APK Security & Privacy Score
Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.
Security
Scan-weighted
98/100
Threat scan clean
Modern target SDK
Privacy
Permissions & network
47/100
High-risk permissions
HTTP URLs found
64/100
Caution
Overall trust
Facts
Threat scan
0/76 flagged, 0 suspicious
Permissions
40 requested
Network strings
6 URLs (1 HTTP, 5 HTTPS)
Target SDK
35
Certificate
Valid until 2054-04-07 (28 years, suspicious)
Warnings
Found 1 HTTP URL strings (unencrypted).
High-risk permissions detected: android.permission.RECEIVE_BOOT_COMPLETED
Requests 40 permissions (review carefully).
Package Name
com.tatamotors.oneapp
Version Code
43
Version Name
1.0.4.3
Application Name
com.tatamotors.oneapp.application.TMLApplication
Debuggable
No
Allow Backup
No
Min SDK
Android 26 (Oreo)
Target SDK
Android 35 (Android 15)
Supported ABIs
Universal
Certificate & Signer
Valid From
Valid To
Serial Number
Thumbprint
Issuer: C
Issuer: CN
Issuer: DN
Issuer: L
Issuer: O
Issuer: OU
Issuer: ST
Subject: C
Subject: CN
Subject: DN
Subject: L
Subject: O
Subject: OU
Subject: ST
Security Scan
0
✓ Clean
Malicious
0
Suspicious
0
Harmless
0
Undetected
59
Timeout
4
Failure
3
Scan Providers
ALYac
APEX
AVG
Acronis
AhnLab-V3
Alibaba
Antiy-AVL
Arcabit
Avast
Avast-Mobile
Avira
Baidu
BitDefender
BitDefenderFalx
Bkav
CAT-QuickHeal
CMC
CTX
ClamAV
CrowdStrike
Cylance
Cynet
DeepInstinct
DrWeb
ESET-NOD32
Elastic
Emsisoft
F-Secure
Fortinet
GData
Google
Gridinsoft
Ikarus
Jiangmin
K7AntiVirus
K7GW
Kaspersky
Kingsoft
Lionic
Malwarebytes
MaxSecure
McAfeeD
MicroWorld-eScan
Microsoft
NANO-Antivirus
Paloalto
Panda
Rising
SUPERAntiSpyware
Sangfor
SentinelOne
Skyhigh
Sophos
Symantec
SymantecMobileInsight
TACHYON
Tencent
Trapmine
TrellixENS
TrendMicro
TrendMicro-HouseCall
Trustlook
VBA32
VIPRE
Varist
ViRobot
VirIT
Webroot
Xcitium
Yandex
Zillya
ZoneAlarm
Zoner
alibabacloud
huorong
tehtris
File Signatures
SHA-256
26c12271d2e3a3c021ac5fb9a82d29136723416533fcc726ce0f8949f6cd94fa
MD5
76c3e4a20676f045a9d90046644ca417
SHA-1
ade1887e88864d0e335af454493c81e85c92d05a
SSDEEP
1572864:bDzzmnEj9PuPxU9Flpwuc8J+Opa4SOMGw75rkLvmYo60qUZgo:fEEjB2u9tl+O2SwevDo6y9
TLSH
T1CA18E04AAB029835FDAEC23D8571C310B7312D4EEA43D76328C4B5A9EE766F4364C2D5
VHASH
15318dec5a108d15d644620fb586b301
PERMHASH
a42cada8176473cc68012ae97fa48bea91f2c3f394a07b1e9c23185af8b907dd
File Intelligence
Type Description
Human-friendly file type name based on multiple detection methods.
Type Extension
Most likely file extension inferred from the content.
Type Tag
Primary type tag assigned by the classifier.
Type Tags
Additional type tags that describe the file content.
Magic
File signature result from magic bytes inspection.
Magika
File type predicted by Magika (ML-based file type detection).
TrID
TrID file type guesses with probabilities.
dhash
Perceptual hash used to compare visual similarity of files.
raw md5
Raw MD5 hash of the file contents.
extensions
File extensions found inside the APK and how many of each.
file types
Detected embedded file types and their counts.
highest datetime
Latest timestamp found among files inside the archive.
lowest datetime
Earliest timestamp found among files inside the archive.
num children
Number of files contained within the archive.
type
Container type detected for the analyzed file.
uncompressed size
Estimated total size of all files after extraction.
Deep Manifest Analysis
Activity Intents (7)
androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity
androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivity
androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivity
com.facebook.CustomTabActivity
com.tatamotors.oneapp.ui.splash.SplashActivity
in.juspay.hypernfc.NfcActivity
in.juspay.hypersdk.core.CustomtabResult
Service Intents (2)
Firebase messaging service
com.google.firebase.messaging.FirebaseMessagingService
com.tatamotors.oneapp.pushNotification.FirebaseMsgService
Receiver Intents (14)
Profile installer
androidx.profileinstaller.ProfileInstallReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
Work rescheduler
androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver
com.facebook.CurrentAccessTokenExpirationBroadcastReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.tatamotors.oneapp.utils.account.ConnectivityReceiver
com.tatamotors.oneapp.utils.geofencer.service.GeofenceBootReceiver
com.tatamotors.oneapp.widgets.NewAppWidget
Requested Permissions (40)
android.permission.POST_NOTIFICATIONS
android.permission.POST_NOTIFICATIONS
access precise location only in the foreground
android.permission.ACCESS_FINE_LOCATION
have full network access
android.permission.INTERNET
access approximate location only in the foreground
android.permission.ACCESS_COARSE_LOCATION
take pictures and videos
android.permission.CAMERA
view network connections
android.permission.ACCESS_NETWORK_STATE
read phone status and identity
android.permission.READ_PHONE_STATE
run at startup
android.permission.RECEIVE_BOOT_COMPLETED
read the contents of your shared storage
android.permission.READ_EXTERNAL_STORAGE
directly call phone numbers
android.permission.CALL_PHONE
view Wi-Fi connections
android.permission.ACCESS_WIFI_STATE
connect and disconnect from Wi-Fi
android.permission.CHANGE_WIFI_STATE
Read calendar events and details
android.permission.READ_CALENDAR
add or modify calendar events and send email to guests without owners\' knowledge
android.permission.WRITE_CALENDAR
read your contacts
android.permission.READ_CONTACTS
android.hardware.usb.host
android.permission.USB_PERMISSION
android.permission.USB_PERMISSION
pair with Bluetooth devices
android.permission.BLUETOOTH
access Bluetooth settings
android.permission.BLUETOOTH_ADMIN
Foreground service
android.permission.FOREGROUND_SERVICE
android.permission.BLUETOOTH_CONNECT
android.permission.BLUETOOTH_CONNECT
android.permission.BLUETOOTH_SCAN
android.permission.BLUETOOTH_SCAN
android.permission.FOREGROUND_SERVICE_LOCATION
android.permission.FOREGROUND_SERVICE_LOCATION
android.permission.SCHEDULE_EXACT_ALARM
android.permission.SCHEDULE_EXACT_ALARM
com.google.android.providers.gsf.permisson.READ_GSERVICES
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.READ_MEDIA_VIDEO
set an alarm
com.android.alarm.permission.SET_ALARM
android.permission.READ_MEDIA_AUDIO
android.permission.READ_MEDIA_AUDIO
modify or delete the contents of your shared storage
android.permission.WRITE_EXTERNAL_STORAGE
control Near Field Communication
android.permission.NFC
android.permission.USE_BIOMETRIC
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
android.permission.USE_FINGERPRINT
keep car screen turned on
android.permission.WAKE_LOCK
Cloud messaging receive
com.google.android.c2dm.permission.RECEIVE
com.google.android.providers.gsf.permission.READ_GSERVICES
com.google.android.providers.gsf.permission.READ_GSERVICES
com.google.android.gms.permission.AD_ID
com.google.android.gms.permission.AD_ID
reorder running apps
android.permission.REORDER_TASKS
Install Referrer service
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
Dynamic receiver access
com.tatamotors.oneapp.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Uses Features (5)
Bluetooth Le
android.hardware.bluetooth_le
Camera
android.hardware.camera
Camera Autofocus
android.hardware.camera.autofocus
Telephony
android.hardware.telephony
Usb Accessory
android.hardware.usb.accessory
Activities (26)
com.tatamotors.oneapp.ui.splash.SplashActivity
com.tatamotors.oneapp.ui.dashboard.DashboardActivity
com.tatamotors.oneapp.ui.onboarding.OnBoardingActivity
com.tatamotors.oneapp.pushNotification.DialogActivity
com.tatamotors.oneapp.ui.remotecommand.RemoteCommandActivity
com.tatamotors.oneapp.ui.app_offline.OfflineActivity
com.tatamotors.oneapp.ui.help_support.contactus.ContactUsActivity
com.facebook.CustomTabActivity
com.tonetag.ttfastag.FastagActivity
com.tatamotors.irachatbot.ChatbotActivity
com.tatamotors.irachatbot.controller.activities.FeedbackActivity
com.tatamotors.irachatbot.controller.activities.HelpSupportActivity
com.tatamotors.irachatbot.controller.activities.VideoPlayerActivity
com.rajat.pdfviewer.PdfViewerActivity
com.canhub.cropper.CropImageActivity
in.juspay.hypersdk.core.CustomtabActivity
in.juspay.hypersdk.core.CustomtabResult
in.juspay.hypernfc.NfcActivity
com.facebook.FacebookActivity
com.facebook.CustomTabMainActivity
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
com.google.android.gms.common.api.GoogleApiActivity
androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity
androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivity
androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivity
com.google.android.play.core.common.PlayCoreDialogWrapperActivity
Services (15)
com.tatamotors.oneapp.utils.geofencer.service.GeofenceBootService
com.tatamotors.oneapp.utils.geofencer.GeofenceService
com.tatamotors.oneapp.pushNotification.FirebaseMsgService
com.google.android.gms.auth.api.signin.RevocationBoundService
Firebase messaging service
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.components.ComponentDiscoveryService
com.google.firebase.sessions.SessionLifecycleService
androidx.room.MultiInstanceInvalidationService
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
Broadcast Receivers (19)
com.tatamotors.oneapp.widgets.NewAppWidget
com.tatamotors.oneapp.widgets.NewAppWidget
com.tatamotors.oneapp.utils.geofencer.service.GeofenceBroadcastReceiver
com.tatamotors.oneapp.utils.geofencer.service.GeofenceBroadcastReceiver
com.tatamotors.oneapp.ui.feed.service.AlarmReceiver
com.tatamotors.oneapp.ui.feed.service.AlarmReceiver
com.tatamotors.oneapp.utils.geofencer.service.GeofenceBootReceiver
com.tatamotors.oneapp.utils.geofencer.service.GeofenceBootReceiver
com.tatamotors.oneapp.utils.account.ConnectivityReceiver
com.tatamotors.oneapp.utils.account.ConnectivityReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
Work rescheduler
androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
com.facebook.CurrentAccessTokenExpirationBroadcastReceiver
com.facebook.CurrentAccessTokenExpirationBroadcastReceiver
com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver
com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver
com.google.android.gms.measurement.AppMeasurementReceiver
com.google.android.gms.measurement.AppMeasurementReceiver
Profile installer
androidx.profileinstaller.ProfileInstallReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
Content Providers (6)
androidx.core.content.FileProvider
com.tatamotors.irachatbot.InitProvider
com.canhub.cropper.CropFileProvider
com.google.firebase.provider.FirebaseInitProvider
androidx.startup.InitializationProvider
com.facebook.internal.FacebookInitProvider
URL Endpoints (14)
http://www.google.com/
http://www.slf4j.org/codes.html#StaticLoggerBinder
http://www.slf4j.org/codes.html#multiple_bindings
http://www.slf4j.org/codes.html#no_static_mdc_binder
http://www.slf4j.org/codes.html#null_MDCA
http://www.slf4j.org/codes.html#replay
http://www.slf4j.org/codes.html#substituteLogger
http://www.slf4j.org/codes.html#unsuccessfulInit
http://www.slf4j.org/codes.html#version_mismatch
https://assets.juspay.in/juspay/payments/2.0/release/v1-config.zip
https://bitmovin-a.akamaihd.net/content/MI201109210084_1/mpds/f08e80da-bf1d-4e3d-8899-f0f6155f6efa.mpd
https://debug.logs.juspay.net/godel/analytics
https://dev-cars.tatamotors.com/
https://logs.juspay.in/godel/analytics
Submission Details
Submitted At
First Submission
Last Submission
Stored Until