Splitwise-26.2.2.apk

Splitwise

86.43 MB

Analyzed: 2026-03-01 19:00 UTC

Twitter / X Facebook LinkedIn WhatsApp Telegram Reddit

Analyze Another

APK Security & Privacy Score

Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.

Security Scan-weighted

98/100

Threat scan clean Modern target SDK

Privacy Permissions & network

82/100

High-risk permissions HTTP URLs found AllowBackup enabled

89/100

Good

Overall trust

Facts

Threat scan 0/76 flagged, 0 suspicious

Permissions 20 requested

Network strings 8 URLs (1 HTTP, 7 HTTPS)

Target SDK 35

Certificate Valid until 2041-10-25 (16 years, suspicious)

Warnings

Found 1 HTTP URL strings (unencrypted).

High-risk permissions detected: android.permission.RECEIVE_BOOT_COMPLETED

AllowBackup is enabled.

Package Name com.Splitwise.SplitwiseMobile

Version Code 904

Version Name 26.2.2

Application Name com.Splitwise.SplitwiseMobile.SplitwiseApplication

Debuggable No

Allow Backup Yes

Min SDK Android 28 (Pie)

Target SDK Android 35 (Android 15)

Supported ABIs

arm64-v8a armeabi-v7a x86 x86_64

Certificate & Signer

Valid From 2011-09-13 04:29:25

Valid To 2041-10-25 04:29:25

Serial Number 4e6edc25

Thumbprint 373559486d7c1be1298aec3bfbf7d629c274564b

Issuer: C US

Issuer: CN Ryan Laughlin

Issuer: DN C:US, CN:Ryan Laughlin, L:Cambridge, O:Splitwise, ST:MA, OU:Splitwise

Issuer: L Cambridge

Issuer: O Splitwise

Issuer: OU Splitwise

Issuer: ST MA

Subject: C US

Subject: CN Ryan Laughlin

Subject: DN C:US, CN:Ryan Laughlin, L:Cambridge, O:Splitwise, ST:MA, OU:Splitwise

Subject: L Cambridge

Subject: O Splitwise

Subject: OU Splitwise

Subject: ST MA

Security Scan

0 /76

✓ Clean

Scanned by 76 security vendors

Last scan: 2026-02-26 08:06 UTC

Malicious

Suspicious

Harmless

Undetected

Timeout

Failure

Scan Providers

76 vendors

ALYac undetected

No result reported

Engine 2.0.0.10

APEX type-unsupported

No result reported

Engine 6.752

AVG undetected

No result reported

Engine 23.9.8494.0

Acronis undetected

No result reported

Engine 1.2.0.121

AhnLab-V3 undetected

No result reported

Engine 3.29.1.10604

Alibaba undetected

No result reported

Engine 0.3.0.5

Antiy-AVL undetected

No result reported

Engine 3.0

Arcabit undetected

No result reported

Engine 2025.0.0.23

Avast undetected

No result reported

Engine 23.9.8494.0

Avast-Mobile undetected

No result reported

Engine 260225-02

Avira undetected

No result reported

Engine 8.3.3.24

Baidu undetected

No result reported

Engine 1.0.0.2

BitDefender undetected

No result reported

Engine 7.2

BitDefenderFalx undetected

No result reported

Engine 2.0.936

Bkav undetected

No result reported

Engine 2.0.0.1

CAT-QuickHeal undetected

No result reported

Engine 22.00

CMC undetected

No result reported

Engine 2.4.2022.1

CTX undetected

No result reported

Engine 2024.8.29.1

ClamAV timeout

No result reported

Engine 1.5.1.0

CrowdStrike undetected

No result reported

Engine 1.0

Cylance type-unsupported

No result reported

Engine 3.0.0.0

Cynet type-unsupported

No result reported

Engine 4.0.3.4

DeepInstinct type-unsupported

No result reported

Engine 5.0.0.8

DrWeb undetected

No result reported

Engine 7.0.75.2070

ESET-NOD32 undetected

No result reported

Engine 18.2.18.0

Elastic undetected

No result reported

Engine 4.0.250

Emsisoft undetected

No result reported

Engine 2024.8.0.61147

F-Secure undetected

No result reported

Engine 18.10.1547.307

Fortinet timeout

No result reported

Engine 7.0.30.0

GData undetected

No result reported

Engine GD:27.43663AVA:64.30730

Google undetected

No result reported

Engine 1772085634

Gridinsoft undetected

No result reported

Engine 1.0.239.174

Ikarus undetected

No result reported

Engine 6.4.16.0

Jiangmin undetected

No result reported

Engine 16.0.100

K7AntiVirus undetected

No result reported

Engine 14.38.58708

K7GW undetected

No result reported

Engine 14.38.58709

Kaspersky undetected

No result reported

Engine 22.0.1.28

Kingsoft undetected

No result reported

Engine None

Lionic undetected

No result reported

Engine 8.16

Malwarebytes undetected

No result reported

Engine 3.1.0.211

MaxSecure timeout

No result reported

Engine 1.0.0.1

McAfeeD undetected

No result reported

Engine 1.2.0.14023

MicroWorld-eScan undetected

No result reported

Engine 14.0.409.0

Microsoft undetected

No result reported

Engine 1.1.26010.1

NANO-Antivirus undetected

No result reported

Engine 1.0.170.26895

Paloalto type-unsupported

No result reported

Engine 0.9.0.1003

Panda undetected

No result reported

Engine 4.6.4.2

Rising undetected

No result reported

Engine 25.0.0.28

SUPERAntiSpyware undetected

No result reported

Engine 5.6.0.1032

Sangfor undetected

No result reported

Engine 2.22.3.0

SentinelOne type-unsupported

No result reported

Engine 7.5.3.1

Skyhigh undetected

No result reported

Engine v2021.2.0+4045

Sophos undetected

No result reported

Engine 3.3.1.0

Symantec undetected

No result reported

Engine 1.22.0.0

SymantecMobileInsight undetected

No result reported

Engine 2.0

TACHYON undetected

No result reported

Engine 2026-02-26.02

Tencent undetected

No result reported

Engine 1.0.0.1

Trapmine type-unsupported

No result reported

Engine 4.0.10.0

TrellixENS timeout

No result reported

Engine 6.0.6.653

TrendMicro undetected

No result reported

Engine 24.550.0.1002

TrendMicro-HouseCall undetected

No result reported

Engine 24.550.0.1002

Trustlook undetected

No result reported

Engine 1.0

VBA32 undetected

No result reported

Engine 5.5.1

VIPRE undetected

No result reported

Engine 6.0.0.35

Varist undetected

No result reported

Engine 6.6.1.3

ViRobot undetected

No result reported

Engine 2014.3.20.0

VirIT undetected

No result reported

Engine 9.5.1153

Webroot undetected

No result reported

Engine 1.9.0.8

Xcitium undetected

No result reported

Engine 38443

Yandex undetected

No result reported

Engine 5.5.2.24

Zillya undetected

No result reported

Engine 2.0.0.5552

ZoneAlarm undetected

No result reported

Engine 6.23-113518456

Zoner undetected

No result reported

Engine 2.2.2.0

alibabacloud type-unsupported

No result reported

Engine 2.2.0

huorong undetected

No result reported

Engine 2c65c7a:2c65c7a:f6b357d:f6b357d

tehtris type-unsupported

No result reported

File Signatures

SHA-256 a1684d4292ee550ff34c2dcc2a9ac2f68fdb4e8299fb9a7b0b95aa4266df6a7c

MD5 d4ee33c3209bf9c3fde1e2bdbb31fb41

SHA-1 c3d3f0577d32be692644d6b7026be9783b30d7db

SSDEEP 786432:es3RPLhFsYeKna8Tnq+0VPn0vmRdCZ+E21SKty4x5QQZJwWTsQLkD7LjSPWkl:ekPM8MBtREAWKtRx5vJpTs3vG+0

TLSH T1F818D026A7025931C67F27351EFA4740BF301E96A34387971204B4BCBEF32D5AA997C9

VHASH 767d9921542fcb0da89a6cb4c8197027

PERMHASH dc4de19ef9292f0067155e49f965c74d8037394a4474023dcd85d1c0c12f7600

File Intelligence

Type Description Android Human-friendly file type name based on multiple detection methods.

Type Extension apk Most likely file extension inferred from the content.

Type Tag android Primary type tag assigned by the classifier.

Type Tags executable, mobile, android, apk Additional type tags that describe the file content.

Magic Zip archive data, at least v2.0 to extract, compression method=deflate File signature result from magic bytes inspection.

Magika APK File type predicted by Magika (ML-based file type detection).

TrID SPSS Extension (30.7%), Android Package (27.6%), Java Archive (13.8%), VYM Mind Map (12.8%), Sweet Home 3D Design (generic) (10.7%) TrID file type guesses with probabilities.

dhash 0000101e1c150800 Perceptual hash used to compare visual similarity of files.

raw md5 a30b72f23d7f83fc4cbe3d79aaaec621 Raw MD5 hash of the file contents.

extensions png (245), version (112), kotlin_module (84), binarypb (10), dex (6), js (6), txt (5), properties (4), tflite (4), bincfg (2), fb (2), bin (1), BuiltInsLoader (1), CommandLineProcessor (1), ComponentRegistrar (1), conv_model (1), CoroutineExceptionHandler (1), DefaultErrorMessages$Extension (1), ExternalOverridabilityCondition (1), FirExtensionRegistrar (1), html (1), JsonFactory (1), lstm_model (1), MainDispatcherFactory (1), MF (1), Module (1), ObjectCodec (1), pb (1), prof (1), profm (1), proto (1), textproto (1), xml (1) File extensions found inside the APK and how many of each.

file types unknown (752), PNG (245), HTML (1), Java Bytecode (1), XML (1) Detected embedded file types and their counts.

highest datetime 2026-02-19 14:53:54 UTC Latest timestamp found among files inside the archive.

lowest datetime 1981-01-01 01:01:02 UTC Earliest timestamp found among files inside the archive.

num children 3201 Number of files contained within the archive.

type APK Container type detected for the analyzed file.

uncompressed size 59 MB Estimated total size of all files after extraction.

Sandbox

Sandbox Verdicts

Zenbox android

Harmless 93% confidence CLEAN

Deep Manifest Analysis

Activity Intents (3)

com.Splitwise.SplitwiseMobile.features.expense.AddExpenseScreen

Actions

Send Activity Action: Deliver some data to someone else. android.intent.action.SEND

Service Intents (2)

com.Splitwise.SplitwiseMobile.services.SWMessagingService

Actions

Firebase messaging event Action used by Firebase to deliver a push message to the app. com.google.firebase.MESSAGING_EVENT

Firebase messaging service Handles push notifications and data messages from Firebase Cloud Messaging. com.google.firebase.messaging.FirebaseMessagingService

Actions

Firebase messaging event Action used by Firebase to deliver a push message to the app. com.google.firebase.MESSAGING_EVENT

Receiver Intents (9)

Profile installer Installs performance profiles to speed up app startup and hot paths. androidx.profileinstaller.ProfileInstallReceiver

Actions

Install performance profile Installs a profile that helps optimize app performance. androidx.profileinstaller.action.INSTALL_PROFILE

Skip profile install Skips profile installation for this build. androidx.profileinstaller.action.SKIP_FILE

Save performance profile Saves a profile generated during app usage. androidx.profileinstaller.action.SAVE_PROFILE

Benchmark operation Runs a profile installer benchmark operation. androidx.profileinstaller.action.BENCHMARK_OPERATION

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

Actions

Power Connected Broadcast Action: External power has been connected to the device. android.intent.action.ACTION_POWER_CONNECTED

android.intent.action.ACTION_POWER_DISCONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

Actions

Battery Okay Broadcast Action: Indicates the battery is now okay after being low. android.intent.action.BATTERY_OKAY

Battery Low Broadcast Action: Indicates low battery condition on the device. android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

Actions

android.net.conn.CONNECTIVITY_CHANGE android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

Actions

Device Storage Low Broadcast Action: A sticky broadcast that indicates low memory android.intent.action.DEVICE_STORAGE_LOW

Device Storage Ok Broadcast Action: Indicates low memory condition on the device no longer exists android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

Actions

androidx.work.impl.background.systemalarm.UpdateProxies androidx.work.impl.background.systemalarm.UpdateProxies

Work rescheduler Reschedules background work after reboot or app update. androidx.work.impl.background.systemalarm.RescheduleReceiver

Actions

Boot Completed Broadcast Action: This is broadcast once, after the system has finished android.intent.action.BOOT_COMPLETED

Time Changed Broadcast Action: The time was set. android.intent.action.TIME_SET

Timezone Changed Broadcast Action: The timezone has changed. android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.diagnostics.DiagnosticsReceiver

Actions

androidx.work.diagnostics.REQUEST_DIAGNOSTICS androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.google.firebase.iid.FirebaseInstanceIdReceiver

Actions

com.google.android.c2dm.intent.RECEIVE com.google.android.c2dm.intent.RECEIVE

Native Libraries (8)

libandroidx.graphics.path libandroidx.graphics.path.so

libbinary-logging libbinary-logging.so

libimage_processing_util_jni libimage_processing_util_jni.so

libimagepipeline libimagepipeline.so

libmlkit_google_ocr_pipeline libmlkit_google_ocr_pipeline.so

libnative-filters libnative-filters.so

libnative-imagetranscoder libnative-imagetranscoder.so

libsurface_util_jni libsurface_util_jni.so

Requested Permissions (20)

have full network access Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet. android.permission.INTERNET

read your contacts Allows the app to read data about your contacts stored on your tablet. Apps will also have access to the accounts on your tablet that have created contacts. This may include accounts created by apps you have installed. This permission allows apps to save your contact data, and malicious apps may share contact data without your knowledge. android.permission.READ_CONTACTS

control vibration Allows the app to control the vibrator. android.permission.VIBRATE

find accounts on the device Allows the app to get the list of accounts known by the tablet. This may include any accounts created by applications you have installed. android.permission.GET_ACCOUNTS

Use Credentials android.permission.USE_CREDENTIALS

view network connections Allows the app to view information about network connections such as which networks exist and are connected. android.permission.ACCESS_NETWORK_STATE

toggle sync on and off Allows an app to modify the sync settings for an account. For example, this can be used to enable sync of the People app with an account. android.permission.WRITE_SYNC_SETTINGS

Authenticate Accounts android.permission.AUTHENTICATE_ACCOUNTS

read sync settings Allows the app to read the sync settings for an account. For example, this can determine whether the People app is synced with an account. android.permission.READ_SYNC_SETTINGS

Cloud messaging receive Allows the app to receive push messages via Google/Firebase Cloud Messaging. com.google.android.c2dm.permission.RECEIVE

com.google.android.c2dm.permission.REGISTRATION Custom app or vendor permission (not publicly documented). com.google.android.c2dm.permission.REGISTRATION

android.permission.POST_NOTIFICATIONS Custom app or vendor permission (not publicly documented). android.permission.POST_NOTIFICATIONS

take pictures and videos This app can take pictures and record videos using the camera while the app is in use. android.permission.CAMERA

android.permission.USE_BIOMETRIC Custom app or vendor permission (not publicly documented). android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT Custom app or vendor permission (not publicly documented). android.permission.USE_FINGERPRINT

keep car screen turned on Allows the app to keep the car screen turned on. android.permission.WAKE_LOCK

com.android.vending.BILLING

run at startup Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the tablet and allow the app to slow down the overall tablet by always running. android.permission.RECEIVE_BOOT_COMPLETED

Foreground service Allows the app to run a foreground service. android.permission.FOREGROUND_SERVICE

Dynamic receiver access Internal app permission used to protect dynamic broadcast receivers. com.Splitwise.SplitwiseMobile.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Uses Features (3)

Camera Feature for {@link #getSystemAvailableFeatures} and android.hardware.camera

Camera Autofocus Feature for {@link #getSystemAvailableFeatures} and android.hardware.camera.autofocus

Camera Flash Feature for {@link #getSystemAvailableFeatures} and android.hardware.camera.flash

Activities (37)

com.Splitwise.SplitwiseMobile.views.SplitwiseSplashScreen

com.plaid.internal.LinkRedirectActivity

com.Splitwise.SplitwiseMobile.features.login.LoggedOutHomeScreen

com.Splitwise.SplitwiseMobile.features.login.ExpiredSessionScreen

com.Splitwise.SplitwiseMobile.views.WebViewScreen

com.Splitwise.SplitwiseMobile.features.expense.AddExpenseScreen

com.Splitwise.SplitwiseMobile.features.payment.AddPaymentActivity

com.Splitwise.SplitwiseMobile.features.applock.PasscodeActivity

com.Splitwise.SplitwiseMobile.views.ExpenseAddedActivity

com.Splitwise.SplitwiseMobile.views.InviteHandlingActivity

com.Splitwise.SplitwiseMobile.views.GroupInviteHandlingActivity

com.Splitwise.SplitwiseMobile.views.InviteAcceptanceActivity

com.Splitwise.SplitwiseMobile.features.selectpeople.SelectPeopleWizard

com.canhub.cropper.CropImageActivity

com.Splitwise.SplitwiseMobile.views.PasswordResetLinkHandlingActivity

com.Splitwise.SplitwiseMobile.views.MagicLoginLinkHandlingActivity

com.Splitwise.SplitwiseMobile.views.PasswordResetLinkActivity

com.Splitwise.SplitwiseMobile.views.ShareSheetLinkHandlingActivity

com.Splitwise.SplitwiseMobile.views.AddFriendLinkHandlingActivity

com.Splitwise.SplitwiseMobile.features.selectpeople.SelectedPeopleHandlingActivity

com.Splitwise.SplitwiseMobile.views.DashboardActivity

com.Splitwise.SplitwiseMobile.features.shared.views.AppLinkAlertsActivity

com.Splitwise.SplitwiseMobile.features.shared.views.AccountSetupWebView

com.Splitwise.SplitwiseMobile.features.cards.request.SandboxPushProvisioningActivity

com.Splitwise.SplitwiseMobile.features.applock.BiometricsActivity

com.Splitwise.SplitwiseMobile.features.shared.views.MonthYearPickerComponent

com.Splitwise.SplitwiseMobile.features.shared.views.ImageCaptureScreen

com.Splitwise.SplitwiseMobile.features.livesplits.LiveSplitsHandlingActivity

dev.enro.core.hosts.ActivityHostForAnyInstruction

dev.enro.core.hosts.HiltActivityHostForAnyInstruction

com.google.mlkit.vision.documentscanner.internal.GmsDocumentScanningDelegateActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.google.android.gms.common.api.GoogleApiActivity

androidx.compose.ui.tooling.PreviewActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

Services (13)

com.Splitwise.SplitwiseMobile.services.SWMessagingService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.camera.core.impl.MetadataHolderService

com.google.mlkit.common.internal.MlKitComponentDiscoveryService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.components.ComponentDiscoveryService

Firebase messaging service Handles push notifications and data messages from Firebase Cloud Messaging. com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.sessions.SessionLifecycleService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

Broadcast Receivers (14)

com.Splitwise.SplitwiseMobile.services.ContentSharedViaBroadcastReceiver com.Splitwise.SplitwiseMobile.services.ContentSharedViaBroadcastReceiver

com.Splitwise.SplitwiseMobile.services.CodeSharedViaBroadcastReceiver com.Splitwise.SplitwiseMobile.services.CodeSharedViaBroadcastReceiver

com.Splitwise.SplitwiseMobile.services.ReminderSentViaBroadcastReceiver com.Splitwise.SplitwiseMobile.services.ReminderSentViaBroadcastReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

Work rescheduler Reschedules background work after reboot or app update. androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver androidx.work.impl.diagnostics.DiagnosticsReceiver

Profile installer Installs performance profiles to speed up app startup and hot paths. androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Content Providers (6)

com.Splitwise.SplitwiseMobile.data.DummyContentProvider

androidx.core.content.FileProvider

com.canhub.cropper.CropFileProvider

androidx.startup.InitializationProvider

com.google.mlkit.common.internal.MlKitInitProvider

com.google.firebase.provider.FirebaseInitProvider

URL Endpoints (11)

http://mikepenz.com/ https://design.google.com/icons/ https://github.com/Kotlin/kotlinx.coroutines/issues https://github.com/google/material-design-icons/ https://github.com/mikepenz/Android-Iconics https://secure.splitwise.com/pay/first-pryority-privacy-policy https://secure.splitwise.com/pay/splitwise-pay-terms https://splitwise-com-api-project-914255498415.firebaseio.com https://www.google.com/ https://youtrack.jetbrains.com/issue/KT-55980 https://youtrack.jetbrains.com/issue/KT-67202

Submission Details

Submitted At 2026-03-01

First Submission 2026-03-01

Last Submission 2026-03-01

Stored Until 2026-03-31

Names & Tags

apk android obfuscated reflection