0/63

Threat

com.orange.update

App Center

Analyzed on 2022-04-20T13:50:15.789613

17

permissions

22

activities

27

services

36

receivers

39

domains

File sums

MD5 a740582ffbde83e01fdc9136b532d016
SHA1 f47ef73db39ca6c332029b2f9711d06ef1f509b5
SHA256 f9a6b356bb450dfc7e3e25ed18cd5267f2befac353e8f8eeba7f7254afbb4be0
Size 5.33MB

APKiD

Information computed with APKiD.

/tmp/tmpr06bjlbl!classes.dex
anti_vm
  • Build.FINGERPRINT check
  • Build.MODEL check
  • Build.MANUFACTURER check
  • Build.PRODUCT check
  • Build.HARDWARE check
  • Build.TAGS check
  • SIM operator check
  • network operator name check
  • possible VM check
anti_debug
  • Debug.isDebuggerConnected() check
compiler
  • r8
/tmp/tmpr06bjlbl!classes2.dex
compiler
  • r8 without marker (suspicious)

SSdeep

Information computed with ssdeep.

APK file 98304:nASLrpVXLH417oEmxRmluCjR+Q1jOegfy486K2NfrYyREjQv:nASLFx417KxRmnUOOegtRmo
Manifest 768:zz7rnaAkRxcK+rd6CpEid/O3G2OTSbqUQtoTmRj3o9I7yisEaQWtCUdDa4FAFP46:…
classes.dex 98304:0zcm0JV/eGC6PpW0vMytaNbae38JtKUVA:0lSw11eJcV
classes2.dex 6144:WcTd/My4x72knskT7+DXgtC3ERW74F6P8puTQdynOTxwPGF4U0Nb3:Zf4xyJij4U…

Dexofuzzy

Information computed with Dexofuzzy.

APK file 6144:c/+wRBpUTK+uYZ8jfjAkCKTz9KtTf68N3Xp45x4DjoZndXwwx6kfPYM3U6vA0+:c…
classes.dex 6144:c/+wRBpUTK+uYZ8jfjAkCKTz9KtTf68N3Xp45x4DjoZndXwwx6kfPYM3U/:cbBy0…
classes2.dex 384:QRVc2anRRRN4bPtCb8f62/hFyRVO833I9iHPnBx+sr+rkrKn5NnHEAFJ+DDT:qVqn…

APK details

Information computed with AndroGuard and Pithus.

Package com.orange.update
App name App Center
Version name 5.9.12
Version code 6842
SDK 21 - 30
UAID 99d3424959160a2f720d167207d655adfcbeda79
Signature Signature V1 Signature V2 Signature V3
Frosting Not frosted
Blocks found within V2 signature:
  • 0x7109871a: Unknown
  • 0xf05368c0: Unknown
  • 0x42726577: Verity padding

Certificate details

Information computed with AndroGuard.

MD5 f351ae8ce0fe457eaaf708042ce2c909
SHA1 513c0ea5fc5dea245c63ec453269e912665dd118
SHA256 b67affcda89e3193b1595036d7c6cdbe22be5ca24c9f6cf93fc6b48f91d7310d
Issuer Common Name: Orange_Android_Certificate, Organizational Unit: Orange , Organization: Orange, Locality: London, State/Province: London, Country: UK
Not before 2009-06-30T09:31:21+00:00
Not after 2036-11-15T09:31:21+00:00

File Analysis

Information computed with MobSF.

Findings Files
Certificate/Key files hardcoded inside the app. assets/public_key.der

Manifest analysis

Information computed with MobSF.

Low App has a Network Security Configuration[android:networkSecurityConfig=@xml/network_security_config]
The Network Security Configuration feature lets apps customize their network security settings in a safe, declarative configuration file without modifying app code. These settings can be configured for specific domains and for a specific app.
High Activity-Alias (com.orange.update.NavigationActivity) is not Protected. [android:exported=true]
An Activity-Alias is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity-Alias (com.orange.update.FrontActivity) is not Protected. [android:exported=true]
An Activity-Alias is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.orange.update.receiver.SimStateChangedReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.orange.update.receiver.OrangeUpdatesReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.orange.update.receiver.SelfUpgradeReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
Low Broadcast Receiver (com.orange.update.receiver.ConfigReceiver) is Protected by a permission.
Permission: com.orange.update.permission.CONFIG
protectionLevel: signature[android:exported=true]
A Broadcast Receiver is found to be exported, but is protected by permission.
High Broadcast Receiver (com.orange.update.receiver.LauncherStatusReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.miui.home.launcher.permission.LOADING_STATUS [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Broadcast Receiver (com.orange.update.receiver.DateChangedReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.orange.update.receiver.PackageChangeReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.orange.update.receiver.PostTriggerReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.orange.update.receiver.FirstSimReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.orange.update.widget.FolderWidgetProvider) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.orange.update.widget.ComboFolderWidgetProvider) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
Low Broadcast Receiver (com.orange.update.receiver.RequestFcmTokenReceiver) is Protected by a permission.
Permission: com.orange.update.permission.REQUEST_TOKEN
protectionLevel: signature[android:exported=true]
A Broadcast Receiver is found to be exported, but is protected by permission.
Low Broadcast Receiver (com.orange.update.receiver.RequestUniqueIdReceiver) is Protected by a permission.
Permission: com.orange.update.permission.REQUEST_UNIQUE_ID
protectionLevel: signature[android:exported=true]
A Broadcast Receiver is found to be exported, but is protected by permission.
High Service (com.orange.update.service.PartnerAppInstallService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.ironsource.aura.services.remote.RemoteSystemService) is not Protected.An intent-filter exists.
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Service is explicitly exported.
High Content Provider (com.orange.update.provider.CustomerSegmentProvider) is not Protected. [android:exported=true]
A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Content Provider (com.orange.update.provider.InstallReferrerProvider) is not Protected. [android:exported=true]
A Content Provider is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.orange.update.installer.SelfUpgradedReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.orange.update.downloader.DownloadReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.ironsource.aura.sdk.feature.delivery.TrackPackagesBroadcastReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.ironsource.aura.sdk.feature.delivery.apk.usecasehandler.installsuccessnotification.InstallSuccessNotificationRestoreReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.ironsource.aura.services.remote.FirstLaunchBroadcastReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.ironsource.aura.sdk.feature.delivery.apk.DeliveryDownloadCompletedBroadcastReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Broadcast Receiver (com.ironsource.aura.sdk.feature.delivery.update.UpdateViaGooglePlayBroadcastReceiver) is not Protected.An intent-filter exists.
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Broadcast Receiver is explicitly exported.
High Activity (com.google.android.gms.tagmanager.TagManagerPreviewActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Service (androidx.work.impl.background.systemjob.SystemJobService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: android.permission.DUMP [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.

Browsable activities

Information computed with MobSF.

com.orange.update.DashboardActivity

Hosts: @string/app_link_prod_host

Schemes: https://

com.google.android.gms.tagmanager.TagManagerPreviewActivity

Schemes: tagmanager.c.com.orange.update://

Main Activity

Information computed with AndroGuard.

com.orange.update.DashboardActivity

Activities

Information computed with AndroGuard.

com.orange.update.DashboardActivity
com.orange.update.widget.FolderActivity
com.orange.update.SettingsActivity
com.orange.update.appdetail.InstalledAppDetailActivity
com.orange.update.appdetail.AppDetailActivity
com.orange.update.applist.AppListActivity
com.orange.update.ScreenshotActivity
com.orange.update.TermsConditionsActivity
com.orange.update.AgreeAutoInstallActivity
com.orange.update.PrivacyPolicyActivity
com.orange.update.ThirdPartySoftWareActivity
com.orange.update.FeedbackActivity
com.orange.update.SplashActivity
com.orange.update.NewNameActivity
com.orange.update.UpdateAllActivity
com.orange.update.NewVersionActivity
com.orange.update.offer.OfferDetailActivity
com.orange.update.search.SearchActivity
com.orange.update.installer.AgentActivity
com.ironsource.aura.sdk.feature.delivery.OfferUrlResolverActivity
com.google.android.gms.tagmanager.TagManagerPreviewActivity
com.google.android.gms.common.api.GoogleApiActivity

Receivers

Information computed with AndroGuard.

com.orange.update.receiver.SimStateChangedReceiver
com.orange.update.receiver.OrangeUpdatesReceiver
com.orange.update.receiver.SelfUpgradeReceiver
com.orange.update.receiver.ConfigReceiver
com.orange.update.receiver.InternalReceiver
com.orange.update.receiver.LauncherStatusReceiver
com.orange.update.receiver.DateChangedReceiver
com.orange.update.receiver.PackageChangeReceiver
com.orange.update.receiver.PostTriggerReceiver
com.orange.update.receiver.FirstSimReceiver
com.orange.update.widget.FolderWidgetProvider
com.orange.update.widget.ComboFolderWidgetProvider
com.orange.update.receiver.FirstTriggerReceiver
com.orange.update.receiver.RequestFcmTokenReceiver
com.orange.update.receiver.RequestUniqueIdReceiver
com.orange.update.installer.ApiInstaller$ResultReceiver
com.orange.update.installer.SelfUpgradedReceiver
com.orange.update.downloader.DownloadReceiver
com.ironsource.aura.sdk.feature.delivery.TrackPackagesBroadcastReceiver
com.ironsource.aura.sdk.feature.delivery.apk.usecasehandler.installsuccessnotification.InstallSuccessNotificationRestoreReceiver
com.ironsource.aura.sdk.feature.delivery.apk.usecasehandler.installsuccessnotification.InstallSuccessNotificationTouchedBroadcastReceiver
com.ironsource.aura.services.remote.FirstLaunchBroadcastReceiver
com.ironsource.aura.sdk.feature.delivery.update.UpdateNotificationClickReceiver
com.ironsource.aura.sdk.feature.delivery.apk.DeliveryDownloadCompletedBroadcastReceiver
com.ironsource.aura.sdk.feature.delivery.update.UpdateViaGooglePlayBroadcastReceiver
com.google.android.gms.measurement.AppMeasurementReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Services

Information computed with AndroGuard.

com.orange.update.service.AppInstallService
com.orange.update.service.GetCatalogService
com.orange.update.service.FirstSimService
com.orange.update.service.WelcomePageService
com.orange.update.service.PartnerAppInstallService
com.orange.update.service.MyFirebaseMessagingService
com.ironsource.aura.services.remote.RemoteSystemService
com.google.firebase.components.ComponentDiscoveryService
com.orange.update.downloader.ProgressUpdateService
com.ironsource.aura.sdk.feature.delivery.HandlePackageAddedJobIntentService
com.ironsource.aura.sdk.feature.delivery.HandlePackageFullyRemovedIntentService
com.ironsource.aura.sdk.feature.delivery.HandleAppFirstLaunchJobIntentService
com.ironsource.aura.sdk.feature.delivery.apk.ApkDeliveryEnqueueJobIntentService
com.ironsource.aura.sdk.feature.delivery.apk.ApkDeliveryJobService
com.ironsource.aura.sdk.feature.delivery.apk.ApkDeliveryTrackingJobService
com.ironsource.aura.sdk.feature.delivery.PlayInstallCompletionJobService
com.ironsource.aura.sdk.feature.delivery.apk.AggregatedDeliveryNotificationForegroundService
com.google.android.gms.tagmanager.TagManagerService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.firebase.messaging.FirebaseMessagingService
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

Sample timeline

Oldest file found in APK Jan. 1, 1981, 1:01 a.m.
Latest file found in APK Jan. 1, 1981, 1:01 a.m.
Certificate valid not before June 30, 2009, 9:31 a.m.
First submission on VT March 7, 2022, 9:48 p.m.
Last submission on VT April 19, 2022, 7:32 a.m.
Upload on Pithus April 20, 2022, 1:50 p.m.
Certificate valid not after Nov. 15, 2036, 9:31 a.m.

NIAP analysis

Information computed with MobSF.

FCS_RBG_EXT.1.1 The application invoke platform-provided DRBG functionality for its cryptographic operations.
Random Bit Generation Services
FCS_STO_EXT.1.1 The application does not store any credentials to non-volatile memory.
Storage of Credentials
FCS_CKM_EXT.1.1 The application generate no asymmetric cryptographic keys.
Cryptographic Key Generation Services
FDP_DEC_EXT.1.1 The application has access to ['network connectivity'].
Access to Platform Resources
FDP_DEC_EXT.1.2 The application has access to no sensitive information repositories.
Access to Platform Resources
FDP_NET_EXT.1.1 The application has user/application initiated network communications.
Network Communications
FDP_DAR_EXT.1.1 The application implement functionality to encrypt sensitive data in non-volatile memory.
Encryption Of Sensitive Application Data
FMT_MEC_EXT.1.1 The application invoke the mechanisms recommended by the platform vendor for storing and setting configuration options.
Supported Configuration Mechanism
FTP_DIT_EXT.1.1 The application does encrypt some transmitted data with HTTPS/TLS/SSH between itself and another trusted IT product.
Protection of Data in Transit
FCS_RBG_EXT.2.1
FCS_RBG_EXT.2.2
The application perform all deterministic random bit generation (DRBG) services in accordance with NIST Special Publication 800-90A using Hash_DRBG. The deterministic RBG is seeded by an entropy source that accumulates entropy from a platform-based DRBG and a software-based noise source, with a minimum of 256 bits of entropy at least equal to the greatest security strength (according to NIST SP 800-57) of the keys and hashes that it will generate.
Random Bit Generation from Application
FCS_COP.1.1(1) The application perform encryption/decryption in accordance with a specified cryptographic algorithm AES-CBC (as defined in NIST SP 800-38A) mode or AES-GCM (as defined in NIST SP 800-38D) and cryptographic key sizes 256-bit/128-bit.
Cryptographic Operation - Encryption/Decryption
FCS_COP.1.1(2) The application perform cryptographic hashing services not in accordance with FCS_COP.1.1(2) and uses the cryptographic algorithm RC2/RC4/MD4/MD5.
Cryptographic Operation - Hashing
FCS_COP.1.1(3) The application perform cryptographic signature services (generation and verification) in accordance with a specified cryptographic algorithm RSA schemes using cryptographic key sizes of 2048-bit or greater.
Cryptographic Operation - Signing
FCS_COP.1.1(4) The application perform keyed-hash message authentication with cryptographic algorithm ['HMAC-SHA-256'] .
Cryptographic Operation - Keyed-Hash Message Authentication
FCS_HTTPS_EXT.1.1 The application implement the HTTPS protocol that complies with RFC 2818.
HTTPS Protocol
FCS_HTTPS_EXT.1.2 The application implement HTTPS using TLS.
HTTPS Protocol
FCS_HTTPS_EXT.1.3 The application notify the user and not establish the connection or request application authorization to establish the connection if the peer certificate is deemed invalid.
HTTPS Protocol
FIA_X509_EXT.1.1 The application invoked platform-provided functionality to validate certificates in accordance with the following rules: ['The certificate path must terminate with a trusted CA certificate'].
X.509 Certificate Validation
FIA_X509_EXT.2.1 The application use X.509v3 certificates as defined by RFC 5280 to support authentication for HTTPS , TLS.
X.509 Certificate Authentication
FPT_TUD_EXT.2.1 The application shall be distributed using the format of the platform-supported package manager.
Integrity for Installation and Update

Code analysis

Information computed with MobSF.

Low
CVSS:7.5
The App logs information. Sensitive information should never be logged.
MASVS: MSTG-STORAGE-3
CWE-532 Insertion of Sensitive Information into Log File
Files:
 com/ironsource/aura/sdk/feature/settings/Settings.java
com/ironsource/aura/sdk/feature/offers/model/AppData.java
com/ironsource/aura/sdk/feature/delivery/OfferUrlResolverActivity.java
u/a.java
l0/b.java
l1/b.java
com/ironsource/aura/analytics/d.java
com/ironsource/aura/sdk/feature/delivery/apk/usecasehandler/update/UpdateLogger.java
com/ironsource/aura/sdk/utils/AutomationHelper.java
com/ironsource/aura/infra/d.java
q/b.java
h1/b.java
com/orange/update/util/i.java
com/ironsource/aura/sdk/feature/remote/b.java
com/ironsource/aura/sdk/feature/incrementality/Incrementality.java
com/ironsource/aura/infra/VolleyRequestManager.java
o4/c.java
com/ironsource/aura/infra/GaidManager.java
com/ironsource/aura/sdk/feature/delivery/apk/usecasehandler/installsuccessnotification/InstallSuccessNotificationWithButtonsDisplayer.java
com/ironsource/aura/infra/c.java
y2/g.java
c0/e.java
u/b.java
com/ironsource/aura/sdk/feature/incrementality/impression/IncrementalityImpressionReporter.java
com/ironsource/aura/sdk/feature/delivery/HandlePackageAddedJobIntentService.java
b0/l.java
com/ironsource/aura/sdk/network/AuraStack.java
y/j.java
com/ironsource/aura/sdk/db/DatabaseMigrationHelper.java
com/ironsource/aura/sdk/feature/updates/Updates.java
q1/k.java
i0/w.java
o3/b.java
com/ironsource/aura/services/remote/FirstLaunchBroadcastReceiver.java
com/activeandroid/DatabaseHelper.java
p/c.java
com/activeandroid/Cache.java
d1/x.java
com/ironsource/aura/sdk/feature/delivery/attribution/HttpAttributionResolver.java
b0/g.java
com/ironsource/aura/sdk/utils/Datastore.java
w0/a.java
com/ironsource/aura/sdk/utils/AuraInstanceDatastore.java
com/ironsource/aura/sdk/feature/delivery/apk/usecasehandler/installsuccessnotification/InstallSuccessNotificationNoButtonsDisplayer.java
com/ironsource/aura/sdk/feature/delivery/apk/ApkDeliveryEnqueueJobIntentService.java
com/ironsource/aura/sdk/utils/UrlParamUtils.java
com/ironsource/aura/analytics/AuralyticsInstallReferrerPrimaryReceiver.java
com/ironsource/aura/sdk/feature/incrementality/click/IncrementalityClickResolver.java
com/ironsource/aura/sdk/feature/delivery/apk/usecasehandler/update/UpdateStatusChangedPublisher.java
com/ironsource/aura/infra/a.java
com/ironsource/aura/sdk/feature/delivery/TrackingUrlHelper.java
com/ironsource/aura/sdk/feature/delivery/apk/ApkDeliveryJobService.java
com/ironsource/aura/infra/ConnectivityInfoProvider.java
i0/y.java
o2/g.java
com/ironsource/aura/sdk/feature/offers/Offers.java
com/ironsource/aura/sdk/feature/delivery/a.java
com/ironsource/aura/sdk/feature/delivery/apk/DownloadManagerHelper.java
b1/a.java
x8/a.java
com/ironsource/aura/infra/DefaultInfraLogger.java
com/ironsource/aura/sdk/api/Aura.java
com/ironsource/aura/infra/AuraStack.java
com/ironsource/aura/sdk/feature/delivery/HandleAppFirstLaunchJobIntentService.java
com/ironsource/aura/services/remote/RemoteSystemService.java
com/ironsource/aura/sdk/feature/delivery/TrackPackagesBroadcastReceiver.java
com/ironsource/aura/sdk/feature/delivery/RetryImpressionHelper.java
com/ironsource/aura/sdk/feature/delivery/attribution/AttributionStrategyResolver.java
com/ironsource/aura/sdk/utils/Utils.java
com/ironsource/aura/analytics/c.java
i0/a.java
com/ironsource/aura/sdk/feature/remote/c.java
com/activeandroid/util/ReflectionUtils.java
o4/b.java
y/f.java
com/ironsource/aura/sdk/feature/delivery/PlayInstallCompletionJobService.java
com/ironsource/aura/sdk/analytics/AnalyticsReportManager.java
d1/o.java
l2/c.java
a0/g.java
i0/d0.java
com/ironsource/aura/analytics/Auralytics.java
b1/d.java
b0/d.java
com/ironsource/aura/sdk/feature/delivery/HandlePackageFullyRemovedIntentService.java
c0/a.java
com/ironsource/aura/sdk/feature/delivery/model/InstallDeliveryReporter.java
com/ironsource/aura/sdk/db/appinfo/AppDataToAppInfoConverter.java
com/activeandroid/ActiveAndroid.java
com/ironsource/aura/sdk/analytics/a.java
com/ironsource/aura/sdk/feature/delivery/IntentLauncher.java
com/ironsource/aura/analytics/i.java
com/ironsource/aura/sdk/network/GsonElementRequest.java
com/activeandroid/content/ContentProvider.java
com/ironsource/aura/sdk/feature/delivery/AuraDelivery.java
com/ironsource/aura/sdk/feature/delivery/apk/usecasehandler/install/InstallStatusChangedPublisher.java
com/activeandroid/ModelInfo.java
e0/g.java
e4/g.java
com/orange/update/DashboardActivity.java
d1/t.java
t/h.java
com/ironsource/aura/sdk/feature/delivery/update/GooglePlayAppUpdatesManager.java
y8/a.java
com/ironsource/aura/sdk/log/a.java
com/activeandroid/util/Log.java
com/ironsource/aura/sdk/feature/delivery/OfferClickData.java
y/e.java
com/ironsource/aura/analytics/AuralyticsInstallReferrerSecondaryReceiver.java
b1/b.java
k1/y.java
com/ironsource/aura/sdk/feature/offers/FeedProcessor.java
g4/b.java
l1/f.java
m0/c.java
com/ironsource/aura/infra/RetryableRequestManager.java
com/ironsource/aura/sdk/feature/delivery/apk/usecasehandler/installsuccessnotification/InstallSuccessNotificationTouchedBroadcastReceiver.java
x8/c.java
com/ironsource/aura/analytics/HitBuilders.java
b0/f.java
com/ironsource/aura/sdk/feature/cd/ClientDescriptor.java
u0/a.java
com/ironsource/aura/infra/VolleyResponseListener.java
com/ironsource/aura/sdk/feature/remote/RemoteSystem.java
com/ironsource/aura/sdk/feature/delivery/OfferUrlResolver.java
com/activeandroid/Model.java
q3/g.java
com/ironsource/aura/infra/b.java
com/ironsource/aura/sdk/feature/installer/AbstractPackageInstaller.java
com/ironsource/aura/infra/Utils.java
com/ironsource/aura/analytics/g.java
com/ironsource/aura/sdk/feature/offers/model/ProductFeedData.java
com/ironsource/aura/sdk/feature/incrementality/IncrementalityProductFeedProcessor.java
com/ironsource/aura/analytics/Tracker.java
t/d.java
com/ironsource/aura/sdk/feature/delivery/apk/usecasehandler/install/InstallLogger.java
com/activeandroid/util/IOUtils.java
com/ironsource/aura/sdk/feature/delivery/AbstractDelivery.java
com/ironsource/aura/sdk/feature/installer/PackageInstallerFactory.java
com/activeandroid/TableInfo.java
i0/b.java
com/activeandroid/query/From.java
com/ironsource/aura/sdk/feature/delivery/GooglePlayOfferDeliverer.java
i0/i.java
com/ironsource/aura/sdk/feature/delivery/apk/AggregatedDeliveryNotificationForegroundService.java
com/ironsource/aura/infra/VolleyUtils.java
com/ironsource/aura/sdk/feature/delivery/database/QueryHelper.java
k0/d.java
d/a.java
com/activeandroid/util/SQLiteUtils.java
com/ironsource/aura/analytics/h.java
com/ironsource/aura/analytics/infra/Logger.java
g1/b.java
com/orange/update/OrangeUpdateApplication.java
b0/h.java
h/g.java
b0/e.java
com/ironsource/aura/sdk/feature/promotions/data/AppsPromotion.java
a0/i.java
High
CVSS:5.5
App can read/write to External Storage. Any App can read data written to External Storage.
MASVS: MSTG-STORAGE-2
CWE-276 Incorrect Default Permissions
M2: Insecure Data Storage
Files:
 com/ironsource/aura/analytics/h.java
com/ironsource/aura/sdk/utils/HardwareUtil.java
com/ironsource/aura/analytics/g.java
l5/n.java
com/ironsource/aura/services/remote/RemoteSystemService.java
t/h.java
com/ironsource/aura/analytics/i.java
s5/f.java
Medium
CVSS:5.9
App uses SQLite Database and execute raw SQL query. Untrusted user input in raw SQL queries can cause SQL Injection. Also sensitive information should be encrypted and written to the database.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
M7: Client Code Quality
Files:
 d1/e.java
s2/m.java
s2/p.java
com/activeandroid/ActiveAndroid.java
g4/b.java
s2/o.java
s2/i.java
s2/l.java
s2/k.java
b9/d.java
com/activeandroid/DatabaseHelper.java
s2/n.java
h1/a.java
Medium
CVSS:7.5
The App uses an insecure Random Number Generator.
MASVS: MSTG-CRYPTO-6
CWE-330 Use of Insufficiently Random Values
M5: Insufficient Cryptography
Files:
 z7/a.java
j$/util/concurrent/ThreadLocalRandom.java
com/ironsource/aura/analytics/infra/BackOff.java
y7/b.java
y7/a.java
Medium
CVSS:4.3
IP Address disclosure
MASVS: MSTG-CODE-2
CWE-200 Information Exposure
Files:
 com/ironsource/aura/sdk/BuildConfig.java
com/ironsource/aura/sdk/api/AuraConfiguration.java
com/ironsource/aura/analytics/h.java
com/ironsource/aura/analytics/BuildConfig.java
com/ironsource/aura/analytics/infra/Consts.java
com/ironsource/aura/infra/BuildConfig.java
com/ironsource/aura/analytics/infra/ErrorTracker.java
Medium
CVSS:5.5
App creates temp file. Sensitive information should never be written into a temp file.
MASVS: MSTG-STORAGE-2
CWE-276 Incorrect Default Permissions
M2: Insecure Data Storage
Files:
 b1/d.java
d1/x.java
Low
CVSS:0
This App copies data to clipboard. Sensitive data should not be copied to clipboard as other applications can access it.
MASVS: MSTG-STORAGE-10
Files:
 com/orange/update/offer/OfferDetailActivity.java
Info
CVSS:0
This App uses SSL certificate pinning to detect or prevent MITM attacks in secure communication channel.
MASVS: MSTG-NETWORK-4
Files:
 i2/e.java
i8/v.java
i2/f.java
Medium
CVSS:7.4
Files may contain hardcoded sensitive information like usernames, passwords, keys etc.
MASVS: MSTG-STORAGE-14
CWE-312 Cleartext Storage of Sensitive Information
M9: Reverse Engineering
Files:
 com/ironsource/aura/analytics/infra/Report.java
com/ironsource/aura/analytics/infra/TeamAnalyticsConfig.java
com/ironsource/aura/sdk/feature/delivery/model/UpdatesDeliveryPreferencesProvider.java
Pygal Burkina Faso: 100 Botswana: 100 Congo, the Democratic Republic of the: 100 Central African Republic: 100 Cote d'Ivoire: 200 Cameroon: 100 Germany: 100 Egypt: 100 France: 300 Guinea: 100 Jordan: 100 Morocco: 100 Moldova, Republic of: 100 Madagascar: 100 Mali: 100 Romania: 100 Sierra Leone: 100 Senegal: 200 Tunisia: 100 United States: 1500

Map computed by Pithus.

Network analysis

Information computed with MobSF.

Info Certificate pinning does not have an expiry. Ensure that pins are updated before certificate expire.[Pin: lsXooPEubKHzcuzbae7WLBgDyejgmXUqcLpGm/R5adA= Digest: SHA-256,Pin: L01Lo0aTbNv+PL4tIzUSXIPWdqsz3qG8SyKSFzP/Lg8= Digest: SHA-256]
Scope: ['dl.apps.orange.com']
Info Certificate pinning does not have an expiry. Ensure that pins are updated before certificate expire.[Pin: lsXooPEubKHzcuzbae7WLBgDyejgmXUqcLpGm/R5adA= Digest: SHA-256,Pin: L01Lo0aTbNv+PL4tIzUSXIPWdqsz3qG8SyKSFzP/Lg8= Digest: SHA-256]
Scope: ['dl-f.apps.orange.com']

Domains analysis

Information computed with MobSF.

FR c.orange.fr 193.252.133.106
MA www.orange.ma 41.205.208.9
US apps-orange-c3117.firebaseio.com 35.201.97.85
CI www.orange.ci 154.68.9.46
SN www.orange.sn 196.207.246.111
CI www.orange.com.lr 154.68.9.46
US www.apache.org 151.101.2.132
MG www.orange.mg 41.74.25.222
US play.google.com 142.250.184.238
US github.com 140.82.121.4
TN www.orange.tn 41.224.33.232
US track.analytics-data.io 52.2.45.222
CF www.orangerca.com 41.223.184.59
US source.android.com 142.250.186.110
US raw.githubusercontent.com 185.199.111.133
US developer.android.com 142.250.185.110
EG www.orange.eg 41.190.248.34
CD www.orange.cd 41.77.223.187
RO www.dataprotection.ro 213.177.4.36
US square.github.io 185.199.109.153
FR www.mediateur-telecom.fr 217.70.184.50
US overmind.datatheorem.com 142.250.185.83
DE app.appsflyer.com 143.204.98.35
US opensource.org 159.65.34.8
BF www.orange.bf 197.239.64.143
schemas.android.com
BW www.orange.co.bw 41.223.142.154
US www.google.com 142.250.186.132
ML www.orangemali.com 197.155.141.114
FR msurvey.orange.com 90.84.240.161
US gdpr.isappcloud.com 35.162.32.244
US developers.google.com 142.250.184.238
JO www.orange.jo 213.139.33.145
US ib.isappcloud.com 34.194.128.208
CM www.orange.cm 41.202.220.92
SL www.orange.sl 41.191.249.156
GN www.orange-guinee.com 197.149.224.48
SN www.orange-bissau.com 196.207.246.96
MD www.orange.md 212.56.221.5

URL analysis

Information computed with MobSF.

http://schemas.android.com/apk/res/android
Defined in a0/i.java
https://app.appsflyer.com/
Defined in o6/e.java
https://github.com/ReactiveX/RxJava/wiki/What's-different-in-2.0#error-handling
Defined in w6/e.java
https://github.com/ReactiveX/RxJava/wiki/Error-Handling
Defined in w6/c.java
https://ib.isappcloud.com
https://ib.isappcloud.com/bulk
Defined in com/ironsource/aura/analytics/Tracker.java
https://ib.isappcloud.com
https://ib.isappcloud.com/bulk
Defined in com/ironsource/aura/analytics/Tracker.java
http://track.analytics-data.io/bulk
http://track.analytics-data.io
Defined in com/ironsource/aura/analytics/BuildConfig.java
http://track.analytics-data.io/bulk
http://track.analytics-data.io
Defined in com/ironsource/aura/analytics/BuildConfig.java
https://track.analytics-data.io/bulk
Defined in com/ironsource/aura/analytics/infra/TeamAnalyticsConfig.java
https://play.google.com/store/apps/details?
Defined in com/ironsource/aura/sdk/utils/Utils.java
https://gdpr.isappcloud.com
Defined in com/ironsource/aura/sdk/api/GdprManager.java
https://msurvey.orange.com/appcenter_
Defined in com/orange/update/FeedbackActivity.java
https://overmind.datatheorem.com/trustkit/report
Defined in h2/a.java
https://apps-orange-c3117.firebaseio.com
http://c.orange.fr/Charte-Orange-relative-a-la-protection-des-donnees-personnelles-et-de-la-vie-privee.pdf
www.mediateur-telecom.fr)
https://github.com/google/gson
http://www.apache.org/licenses/LICENSE-2.0
http://github.com/JakeWharton/butterknife
https://github.com/ReactiveX/RxJava
https://github.com/ReactiveX/RxAndroid
https://github.com/firebase/firebase-android-sdk
https://developers.google.com/protocol-buffers
https://opensource.org/licenses/BSD-3-Clause
https://www.google.com/analytics/tag-manager
https://github.com/greenrobot/EventBus
https://github.com/greenrobot/greenDAO
https://github.com/nostra13/Android-Universal-Image-Loader
https://github.com/google/volley
https://developer.android.com/jetpack/androidx
https://developer.android.com/jetpack/androidx/releases/core
https://developer.android.com/jetpack/androidx/releases/appcompat
https://developer.android.com/jetpack/androidx/releases/constraintlayout
https://developer.android.com/jetpack/androidx/releases/multidex
https://developer.android.com/jetpack/androidx/releases/recyclerview
https://developer.android.com/jetpack/androidx/releases/preference
https://developer.android.com/jetpack/androidx/releases/cardview
https://developer.android.com/jetpack/androidx/releases/lifecycle
https://developer.android.com/jetpack/androidx/releases/work
https://developer.android.com/jetpack/androidx/releases/concurrent
https://developer.android.com/jetpack/androidx/releases/fragment
https://developer.android.com/jetpack/androidx/releases/room
https://developer.android.com/jetpack/androidx/releases/legacy
https://developer.android.com/jetpack/androidx/releases/webkit
https://github.com/google/roboto
https://github.com/h6ah4i/android-advancedrecyclerview
https://github.com/JetBrains/kotlin
https://github.com/datatheorem/TrustKit-Android
https://raw.githubusercontent.com/datatheorem/TrustKit-Android/master/LICENSE
https://github.com/material-components/material-components-android
https://source.android.com/
https://square.github.io/retrofit/
https://square.github.io/okhttp/
https://developer.android.com/topic/libraries/support-library
http://www.apache.org/licenses/
http://www.dataprotection.ro
www.dataprotection.ro
www.orange.md).
www.orange.md
https://www.orange.co.bw/en/contact-us.html
https://www.orange.bf/particuliers/1/5/contacteznous-3.html
https://www.orange.cm/en/contact-us.html
https://www.orangerca.com/particuliers/1/85/le-service-clients-orange-474.html
https://www.orange.cd/fr/assistance.html
https://www.orange.eg/en/contact-us
https://www.orange-guinee.com/fr/service-client.html
https://www.orange-bissau.com/pt/contacte-nos.html
https://www.orange.ci/fr/contactez-nous.html
https://www.orange.jo/en/pages/contact-us.aspx
https://www.orange.com.lr/en/forms/contact-form.html
https://www.orange.mg/service-clients/nous-contacter/
https://www.orangemali.com/fr/service-clients.html
https://www.orange.ma/Contactez-nous
https://www.orange.sn/service-client-digital
http://www.orange.sl/personal/1/101/discover-help-contact-us.html
http://www.orange.tn/contact
https://www.orange.cm/particuliers/1/27/nous-contacter-112188.html
Defined in Android String Resource
https://apps-orange-c3117.firebaseio.com
http://c.orange.fr/Charte-Orange-relative-a-la-protection-des-donnees-personnelles-et-de-la-vie-privee.pdf
www.mediateur-telecom.fr)
https://github.com/google/gson
http://www.apache.org/licenses/LICENSE-2.0
http://github.com/JakeWharton/butterknife
https://github.com/ReactiveX/RxJava
https://github.com/ReactiveX/RxAndroid
https://github.com/firebase/firebase-android-sdk
https://developers.google.com/protocol-buffers
https://opensource.org/licenses/BSD-3-Clause
https://www.google.com/analytics/tag-manager
https://github.com/greenrobot/EventBus
https://github.com/greenrobot/greenDAO
https://github.com/nostra13/Android-Universal-Image-Loader
https://github.com/google/volley
https://developer.android.com/jetpack/androidx
https://developer.android.com/jetpack/androidx/releases/core
https://developer.android.com/jetpack/androidx/releases/appcompat
https://developer.android.com/jetpack/androidx/releases/constraintlayout
https://developer.android.com/jetpack/androidx/releases/multidex
https://developer.android.com/jetpack/androidx/releases/recyclerview
https://developer.android.com/jetpack/androidx/releases/preference
https://developer.android.com/jetpack/androidx/releases/cardview
https://developer.android.com/jetpack/androidx/releases/lifecycle
https://developer.android.com/jetpack/androidx/releases/work
https://developer.android.com/jetpack/androidx/releases/concurrent
https://developer.android.com/jetpack/androidx/releases/fragment
https://developer.android.com/jetpack/androidx/releases/room
https://developer.android.com/jetpack/androidx/releases/legacy
https://developer.android.com/jetpack/androidx/releases/webkit
https://github.com/google/roboto
https://github.com/h6ah4i/android-advancedrecyclerview
https://github.com/JetBrains/kotlin
https://github.com/datatheorem/TrustKit-Android
https://raw.githubusercontent.com/datatheorem/TrustKit-Android/master/LICENSE
https://github.com/material-components/material-components-android
https://source.android.com/
https://square.github.io/retrofit/
https://square.github.io/okhttp/
https://developer.android.com/topic/libraries/support-library
http://www.apache.org/licenses/
http://www.dataprotection.ro
www.dataprotection.ro
www.orange.md).
www.orange.md
https://www.orange.co.bw/en/contact-us.html
https://www.orange.bf/particuliers/1/5/contacteznous-3.html
https://www.orange.cm/en/contact-us.html
https://www.orangerca.com/particuliers/1/85/le-service-clients-orange-474.html
https://www.orange.cd/fr/assistance.html
https://www.orange.eg/en/contact-us
https://www.orange-guinee.com/fr/service-client.html
https://www.orange-bissau.com/pt/contacte-nos.html
https://www.orange.ci/fr/contactez-nous.html
https://www.orange.jo/en/pages/contact-us.aspx
https://www.orange.com.lr/en/forms/contact-form.html
https://www.orange.mg/service-clients/nous-contacter/
https://www.orangemali.com/fr/service-clients.html
https://www.orange.ma/Contactez-nous
https://www.orange.sn/service-client-digital
http://www.orange.sl/personal/1/101/discover-help-contact-us.html
http://www.orange.tn/contact
https://www.orange.cm/particuliers/1/27/nous-contacter-112188.html
Defined in Android String Resource
https://apps-orange-c3117.firebaseio.com
http://c.orange.fr/Charte-Orange-relative-a-la-protection-des-donnees-personnelles-et-de-la-vie-privee.pdf
www.mediateur-telecom.fr)
https://github.com/google/gson
http://www.apache.org/licenses/LICENSE-2.0
http://github.com/JakeWharton/butterknife
https://github.com/ReactiveX/RxJava
https://github.com/ReactiveX/RxAndroid
https://github.com/firebase/firebase-android-sdk
https://developers.google.com/protocol-buffers
https://opensource.org/licenses/BSD-3-Clause
https://www.google.com/analytics/tag-manager
https://github.com/greenrobot/EventBus
https://github.com/greenrobot/greenDAO
https://github.com/nostra13/Android-Universal-Image-Loader
https://github.com/google/volley
https://developer.android.com/jetpack/androidx
https://developer.android.com/jetpack/androidx/releases/core
https://developer.android.com/jetpack/androidx/releases/appcompat
https://developer.android.com/jetpack/androidx/releases/constraintlayout
https://developer.android.com/jetpack/androidx/releases/multidex
https://developer.android.com/jetpack/androidx/releases/recyclerview
https://developer.android.com/jetpack/androidx/releases/preference
https://developer.android.com/jetpack/androidx/releases/cardview
https://developer.android.com/jetpack/androidx/releases/lifecycle
https://developer.android.com/jetpack/androidx/releases/work
https://developer.android.com/jetpack/androidx/releases/concurrent
https://developer.android.com/jetpack/androidx/releases/fragment
https://developer.android.com/jetpack/androidx/releases/room
https://developer.android.com/jetpack/androidx/releases/legacy
https://developer.android.com/jetpack/androidx/releases/webkit
https://github.com/google/roboto
https://github.com/h6ah4i/android-advancedrecyclerview
https://github.com/JetBrains/kotlin
https://github.com/datatheorem/TrustKit-Android
https://raw.githubusercontent.com/datatheorem/TrustKit-Android/master/LICENSE
https://github.com/material-components/material-components-android
https://source.android.com/
https://square.github.io/retrofit/
https://square.github.io/okhttp/
https://developer.android.com/topic/libraries/support-library
http://www.apache.org/licenses/
http://www.dataprotection.ro
www.dataprotection.ro
www.orange.md).
www.orange.md
https://www.orange.co.bw/en/contact-us.html
https://www.orange.bf/particuliers/1/5/contacteznous-3.html
https://www.orange.cm/en/contact-us.html
https://www.orangerca.com/particuliers/1/85/le-service-clients-orange-474.html
https://www.orange.cd/fr/assistance.html
https://www.orange.eg/en/contact-us
https://www.orange-guinee.com/fr/service-client.html
https://www.orange-bissau.com/pt/contacte-nos.html
https://www.orange.ci/fr/contactez-nous.html
https://www.orange.jo/en/pages/contact-us.aspx
https://www.orange.com.lr/en/forms/contact-form.html
https://www.orange.mg/service-clients/nous-contacter/
https://www.orangemali.com/fr/service-clients.html
https://www.orange.ma/Contactez-nous
https://www.orange.sn/service-client-digital
http://www.orange.sl/personal/1/101/discover-help-contact-us.html
http://www.orange.tn/contact
https://www.orange.cm/particuliers/1/27/nous-contacter-112188.html
Defined in Android String Resource
https://apps-orange-c3117.firebaseio.com
http://c.orange.fr/Charte-Orange-relative-a-la-protection-des-donnees-personnelles-et-de-la-vie-privee.pdf
www.mediateur-telecom.fr)
https://github.com/google/gson
http://www.apache.org/licenses/LICENSE-2.0
http://github.com/JakeWharton/butterknife
https://github.com/ReactiveX/RxJava
https://github.com/ReactiveX/RxAndroid
https://github.com/firebase/firebase-android-sdk
https://developers.google.com/protocol-buffers
https://opensource.org/licenses/BSD-3-Clause
https://www.google.com/analytics/tag-manager
https://github.com/greenrobot/EventBus
https://github.com/greenrobot/greenDAO
https://github.com/nostra13/Android-Universal-Image-Loader
https://github.com/google/volley
https://developer.android.com/jetpack/androidx
https://developer.android.com/jetpack/androidx/releases/core
https://developer.android.com/jetpack/androidx/releases/appcompat
https://developer.android.com/jetpack/androidx/releases/constraintlayout
https://developer.android.com/jetpack/androidx/releases/multidex
https://developer.android.com/jetpack/androidx/releases/recyclerview
https://developer.android.com/jetpack/androidx/releases/preference
https://developer.android.com/jetpack/androidx/releases/cardview
https://developer.android.com/jetpack/androidx/releases/lifecycle
https://developer.android.com/jetpack/androidx/releases/work
https://developer.android.com/jetpack/androidx/releases/concurrent
https://developer.android.com/jetpack/androidx/releases/fragment
https://developer.android.com/jetpack/androidx/releases/room
https://developer.android.com/jetpack/androidx/releases/legacy
https://developer.android.com/jetpack/androidx/releases/webkit
https://github.com/google/roboto
https://github.com/h6ah4i/android-advancedrecyclerview
https://github.com/JetBrains/kotlin
https://github.com/datatheorem/TrustKit-Android
https://raw.githubusercontent.com/datatheorem/TrustKit-Android/master/LICENSE
https://github.com/material-components/material-components-android
https://source.android.com/
https://square.github.io/retrofit/
https://square.github.io/okhttp/
https://developer.android.com/topic/libraries/support-library
http://www.apache.org/licenses/
http://www.dataprotection.ro
www.dataprotection.ro
www.orange.md).
www.orange.md
https://www.orange.co.bw/en/contact-us.html
https://www.orange.bf/particuliers/1/5/contacteznous-3.html
https://www.orange.cm/en/contact-us.html
https://www.orangerca.com/particuliers/1/85/le-service-clients-orange-474.html
https://www.orange.cd/fr/assistance.html
https://www.orange.eg/en/contact-us
https://www.orange-guinee.com/fr/service-client.html
https://www.orange-bissau.com/pt/contacte-nos.html
https://www.orange.ci/fr/contactez-nous.html
https://www.orange.jo/en/pages/contact-us.aspx
https://www.orange.com.lr/en/forms/contact-form.html
https://www.orange.mg/service-clients/nous-contacter/
https://www.orangemali.com/fr/service-clients.html
https://www.orange.ma/Contactez-nous
https://www.orange.sn/service-client-digital
http://www.orange.sl/personal/1/101/discover-help-contact-us.html
http://www.orange.tn/contact
https://www.orange.cm/particuliers/1/27/nous-contacter-112188.html
Defined in Android String Resource
https://apps-orange-c3117.firebaseio.com
http://c.orange.fr/Charte-Orange-relative-a-la-protection-des-donnees-personnelles-et-de-la-vie-privee.pdf
www.mediateur-telecom.fr)
https://github.com/google/gson
http://www.apache.org/licenses/LICENSE-2.0
http://github.com/JakeWharton/butterknife
https://github.com/ReactiveX/RxJava
https://github.com/ReactiveX/RxAndroid
https://github.com/firebase/firebase-android-sdk
https://developers.google.com/protocol-buffers
https://opensource.org/licenses/BSD-3-Clause
https://www.google.com/analytics/tag-manager
https://github.com/greenrobot/EventBus
https://github.com/greenrobot/greenDAO
https://github.com/nostra13/Android-Universal-Image-Loader
https://github.com/google/volley
https://developer.android.com/jetpack/androidx
https://developer.android.com/jetpack/androidx/releases/core
https://developer.android.com/jetpack/androidx/releases/appcompat
https://developer.android.com/jetpack/androidx/releases/constraintlayout
https://developer.android.com/jetpack/androidx/releases/multidex
https://developer.android.com/jetpack/androidx/releases/recyclerview
https://developer.android.com/jetpack/androidx/releases/preference
https://developer.android.com/jetpack/androidx/releases/cardview
https://developer.android.com/jetpack/androidx/releases/lifecycle
https://developer.android.com/jetpack/androidx/releases/work
https://developer.android.com/jetpack/androidx/releases/concurrent
https://developer.android.com/jetpack/androidx/releases/fragment
https://developer.android.com/jetpack/androidx/releases/room
https://developer.android.com/jetpack/androidx/releases/legacy
https://developer.android.com/jetpack/androidx/releases/webkit
https://github.com/google/roboto
https://github.com/h6ah4i/android-advancedrecyclerview
https://github.com/JetBrains/kotlin
https://github.com/datatheorem/TrustKit-Android
https://raw.githubusercontent.com/datatheorem/TrustKit-Android/master/LICENSE
https://github.com/material-components/material-components-android
https://source.android.com/
https://square.github.io/retrofit/
https://square.github.io/okhttp/
https://developer.android.com/topic/libraries/support-library
http://www.apache.org/licenses/
http://www.dataprotection.ro
www.dataprotection.ro
www.orange.md).
www.orange.md
https://www.orange.co.bw/en/contact-us.html
https://www.orange.bf/particuliers/1/5/contacteznous-3.html
https://www.orange.cm/en/contact-us.html
https://www.orangerca.com/particuliers/1/85/le-service-clients-orange-474.html
https://www.orange.cd/fr/assistance.html
https://www.orange.eg/en/contact-us
https://www.orange-guinee.com/fr/service-client.html
https://www.orange-bissau.com/pt/contacte-nos.html
https://www.orange.ci/fr/contactez-nous.html
https://www.orange.jo/en/pages/contact-us.aspx
https://www.orange.com.lr/en/forms/contact-form.html
https://www.orange.mg/service-clients/nous-contacter/
https://www.orangemali.com/fr/service-clients.html
https://www.orange.ma/Contactez-nous
https://www.orange.sn/service-client-digital
http://www.orange.sl/personal/1/101/discover-help-contact-us.html
http://www.orange.tn/contact
https://www.orange.cm/particuliers/1/27/nous-contacter-112188.html
Defined in Android String Resource
https://apps-orange-c3117.firebaseio.com
http://c.orange.fr/Charte-Orange-relative-a-la-protection-des-donnees-personnelles-et-de-la-vie-privee.pdf
www.mediateur-telecom.fr)
https://github.com/google/gson
http://www.apache.org/licenses/LICENSE-2.0
http://github.com/JakeWharton/butterknife
https://github.com/ReactiveX/RxJava
https://github.com/ReactiveX/RxAndroid
https://github.com/firebase/firebase-android-sdk
https://developers.google.com/protocol-buffers
https://opensource.org/licenses/BSD-3-Clause
https://www.google.com/analytics/tag-manager
https://github.com/greenrobot/EventBus
https://github.com/greenrobot/greenDAO
https://github.com/nostra13/Android-Universal-Image-Loader
https://github.com/google/volley
https://developer.android.com/jetpack/androidx
https://developer.android.com/jetpack/androidx/releases/core
https://developer.android.com/jetpack/androidx/releases/appcompat
https://developer.android.com/jetpack/androidx/releases/constraintlayout
https://developer.android.com/jetpack/androidx/releases/multidex
https://developer.android.com/jetpack/androidx/releases/recyclerview
https://developer.android.com/jetpack/androidx/releases/preference
https://developer.android.com/jetpack/androidx/releases/cardview
https://developer.android.com/jetpack/androidx/releases/lifecycle
https://developer.android.com/jetpack/androidx/releases/work
https://developer.android.com/jetpack/androidx/releases/concurrent
https://developer.android.com/jetpack/androidx/releases/fragment
https://developer.android.com/jetpack/androidx/releases/room
https://developer.android.com/jetpack/androidx/releases/legacy
https://developer.android.com/jetpack/androidx/releases/webkit
https://github.com/google/roboto
https://github.com/h6ah4i/android-advancedrecyclerview
https://github.com/JetBrains/kotlin
https://github.com/datatheorem/TrustKit-Android
https://raw.githubusercontent.com/datatheorem/TrustKit-Android/master/LICENSE
https://github.com/material-components/material-components-android
https://source.android.com/
https://square.github.io/retrofit/
https://square.github.io/okhttp/
https://developer.android.com/topic/libraries/support-library
http://www.apache.org/licenses/
http://www.dataprotection.ro
www.dataprotection.ro
www.orange.md).
www.orange.md
https://www.orange.co.bw/en/contact-us.html
https://www.orange.bf/particuliers/1/5/contacteznous-3.html
https://www.orange.cm/en/contact-us.html
https://www.orangerca.com/particuliers/1/85/le-service-clients-orange-474.html
https://www.orange.cd/fr/assistance.html
https://www.orange.eg/en/contact-us
https://www.orange-guinee.com/fr/service-client.html
https://www.orange-bissau.com/pt/contacte-nos.html
https://www.orange.ci/fr/contactez-nous.html
https://www.orange.jo/en/pages/contact-us.aspx
https://www.orange.com.lr/en/forms/contact-form.html
https://www.orange.mg/service-clients/nous-contacter/
https://www.orangemali.com/fr/service-clients.html
https://www.orange.ma/Contactez-nous
https://www.orange.sn/service-client-digital
http://www.orange.sl/personal/1/101/discover-help-contact-us.html
http://www.orange.tn/contact
https://www.orange.cm/particuliers/1/27/nous-contacter-112188.html
Defined in Android String Resource
https://apps-orange-c3117.firebaseio.com
http://c.orange.fr/Charte-Orange-relative-a-la-protection-des-donnees-personnelles-et-de-la-vie-privee.pdf
www.mediateur-telecom.fr)
https://github.com/google/gson
http://www.apache.org/licenses/LICENSE-2.0
http://github.com/JakeWharton/butterknife
https://github.com/ReactiveX/RxJava
https://github.com/ReactiveX/RxAndroid
https://github.com/firebase/firebase-android-sdk
https://developers.google.com/protocol-buffers
https://opensource.org/licenses/BSD-3-Clause
https://www.google.com/analytics/tag-manager
https://github.com/greenrobot/EventBus
https://github.com/greenrobot/greenDAO
https://github.com/nostra13/Android-Universal-Image-Loader
https://github.com/google/volley
https://developer.android.com/jetpack/androidx
https://developer.android.com/jetpack/androidx/releases/core
https://developer.android.com/jetpack/androidx/releases/appcompat
https://developer.android.com/jetpack/androidx/releases/constraintlayout
https://developer.android.com/jetpack/androidx/releases/multidex
https://developer.android.com/jetpack/androidx/releases/recyclerview
https://developer.android.com/jetpack/androidx/releases/preference
https://developer.android.com/jetpack/androidx/releases/cardview
https://developer.android.com/jetpack/androidx/releases/lifecycle
https://developer.android.com/jetpack/androidx/releases/work
https://developer.android.com/jetpack/androidx/releases/concurrent
https://developer.android.com/jetpack/androidx/releases/fragment
https://developer.android.com/jetpack/androidx/releases/room
https://developer.android.com/jetpack/androidx/releases/legacy
https://developer.android.com/jetpack/androidx/releases/webkit
https://github.com/google/roboto
https://github.com/h6ah4i/android-advancedrecyclerview
https://github.com/JetBrains/kotlin
https://github.com/datatheorem/TrustKit-Android
https://raw.githubusercontent.com/datatheorem/TrustKit-Android/master/LICENSE
https://github.com/material-components/material-components-android
https://source.android.com/
https://square.github.io/retrofit/
https://square.github.io/okhttp/
https://developer.android.com/topic/libraries/support-library
http://www.apache.org/licenses/
http://www.dataprotection.ro
www.dataprotection.ro
www.orange.md).
www.orange.md
https://www.orange.co.bw/en/contact-us.html
https://www.orange.bf/particuliers/1/5/contacteznous-3.html
https://www.orange.cm/en/contact-us.html
https://www.orangerca.com/particuliers/1/85/le-service-clients-orange-474.html
https://www.orange.cd/fr/assistance.html
https://www.orange.eg/en/contact-us
https://www.orange-guinee.com/fr/service-client.html
https://www.orange-bissau.com/pt/contacte-nos.html
https://www.orange.ci/fr/contactez-nous.html
https://www.orange.jo/en/pages/contact-us.aspx
https://www.orange.com.lr/en/forms/contact-form.html
https://www.orange.mg/service-clients/nous-contacter/
https://www.orangemali.com/fr/service-clients.html
https://www.orange.ma/Contactez-nous
https://www.orange.sn/service-client-digital
http://www.orange.sl/personal/1/101/discover-help-contact-us.html
http://www.orange.tn/contact
https://www.orange.cm/particuliers/1/27/nous-contacter-112188.html
Defined in Android String Resource
https://apps-orange-c3117.firebaseio.com
http://c.orange.fr/Charte-Orange-relative-a-la-protection-des-donnees-personnelles-et-de-la-vie-privee.pdf
www.mediateur-telecom.fr)
https://github.com/google/gson
http://www.apache.org/licenses/LICENSE-2.0
http://github.com/JakeWharton/butterknife
https://github.com/ReactiveX/RxJava
https://github.com/ReactiveX/RxAndroid
https://github.com/firebase/firebase-android-sdk
https://developers.google.com/protocol-buffers
https://opensource.org/licenses/BSD-3-Clause
https://www.google.com/analytics/tag-manager
https://github.com/greenrobot/EventBus
https://github.com/greenrobot/greenDAO
https://github.com/nostra13/Android-Universal-Image-Loader
https://github.com/google/volley
https://developer.android.com/jetpack/androidx
https://developer.android.com/jetpack/androidx/releases/core
https://developer.android.com/jetpack/androidx/releases/appcompat
https://developer.android.com/jetpack/androidx/releases/constraintlayout
https://developer.android.com/jetpack/androidx/releases/multidex
https://developer.android.com/jetpack/androidx/releases/recyclerview
https://developer.android.com/jetpack/androidx/releases/preference
https://developer.android.com/jetpack/androidx/releases/cardview
https://developer.android.com/jetpack/androidx/releases/lifecycle
https://developer.android.com/jetpack/androidx/releases/work
https://developer.android.com/jetpack/androidx/releases/concurrent
https://developer.android.com/jetpack/androidx/releases/fragment
https://developer.android.com/jetpack/androidx/releases/room
https://developer.android.com/jetpack/androidx/releases/legacy
https://developer.android.com/jetpack/androidx/releases/webkit
https://github.com/google/roboto
https://github.com/h6ah4i/android-advancedrecyclerview
https://github.com/JetBrains/kotlin
https://github.com/datatheorem/TrustKit-Android
https://raw.githubusercontent.com/datatheorem/TrustKit-Android/master/LICENSE
https://github.com/material-components/material-components-android
https://source.android.com/
https://square.github.io/retrofit/
https://square.github.io/okhttp/
https://developer.android.com/topic/libraries/support-library
http://www.apache.org/licenses/
http://www.dataprotection.ro
www.dataprotection.ro
www.orange.md).
www.orange.md
https://www.orange.co.bw/en/contact-us.html
https://www.orange.bf/particuliers/1/5/contacteznous-3.html
https://www.orange.cm/en/contact-us.html
https://www.orangerca.com/particuliers/1/85/le-service-clients-orange-474.html
https://www.orange.cd/fr/assistance.html
https://www.orange.eg/en/contact-us
https://www.orange-guinee.com/fr/service-client.html
https://www.orange-bissau.com/pt/contacte-nos.html
https://www.orange.ci/fr/contactez-nous.html
https://www.orange.jo/en/pages/contact-us.aspx
https://www.orange.com.lr/en/forms/contact-form.html
https://www.orange.mg/service-clients/nous-contacter/
https://www.orangemali.com/fr/service-clients.html
https://www.orange.ma/Contactez-nous
https://www.orange.sn/service-client-digital
http://www.orange.sl/personal/1/101/discover-help-contact-us.html
http://www.orange.tn/contact
https://www.orange.cm/particuliers/1/27/nous-contacter-112188.html
Defined in Android String Resource
https://apps-orange-c3117.firebaseio.com
http://c.orange.fr/Charte-Orange-relative-a-la-protection-des-donnees-personnelles-et-de-la-vie-privee.pdf
www.mediateur-telecom.fr)
https://github.com/google/gson
http://www.apache.org/licenses/LICENSE-2.0
http://github.com/JakeWharton/butterknife
https://github.com/ReactiveX/RxJava
https://github.com/ReactiveX/RxAndroid
https://github.com/firebase/firebase-android-sdk
https://developers.google.com/protocol-buffers
https://opensource.org/licenses/BSD-3-Clause
https://www.google.com/analytics/tag-manager
https://github.com/greenrobot/EventBus
https://github.com/greenrobot/greenDAO
https://github.com/nostra13/Android-Universal-Image-Loader
https://github.com/google/volley
https://developer.android.com/jetpack/androidx
https://developer.android.com/jetpack/androidx/releases/core
https://developer.android.com/jetpack/androidx/releases/appcompat
https://developer.android.com/jetpack/androidx/releases/constraintlayout
https://developer.android.com/jetpack/androidx/releases/multidex
https://developer.android.com/jetpack/androidx/releases/recyclerview
https://developer.android.com/jetpack/androidx/releases/preference
https://developer.android.com/jetpack/androidx/releases/cardview
https://developer.android.com/jetpack/androidx/releases/lifecycle
https://developer.android.com/jetpack/androidx/releases/work
https://developer.android.com/jetpack/androidx/releases/concurrent
https://developer.android.com/jetpack/androidx/releases/fragment
https://developer.android.com/jetpack/androidx/releases/room
https://developer.android.com/jetpack/androidx/releases/legacy
https://developer.android.com/jetpack/androidx/releases/webkit
https://github.com/google/roboto
https://github.com/h6ah4i/android-advancedrecyclerview
https://github.com/JetBrains/kotlin
https://github.com/datatheorem/TrustKit-Android
https://raw.githubusercontent.com/datatheorem/TrustKit-Android/master/LICENSE
https://github.com/material-components/material-components-android
https://source.android.com/
https://square.github.io/retrofit/
https://square.github.io/okhttp/
https://developer.android.com/topic/libraries/support-library
http://www.apache.org/licenses/
http://www.dataprotection.ro
www.dataprotection.ro
www.orange.md).
www.orange.md
https://www.orange.co.bw/en/contact-us.html
https://www.orange.bf/particuliers/1/5/contacteznous-3.html
https://www.orange.cm/en/contact-us.html
https://www.orangerca.com/particuliers/1/85/le-service-clients-orange-474.html
https://www.orange.cd/fr/assistance.html
https://www.orange.eg/en/contact-us
https://www.orange-guinee.com/fr/service-client.html
https://www.orange-bissau.com/pt/contacte-nos.html
https://www.orange.ci/fr/contactez-nous.html
https://www.orange.jo/en/pages/contact-us.aspx
https://www.orange.com.lr/en/forms/contact-form.html
https://www.orange.mg/service-clients/nous-contacter/
https://www.orangemali.com/fr/service-clients.html
https://www.orange.ma/Contactez-nous
https://www.orange.sn/service-client-digital
http://www.orange.sl/personal/1/101/discover-help-contact-us.html
http://www.orange.tn/contact
https://www.orange.cm/particuliers/1/27/nous-contacter-112188.html
Defined in Android String Resource