APK Security & Privacy Score
Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.
Security
Scan-weighted
98/100
Threat scan clean
Modern target SDK
Privacy
Permissions & network
57/100
High-risk permissions
HTTP URLs found
AllowBackup enabled
Possible tracking
72/100
Caution
Overall trust
Facts
Threat scan
0/76 flagged, 0 suspicious
Permissions
39 requested
Network strings
206 URLs (2 HTTP, 204 HTTPS)
Target SDK
36
Certificate
Valid until 2051-08-29 (25 years, suspicious)
Warnings
Found 2 HTTP URL strings (unencrypted).
High-risk permissions detected: android.permission.RECEIVE_BOOT_COMPLETED
Requests 39 permissions (review carefully).
AllowBackup is enabled.
Possible analytics/tracking domains found: app-measurement.com, app.adjust.com, app.adjust.io, firebase-settings.crashlytics.com, gdpr.adjust.com
Package Name
app.baly.passenger
Version Code
207
Version Name
3.1.1
Application Name
cab.snapp.passenger.BaseApplication
Debuggable
No
Allow Backup
Yes
Min SDK
Android 24 (Nougat)
Target SDK
Android 36 (Unknown)
Supported ABIs
Universal
Certificate & Signer
Valid From
Valid To
Serial Number
Thumbprint
Issuer: C
Issuer: CN
Issuer: DN
Issuer: L
Issuer: O
Issuer: OU
Issuer: ST
Subject: C
Subject: CN
Subject: DN
Subject: L
Subject: O
Subject: OU
Subject: ST
Security Scan
0
✓ Clean
Malicious
0
Suspicious
0
Harmless
0
Undetected
68
Timeout
0
Failure
0
Scan Providers
ALYac
APEX
AVG
Acronis
AhnLab-V3
Alibaba
Antiy-AVL
Arcabit
Avast
Avast-Mobile
Avira
Baidu
BitDefender
BitDefenderFalx
Bkav
CAT-QuickHeal
CMC
CTX
ClamAV
CrowdStrike
Cylance
Cynet
DeepInstinct
DrWeb
ESET-NOD32
Elastic
Emsisoft
F-Secure
Fortinet
GData
Google
Gridinsoft
Ikarus
Jiangmin
K7AntiVirus
K7GW
Kaspersky
Kingsoft
Lionic
Malwarebytes
MaxSecure
McAfeeD
MicroWorld-eScan
Microsoft
NANO-Antivirus
Paloalto
Panda
Rising
SUPERAntiSpyware
Sangfor
SentinelOne
Skyhigh
Sophos
Symantec
SymantecMobileInsight
TACHYON
Tencent
Trapmine
TrellixENS
TrendMicro
TrendMicro-HouseCall
Trustlook
VBA32
VIPRE
Varist
ViRobot
VirIT
Webroot
Xcitium
Yandex
Zillya
ZoneAlarm
Zoner
alibabacloud
huorong
tehtris
File Signatures
SHA-256
26e0de529cf580a97591000c703e4fa6d4242327707ba405160a50edf5367046
MD5
21f29efad90e9622819c511d47aebddc
SHA-1
8f071baaab17d619a62b2813b26c127411149f39
SSDEEP
786432:AP3H/uj2unctiYmFuSrcOKQbgL0GlVzd9TEGxv9SsZf1S8NqllYhE0rBre+UMHkY:AP3Dd9P
TLSH
T197F79D02A6174832F76E2335BEA793003B372E46B7478F432085786CFD776CA5B95299
VHASH
d3d2770f418539ab426cabb2e4674be1
PERMHASH
ff0238adad4b704ad21677018f54f3cdf6af39497dfd63eb49f0e5b98ad1538b
File Intelligence
Type Description
Human-friendly file type name based on multiple detection methods.
Type Extension
Most likely file extension inferred from the content.
Type Tag
Primary type tag assigned by the classifier.
Type Tags
Additional type tags that describe the file content.
Magic
File signature result from magic bytes inspection.
TrID
TrID file type guesses with probabilities.
dhash
Perceptual hash used to compare visual similarity of files.
raw md5
Raw MD5 hash of the file contents.
extensions
File extensions found inside the APK and how many of each.
file types
Detected embedded file types and their counts.
highest datetime
Latest timestamp found among files inside the archive.
lowest datetime
Earliest timestamp found among files inside the archive.
num children
Number of files contained within the archive.
type
Container type detected for the analyzed file.
uncompressed size
Estimated total size of all files after extraction.
Deep Manifest Analysis
Activity Intents (11)
androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity
androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivity
androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivity
cab.snapp.authentication.activities.ReceiveCodeActivity
cab.snapp.authentication.activities.SignUpActivity
cab.snapp.cab.activities.RootActivity
cab.snapp.passenger.app_starter.LauncherActivity
cab.snapp.passenger.passkey.impl.activities.PasskeyLoginActivity
cab.snapp.superapp.app.NewSuperAppActivity
cab.snapp.superapp.app.SuperAppActivity
com.facebook.CustomTabActivity
Service Intents (6)
cab.snapp.authenticator.SnappAuthenticatorService
cab.snapp.passenger.services.SnappFirebaseMessagingService
Firebase messaging service
com.google.firebase.messaging.FirebaseMessagingService
com.huawei.hms.support.api.push.service.HmsMsgService
com.webengage.sdk.android.NotificationClickHandlerService
com.webengage.sdk.android.actions.render.TimerService
Receiver Intents (17)
Profile installer
androidx.profileinstaller.ProfileInstallReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
Work rescheduler
androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver
com.facebook.CurrentAccessTokenExpirationBroadcastReceiver
com.freshchat.consumer.sdk.receiver.FreshchatNetworkChangeReceiver
com.freshchat.consumer.sdk.receiver.FreshchatReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.huawei.hms.support.api.push.PushMsgReceiver
com.huawei.hms.support.api.push.PushReceiver
com.mapbox.common.location.LocationUpdatesReceiver
com.webengage.sdk.android.WebEngageReceiver
Requested Permissions (40)
view network connections
android.permission.ACCESS_NETWORK_STATE
have full network access
android.permission.INTERNET
android.permission.POST_NOTIFICATIONS
android.permission.POST_NOTIFICATIONS
access approximate location only in the foreground
android.permission.ACCESS_COARSE_LOCATION
access precise location only in the foreground
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_GPS
android.permission.ACCESS_GPS
android.permission.ACCESS_ASSISTED_GPS
android.permission.ACCESS_ASSISTED_GPS
android.permission.ACCESS_LOCATION
android.permission.ACCESS_LOCATION
keep car screen turned on
android.permission.WAKE_LOCK
app.baly.passenger.permission.RECEIVE
app.baly.passenger.permission.RECEIVE
com.google.android.gms.permission.AD_ID
com.google.android.gms.permission.AD_ID
Use Credentials
android.permission.USE_CREDENTIALS
Manage Accounts
android.permission.MANAGE_ACCOUNTS
Authenticate Accounts
android.permission.AUTHENTICATE_ACCOUNTS
find accounts on the device
android.permission.GET_ACCOUNTS
control vibration
android.permission.VIBRATE
App badge update
com.android.launcher.permission.INSTALL_SHORTCUT
App badge update
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.FOREGROUND_SERVICE_SPECIAL_USE
android.permission.FOREGROUND_SERVICE_SPECIAL_USE
android.permission.FOREGROUND_SERVICE_SPECIAL_USE
android.permission.FOREGROUND_SERVICE_SPECIAL_USE
android.permission.FOREGROUND_SERVICE_MICROPHONE
android.permission.FOREGROUND_SERVICE_MICROPHONE
Foreground service
android.permission.FOREGROUND_SERVICE
Cloud messaging receive
com.google.android.c2dm.permission.RECEIVE
AdServices Attribution
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
AdServices Advertising ID
android.permission.ACCESS_ADSERVICES_AD_ID
run at startup
android.permission.RECEIVE_BOOT_COMPLETED
change your audio settings
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.USE_FULL_SCREEN_INTENT
android.permission.USE_FULL_SCREEN_INTENT
record audio
android.permission.RECORD_AUDIO
pair with Bluetooth devices
android.permission.BLUETOOTH
Install Referrer service
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.ACCESS_ADSERVICES_CUSTOM_AUDIENCE
android.permission.ACCESS_ADSERVICES_CUSTOM_AUDIENCE
AdServices Topics
android.permission.ACCESS_ADSERVICES_TOPICS
view Wi-Fi connections
android.permission.ACCESS_WIFI_STATE
connect and disconnect from Wi-Fi
android.permission.CHANGE_WIFI_STATE
reorder running apps
android.permission.REORDER_TASKS
Dynamic receiver access
app.baly.passenger.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
app.baly.passenger.permission.PROCESS_PUSH_MSG
app.baly.passenger.permission.PROCESS_PUSH_MSG
app.baly.passenger.permission.PUSH_PROVIDER
app.baly.passenger.permission.PUSH_PROVIDER
android.permission.BROADCAST_CLOSE_SYSTEM_DIALOGS
android.permission.BROADCAST_CLOSE_SYSTEM_DIALOGS
Uses Features (3)
Location
android.hardware.location
Telephony
android.hardware.telephony
Wifi
android.hardware.wifi
Activities (40)
cab.snapp.webview.WebViewActivity
cab.snapp.passenger.app_starter.LauncherActivity
cab.snapp.cab.activities.RootActivity
cab.snapp.authentication.activities.SignUpActivity
cab.snapp.passenger.passkey.impl.activities.PasskeyLoginActivity
cab.snapp.core.base.AuthenticatorActivity
cab.snapp.authentication.activities.ReceiveCodeActivity
cab.snapp.superapp.app.SuperAppActivity
cab.snapp.superapp.app.NewSuperAppActivity
cab.snapp.superapp.app.StoryActivity
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
cab.snapp.snappdialog.TestActivity
com.facebook.FacebookActivity
com.facebook.CustomTabMainActivity
com.facebook.CustomTabActivity
com.google.android.gms.common.api.GoogleApiActivity
com.freshchat.consumer.sdk.activity.ChannelListActivity
com.freshchat.consumer.sdk.activity.ConversationDetailActivity
com.freshchat.consumer.sdk.activity.DeeplinkInterstitialActivity
com.freshchat.consumer.sdk.activity.PictureAttachmentActivity
com.freshchat.consumer.sdk.activity.CategoryListActivity
com.freshchat.consumer.sdk.activity.ArticleListActivity
com.freshchat.consumer.sdk.activity.ArticleDetailActivity
com.freshchat.consumer.sdk.activity.InterstitialActivity
com.freshchat.consumer.sdk.activity.BotFaqDetailsActivity
com.freshchat.consumer.sdk.activity.FAQCategoriesActivity
com.freshchat.consumer.sdk.activity.FAQListActivity
com.freshchat.consumer.sdk.activity.FAQDetailsActivity
com.freshchat.consumer.sdk.activity.FAQSearchActivity
com.karumi.dexter.DexterActivity
androidx.compose.ui.tooling.PreviewActivity
androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity
androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivity
androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivity
com.huawei.hms.support.api.push.TransActivity
com.webengage.sdk.android.actions.render.WebEngageActivity
com.webengage.sdk.android.WETransparentActivity
com.google.android.play.core.common.PlayCoreDialogWrapperActivity
com.huawei.hms.activity.BridgeActivity
com.huawei.hms.activity.EnableServiceActivity
Services (27)
cab.snapp.passenger.services.SnappFirebaseMessagingService
cab.snapp.authenticator.SnappAuthenticatorService
androidx.appcompat.app.AppLocalesMetadataHolderService
cab.snapp.core.foreground.PassengerForegroundService
com.google.firebase.components.ComponentDiscoveryService
Firebase messaging service
com.google.firebase.messaging.FirebaseMessagingService
com.google.android.gms.auth.api.signin.RevocationBoundService
cab.snapp.hodhod.retryjob.CallbackRetryJobService
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
cab.snapp.behrooz.service.BehroozService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.freshchat.consumer.sdk.service.FreshchatService
com.huawei.location.lite.common.http.HttpService
com.mapbox.common.LifecycleService
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
com.huawei.hms.support.api.push.service.HmsMsgService
com.huawei.agconnect.core.ServiceDiscovery
com.webengage.sdk.android.ExecutorService
com.webengage.sdk.android.EventLogService
com.webengage.sdk.android.NotificationClickHandlerService
com.webengage.sdk.android.WebEngageJobService
com.webengage.sdk.android.actions.render.TimerService
Broadcast Receivers (21)
cab.snapp.chat.impl.ChatBroadcastReceiver
cab.snapp.chat.impl.ChatBroadcastReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
Work rescheduler
androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
com.google.android.gms.measurement.AppMeasurementReceiver
com.google.android.gms.measurement.AppMeasurementReceiver
com.freshchat.consumer.sdk.receiver.FreshchatReceiver
com.freshchat.consumer.sdk.receiver.FreshchatReceiver
com.freshchat.consumer.sdk.receiver.FreshchatNetworkChangeReceiver
com.freshchat.consumer.sdk.receiver.FreshchatNetworkChangeReceiver
com.facebook.CurrentAccessTokenExpirationBroadcastReceiver
com.facebook.CurrentAccessTokenExpirationBroadcastReceiver
com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver
com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver
com.mapbox.common.location.LocationUpdatesReceiver
com.mapbox.common.location.LocationUpdatesReceiver
Profile installer
androidx.profileinstaller.ProfileInstallReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
com.huawei.hms.support.api.push.PushMsgReceiver
com.huawei.hms.support.api.push.PushMsgReceiver
com.huawei.hms.support.api.push.PushReceiver
com.huawei.hms.support.api.push.PushReceiver
com.webengage.sdk.android.WebEngageReceiver
com.webengage.sdk.android.WebEngageReceiver
Content Providers (12)
androidx.core.content.FileProvider
cab.snapp.passenger.provider.FreshchatFileProvider
cab.snapp.argus.core.perfsuite.startup.AppStartTimeProvider
com.google.firebase.provider.FirebaseInitProvider
androidx.startup.InitializationProvider
com.freshchat.consumer.sdk.provider.FreshchatInitProvider
com.facebook.internal.FacebookInitProvider
com.squareup.picasso.PicassoProvider
com.huawei.hms.support.api.push.PushProvider
com.huawei.hms.aaid.InitProvider
com.huawei.agconnect.core.provider.AGConnectInitializeProvider
com.adjust.sdk.SystemLifecycleContentProvider
URL Endpoints (220)
http://snapp.ir
http://w3.org/1999/xhtml
http://xml.org/sax/features/external-general-entities
http://xml.org/sax/features/external-parameter-entities
http://xml.org/sax/properties/lexical-handler
http://xmlpull.org/v1/doc/features.html#process-docdecl
http://xmlpull.org/v1/doc/features.html#process-namespaces
https://.facebook.com
https://Baly.ir/terms
https://accounts.google.com/o/oauth2/revoke?token=
https://api.baly.app
https://api.baly.app/api-passenger-oauth/passengers/webauthn/login/init/
https://api.baly.app/api-passenger-oauth/passengers/webauthn/login/verify/
https://api.baly.app/api-passenger-oauth/passengers/webauthn/register/init/
https://api.baly.app/api-passenger-oauth/passengers/webauthn/register/verify/
https://api.baly.app/api/guardian/api/v1/sos
https://api.baly.app/api/guardian/api/v1/sos/{rideId}/status
https://api.baly.app/api/guardian/api/v1/sos/{sosId}/location
https://api.baly.app/api/guardian/api/v1/sos/{sosId}/note
https://api.baly.app/api/v1/guide/info
Submission Details
Submitted At
First Submission
Last Submission
Stored Until