (com.meizu.safe.engine.virus.tms.TrpDetectReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.meizu.safe.insurance.InsuranceReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.meizu.flyme.permission.SEND_ACTIVED_PHONE [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
Medium High Intent Priority (2147483647)[android:priority]
By setting an intent priority higher than another intent, the app effectively overrides other requests.
Medium High Intent Priority (2147483647)[android:priority]
By setting an intent priority higher than another intent, the app effectively overrides other requests.
Medium High Intent Priority (2147483647)[android:priority]
By setting an intent priority higher than another intent, the app effectively overrides other requests.

Browsable activities

Information computed with MobSF.

com.meizu.safe.SecurityMainActivity

Hosts: com.meizu.safe

Schemes: flyme_3dtouch://

com.meizu.safe.feature.TransformActivity

Hosts: com.meizu.safe.junkclean com.meizu.safe

Schemes: content:// flyme_3dtouch://

Main Activity

Information computed with AndroGuard.

com.meizu.safe.SecurityMainActivity

Activities

Information computed with AndroGuard.

com.meizu.safe.SecurityMainActivity
com.meizu.safe.MainSettingsActivity
com.meizu.safe.news.ui.NewsListActivity
com.meizu.safe.news.ui.NewsContentActivity
com.meizu.safe.mainpage.ui.SmartCardDetailActivity
com.meizu.safe.viruscanner.ui.activity.VirusScannerActivity
com.meizu.safe.viruscanner.ui.activity.VirusDetailActivity
com.meizu.safe.viruscanner.ui.activity.TrustAppsAddActivity
com.meizu.safe.viruscanner.ui.activity.TrustAppsLstActivity
com.meizu.safe.viruscanner.ui.activity.VirusSettingActivity
com.meizu.update.display.KeyguardHelperActivity
com.meizu.safe.security.SecAppListActivity
com.meizu.safe.security.AppSecActivity
com.meizu.networkmanager.MainActivity
com.meizu.networkmanager.TrafficCorrectActivity
com.meizu.networkmanager.TrafficPlansSettingActivity
com.meizu.networkmanager.TrafficSpecialPlanSettingActivity
com.meizu.networkmanager.trafficui.TrafficWarningSettingActivity
com.meizu.networkmanager.TrafficSetupActivity
com.meizu.networkmanager.TipActivity
com.meizu.networkmanager.trafficui.TrafficOverWarnActivity
com.meizu.networkmanager.trafficui.TrafficNetRestrictTipActivity
com.meizu.networkmanager.trafficui.TrafficAppListActivity
com.meizu.networkmanager.trafficui.TrafficCustomCorrectCodeActivity
com.meizu.networkmanager.trafficui.TrafficAppDetailActivity
com.meizu.networkmanager.unittest.TestPowerSavingActivity
com.meizu.networkmanager.unittest.TestTrafficBackgrdActivity
com.meizu.networkmanager.trafficui.TrafficHighSettingActivity
com.meizu.networkmanager.trafficui.TrafficHighAppsListActivity
com.meizu.networkmanager.trafficui.TrafficHighAppsAddActivity
com.meizu.networkmanager.trafficui.TrafficDirectionalAppsListActivity
com.meizu.networkmanager.trafficui.TrafficDirectionalAppsAddActivity
com.meizu.safe.permission.PermissionMainActivity
com.meizu.safe.permission.PermissionSettingActivity
com.meizu.safe.permission.SmartBGActivity
com.meizu.safe.permission.NotificationActivity
com.meizu.safe.permission.AppPermissionActivity
com.meizu.safe.smartCleaner.view.main.CleanerMainActivity
com.meizu.safe.smartCleaner.view.cache.CacheActivity
com.meizu.safe.smartCleaner.view.weChat360.WeChat360Activity
com.meizu.safe.smartCleaner.view.whatsApp360.WhatsApp360Activity
com.meizu.safe.smartCleaner.view.messenger.Messenger360Activity
com.meizu.safe.smartCleaner.view.qq360.QQ360Activity
com.meizu.safe.smartCleaner.view.bigFile.BigFileActivity
com.meizu.safe.smartCleaner.view.similarPic.SimilarPicActivity
com.meizu.safe.smartCleaner.view.audioVideo.AudioVideoActivity
com.meizu.safe.smartCleaner.view.appData.AppDataActivity
com.meizu.safe.smartCleaner.view.appUninstall.AppUninstallActivity
com.meizu.safe.smartCleaner.view.autoClean.AutoCleanActivity
com.meizu.safe.blockService.blockui.BlockServiceMainActivity
com.meizu.safe.blockService.blockui.ContactsListActivity
com.meizu.safe.blockService.blockui.SettingActivity
com.meizu.safe.blockService.blockui.BlockPreference
com.meizu.safe.blockService.blockui.AddBlackListDialog
com.meizu.safe.ramcleaner.RAMCleanerOneClick
com.meizu.safe.permission.AppCrossWakenDetailsActivity
com.meizu.safe.permission.UsbInstallActivity
com.meizu.safe.QrCodeScanActivity
com.meizu.safe.feature.FeatureSwitchActivity
com.meizu.safe.feature.FeatureOffActivity
com.meizu.safe.feature.TransformActivity
com.meizu.safe.newpermission.ui.ManagePermissionsActivity
com.meizu.safe.newpermission.ui.AppPermissionsActivity
com.meizu.safe.newpermission.ui.PermissionManagerActivity
com.meizu.safe.newpermission.ui.AdaptLegacyActivity
sdk.meizu.traffic.ui.SingleSellerActivity
sdk.meizu.traffic.ui.SellerActivity
com.meizu.adplatform.api.activity.WebSurfingActivity
com.meizu.update.display.UpdateDialogActivityWrapper
com.meizu.sharewidget.activity.ShareViewGroupActivity

Receivers

Information computed with AndroGuard.

com.meizu.safe.viruscanner.utils.VirusLibUpdater
com.meizu.safe.engine.virus.qihoo.UserUpdateReceiver
com.meizu.safe.NotificationTooMuchReceiver
com.meizu.safe.InstallReceiver
com.meizu.safe.SafeBootReceiver
com.meizu.safe.PermBootReceiver
com.meizu.safe.push.AppPushReceiver
com.meizu.networkmanager.boradcast.WallPaperColorChangeListener
com.meizu.networkmanager.boradcast.TrafficWarningControlReceiver
com.meizu.networkmanager.boradcast.NetworkChangeReceiver
com.meizu.networkmanager.boradcast.TrafficSavingStatusReceiver
com.meizu.networkmanager.boradcast.QueryOpertorBroadCast
com.meizu.networkmanager.boradcast.ClearDiffBroadCast
com.meizu.networkmanager.boradcast.TrafficNotificationDeletedReceiver
com.meizu.networkmanager.boradcast.TrafficGlobalReceiver
com.meizu.networkmanager.provider.SafeWidgetProvider
com.meizu.networkmanager.boradcast.SMSReceiver
com.meizu.networkmanager.boradcast.SmsSendFailedReceiver
com.meizu.networkmanager.boradcast.AlphaDbUpdateFinishReceiver
com.meizu.networkmanager.boradcast.AppInstallReceiver
com.meizu.safe.blockService.receiver.PowerConnectionReceiver
com.qihoo360.mobilesafe.block.core.BlockUpdateReceiver
com.meizu.safe.blockService.utils.NotificationUtil
com.meizu.safe.blockService.receiver.DateTimeReceiver
com.meizu.safe.permission.lockedScreenViewMgr.LockedScreenViewPermNotifier$OnNotifyOperationReceiver
com.meizu.safe.permission.lockedScreenViewMgr.receiver.InterceptLockedScreenShowReceiver
com.meizu.safe.permission.UsbInstallActivity$UninstallReceiver
com.meizu.safe.ramcleaner.broadcast.RAMClearBroadcast
com.meizu.safe.engine.virus.tms.TrpDetectReceiver
com.meizu.safe.insurance.InsuranceReceiver

Services

Information computed with AndroGuard.

com.qihoo.security.services.DeepScanService
com.qihoo.security.services.ScanEngineService
com.meizu.safe.service.MzBlockRealService
com.meizu.safe.service.UrlCheckRealService
com.meizu.update.service.MzUpdateComponentService
com.meizu.cloud.pushsdk.NotificationService
com.meizu.safe.DetectingService
com.meizu.safe.SocketService
com.meizu.safe.PermissionQueryService
com.meizu.safe.RubbishCleanService
com.qihoo.antivirus.update.UpdateService
com.meizu.networkmanager.service.TrafficPollingService
com.meizu.networkmanager.service.TrafficCorrectService
com.meizu.networkmanager.service.PowerSavingControllService
com.meizu.safe.smartCleaner.model.weChat.WeChatSdkService
com.meizu.safe.smartCleaner.model.weChat360.WeChat360SdkService
com.meizu.safe.smartCleaner.model.qq360.QQ360SdkService
com.meizu.safe.smartCleaner.model.whatsApp360.WhatsApp360SdkService
com.meizu.safe.smartCleaner.model.messenger360.Messenger360SdkService
com.meizu.safe.smartCleaner.model.cache.CacheSdkService
com.meizu.safe.smartCleaner.model.file.FileDescSdkService
com.meizu.safe.smartCleaner.viewModel.autoRun.AutoCleanService
com.meizu.safe.smartCleaner.viewModel.autoRun.LowStorageService
com.meizu.safe.blockService.service.SDKUpdateService
com.meizu.safe.permission.UsbInstallService
com.meizu.safe.alphame.DataService
com.meizu.safe.mainpage.smartcard.SmartCardDataScanService
com.qihoo.cleandroid.sdk.ApkScanService
com.meizu.safe.service.UtilsJobService
com.meizu.safe.service.SafeSecureService
com.meizu.safe.service.MzVirusService
com.meizu.advertise.services.ProxyIntentService
com.meizu.advertise.services.ProxyService

Sample timeline

Oldest file found in APK Nov. 27, 2010, 2:09 a.m.
Latest file found in APK Nov. 27, 2010, 2:09 a.m.
Certificate valid not before Nov. 27, 2010, 9:09 a.m.
First submission on VT Jan. 28, 2021, 6:14 a.m.
Last submission on VT Jan. 28, 2021, 6:14 a.m.
Upload on Pithus May 3, 2022, 4:20 p.m.
Certificate valid not after April 14, 2038, 9:09 a.m.

NIAP analysis

Information computed with MobSF.

FCS_RBG_EXT.1.1 The application invoke platform-provided DRBG functionality for its cryptographic operations.
Random Bit Generation Services
FCS_STO_EXT.1.1 The application does not store any credentials to non-volatile memory.
Storage of Credentials
FCS_CKM_EXT.1.1 The application generate no asymmetric cryptographic keys.
Cryptographic Key Generation Services
FDP_DEC_EXT.1.1 The application has access to ['location', 'camera', 'network connectivity'].
Access to Platform Resources
FDP_DEC_EXT.1.2 The application has access to ['call lists', 'address book'].
Access to Platform Resources
FDP_NET_EXT.1.1 The application has user/application initiated network communications.
Network Communications
FDP_DAR_EXT.1.1 The application implement functionality to encrypt sensitive data in non-volatile memory.
Encryption Of Sensitive Application Data
FMT_MEC_EXT.1.1 The application invoke the mechanisms recommended by the platform vendor for storing and setting configuration options.
Supported Configuration Mechanism
FTP_DIT_EXT.1.1 The application does encrypt some transmitted data with HTTPS/TLS/SSH between itself and another trusted IT product.
Protection of Data in Transit
FCS_RBG_EXT.2.1
FCS_RBG_EXT.2.2
The application perform all deterministic random bit generation (DRBG) services in accordance with NIST Special Publication 800-90A using Hash_DRBG. The deterministic RBG is seeded by an entropy source that accumulates entropy from a platform-based DRBG and a software-based noise source, with a minimum of 256 bits of entropy at least equal to the greatest security strength (according to NIST SP 800-57) of the keys and hashes that it will generate.
Random Bit Generation from Application
FCS_CKM.1.1(3)
FCS_CKM.1.2(3)
A password/passphrase shall perform [Password-based Key Derivation Functions] in accordance with a specified cryptographic algorithm..
Password Conditioning
FCS_COP.1.1(1) The application perform encryption/decryption not in accordance with FCS_COP.1.1(1), AES-ECB mode is being used.
Cryptographic Operation - Encryption/Decryption
FCS_COP.1.1(2) The application perform cryptographic hashing services not in accordance with FCS_COP.1.1(2) and uses the cryptographic algorithm RC2/RC4/MD4/MD5.
Cryptographic Operation - Hashing
FCS_COP.1.1(3) The application perform cryptographic signature services (generation and verification) in accordance with a specified cryptographic algorithm RSA schemes using cryptographic key sizes of 2048-bit or greater.
Cryptographic Operation - Signing
FCS_HTTPS_EXT.1.1 The application implement the HTTPS protocol that complies with RFC 2818.
HTTPS Protocol
FCS_HTTPS_EXT.1.2 The application implement HTTPS using TLS.
HTTPS Protocol
FCS_HTTPS_EXT.1.3 The application notify the user and not establish the connection or request application authorization to establish the connection if the peer certificate is deemed invalid.
HTTPS Protocol
FIA_X509_EXT.1.1 The application invoked platform-provided functionality to validate certificates in accordance with the following rules: ['The certificate path must terminate with a trusted CA certificate'].
X.509 Certificate Validation
FIA_X509_EXT.2.1 The application use X.509v3 certificates as defined by RFC 5280 to support authentication for HTTPS , TLS.
X.509 Certificate Authentication
FPT_TUD_EXT.2.1 The application shall be distributed using the format of the platform-supported package manager.
Integrity for Installation and Update
FCS_CKM.1.1(2) The application shall generate symmetric cryptographic keys using a Random Bit Generator as specified in FCS_RBG_EXT.1 and specified cryptographic key sizes 128 bit or 256 bit.
Cryptographic Symmetric Key Generation

Code analysis

Information computed with MobSF.

High
CVSS:5.9
Calling Cipher.getInstance("AES") will return AES ECB mode by default. ECB mode is known to be weak as it results in the same ciphertext for identical blocks of plaintext.
MASVS: MSTG-CRYPTO-2
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 blocksdk/dp.java
com/meizu/statsapp/v3/lib/plugin/g/b.java
a/k.java
clear/sdk/w.java
Low
CVSS:7.5
The App logs information. Sensitive information should never be logged.
MASVS: MSTG-STORAGE-3
CWE-532 Insertion of Sensitive Information into Log File
Files:
 blocksdk/ae.java
com/c/a/a/b/a.java
android/databinding/adapters/TextViewBindingAdapter.java
com/meizu/safe/smartCleaner/model/c/b.java
com/meizu/safe/security/utils/SecAppExpandableListPreference.java
blocksdk/eu.java
com/meizu/networkmanager/c/u.java
com/meizu/safe/common/a.java
com/meizu/safe/smartCleaner/model/b/a.java
com/meizu/safe/smartCleaner/view/bigFile/BigFileActivity.java
com/meizu/safe/security/f/a.java
com/meizu/networkmanager/f/i.java
com/meizu/safe/smartCleaner/view/whatsApp360/WhatsApp360Activity.java
com/meizu/networkmanager/monitor/y.java
com/meizu/safe/common/e/j.java
flyme/b/a.java
com/meizu/safe/smartCleaner/view/c.java
com/meizu/networkmanager/boradcast/SmsSendFailedReceiver.java
b/a/t.java
flyme/support/v7/app/AppCompatActivity.java
com/meizu/common/widget/MzRatingBar.java
com/meizu/networkmanager/boradcast/TrafficNotificationDeletedReceiver.java
com/meizu/common/util/g.java
com/qihoo360/mobilesafe/dual/DualMainEntry.java
com/meizu/safe/newpermission/b/e.java
com/meizu/safe/permission/a/a.java
com/meizu/safe/engine/virus/tms/TrpDetectReceiver.java
flyme/support/v7/widget/z.java
blocksdk/dh.java
com/meizu/networkmanager/boradcast/SMSReceiver.java
flyme/support/v7/widget/a/c.java
com/meizu/safe/viruscanner/c/c.java
com/meizu/networkmanager/f/t.java
com/c/a/a/b/a/a.java
com/meizu/safe/InstallReceiver.java
com/meizu/hybrid/b/c.java
com/meizu/networkmanager/n/e.java
com/meizu/networkmanager/i/w.java
com/meizu/safe/permission/AppCrossWakenDetailsActivity.java
com/meizu/safe/smartCleaner/view/audioVideo/AudioVideoActivity.java
com/meizu/safe/engine/virus/tms/a.java
flyme/support/v7/widget/MzRecyclerView.java
com/meizu/safe/security/b/e.java
flyme/c/b.java
com/meizu/ptrpullrefreshlayout/footer/AnimLoadFooterView.java
com/meizu/safe/security/fragment/h.java
com/meizu/safe/f/a.java
com/meizu/networkmanager/f/e.java
com/meizu/networkmanager/monitor/ak.java
com/meizu/safe/blockService/provider/SMSUnSubscribeProvider.java
com/xy/smartsms/net/http/f.java
com/meizu/safe/engine/url/d.java
com/meizu/networkmanager/utils/j.java
com/meizu/networkmanager/v2/k.java
com/meizu/safe/security/fragment/a.java
com/meizu/safe/a/g.java
com/meizu/networkmanager/c/y.java
clear/sdk/bg.java
com/meizu/safe/smartCleaner/model/weChat/d.java
sdk/meizu/traffic/b/h.java
com/meizu/safe/blockService/utils/d.java
com/meizu/safe/permission/UsbInstallActivity.java
sdk/meizu/traffic/ui/b.java
com/meizu/networkmanager/xy/MzXYDataEntity.java
com/meizu/safe/newpermission/c/b.java
com/meizu/safe/viruscanner/a/a.java
cn/com/xy/sms/util/ParseManager.java
com/meizu/account/pay/b.java
com/c/a/a/d/c.java
com/meizu/safe/permission/lockedScreenViewMgr/b.java
com/meizu/safe/common/e/u.java
a/c.java
com/meizu/safe/permission/lockedScreenViewMgr/LockedScreenViewPermNotifier.java
sdk/meizu/traffic/a/d.java
com/meizu/networkmanager/d/c.java
com/meizu/safe/h/c.java
com/meizu/safe/smartCleaner/model/cache/a.java
com/qq/taf/jce/JceOutputStream.java
com/meizu/networkmanager/c.java
blocksdk/j.java
com/meizu/safe/alphame/e.java
e/ao.java
com/meizu/safe/common/e/n.java
com/meizu/safe/blockService/blockui/c.java
com/meizu/networkmanager/i/o.java
com/meizu/safe/blockService/provider/BlockMessagesProvider.java
com/meizu/networkmanager/monitor/f.java
com/meizu/common/widget/SelectionButton.java
clear/sdk/a.java
com/meizu/safe/mainpage/d/c.java
com/xy/smartsms/net/http/c.java
com/meizu/safe/engine/a/c.java
com/meizu/statsapp/v3/a/a/e.java
com/meizu/safe/f/d.java
com/meizu/safe/news/ui/NewsListActivity.java
sdk/meizu/traffic/hybird/method/TelNativeInterface.java
com/meizu/safe/mainpage/ui/b/g.java
cn/com/xy/sms/sdk/util/C0247o.java
com/meizu/networkmanager/g/m.java
com/meizu/safe/mainpage/d/d.java
com/meizu/safe/alphame/f.java
com/meizu/networkmanager/m/a.java
com/meizu/safe/smartCleaner/view/main/CleanerMainActivity.java
com/meizu/safe/urlDownload/v2/a.java
com/meizu/safe/ramcleaner/broadcast/RAMClearBroadcast.java
com/meizu/safe/newpermission/b/b.java
com/meizu/networkmanager/trafficui/TrafficHighAppsAddActivity.java
com/meizu/safe/blockService/blockui/AddBlackListDialog.java
com/meizu/account/pay/a.java
com/meizu/networkmanager/i/p.java
com/meizu/safe/common/widget/b.java
flyme/a/a/a.java
com/meizu/safe/smartCleaner/viewModel/f/c.java
cn/com/xy/sms/sdk/util/C0243k.java
com/meizu/safe/smartCleaner/model/c.java
com/meizu/networkmanager/service/SmsResolveService.java
com/meizu/safe/smartCleaner/model/cache/b.java
com/meizu/networkmanager/f/q.java
com/meizu/networkmanager/model/PhoneNumEntity.java
com/meizu/safe/common/e/b.java
com/meizu/networkmanager/i/d.java
blocksdk/at.java
com/meizu/safe/permission/lockedScreenViewMgr/c.java
cn/com/xy/sms/sdk/action/AbsSdkDoAction.java
com/meizu/safe/common/db/n.java
com/meizu/safe/smartCleaner/model/messenger360/c.java
com/meizu/networkmanager/i/am.java
sdk/meizu/traffic/hybird/a.java
com/meizu/networkmanager/provider/TrafficPreferenceProvider.java
com/xy/smartsms/net/util/Log.java
b/a/e.java
com/meizu/safe/g/a.java
com/meizu/safe/blockService/receiver/DateTimeReceiver.java
com/meizu/safe/smartCleaner/view/qq360/QQ360Activity.java
flyme/support/v7/c/f.java
com/meizu/safe/viruscanner/ui/activity/VirusScannerActivity.java
com/meizu/safe/smartCleaner/viewModel/k/e.java
com/meizu/safe/common/e/m.java
com/meizu/safe/smartCleaner/viewModel/h/e.java
com/esotericsoftware/minlog/Log.java
com/meizu/safe/viruscanner/utils/e.java
blocksdk/cf.java
com/meizu/safe/push/AppPushReceiver.java
blocksdk/bs.java
com/meizu/networkmanager/MainActivity.java
blocksdk/o.java
com/meizu/networkmanager/trafficui/e.java
com/meizu/safe/newpermission/ui/d.java
com/meizu/safe/smartCleaner/viewModel/autoRun/AutoCleanService.java
com/meizu/cloud/pushsdk/networking/internal/InternalRunnable.java
com/meizu/safe/c.java
com/meizu/networkmanager/f/p.java
d/d/e/f.java
com/meizu/networkmanager/b/a.java
com/meizu/safe/security/utils/c.java
com/meizu/networkmanager/i/ag.java
com/meizu/safe/SafeApplication.java
com/meizu/safe/engine/a/d.java
com/meizu/networkmanager/monitor/ad.java
blocksdk/aa.java
clear/sdk/fd.java
com/meizu/hybrid/b/j.java
com/meizu/safe/smartCleaner/model/weChat360/c.java
com/meizu/networkmanager/c/q.java
com/meizu/networkmanager/monitor/ac.java
com/meizu/networkmanager/unittest/TestPowerSavingActivity.java
com/meizu/networkmanager/model/TrafficDailyPlan.java
com/meizu/cloud/pushsdk/networking/internal/ANRequestQueue.java
com/meizu/safe/DetectingService.java
com/meizu/safe/engine/virus/f.java
org/tensorflow/b.java
com/meizu/safe/common/e/i.java
flyme/support/v7/view/e.java
com/meizu/networkmanager/trafficui/TrafficNetRestrictTipActivity.java
com/meizu/safe/security/c/a.java
com/meizu/networkmanager/i/i.java
com/meizu/networkmanager/monitor/b.java
com/meizu/advertise/api/AdManager.java
com/meizu/networkmanager/g/i.java
com/meizu/safe/permission/a/b.java
blocksdk/fb.java
com/meizu/safe/ramcleaner/RAMCleanerOneClick.java
com/meizu/safe/alphame/a/b.java
com/meizu/networkmanager/i/g.java
com/meizu/cloud/pushsdk/base/EncryptionWriter.java
com/meizu/safe/engine/a/h.java
com/qihoo/cleandroid/sdk/utils/JavaProcessLock.java
com/meizu/ptrpullrefreshlayout/c/a.java
com/meizu/safe/smartCleaner/model/a/a.java
com/meizu/safe/engine/virus/h.java
com/meizu/common/util/d.java
flyme/support/v7/view/menu/h.java
com/meizu/networkmanager/model/TrafficMsg.java
com/meizu/networkmanager/f/h.java
com/meizu/safe/common/e/k.java
com/meizu/safe/smartCleaner/model/qq360/d.java
com/meizu/safe/common/db/a.java
com/meizu/safe/smartCleaner/model/file/a.java
com/meizu/safe/engine/virus/tms/b.java
com/meizu/networkmanager/f/w.java
com/meizu/networkmanager/i/at.java
com/meizu/networkmanager/trafficui/f.java
com/meizu/common/widget/StretchSearchView.java
com/meizu/networkmanager/xy/DataPlan.java
com/meizu/safe/smartCleaner/viewModel/e/e.java
com/meizu/networkmanager/monitor/d.java
com/meizu/b/a.java
com/meizu/networkmanager/f/f.java
flyme/support/v7/app/AppCompatPreferenceActivity.java
com/meizu/common/widget/e.java
flyme/support/v7/widget/n.java
com/meizu/networkmanager/i/e.java
com/meizu/networkmanager/e/e.java
com/meizu/hybrid/b/b.java
com/meizu/safe/news/a/a.java
com/meizu/safe/smartCleaner/viewModel/i/e.java
com/xy/smartsms/net/fee/FeeManager.java
com/meizu/safe/newpermission/b/d.java
sdk/meizu/traffic/b/b.java
blocksdk/dg.java
com/meizu/networkmanager/l/a.java
com/meizu/statsapp/v3/a/a/b.java
tmsdk/common/utils/m.java
com/meizu/networkmanager/i/ax.java
com/meizu/cloud/pushsdk/networking/http/HttpURLConnectionCall.java
com/meizu/safe/smartCleaner/view/appData/AppDataActivity.java
clear/sdk/el.java
com/meizu/safe/b/a/a/a.java
blocksdk/z.java
com/meizu/networkmanager/trafficui/TrafficWarningSettingActivity.java
com/meizu/safe/common/e/r.java
com/meizu/networkmanager/i/z.java
com/meizu/networkmanager/n/b.java
com/meizu/safe/smartCleaner/model/whatsApp360/c.java
com/meizu/networkmanager/boradcast/TrafficWarningControlReceiver.java
com/meizu/networkmanager/j/c.java
com/meizu/networkmanager/k/c.java
com/meizu/account/pay/service/a.java
b/a/b.java
com/qihoo/antivirus/update/a/f.java
com/meizu/safe/viruscanner/utils/a.java
com/meizu/safe/security/fragment/e.java
com/meizu/networkmanager/trafficui/CorrectFragment.java
com/meizu/networkmanager/monitor/ah.java
com/meizu/safe/security/AppSecActivity.java
flyme/support/v7/app/o.java
com/meizu/safe/smartCleaner/model/b.java
clear/sdk/cb.java
com/meizu/networkmanager/trafficui/a.java
sdk/meizu/traffic/b/e.java
com/meizu/cloud/pushsdk/networking/utils/SourceCloseUtil.java
com/flyme/perf/OomCrashHandler.java
com/esotericsoftware/kryo/util/DefaultClassResolver.java
blocksdk/ez.java
com/meizu/common/widget/ActionMenuItemView.java
tmsdk/common/module/update/a.java
com/meizu/networkmanager/i/ac.java
com/meizu/networkmanager/utils/s.java
com/meizu/networkmanager/trafficui/TrafficCustomCorrectCodeActivity.java
com/meizu/safe/common/d/a.java
com/meizu/networkmanager/i/x.java
com/meizu/networkmanager/trafficui/c.java
com/meizu/cloud/pushsdk/networking/common/ANRequest.java
com/meizu/safe/viruscanner/utils/c.java
com/meizu/networkmanager/b.java
com/meizu/safe/common/a/b.java
flyme/support/v4/view/ViewPager.java
com/meizu/update/util/d.java
com/meizu/networkmanager/trafficui/TrafficDirectionalAppsListActivity.java
com/meizu/networkmanager/trafficui/TrafficOverWarnActivity.java
com/meizu/safe/alphame/b.java
com/meizu/safe/permission/lockedScreenViewMgr/receiver/InterceptLockedScreenShowReceiver.java
com/meizu/networkmanager/monitor/u.java
com/meizu/common/alphame/ServiceManager.java
com/meizu/networkmanager/xy/XYCorrectManager.java
com/meizu/safe/blockService/provider/BlockResultProvider.java
com/meizu/safe/common/e/w.java
sdk/meizu/traffic/a/b.java
com/meizu/networkmanager/i/l.java
com/meizu/safe/a/e.java
clear/sdk/e.java
com/meizu/networkmanager/c/b.java
com/meizu/statsapp/v3/a.java
clear/sdk/dn.java
flyme/support/v7/widget/AppCompatPopupWindow.java
com/meizu/safe/blockService/provider/BlackListProvider.java
com/meizu/update/util/k.java
com/c/a/a/b/c.java
com/meizu/networkmanager/monitor/aa.java
com/meizu/networkmanager/trafficui/TrafficAppDetailActivity.java
com/meizu/safe/smartCleaner/viewModel/b/d.java
com/meizu/networkmanager/model/TrafficCorrectData.java
com/esotericsoftware/kryo/Kryo.java
flyme/support/v7/widget/p.java
com/meizu/networkmanager/c/z.java
flyme/a/b.java
com/meizu/networkmanager/g/k.java
flyme/support/v7/widget/TabView.java
com/meizu/safe/RubbishCleanService.java
com/meizu/networkmanager/c/n.java
blocksdk/du.java
com/meizu/safe/blockService/utils/i.java
com/meizu/networkmanager/i/aj.java
com/meizu/b/c.java
com/meizu/networkmanager/f/a.java
com/meizu/networkmanager/monitor/am.java
com/meizu/safe/engine/a/a.java
com/meizu/networkmanager/n/g.java
flyme/support/v7/widget/ActionBarOverlayLayout.java
com/meizu/networkmanager/monitor/a.java
com/meizu/networkmanager/model/SimCardAttribution.java
com/c/a/a/d/a.java
com/xy/smartsms/net/a/b.java
com/xy/smartsms/net/http/h.java
com/meizu/safe/alphame/a/a.java
com/meizu/safe/urlDownload/v2/HmService.java
com/meizu/safe/engine/virus/qihoo/UserUpdateReceiver.java
com/meizu/safe/smartCleaner/model/a/b.java
d/g/c.java
com/meizu/safe/security/a.java
com/meizu/networkmanager/trafficui/g.java
com/meizu/safe/SocketService.java
tmsdkobf/oq.java
flyme/support/v7/widget/ListPopupWindow.java
com/meizu/networkmanager/provider/TrafficAppNetStatusProvider.java
com/meizu/common/widget/BadgeView.java
com/meizu/networkmanager/g/h.java
com/meizu/networkmanager/i/u.java
com/meizu/safe/security/d/a.java
com/meizu/networkmanager/boradcast/AppInstallReceiver.java
com/meizu/cloud/pushsdk/networking/AndroidNetworking.java
com/meizu/safe/smartCleaner/model/file/b.java
com/meizu/safe/engine/a/i.java
flyme/support/v7/view/menu/i.java
com/meizu/hybrid/b/e.java
com/meizu/networkmanager/monitor/ab.java
com/meizu/networkmanager/i/al.java
com/meizu/safe/common/e/s.java
com/meizu/networkmanager/i/j.java
com/meizu/networkmanager/c/s.java
com/meizu/common/alphame/AlphaMe.java
com/meizu/safe/newpermission/a/f.java
com/meizu/safe/alphame/DataService.java
com/meizu/networkmanager/i/aw.java
com/meizu/networkmanager/boradcast/b.java
cn/com/xy/sms/sdk/log/LogManager.java
e/p.java
clear/sdk/es.java
com/meizu/networkmanager/monitor/TrafficNetStatusProvider.java
sdk/meizu/traffic/ui/SellerActivity.java
com/meizu/safe/e.java
com/qihoo360/a/f/b.java
blocksdk/cd.java
com/meizu/networkmanager/monitor/af.java
com/meizu/safe/smartCleaner/model/weChat360/d.java
com/meizu/safe/newpermission/a/j.java
org/tensorflow/contrib/android/a.java
clear/sdk/ff.java
com/meizu/safe/alphame/g.java
com/meizu/networkmanager/f/r.java
com/meizu/safe/smartCleaner/viewModel/j/e.java
com/meizu/safe/common/db/i.java
com/meizu/safe/engine/virus/qihoo/a.java
com/meizu/hybrid/ui/HybridContainerActivity.java
com/meizu/safe/security/utils/a.java
com/meizu/safe/smartCleaner/viewModel/autoRun/LowStorageService.java
com/qihoo/security/engine/ApkInfo.java
com/qihoo/cleandroid/sdk/plugins/NativeFuncsImpl.java
sdk/meizu/traffic/ui/SingleSellerActivity.java
com/meizu/networkmanager/monitor/h.java
com/meizu/safe/smartCleaner/view/weChat360/WeChat360Activity.java
com/meizu/networkmanager/monitor/e.java
com/meizu/safe/blockService/service/SDKUpdateService.java
cn/com/xy/sms/sdk/util/StringUtils.java
com/meizu/safe/news/a.java
com/meizu/safe/smartCleaner/b.java
flyme/support/v7/widget/ac.java
com/meizu/networkmanager/unittest/TestActivity.java
com/meizu/safe/common/e/o.java
com/meizu/safe/mainpage/c/a.java
e/t.java
com/meizu/networkmanager/f/c.java
com/qihoo/antivirus/a/q.java
com/meizu/networkmanager/monitor/ai.java
com/qihoo360/a/f/e.java
com/meizu/networkmanager/i/n.java
com/meizu/networkmanager/monitor/s.java
com/meizu/networkmanager/i/c.java
com/meizu/hybrid/method/NativeMethodInfo.java
com/meizu/update/a/a.java
com/qihoo360/a/f/f.java
com/meizu/safe/viruscanner/utils/VirusLibUpdater.java
com/meizu/safe/common/MtjActivity.java
flyme/support/v7/widget/RecyclerView.java
com/meizu/networkmanager/f/o.java
com/meizu/networkmanager/c/aa.java
com/meizu/networkmanager/model/UserCustomCorrectInfo.java
com/meizu/safe/smartCleaner/viewModel/a/d.java
com/meizu/safe/alphame/AlphaMeContentProvider.java
com/meizu/networkmanager/c/p.java
e/ab.java
com/meizu/networkmanager/n/c.java
com/meizu/networkmanager/widget/d.java
com/meizu/networkmanager/utils/p.java
com/meizu/safe/smartCleaner/viewModel/d/c.java
com/meizu/sharewidget/widget/ShareViewGroup.java
com/meizu/safe/f/b.java
com/meizu/networkmanager/g/a.java
com/meizu/cloud/pushsdk/base/DefaultLog.java
com/qihoo/antivirus/update/a/d.java
com/meizu/safe/common/provider/SharedPrefsProvider.java
com/meizu/hybrid/method/JsToAndroidBridge.java
com/meizu/networkmanager/e/f.java
cn/com/xy/sms/sdk/net/n.java
com/meizu/safe/e/a/a.java
com/meizu/safe/smartCleaner/view/AbstractActivity.java
com/meizu/networkmanager/v2/TrafficCoreService.java
com/meizu/networkmanager/provider/SafeWidgetProvider.java
com/meizu/networkmanager/trafficui/TrafficAppListActivity.java
blocksdk/ay.java
com/meizu/networkmanager/f/v.java
blocksdk/i.java
com/meizu/networkmanager/monitor/ap.java
com/meizu/networkmanager/f/j.java
com/meizu/safe/service/a.java
com/meizu/safe/viruscanner/c/d.java
clear/sdk/b.java
com/qihoo/antivirus/update/a/c.java
com/meizu/networkmanager/c/w.java
com/meizu/networkmanager/i/aa.java
com/meizu/safe/blockService/blockui/BlockPreference.java
com/meizu/hybrid/ui/SimpleHybridActivity.java
com/meizu/networkmanager/f/d.java
com/meizu/networkmanager/n/d.java
com/meizu/safe/common/c.java
com/meizu/networkmanager/monitor/aj.java
com/meizu/common/preference/EditTextPreference.java
com/meizu/safe/PermBootReceiver.java
com/meizu/safe/blockService/utils/e.java
com/meizu/safe/smartCleaner/model/b/b.java
com/meizu/networkmanager/h/a/a.java
com/meizu/networkmanager/i/ak.java
com/qihoo360/mobilesafe/opti/clear/db/dex/LaunchApps.java
com/meizu/networkmanager/boradcast/a.java
com/meizu/networkmanager/f/u.java
com/meizu/networkmanager/trafficui/TrafficHighAppsListActivity.java
com/meizu/networkmanager/monitor/x.java
com/meizu/networkmanager/utils/m.java
b/a/h.java
com/meizu/safe/common/e/t.java
com/esotericsoftware/kryo/util/Util.java
flyme/a/a.java
tmsdkobf/fo.java
com/meizu/safe/smartCleaner/viewModel/c.java
com/meizu/safe/news/ui/WebViewActivity.java
android/app/FlymeContext.java
com/meizu/networkmanager/utils/k.java
com/meizu/cloud/a/a/a.java
com/meizu/networkmanager/TrafficSetupActivity.java
com/meizu/networkmanager/monitor/an.java
com/c/a/a/b/b.java
com/meizu/safe/smartCleaner/model/weChat/c.java
com/meizu/safe/common/widget/GapCycleProgressView.java
com/meizu/networkmanager/service/TrafficPollingService.java
com/meizu/safe/viruscanner/ui/a/a.java
com/meizu/safe/SecurityMainActivity.java
com/meizu/safe/smartCleaner/view/appUninstall/AppUninstallActivity.java
com/meizu/networkmanager/boradcast/TrafficGlobalReceiver.java
com/meizu/networkmanager/i/ab.java
com/meizu/networkmanager/c/r.java
blocksdk/cj.java
com/meizu/networkmanager/monitor/al.java
com/meizu/safe/alphame/a.java
com/meizu/safe/security/b/d.java
com/meizu/safe/viruscanner/utils/d.java
com/meizu/safe/blockService/provider/a.java
blocksdk/ce.java
com/meizu/safe/permission/UsbInstallService.java
com/meizu/networkmanager/n/f.java
com/meizu/networkmanager/service/TrafficCorrectService.java
android/common/content/SyncStateContentProviderHelper.java
com/meizu/networkmanager/trafficui/d.java
com/meizu/networkmanager/monitor/ae.java
com/meizu/networkmanager/widget/TrafficProgressView.java
com/meizu/safe/smartCleaner/model/messenger360/d.java
flyme/support/v7/app/AppCompatDelegateImplV7.java
com/meizu/networkmanager/f/l.java
com/c/a/a/b/d.java
com/meizu/networkmanager/model/Traffic.java
com/meizu/safe/common/NoTitleBGBaseActivity.java
com/meizu/networkmanager/h/a.java
com/meizu/safe/smartCleaner/view/messenger/Messenger360Activity.java
com/meizu/common/alphame/Args.java
com/meizu/networkmanager/boradcast/NetworkChangeReceiver.java
flyme/support/v7/app/k.java
com/meizu/safe/smartCleaner/viewModel/c/c.java
com/meizu/safe/smartCleaner/model/cache/f.java
com/meizu/networkmanager/MtjActivity.java
com/meizu/safe/permission/b/a.java
com/meizu/safe/PermissionQueryService.java
com/meizu/networkmanager/monitor/t.java
com/meizu/safe/urlDownload/e.java
com/meizu/safe/common/e/c.java
com/meizu/networkmanager/c/o.java
com/meizu/networkmanager/utils/f.java
com/esotericsoftware/kryo/serializers/VersionFieldSerializer.java
com/meizu/networkmanager/TipActivity.java
android/nonvccUsageStats/UsageStatsNonVccProxy3.java
com/meizu/networkmanager/f/b.java
com/meizu/common/widget/AnimCheckBox.java
clear/sdk/bj.java
com/meizu/safe/blockService/utils/j.java
com/meizu/networkmanager/i/y.java
com/meizu/networkmanager/k/b.java
com/meizu/networkmanager/provider/TrafficDataStatisticProvider.java
com/meizu/safe/a/d.java
com/meizu/safe/engine/a/b.java
com/meizu/common/util/a.java
com/meizu/safe/smartCleaner/view/similarPic/SimilarPicActivity.java
com/meizu/networkmanager/i/m.java
com/meizu/account/pay/d.java
com/meizu/safe/alphame/c.java
com/meizu/safe/security/utils/e.java
com/meizu/hybrid/method/BaseNativeInterface.java
com/meizu/common/widget/TabTopLayout.java
com/meizu/safe/smartCleaner/view/cache/CacheActivity.java
com/meizu/safe/insurance/a.java
com/meizu/safe/QrCodeScanActivity.java
com/meizu/safe/ramcleaner/a.java
com/meizu/networkmanager/c/a.java
com/meizu/advertise/b/a.java
flyme/support/v7/widget/RecyclerFastScrollLetter.java
com/meizu/safe/permission/lockedScreenViewMgr/a.java
com/xy/smartsms/net/util/c.java
com/meizu/networkmanager/f/n.java
com/meizu/networkmanager/c/ab.java
com/meizu/safe/common/e/e.java
com/meizu/networkmanager/e/d.java
com/meizu/networkmanager/monitor/j.java
tmsdkobf/la.java
flyme/support/v7/widget/GridLayoutManager.java
com/meizu/networkmanager/model/OperatorManager.java
com/meizu/safe/common/e/q.java
b/a/o.java
com/meizu/networkmanager/i/f.java
com/meizu/ptrpullrefreshlayout/DownLoadRecyclerView.java
com/meizu/safe/news/b.java
com/meizu/safe/smartCleaner/model/qq360/c.java
tmsdk/bg/module/network/k.java
com/meizu/safe/smartCleaner/viewModel/g/e.java
com/meizu/cloud/pushsdk/networking/common/ANLog.java
blocksdk/cc.java
com/meizu/safe/blockService/a.java
com/meizu/safe/security/b/f.java
com/meizu/safe/smartCleaner/model/whatsApp360/d.java
com/meizu/networkmanager/v2/g.java
com/meizu/safe/newpermission/a/b.java
android/app/FlymeAlarmManager.java
com/meizu/networkmanager/widget/TrafficSwitchPreference.java
com/meizu/safe/viruscanner/c/a.java
com/meizu/safe/blockService/provider/BlockCallsProvider.java
com/meizu/networkmanager/c/t.java
com/meizu/common/widget/d.java
com/meizu/safe/engine/a/g.java
com/meizu/common/widget/CustomViewBehind.java
com/meizu/networkmanager/trafficui/TrafficDirectionalAppsAddActivity.java
com/meizu/networkmanager/n/a.java
com/meizu/networkmanager/f/g.java
com/meizu/networkmanager/service/PowerSavingControllService.java
com/qihoo/cleandroid/sdk/utils/OpLog.java
com/meizu/networkmanager/monitor/ag.java
tmsdkobf/or.java
com/meizu/networkmanager/i/ad.java
Medium
CVSS:7.5
The App uses an insecure Random Number Generator.
MASVS: MSTG-CRYPTO-6
CWE-330 Use of Insufficiently Random Values
M5: Insufficient Cryptography
Files:
 com/meizu/networkmanager/n/h.java
com/qihoo/cleandroid/sdk/plugins/NativeFuncsImpl.java
clear/sdk/al.java
tmsdkobf/jr.java
clear/sdk/e.java
com/meizu/statsapp/v3/lib/plugin/emitter/a/b.java
cn/com/xy/sms/sdk/net/k.java
blocksdk/ex.java
a/l.java
b/a/e.java
clear/sdk/v.java
com/meizu/networkmanager/g/a.java
com/meizu/statsapp/v3/lib/plugin/f/a.java
com/meizu/statsapp/v3/lib/plugin/f/d.java
a/c.java
com/esotericsoftware/kryo/util/ObjectMap.java
cn/com/xy/sms/sdk/util/N.java
clear/sdk/aa.java
cn/com/xy/sms/sdk/net/util/b.java
cn/com/xy/sms/util/B.java
Medium
CVSS:5.9
App uses SQLite Database and execute raw SQL query. Untrusted user input in raw SQL queries can cause SQL Injection. Also sensitive information should be encrypted and written to the database.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
M7: Client Code Quality
Files:
 com/meizu/statsapp/v3/lib/plugin/emitter/a/a/b.java
com/meizu/cloud/pushsdk/pushtracer/storage/EventStoreHelper.java
com/meizu/safe/common/db/e.java
com/meizu/networkmanager/h/a/a.java
cn/com/xy/sms/sdk/db/entity/MatchCacheManager.java
com/meizu/safe/security/a.java
com/meizu/safe/common/db/k.java
cn/com/xy/sms/sdk/db/a/b.java
tmsdkobf/gy.java
tmsdkobf/ov.java
cn/com/xy/sms/sdk/db/entity/a/g.java
cn/com/xy/sms/sdk/db/g.java
cn/com/xy/sms/sdk/db/m.java
com/meizu/safe/engine/a/i.java
cn/com/xy/sms/sdk/db/f.java
cn/com/xy/sms/sdk/db/entity/J.java
cn/com/xy/sms/sdk/db/entity/G.java
tmsdkobf/ih.java
com/meizu/safe/alphame/AlphaMeContentProvider.java
cn/com/xy/sms/sdk/db/a/c.java
com/meizu/safe/engine/a/h.java
com/meizu/safe/urlDownload/v2/a.java
tmsdkobf/hd.java
com/meizu/safe/permission/a/a.java
com/meizu/safe/common/db/g.java
com/meizu/safe/common/db/m.java
com/meizu/safe/common/db/a.java
cn/com/xy/sms/sdk/db/DBManager.java
com/meizu/statsapp/v3/lib/plugin/emitter/a/a/a.java
com/meizu/safe/common/db/d.java
cn/com/xy/sms/sdk/provider/ContactsProvider.java
com/meizu/safe/alphame/h.java
cn/com/xy/sms/sdk/db/d.java
tmsdkobf/ir.java
tmsdkobf/im.java
com/meizu/safe/alphame/a.java
tmsdkobf/og.java
com/meizu/safe/blockService/provider/a.java
com/meizu/safe/alphame/g.java
android/common/content/SyncStateContentProviderHelper.java
cn/com/xy/sms/sdk/db/entity/I.java
cn/com/xy/sms/sdk/db/entity/a/c.java
cn/com/xy/sms/sdk/db/c.java
cn/com/xy/sms/sdk/db/ParseItemManager.java
cn/com/xy/sms/sdk/db/e.java
cn/com/xy/sms/sdk/db/h.java
tmsdkobf/gt.java
tmsdkobf/gn.java
com/meizu/networkmanager/h/a.java
com/qihoo/antivirus/a/d.java
cn/com/xy/sms/sdk/db/entity/IccidInfoManager.java
com/meizu/safe/common/db/c.java
cn/com/xy/sms/sdk/db/b.java
tmsdkobf/hc.java
com/meizu/safe/engine/a/g.java
cn/com/xy/sms/sdk/net/util/i.java
com/meizu/safe/engine/a/a.java
cn/com/xy/sms/sdk/db/k.java
cn/com/xy/sms/sdk/db/a/a.java
High
CVSS:5.5
App can read/write to External Storage. Any App can read data written to External Storage.
MASVS: MSTG-STORAGE-2
CWE-276 Incorrect Default Permissions
M2: Insecure Data Storage
Files:
 clear/sdk/cc.java
com/meizu/safe/smartCleaner/model/c/b.java
clear/sdk/be.java
com/meizu/statsapp/v3/f.java
blocksdk/dr.java
com/meizu/update/a/a.java
com/meizu/cloud/pushsdk/notification/android/AndroidVideoNotification.java
com/meizu/safe/common/a.java
e/o.java
tmsdkobf/jn.java
b/a/h.java
com/meizu/update/util/b.java
clear/sdk/cb.java
blocksdk/fb.java
tmsdkobf/jl.java
com/flyme/perf/OomCrashHandler.java
com/meizu/safe/mainpage/d/d.java
clear/sdk/eg.java
tmsdkobf/pq.java
b/a/n.java
tmsdkobf/kv.java
com/meizu/advertise/b/a.java
com/qihoo/cleandroid/sdk/utils/StorageDeviceUtils.java
com/meizu/safe/smartCleaner/model/file/a.java
com/meizu/cloud/pushsdk/base/DefaultLog.java
e/ap.java
com/meizu/update/util/d.java
clear/sdk/au.java
tmsdkobf/pf.java
com/meizu/safe/e.java
com/qihoo360/a/f/b.java
com/meizu/cloud/pushsdk/handler/impl/fileupload/ZipTask.java
sdk/meizu/traffic/hybird/a.java
com/qihoo/antivirus/a/z.java
clear/sdk/eb.java
com/qihoo/cleandroid/sdk/i/trashclear/TrashClearUtils.java
com/meizu/statsapp/v3/lib/plugin/f/d.java
com/meizu/safe/engine/virus/qihoo/a.java
com/qihoo/security/engine/ApkInfo.java
com/meizu/safe/smartCleaner/model/weChat/d.java
tmsdk/common/utils/j.java
clear/sdk/ah.java
com/meizu/cloud/pushsdk/handler/impl/fileupload/LogUploadMessageHandler.java
com/meizu/cloud/b/a.java
com/meizu/hybrid/b/d.java
com/meizu/cloud/pushsdk/base/Logger.java
com/meizu/safe/smartCleaner/b.java
tmsdkobf/ge.java
com/qihoo/cleandroid/sdk/utils/OpLog.java
tmsdkobf/or.java
Medium
CVSS:7.4
MD5 is a weak hash known to have hash collisions.
MASVS: MSTG-CRYPTO-4
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 cn/com/xy/sms/sdk/net/util/k.java
com/meizu/safe/permission/lockedScreenViewMgr/c.java
com/meizu/safe/urlDownload/h.java
blocksdk/eg.java
b/a/d.java
clear/sdk/eh.java
com/meizu/cloud/pushsdk/networking/http/Util.java
com/meizu/statsapp/v3/lib/plugin/j/j.java
com/qihoo/antivirus/a/z.java
com/meizu/safe/smartCleaner/model/weChat360/d.java
b/a/e.java
clear/sdk/d.java
b/a/u.java
blocksdk/as.java
tmsdkobf/fx.java
com/qihoo360/mobilesafe/dual/utils/DualUtil.java
com/meizu/cloud/pushsdk/networking/okio/Buffer.java
com/meizu/update/util/e.java
com/meizu/cloud/pushsdk/platform/SignUtils.java
com/meizu/safe/engine/a/c.java
tmsdk/common/module/qscanner/impl/f.java
com/meizu/safe/f/d.java
clear/sdk/ai.java
cn/com/xy/sms/sdk/util/u.java
clear/sdk/dz.java
com/meizu/safe/common/e/s.java
blocksdk/fa.java
clear/sdk/e.java
com/meizu/safe/insurance/a.java
com/meizu/update/util/k.java
com/meizu/safe/service/a.java
com/meizu/networkmanager/utils/s.java
com/meizu/cloud/a/b/a.java
cn/com/xy/sms/sdk/util/StringUtils.java
tmsdkobf/lb.java
com/meizu/safe/smartCleaner/model/qq360/d.java
clear/sdk/ad.java
com/meizu/safe/b/a/a/a.java
com/xy/smartsms/net/util/c.java
com/meizu/safe/permission/lockedScreenViewMgr/b.java
blocksdk/eb.java
com/meizu/safe/urlDownload/i.java
clear/sdk/fg.java
com/meizu/safe/common/e/e.java
tmsdkobf/fw.java
Medium
CVSS:4.3
IP Address disclosure
MASVS: MSTG-CODE-2
CWE-200 Information Exposure
Files:
 blocksdk/dl.java
tmsdkobf/kx.java
tmsdkobf/ko.java
tmsdkobf/lp.java
Medium
CVSS:5.9
SHA-1 is a weak hash known to have hash collisions.
MASVS: MSTG-CRYPTO-4
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 com/meizu/statsapp/v3/lib/plugin/g/b.java
com/meizu/cloud/pushsdk/networking/http/Util.java
clear/sdk/v.java
a/c.java
clear/sdk/aa.java
a/l.java
High
CVSS:7.4
Weak Encryption algorithm used
MASVS: MSTG-CRYPTO-4
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 clear/sdk/dz.java
tmsdkobf/hu.java
clear/sdk/eg.java
High
CVSS:7.4
The App uses the encryption mode CBC with PKCS5/PKCS7 padding. This configuration is vulnerable to padding oracle attacks.
MASVS: MSTG-CRYPTO-3
CWE-649 Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking
M5: Insufficient Cryptography
Files:
 com/meizu/statsapp/v3/lib/plugin/g/b.java
b/a/f.java
clear/sdk/h.java
com/xy/smartsms/net/http/e.java
Medium
CVSS:7.4
Files may contain hardcoded sensitive information like usernames, passwords, keys etc.
MASVS: MSTG-STORAGE-14
CWE-312 Cleartext Storage of Sensitive Information
M9: Reverse Engineering
Files:
 cn/com/xy/sms/util/ParseSummaryManager.java
com/meizu/statsapp/v3/lib/plugin/emitter/EmitterConfig.java
com/meizu/safe/f/c.java
com/meizu/cloud/pushsdk/platform/message/StrategyMessage.java
tmsdk/common/roach/nest/ActionI.java
com/meizu/safe/security/utils/e.java
e/b.java
com/meizu/cloud/pushsdk/platform/pushstrategy/Strategy.java
e/c.java
com/meizu/networkmanager/xy/XYCorrectManager.java
com/meizu/networkmanager/model/RequestUtil.java
com/qihoo360/mobilesafe/dual/DualModuleUpdateHelper.java
com/meizu/cloud/pushsdk/constants/PushConstants.java
com/xy/smartsms/net/fee/FeeManager.java
com/meizu/networkmanager/k/b.java
cn/com/xy/sms/sdk/db/entity/NumberInfo.java
com/meizu/networkmanager/model/ClientRequestConst.java
Low
CVSS:0
This App copies data to clipboard. Sensitive data should not be copied to clipboard as other applications can access it.
MASVS: MSTG-STORAGE-10
Files:
 com/meizu/safe/security/utils/e.java
Info
CVSS:0
This App may have root detection capabilities.
MASVS: MSTG-RESILIENCE-1
Files:
 com/meizu/statsapp/v3/lib/plugin/j/b.java
tmsdk/common/utils/ScriptHelper.java
High
CVSS:7.4
Insecure WebView Implementation. WebView ignores SSL Certificate errors and accept any SSL Certificate. This application is vulnerable to MITM attacks
MASVS: MSTG-NETWORK-3
CWE-295 Improper Certificate Validation
M3: Insecure Communication
Files:
 com/meizu/safe/news/ui/WebViewActivity.java
High
CVSS:5.9
The App uses ECB mode in Cryptographic encryption algorithm. ECB mode is known to be weak as it results in the same ciphertext for identical blocks of plaintext.
MASVS: MSTG-CRYPTO-2
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 com/meizu/statsapp/v3/lib/plugin/net/c.java
com/meizu/statsapp/v3/lib/plugin/g/a.java
Info
CVSS:0
This App uses SSL certificate pinning to detect or prevent MITM attacks in secure communication channel.
MASVS: MSTG-NETWORK-4
Files:
 cn/com/xy/sms/sdk/net/d.java
Pygal China: 2400 Germany: 300 Hong Kong: 500 Ireland: 200 United States: 500

Map computed by Pithus.

Domains analysis

Information computed with MobSF.

CN open-iflow.meizu.com 14.152.79.167
HK api.map.baidu.com 103.235.46.245
CN netsms.meizu.com 14.152.79.196
CN down2.bizport.cn 114.80.187.11
CN x.bizport.cn 114.55.187.181
US api-push.in.meizu.com 206.161.233.191
CN upush.meizu.com 125.94.213.144
HK tools.3g.qq.com 129.226.106.18
CN safe.meizu.com 125.94.213.143
CN android.bizport.cn 120.55.179.209
CN wapmail.10086.cn 221.176.67.220
IE mvconf.cloud.360safe.com 54.76.6.111
CN care.help.360.cn 36.110.213.65
DE www.qq.com 23.32.58.214
CN pmir.3g.qq.com 113.96.208.65
US github.com 140.82.121.4
HK servicecut.meizu.com 116.66.216.89
US recharge-res.meizu.com 128.1.157.226
CN sdkapiv2.bizport.cn 121.40.197.17
CN mvconf.f.360.cn 36.110.232.102
HK www.baidu.com 103.235.46.39
CN safe.res.meizu.com 58.243.203.35
CN down1.bizport.cn 122.227.201.1
IE mclean.cloud.360safe.com 54.154.39.147
- uxip-config.meizu.com 127.1.1.1
mclean.lato.cloud.360safe.com
HK u.in.meizu.com 116.66.216.86
- uxip.meizu.com 127.1.1.1
CN api-push.meizu.com 125.94.213.129
CN msch.f.360.cn 104.192.108.126
CN sdk.bizport.cn 115.29.12.172
CN insurance.meizu.com 119.23.85.118
CN mvd.f.360.cn 180.163.222.197
US sdk.s.360.cn 104.192.110.245
CN pre.mvd.f.360.cn 171.8.167.51
DE p.s.360.cn 47.254.148.188
CN mclean.f.360.cn 104.192.108.126
CN uxip-res.meizu.com 118.212.234.144
CN m.s.360.cn 36.110.236.38
DE g.s.360.cn 47.254.149.104
CN bizport.cn 118.31.226.210
US mvconf.lato.cloud.360safe.com 104.192.109.74

URL analysis

Information computed with MobSF.

http://api.map.baidu.com/geocoder?address=
http://api.map.baidu.com/marker?location=
http://api.map.baidu.com/geocoder?location=
Defined in cn/com/xy/sms/sdk/action/AbsSdkDoAction.java
http://api.map.baidu.com/geocoder?address=
http://api.map.baidu.com/marker?location=
http://api.map.baidu.com/geocoder?location=
Defined in cn/com/xy/sms/sdk/action/AbsSdkDoAction.java
http://api.map.baidu.com/geocoder?address=
http://api.map.baidu.com/marker?location=
http://api.map.baidu.com/geocoder?location=
Defined in cn/com/xy/sms/sdk/action/AbsSdkDoAction.java
http://android.bizport.cn:9998/AndroidWeb/getPlaceListAPI?
Defined in cn/com/xy/sms/sdk/action/NearbyPoint.java
http://scene
http://pubserver
http://smssdk
http://down1.bizport.cn
https://down1.bizport.cn
http://down2.bizport.cn/publicnum/upload/
https://pubapi
https://sdkapi
http://olapi
https://olapi
Defined in cn/com/xy/sms/sdk/net/NetUtil.java
http://scene
http://pubserver
http://smssdk
http://down1.bizport.cn
https://down1.bizport.cn
http://down2.bizport.cn/publicnum/upload/
https://pubapi
https://sdkapi
http://olapi
https://olapi
Defined in cn/com/xy/sms/sdk/net/NetUtil.java
http://scene
http://pubserver
http://smssdk
http://down1.bizport.cn
https://down1.bizport.cn
http://down2.bizport.cn/publicnum/upload/
https://pubapi
https://sdkapi
http://olapi
https://olapi
Defined in cn/com/xy/sms/sdk/net/NetUtil.java
http://sdkapiv2.bizport.cn/
https://sdkapiv2.bizport.cn/
Defined in cn/com/xy/sms/sdk/net/k.java
http://sdkapiv2.bizport.cn/
https://sdkapiv2.bizport.cn/
Defined in cn/com/xy/sms/sdk/net/k.java
http://android
http://x.bizport.cn/get_url_red
Defined in cn/com/xy/sms/sdk/net/NetWebUtil.java
http://android
http://x.bizport.cn/get_url_red
Defined in cn/com/xy/sms/sdk/net/NetWebUtil.java
http://sdk.bizport.cn:8081/check
Defined in cn/com/xy/sms/sdk/net/util/e.java
http://bizport.cn/newservice}
Defined in cn/com/xy/sms/sdk/net/util/CommandAnalyzer.java
http://mvconf.lato.cloud.360safe.com/safe_update
http://mvconf.f.360.cn/safe_update
Defined in clear/sdk/dp.java
http://mvconf.lato.cloud.360safe.com/safe_update
http://mvconf.f.360.cn/safe_update
Defined in clear/sdk/dp.java
http://g.s.360.cn/update/update.php
http://g.s.360.cn/pstat/plog.php
Defined in clear/sdk/bs.java
http://g.s.360.cn/update/update.php
http://g.s.360.cn/pstat/plog.php
Defined in clear/sdk/bs.java
http://care.help.360.cn/care/upload
Defined in clear/sdk/ai.java
http://mclean.f.360.cn/CleanQuery
Defined in clear/sdk/m.java
http://p.s.360.cn/pstat/plog.php
http://p.s.360.cn/update/update.php
Defined in clear/sdk/a.java
http://p.s.360.cn/pstat/plog.php
http://p.s.360.cn/update/update.php
Defined in clear/sdk/a.java
http://mclean.f.360.cn/CleanQuery
http://mclean.lato.cloud.360safe.com/CleanQuery
http://mclean.cloud.360safe.com/CleanQuery
Defined in clear/sdk/ag.java
http://mclean.f.360.cn/CleanQuery
http://mclean.lato.cloud.360safe.com/CleanQuery
http://mclean.cloud.360safe.com/CleanQuery
Defined in clear/sdk/ag.java
http://mclean.f.360.cn/CleanQuery
http://mclean.lato.cloud.360safe.com/CleanQuery
http://mclean.cloud.360safe.com/CleanQuery
Defined in clear/sdk/ag.java
http://pmir.3g.qq.com
Defined in tmsdk/common/TMSDKContext.java
http://tools.3g.qq.com/cw.html
Defined in tmsdk/common/utils/r.java
http://p.s.360.cn/pstat/plog.php
http://p.s.360.cn/update/update.php
http://sdk.s.360.cn/ak/
Defined in blocksdk/ex.java
http://p.s.360.cn/pstat/plog.php
http://p.s.360.cn/update/update.php
http://sdk.s.360.cn/ak/
Defined in blocksdk/ex.java
http://p.s.360.cn/pstat/plog.php
http://p.s.360.cn/update/update.php
http://sdk.s.360.cn/ak/
Defined in blocksdk/ex.java
http://m.s.360.cn/ps/s.php
Defined in blocksdk/dl.java