Malicious
11
/63

Threat

com.czwdcf.fpbwtamg

Android Update

android

Analyzed on 2021-08-17T22:28:21.219622

36

permissions

7

activities

5

services

6

receivers

45

domains

File sums

MD5 dd56fcc8c60b93ff7292e1de873eaecc
SHA1 e3102ff909a130605115b6d75dbe20834c3137d8
SHA256 f020ae19916f4c2ba2934163eb78f047a34068d9d28d2ab431d1aae7dc72b37b
Size 3.06MB

APKiD

Information computed with APKiD.

/tmp/tmp5_1a5z20!assets/webapk6.dex
compiler
  • r8
/tmp/tmp5_1a5z20!classes.dex
anti_vm
  • Build.FINGERPRINT check
  • Build.MANUFACTURER check
  • possible Build.SERIAL check
  • Build.TAGS check
  • network operator name check
compiler
  • dexlib 2.x

SSdeep

Information computed with ssdeep.

APK file 49152:oGSYoXQOUj31d8FIfm0pg6MfFdqtjnjHlVtN4uWwtmJW2Lze37tQrgsm/NxfO:oG8gOa37lLS6MfFdq5lVH4koi7tQCN9O
Manifest 384:TSAQR73fZawaUMgDTJXsNloI5z0XyI3/P3dNOoujMBvs3oq+Lkp3+G7EQ6kaeK63:…
assets/webapk6.dex 384:D2Y7yjwiTxjFWQ/Zq7Qyyhe7DJ4YFOnrN:DpJkFWQ07MU3J4YF0p
classes.dex 49152:ODkG8nzfglZ/qOEy7d4l8bP4DapUW414sck0:ODkGmdy7dvP4Rck0

Dexofuzzy

Information computed with Dexofuzzy.

APK file 3072:3aN4bsb5Lq19jYWprOovhlJCmjPhjfwzrVeR:o5Lq1yTi3jPhszy
assets/webapk6.dex 12:EZ80lJ3fg2tgqnLc29fvLXCET4tXP596wBWMxFfo/ufuh2SE:i807fg2gT0fvTT4t/…
classes.dex 3072:3aN4bsb5Lq19jYWprOovhlJCmjPhjfwzrVeR:o5Lq1yTi3jPhszy

APK details

Information computed with AndroGuard and Pithus.

Package com.czwdcf.fpbwtamg
App name Android Update
Version name 2.4
Version code 7
SDK 24 - 28
UAID f8b702f61f6d357fb36c107d9624c50cbb2bd7d7
Signature Signature V1 Signature V2 Signature V3
Frosting Not frosted
Blocks found within V2 signature:
  • 0x7109871a: Unknown
  • 0xf05368c0: Unknown
  • 0x42726577: Verity padding

Certificate details

Information computed with AndroGuard.

MD5 e89b158e4bcf988ebd09eb83f5378e87
SHA1 61ed377e85d386a8dfee6b864bd85b0bfaa5af81
SHA256 a40da80a59d170caa950cf15c18c454d47a39b26989d8b640ecd745ba71bf5dc
Issuer Email Address: android@android.com, Common Name: Android, Organizational Unit: Android, Organization: Android, Locality: Mountain View, State/Province: California, Country: US
Not before 2008-02-29T01:33:46+00:00
Not after 2035-07-17T01:33:46+00:00

File Analysis

Information computed with MobSF.

Findings Files
Hardcoded Keystore found. assets/com/microsoft/powerlift/android/acompli_cacerts.bks
assets/acompli_cacerts.bks

Manifest analysis

Information computed with MobSF.

Medium Application Data can be Backed up[android:allowBackup] flag is missing.
The flag [android:allowBackup] should be set to false. By default it is set to true and allows anyone to backup your application data via adb. It allows users who have enabled USB debugging to copy application data off of the device.

Main Activity

Information computed with AndroGuard.

['com.czwdcf.fpbwtamg.ActionActivity', 'com.czwdcf.fpbwtamg.ServiceSupportActivity', 'com.czwdcf.fpbwtamg.MainActivity', 'com.google.android.gms.common.api.GoogleApiActivity', 'com.czwdcf.fpbwtamg.VNCActivity', 'com.czwdcf.fpbwtamg.InjectionHtmlActivity', 'com.czwdcf.fpbwtamg.MessageActivity']

Activities

Information computed with AndroGuard.

com.czwdcf.fpbwtamg.ActionActivity
com.czwdcf.fpbwtamg.ServiceSupportActivity
com.czwdcf.fpbwtamg.MainActivity
com.google.android.gms.common.api.GoogleApiActivity
com.czwdcf.fpbwtamg.VNCActivity
com.czwdcf.fpbwtamg.InjectionHtmlActivity
com.czwdcf.fpbwtamg.MessageActivity

Receivers

Information computed with AndroGuard.

com.czwdcf.fpbwtamg.Receiver.MmsReceiver
com.czwdcf.fpbwtamg.Service.DeviceAdminService
com.czwdcf.fpbwtamg.Receiver.ScreenReceiver
com.czwdcf.fpbwtamg.Service.InstallerRestarterService
com.czwdcf.fpbwtamg.Receiver.PhoneStateReceiver
com.czwdcf.fpbwtamg.Receiver.BootReceiver

Services

Information computed with AndroGuard.

com.czwdcf.fpbwtamg.Receiver.SmsSendService
com.czwdcf.fpbwtamg.Service.WorkerAccessibilityService
com.czwdcf.fpbwtamg.Service.InstallerService
com.czwdcf.fpbwtamg.Service.DisplayServiceJava
com.czwdcf.fpbwtamg.Service.NotificationService

Sample timeline

Certificate valid not before Feb. 29, 2008, 1:33 a.m.
Oldest file found in APK Aug. 16, 2021, 5:04 p.m.
Latest file found in APK Aug. 16, 2021, 5:04 p.m.
First submission on VT Aug. 17, 2021, 10:24 p.m.
Last submission on VT Aug. 17, 2021, 10:24 p.m.
Upload on Pithus Aug. 17, 2021, 10:28 p.m.
Certificate valid not after July 17, 2035, 1:33 a.m.

MalwareBazaar

First seen 2021-08-17 22:23:34
Last seen None
Report https://bazaar.abuse.ch/sample/f020ae19916f4c2ba2934163eb78f047a34068d9d28d2ab431d1aae7dc72b37b/
ReversingLabs
Threat name None
Status UNKNOWN
First seen None
Score None/None
Hatching Triage
Score 8/10
Tags android
Report https://tria.ge/reports/210817-kgzdy7s256/
CERT-PL MWDB
Detection None
Report https://mwdb.cert.pl/sample/f020ae19916f4c2ba2934163eb78f047a34068d9d28d2ab431d1aae7dc72b37b/

VirusTotal

Score 11/63
Report https://www.virustotal.com/gui/file/f020ae19916f4c2ba2934163eb78f047a34068d9d28d2ab431d1aae7dc72b37b/detection

Most Popular AV Detections

Provided by VirusTotal

Threat name: hqwar Identified 2 times

NIAP analysis

Information computed with MobSF.

FCS_RBG_EXT.1.1 The application implement DRBG functionality for its cryptographic operations.
Random Bit Generation Services
FCS_STO_EXT.1.1 The application does not store any credentials to non-volatile memory.
Storage of Credentials
FCS_CKM_EXT.1.1 The application generate no asymmetric cryptographic keys.
Cryptographic Key Generation Services
FDP_DEC_EXT.1.1 The application has access to ['location', 'network connectivity', 'microphone', 'camera'].
Access to Platform Resources
FDP_DEC_EXT.1.2 The application has access to ['address book'].
Access to Platform Resources
FDP_NET_EXT.1.1 The application has user/application initiated network communications.
Network Communications
FDP_DAR_EXT.1.1 The application implement functionality to encrypt sensitive data in non-volatile memory.
Encryption Of Sensitive Application Data
FMT_MEC_EXT.1.1 The application invoke the mechanisms recommended by the platform vendor for storing and setting configuration options.
Supported Configuration Mechanism
FTP_DIT_EXT.1.1 The application does encrypt some transmitted data with HTTPS/TLS/SSH between itself and another trusted IT product.
Protection of Data in Transit
FCS_RBG_EXT.2.1
FCS_RBG_EXT.2.2
The application perform all deterministic random bit generation (DRBG) services in accordance with NIST Special Publication 800-90A using Hash_DRBG. The deterministic RBG is seeded by an entropy source that accumulates entropy from a platform-based DRBG and a software-based noise source, with a minimum of 256 bits of entropy at least equal to the greatest security strength (according to NIST SP 800-57) of the keys and hashes that it will generate.
Random Bit Generation from Application
FCS_COP.1.1(1) The application perform encryption/decryption not in accordance with FCS_COP.1.1(1), AES-ECB mode is being used.
Cryptographic Operation - Encryption/Decryption
FCS_COP.1.1(2) The application perform cryptographic hashing services not in accordance with FCS_COP.1.1(2) and uses the cryptographic algorithm RC2/RC4/MD4/MD5.
Cryptographic Operation - Hashing
FCS_HTTPS_EXT.1.1 The application implement the HTTPS protocol that complies with RFC 2818.
HTTPS Protocol
FCS_HTTPS_EXT.1.2 The application implement HTTPS using TLS.
HTTPS Protocol
FCS_HTTPS_EXT.1.3 The application notify the user and not establish the connection or request application authorization to establish the connection if the peer certificate is deemed invalid.
HTTPS Protocol
FIA_X509_EXT.2.1 The application use X.509v3 certificates as defined by RFC 5280 to support authentication for HTTPS , TLS.
X.509 Certificate Authentication
FPT_TUD_EXT.2.1 The application shall be distributed using the format of the platform-supported package manager.
Integrity for Installation and Update

Code analysis

Information computed with MobSF.

Low
CVSS:7.5
The App logs information. Sensitive information should never be logged.
MASVS: MSTG-STORAGE-3
CWE-532 Insertion of Sensitive Information into Log File
Files:
 zendesk/chat/ChatStateStore.java
com/adobe/marketing/mobile/ListenerRulesResponseContentProfile.java
com/adobe/marketing/mobile/TargetPrefetch.java
com/adobe/marketing/mobile/TimerState.java
com/waze/sdk/WazeAudioSdk.java
com/adobe/marketing/mobile/ZipBundleHandler.java
com/adobe/marketing/mobile/EventHub.java
com/adobe/marketing/mobile/HttpConnectionHandler.java
com/adobe/marketing/mobile/IdentityHitSchema.java
com/adobe/marketing/mobile/Module.java
com/adobe/marketing/mobile/AssuranceFullScreenTakeoverActivity.java
ch/qos/logback/classic/spi/ThrowableProxy.java
com/adobe/marketing/mobile/SignalCore.java
com/adobe/marketing/mobile/SignalTemplate.java
com/adobe/marketing/mobile/AndroidCompressedFileService.java
com/adobe/marketing/mobile/RulesEngine.java
com/adobe/marketing/mobile/PermissiveVariantSerializer.java
com/adobe/marketing/mobile/AssurancePluginScreenshot.java
com/adobe/marketing/mobile/LifecycleCore.java
com/adobe/marketing/mobile/IdentityExtension.java
com/adobe/marketing/mobile/AssuranceFullScreenTakeover.java
ch/qos/logback/core/subst/Node.java
com/adobe/marketing/mobile/AssuranceIOUtils.java
com/adobe/marketing/mobile/TargetPreviewFullscreenListener.java
com/adobe/marketing/mobile/AndroidLoggingService.java
com/adobe/marketing/mobile/AssuranceState.java
com/adobe/marketing/mobile/FloatingButtonManager.java
com/adobe/marketing/mobile/TargetPreviewManager.java
com/adobe/marketing/mobile/AssuranceExtension.java
com/adobe/marketing/mobile/RangedResolver.java
com/adobe/marketing/mobile/HitQueue.java
com/adobe/marketing/mobile/AnalyticsListenerHubSharedState.java
com/adobe/marketing/mobile/AndroidHttpConnection.java
com/adobe/marketing/mobile/AndroidSystemInfoService.java
com/adobe/marketing/mobile/IdentityCore.java
com/adobe/marketing/mobile/TargetListenerRequestContent.java
com/adobe/marketing/mobile/LifecycleExtension.java
com/adobe/marketing/mobile/Matcher.java
ch/qos/logback/classic/android/LogcatAppender.java
com/adobe/marketing/mobile/AndroidNetworkServiceOverrider.java
com/adobe/marketing/mobile/Identity.java
com/adobe/marketing/mobile/TargetExtension.java
com/adobe/marketing/mobile/UrlUtilities.java
sonic/Sonic.java
com/uber/keyvaluestore/core/a.java
com/axis/axismerchantsdk/util/UPIJSInterface.java
ch/qos/logback/classic/pattern/TargetLengthBasedClassNameAbbreviator.java
com/adobe/marketing/mobile/AssuranceListenerHubPlacesRequests.java
com/adobe/marketing/mobile/ExtensionApi.java
com/adobe/marketing/mobile/EventDataFlattener.java
com/adobe/marketing/mobile/AssuranceListenerAssuranceRequestContent.java
com/axis/axismerchantsdk/util/Util.java
com/adobe/marketing/mobile/AnalyticsListenerAnalyticsRequestContent.java
com/uber/libraries/foundation/healthlinesdk/reporters/firebase/UberFirebaseInitializer.java
com/adobe/marketing/mobile/Analytics.java
com/paypal/android/sdk/onetouch/core/encryption/PRNGFixes.java
com/adobe/marketing/mobile/AssurancePluginFakeEventGenerator.java
com/adobe/marketing/mobile/V4ToV5Migration.java
com/adobe/marketing/mobile/DispatcherAnalyticsRequestContentIdentity.java
com/adobe/marketing/mobile/AndroidEncodingService.java
com/waze/sdk/WazeMessageHandler.java
com/axis/axismerchantsdk/analytics/AxisTracker.java
com/adobe/marketing/mobile/AnalyticsCore.java
com/axis/axismerchantsdk/analytics/AxisLogger.java
zendesk/messaging/MessagingModel.java
com/uber/reporter/model/data/AutoValue_USpanLog.java
com/adobe/marketing/mobile/StringEncoder.java
com/adobe/marketing/mobile/LocalNotificationHandler.java
com/adobe/marketing/mobile/AnalyticsExtension.java
com/adobe/marketing/mobile/AssuranceBlob.java
com/adobe/marketing/mobile/Core.java
com/adobe/marketing/mobile/AndroidUIService.java
com/adobe/marketing/mobile/SignalHitSchema.java
com/adobe/marketing/mobile/Target.java
com/adobe/marketing/mobile/TLSSocketFactory.java
com/adobe/marketing/mobile/TargetListenerConfigurationResponseContent.java
com/adobe/marketing/mobile/ConfigurationExtension.java
com/adobe/marketing/mobile/ExtensionListener.java
com/adobe/marketing/mobile/AndroidNetworkService.java
com/adobe/marketing/mobile/TargetEventDispatcher.java
com/adobe/marketing/mobile/AssuranceConnectionStatusUI.java
com/adobe/marketing/mobile/AssurancePluginConfigSwitcher.java
com/adobe/marketing/mobile/PersistentProfileData.java
com/adobe/marketing/mobile/MobileCore.java
ch/qos/logback/core/net/SocketConnectorBase.java
com/adobe/marketing/mobile/LifecycleSession.java
com/adobe/marketing/mobile/AndroidDataStore.java
com/adobe/marketing/mobile/ListenerUserProfileRequestReset.java
com/adobe/marketing/mobile/AssuranceListenerHubPlacesResponses.java
ch/qos/logback/core/net/DefaultSocketConnector.java
zendesk/chat/DnModels.java
com/adobe/marketing/mobile/AndroidDatabaseService.java
com/adobe/marketing/mobile/VisitorID.java
com/adobe/marketing/mobile/FullscreenMessageActivity.java
com/adobe/marketing/mobile/AbstractHitsDatabase.java
com/adobe/marketing/mobile/RemoteDownloader.java
com/adobe/marketing/mobile/AssuranceWebViewSocket.java
com/adobe/marketing/mobile/HexStringUtil.java
zendesk/chat/DnConverterUtils.java
com/adobe/marketing/mobile/AnalyticsState.java
com/adobe/marketing/mobile/ListenerRulesEngineResponseContentSignal.java
com/adobe/marketing/mobile/AnalyticsListenerRulesEngineResponseContent.java
com/adobe/marketing/mobile/ContextDataUtil.java
com/adobe/marketing/mobile/LifecycleMetricsBuilder.java
com/adobe/marketing/mobile/TargetObject.java
com/waze/sdk/WazeSdk.java
com/adobe/marketing/mobile/AndroidDeepLinkService.java
com/adobe/marketing/mobile/TargetRequestBuilder.java
com/adobe/marketing/mobile/Event.java
com/adobe/marketing/mobile/EventBus.java
com/adobe/marketing/mobile/ListenerUserProfileRequestProfile.java
com/adobe/marketing/mobile/FileUtil.java
com/adobe/marketing/mobile/SignalHitsDatabase.java
com/paypal/android/sdk/onetouch/core/Result.java
zendesk/chat/ChatLog.java
com/adobe/marketing/mobile/RuleConsequence.java
com/adobe/marketing/mobile/TargetListenerGenericDataOS.java
com/adobe/marketing/mobile/Assurance.java
com/kochava/base/Tracker.java
com/adobe/marketing/mobile/ConfigurationSharedStateIdentity.java
ch/qos/logback/classic/net/SimpleSocketServer.java
com/adobe/marketing/mobile/UserProfileExtension.java
com/adobe/marketing/mobile/Extension.java
com/adobe/marketing/mobile/AnalyticsHitsDatabase.java
com/adobe/marketing/mobile/TargetResponseParser.java
com/adobe/marketing/mobile/URLBuilder.java
com/adobe/marketing/mobile/TargetCore.java
com/adobe/marketing/mobile/TargetParameters.java
com/adobe/marketing/mobile/CacheManager.java
zendesk/chat/DeliveryStatusMonitor.java
com/adobe/marketing/mobile/ConfigurationData.java
com/adobe/marketing/mobile/AnalyticsListenerGenericTrackRequestContent.java
com/adobe/marketing/mobile/IdentityHitsDatabase.java
com/adobe/marketing/mobile/AssuranceSession.java
com/adobe/marketing/mobile/UserProfile.java
com/waze/sdk/WazeNavigationBar.java
com/adobe/marketing/mobile/AssuranceFloatingButton.java
com/camerakit/CameraKitView.java
com/adobe/marketing/mobile/TargetOrder.java
com/adobe/marketing/mobile/ConfigurationDownloader.java
com/adobe/marketing/mobile/AnalyticsHitSchema.java
com/airbnb/lottie/LottieAnimationView.java
com/adobe/marketing/mobile/FloatingButtonView.java
com/adobe/marketing/mobile/AndroidFullscreenMessage.java
com/adobe/marketing/mobile/AssurancePinCodeEntryURLProvider.java
com/adobe/marketing/mobile/StringUtils.java
com/adobe/marketing/mobile/AssurancePluginLogForwarder.java
com/adobe/marketing/mobile/AndroidJsonUtility.java
com/adobe/marketing/mobile/UserProfileCore.java
com/adobe/marketing/mobile/AndroidDatabase.java
com/adobe/marketing/mobile/SignalExtension.java
High
CVSS:7.4
MD5 is a weak hash known to have hash collisions.
MASVS: MSTG-CRYPTO-4
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 com/adobe/mobile/RemoteDownload.java
com/axis/axismerchantsdk/util/FileUtil.java
High
CVSS:7.4
Files may contain hardcoded sensitive informations like usernames, passwords, keys etc.
MASVS: MSTG-STORAGE-14
CWE-312 Cleartext Storage of Sensitive Information
M9: Reverse Engineering
Files:
 com/adobe/mobile/AnalyticsTrackTimedAction.java
com/adobe/marketing/mobile/DataMarshaller.java
com/adobe/marketing/mobile/IdentityConstants.java
com/adobe/mobile/TargetPreviewManager.java
com/adobe/marketing/mobile/AssuranceListenerHubPlacesResponses.java
com/adobe/mobile/ReferrerHandler.java
com/adobe/mobile/RequestBuilder.java
com/uber/model/core/generated/edge/services/parameterserving/FailureParameter.java
com/adobe/mobile/Config.java
com/adobe/mobile/AnalyticsTrackLifetimeValueIncrease.java
com/adobe/mobile/Messages.java
ch/qos/logback/core/rolling/helper/DateTokenConverter.java
com/adobe/mobile/MobileConfig.java
com/adobe/mobile/VisitorIDService.java
zendesk/chat/ChatLogBlacklister.java
com/adobe/mobile/Lifecycle.java
com/adobe/marketing/mobile/EventDataKeys.java
com/adobe/marketing/mobile/Matcher.java
zendesk/chat/UserAgentAndClientHeadersInterceptor.java
ch/qos/logback/core/CoreConstants.java
com/adobe/marketing/mobile/Assurance.java
com/adobe/mobile/AudienceManagerWorker.java
com/adobe/marketing/mobile/UserProfileConstants.java
com/adobe/mobile/AnalyticsTrackLocation.java
com/adobe/marketing/mobile/ConfigurationConstants.java
com/adobe/marketing/mobile/RuleConditionGroup.java
ch/qos/logback/classic/joran/action/ConfigurationAction.java
com/adobe/marketing/mobile/AssuranceListenerHubPlacesRequests.java
com/uber/reporter/model/data/Shape_ExperimentInclusion.java
com/adobe/marketing/mobile/App.java
com/audible/mobile/push/PushInfo.java
com/adobe/mobile/AnalyticsTrackCoordinateSpace.java
ch/qos/logback/classic/sift/ContextBasedDiscriminator.java
com/adobe/marketing/mobile/AnalyticsConstants.java
com/adobe/marketing/mobile/V4ToV5Migration.java
com/adobe/marketing/mobile/CoreConstants.java
ch/qos/logback/core/net/ssl/SSL.java
com/uber/reporter/model/data/AutoValue_USpanLog.java
com/uber/model/core/generated/edge/services/parameterserving/Parameter.java
ch/qos/logback/core/rolling/helper/IntegerTokenConverter.java
com/adobe/mobile/AnalyticsTrackBeacon.java
com/adobe/marketing/mobile/AnalyticsExtension.java
com/adobe/marketing/mobile/AndroidUIService.java
com/adobe/marketing/mobile/TargetConstants.java
com/adobe/mobile/Constants.java
com/adobe/mobile/MessageMatcher.java
com/adobe/mobile/StaticMethods.java
com/adobe/marketing/mobile/ConfigurationExtension.java
com/adobe/marketing/mobile/AssuranceConstants.java
com/uber/model/core/generated/edge/services/parameterserving/ExperimentEvaluation.java
com/adobe/marketing/mobile/LifecycleConstants.java
com/adobe/mobile/MediaAnalytics.java
com/audible/mobile/push/PushConstants.java
com/uber/reporter/model/data/Shape_ExperimentTreatment.java
zendesk/chat/ChatProvidersStorage.java
Medium
CVSS:4.3
IP Address disclosure
MASVS: MSTG-CODE-2
CWE-200 Information Exposure
Files:
 com/waze/sdk/WazeAudioSdk.java
com/waze/sdk/BuildConfig.java
com/waze/sdk/ui/BuildConfig.java
Info
CVSS:0
This App uses SSL certificate pinning to detect or prevent MITM attacks in secure communication channel.
MASVS: MSTG-NETWORK-4
Files:
 ch/qos/logback/core/net/ssl/SSLContextFactoryBean.java
com/uber/marketing_attribution/branch/b.java
com/audible/mobile/sansa/networking/retrofit/SansaRetrofitFactory.java
com/audible/mobile/search/networking/retrofit/AudibleStoreSearchRetrofitFactory.java
com/audible/mobile/search/networking/retrofit/AmazonVisualSearchServiceRetrofitFactory.java
High
CVSS:5.9
SHA-1 is a weak hash known to have hash collisions.
MASVS: MSTG-CRYPTO-4
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 com/adobe/marketing/mobile/StringEncoder.java
com/adobe/mobile/StaticMethods.java
com/paypal/android/sdk/onetouch/core/encryption/PRNGFixes.java
High
CVSS:5.5
App can read/write to External Storage. Any App can read data written to External Storage.
MASVS: MSTG-STORAGE-2
CWE-276 Incorrect Default Permissions
M2: Insecure Data Storage
Files:
 ch/qos/logback/core/android/CommonPathUtil.java
Low
CVSS:3.9
App can write to App Directory. Sensitive Information should be encrypted.
MASVS: MSTG-STORAGE-14
CWE-276 Incorrect Default Permissions
Files:
 com/uber/libraries/common/healthlinesdk/reliabilitybundle/i.java
Medium
CVSS:8.8
Insecure WebView Implementation. Execution of user controlled code in WebView is a critical Security Hole.
MASVS: MSTG-PLATFORM-7
CWE-749 Exposed Dangerous Method or Function
M1: Improper Platform Usage
Files:
 com/adobe/marketing/mobile/AssuranceWebViewSocket.java
High
CVSS:7.5
The App uses an insecure Random Number Generator.
MASVS: MSTG-CRYPTO-6
CWE-330 Use of Insufficiently Random Values
M5: Insufficient Cryptography
Files:
 com/paypal/android/sdk/onetouch/core/fpti/FptiToken.java
com/paypal/android/sdk/onetouch/core/fpti/FptiManager.java
zendesk/chat/Utils.java
Info
CVSS:0
This App may have root detection capabilities.
MASVS: MSTG-RESILIENCE-1
Files:
 com/kochava/base/c.java
com/axis/axismerchantsdk/util/UPIJSInterface.java
High
CVSS:5.9
App uses SQLite Database and execute raw SQL query. Untrusted user input in raw SQL queries can cause SQL Injection. Also sensitive information should be encrypted and written to the database.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
M7: Client Code Quality
Files:
 com/adobe/mobile/AnalyticsTrackTimedAction.java
com/kochava/base/d.java
ch/qos/logback/classic/android/SQLiteAppender.java
com/adobe/marketing/mobile/AndroidDatabase.java
High
CVSS:5.5
App creates temp file. Sensitive information should never be written into a temp file.
MASVS: MSTG-STORAGE-2
CWE-276 Incorrect Default Permissions
M2: Insecure Data Storage
Files:
 com/picsart/fiselfi/h.java
Low
CVSS:0
This App copies data to clipboard. Sensitive data should not be copied to clipboard as other applications can access it.
MASVS: MSTG-STORAGE-10
Files:
 com/urbanairship/actions/ClipboardAction.java
Pygal Canada: 100 Switzerland: 100 Germany: 400 United States: 3300

Map computed by Pithus.

Domains analysis

Information computed with MobSF.

US sansa.audible.com 52.94.237.68
api-preprod.audible.com
DE www.paypalobjects.com 104.111.228.123
US token.api.kochava.com 35.241.8.97
US combine.asnapieu.com 35.244.242.208
CH logback.qos.ch 83.173.251.158
US xml.org 104.239.240.11
US api-m.sandbox.paypal.com 151.101.193.35
US api2.branch.io 65.9.73.72
US id.zopim.com 35.172.93.242
US wallet-api.asnapieu.com 34.96.86.174
US remote-data.urbanairship.com 35.201.74.116
US wallet-api.urbanairship.com 35.244.226.117
US code.uberinternal.com 104.36.195.150
uri.paypal.com
US api.audible.com 176.32.99.150
.urbanairship.com
US combine.urbanairship.com 35.190.53.75
US match-visualsearch.amazon.com 52.94.224.156
US remote-data.asnapieu.com 34.96.96.216
US kvinit-prod.api.kochava.com 35.186.201.211
US example.com 93.184.216.34
.youtube.com
US msh.amazon.com 52.46.136.105
US install.appcenter.ms 40.79.21.140
DE api-m.paypal.com 104.109.75.30
blobs.griffon.adobe.com
US control.kochava.com 107.178.254.148
US hal.testandtarget.omniture.com 66.235.132.176
US checkout.paypal.com 65.9.73.95
US smart.link 34.102.244.189
US assets.staging.braintreepayments.com 184.105.254.110
US aep-sdks.gitbook.io 104.18.0.145
CA mindprod.com 65.110.21.43
US logs.juspay.in 34.120.165.19
US www.w3.org 128.30.52.100
US play.google.com 142.250.186.46
DE assets.adobedtm.com 2.18.232.23
US device-api.asnapieu.com 130.211.7.30
US device-api.urbanairship.com 35.244.184.98
DE widget-mediator.zopim.com 35.156.106.136
a42.vodafone.com
US api.appcenter.ms 52.138.116.79
US location.api.kochava.com 35.244.195.170
US www.paypal.com 151.101.65.21

URL analysis

Information computed with MobSF.

https://widget-mediator.zopim.com
Defined in zendesk/chat/Chat.java
https://id.zopim.com
Defined in zendesk/chat/ChatVisitorClient.java
http://logback.qos.ch/codes.html#layoutInsteadOfEncoder
Defined in ch/qos/logback/core/OutputStreamAppender.java
http://logback.qos.ch/codes.html
http://logback.qos.ch/codes.html#tbr_fnp_not_set
Defined in ch/qos/logback/core/CoreConstants.java
http://logback.qos.ch/codes.html#tbr_fnp_not_set
Defined in ch/qos/logback/core/rolling/TimeBasedRollingPolicy.java
http://logback.qos.ch/codes.html#sbtp_size_format
Defined in ch/qos/logback/core/rolling/SizeBasedTriggeringPolicy.java
http://logback.qos.ch/codes.html#tbr_fnp_prudent_unsupported
http://logback.qos.ch/codes.html#fwrp_parentFileName_not_set
http://logback.qos.ch/codes.html#tbr_fnp_not_set
Defined in ch/qos/logback/core/rolling/FixedWindowRollingPolicy.java
http://logback.qos.ch/codes.html#rfa_collision
http://logback.qos.ch/codes.html#rfa_no_rp
http://logback.qos.ch/codes.html#rfa_no_tp
http://logback.qos.ch/codes.html#rfa_file_after
Defined in ch/qos/logback/core/rolling/RollingFileAppender.java
http://logback.qos.ch/codes.html#renamingError
Defined in ch/qos/logback/core/rolling/helper/RenameUtil.java
http://logback.qos.ch/codes.html#1andOnly1
Defined in ch/qos/logback/core/sift/SiftingJoranConfiguratorBase.java
http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd
Defined in ch/qos/logback/core/html/HTMLLayoutBase.java
http://logback.qos.ch/codes.html#missingRightParenthesis
Defined in ch/qos/logback/core/pattern/parser/Parser.java
http://xml.org/sax/features/validation
http://xml.org/sax/features/namespaces
Defined in ch/qos/logback/core/joran/event/SaxEventRecorder.java
http://logback.qos.ch/codes.html#appender_order
Defined in ch/qos/logback/core/joran/action/AppenderRefAction.java
http://logback.qos.ch/codes.html#socket_no_port
http://logback.qos.ch/codes.html#socket_no_host
Defined in ch/qos/logback/core/net/AbstractSocketAppender.java
http://logback.qos.ch/codes.html#syslog_layout
Defined in ch/qos/logback/core/net/SyslogAppenderBase.java
http://logback.qos.ch/codes.html#smtp_no_layout
Defined in ch/qos/logback/core/net/SMTPAppenderBase.java
http://logback.qos.ch/css/classic.css
Defined in ch/qos/logback/classic/html/UrlCssBuilder.java
http://logback.qos.ch/codes.html#receiver_no_port
http://logback.qos.ch/codes.html#receiver_no_host
Defined in ch/qos/logback/classic/net/SocketReceiver.java
http://a42.vodafone.com/rels/sec/submit-events
Defined in com/vodafone/lib/seclibng/comms/JobServiceForEvent.java
http://a42.vodafone.com/rels/sec/submit-events
Defined in com/vodafone/lib/seclibng/internal/EventsIntentService.java
https://install.appcenter.ms
https://api.appcenter.ms/v0.1
Defined in com/microsoft/appcenter/distribute/Distribute.java
https://uri.paypal.com/services/payments/futurepayments
https://checkout.paypal.com/one-touch-login/
https://assets.staging.braintreepayments.com/one-touch-login/
Defined in com/paypal/android/sdk/onetouch/core/BuildConfig.java
https://www.paypal.com
Defined in com/paypal/android/sdk/onetouch/core/AuthorizationRequest.java
https://api-m.paypal.com/v1/
https://api-m.sandbox.paypal.com/v1/
Defined in com/paypal/android/sdk/onetouch/core/network/EnvironmentManager.java
https://www.paypalobjects.com/webstatic/otc/otc-config.android.json
Defined in com/paypal/android/sdk/onetouch/core/config/ConfigManager.java
https://uri.paypal.com/services/payments/futurepayments
https://uri.paypal.com/services/paypalattributes
Defined in com/paypal/android/sdk/onetouch/core/sdk/PayPalScope.java
file:///android_asset/production_index.html
file:///android_asset/index.html
Defined in com/axis/axismerchantsdk/activity/PayActivity.java
https://logs.juspay.in/godel/analytics
Defined in com/axis/axismerchantsdk/analytics/AxisTracker.java
https://kvinit-prod.api.kochava.com/track/kvinit
https://control.kochava.com/track/json
https://control.kochava.com/track/kvquery
https://token.api.kochava.com/token/add
https://token.api.kochava.com/token/remove
https://location.api.kochava.com/location
https://location.api.kochava.com/geoevent
https://smart.link/v1/links-sdk
Defined in com/kochava/base/i.java
https://hal.testandtarget.omniture.com
Defined in com/adobe/mobile/TargetPreviewManager.java
https://%s/rest/v2/batchmbox/?client=%s&sessionId=%s
Defined in com/adobe/mobile/TargetWorker.java
file:///android_asset/
Defined in com/adobe/mobile/MessageFullScreen.java
https://%s/demoptout.jpg?
https://%s/demoptout.jpg?d_uuid=%s
https://%s/demoptout.jpg?d_mid=%s&d_orgid=%s
Defined in com/adobe/mobile/AudienceManagerWorker.java
https://%s/v3/%s/end
Defined in com/adobe/mobile/ReferrerHandler.java
file:///android_asset/
Defined in com/adobe/marketing/mobile/AndroidFullscreenMessage.java
file:///android_asset/WebviewSocket.html
Defined in com/adobe/marketing/mobile/AssuranceWebViewSocket.java
https://assets.adobedtm.com/%s.json
Defined in com/adobe/marketing/mobile/ConfigurationExtension.java
https://%s/rest/v1/delivery/?client=%s&sessionId=%s
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#send-an-mbox-click-notification
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#send-an-mbox-display-notification
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#set-preview-restart-deeplink
Defined in com/adobe/marketing/mobile/TargetExtension.java
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#clearprefetchcache
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#getthirdpartyid
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#gettntid
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#retrievelocationcontent
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#locationclicked
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#locationsdisplayed
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#prefetchcontent
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/mobile-core/configuration/configuration-api-reference#configurewithappid
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#resetexperience
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#setpreviewrestartdeeplink
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#example-4
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#setthirdpartyid
Defined in com/adobe/marketing/mobile/Target.java
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#getthirdpartyid
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#example-8
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference-deprecated#targetrequest-builder
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference-deprecated#syntax-3
Defined in com/adobe/marketing/mobile/TargetCore.java
https://aep-sdks.gitbook.io/docs/beta/project-griffon/set-up-project-griffon#register-griffon-with-mobile-core
Defined in com/adobe/marketing/mobile/AssuranceExtension.java
https://%s/rest/v1/delivery/?client=%s&sessionId=%s
Defined in com/adobe/marketing/mobile/TargetConstants.java
https://blob%s.griffon.adobe.com
Defined in com/adobe/marketing/mobile/AssuranceBlob.java
file:///android_asset/
Defined in com/adobe/marketing/mobile/AssuranceFullScreenTakeover.java
https://blob%s.griffon.adobe.com
Defined in com/adobe/marketing/mobile/AssuranceConstants.java
https://aep-sdks.gitbook.io/docs/beta/project-griffon/set-up-project-griffon#register-griffon-with-mobile-core
Defined in com/adobe/marketing/mobile/Assurance.java
https://*.urbanairship.com
https://*.youtube.com
Defined in com/urbanairship/UAirship.java
https://device-api.urbanairship.com/
https://combine.urbanairship.com/
https://remote-data.urbanairship.com/
https://wallet-api.urbanairship.com
https://device-api.asnapieu.com/
https://combine.asnapieu.com/
https://remote-data.asnapieu.com/
https://wallet-api.asnapieu.com
Defined in com/urbanairship/AirshipConfigOptions.java
https://play.google.com/store/apps/details?id=
Defined in com/urbanairship/actions/RateAppAction.java
https://play.google.com/store/apps/details?
Defined in com/waze/sdk/WazeSdkUtils.java
https://msh.amazon.com
Defined in com/audible/mobile/push/PushSubscriptionsManager.java
https://sansa.audible.com/v1/
Defined in com/audible/mobile/sansa/networking/retrofit/SansaRetrofitFactory.java
https://sansa.audible.com/v1/
Defined in com/audible/mobile/sansa/networking/retrofit/SansaRetrofitFactoryKt.java
https://api-preprod.audible.com/1.0/
https://api.audible.com/1.0/
Defined in com/audible/mobile/search/networking/retrofit/AudibleStoreSearchRetrofitFactory.java
https://match-visualsearch.amazon.com
Defined in com/audible/mobile/search/networking/retrofit/AmazonVisualSearchServiceRetrofitFactory.java
https://api2.branch.io
Defined in com/uber/marketing_attribution/branch/b.java
https://example.com/
https://exa
Defined in com/uber/model/core/internal/RandomUtil.java
http://mindprod.com
Defined in com/mindprod/ledatastream/LEDataInputStream.java
https://code.uberinternal.com/
Defined in com/ubercab/feedback/optional/phabs/realtime/response/model/TaskCreateResponse.java

Permissions analysis

Information computed with MobSF.

Unknown permission
Unknown permission from android reference

Threat analysis

Information computed with Quark-Engine.

Confidence:
100%
Check if the network is connected
Confidence:
100%
Load external class
Confidence:
100%
Query the current data network type
Confidence:
100%
Implicit intent(view a web page, make a phone call, etc.)
Confidence:
100%
Query the IMEI number
Confidence:
100%
Find a method from given class name, usually for reflection
Confidence:
100%
Check the active network type
Confidence:
100%
Start a web server
Confidence:
100%
Connect to a URL and receive input stream from the server
Confidence:
100%
Method reflection
Confidence:
100%
Get the network operator name
Confidence:
100%
Connect to a URL and read data from it
Confidence:
100%
Save the response to JSON after connecting to the remote server
Confidence:
100%
Load class from given class name
Confidence:
100%
Retrieve data from broadcast
Confidence:
100%
Read sensitive data(SMS, CALLLOG, etc)
Confidence:
100%
Open a file from given absolute path of the file
Confidence:
100%
Implicit intent(view a web page, make a phone call, etc.) via setData
Confidence:
100%
Connect to a URL and get the response code
Confidence:
100%
Send notification
Confidence:
100%
Monitor the broadcast action events (BOOT_COMPLETED)
Confidence:
100%
Get absolute path of the file and store in string
Confidence:
100%
Query the IMSI number
Confidence:
100%
Read file from assets directory
Confidence:
100%
Get the current WIFI information
Confidence:
100%
Write file after Base64 decoding
Confidence:
100%
Query the IMEI number
Confidence:
100%
Method reflection
Confidence:
100%
Connect to the remote server through the given URL
Confidence:
100%
Query data from URI (SMS, CALLLOGS)
Confidence:
100%
Query the phone number
Confidence:
100%
Initialize class object dynamically
Confidence:
100%
Read the input stream from given URL
Confidence:
100%
Connect to a URL and set request method
Confidence:
100%
Get specific method from other Dex files
Confidence:
80%
Get absolute path of file and put it to JSON object
Confidence:
80%
Read file and put it into a stream
Confidence:
80%
Check the current network type
Confidence:
80%
Return dynamic information about the current Wi-Fi connection
Confidence:
80%
Query the network operator name
Confidence:
80%
Load additional DEX files dynamically
Confidence:
80%
Get the IMSI and network operator name
Confidence:
80%
Get resource file from res/raw directory

Behavior analysis

Information computed with MobSF.

Android notifications
       com/adobe/marketing/mobile/LocalNotificationHandler.java
com/microsoft/appcenter/distribute/Distribute.java
com/adobe/mobile/MessageNotificationHandler.java
Base64 decode
       com/axis/axismerchantsdk/util/UPIJSInterface.java
com/axis/axismerchantsdk/util/NPCICLJSInterface.java
com/adobe/mobile/MessageTemplateCallback.java
com/adobe/marketing/mobile/AndroidEncodingService.java
com/paypal/android/sdk/onetouch/core/encryption/EncryptionUtils.java
com/waze/sdk/WazeSdkUtils.java
com/adobe/mobile/FloatingButton.java
com/paypal/android/sdk/onetouch/core/AuthorizationRequest.java
com/axis/axismerchantsdk/util/RemoteAssetService.java
com/adobe/marketing/mobile/FloatingButtonView.java
Base64 encode
       com/axis/axismerchantsdk/util/UPIJSInterface.java
com/axis/axismerchantsdk/util/NPCICLJSInterface.java
com/uber/identity/api/uauth/internal/helper/c.java
com/adobe/marketing/mobile/AndroidEncodingService.java
com/urbanairship/widget/UAWebView.java
com/waze/sdk/WazeSdkUtils.java
com/adobe/marketing/mobile/AssuranceWebViewSocket.java
com/paypal/android/sdk/onetouch/core/AuthorizationRequest.java
Certificate handling
       com/adobe/marketing/mobile/TLSSocketFactory.java
zendesk/chat/Tls12SocketFactory.java
ch/qos/logback/core/net/SMTPAppenderBase.java
com/adobe/mobile/TLSSocketFactory.java
ch/qos/logback/core/net/ssl/ConfigurableSSLSocketFactory.java
Content provider
       com/urbanairship/UrbanAirshipProvider.java
Crypto
       com/axis/axismerchantsdk/util/CryptLib.java
com/axis/axismerchantsdk/util/UPIJSInterface.java
com/paypal/android/sdk/onetouch/core/Request.java
com/waze/sdk/WazeSdkUtils.java
com/paypal/android/sdk/onetouch/core/encryption/OtcCrypto.java
com/paypal/android/sdk/onetouch/core/AuthorizationRequest.java
com/paypal/android/sdk/onetouch/core/sdk/BrowserSwitchHelper.java
Gps location
       com/adobe/mobile/AnalyticsTrackLocation.java
Get cell information
       com/kochava/base/c.java
Get phone number
       com/axis/axismerchantsdk/util/Util.java
Get sim operator name
       com/paypal/android/sdk/onetouch/core/base/DeviceInspector.java
Get sim provider details
       com/paypal/android/sdk/onetouch/core/base/DeviceInspector.java
Get sim serial number
       com/axis/axismerchantsdk/util/UPIJSInterface.java
Get subscriber id
       com/axis/axismerchantsdk/util/UPIJSInterface.java
com/axis/axismerchantsdk/util/Util.java
Get system service
       com/axis/axismerchantsdk/analytics/SessionInfo.java
com/axis/axismerchantsdk/util/UPIJSInterface.java
com/paypal/android/sdk/onetouch/core/base/DeviceInspector.java
com/axis/axismerchantsdk/util/Util.java
zendesk/chat/NetworkConnectivityProvider.java
zendesk/messaging/ui/InputBox.java
com/ubercab/mobileapptracker/model/SessionStatistics.java
a/a/a/a/a.java
com/urbanairship/actions/ClipboardAction.java
com/kochava/base/x.java
com/camerakit/CameraPreview.java
com/adobe/mobile/MobileConfig.java
com/kochava/base/network/DataPointsNetwork.java
com/adobe/marketing/mobile/AssuranceClientInfo.java
com/kochava/base/c.java
com/adobe/marketing/mobile/LocalNotificationHandler.java
com/waze/sdk/WazeNavigationBar.java
com/microsoft/appcenter/distribute/Distribute.java
com/adobe/marketing/mobile/AndroidUIService.java
com/adobe/marketing/mobile/AndroidSystemInfoService.java
com/adobe/mobile/StaticMethods.java
com/adobe/mobile/MessageLocalNotification.java
com/uber/keyvaluestore/core/h.java
com/adobe/mobile/MessageNotificationHandler.java
com/uber/rib/core/screenstack/ScreenController.java
Get wifi details
       com/kochava/base/network/DataPointsNetwork.java
Http connection
       com/adobe/mobile/RemoteDownload.java
com/adobe/marketing/mobile/AssuranceBlob.java
com/axis/axismerchantsdk/analytics/RestClient.java
com/adobe/mobile/RequestHandler.java
com/kochava/base/x.java
com/adobe/marketing/mobile/AndroidHttpConnection.java
Https connection
       com/axis/axismerchantsdk/analytics/RestClient.java
com/adobe/marketing/mobile/HttpConnectionHandler.java
com/adobe/mobile/RequestHandler.java
Inter process communication
       com/adobe/mobile/MessageTargetExperienceUIFullScreen.java
com/vodafone/lib/seclibng/internal/AlarmReceiver.java
com/uber/rib/core/CoreAppCompatActivity.java
com/urbanairship/push/NotificationProxyReceiver.java
com/adobe/marketing/mobile/DataMarshaller.java
com/adobe/marketing/mobile/AndroidNotificationHelper.java
com/waze/sdk/ISdkService.java
com/paypal/android/sdk/onetouch/core/config/Recipe.java
zendesk/messaging/ui/InputBoxAttachmentClickListener.java
com/uber/eats/feed_playground/CoiFeedPlaygroundActivity.java
com/adyen/threeds2/internal/i.java
com/urbanairship/ChannelCaptureActivity.java
com/urbanairship/actions/DeepLinkAction.java
com/adobe/mobile/ReferrerHandler.java
com/urbanairship/locale/LocaleChangeReceiver.java
com/urbanairship/analytics/InstallReceiver.java
com/urbanairship/UAirship.java
com/urbanairship/google/PlayServicesErrorActivity.java
com/jakewharton/processphoenix/ProcessPhoenix.java
com/adobe/marketing/mobile/NotificationDismissalHandler.java
com/adobe/marketing/mobile/AssuranceFullScreenTakeover.java
com/paypal/android/sdk/onetouch/core/sdk/BrowserSwitchHelper.java
com/adobe/mobile/MobileConfig.java
com/adobe/mobile/Lifecycle.java
com/vodafone/lib/seclibng/comms/EntryPointHandling.java
com/waze/sdk/WazeSdk.java
com/adobe/marketing/mobile/AndroidDeepLinkService.java
com/microsoft/appcenter/distribute/Distribute.java
com/urbanairship/iam/html/HtmlActivity.java
com/uber/rib/core/i.java
com/urbanairship/job/AirshipService.java
com/uber/rib/core/RibActivity.java
com/microsoft/appcenter/distribute/DownloadManagerReceiver.java
com/adobe/marketing/mobile/AndroidSystemInfoService.java
com/uber/libraries/foundation/healthlinesdk/reporters/firebase/UserInfoBroadcastReceiver.java
com/adyen/threeds2/internal/AppUpgradeBroadcastReceiver.java
com/paypal/android/sdk/onetouch/core/config/ConfigFileParser.java
com/urbanairship/messagecenter/MessageCenterActivity.java
com/adobe/mobile/MessageFullScreen.java
com/paypal/android/sdk/onetouch/core/sdk/AppSwitchHelper.java
com/urbanairship/actions/EnableFeatureAction.java
com/uber/eats/donutplayground/DonutPlaygroundActivity.java
com/vodafone/lib/seclibng/internal/EventsIntentService.java
com/uber/rib/core/b.java
com/axis/axismerchantsdk/util/UPIJSInterface.java
com/uber/uweber/WeberActivity.java
com/urbanairship/messagecenter/MessageActivity.java
com/urbanairship/actions/RateAppActivity.java
com/adobe/mobile/ReferralReceiver.java
zendesk/messaging/Event.java
com/paypal/android/sdk/onetouch/core/AuthorizationRequest.java
com/axis/axismerchantsdk/activity/PayActivity.java
com/ubercab/mobileapptracker/model/SessionStatistics.java
com/waze/sdk/WazeSdkSettings.java
com/waze/sdk/WazeAudioSdkSettings.java
com/ubercab/presidio/payment/upi/descriptor/UpiIntentWorkerDescriptor$Scope.java
com/urbanairship/iam/InAppMessageActivity.java
com/microsoft/appcenter/distribute/DeepLinkActivity.java
com/urbanairship/push/NotificationProxyActivity.java
com/paypal/android/sdk/onetouch/core/sdk/PendingRequest.java
com/uber/eats_partner_membership_welcome_screen/plugin/b.java
com/urbanairship/location/LocationReceiver.java
com/ubercab/login/LoginManager$BinderWrapper.java
com/vodafone/lib/seclibng/internal/BootBroadCastReceiver.java
com/adobe/mobile/MessageAlert.java
com/adobe/marketing/mobile/BroadcastHandler.java
com/adobe/marketing/mobile/AssuranceClientInfo.java
com/kochava/base/c.java
zendesk/messaging/MessagingActivity.java
com/adobe/marketing/mobile/LocalNotificationHandler.java
com/paypal/android/sdk/onetouch/core/PayPalOneTouchCore.java
com/adobe/marketing/mobile/AssuranceSession.java
com/kochava/base/ReferralReceiver.java
com/waze/sdk/WazeNavigationBar.java
com/urbanairship/actions/RateAppAction.java
zendesk/messaging/Update.java
com/adobe/mobile/MessageOpenURL.java
com/uber/rib/core/a.java
com/waze/sdk/WazeSdkUtils.java
com/adobe/marketing/mobile/AndroidUIService.java
com/adobe/mobile/Analytics.java
com/axis/axismerchantsdk/util/SimUtil.java
com/urbanairship/push/PushMessage.java
com/ubercab/presidio/payment/upi/descriptor/UpiIntentDescriptor$Scope.java
com/adobe/marketing/mobile/AndroidFullscreenMessage.java
com/uber/rib/core/j.java
com/adobe/mobile/MessageLocalNotification.java
com/urbanairship/actions/ShareAction.java
com/adobe/mobile/Messa