APK Security & Privacy Score
Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.
Security
Scan-weighted
98/100
Threat scan clean
Modern target SDK
Privacy
Permissions & network
67/100
High-risk permissions
HTTP URLs found
Possible tracking
80/100
Good
Overall trust
Facts
Threat scan
0/76 flagged, 0 suspicious
Permissions
23 requested
Network strings
25 URLs (1 HTTP, 24 HTTPS)
Target SDK
35
Certificate
Valid until 2043-01-31 (17 years, suspicious)
Warnings
Found 1 HTTP URL strings (unencrypted).
High-risk permissions detected: android.permission.RECEIVE_BOOT_COMPLETED
Possible analytics/tracking domains found: firebase-settings.crashlytics.com
Package Name
com.bitso.alpha
Version Code
94
Version Name
1.37.0
Application Name
com.bitso.alpha.AlphaApplication
Debuggable
No
Allow Backup
No
Min SDK
Android 24 (Nougat)
Target SDK
Android 35 (Android 15)
Supported ABIs
Universal
Certificate & Signer
Valid From
Valid To
Serial Number
Thumbprint
Issuer: C
Issuer: CN
Issuer: DN
Issuer: L
Issuer: O
Issuer: OU
Issuer: ST
Subject: C
Subject: CN
Subject: DN
Subject: L
Subject: O
Subject: OU
Subject: ST
Security Scan
0
✓ Clean
Malicious
0
Suspicious
0
Harmless
0
Undetected
65
Timeout
0
Failure
0
Scan Providers
ALYac
APEX
AVG
Acronis
AhnLab-V3
Alibaba
Antiy-AVL
Arcabit
Avast
Avast-Mobile
Avira
Baidu
BitDefender
BitDefenderFalx
Bkav
CAT-QuickHeal
CMC
CTX
ClamAV
CrowdStrike
Cylance
Cynet
DeepInstinct
DrWeb
ESET-NOD32
Elastic
Emsisoft
F-Secure
Fortinet
GData
Google
Gridinsoft
Ikarus
Jiangmin
K7AntiVirus
K7GW
Kaspersky
Kingsoft
Lionic
Malwarebytes
MaxSecure
McAfeeD
MicroWorld-eScan
Microsoft
NANO-Antivirus
Paloalto
Panda
Rising
SUPERAntiSpyware
Sangfor
SentinelOne
Skyhigh
Sophos
Symantec
SymantecMobileInsight
TACHYON
Tencent
Trapmine
TrellixENS
TrendMicro
TrendMicro-HouseCall
Trustlook
VBA32
VIPRE
Varist
ViRobot
VirIT
Webroot
Xcitium
Yandex
Zillya
ZoneAlarm
Zoner
alibabacloud
huorong
tehtris
File Signatures
SHA-256
76e7f80d60f1cd69c53496d5da2d95f287f5fb7660aac897f1d5d3f4c9eae7e5
MD5
f2d07cefe217fbc4aa09416a3e247488
SHA-1
68532b07c252cce3c63b6d9a63be326031f608dc
SSDEEP
393216:sIQmTwchCvr9MNqoio3/vbEzTxvKW+RY7IAL:VTnhCvr2D3/vivKW+fi
TLSH
T1D447CF03E3024D26C9BEA6355CB66751EB336E81AF0357DB1008B17C7E772D5AE98AC4
VHASH
c09964511205a87ba09dfdef70b57869
PERMHASH
779e5d0712e79c02ecdc2cd8c202f434952f9968a3c4868dda56ae39b21047e1
File Intelligence
Type Description
Human-friendly file type name based on multiple detection methods.
Type Extension
Most likely file extension inferred from the content.
Type Tag
Primary type tag assigned by the classifier.
Type Tags
Additional type tags that describe the file content.
Magic
File signature result from magic bytes inspection.
Magika
File type predicted by Magika (ML-based file type detection).
TrID
TrID file type guesses with probabilities.
dhash
Perceptual hash used to compare visual similarity of files.
raw md5
Raw MD5 hash of the file contents.
extensions
File extensions found inside the APK and how many of each.
file types
Detected embedded file types and their counts.
highest datetime
Latest timestamp found among files inside the archive.
lowest datetime
Earliest timestamp found among files inside the archive.
num children
Number of files contained within the archive.
type
Container type detected for the analyzed file.
uncompressed size
Estimated total size of all files after extraction.
Deep Manifest Analysis
Activity Intents (2)
com.bitso.alpha.MainActivity
net.openid.appauth.RedirectUriReceiverActivity
Service Intents (2)
com.clevertap.android.sdk.pushnotification.fcm.FcmMessageListenerService
Firebase messaging service
com.google.firebase.messaging.FirebaseMessagingService
Receiver Intents (11)
Profile installer
androidx.profileinstaller.ProfileInstallReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
Work rescheduler
androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
com.clevertap.android.sdk.pushnotification.fcm.CTFirebaseMessagingReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
zendesk.support.DeepLinkingBroadcastReceiver
Requested Permissions (23)
have full network access
android.permission.INTERNET
view network connections
android.permission.ACCESS_NETWORK_STATE
view Wi-Fi connections
android.permission.ACCESS_WIFI_STATE
control vibration
android.permission.VIBRATE
com.google.android.gms.permission.AD_ID
com.google.android.gms.permission.AD_ID
android.permission.POST_NOTIFICATIONS
android.permission.POST_NOTIFICATIONS
take pictures and videos
android.permission.CAMERA
access approximate location only in the foreground
android.permission.ACCESS_COARSE_LOCATION
access precise location only in the foreground
android.permission.ACCESS_FINE_LOCATION
android.permission.USE_BIOMETRIC
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
android.permission.USE_FINGERPRINT
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
read the contents of your shared storage
android.permission.READ_EXTERNAL_STORAGE
modify or delete the contents of your shared storage
android.permission.WRITE_EXTERNAL_STORAGE
keep car screen turned on
android.permission.WAKE_LOCK
Cloud messaging receive
com.google.android.c2dm.permission.RECEIVE
Install Referrer service
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
AdServices Attribution
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
AdServices Advertising ID
android.permission.ACCESS_ADSERVICES_AD_ID
com.google.android.providers.gsf.permission.READ_GSERVICES
com.google.android.providers.gsf.permission.READ_GSERVICES
run at startup
android.permission.RECEIVE_BOOT_COMPLETED
Foreground service
android.permission.FOREGROUND_SERVICE
Dynamic receiver access
com.bitso.alpha.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Uses Features (6)
Camera
android.hardware.camera
Camera Autofocus
android.hardware.camera.autofocus
Camera Flash
android.hardware.camera.flash
Camera Front
android.hardware.camera.front
Screen Landscape
android.hardware.screen.landscape
Wifi
android.hardware.wifi
Activities (46)
com.bitso.alpha.MainActivity
com.bitso.alpha.orders.create.presentation.OrderActivity
com.bitso.alpha.markets.detail.presentation.MarketActivity
com.bitso.alpha.authentication.login.presentation.LoginActivity
com.bitso.alpha.authentication.mobilepin.enterpin.EnterMobilePinActivity
com.bitso.alpha.apprecall.presentation.blocking.AppRecallBlockingActionActivity
com.bitso.alpha.settings.notifications.core.presentation.NotificationsSettingsActivity
com.bitso.alpha.fees.presentation.FeesActivity
com.bitso.alpha.markets.selector.presentation.MarketSelectorActivity
com.bitso.alpha.account.presentation.AccountActivity
com.bitso.alpha.settings.presentation.trading.TradingSettingsActivity
zendesk.support.guide.HelpCenterActivity
zendesk.support.guide.ViewArticleActivity
zendesk.support.request.RequestActivity
zendesk.support.requestlist.RequestListActivity
com.bitso.android.customer_support.helpcenter.presentation.CustomHelpCenterActivity
com.bitso.android.customer_support.chat.presentation.CustomerSupportChatActivity
zendesk.classic.messaging.MessagingActivity
com.bitso.android.hardstop.transaction.presentation.deniedScreen.TransactionHardstopDeniedScreenActivity
com.bitso.android.hardstop.transaction.presentation.manualReviewScreen.TransactionHardstopInManualReviewScreenActivity
com.bitso.android.hardstop.transaction.presentation.cancelTransactionScreen.TransactionHardstopCancelTransactionScreenActivity
com.bitso.android.mobile_pin.common.presentation.MobilePinActivity
com.bitso.android.oneTimePassword.presentation.OtpActivity
com.bitso.android.accountDeletion.presentation.AccountDeletionActivity
com.bitso.android.transaction.history.presentation.detail.TransactionDetailActivity
com.bitso.android.authProcess.presentation.AuthProcessActivity
com.bitso.android.userLogout.presentation.LogoutActivity
com.bitso.android.biometrics.presentation.changeInBiometricsRegistry.ChangeInBiometricsRegistryActivity
com.bitso.android.biometrics.presentation.activation.BiometricsActivationActivity
com.bitso.android.ui.compose.webview.WebViewActivity
com.bitso.android.apprecall.presentation.AppRecallActivity
com.bitso.android.rootedDeviceCheck.presentation.RootedDeviceActivity
com.bitso.android.permissions.presentation.PermissionRequestActivity
com.bitso.android.authCore.presentation.auth.AuthActivity
com.bitso.android.authCore.presentation.endSession.EndSessionActivity
net.openid.appauth.RedirectUriReceiverActivity
zendesk.messaging.android.internal.messagingscreen.MessagingActivity
zendesk.messaging.android.internal.conversationscreen.ImageViewerActivity
com.clevertap.android.sdk.InAppNotificationActivity
com.clevertap.android.sdk.inbox.CTInboxActivity
net.openid.appauth.AuthorizationManagementActivity
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
com.google.android.gms.common.api.GoogleApiActivity
androidx.activity.ComponentActivity
com.journeyapps.barcodescanner.CaptureActivity
com.google.android.play.core.common.PlayCoreDialogWrapperActivity
Services (13)
com.clevertap.android.sdk.pushnotification.fcm.FcmMessageListenerService
com.google.firebase.components.ComponentDiscoveryService
Firebase messaging service
com.google.firebase.messaging.FirebaseMessagingService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.android.gms.auth.api.signin.RevocationBoundService
com.google.firebase.sessions.SessionLifecycleService
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
Broadcast Receivers (15)
zendesk.support.DeepLinkingBroadcastReceiver
zendesk.support.DeepLinkingBroadcastReceiver
com.clevertap.android.sdk.pushnotification.CTPushNotificationReceiver
com.clevertap.android.sdk.pushnotification.CTPushNotificationReceiver
com.clevertap.android.sdk.pushnotification.fcm.CTFirebaseMessagingReceiver
com.clevertap.android.sdk.pushnotification.fcm.CTFirebaseMessagingReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.gms.measurement.AppMeasurementReceiver
com.google.android.gms.measurement.AppMeasurementReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
Work rescheduler
androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
Profile installer
androidx.profileinstaller.ProfileInstallReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
Content Providers (9)
com.bitso.android.file.provider.GenericFileProvider
com.bitso.android.firebase.initializer.provider.FirebaseInitializerContentProvider
com.bitso.android.mobileMetrics.provider.MobileMetricsContentProvider
zendesk.support.SupportSdkStartupProvider
zendesk.messaging.android.internal.ZendeskFileProvider
zendesk.support.guide.GuideSdkStartupProvider
androidx.startup.InitializationProvider
zendesk.core.MediaFileProvider
com.squareup.picasso.PicassoProvider
URL Endpoints (30)
http://tools.android.com/tech-docs/new-build-system/user-guide/manifest-merger
https://bitso-alpha.firebaseio.com
https://bitso.com
https://bitso.com/alpha/register
https://bitso.com/legal/GI/risk_warning
https://bitso.com/r/reset_password
https://bitso.com/r/user/security
https://bitso.com/support/chat
https://bitso.com/terms
https://blog-en.bitso.com/enter-the-doge-killer-shiba-inu-shib-ad3bc10de408
https://developer.android.com/build/agp-upgrade-assistant
https://developer.android.com/kotlin/add-kotlin
https://firebase-settings.crashlytics.com/spi/v2/platforms/android/gmp/
https://firebase.google.com/docs/crashlytics/get-started?platform=android#add-plugin
https://firebase.google.com/support/privacy/init-options
https://firebaseinstallations.googleapis.com/v1/
https://github.com/ReactiveX/RxJava/wiki/What
https://github.com/google/gson/blob/main/Troubleshooting.md#
https://github.com/journeyapps/zxing-android-embedded
https://help.bitso.com/en/support/home
Submission Details
Submitted At
First Submission
Last Submission
Stored Until