0/61

Threat

com.android.vending

Google Play Store

Analyzed on 2021-10-07T23:52:30.368937

113

permissions

101

activities

80

services

45

receivers

60

domains

File sums

MD5 95e8a6dcbfbce5a9e497d21480a06cd6
SHA1 84216bf5e87370648df5f7285f65cc8ed821cf28
SHA256 edbdf14a9fe0e5aa581ad0257472d782ab1190035c3add99cd2723202b713e91
Size 16.81MB

APKiD

Information computed with APKiD.

/tmp/tmphyca4r2t!classes.dex
anti_disassembly
  • illegal class name
anti_vm
  • Build.FINGERPRINT check
  • Build.MANUFACTURER check
  • Build.BOARD check
  • possible Build.SERIAL check
  • Build.TAGS check
  • SIM operator check
  • network operator name check
  • subscriber ID check
compiler
  • r8 without marker (suspicious)
/tmp/tmphyca4r2t!classes2.dex
anti_disassembly
  • illegal class name
anti_vm
  • Build.FINGERPRINT check
  • Build.MODEL check
  • Build.MANUFACTURER check
  • Build.PRODUCT check
  • possible Build.SERIAL check
  • SIM operator check
  • subscriber ID check
compiler
  • r8 without marker (suspicious)
/tmp/tmphyca4r2t!classes3.dex
anti_disassembly
  • illegal class name
anti_vm
  • Build.FINGERPRINT check
  • Build.MODEL check
  • Build.PRODUCT check
  • Build.HARDWARE check
compiler
  • r8 without marker (suspicious)
/tmp/tmphyca4r2t!classes4.dex
anti_vm
  • Build.FINGERPRINT check
  • Build.MANUFACTURER check
  • Build.HARDWARE check
  • Build.BOARD check
compiler
  • r8 without marker (suspicious)
/tmp/tmphyca4r2t!classes5.dex
compiler
  • r8 without marker (suspicious)

SSdeep

Information computed with ssdeep.

APK file 393216:uMK45BWdNiWaP52zUfD4WYzEjexaMvOXo7/sn:uD68zY52zUnYzEjSaq7Un
Manifest 3072:W6C++ofGMzeRKbwl8MYYCWXn4gSO1BqbP+0XPS6eDssVwIgYsgrCpEY0UCra:W+9…
classes.dex 98304:OBPJL8agSHlnk7avDJw/cdxE53k0ZL0OVvK4c:O75jDxE5dL0HF
classes2.dex 49152:9W0XFpUki9nJINpXt00fzdfkVUjuhz90y/Q0EVhzd1L4JHES1IcFMynCLq:/c79…
classes3.dex 49152:0tgGbPIMK9cJCOqXtifpPcmAwAketXbEvVtVNe4q0Fe1ki8EHD++2Q/UGLSz3wK…
classes4.dex 49152:W0gd/o9pZGIWqPnNNhs1njmj6YLDvGy/jbUUiX4sr3:Pg/1Np3
classes5.dex 6144:8Zpc66ZdCFayav0wFTDvuUyqep+Nrez4dr37hcUNlg90unaYFmpWG3S/TO7uDzo+…

Dexofuzzy

Information computed with Dexofuzzy.

APK file 24576:lM29z950SC6toM9pK5ouUpRenKcXM8dhX5Lm:t50SLWS8KmVm
classes.dex 6144:Lgbdn9z04BYJHm+RWpeaZmQPIB/vaVPpr1aR9zLs6J5noomCwpi9enss+cgjJiqP…
classes2.dex 6144:Tn2C0Zv6+xq+dQnZsUZiR0KwxbpDYCt8W07b9grrLXy7r7dm48IUAx8R5PxN4D:6…
classes3.dex 6144:GLfN8oXJ81earoQaaaWsaOh4NBTkkm7bUuHk7VOJHJm4z6JGEM3w+sk3qN4PMsa4…
classes4.dex 6144:mCiT/HpoEmN+lLZJjem9huV77ikZFt65mVxIzWaS:22Fee
classes5.dex 384:PZZZpx4ZZZZ2L1mMHgT6EFUO9lVRbZE7E/qKSbGrnsirc/tPDX1EyljBFxBRkDJu:…

APK details

Information computed with AndroGuard and Pithus.

Package com.android.vending
App name Google Play Store
Version name 27.1.14-21 [0] [PR] 395979954
Version code 82711410
SDK 21 - 31
UAID 5f6d092794779dc9fa373033a326e4dcc7d0c198
Signature Signature V1 Signature V2 Signature V3
Frosting Not frosted
Blocks found within V2 signature:
  • 0x7109871a: Unknown
  • 0xf05368c0: Unknown
  • 0x6dff800d: Source stamp V2 X509 cert
  • 0x42726577: Verity padding

Certificate details

Information computed with AndroGuard.

MD5 cde9f6208d672b54b1dacc0b7029f5eb
SHA1 38918a453d07199354f8b19af05ec6562ced5788
SHA256 f0fd6c5b410f25cb25c3b53346c8972fae30f8ee7411df910480ad6b2d60db83
Issuer Common Name: Android, Organizational Unit: Android, Organization: Google Inc., Locality: Mountain View, State/Province: California, Country: US
Not before 2008-08-21T23:13:34+00:00
Not after 2036-01-07T23:13:34+00:00

File Analysis

Information computed with MobSF.

Findings Files
Certificate/Key files hardcoded inside the app. assets/keys/dfe-response-auth/1
assets/keys/dfe-response-auth/meta
stamp-cert-sha256

Manifest analysis

Information computed with MobSF.

High Clear text traffic is Enabled For App[android:usesCleartextTraffic=true]
The app intends to use cleartext network traffic, such as cleartext HTTP, FTP stacks, DownloadManager, and MediaPlayer. The default value for apps that target API level 27 or lower is "true". Apps that target API level 28 or higher default to "false". The key reason for avoiding cleartext traffic is the lack of confidentiality, authenticity, and protections against tampering; a network attacker can eavesdrop on transmitted data and also modify it without being detected.
Medium Application Data can be Backed up[android:allowBackup] flag is missing.
The flag [android:allowBackup] should be set to false. By default it is set to true and allows anyone to backup your application data via adb. It allows users who have enabled USB debugging to copy application data off of the device.
High TaskAffinity is set for Activity
(com.google.android.finsky.sessiondetailsactivity.SessionDetailsActivity)
If taskAffinity is set, then other application could read the Intents sent to Activities belonging to another task. Always use the default setting keeping the affinity as the package name in order to prevent sensitive information inside sent or received Intents from being read by another application.
High Activity (com.google.android.finsky.sessiondetailsactivity.SessionDetailsActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.google.android.finsky.enx.EnxFlowActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Content Provider (com.google.android.finsky.instantapps.dna.PhoneskyArchiveProvider) is not Protected. [android:exported=true]
A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Content Provider (com.google.android.finsky.instantapps.HintApiContentProvider) is not Protected. [android:exported=true]
A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Content Provider (com.google.android.finsky.setup.CachedPackageContentProvider) is not Protected. [android:exported=true]
A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Content Provider (com.google.android.finsky.securityhub.SecurityHubContentProvider) is not Protected. [android:exported=true]
A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.google.android.finsky.activities.MainActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity-Alias (com.google.android.finsky.protect.PermissionAutoRevocationSettingsPage) is not Protected. [android:exported=true]
An Activity-Alias is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity-Alias (com.google.android.finsky.protect.ExternalPlayProtectHomeEntryPoint) is not Protected. [android:exported=true]
An Activity-Alias is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity-Alias (com.android.vending.AssetBrowserActivity) is not Protected. [android:exported=true]
An Activity-Alias is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.google.android.finsky.billing.lightpurchase.LightPurchaseFlowActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High TaskAffinity is set for Activity
(com.google.android.finsky.activities.InlineAppDetailsDialog)
If taskAffinity is set, then other application could read the Intents sent to Activities belonging to another task. Always use the default setting keeping the affinity as the package name in order to prevent sensitive information inside sent or received Intents from being read by another application.
High Activity (com.google.android.finsky.activities.InlineAppDetailsDialog) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.google.android.finsky.billing.updatesubscriptioninstrument.UpdateSubscriptionInstrumentActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.google.android.finsky.download.MimeTypeActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.google.android.finsky.checkin.CheckinReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
Low Broadcast Receiver (com.google.android.finsky.tos.TosAckedReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.android.vending.TOS_ACKED
protectionLevel: signatureOrSystem [android:exported=true]
A Broadcast Receiver is found to be exported, but is protected by a permission. However, the protection level of the permission is set to signatureOrSystem. It is recommended that signature level is used instead. Signature level should suffice for most purposes, and does not depend on where the applications are installed on the device.
High Broadcast Receiver (com.google.android.finsky.download.DownloadBroadcastReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Broadcast Receiver (com.google.android.finsky.packagemanager.impl.PackageMonitorReceiverImpl$RegisteredReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High TaskAffinity is set for Activity
(com.google.android.finsky.activities.MarketDeepLinkHandlerActivity)
If taskAffinity is set, then other application could read the Intents sent to Activities belonging to another task. Always use the default setting keeping the affinity as the package name in order to prevent sensitive information inside sent or received Intents from being read by another application.
High Activity (com.google.android.finsky.activities.MarketDeepLinkHandlerActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.google.android.finsky.activities.ShowAppInfoActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.google.android.finsky.instantapps.SettingsActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High TaskAffinity is set for Activity
(com.google.android.finsky.activities.AppCrashProxy)
If taskAffinity is set, then other application could read the Intents sent to Activities belonging to another task. Always use the default setting keeping the affinity as the package name in order to prevent sensitive information inside sent or received Intents from being read by another application.
High Activity (com.google.android.finsky.activities.AppCrashProxy) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.google.android.finsky.setupui.SetupWizardSelectDeviceActivity) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.android.vending.setup.PLAY_SETUP_SERVICE
protectionLevel: normal [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission. However, the protection level of the permission is set to normal. This means that a malicious application can request and obtain the permission and interact with the component. If it was set to signature, only applications signed with the same certificate could obtain the permission.
High Activity (com.google.android.finsky.setupui.VpaSelectionActivity) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.android.vending.setup.PLAY_SETUP_SERVICE
protectionLevel: normal [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission. However, the protection level of the permission is set to normal. This means that a malicious application can request and obtain the permission and interact with the component. If it was set to signature, only applications signed with the same certificate could obtain the permission.
High Activity (com.google.android.finsky.setupui.RestoreAppsActivity) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.android.vending.setup.PLAY_SETUP_SERVICE
protectionLevel: normal [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission. However, the protection level of the permission is set to normal. This means that a malicious application can request and obtain the permission and interact with the component. If it was set to signature, only applications signed with the same certificate could obtain the permission.
High Activity (com.google.android.finsky.setupui.SetupWizardFinalHoldActivity) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.android.vending.setup.PLAY_SETUP_SERVICE
protectionLevel: normal [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission. However, the protection level of the permission is set to normal. This means that a malicious application can request and obtain the permission and interact with the component. If it was set to signature, only applications signed with the same certificate could obtain the permission.
High Activity (com.google.android.finsky.appdiscoveryservice.AppDiscoveryLaunchActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.google.android.finsky.family.management.FamilyMemberSettingsActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.google.android.finsky.boothandler.BootCompletedReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.google.android.finsky.dsehelper.SearchWidgetDseChangeBroadcastReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.google.android.finsky.permission.DSE
protectionLevel: normal [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission. However, the protection level of the permission is set to normal. This means that a malicious application can request and obtain the permission and interact with the component. If it was set to signature, only applications signed with the same certificate could obtain the permission.
High Broadcast Receiver (com.google.android.finsky.setup.LauncherConfigurationReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.wearsupport.WearChangeListenerService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.google.android.finsky.accounts.impl.AccountsChangedReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.google.android.gms.auth.permission.GOOGLE_ACCOUNT_CHANGE [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Broadcast Receiver (com.google.android.finsky.deviceconfig.RemoveAssetReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.android.vending.INTENT_VENDING_ONLY [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Broadcast Receiver (com.google.android.finsky.deviceconfig.ServerNotificationReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.android.vending.INTENT_VENDING_ONLY [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Broadcast Receiver (com.google.android.finsky.simhandler.SimStateReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.billing.iab.InAppBillingService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.billing.iab.FirstPartyInAppBillingService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
Low Service (com.google.android.finsky.billing.legacyservice.BillingAccountService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.android.vending.billing.BILLING_ACCOUNT_SERVICE
protectionLevel: signatureOrSystem [android:exported=true]
A Service is found to be exported, but is protected by a permission. However, the protection level of the permission is set to signatureOrSystem. It is recommended that signature level is used instead. Signature level should suffice for most purposes, and does not depend on where the applications are installed on the device.
High Service (com.google.android.finsky.billing.legacyservice.BillingService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.p2p.PeerAppSharingService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.android.vending.p2p.APP_INSTALL_API
protectionLevel: normal [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission. However, the protection level of the permission is set to normal. This means that a malicious application can request and obtain the permission and interact with the component. If it was set to signature, only applications signed with the same certificate could obtain the permission.
High Service (com.google.android.finsky.setup.PlaySetupService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.android.vending.setup.PLAY_SETUP_SERVICE
protectionLevel: normal [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission. However, the protection level of the permission is set to normal. This means that a malicious application can request and obtain the permission and interact with the component. If it was set to signature, only applications signed with the same certificate could obtain the permission.
High Service (com.google.android.finsky.setup.DseService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.google.android.finsky.permission.DSE
protectionLevel: normal [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission. However, the protection level of the permission is set to normal. This means that a malicious application can request and obtain the permission and interact with the component. If it was set to signature, only applications signed with the same certificate could obtain the permission.
High Service (com.google.android.finsky.setup.PlaySetupServiceV2) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.android.vending.setup.PLAY_SETUP_SERVICE
protectionLevel: normal [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission. However, the protection level of the permission is set to normal. This means that a malicious application can request and obtain the permission and interact with the component. If it was set to signature, only applications signed with the same certificate could obtain the permission.
High Service (com.google.android.finsky.setup.PlayP2pRestoreService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.android.vending.setup.PLAY_SETUP_SERVICE
protectionLevel: normal [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission. However, the protection level of the permission is set to normal. This means that a malicious application can request and obtain the permission and interact with the component. If it was set to signature, only applications signed with the same certificate could obtain the permission.
Low Service (com.google.android.finsky.setup.notifiers.SetupWizardProgressService) is Protected by a permission.
Permission: com.android.vending.setup.PLAY_PROGRESS_BIND
protectionLevel: signature[android:exported=true]
A Service is found to be exported, but is protected by permission.
High Service (com.google.android.finsky.assetmoduleservice.AssetModuleService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.splitinstallservice.SplitInstallService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High TaskAffinity is set for Activity
(com.google.android.finsky.splitinstallservice.SplitInstallConfirmationDialogActivity)
If taskAffinity is set, then other application could read the Intents sent to Activities belonging to another task. Always use the default setting keeping the affinity as the package name in order to prevent sensitive information inside sent or received Intents from being read by another application.
High TaskAffinity is set for Activity
(com.google.android.finsky.splitinstallservice.SplitInstallRestartSplashScreenActivity)
If taskAffinity is set, then other application could read the Intents sent to Activities belonging to another task. Always use the default setting keeping the affinity as the package name in order to prevent sensitive information inside sent or received Intents from being read by another application.
High TaskAffinity is set for Activity
(com.google.android.finsky.installservice.BlockingUpdateFlowActivity)
If taskAffinity is set, then other application could read the Intents sent to Activities belonging to another task. Always use the default setting keeping the affinity as the package name in order to prevent sensitive information inside sent or received Intents from being read by another application.
High TaskAffinity is set for Activity
(com.google.android.finsky.installservice.NonBlockingUpdateFlowDialogActivity)
If taskAffinity is set, then other application could read the Intents sent to Activities belonging to another task. Always use the default setting keeping the affinity as the package name in order to prevent sensitive information inside sent or received Intents from being read by another application.
High TaskAffinity is set for Activity
(com.google.android.finsky.installservice.UpdateSplashScreenActivity)
If taskAffinity is set, then other application could read the Intents sent to Activities belonging to another task. Always use the default setting keeping the affinity as the package name in order to prevent sensitive information inside sent or received Intents from being read by another application.
High Service (com.google.android.finsky.services.MarketCatalogService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.services.ReviewsService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.contentfilterui.ContentFiltersService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.services.DetailsService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.appdiscoveryservice.AppDiscoveryService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.android.vending.appdiscoveryservice.permission.ACCESS_APP_DISCOVERY_SERVICE
protectionLevel: normal [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission. However, the protection level of the permission is set to normal. This means that a malicious application can request and obtain the permission and interact with the component. If it was set to signature, only applications signed with the same certificate could obtain the permission.
High Broadcast Receiver (com.google.android.finsky.recoverymode.download.impl.RecoveryModeDownloadBroadcastReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Broadcast Receiver (com.google.android.finsky.verifier.impl.PackageVerificationReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: android.permission.BIND_PACKAGE_VERIFIER [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Service (com.google.android.finsky.verifier.impl.PackageVerificationApiService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
Low Activity (com.google.android.finsky.verifier.impl.ConsentDialog) is Protected by a permission.
Permission: com.google.android.vending.verifier.ACCESS_VERIFIER
protectionLevel: signature[android:exported=true]
An Activity is found to be exported, but is protected by permission.
High Activity (com.google.android.finsky.protect.impl.PlayProtectHomeDeepLinkActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.services.PlayGearheadService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.services.PackageUpdateService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.services.AdIdListener) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.zapp.PlayModuleService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.installapi.PlayInstallService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.installservice.InstallService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.installservice.DevTriggeredUpdateService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High TaskAffinity is set for Activity
(com.google.android.finsky.instantapps.EphemeralInstallerActivity)
If taskAffinity is set, then other application could read the Intents sent to Activities belonging to another task. Always use the default setting keeping the affinity as the package name in order to prevent sensitive information inside sent or received Intents from being read by another application.
High TaskAffinity is set for Activity
(com.google.android.finsky.instantappsquickinstall.InstantAppsInstallEntryActivity)
If taskAffinity is set, then other application could read the Intents sent to Activities belonging to another task. Always use the default setting keeping the affinity as the package name in order to prevent sensitive information inside sent or received Intents from being read by another application.
High Activity (com.google.android.finsky.instantappsquickinstall.InstantAppsInstallEntryActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High TaskAffinity is set for Activity
(com.google.android.finsky.instantappsquickinstall.InstantAppsInstallDialogActivity)
If taskAffinity is set, then other application could read the Intents sent to Activities belonging to another task. Always use the default setting keeping the affinity as the package name in order to prevent sensitive information inside sent or received Intents from being read by another application.
High TaskAffinity is set for Activity
(com.google.android.finsky.instantappsquickinstall.InstantAppsInstallProgressActivity)
If taskAffinity is set, then other application could read the Intents sent to Activities belonging to another task. Always use the default setting keeping the affinity as the package name in order to prevent sensitive information inside sent or received Intents from being read by another application.
High TaskAffinity is set for Activity
(com.google.android.finsky.instantlaunchapi.InstantLauncherActivity)
If taskAffinity is set, then other application could read the Intents sent to Activities belonging to another task. Always use the default setting keeping the affinity as the package name in order to prevent sensitive information inside sent or received Intents from being read by another application.
High Activity (com.google.android.finsky.instantlaunchapi.InstantLauncherActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.google.android.finsky.instantapps.appmanagement.InstantAppRemoveMonitor) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.google.android.finsky.instantapps.PhenotypeUpdateReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.google.android.gms.permission.PHENOTYPE_UPDATE_BROADCAST [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Broadcast Receiver (com.google.android.finsky.instantapps.dna.ArchiveDownloadBroadcastReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
Low Broadcast Receiver (com.google.android.finsky.instantapps.optinreceiver.OptInStateChangedReceiver) is Protected by a permission.
Permission: com.google.android.finsky.permission.INSTANT_APP_STATE
protectionLevel: signature[android:exported=true]
A Broadcast Receiver is found to be exported, but is protected by permission.
Low Broadcast Receiver (com.google.android.finsky.instantappstossupport.OptInStateChangedReceiver) is Protected by a permission.
Permission: com.google.android.finsky.permission.INSTANT_APP_STATE
protectionLevel: signature[android:exported=true]
A Broadcast Receiver is found to be exported, but is protected by permission.
High Broadcast Receiver (com.google.android.finsky.instantapps.InstantAppsConfigChangeListener) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.instantapps.launchservice.InstantAppsLaunchService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.google.android.finsky.instantappslaunchfeedback.InstantAppsLaunchBroadcastReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.externalreferrer.GetInstallReferrerService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
protectionLevel: normal [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission. However, the protection level of the permission is set to normal. This means that a malicious application can request and obtain the permission and interact with the component. If it was set to signature, only applications signed with the same certificate could obtain the permission.
High Service (com.google.android.finsky.inappreviewservice.InAppReviewService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.enterprisedevicereport.AppStatesService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Content Provider (com.google.android.finsky.addtohomescreen.AddToHomeScreenSettingProvider) is not Protected. [android:exported=true]
A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.permissionrevocation.UnusedAppRestrictionsBackportService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.testerservice.TesterApiService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.shellservice.ProdShellService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: android.permission.DUMP [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Service (com.google.android.finsky.prewarmservice.PrewarmService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.google.android.finsky.systemupdateactivity.SystemUpdateActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity-Alias (com.google.android.finsky.systemupdateactivity.SettingsSecurityEntryPoint) is not Protected. [android:exported=true]
An Activity-Alias is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.google.android.finsky.packageinstaller.AtomicInstallBroadcastReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Content Provider (com.google.android.finsky.slice.PhoneskyContextualCardProvider) is not Protected. [android:exported=true]
A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Content Provider (com.google.android.finsky.slice.protect.ProtectPhaSliceProvider) is not Protected. [android:exported=true]
A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.apperrors.PlayAppErrorsService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.android.vending.APP_ERRORS_SERVICE [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Activity (com.google.android.finsky.applaunch.LaunchAppDeepLinkActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
Low Service (com.google.android.finsky.developergroupidinfo.DeveloperGroupIdInfoService) is Protected by a permission.
Permission: com.google.android.finsky.permission.DEVELOPER_GROUP_ID_INFO
protectionLevel: signature[android:exported=true]
A Service is found to be exported, but is protected by permission.
High Activity (com.google.android.finsky.family.setup.FamilySetupActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.google.android.finsky.gamessetup.GamesSetupActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.integrityservice.IntegrityService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.finsky.ipcservers.main.MainGrpcServerAndroidService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.google.android.wallet.instrumentmanager.redirect.ImFinishAndroidAppRedirectActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (org.chromium.customtabsclient.shared.KeepAliveService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.google.android.libraries.phenotype.client.stable.AccountRemovedBroadcastReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.google.android.libraries.phenotype.client.stable.PhenotypeUpdateBackgroundBroadcastReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.google.android.gms.permission.PHENOTYPE_UPDATE_BROADCAST [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Activity (com.google.android.libraries.social.licenses.LicenseMenuActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.

Browsable activities

Information computed with MobSF.

com.google.android.finsky.activities.MainActivity

Hosts: market.android.com search play.google.com webstoreredirect

Schemes: http:// https:// market://

com.google.android.finsky.activities.MarketDeepLinkHandlerActivity

Hosts: details

Schemes: market://

com.google.android.finsky.protect.impl.PlayProtectHomeDeepLinkActivity

Hosts: play.google.com

Schemes: http:// https://

com.google.android.finsky.instantlaunchapi.InstantLauncherActivity

Hosts: launch

Schemes: market://

com.google.android.finsky.applaunch.LaunchAppDeepLinkActivity

Hosts: play.google.com

Schemes: http:// https://

com.google.android.wallet.instrumentmanager.redirect.ImFinishAndroidAppRedirectActivity

Hosts: return

Schemes: google-orchestration://

Main Activity

Information computed with AndroGuard.

com.android.vending.AssetBrowserActivity

Activities

Information computed with AndroGuard.

com.google.android.finsky.writereview.WriteReviewActivity
com.google.android.finsky.sessiondetailsactivity.SessionDetailsActivity
com.google.android.finsky.inlinevideo.fullscreenactivity.FullscreenYoutubeActivity
com.google.android.finsky.enx.EnxFlowActivity
com.google.android.finsky.activities.MainActivity
com.google.android.finsky.pageframework.overlayactivity.PageControllerOverlayActivity
com.google.android.finsky.billing.acquire.SheetUiBuilderHostActivity
com.google.android.finsky.billing.acquire.LockToPortraitUiBuilderHostActivity
com.google.android.finsky.inlineappinstaller.InlineConsumptionAppInstallerActivity
com.google.android.finsky.billing.ageverification.AgeVerificationActivity
com.google.android.finsky.billing.legacyvr.VrPurchaseActivity
com.google.android.finsky.billing.lightpurchase.LightPurchaseFlowActivity
com.google.android.finsky.activities.InlineAppDetailsDialog
com.google.android.finsky.activities.InlineAppDetailsDialogPrivate
com.google.android.finsky.ratereview.PublicReviewsActivity
com.google.android.finsky.appspermissions.AppsPermissionsActivity
com.google.android.finsky.billing.payments.InstrumentManagerActivity
com.google.android.finsky.paymentmethods.PurchaseManagerActivity
com.google.android.finsky.billing.auth.AuthenticatedWebViewActivity
com.google.android.finsky.billing.myaccount.CancelSubscriptionActivity
com.google.android.finsky.billing.myaccount.ReactivateSubscriptionActivity
com.google.android.finsky.billing.myaccount.ManageSubscriptionActivity
com.google.android.finsky.billing.updatesubscriptioninstrument.UpdateSubscriptionInstrumentActivity
com.google.android.finsky.billing.updatesubscriptioninstrument.UpdateSubscriptionInstrumentPromptActivity
com.google.android.finsky.billing.myaccount.SubscriptionCancelSurveyActivity
com.google.android.finsky.billing.subscription.SubscriptionAskToPauseActivity
com.google.android.finsky.download.MimeTypeActivity
com.google.android.finsky.contentfilterui.ContentFiltersActivity3
com.google.android.finsky.contentfilterui.GaiaPasswordVerificationDialog
com.google.android.finsky.familyremoteescalation.RemoteEscalationApprovalDialog
com.google.android.finsky.billing.legacyauth.PurchaseAuthActivity
com.google.android.finsky.contentfilterui.PinEntryDialog
com.google.android.finsky.accessrestricted.AccessRestrictedActivity
com.google.android.finsky.retailmode.RetailDemoModeActivity
com.google.android.finsky.paymentmethods.SwitchFamilyInstrumentActivity
com.google.android.finsky.uninstallmanager.v2.UninstallManagerActivityV2
com.google.android.finsky.uninstall.v2a.UninstallManagerCleanupActivityV2a
com.google.android.finsky.p2p.PeerAppSharingInstallActivity
com.google.android.finsky.p2p.PeerAppSharingSignInActivity
com.google.android.finsky.p2p.PeerAppSharingUpdatesConsentActivity
com.google.android.finsky.activities.MarketDeepLinkHandlerActivity
com.google.android.finsky.activities.ShowAppInfoActivity
com.google.android.finsky.instantapps.SettingsActivity
com.google.android.finsky.instantapps.ExcludedAppsActivity
com.google.android.finsky.instantapps.SettingsActivityV2
com.google.android.finsky.activities.AppCrashProxy
com.google.android.finsky.tos.TosActivity
com.google.android.finsky.marketingoptin.MarketingOptInActivity
com.google.android.finsky.billing.addresschallenge.AddressChallengeActivity
com.google.android.finsky.settings.GaiaAuthActivity
com.google.android.finsky.activities.DebugActivity
com.google.android.finsky.setupui.SetupWizardSelectDeviceActivity
com.google.android.finsky.setupui.SetupWizardSelectAppsForDeviceActivity
com.google.android.finsky.setupui.VpaSelectionActivity
com.google.android.finsky.setupui.VpaDetailsActivity
com.google.android.finsky.setupui.VpaSelectionOptionalStepActivity
com.google.android.finsky.setupui.RestoreAppsActivity
com.google.android.finsky.setupui.SetupWizardFinalHoldActivity
com.google.android.finsky.appdiscoveryservice.AppDiscoveryLaunchActivity
com.google.android.finsky.screenshotsactivity.ScreenshotsActivityV2
com.google.android.finsky.reviewsactivity.ReviewsActivity
com.google.android.finsky.multiinstall.MultiInstallActivity
com.google.android.finsky.family.management.FamilyMemberSettingsActivity
com.google.android.finsky.playcoreacquisition.PlayCoreAcquisitionActivity
com.google.android.finsky.splitinstallservice.SplitInstallConfirmationDialogActivity
com.google.android.finsky.splitinstallservice.SplitInstallRestartSplashScreenActivity
com.google.android.finsky.installservice.BlockingUpdateFlowActivity
com.google.android.finsky.installservice.NonBlockingUpdateFlowDialogActivity
com.google.android.finsky.installservice.UpdateSplashScreenActivity
com.google.android.finsky.assetmoduleservice.AssetModuleConfirmationDialogActivity
com.google.android.finsky.recoverymode.impl.RecoveryModeActivity
com.google.android.finsky.verifier.impl.PerSourceInstallationConsentDialog
com.google.android.finsky.verifier.impl.PackageWarningDialog
com.google.android.finsky.verifier.impl.ConsentDialog
com.google.android.finsky.protect.impl.PlayProtectHomeDeepLinkActivity
com.google.android.finsky.activities.myapps.RestoreAppsActivity
com.google.android.finsky.instantapps.EphemeralInstallerActivity
com.google.android.finsky.instantappsquickinstall.InstantAppsInstallEntryActivity
com.google.android.finsky.instantappsquickinstall.InstantAppsInstallDialogActivity
com.google.android.finsky.instantappsquickinstall.InstantAppsInstallProgressActivity
com.google.android.finsky.instantlaunchapi.InstantLauncherActivity
com.google.android.finsky.inappreviewdialog.InAppReviewActivity
com.google.android.finsky.unauthenticated.activity.UnauthenticatedMainActivity
com.google.android.finsky.systemupdateactivity.SystemUpdateActivity
com.google.android.finsky.legaltermsactivity.LegalTermsActivity
com.google.android.finsky.applaunch.LaunchAppDeepLinkActivity
com.google.android.finsky.family.setup.FamilySetupActivity
com.google.android.finsky.gamessetup.GamesSetupActivity
com.google.android.finsky.offlinegames.impl.OfflineGamesActivity
com.google.android.gms.gmscompliance.ui.UncertifiedDeviceActivity
com.google.android.gms.common.api.GoogleApiActivity
com.google.android.wallet.instrumentmanager.ui.redirect.ImPopupRedirectActivity
com.google.android.wallet.instrumentmanager.ui.tapandpay.ImShowLockScreenActivity
com.google.android.wallet.instrumentmanager.redirect.ImStartAndroidAppRedirectActivity
com.google.android.wallet.instrumentmanager.redirect.ImFinishAndroidAppRedirectActivity
com.google.android.wallet.redirect.StartAndroidAppRedirectActivity
com.google.android.wallet.ui.common.WebViewFullScreenActivity
com.google.android.libraries.onegoogle.accountmanagement.AddAccountActivity
com.google.android.libraries.onegoogle.accountmenu.accountlayer.AddAccountActivity
com.google.android.libraries.social.licenses.LicenseMenuActivity
com.google.android.libraries.social.licenses.LicenseActivity

Receivers

Information computed with AndroGuard.

com.google.android.finsky.checkin.CheckinReceiver
com.google.android.finsky.tos.TosAckedReceiver
com.google.android.finsky.download.DownloadBroadcastReceiver
com.google.android.finsky.userlanguages.LocaleChangedReceiver
com.google.android.finsky.volley.ClearCacheReceiver
com.google.android.finsky.packagemanager.impl.PackageMonitorReceiverImpl$RegisteredReceiver
com.google.android.finsky.boothandler.BootCompletedReceiver
com.google.android.finsky.rollbackmanager.RollbackReceiver
com.google.android.finsky.setup.RestoreFinishAckedReceiver
com.google.android.finsky.setup.notifiers.PaiNotificationInteractionReceiver
com.google.android.finsky.dsehelper.SearchWidgetDseChangeBroadcastReceiver
com.google.android.finsky.setup.LauncherConfigurationReceiver
com.google.android.finsky.accounts.impl.AccountsChangedReceiver
com.google.android.finsky.deviceconfig.RemoveAssetReceiver
com.google.android.finsky.deviceconfig.ServerNotificationReceiver
com.google.android.finsky.simhandler.SimStateReceiver
com.google.android.finsky.recoverymode.download.impl.RecoveryModeDownloadBroadcastReceiver
com.google.android.finsky.scheduler.FallbackReceiver
com.google.android.finsky.verifier.impl.PackageVerificationReceiver
com.google.android.finsky.verifier.impl.VerifyInstalledPackagesReceiver
com.google.android.finsky.verifier.impl.SingleUserSettingsReceiver
com.google.android.finsky.notification.impl.NotificationReceiver
com.google.android.finsky.notification.impl.NotificationSettingsBroadcastReceiver
com.google.android.finsky.instantapps.appmanagement.InstantAppRemoveMonitor
com.google.android.finsky.instantapps.PhenotypeUpdateReceiver
com.google.android.finsky.instantapps.dna.ArchiveDownloadBroadcastReceiver
com.google.android.finsky.instantapps.optinreceiver.OptInStateChangedReceiver
com.google.android.finsky.instantappstossupport.OptInStateChangedReceiver
com.google.android.finsky.instantapps.PackageReplacedReceiver
com.google.android.finsky.instantapps.ContentFilterUpdatedReceiver
com.google.android.finsky.instantapps.InstantAppsConfigChangeListener
com.google.android.finsky.instantappslaunchfeedback.InstantAppsLaunchBroadcastReceiver
com.google.android.finsky.instantapps.cachedlaunchreceiver.CachedLaunchReceiver
com.google.android.finsky.devicemanagement.receiver.DeviceManagementReceiver
com.google.android.finsky.downloadservice.DownloadNotificationActionReceiver
com.google.android.finsky.downloadservice.DownloadRetryActionReceiver
com.google.android.finsky.downloadserviceclient.DownloadServiceReceiver
com.google.android.finsky.downloadserviceclient.DownloadServiceBackgroundReceiver
com.google.android.finsky.packageinstaller.AtomicInstallBroadcastReceiver
com.google.android.finsky.systemupdate.receivers.UnattendedUpdatePreparedReceiver
com.google.android.finsky.systemupdate.receivers.RebootReadinessReceiver
com.google.android.gms.measurement.AppMeasurementReceiver
com.google.android.libraries.phenotype.client.stable.AccountRemovedBroadcastReceiver
com.google.android.libraries.phenotype.client.stable.PhenotypeUpdateBackgroundBroadcastReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

Information computed with AndroGuard.

com.google.android.libraries.phenotype.registration.PhenotypeMetadataHolderService
com.google.android.finsky.services.LicensingService
com.google.android.finsky.setup.RestoreServiceV2
com.google.android.finsky.setup.VpaService
com.google.android.finsky.wearsupport.WearSupportService
com.google.android.finsky.wearsupport.WearChangeListenerService
com.google.android.finsky.deviceconfig.PhoneskyFirebaseMessagingService
com.google.android.finsky.billing.iab.InAppBillingService
com.google.android.finsky.billing.iab.FirstPartyInAppBillingService
com.google.android.finsky.billing.legacyservice.BillingAccountService
com.google.android.finsky.billing.legacyservice.BillingService
com.google.android.finsky.p2p.PeerAppSharingService
com.google.android.finsky.setup.PlaySetupService
com.google.android.finsky.setup.DseService
com.google.android.finsky.setup.PlaySetupServiceV2
com.google.android.finsky.setup.PlayP2pRestoreService
com.google.android.finsky.setup.notifiers.SetupWizardProgressService
com.google.android.finsky.assetmoduleservice.AssetModuleService
com.google.android.finsky.splitinstallservice.SplitInstallService
com.google.android.finsky.services.MarketCatalogService
com.google.android.finsky.services.ReviewsService
com.google.android.finsky.contentfilterui.ContentFiltersService
com.google.android.finsky.services.DetailsService
com.google.android.finsky.appdiscoveryservice.AppDiscoveryService
com.google.android.finsky.recoverymode.safeselfupdate.SafeSelfUpdateService
com.google.android.finsky.emergencyselfupdate.EmergencySelfUpdateService
com.google.android.finsky.foregroundcoordinator.impl.ForegroundCoordinatorService
com.google.android.finsky.verifier.impl.PackageVerificationService
com.google.android.finsky.verifier.impl.PackageVerificationApiService
com.google.android.finsky.verifier.impl.SingleUserSettingsService
com.google.android.finsky.verifier.impl.settings.GlobalSharedPrefService
com.google.android.finsky.installer.MultiUserCoordinatorService
com.google.android.finsky.crossprofile.ProfileStateService
com.google.android.finsky.crossprofile.CrossProfileService
com.google.android.finsky.services.PlayGearheadService
com.google.android.finsky.services.PackageUpdateService
com.google.android.finsky.services.AdIdListener
com.google.android.finsky.zapp.PlayModuleService
com.google.android.finsky.installapi.PlayInstallService
com.google.android.finsky.installservice.InstallService
com.google.android.finsky.installservice.DevTriggeredUpdateService
com.google.android.finsky.instantapps.PhenotypeUpdateService
com.google.android.finsky.instantapps.InstantAppHygieneService
com.google.android.finsky.instantappsbackendclient.impl.UpdateContentFilterJob
com.google.android.finsky.instantapps.InstantAppsLoggingService
com.google.android.finsky.instantapps.InstantAppsSharedPreferencesService
com.google.android.finsky.instantapps.appmanagement.AppManagementService
com.google.android.finsky.headless.GmsCoreUpdateService
com.google.android.finsky.instantapps.metrics.LogFlushJob
com.google.android.finsky.instantapps.statussync.EnabledStatusSyncService
com.google.android.finsky.instantapps.dna.ArchivePrefetchService
com.google.android.finsky.instantapps.hint.AppPreloadHygieneService
com.google.android.finsky.instantapps.launchservice.InstantAppsLaunchService
com.google.android.finsky.externalreferrer.GetInstallReferrerService
com.google.android.finsky.inappreviewservice.InAppReviewService
com.google.android.finsky.enterprisedevicereport.AppStatesService
com.google.android.finsky.downloadservice.DownloadService
com.google.android.finsky.permissionrevocation.UnusedAppRestrictionsBackportService
com.google.android.finsky.testerservice.TesterApiService
com.google.android.finsky.shellservice.ProdShellService
com.google.android.finsky.prewarmservice.PrewarmService
com.google.android.finsky.apperrors.PlayAppErrorsService
com.google.android.finsky.dataloader.ProductionDataLoaderService
com.google.android.finsky.dataloader.PhoneskyDataLoaderService
com.google.android.finsky.developergroupidinfo.DeveloperGroupIdInfoService
com.google.android.finsky.integrityservice.IntegrityService
com.google.android.finsky.ipcservers.background.BackgroundGrpcServerAndroidService
com.google.android.finsky.ipcservers.instantapps.InstantAppsGrpcServerAndroidService
com.google.android.finsky.ipcservers.main.MainGrpcServerAndroidService
com.google.android.finsky.p2pservice.P2pService
com.google.android.finsky.scheduler.process.backgroundimpl.PhoneskyJobServiceBackground
com.google.android.finsky.scheduler.process.backgroundimpl.AlarmManagerServiceBackground
com.google.android.finsky.scheduler.process.mainimpl.PhoneskyJobServiceMain
com.google.android.finsky.scheduler.process.mainimpl.AlarmManagerServiceMain
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.firebase.components.ComponentDiscoveryService
org.chromium.customtabsclient.shared.KeepAliveService
com.google.android.libraries.directboot.DirectBootHelperService
com.google.firebase.messaging.FirebaseMessagingService

Sample timeline

Oldest file found in APK Jan. 1, 1981, 1:01 a.m.
Latest file found in APK Jan. 1, 1981, 1:01 a.m.
Certificate valid not before Aug. 21, 2008, 11:13 p.m.
First submission on VT Sept. 14, 2021, 8:36 p.m.
Last submission on VT Sept. 26, 2021, 11:51 p.m.
Upload on Pithus Oct. 7, 2021, 11:52 p.m.
Certificate valid not after Jan. 7, 2036, 11:13 p.m.

NIAP analysis

Information computed with MobSF.

FCS_RBG_EXT.1.1 The application implement DRBG functionality for its cryptographic operations.
Random Bit Generation Services
FCS_STO_EXT.1.1 The application does not store any credentials to non-volatile memory.
Storage of Credentials
FCS_CKM_EXT.1.1 The application implement asymmetric key generation.
Cryptographic Key Generation Services
FDP_DEC_EXT.1.1 The application has access to ['location', 'bluetooth', 'network connectivity', 'NFC'].
Access to Platform Resources
FDP_DEC_EXT.1.2 The application has access to ['address book'].
Access to Platform Resources
FDP_NET_EXT.1.1 The application has user/application initiated network communications.
Network Communications
FDP_DAR_EXT.1.1 The application implement functionality to encrypt sensitive data in non-volatile memory.
Encryption Of Sensitive Application Data
FMT_MEC_EXT.1.1 The application invoke the mechanisms recommended by the platform vendor for storing and setting configuration options.
Supported Configuration Mechanism
FTP_DIT_EXT.1.1 The application does encrypt some transmitted data with HTTPS/TLS/SSH between itself and another trusted IT product.
Protection of Data in Transit
FCS_RBG_EXT.2.1
FCS_RBG_EXT.2.2
The application perform all deterministic random bit generation (DRBG) services in accordance with NIST Special Publication 800-90A using Hash_DRBG. The deterministic RBG is seeded by an entropy source that accumulates entropy from a platform-based DRBG and a software-based noise source, with a minimum of 256 bits of entropy at least equal to the greatest security strength (according to NIST SP 800-57) of the keys and hashes that it will generate.
Random Bit Generation from Application
FCS_CKM.1.1(1) The application generate asymmetric cryptographic keys not in accordance with FCS_CKM.1.1(1) using key generation algorithm RSA schemes and cryptographic key sizes of 1024-bit or lower.
Cryptographic Asymmetric Key Generation
FCS_COP.1.1(1) The application perform encryption/decryption in accordance with a specified cryptographic algorithm AES-CBC (as defined in NIST SP 800-38A) mode or AES-GCM (as defined in NIST SP 800-38D) and cryptographic key sizes 256-bit/128-bit.
Cryptographic Operation - Encryption/Decryption
FCS_COP.1.1(2) The application perform cryptographic hashing services not in accordance with FCS_COP.1.1(2) and uses the cryptographic algorithm RC2/RC4/MD4/MD5.
Cryptographic Operation - Hashing
FCS_COP.1.1(3) The application perform cryptographic signature services (generation and verification) in accordance with a specified cryptographic algorithm RSA schemes using cryptographic key sizes of 2048-bit or greater.
Cryptographic Operation - Signing
FCS_HTTPS_EXT.1.1 The application implement the HTTPS protocol that complies with RFC 2818.
HTTPS Protocol
FCS_HTTPS_EXT.1.2 The application implement HTTPS using TLS.
HTTPS Protocol
FCS_HTTPS_EXT.1.3 The application notify the user and not establish the connection or request application authorization to establish the connection if the peer certificate is deemed invalid.
HTTPS Protocol
FIA_X509_EXT.1.1 The application invoked platform-provided functionality to validate certificates in accordance with the following rules: ['The certificate path must terminate with a trusted CA certificate', 'The application validate the revocation status of the certificate using the Online Certificate Status Protocol (OCSP) as specified in RFC 2560 or a Certificate Revocation List (CRL) as specified in RFC 5759 or an OCSP TLS Status Request Extension (i.e., OCSP stapling) as specified in RFC 6066'].
X.509 Certificate Validation
FIA_X509_EXT.2.1 The application use X.509v3 certificates as defined by RFC 5280 to support authentication for HTTPS , TLS.
X.509 Certificate Authentication
FIA_X509_EXT.2.2 When the application cannot establish a connection to determine the validity of a certificate, the application allow the administrator to choose whether to accept the certificate in these cases or accept the certificate ,or not accept the certificate.
X.509 Certificate Authentication
FPT_TUD_EXT.2.1 The application shall be distributed using the format of the platform-supported package manager.
Integrity for Installation and Update
FCS_CKM.1.1(2) The application shall generate symmetric cryptographic keys using a Random Bit Generator as specified in FCS_RBG_EXT.1 and specified cryptographic key sizes 128 bit or 256 bit.
Cryptographic Symmetric Key Generation

Code analysis

Information computed with MobSF.

High
CVSS:7.5
The App uses an insecure Random Number Generator.
MASVS: MSTG-CRYPTO-6
CWE-330 Use of Insufficiently Random Values
M5: Insufficient Cryptography
Files:
 defpackage/ardj.java
defpackage/aokv.java
defpackage/sjf.java
defpackage/aorj.java
defpackage/alcr.java
defpackage/akuw.java
defpackage/aqzz.java
defpackage/alcg.java
defpackage/aol.java
defpackage/alcs.java
defpackage/aoyu.java
defpackage/xj.java
j$/util/concurrent/ThreadLocalRandom.java
defpackage/aokw.java
defpackage/fax.java
defpackage/ahye.java
defpackage/auyh.java
defpackage/arat.java
defpackage/agwb.java
defpackage/avdq.java
defpackage/ahru.java
defpackage/aoyw.java
defpackage/ygu.java
defpackage/aqzu.java
defpackage/aiia.java
defpackage/yov.java
defpackage/avpn.java
defpackage/aoyz.java
defpackage/ajim.java
defpackage/ardw.java
defpackage/bec.java
defpackage/aokt.java
defpackage/afkd.java
defpackage/afqc.java
defpackage/arch.java
defpackage/auyc.java
defpackage/aplv.java
defpackage/auyf.java
defpackage/avtc.java
defpackage/tyg.java
defpackage/dat.java
defpackage/alcu.java
defpackage/sji.java
defpackage/alcd.java
j$/util/List.java
defpackage/avgg.java
defpackage/aohr.java
defpackage/awya.java
defpackage/eiy.java
defpackage/acpm.java
defpackage/pcd.java
defpackage/dcq.java
defpackage/anpp.java
defpackage/aoyx.java
defpackage/arbu.java
defpackage/arcc.java
defpackage/avpc.java
defpackage/akcc.java
defpackage/eqi.java
defpackage/arbl.java
defpackage/nby.java
defpackage/eor.java
defpackage/aoej.java
defpackage/aola.java
defpackage/aodz.java
defpackage/avtd.java
defpackage/ardb.java
defpackage/iac.java
defpackage/avpr.java
defpackage/eid.java
defpackage/sjn.java
defpackage/arbc.java
defpackage/yd.java
defpackage/alay.java
defpackage/awlv.java
Low
CVSS:7.5
The App logs information. Sensitive information should never be logged.
MASVS: MSTG-STORAGE-3
CWE-532 Insertion of Sensitive Information into Log File
Files:
 defpackage/hur.java
defpackage/zdp.java
defpackage/vjr.java
defpackage/icm.java
defpackage/afjl.java
defpackage/achp.java
defpackage/oql.java
defpackage/aexw.java
defpackage/agjb.java
defpackage/adax.java
defpackage/ntc.java
defpackage/hgq.java
defpackage/aefu.java
defpackage/sgp.java
defpackage/szx.java
defpackage/afpy.java
defpackage/amsa.java
defpackage/qwl.java
defpackage/it.java
defpackage/xje.java
defpackage/cvw.java
defpackage/afkr.java
defpackage/ver.java
defpackage/yiz.java
defpackage/sfc.java
defpackage/arkg.java
defpackage/cn.java
defpackage/zp.java
defpackage/pdn.java
defpackage/aejv.java
defpackage/aiqo.java
defpackage/kyz.java
defpackage/ahvr.java
defpackage/anmo.java
defpackage/gtv.java
defpackage/ihm.java
defpackage/amum.java
defpackage/ovl.java
defpackage/yaa.java
defpackage/angb.java
defpackage/qjj.java
defpackage/wdb.java
defpackage/aejo.java
defpackage/xfk.java
defpackage/goo.java
defpackage/rff.java
defpackage/ajow.java
defpackage/nfi.java
defpackage/anhh.java
defpackage/aec.java
defpackage/xpr.java
defpackage/arja.java
defpackage/wuu.java
defpackage/ahpl.java
defpackage/aimn.java
defpackage/kfy.java
defpackage/ybg.java
defpackage/dyh.java
defpackage/ppc.java
defpackage/wsp.java
defpackage/aeku.java
defpackage/hee.java
defpackage/inz.java
defpackage/hrw.java
defpackage/xwg.java
defpackage/noj.java
defpackage/tqf.java
defpackage/nzi.java
defpackage/hxm.java
defpackage/afkk.java
defpackage/ork.java
defpackage/aprp.java
defpackage/ewi.java
defpackage/fjy.java
defpackage/alkw.java
defpackage/agkv.java
defpackage/aore.java
defpackage/lve.java
defpackage/jqr.java
defpackage/fkq.java
defpackage/go.java
defpackage/kts.java
defpackage/fua.java
defpackage/ahnw.java
defpackage/nez.java
defpackage/nxk.java
defpackage/nqh.java
defpackage/gjo.java
defpackage/off.java
defpackage/eih.java
defpackage/rjn.java
defpackage/xva.java
defpackage/dcs.java
defpackage/qhe.java
defpackage/cpc.java
defpackage/qkp.java
defpackage/aioc.java
defpackage/kbq.java
defpackage/uzr.java
defpackage/goh.java
defpackage/ibn.java
defpackage/fi.java
defpackage/ndt.java
defpackage/idz.java
defpackage/hqj.java
defpackage/wwj.java
defpackage/hcp.java
defpackage/aklr.java
defpackage/iob.java
defpackage/cwf.java
defpackage/ncu.java
defpackage/osq.java
defpackage/agji.java
defpackage/xgc.java
defpackage/xyl.java
defpackage/yct.java
defpackage/qir.java
defpackage/ioi.java
defpackage/nbv.java
defpackage/xzr.java
defpackage/flw.java
defpackage/ybu.java
defpackage/qo.java
defpackage/afqh.java
defpackage/amjn.java
defpackage/xxm.java
defpackage/otw.java
defpackage/adyi.java
defpackage/alhe.java
defpackage/apqj.java
defpackage/lbn.java
defpackage/eqq.java
defpackage/nst.java
defpackage/airg.java
defpackage/ahjm.java
defpackage/xky.java
defpackage/faj.java
defpackage/rpf.java
defpackage/nyq.java
defpackage/hio.java
defpackage/flp.java
defpackage/ahpz.java
defpackage/hjs.java
defpackage/owb.java
defpackage/hcb.java
defpackage/qyj.java
defpackage/rge.java
defpackage/akho.java
defpackage/abrl.java
defpackage/khw.java
defpackage/yde.java
defpackage/allh.java
defpackage/agjy.java
defpackage/nnk.java
defpackage/acda.java
defpackage/arhc.java
defpackage/hzd.java
defpackage/afit.java
defpackage/fuq.java
defpackage/jof.java
defpackage/ktl.java
defpackage/xjs.java
defpackage/xwn.java
defpackage/amqe.java
defpackage/psg.java
defpackage/hqc.java
defpackage/gdp.java
defpackage/vlp.java
defpackage/aeyf.java
defpackage/ijr.java
defpackage/kbh.java
defpackage/ikv.java
defpackage/reu.java
defpackage/ahtv.java
defpackage/tjo.java
defpackage/ggd.java
defpackage/nsr.java
defpackage/njj.java
defpackage/sdn.java
defpackage/qhs.java
defpackage/ar.java
defpackage/vuh.java
defpackage/iko.java
defpackage/gsy.java
defpackage/wvk.java
defpackage/aehz.java
defpackage/accw.java
defpackage/amrb.java
defpackage/ydl.java
defpackage/aghf.java
defpackage/appf.java
defpackage/fy.java
defpackage/xio.java
defpackage/yaq.java
defpackage/agss.java
defpackage/oao.java
defpackage/yjy.java
defpackage/vey.java
defpackage/vjd.java
defpackage/fuh.java
defpackage/vob.java
defpackage/aleq.java
defpackage/apgs.java
defpackage/absi.java
defpackage/oqz.java
defpackage/nub.java
defpackage/ghl.java
defpackage/ivg.java
defpackage/ppl.java
defpackage/xnm.java
defpackage/ahii.java
defpackage/afdv.java
defpackage/fiu.java
defpackage/accy.java
defpackage/apgq.java
defpackage/mov.java
defpackage/nnf.java
defpackage/hgx.java
defpackage/wmx.java
org/conscrypt/Platform.java
defpackage/ahld.java
defpackage/nqf.java
defpackage/fk.java
defpackage/vuj.java
defpackage/oih.java
defpackage/fli.java
defpackage/hpy.java
defpackage/tj.java
defpackage/altz.java
defpackage/deo.java
defpackage/rlj.java
defpackage/kfr.java
defpackage/mot.java
defpackage/nce.java
defpackage/pul.java
defpackage/amjp.java
defpackage/uvq.java
defpackage/gjx.java
defpackage/afpk.java
defpackage/ovz.java
defpackage/xpy.java
defpackage/kfk.java
defpackage/yax.java
defpackage/hw.java
defpackage/oqu.java
defpackage/gme.java
defpackage/pnn.java
defpackage/xnt.java
defpackage/ovs.java
defpackage/omk.java
defpackage/ajdz.java
defpackage/aizr.java
defpackage/sxu.java
defpackage/lls.java
defpackage/aksw.java
defpackage/lcd.java
defpackage/nsk.java
defpackage/anng.java
defpackage/ior.java
defpackage/jjf.java
defpackage/rnv.java
defpackage/ajyw.java
defpackage/ajgg.java
defpackage/rle.java
defpackage/nyz.java
defpackage/afio.java
defpackage/gvm.java
defpackage/afrw.java
defpackage/wvm.java
defpackage/fln.java
defpackage/okf.java
defpackage/vvi.java
defpackage/szz.java
defpackage/adxx.java
defpackage/aejm.java
defpackage/abdw.java
defpackage/sph.java
defpackage/ear.java
defpackage/orp.java
defpackage/lwm.java
defpackage/ahpc.java
defpackage/afda.java
defpackage/hhu.java
defpackage/nzy.java
defpackage/kbv.java
defpackage/aiml.java
defpackage/xkt.java
defpackage/wsr.java
defpackage/gzz.java
defpackage/aizg.java
defpackage/aixy.java
defpackage/almz.java
defpackage/dip.java
defpackage/xwb.java
defpackage/enm.java
defpackage/ktx.java
defpackage/qxp.java
defpackage/fro.java
defpackage/agqs.java
defpackage/qxi.java
defpackage/abxd.java
defpackage/afjj.java
defpackage/amgn.java
defpackage/amxc.java
defpackage/rlx.java
defpackage/ncp.java
defpackage/evs.java
defpackage/sra.java
defpackage/iqp.java
defpackage/aime.java
defpackage/awkm.java
defpackage/bjp.java
defpackage/awxs.java
defpackage/ort.java
defpackage/tjc.java
defpackage/ajat.java
defpackage/xjc.java
defpackage/vjp.java
defpackage/ycd.java
defpackage/qtz.java
defpackage/algm.java
defpackage/oqn.java
defpackage/cvu.java
defpackage/ntl.java
defpackage/abdp.java
defpackage/anjy.java
defpackage/alee.java
defpackage/ww.java
defpackage/ajxv.java
defpackage/ahiu.java
defpackage/gjq.java
defpackage/gzs.java
defpackage/kcb.java
defpackage/laj.java
defpackage/noe.java
defpackage/akrj.java
defpackage/suo.java
defpackage/abab.java
defpackage/ambj.java
defpackage/fmo.java
defpackage/tyq.java
defpackage/nts.java
defpackage/ahsi.java
defpackage/arhu.java
defpackage/qpb.java
defpackage/ctt.java
defpackage/omm.java
defpackage/nye.java
defpackage/zbm.java
defpackage/kbo.java
defpackage/vjw.java
defpackage/soi.java
defpackage/ydu.java
defpackage/ahin.java
defpackage/xvo.java
defpackage/aftx.java
defpackage/aloo.java
defpackage/vjm.java
defpackage/amht.java
defpackage/rko.java
defpackage/ilw.java
defpackage/ainv.java
defpackage/ales.java
defpackage/absk.java
defpackage/qif.java
defpackage/ahgt.java
defpackage/wng.java
defpackage/afcn.java
defpackage/imo.java
defpackage/kyq.java
defpackage/aggp.java
defpackage/afeg.java
defpackage/giw.java
defpackage/abfw.java
defpackage/wsk.java
defpackage/arjc.java
defpackage/kzr.java
defpackage/hgo.java
defpackage/pbw.java
defpackage/suh.java
defpackage/rfk.java
defpackage/nzk.java
defpackage/rkh.java
defpackage/wdr.java
defpackage/pka.java
defpackage/oah.java
defpackage/nnv.java
defpackage/ykq.java
defpackage/aloh.java
defpackage/t.java
defpackage/xf.java
defpackage/lx.java
defpackage/afy.java
defpackage/agdl.java
defpackage/aduq.java
defpackage/imv.java
defpackage/edq.java
defpackage/ahqp.java
defpackage/iwk.java
defpackage/ajxh.java
defpackage/agse.java
defpackage/wtq.java
defpackage/ajza.java
defpackage/ri.java
defpackage/agso.java
defpackage/pph.java
defpackage/yao.java
defpackage/nbt.java
defpackage/aemz.java
defpackage/sei.java
defpackage/vyi.java
defpackage/kna.java
defpackage/etc.java
defpackage/agrv.java
defpackage/ity.java
defpackage/xvh.java
defpackage/fg.java
defpackage/alhp.java
defpackage/ec.java
defpackage/hbv.java
defpackage/rio.java
defpackage/yca.java
defpackage/apqq.java
defpackage/ahxw.java
defpackage/nyv.java
defpackage/hmg.java
defpackage/nsv.java
defpackage/tbr.java
defpackage/lbg.java
defpackage/tku.java
defpackage/adyg.java
defpackage/hfy.java
defpackage/whh.java
defpackage/kta.java
defpackage/oyw.java
org/conscrypt/ct/CTVerifier.java
defpackage/hvj.java
defpackage/kcl.java
defpackage/elq.java
defpackage/aceg.java
defpackage/ijp.java
defpackage/aggi.java
defpackage/pmv.java
defpackage/pkh.java
defpackage/amqc.java
defpackage/onc.java
defpackage/jjj.java
defpackage/xvl.java
defpackage/ahmj.java
defpackage/viq.java
defpackage/kce.java
defpackage/hmk.java
defpackage/flr.java
defpackage/apqu.java
defpackage/ynn.java
defpackage/oeg.java
defpackage/syy.java
defpackage/eut.java
defpackage/orm.java
defpackage/cnu.java
defpackage/qmw.java
defpackage/afdd.java
defpackage/xif.java
defpackage/hvc.java
defpackage/mpg.java
defpackage/fbe.java
defpackage/yog.java
defpackage/brp.java
defpackage/rhk.java
defpackage/agsv.java
defpackage/xwl.java
defpackage/xye.java
defpackage/ajyl.java
defpackage/xhp.java
defpackage/nkp.java
defpackage/afhn.java
defpackage/qt.java
defpackage/alnv.java
defpackage/dap.java
defpackage/sul.java
defpackage/ipv.java
defpackage/zxk.java
defpackage/wsn.java
defpackage/kcs.java
defpackage/afjg.java
defpackage/dxy.java
defpackage/yby.java
defpackage/qit.java
defpackage/xp.java
defpackage/up.java
defpackage/owt.java
defpackage/oed.java
defpackage/agiz.java
defpackage/oak.java
defpackage/kbz.java
defpackage/eoj.java
defpackage/abcz.java
defpackage/apqx.java
defpackage/pdl.java
defpackage/kt.java
defpackage/aabk.java
defpackage/nyo.java
defpackage/oum.java
defpackage/abqo.java
defpackage/rmk.java
defpackage/arhg.java
defpackage/koh.java
defpackage/nte.java
defpackage/xwe.java
defpackage/awwm.java
defpackage/ajvs.java
defpackage/eq.java
defpackage/oxm.java
defpackage/cyt.java
defpackage/aggs.java
defpackage/iam.java
defpackage/jqt.java
defpackage/aprg.java
defpackage/sef.java
defpackage/ntv.java
defpackage/ikz.java
defpackage/rmd.java
defpackage/dcw.java
defpackage/fbl.java
defpackage/tkg.java
defpackage/olx.java
defpackage/aiky.java
defpackage/amsf.java
defpackage/xve.java
defpackage/aeiw.java
defpackage/wi.java
defpackage/out.java
defpackage/nos.java
defpackage/xjp.java
defpackage/ahvw.java
defpackage/ahdg.java
defpackage/agle.java
defpackage/akrx.java
defpackage/vdx.java
defpackage/dto.java
defpackage/sps.java
defpackage/gim.java
defpackage/aiuu.java
defpackage/ajvl.java
defpackage/ylg.java
defpackage/iwh.java
defpackage/wru.java
defpackage/rhy.java
defpackage/ankh.java
defpackage/iae.java
defpackage/jnl.java
defpackage/hqm.java
defpackage/ohv.java
defpackage/acfh.java
defpackage/aecg.java
defpackage/ssi.java
defpackage/anav.java
defpackage/rhu.java
defpackage/aega.java
defpackage/wst.java
defpackage/tet.java
defpackage/lvi.java
defpackage/au.java
defpackage/aamc.java
defpackage/arjl.java
defpackage/wbi.java
defpackage/afth.java
defpackage/qio.java
defpackage/agvq.java
defpackage/kyv.java
defpackage/gmg.java
defpackage/tg.java
defpackage/yae.java
defpackage/jyj.java
defpackage/aggy.java
defpackage/kag.java
defpackage/apoj.java
defpackage/fqk.java
defpackage/aevo.java
defpackage/vip.java
defpackage/nze.java
defpackage/oyk.java
defpackage/afmk.java
defpackage/eln.java
defpackage/miz.java
defpackage/amhn.java
defpackage/onm.java
defpackage/opq.java
defpackage/omv.java
defpackage/uaa.java
defpackage/svl.java
defpackage/xji.java
defpackage/afjp.java
defpackage/aehg.java
defpackage/fwq.java
defpackage/xxb.java
defpackage/oay.java
defpackage/iuz.java
defpackage/neg.java
defpackage/apqn.java
defpackage/mpa.java
defpackage/lby.java
defpackage/amwf.java
defpackage/byy.java
defpackage/agjt.java
defpackage/aghi.java
defpackage/khr.java
defpackage/gfj.java
defpackage/yom.java
defpackage/coo.java
defpackage/oxt.java
defpackage/vvk.java
defpackage/aize.java
defpackage/nue.java
defpackage/aegw.java
defpackage/ntu.java
defpackage/suf.java
defpackage/nqd.java
defpackage/amvv.java
defpackage/gho.java
defpackage/osm.java
defpackage/mgn.java
defpackage/ahil.java
defpackage/aiku.java
defpackage/rmm.java
defpackage/nso.java
defpackage/ajin.java
defpackage/xws.java
defpackage/ia.java
defpackage/prk.java
defpackage/hxy.java
defpackage/ntg.java
defpackage/ahvu.java
defpackage/ift.java
defpackage/msd.java
defpackage/abqx.java
defpackage/adzz.java
defpackage/amup.java
defpackage/algr.java
defpackage/fgl.java
defpackage/oo.java
defpackage/xhz.java
defpackage/ibc.java
defpackage/yem.java
defpackage/kdj.java
defpackage/dyd.java
defpackage/hws.java
defpackage/oyc.java
defpackage/wsl.java
defpackage/aebw.java
defpackage/ahhu.java
defpackage/aemg.java
defpackage/ggx.java
defpackage/ful.java
defpackage/xya.java
defpackage/aglc.java
defpackage/iiw.java
defpackage/hox.java
defpackage/agvi.java
defpackage/nrb.java
defpackage/ahgo.java
defpackage/aego.java
defpackage/fmq.java
defpackage/sun.java
defpackage/aela.java
defpackage/aegi.java
defpackage/hce.java
defpackage/nsa.java
defpackage/ft.java
defpackage/cc.java
defpackage/awwv.java
defpackage/ydh.java
defpackage/aceb.java
defpackage/goz.java
defpackage/kcd.java
defpackage/ofk.java
defpackage/jjc.java
defpackage/aefj.java
defpackage/lvq.java
defpackage/lbb.java
defpackage/edk.java
defpackage/afeh.java
defpackage/aoom.java
defpackage/ycb.java
defpackage/ylj.java
defpackage/ajyz.java
defpackage/kth.java
defpackage/agiv.java
defpackage/apqv.java
defpackage/aevp.java
defpackage/aleo.java
defpackage/ajwh.java
defpackage/snw.java
defpackage/agli.java
defpackage/agih.java
defpackage/adxa.java
defpackage/vwy.java
defpackage/gkx.java
defpackage/aklt.java
defpackage/swz.java
defpackage/cwd.java
defpackage/ncx.java
defpackage/pnk.java
defpackage/dwp.java
defpackage/pql.java
defpackage/rmg.java
defpackage/hz.java
defpackage/wxd.java
defpackage/ahjz.java
defpackage/adqq.java
defpackage/del.java
defpackage/svk.java
defpackage/ohh.java
defpackage/abru.java
defpackage/wsf.java
defpackage/rme.java
defpackage/amts.java
defpackage/agif.java
defpackage/ahed.java
defpackage/rfp.java
defpackage/alha.java
defpackage/ddo.java
defpackage/ijv.java
defpackage/almp.java
defpackage/agkt.java
defpackage/amwv.java
defpackage/agiw.java
defpackage/da.java
defpackage/agdh.java
defpackage/ybj.java
defpackage/ahuo.java
defpackage/apqh.java
defpackage/hgv.java
defpackage/ahji.java
defpackage/gcw.java
defpackage/wcn.java
defpackage/ahox.java
defpackage/eiy.java
defpackage/oax.java
defpackage/aelx.java
defpackage/afry.java
defpackage/ampp.java
defpackage/qbd.java
defpackage/ncz.java
defpackage/kao.java
defpackage/wur.java
defpackage/arjd.java
defpackage/hag.java
defpackage/vhk.java
defpackage/wuc.java
defpackage/amtq.java
defpackage/xwr.java
defpackage/wdn.java
defpackage/ahmg.java
defpackage/ea.java
defpackage/ahpx.java
defpackage/vxv.java
defpackage/igq.java
defpackage/ots.java
defpackage/hhe.java
defpackage/ged.java
defpackage/dye.java
defpackage/arjf.java
defpackage/odv.java
defpackage/aead.java
defpackage/xgl.java
defpackage/lak.java
defpackage/ahid.java
defpackage/stf.java
defpackage/ovn.java
defpackage/aedg.java
defpackage/aizm.java
defpackage/wrt.java
defpackage/xvd.java
defpackage/amqb.java
defpackage/vwh.java
defpackage/qzr.java
defpackage/srk.java
defpackage/yas.java
defpackage/aghh.java
defpackage/vjn.java
defpackage/nyg.java
defpackage/lwh.java
defpackage/nsp.java
defpackage/amik.java
defpackage/sxi.java
defpackage/aghy.java
defpackage/kog.java
defpackage/allr.java
defpackage/xcz.java
defpackage/ykm.java
defpackage/wbw.java
defpackage/xwd.java
defpackage/jif.java
defpackage/wua.java
defpackage/tyl.java
defpackage/akfq.java
defpackage/csr.java
defpackage/ajuy.java
defpackage/hjj.java
defpackage/cyi.java
defpackage/absg.java
defpackage/knb.java
defpackage/aglk.java
defpackage/arhf.java
defpackage/hfx.java
defpackage/nud.java
defpackage/apqm.java
defpackage/cxi.java
defpackage/ahpg.java
defpackage/wro.java
defpackage/geu.java
defpackage/idq.java
defpackage/imy.java
defpackage/loe.java
defpackage/ahoz.java
defpackage/rx.java
defpackage/xhu.java
defpackage/vxq.java
defpackage/whi.java
defpackage/ahli.java
defpackage/aelj.java
defpackage/ktm.java
defpackage/C0000do.java
defpackage/hvk.java
defpackage/tyu.java
defpackage/nqx.java
defpackage/rms.java
defpackage/apqe.java
defpackage/ahjl.java
defpackage/fjt.java
defpackage/amuv.java
defpackage/xlo.java
defpackage/nrd.java
defpackage/yes.java
defpackage/aiuv.java
defpackage/apoh.java
defpackage/aeng.java
defpackage/kdd.java
defpackage/soq.java
defpackage/moz.java
defpackage/yhv.java
defpackage/afis.java
defpackage/abrx.java
defpackage/ods.java
defpackage/xer.java
defpackage/vje.java
defpackage/fnc.java
defpackage/dld.java
defpackage/aksl.java
defpackage/xvg.java
defpackage/ipf.java
defpackage/oap.java
defpackage/xld.java
defpackage/aboj.java
defpackage/sik.java
defpackage/gbr.java
defpackage/emk.java
defpackage/ngu.java
defpackage/xor.java
defpackage/qjd.java
defpackage/imk.java
defpackage/aivm.java
defpackage/xzp.java
defpackage/nr.java
defpackage/wgc.java
defpackage/ajbk.java
defpackage/sgy.java
defpackage/ogv.java
defpackage/til.java
defpackage/kzv.java
defpackage/xna.java
defpackage/agqw.java
defpackage/xwx.java
defpackage/nqm.java
defpackage/aeko.java
defpackage/afqy.java
defpackage/advl.java
defpackage/adyz.java
defpackage/ur.java
defpackage/ndg.java
defpackage/acjs.java
defpackage/wcf.java
defpackage/sdv.java
defpackage/ouk.java
defpackage/koj.java
defpackage/glu.java
defpackage/afty.java
defpackage/ybb.java
defpackage/ohp.java
defpackage/qjl.java
defpackage/wuw.java
defpackage/ahfz.java
defpackage/adwo.java
defpackage/affm.java
defpackage/amre.java
defpackage/amzy.java
defpackage/aips.java
defpackage/xpx.java
defpackage/fct.java
defpackage/ssn.java
defpackage/nzj.java
defpackage/olv.java
defpackage/ajqk.java
defpackage/gdl.java
defpackage/fa.java
defpackage/fbc.java
defpackage/tat.java
defpackage/yov.java
defpackage/idy.java
defpackage/aplm.java
defpackage/wwi.java
defpackage/ahto.java
defpackage/foi.java
defpackage/abrp.java
defpackage/mow.java
defpackage/kcu.java
defpackage/hpe.java
defpackage/aghk.java
defpackage/joa.java
defpackage/aeio.java
defpackage/ssc.java
defpackage/udj.java
defpackage/xlg.java
defpackage/alku.java
defpackage/rij.java
defpackage/ahva.java
defpackage/fmw.java
defpackage/cwl.java
defpackage/appv.java
defpackage/kcj.java
defpackage/sqc.java
defpackage/ajoy.java
defpackage/whq.java
defpackage/yie.java
defpackage/apoe.java
defpackage/aiob.java
defpackage/xka.java
defpackage/gpa.java
defpackage/aizv.java
defpackage/pcq.java
defpackage/nug.java
defpackage/qzj.java
defpackage/cnw.java
defpackage/ei.java
defpackage/aekg.java
defpackage/xxg.java
defpackage/ymv.java
defpackage/ahmr.java
defpackage/xjg.java
defpackage/afnp.java
defpackage/ajyt.java
defpackage/ley.java
defpackage/ote.java
defpackage/anbc.java
defpackage/yje.java
defpackage/wrl.java
defpackage/ahzx.java
defpackage/omh.java
defpackage/gid.java
defpackage/sxf.java
defpackage/irq.java
defpackage/kbu.java
defpackage/appb.java
defpackage/wet.java
defpackage/emh.java
defpackage/afov.java
defpackage/ahgl.java
defpackage/sin.java
defpackage/amcs.java
defpackage/xku.java
defpackage/adit.java
defpackage/pfn.java
defpackage/xzm.java
defpackage/ambb.java
defpackage/mgf.java
defpackage/wrz.java
defpackage/gcl.java
defpackage/nzm.java
defpackage/afse.java
defpackage/vcb.java
defpackage/aacf.java
defpackage/ahko.java
defpackage/dhx.java
defpackage/pjq.java
defpackage/edp.java
defpackage/ahdi.java
defpackage/wg.java
defpackage/amrk.java
defpackage/xid.java
defpackage/yoe.java
defpackage/sek.java
defpackage/fuf.java
defpackage/aefr.java
defpackage/him.java
defpackage/knj.java
defpackage/apls.java
defpackage/lfe.java
defpackage/afcp.java
defpackage/agkn.java
defpackage/vbe.java
defpackage/ahqo.java
defpackage/aiyb.java
defpackage/ggo.java
defpackage/io.java
defpackage/swq.java
defpackage/nym.java
defpackage/aegd.java
defpackage/msl.java
defpackage/gpr.java
defpackage/okb.java
defpackage/nrg.java
defpackage/mji.java
defpackage/iut.java
defpackage/afks.java
defpackage/kys.java
defpackage/agiq.java
defpackage/ihn.java
defpackage/nsx.java
defpackage/aeia.java
defpackage/izw.java
defpackage/dhg.java
defpackage/bi.java
defpackage/adsw.java
defpackage/tpl.java
defpackage/aajl.java
defpackage/ahzg.java
defpackage/tii.java
defpackage/gvx.java
defpackage/fiq.java
defpackage/ahpo.java
defpackage/yd.java
defpackage/abbu.java
defpackage/abqm.java
defpackage/fl.java
defpackage/oke.java
defpackage/kcg.java
defpackage/adwz.java
defpackage/wsz.java
defpackage/az.java
defpackage/hgm.java
defpackage/gkr.java
defpackage/aleu.java
defpackage/tjl.java
defpackage/nrj.java
defpackage/qwg.java
defpackage/apre.java
defpackage/uau.java
defpackage/ajbh.java
defpackage/apps.java
defpackage/wmw.java
defpackage/wcq.java
defpackage/afip.java
defpackage/ivc.java
defpackage/fxz.java
defpackage/ahud.java
defpackage/thz.java
defpackage/nrx.java
defpackage/vjv.java
defpackage/oxy.java
defpackage/kxb.java
defpackage/cpz.java
defpackage/ohb.java
defpackage/tva.java
defpackage/cl.java
defpackage/lfv.java
defpackage/orh.java
defpackage/aplp.java
defpackage/akoz.java
defpackage/ner.java
defpackage/gga.java
defpackage/oks.java
defpackage/abdu.java
defpackage/rhm.java
defpackage/gzx.java
defpackage/affp.java
defpackage/absm.java
defpackage/abnj.java
defpackage/ovy.java
defpackage/ipq.java
defpackage/sah.java
defpackage/kfx.java
defpackage/acsk.java
defpackage/obp.java
defpackage/apqs.java
defpackage/ogb.java
defpackage/dgu.java
defpackage/gyx.java
defpackage/hxv.java
defpackage/flt.java
defpackage/awvy.java
defpackage/cnz.java
defpackage/kbi.java
defpackage/awsy.java
defpackage/hmh.java
defpackage/mlc.java
defpackage/yjq.java
defpackage/ahmb.java
defpackage/xvi.java
defpackage/hzc.java
defpackage/aegl.java
defpackage/apqr.java
defpackage/fq.java
defpackage/hqb.java
defpackage/amhc.java
defpackage/afrv.java
defpackage/owc.java
defpackage/oib.java
defpackage/qyi.java
defpackage/eae.java
defpackage/oeh.java
defpackage/svh.java
defpackage/kco.java
defpackage/allg.java
defpackage/ajmz.java
defpackage/adzw.java
defpackage/aeff.java
defpackage/afch.java
defpackage/nor.java
defpackage/agir.java
defpackage/aghe.java
defpackage/arhd.java
defpackage/rze.java
defpackage/rip.java
defpackage/amii.java
defpackage/rld.java
defpackage/gix.java
defpackage/fhn.java
defpackage/lex.java
defpackage/aehy.java
defpackage/alhm.java
defpackage/yid.java
defpackage/wry.java
defpackage/iwl.java
defpackage/ajxi.java
defpackage/oea.java
defpackage/nsl.java
defpackage/quh.java
defpackage/ariq.java
defpackage/adwe.java
defpackage/dxq.java
defpackage/qyb.java
defpackage/hqi.java
defpackage/lir.java
defpackage/lzg.java
defpackage/amjo.java
defpackage/ssm.java
defpackage/fbh.java
defpackage/yy.java
defpackage/vxd.java
defpackage/agsy.java
defpackage/agjq.java
defpackage/hby.java
defpackage/fj.java
defpackage/miv.java
defpackage/ed.java
defpackage/swn.java
defpackage/xwo.java
defpackage/agce.java
defpackage/ahio.java
defpackage/afqp.java
defpackage/wmy.java
defpackage/irl.java
defpackage/itq.java
defpackage/nqg.java
defpackage/kyd.java
defpackage/alza.java
defpackage/pee.java
defpackage/mso.java
defpackage/mf.java
defpackage/nxl.java
defpackage/typ.java
defpackage/pjl.java
defpackage/aena.java
defpackage/abrr.java
defpackage/ahtn.java
defpackage/sts.java
defpackage/agtx.java
defpackage/kbp.java
defpackage/nua.java
defpackage/whd.java
defpackage/oau.java
defpackage/abrd.java
defpackage/gsq.java
defpackage/xkz.java
defpackage/njk.java
defpackage/qeb.java
defpackage/abql.java
defpackage/nyr.java
defpackage/oxb.java
defpackage/dlu.java
defpackage/yjx.java
defpackage/xig.java
defpackage/fpp.java
defpackage/anbj.java
defpackage/xwh.java
defpackage/aejg.java
defpackage/suy.java
defpackage/awsr.java
defpackage/ppk.java
defpackage/gpf.java
defpackage/aekt.java
defpackage/aler.java
defpackage/sva.java
defpackage/pcp.java
defpackage/bp.java
defpackage/frn.java
defpackage/ycu.java
defpackage/hhh.java
defpackage/gog.java
defpackage/oan.java
defpackage/ylv.java
defpackage/amto.java
defpackage/owj.java
defpackage/qil.java
defpackage/fez.java
defpackage/mpk.java
defpackage/dyi.java
defpackage/tve.java
defpackage/vbv.java
defpackage/aley.java
defpackage/wsx.java
defpackage/ahtu.java
defpackage/aebe.java
defpackage/obm.java
defpackage/ykw.java
defpackage/aapb.java
defpackage/agsk.java
defpackage/xhh.java
defpackage/aejn.java
defpackage/ijq.java
defpackage/stz.java
defpackage/cv.java
defpackage/nsz.java
defpackage/ankk.java
defpackage/pky.java
defpackage/ahso.java
defpackage/agja.java
defpackage/iqm.java
defpackage/gjg.java
defpackage/ntb.java
defpackage/aloi.java
defpackage/kzc.java
defpackage/abct.java
defpackage/agsd.java
defpackage/wpt.java
defpackage/fxr.java
defpackage/xzz.java
defpackage/ajaw.java
defpackage/kqb.java
defpackage/wsh.java
defpackage/ahvq.java
defpackage/soc.java
defpackage/yab.java
defpackage/icl.java
defpackage/vjs.java
defpackage/iup.java
defpackage/sxd.java
defpackage/ony.java
defpackage/oev.java
defpackage/sup.java
defpackage/wnj.java
defpackage/ajau.java
defpackage/ewx.java
defpackage/ipi.java
defpackage/jsx.java
defpackage/amun.java
defpackage/lme.java
defpackage/ucc.java
defpackage/ahvx.java
defpackage/thm.java
defpackage/nzx.java
defpackage/rhx.java
defpackage/qjp.java
defpackage/wgs.java
defpackage/aftk.java
defpackage/jgc.java
defpackage/nka.java
defpackage/arkm.java
defpackage/yjc.java
defpackage/nht.java
defpackage/nyi.java
defpackage/amus.java
defpackage/xyk.java
defpackage/eqi.java
defpackage/qua.java
defpackage/aiuj.java
defpackage/ahxh.java
defpackage/wsa.java
defpackage/ipp.java
defpackage/ycs.java
defpackage/szp.java
defpackage/abmr.java
defpackage/rmc.java
defpackage/olm.java
defpackage/ohc.java
defpackage/old.java
defpackage/alic.java
defpackage/hhv.java
defpackage/afot.java
defpackage/ioa.java
defpackage/ajsr.java
defpackage/ambm.java
defpackage/apoo.java
defpackage/ahqx.java
defpackage/ahkk.java
defpackage/rke.java
defpackage/ylh.java
defpackage/xtr.java
defpackage/rfg.java
defpackage/kch.java
defpackage/anhi.java
defpackage/scg.java
defpackage/almf.java
defpackage/dxx.java
defpackage/onr.java
defpackage/npa.java
defpackage/ilt.java
defpackage/aege.java
defpackage/dyg.java
defpackage/xvp.java
defpackage/wpo.java
defpackage/aenv.java
defpackage/amrz.java
defpackage/ieq.java
defpackage/ogm.java
defpackage/gen.java
defpackage/syz.java
defpackage/fol.java
defpackage/mjl.java
defpackage/iit.java
defpackage/gsc.java
defpackage/yit.java
defpackage/kng.java
defpackage/xkc.java
defpackage/afxu.java
defpackage/tkf.java
defpackage/fox.java
defpackage/tyg.java
defpackage/affe.java
defpackage/ila.java
defpackage/sel.java
defpackage/fki.java
defpackage/mno.java
defpackage/ntp.java
defpackage/ghb.java
defpackage/afas.java
defpackage/tkm.java
defpackage/ahsx.java
defpackage/eni.java
defpackage/wqc.java
defpackage/iuu.java
defpackage/xhx.java
defpackage/lhz.java
defpackage/meg.java
defpackage/oun.java
defpackage/xie.java
defpackage/igv.java
defpackage/aggh.java
defpackage/kse.java
defpackage/aboi.java
defpackage/lfu.java
defpackage/apqy.java
defpackage/kgw.java
defpackage/uch.java
defpackage/afof.java
defpackage/agru.java
defpackage/weu.java
defpackage/quo.java
defpackage/ankb.java
defpackage/ajxk.java
defpackage/amgf.java
defpackage/oze.java
defpackage/ntd.java
defpackage/ainl.java
defpackage/szb.java
defpackage/cpy.java
defpackage/msm.java
defpackage/yjh.java
defpackage/wfa.java
defpackage/dxs.java
defpackage/jyw.java
defpackage/afqg.java
defpackage/ig.java
defpackage/rin.java
defpackage/aejb.java
defpackage/tjg.java
defpackage/alho.java
defpackage/afgk.java
defpackage/kqy.java
defpackage/loc.java
defpackage/ahij.java
defpackage/aftf.java
defpackage/alep.java
defpackage/apdu.java
defpackage/akga.java
defpackage/glc.java
defpackage/agnp.java
defpackage/hqk.java
defpackage/kuh.java
defpackage/otx.java
defpackage/aiah.java
defpackage/anai.java
defpackage/appn.java
defpackage/agii.java
defpackage/ctx.java
defpackage/aima.java
defpackage/angz.java
defpackage/ct.java
defpackage/opw.java
defpackage/grt.java
defpackage/yfu.java
org/conscrypt/metrics/ConscryptStatsLog.java
defpackage/iva.java
defpackage/hwf.java
defpackage/annh.java
defpackage/mmk.java
defpackage/alle.java
defpackage/agla.java
defpackage/aeji.java
defpackage/apqt.java
defpackage/sgc.java
defpackage/amwl.java
defpackage/xil.java
defpackage/rhh.java
defpackage/nwd.java
defpackage/osg.java
defpackage/xke.java
defpackage/anhb.java
defpackage/abnh.java
defpackage/amvm.java
defpackage/hwx.java
defpackage/hgd.java
defpackage/aezk.java
defpackage/appu.java
defpackage/ghi.java
defpackage/amom.java
defpackage/amqf.java
defpackage/yau.java
defpackage/afgr.java
defpackage/iov.java
defpackage/ht.java
defpackage/lcg.java
defpackage/aeiz.java
defpackage/aoqw.java
defpackage/oqf.java
defpackage/anap.java
defpackage/tpm.java
defpackage/xzs.java
defpackage/amzz.java
defpackage/xhc.java
defpackage/npz.java
defpackage/sxk.java
defpackage/afjr.java
defpackage/qkq.java
defpackage/uz.java
defpackage/afqn.java
defpackage/rzg.java
defpackage/nzv.java
defpackage/ancb.java
defpackage/sfi.java
defpackage/qum.java
defpackage/ghp.java
defpackage/jij.java
defpackage/agkb.java
defpackage/ioh.java
defpackage/gbn.java
defpackage/gam.java
defpackage/fir.java
defpackage/vgt.java
defpackage/agjv.java
defpackage/ahbq.java
defpackage/ini.java
defpackage/vvf.java
defpackage/kha.java
defpackage/ycn.java
defpackage/amuc.java
defpackage/nqi.java
defpackage/ojj.java
defpackage/rkn.java
defpackage/irz.java
defpackage/ahlx.java
defpackage/agjo.java
defpackage/oid.java
defpackage/xzl.java
defpackage/nq.java
defpackage/apok.java
defpackage/abvu.java
defpackage/akru.java
defpackage/nle.java
defpackage/ioo.java
defpackage/ainu.java
defpackage/afgg.java
defpackage/gn.java
defpackage/euc.java
defpackage/rhv.java
defpackage/idt.java
defpackage/mla.java
defpackage/afrt.java
defpackage/otq.java
defpackage/ctn.java
defpackage/aegc.java
defpackage/amjt.java
defpackage/yld.java
defpackage/xps.java
defpackage/aeft.java
defpackage/sfm.java
defpackage/xxe.java
defpackage/wao.java
defpackage/afsc.java
defpackage/awd.java
defpackage/fcz.java
defpackage/adwu.java
defpackage/nql.java
defpackage/aori.java
defpackage/ahit.java
defpackage/huq.java
defpackage/afby.java
defpackage/aedj.java
defpackage/iq.java
defpackage/wna.java
defpackage/aghz.java
defpackage/aens.java
defpackage/foo.java
defpackage/fwn.java
defpackage/amxb.java
defpackage/lgt.java
defpackage/ybh.java
defpackage/evt.java
defpackage/fc.java
defpackage/hsg.java
defpackage/mog.java
defpackage/of.java
defpackage/ahix.java
defpackage/iqo.java
defpackage/afrc.java
defpackage/aenz.java
defpackage/fno.java
defpackage/anbe.java
defpackage/abry.java
defpackage/leq.java
defpackage/nct.java
defpackage/otc.java
defpackage/amkc.java
defpackage/yoj.java
defpackage/ambd.java
defpackage/kfs.java
defpackage/ten.java
defpackage/ajjm.java
defpackage/gss.java
defpackage/hx.java
defpackage/kfv.java
defpackage/arjg.java
defpackage/aizq.java
defpackage/dwr.java
defpackage/bg.java
defpackage/ith.java
defpackage/ajbt.java
defpackage/rja.java
defpackage/aaoq.java
defpackage/tvc.java
defpackage/aide.java
defpackage/nrv.java
defpackage/gft.java
defpackage/yhn.java
defpackage/gax.java
defpackage/svo.java
defpackage/ahup.java
defpackage/ofu.java
defpackage/absh.java
defpackage/ccr.java
defpackage/odu.java
defpackage/omx.java
defpackage/mnd.java
defpackage/ahmt.java
defpackage/agqv.java
defpackage/fcs.java
defpackage/hrx.java
defpackage/wtg.java
defpackage/ahtw.java
defpackage/opc.java
defpackage/ipl.java
defpackage/vui.java
defpackage/tgn.java
defpackage/vjc.java
defpackage/lpw.java
defpackage/algz.java
defpackage/yar.java
defpackage/xwv.java
defpackage/hwq.java
defpackage/awtt.java
defpackage/veq.java
defpackage/fpr.java
defpackage/ghm.java
defpackage/cfk.java
defpackage/llf.java
defpackage/pno.java
defpackage/pab.java
defpackage/nse.java
defpackage/itv.java
defpackage/akid.java
defpackage/uvr.java
defpackage/aghs.java
defpackage/iol.java
defpackage/oig.java
defpackage/amcn.java
defpackage/apqg.java
defpackage/ott.java
defpackage/orc.java
defpackage/cog.java
defpackage/qjt.java
defpackage/sdf.java
defpackage/agkl.java
defpackage/tgu.java
defpackage/ims.java
defpackage/kaz.java
defpackage/adun.java
defpackage/xiw.java
defpackage/idw.java
defpackage/lit.java
defpackage/aejw.java
defpackage/afrq.java
defpackage/ood.java
defpackage/npt.java
defpackage/anfg.java
defpackage/agjm.java
defpackage/jty.java
defpackage/yfl.java
defpackage/ost.java
defpackage/ylc.java
defpackage/hfo.java
defpackage/alft.java
defpackage/mnk.java
defpackage/yjf.java
defpackage/lca.java
defpackage/aeit.java
defpackage/hwz.java
defpackage/nsh.java
defpackage/afqt.java
defpackage/xwz.java
defpackage/ffm.java
defpackage/amwu.java
defpackage/kcz.java
defpackage/akhe.java
defpackage/kbt.java
defpackage/tlx.java
defpackage/dcp.java
defpackage/adbd.java
defpackage/vaf.java
defpackage/ncy.java
defpackage/iju.java
defpackage/advy.java
defpackage/aehn.java
defpackage/ntn.java
defpackage/aill.java
defpackage/fls.java
defpackage/wco.java
defpackage/wrg.java
defpackage/end.java
defpackage/ilr.java
defpackage/agem.java
defpackage/fia.java
defpackage/aiut.java
defpackage/uds.java
defpackage/abro.java
defpackage/anij.java
defpackage/kck.java
defpackage/ggp.java
defpackage/aegh.java
defpackage/pnj.java
defpackage/xyh.java
defpackage/rfi.java
defpackage/szm.java
defpackage/koo.java
defpackage/rmf.java
defpackage/gfy.java
defpackage/agkd.java
defpackage/oux.java
defpackage/adwx.java
defpackage/xav.java
defpackage/non.java
defpackage/uxc.java
defpackage/ahrt.java
defpackage/agra.java
defpackage/oqw.java
defpackage/zxs.java
defpackage/awww.java
defpackage/ajwg.java
defpackage/ykd.java
defpackage/xlt.java
defpackage/stg.java
defpackage/aggr.java
defpackage/fbd.java
defpackage/amhu.java
defpackage/pja.java
defpackage/ogw.java
defpackage/aejs.java
defpackage/aede.java
defpackage/ck.java
defpackage/xnq.java
defpackage/qye.java
defpackage/ajzb.java
defpackage/amqw.java
defpackage/ybz.java
defpackage/wcg.java
defpackage/fke.java
defpackage/wy.java
defpackage/ammf.java
defpackage/ntf.java
defpackage/ybc.java
defpackage/ikd.java
defpackage/db.java
defpackage/ouj.java
defpackage/afcz.java
defpackage/nri.java
defpackage/apgo.java
defpackage/sum.java
defpackage/otr.java
defpackage/tch.java
defpackage/abqw.java
defpackage/eml.java
defpackage/xjb.java
defpackage/afdc.java
defpackage/aekb.java
defpackage/nul.java
defpackage/vul.java
defpackage/gtk.java
defpackage/wwv.java
defpackage/afea.java
defpackage/kdc.java
defpackage/ray.java
defpackage/oel.java
defpackage/lk.java
defpackage/xow.java
defpackage/ahme.java
defpackage/adxv.java
defpackage/kun.java
defpackage/appw.java
defpackage/ofq.java
defpackage/ajbx.java
defpackage/amxz.java
defpackage/ndb.java
defpackage/akhs.java
defpackage/ahpp.java
defpackage/ahgh.java
defpackage/almi.java
defpackage/yno.java
defpackage/aglb.java
defpackage/lfr.java
defpackage/ahxy.java
defpackage/uce.java
defpackage/mox.java
defpackage/xvt.java
defpackage/kgt.java
defpackage/oaz.java
defpackage/zwu.java
defpackage/wwm.java
defpackage/yet.java
defpackage/afnr.java
defpackage/edr.java
defpackage/xwy.java
defpackage/mqm.java
defpackage/xjq.java
defpackage/fpu.java
defpackage/vwa.java
defpackage/abok.java
defpackage/afgl.java
defpackage/lmg.java
defpackage/rbi.java
defpackage/gty.java
defpackage/qlb.java
defpackage/wty.java
defpackage/xyi.java
defpackage/absn.java
defpackage/mny.java
defpackage/kcc.java
defpackage/gin.java
defpackage/sqm.java
defpackage/ahjk.java
defpackage/hjq.java
defpackage/sfo.java
defpackage/tim.java
defpackage/xjh.java
defpackage/vc.java
defpackage/agqp.java
defpackage/ybq.java
defpackage/aaun.java
defpackage/amwg.java
defpackage/khy.java
defpackage/av.java
defpackage/apqf.java
defpackage/svr.java
defpackage/ycc.java
defpackage/abcv.java
defpackage/stu.java
defpackage/vef.java
defpackage/moy.java
defpackage/cqk.java
defpackage/wtj.java
defpackage/akfv.java
defpackage/kwq.java
defpackage/awxg.java
defpackage/krz.java
defpackage/onu.java
defpackage/ncq.java
defpackage/xfn.java
defpackage/luj.java
defpackage/kqz.java
defpackage/agho.java
defpackage/tye.java
defpackage/aezw.java
defpackage/aimq.java
defpackage/iia.java
defpackage/gzy.java
defpackage/dhv.java
defpackage/lci.java
defpackage/iaz.java
defpackage/noh.java
defpackage/gqq.java
defpackage/wne.java
defpackage/lso.java
defpackage/ptg.java
defpackage/afic.java
defpackage/taj.java
defpackage/sqr.java
defpackage/andp.java
defpackage/agld.java
defpackage/spm.java
defpackage/xxw.java
defpackage/aol.java
defpackage/dxn.java
defpackage/rkq.java
defpackage/afna.java
defpackage/oec.java
defpackage/ajad.java
defpackage/vhd.java
defpackage/adwy.java
defpackage/afdq.java
defpackage/ycq.java
defpackage/qzt.java
defpackage/xxk.java
defpackage/lvo.java
defpackage/rez.java
defpackage/aeoc.java
defpackage/am.java
defpackage/aeyi.java
defpackage/ijo.java
defpackage/sdx.java
defpackage/amhw.java
defpackage/xxi.java
defpackage/adsv.java
defpackage/olw.java
defpackage/xnc.java
defpackage/ue.java
defpackage/qks.java
defpackage/aany.java
defpackage/oga.java
defpackage/wuy.java
defpackage/gks.java
defpackage/tky.java
defpackage/afkt.java
defpackage/yof.java
defpackage/hxd.java
defpackage/gwf.java
defpackage/gqv.java
defpackage/aibf.java
defpackage/swp.java
defpackage/nxn.java
defpackage/gzw.java
defpackage/opd.java
defpackage/ivb.java
defpackage/dcq.java
defpackage/angd.java
defpackage/dbq.java
defpackage/lwa.java
defpackage/afhc.java
defpackage/qck.java
defpackage/oaq.java
defpackage/udt.java
defpackage/vju.java
defpackage/agha.java
defpackage/amux.java
defpackage/nyn.java
defpackage/alnq.java
defpackage/ipu.java
defpackage/fbj.java
defpackage/allt.java
defpackage/uv.java
defpackage/okw.java
defpackage/agga.java
defpackage/qjs.java
defpackage/afsz.java
defpackage/awtr.java
defpackage/sud.java
defpackage/sio.java
defpackage/afhf.java
defpackage/sgg.java
defpackage/as.java
defpackage/hp.java
defpackage/owa.java
defpackage/aegy.java
defpackage/sxg.java
defpackage/ntw.java
defpackage/afcq.java
defpackage/asi.java
defpackage/dwq.java
defpackage/ybt.java
defpackage/tip.java
defpackage/aevf.java
defpackage/dcy.java
defpackage/ahbm.java
defpackage/jjp.java
defpackage/dwf.java
defpackage/apol.java
defpackage/rlf.java
defpackage/ijd.java
defpackage/ezx.java
defpackage/akie.java
defpackage/kpw.java
defpackage/ahos.java
defpackage/abon.java
defpackage/hxo.java
defpackage/dkt.java
defpackage/agix.java
defpackage/nnn.java
defpackage/idu.java
defpackage/ahyh.java
defpackage/gly.java
defpackage/adzy.java
defpackage/afri.java
defpackage/ahmv.java
defpackage/xzw.java
defpackage/kcq.java
defpackage/yll.java
defpackage/mos.java
defpackage/agkm.java
defpackage/amrl.java
defpackage/ktf.java
defpackage/hcc.java
defpackage/msb.java
defpackage/aegn.java
defpackage/amug.java
defpackage/ahuy.java
defpackage/awxa.java
defpackage/iod.java
defpackage/ygw.java
defpackage/odz.java
defpackage/tyn.java
defpackage/xyq.java
defpackage/dhy.java
defpackage/afbz.java
defpackage/nav.java
defpackage/paj.java
defpackage/igx.java
defpackage/aeae.java
defpackage/afpi.java
defpackage/pcr.java
defpackage/aghj.java
defpackage/lbo.java
defpackage/aein.java
defpackage/yli.java
defpackage/amhi.java
defpackage/mep.java
defpackage/nsn.java
defpackage/xwf.java
defpackage/acjr.java
defpackage/rli.java
defpackage/afmi.java
defpackage/yif.java
defpackage/qyc.java
defpackage/xjy.java
defpackage/adzb.java
defpackage/aiyw.java
defpackage/ksz.java
defpackage/ntt.java
defpackage/uy.java
defpackage/ahib.java
defpackage/apqi.java
defpackage/dgk.java
defpackage/aeny.java
defpackage/ahiy.java
defpackage/nqt.java
defpackage/wwp.java
defpackage/tie.java
defpackage/ndn.java
defpackage/oxu.java
defpackage/agsx.java
defpackage/ljd.java
defpackage/oji.java
defpackage/gb.java
defpackage/afsa.java
defpackage/ajox.java
defpackage/imd.java
defpackage/aevn.java
defpackage/sug.java
defpackage/arjb.java
defpackage/sdo.java
defpackage/ybi.java
defpackage/eor.java
defpackage/orl.java
defpackage/giv.java
defpackage/xhn.java
defpackage/wcm.java
defpackage/fad.java
defpackage/mlm.java
defpackage/pkm.java
defpackage/aefv.java
defpackage/afpo.java
defpackage/dzi.java
defpackage/vwr.java
defpackage/aghd.java
defpackage/cme.java
defpackage/npc.java
defpackage/afil.java
defpackage/oki.java
defpackage/alhk.java
defpackage/fnj.java
defpackage/cpv.java
defpackage/abrq.java
defpackage/xok.java
defpackage/agku.java
defpackage/dwc.java
defpackage/kpt.java
defpackage/afbc.java
defpackage/kyw.java
defpackage/eur.java
defpackage/apoi.java
defpackage/iqx.java
defpackage/gzc.java
defpackage/ena.java
defpackage/absc.java
defpackage/sao.java
defpackage/kcn.java
defpackage/apml.java
defpackage/cvv.java
defpackage/swm.java
defpackage/ih.java
defpackage/gkk.java
defpackage/hql.java
defpackage/imu.java
defpackage/aauy.java
defpackage/oza.java
defpackage/owd.java
defpackage/xfy.java
defpackage/ofz.java
defpackage/aedy.java
defpackage/swx.java
defpackage/agjj.java
defpackage/ghy.java
defpackage/abqf.java
defpackage/xxt.java
defpackage/npq.java
defpackage/ref.java
defpackage/nzf.java
defpackage/aefk.java
defpackage/smd.java
defpackage/wrs.java
defpackage/abrc.java
defpackage/den.java
defpackage/apqz.java
defpackage/afef.java
defpackage/xzq.java
defpackage/xwc.java
defpackage/ssj.java
defpackage/cpe.java
defpackage/oaf.java
defpackage/nvq.java
defpackage/gfv.java
defpackage/agkg.java
defpackage/arhe.java
defpackage/aebv.java
defpackage/alek.java
defpackage/ljo.java
defpackage/ibd.java
defpackage/lco.java
defpackage/ageg.java
defpackage/aklp.java
defpackage/odw.java
defpackage/aisi.java
defpackage/ycf.java
defpackage/oso.java
defpackage/kwi.java
defpackage/xyc.java
defpackage/arje.java
defpackage/accz.java
defpackage/kqf.java
defpackage/dyf.java
defpackage/lnr.java
defpackage/avln.java
defpackage/xzt.java
defpackage/ahge.java
defpackage/ffj.java
defpackage/afhi.java
defpackage/jgb.java
defpackage/lal.java
defpackage/mnp.java
defpackage/oml.java
defpackage/wgm.java
defpackage/abxf.java
defpackage/aiof.java
defpackage/aeon.java
defpackage/emo.java
defpackage/cyh.java
defpackage/cuv.java
defpackage/aggg.java
defpackage/ozr.java
defpackage/kv.java
defpackage/almq.java
defpackage/xtq.java
defpackage/sqg.java
defpackage/wdj.java
defpackage/rkf.java
defpackage/abrt.java
defpackage/kfq.java
defpackage/igu.java
defpackage/dck.java
defpackage/nuc.java
defpackage/vjo.java
defpackage/ahie.java
defpackage/sjd.java
defpackage/ghh.java
defpackage/fom.java
defpackage/nsq.java
defpackage/aedh.java
defpackage/aizl.java
defpackage/abdn.java
defpackage/vio.java
defpackage/ggh.java
defpackage/tvh.java
defpackage/adws.java
defpackage/amur.java
defpackage/agdu.java
defpackage/pkj.java
defpackage/knt.java
defpackage/ahhe.java
defpackage/xon.java
defpackage/akse.java
defpackage/akzh.java
defpackage/aefy.java
defpackage/edz.java
defpackage/hmi.java
defpackage/isj.java
defpackage/oaw.java
defpackage/nln.java
defpackage/thb.java
defpackage/kgq.java
defpackage/vwu.java
defpackage/ehl.java
defpackage/iox.java
defpackage/dbk.java
High
CVSS:5.5
App can read/write to External Storage. Any App can read data written to External Storage.
MASVS: MSTG-STORAGE-2
CWE-276 Incorrect Default Permissions
M2: Insecure Data Storage
Files:
 defpackage/yoc.java
defpackage/sch.java
defpackage/yov.java
defpackage/yop.java
defpackage/yoi.java
defpackage/yob.java
defpackage/sin.java
defpackage/gft.java
defpackage/msd.java
defpackage/isj.java
defpackage/alor.java
defpackage/ajey.java
defpackage/kuo.java
defpackage/amwj.java
defpackage/arhf.java
High
CVSS:5.9
App uses SQLite Database and execute raw SQL query. Untrusted user input in raw SQL queries can cause SQL Injection. Also sensitive information should be encrypted and written to the database.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
M7: Client Code Quality
Files:
 defpackage/hxd.java
defpackage/irh.java
defpackage/airb.java
defpackage/airk.java
defpackage/aicy.java
defpackage/aire.java
defpackage/iqx.java
defpackage/airh.java
defpackage/ahgq.java
defpackage/aibu.java
defpackage/aicf.java
defpackage/aisg.java
defpackage/airi.java
defpackage/airy.java
defpackage/airl.java
defpackage/xfk.java
defpackage/airo.java
defpackage/ira.java
defpackage/airf.java
defpackage/nwd.java
defpackage/qjt.java
defpackage/aiby.java
defpackage/airc.java
defpackage/alfi.java
defpackage/aihw.java
defpackage/aira.java
defpackage/airn.java
defpackage/airj.java
defpackage/aihq.java
defpackage/aise.java
defpackage/nwe.java
defpackage/qju.java
defpackage/hxc.java
defpackage/aird.java
defpackage/iox.java
High
CVSS:5.9
SHA-1 is a weak hash known to have hash collisions.
MASVS: MSTG-CRYPTO-4
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 defpackage/axcd.java
defpackage/aucj.java
defpackage/arhu.java
defpackage/axbz.java
defpackage/kcf.java
defpackage/vyg.java
defpackage/axcm.java
defpackage/appb.java
defpackage/anav.java
defpackage/ausq.java
defpackage/axcb.java
defpackage/axco.java
defpackage/apqe.java
defpackage/axdf.java
defpackage/apod.java
defpackage/fke.java
defpackage/aeit.java
defpackage/acpp.java
High
CVSS:7.4
MD5 is a weak hash known to have hash collisions.
MASVS: MSTG-CRYPTO-4
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 defpackage/ahhp.java
defpackage/aiia.java
defpackage/awvo.java
defpackage/vyg.java
defpackage/yy.java
defpackage/apkb.java
defpackage/ahbk.java
defpackage/alte.java
defpackage/aens.java
Medium
CVSS:4.3
IP Address disclosure
MASVS: MSTG-CODE-2
CWE-200 Information Exposure
Files:
 defpackage/awqh.java
defpackage/awqb.java
org/conscrypt/OpenSSLCipherRSA.java
defpackage/awri.java
org/conscrypt/ct/CTConstants.java
org/conscrypt/TrustManagerImpl.java
defpackage/awpo.java
org/conscrypt/OpenSSLProvider.java
defpackage/awqg.java
defpackage/awrv.java
defpackage/awqd.java
org/conscrypt/OidData.java
defpackage/awqn.java
defpackage/awqa.java
defpackage/awpt.java
defpackage/awpn.java
defpackage/awrb.java
org/conscrypt/OpenSSLSignature.java
org/conscrypt/OAEPParameters.java
org/conscrypt/CertificatePriorityComparator.java
org/conscrypt/ChainStrengthAnalyzer.java
org/conscrypt/OpenSSLECGroupContext.java
defpackage/awqm.java
defpackage/awqj.java
defpackage/awqr.java
defpackage/awrg.java
org/conscrypt/EvpMdRef.java
org/conscrypt/OpenSSLXECParameterSpec.java
defpackage/awra.java
defpackage/awvo.java
defpackage/awqc.java
defpackage/awql.java
defpackage/awqf.java
defpackage/awqv.java
defpackage/awqi.java
High
CVSS:7.4
Insecure Implementation of SSL. Trusting all the certificates or accepting self signed certificates is a critical Security Hole. This application is vulnerable to MITM attacks
MASVS: MSTG-NETWORK-3
CWE-295 Improper Certificate Validation
M3: Insecure Communication
Files:
 defpackage/alnv.java
defpackage/amsa.java
org/conscrypt/Conscrypt.java
High
CVSS:5.5
App creates temp file. Sensitive information should never be written into a temp file.
MASVS: MSTG-STORAGE-2
CWE-276 Incorrect Default Permissions
M2: Insecure Data Storage
Files:
 defpackage/anpz.java
defpackage/xig.java
defpackage/amwv.java
defpackage/ajko.java
defpackage/amgq.java
defpackage/ajdb.java
defpackage/pqk.java
defpackage/appc.java
defpackage/ajgp.java
defpackage/aizv.java
Info
CVSS:0
This App uses SSL certificate pinning to detect or prevent MITM attacks in secure communication channel.
MASVS: MSTG-NETWORK-4
Files:
 defpackage/awvo.java
org/conscrypt/SSLParametersImpl.java
org/conscrypt/DefaultSSLContextImpl.java
High
CVSS:7.4
Files may contain hardcoded sensitive informations like usernames, passwords, keys etc.
MASVS: MSTG-STORAGE-14
CWE-312 Cleartext Storage of Sensitive Information
M9: Reverse Engineering
Files:
 defpackage/aba.java
defpackage/era.java
defpackage/bby.java
defpackage/aizg.java
Info
CVSS:0
This app has capabilities to prevent tapjacking attacks.
MASVS: MSTG-PLATFORM-9
Files:
 defpackage/vmh.java
Info
CVSS:0
This App may have root detection capabilities.
MASVS: MSTG-RESILIENCE-1
Files:
 defpackage/akzh.java
defpackage/adjq.java
defpackage/amor.java
Low
CVSS:0
This App copies data to clipboard. Sensitive data should not be copied to clipboard as other applications can access it.
MASVS: MSTG-STORAGE-10
Files:
 defpackage/dfk.java
Pygal United States: 5500

Map computed by Pithus.

Domains analysis

Information computed with MobSF.

US market.android.com 142.250.185.238
US play-tokenized.googleapis.com 142.250.185.170
US lh3.ggpht.com 142.250.74.193
US google.com 216.58.212.174
US xn--flw351e.com 74.125.133.94
US googleads.g.doubleclick.net 142.250.185.130
US 1s.app.goo.gl 142.250.186.46
US playatoms.googleusercontent.com 142.250.185.97
US accounts.google.com 142.250.186.45
US play.googleapis.com 142.250.186.74
US firebase.google.com 142.250.185.174
US support.google.com 142.250.184.206
US instant.app 216.239.32.29
US play-ti-lh.googleusercontent.com 216.239.38.132
US www.android.com 142.250.185.174
US googleapis.com 142.250.186.68