APK Security & Privacy Score
Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.
Security
Scan-weighted
90/100
Threat scan clean
Modern target SDK
Privacy
Permissions & network
57/100
High-risk permissions
HTTP URLs found
AllowBackup enabled
Possible tracking
70/100
Caution
Overall trust
Facts
Threat scan
0/74 flagged, 0 suspicious
Permissions
32 requested
Network strings
108 URLs (2 HTTP, 106 HTTPS)
Target SDK
35
Certificate
Valid until 2051-09-18 (25 years, suspicious)
Warnings
Found 2 HTTP URL strings (unencrypted).
High-risk permissions detected: android.permission.ACCESS_SUPERUSER, android.permission.REQUEST_INSTALL_PACKAGES, android.permission.REQUEST_DELETE_PACKAGES, android.permission.PACKAGE_USAGE_STATS, android.permission.QUERY_ALL_PACKAGES
Requests 32 permissions (review carefully).
AllowBackup is enabled.
Possible analytics/tracking domains found: app-measurement.com, firebase-settings.crashlytics.com, pagead2.googlesyndication.com
Package Name
com.uptodown
Version Code
732
Version Name
7.32
Application Name
com.uptodown.UptodownApp
Debuggable
No
Allow Backup
Yes
Min SDK
Android 23 (Marshmallow)
Target SDK
Android 35 (Android 15)
Supported ABIs
arm64-v8a
armeabi-v7a
x86
x86_64
Certificate & Signer
Valid From
Valid To
Serial Number
Thumbprint
Issuer: C
Issuer: CN
Issuer: DN
Issuer: L
Issuer: O
Issuer: OU
Issuer: ST
Subject: C
Subject: CN
Subject: DN
Subject: L
Subject: O
Subject: OU
Subject: ST
Security Scan
0
✓ Clean
Malicious
0
Suspicious
0
Harmless
0
Undetected
65
Timeout
1
Failure
1
Scan Providers
ALYac
APEX
AVG
Acronis
AhnLab-V3
Alibaba
Antiy-AVL
Arcabit
Avast
Avast-Mobile
Avira
BitDefender
BitDefenderFalx
Bkav
CAT-QuickHeal
CMC
CTX
ClamAV
CrowdStrike
Cylance
Cynet
DeepInstinct
DrWeb
ESET-NOD32
Elastic
Emsisoft
F-Secure
Fortinet
GData
Google
Ikarus
Jiangmin
K7AntiVirus
K7GW
Kaspersky
Kingsoft
Lionic
Malwarebytes
MaxSecure
McAfeeD
MicroWorld-eScan
Microsoft
NANO-Antivirus
Paloalto
Panda
Rising
SUPERAntiSpyware
Sangfor
SentinelOne
Skyhigh
Sophos
Symantec
SymantecMobileInsight
TACHYON
Tencent
Trapmine
TrellixENS
TrendMicro
TrendMicro-HouseCall
Trustlook
VBA32
VIPRE
Varist
ViRobot
VirIT
Webroot
Xcitium
Yandex
Zillya
ZoneAlarm
Zoner
alibabacloud
huorong
tehtris
File Signatures
SHA-256
863f05e8c42a2fbf870388bba81383c05469a387f1e6e92707198fe89cd38c5e
MD5
e8225486e0732b5820cc3fa8d1b7ae6c
SHA-1
86c44dc159fce5c8940b40ffeb56279570d4b6ef
SSDEEP
196608:WtnyOEAzo2lneTaaMxo1GoYnSvzWQFMfPJYfOVBA1XV/su+EshrmiuN:WICPlEES1GrfbfPJYfOVK1F9+EsBmX
TLSH
T1BDE6015EB768993EC4BF10B20C4A327523555D22DA42A6E7A419339C34F3EF84F0A7D9
VHASH
241672a31683ebb4ec0f956b245733a4
PERMHASH
7e650ef35b97c82a0bbce76a3304dbc0c9e97de1e1225ecf31068dbc9dea29a8
File Intelligence
Type Description
Human-friendly file type name based on multiple detection methods.
Type Extension
Most likely file extension inferred from the content.
Type Tag
Primary type tag assigned by the classifier.
Type Tags
Additional type tags that describe the file content.
Magic
File signature result from magic bytes inspection.
Magika
File type predicted by Magika (ML-based file type detection).
TrID
TrID file type guesses with probabilities.
dhash
Perceptual hash used to compare visual similarity of files.
raw md5
Raw MD5 hash of the file contents.
extensions
File extensions found inside the APK and how many of each.
file types
Detected embedded file types and their counts.
highest datetime
Latest timestamp found among files inside the archive.
lowest datetime
Earliest timestamp found among files inside the archive.
num children
Number of files contained within the archive.
type
Container type detected for the analyzed file.
uncompressed size
Estimated total size of all files after extraction.
Sandbox
Sandbox Verdicts
Zenbox android
Harmless
96% confidence
CLEAN
Deep Manifest Analysis
Activity Intents (3)
com.uptodown.activities.MainActivity
com.uptodown.activities.SearchActivity
com.uptodown.tv.ui.activity.TvMainActivity
Service Intents (3)
Firebase messaging service
com.google.firebase.messaging.FirebaseMessagingService
com.uptodown.gcm.MyFirebaseMessagingService
com.uptodown.services.AuthenticatorService
Receiver Intents (8)
Profile installer
androidx.profileinstaller.ProfileInstallReceiver
Work rescheduler
androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.uptodown.receivers.BootDeviceReceiver
com.uptodown.receivers.DownloadNotificationReceiver
com.uptodown.receivers.DownloadUpdateNotificationReceiver
com.uptodown.receivers.MyAppUpdatedReceiver
Native Libraries (3)
libandroidx.graphics.path
libandroidx.graphics.path.so
libdatastore_shared_counter
libdatastore_shared_counter.so
libuptodown-native
libuptodown-native.so
Requested Permissions (32)
have full network access
android.permission.INTERNET
view network connections
android.permission.ACCESS_NETWORK_STATE
modify or delete the contents of your shared storage
android.permission.WRITE_EXTERNAL_STORAGE
find accounts on the device
android.permission.GET_ACCOUNTS
keep car screen turned on
android.permission.WAKE_LOCK
measure app storage space
android.permission.GET_PACKAGE_SIZE
run at startup
android.permission.RECEIVE_BOOT_COMPLETED
Use Credentials
android.permission.USE_CREDENTIALS
Authenticate Accounts
android.permission.AUTHENTICATE_ACCOUNTS
Manage Accounts
android.permission.MANAGE_ACCOUNTS
view Wi-Fi connections
android.permission.ACCESS_WIFI_STATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.QUERY_ALL_PACKAGES
android.permission.QUERY_ALL_PACKAGES
android.permission.UPDATE_PACKAGES_WITHOUT_USER_ACTION
android.permission.UPDATE_PACKAGES_WITHOUT_USER_ACTION
android.permission.POST_NOTIFICATIONS
android.permission.POST_NOTIFICATIONS
android.permission.ENFORCE_UPDATE_OWNERSHIP
android.permission.ENFORCE_UPDATE_OWNERSHIP
Install Packages
android.permission.INSTALL_PACKAGES
Delete Packages
android.permission.DELETE_PACKAGES
android.permission.ACCESS_SUPERUSER
android.permission.ACCESS_SUPERUSER
record audio
android.permission.RECORD_AUDIO
Package Usage Stats
android.permission.PACKAGE_USAGE_STATS
android.permission.USE_BIOMETRIC
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
android.permission.USE_FINGERPRINT
Cloud messaging receive
com.google.android.c2dm.permission.RECEIVE
Install Referrer service
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.gms.permission.AD_ID
com.google.android.gms.permission.AD_ID
AdServices Attribution
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
AdServices Advertising ID
android.permission.ACCESS_ADSERVICES_AD_ID
Foreground service
android.permission.FOREGROUND_SERVICE
Dynamic receiver access
com.uptodown.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Uses Features (8)
Camera
android.hardware.camera
Faketouch
android.hardware.faketouch
Location Gps
android.hardware.location.gps
Microphone
android.hardware.microphone
android.hardware.sensor
Touchscreen
android.hardware.touchscreen
Wifi
android.hardware.wifi
Leanback
android.software.leanback
Activities (64)
com.uptodown.activities.MainActivity
com.uptodown.tv.ui.activity.TvMainActivity
com.uptodown.tv.ui.activity.TvAppDetailActivity
com.uptodown.tv.ui.activity.TvMyDownloadsActivity
com.uptodown.tv.ui.activity.TvMyAppsActivity
com.uptodown.tv.ui.activity.TvOldVersionsActivity
com.uptodown.tv.ui.activity.TvSearchActivity
com.uptodown.tv.ui.activity.TvAppsListActivity
com.uptodown.tv.preferences.TvPrivacyPreferences
com.uptodown.core.activities.InstallerActivity
com.uptodown.core.activities.ConfirmDeleteActivity
com.uptodown.activities.MyApps
com.uptodown.activities.Updates
com.uptodown.activities.FreeUpSpaceActivity
com.uptodown.activities.RollbackActivity
com.uptodown.activities.MyDownloads
com.uptodown.activities.WishlistActivity
com.uptodown.activities.RecommendedActivity
com.uptodown.activities.ListsActivity
com.uptodown.activities.PublicListActivity
com.uptodown.activities.MyStatsActivity
com.uptodown.activities.PreregistrationActivity
com.uptodown.activities.SecurityActivity
com.uptodown.core.activities.FileExplorerActivity
com.uptodown.activities.PasswordRecoveryActivity
com.uptodown.activities.Gallery
com.uptodown.activities.ContactUsActivity
com.uptodown.activities.LoginActivity
com.uptodown.activities.UserActivity
com.uptodown.activities.YouTubeActivity
com.uptodown.activities.SearchActivity
com.uptodown.activities.OldVersionsActivity
com.uptodown.activities.ReviewsActivity
com.uptodown.activities.RepliesActivity
com.uptodown.activities.PublicProfileActivity
com.uptodown.activities.UserDevicesActivity
com.uptodown.activities.UserDeviceDetailsActivity
com.uptodown.activities.VirusTotalReport
com.uptodown.activities.MoreInfo
com.uptodown.activities.AppInstalledDetailsActivity
com.uptodown.activities.AppFilesActivity
com.uptodown.activities.CustomWebView
com.uptodown.activities.GdprPrivacySettings
com.uptodown.activities.AppDetailActivity
com.uptodown.activities.NotificationsRegistryActivity
com.uptodown.activities.LanguageSettingsActivity
com.uptodown.activities.UserCommentsActivity
com.uptodown.activities.FeedActivity
com.uptodown.activities.FollowListActivity
com.uptodown.activities.OrganizationActivity
com.uptodown.activities.InformationActivity
com.uptodown.core.activities.ConfirmationIntentWrapperActivity
com.uptodown.activities.PasswordEditActivity
com.uptodown.activities.UsernameEditActivity
com.uptodown.activities.UserEditProfileActivity
com.uptodown.activities.UserAvatarActivity
com.uptodown.activities.preferences.PreferencesActivity
com.uptodown.activities.preferences.MobileDataUsageActivity
com.uptodown.activities.preferences.AdvancedPreferencesComposeActivity
androidx.credentials.playservices.controllers.identityauth.HiddenActivity
androidx.credentials.playservices.controllers.identitycredentials.IdentityCredentialApiHiddenActivity
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
com.google.android.gms.common.api.GoogleApiActivity
com.inmobi.cmp.presentation.components.CmpActivity
Services (15)
com.uptodown.services.AuthenticatorService
com.uptodown.core.service.SplitApksEventsService
com.uptodown.gcm.MyFirebaseMessagingService
androidx.credentials.playservices.CredentialProviderMetadataHolder
com.google.android.gms.auth.api.signin.RevocationBoundService
Firebase messaging service
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.components.ComponentDiscoveryService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.firebase.sessions.SessionLifecycleService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
Broadcast Receivers (11)
com.uptodown.receivers.BootDeviceReceiver
com.uptodown.receivers.BootDeviceReceiver
com.uptodown.receivers.MyAppUpdatedReceiver
com.uptodown.receivers.MyAppUpdatedReceiver
com.uptodown.receivers.DownloadNotificationReceiver
com.uptodown.receivers.DownloadNotificationReceiver
com.uptodown.receivers.DownloadUpdateNotificationReceiver
com.uptodown.receivers.DownloadUpdateNotificationReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.gms.measurement.AppMeasurementReceiver
com.google.android.gms.measurement.AppMeasurementReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
Work rescheduler
androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
Profile installer
androidx.profileinstaller.ProfileInstallReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
Content Providers (4)
androidx.core.content.FileProvider
com.google.firebase.provider.FirebaseInitProvider
androidx.startup.InitializationProvider
com.squareup.picasso.PicassoProvider
URL Endpoints (112)
http://play.google.com
http://www.uptodown.com
https://accounts.google.com/o/oauth2/revoke?token=
https://adservice.google.com/getconfig/pubvendors
https://api.cmp.inmobi.com/
https://api.country.is/
https://app-measurement.com/a
https://app-measurement.com/s/d
https://ar.uptodown.com
https://br.uptodown.com
https://choice.inmobi.com/
https://cmp.inmobi.com/
https://cmp.inmobi.com/google-basic-consent/v1/purposes-
https://cmp.inmobi.com/tcfv2/translations/
https://cn.uptodown.com
https://de.uptodown.com
https://developer.android.com/build/agp-upgrade-assistant
https://developer.android.com/kotlin/add-kotlin
https://developer.android.com/training/articles/direct-boot
https://dw.uptodown.com/dwn/
Submission Details
Submitted At
First Submission
Last Submission
Stored Until
Other Versions
com.uptodown.UptodownApp
7.11 (711)
View report
com.uptodown.UptodownApp
7.22 (722)
View report
com.uptodown.UptodownApp
7.16 (716)
View report