APK Security & Privacy Score
Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.
Security
Scan-weighted
94/100
Threat scan clean
Modern target SDK
Privacy
Permissions & network
85/100
High-risk permissions
HTTP URLs found
AllowBackup enabled
89/100
Good
Overall trust
Facts
Threat scan
0/74 flagged, 0 suspicious
Permissions
30 requested
Network strings
24 URLs (2 HTTP, 22 HTTPS)
Target SDK
36
Certificate
Valid until 2056-03-14 (30 years, suspicious)
Warnings
Found 2 HTTP URL strings (unencrypted).
High-risk permissions detected: android.permission.SYSTEM_ALERT_WINDOW, android.permission.RECEIVE_BOOT_COMPLETED
Requests 30 permissions (review carefully).
AllowBackup is enabled.
Package Name
com.moneta.thrift.flow
Version Code
31
Version Name
2.2.3
Application Name
com.moneta.thrift.flow.MainApplication
Debuggable
No
Allow Backup
Yes
Min SDK
Android 24 (Nougat)
Target SDK
Android 36 (Unknown)
Supported ABIs
Universal
Certificate & Signer
Valid From
Valid To
Serial Number
Thumbprint
Issuer: C
Issuer: CN
Issuer: DN
Issuer: L
Issuer: O
Issuer: OU
Issuer: ST
Subject: C
Subject: CN
Subject: DN
Subject: L
Subject: O
Subject: OU
Subject: ST
Security Scan
0
✓ Clean
Malicious
0
Suspicious
0
Harmless
0
Undetected
63
Timeout
1
Failure
1
Scan Providers
ALYac
APEX
AVG
Acronis
AhnLab-V3
Alibaba
Antiy-AVL
Arcabit
Avast
Avast-Mobile
Avira
BitDefender
BitDefenderFalx
Bkav
CAT-QuickHeal
CMC
CTX
ClamAV
CrowdStrike
Cylance
Cynet
DeepInstinct
DrWeb
ESET-NOD32
Elastic
Emsisoft
F-Secure
Fortinet
GData
Google
Ikarus
Jiangmin
K7AntiVirus
K7GW
Kaspersky
Kingsoft
Lionic
Malwarebytes
MaxSecure
McAfeeD
MicroWorld-eScan
Microsoft
NANO-Antivirus
Paloalto
Panda
Rising
SUPERAntiSpyware
Sangfor
SentinelOne
Skyhigh
Sophos
Symantec
SymantecMobileInsight
TACHYON
Tencent
Trapmine
TrellixENS
TrendMicro
TrendMicro-HouseCall
Trustlook
VBA32
VIPRE
Varist
ViRobot
VirIT
Webroot
Xcitium
Yandex
Zillya
ZoneAlarm
Zoner
alibabacloud
huorong
tehtris
File Signatures
SHA-256
8a363daf874d97e66ca646c0b84cb4bbb2876fd2331fcec3810a635ebd6cd740
MD5
bb6416bbb95094864133dcd155e4395e
SHA-1
8a0c16a02bc0796714a0947b162591a0ba2d45a9
SSDEEP
196608:KAKekgfn4rHFd/wtaz2t2PzaeQxsfCwziAv5AI+5m/vYZDpAzMOCJaH4VE:t/4rHFOy2u+HsfCwFim/KpAIJm
TLSH
T15757AE13B7125D32E9AF933169FB47406B325E8B77439B531048F5AC7CB32C49B9A298
VHASH
1cf49131d39150f5a0a40ae0d6d5acac
PERMHASH
89abeec0cedd035765ea3502ab0b4c2bff8a0c7646cfec3d9a9772b43b3ec197
File Intelligence
Type Description
Human-friendly file type name based on multiple detection methods.
Type Extension
Most likely file extension inferred from the content.
Type Tag
Primary type tag assigned by the classifier.
Type Tags
Additional type tags that describe the file content.
Magic
File signature result from magic bytes inspection.
Magika
File type predicted by Magika (ML-based file type detection).
TrID
TrID file type guesses with probabilities.
dhash
Perceptual hash used to compare visual similarity of files.
raw md5
Raw MD5 hash of the file contents.
extensions
File extensions found inside the APK and how many of each.
file types
Detected embedded file types and their counts.
highest datetime
Latest timestamp found among files inside the archive.
lowest datetime
Earliest timestamp found among files inside the archive.
num children
Number of files contained within the archive.
type
Container type detected for the analyzed file.
uncompressed size
Estimated total size of all files after extraction.
Deep Manifest Analysis
Activity Intents (1)
com.moneta.thrift.flow.MainActivity
Service Intents (2)
Firebase messaging service
com.google.firebase.messaging.FirebaseMessagingService
expo.modules.notifications.service.ExpoFirebaseMessagingService
Receiver Intents (3)
Profile installer
androidx.profileinstaller.ProfileInstallReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
expo.modules.notifications.service.NotificationsService
Requested Permissions (30)
have full network access
android.permission.INTERNET
take pictures and videos
android.permission.CAMERA
read the contents of your shared storage
android.permission.READ_EXTERNAL_STORAGE
This app can appear on top of other apps
android.permission.SYSTEM_ALERT_WINDOW
control vibration
android.permission.VIBRATE
modify or delete the contents of your shared storage
android.permission.WRITE_EXTERNAL_STORAGE
run at startup
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.POST_NOTIFICATIONS
android.permission.POST_NOTIFICATIONS
view network connections
android.permission.ACCESS_NETWORK_STATE
keep car screen turned on
android.permission.WAKE_LOCK
Cloud messaging receive
com.google.android.c2dm.permission.RECEIVE
Dynamic receiver access
com.moneta.thrift.flow.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Install Referrer service
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
App badge update
com.sec.android.provider.badge.permission.READ
App badge update
com.sec.android.provider.badge.permission.WRITE
App badge update
com.htc.launcher.permission.READ_SETTINGS
App badge update
com.htc.launcher.permission.UPDATE_SHORTCUT
App badge update
com.sonyericsson.home.permission.BROADCAST_BADGE
App badge update
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
App badge update
com.anddoes.launcher.permission.UPDATE_COUNT
App badge update
com.majeur.launcher.permission.UPDATE_BADGE
App badge update
com.huawei.android.launcher.permission.CHANGE_BADGE
App badge update
com.huawei.android.launcher.permission.READ_SETTINGS
App badge update
com.huawei.android.launcher.permission.WRITE_SETTINGS
App badge update
android.permission.READ_APP_BADGE
App badge update
com.oppo.launcher.permission.READ_SETTINGS
App badge update
com.oppo.launcher.permission.WRITE_SETTINGS
App badge update
me.everything.badger.permission.BADGE_COUNT_READ
App badge update
me.everything.badger.permission.BADGE_COUNT_WRITE
com.android.vending.CHECK_LICENSE
Activities (4)
com.moneta.thrift.flow.MainActivity
expo.modules.notifications.service.NotificationForwarderActivity
com.google.android.gms.common.api.GoogleApiActivity
com.pairip.licensecheck.LicenseActivity
Services (5)
expo.modules.notifications.service.ExpoFirebaseMessagingService
Firebase messaging service
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.components.ComponentDiscoveryService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
Broadcast Receivers (4)
expo.modules.notifications.service.NotificationsService
expo.modules.notifications.service.NotificationsService
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
Profile installer
androidx.profileinstaller.ProfileInstallReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
Content Providers (5)
com.reactnativecommunity.webview.RNCWebViewFileProvider
expo.modules.filesystem.FileSystemFileProvider
com.google.firebase.provider.FirebaseInitProvider
androidx.startup.InitializationProvider
com.pairip.licensecheck.LicenseContentProvider
URL Endpoints (26)
http://filesystem.local
http://www.android.com/
https://docs.expo.dev/push-notifications/fcm-credentials/
https://docs.swmansion.com/react-native-gesture-handler/docs/guides/migrating-off-rnghenabledroot
https://docs.swmansion.com/react-native-reanimated/docs/guides/troubleshooting#java-side-failed-to-resolve-c-code-version
https://docs.swmansion.com/react-native-reanimated/docs/guides/troubleshooting#mismatch-between-java-code-version-and-c-code-version
https://firebase.google.com/docs/android/kotlin-migration
https://firebase.google.com/support/privacy/init-options
https://github.com/software-mansion/react-native-screens/issues
https://github.com/software-mansion/react-native-screens/issues/17#issuecomment-424704067
https://plus.google.com/
https://www.googleapis.com/auth/appstate
https://www.googleapis.com/auth/datastoremobile
https://www.googleapis.com/auth/drive
https://www.googleapis.com/auth/drive.appdata
https://www.googleapis.com/auth/drive.apps
https://www.googleapis.com/auth/drive.file
https://www.googleapis.com/auth/games
https://www.googleapis.com/auth/games.firstparty
https://www.googleapis.com/auth/games_lite
Submission Details
Submitted At
First Submission
Last Submission
Stored Until