com.duosecurity.duomobile_4.108.0-4108020_minAPI30_arm64-v8a_armeabi_armeabi-v7a_mips_mips64_x86_x86_64__nodpi__apkmirror.com.apk

34.10 MB

Analyzed: 2026-07-19 21:38 UTC

Twitter / X Facebook LinkedIn WhatsApp Telegram Reddit
Analyze Another

APK Security & Privacy Score

Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.

Security Scan-weighted
98/100
Threat scan clean Modern target SDK
Privacy Permissions & network
84/100
High-risk permissions HTTP URLs found AllowBackup enabled
90/100
Excellent
Overall trust

Facts

Threat scan 0/75 flagged, 0 suspicious
Permissions 17 requested
Network strings 28 URLs (3 HTTP, 25 HTTPS)
Target SDK 36
Certificate Valid until 2050-06-30 (24 years, suspicious)

Warnings

Found 3 HTTP URL strings (unencrypted).
High-risk permissions detected: android.permission.RECEIVE_BOOT_COMPLETED
AllowBackup is enabled.
Package Name com.duosecurity.duomobile
Version Code 4108020
Version Name 4.108.0
Application Name com.duosecurity.duomobile.DuoMobileApplication
Debuggable No
Allow Backup Yes
Min SDK Android 30 (Android 11)
Target SDK Android 36 (Unknown)
Supported ABIs
arm64-v8a armeabi armeabi-v7a mips mips64 x86 x86_64

Certificate & Signer

Valid From 2020-06-30 14:44:49
Valid To 2050-06-30 14:44:49
Serial Number b182b1dfa94e5926d1705521994d1fc2950b1fd7
Thumbprint 56a8fc4417e41e0eb0b24e8b17ee1f447d0381e5
Issuer: C US
Issuer: CN Android
Issuer: DN C:US, CN:Android, L:Mountain View, O:Google Inc., ST:California, OU:Android
Issuer: L Mountain View
Issuer: O Google Inc.
Issuer: OU Android
Issuer: ST California
Subject: C US
Subject: CN Android
Subject: DN C:US, CN:Android, L:Mountain View, O:Google Inc., ST:California, OU:Android
Subject: L Mountain View
Subject: O Google Inc.
Subject: OU Android
Subject: ST California

Security Scan

0 /75
✓ Clean
Scanned by 75 security vendors
Last scan: 2026-04-07 12:59 UTC
Malicious
0
Suspicious
0
Harmless
0
Undetected
66
Timeout
1
Failure
1

Scan Providers

75 vendors
APEX type-unsupported
No result reported
Engine 6.767
AVG undetected
No result reported
Engine 23.9.8494.0
Acronis undetected
No result reported
Engine 1.2.0.121
AhnLab-V3 undetected
No result reported
Engine 3.29.3.10609
Alibaba undetected
No result reported
Engine 0.3.0.5
Antiy-AVL undetected
No result reported
Engine 3.0
Arcabit undetected
No result reported
Engine 2025.0.0.23
Avast undetected
No result reported
Engine 23.9.8494.0
Avast-Mobile undetected
No result reported
Engine 260407-00
Avira undetected
No result reported
Engine 8.3.3.24
Baidu undetected
No result reported
Engine 1.0.0.2
BitDefender undetected
No result reported
Engine 7.2
BitDefenderFalx undetected
No result reported
Engine 2.0.936
Bkav failure
No result reported
Engine 2.0.0.1
CAT-QuickHeal undetected
No result reported
Engine 22.00
CMC undetected
No result reported
Engine 2.4.2022.1
CTX undetected
No result reported
Engine 2024.8.29.1
ClamAV timeout
No result reported
Engine 1.5.2.0
CrowdStrike undetected
No result reported
Engine 1.0
Cylance type-unsupported
No result reported
Engine 3.0.0.0
Cynet undetected
No result reported
Engine 4.0.3.4
DeepInstinct type-unsupported
No result reported
Engine 5.0.0.8
DrWeb undetected
No result reported
Engine 7.0.75.2070
ESET-NOD32 undetected
No result reported
Engine 18.2.18.0
Elastic undetected
No result reported
Engine 4.0.255
Emsisoft undetected
No result reported
Engine 2024.8.0.61147
F-Secure undetected
No result reported
Engine 18.10.1547.307
Fortinet undetected
No result reported
Engine 7.0.30.0
GData undetected
No result reported
Engine GD:27.44139AVA:64.30984
Google undetected
No result reported
Engine 1775559655
Gridinsoft undetected
No result reported
Engine 1.0.242.174
Ikarus undetected
No result reported
Engine 6.4.16.0
Jiangmin undetected
No result reported
Engine 16.0.100
K7AntiVirus undetected
No result reported
Engine 14.45.59120
K7GW undetected
No result reported
Engine 14.45.59120
Kaspersky undetected
No result reported
Engine 22.0.1.28
Kingsoft undetected
No result reported
Engine None
Lionic undetected
No result reported
Engine 8.16
Malwarebytes undetected
No result reported
Engine 3.1.0.214
MaxSecure undetected
No result reported
Engine 1.0.0.1
McAfeeD undetected
No result reported
Engine 1.2.0.14370
MicroWorld-eScan undetected
No result reported
Engine 14.0.409.0
Microsoft undetected
No result reported
Engine 1.1.26020.3
NANO-Antivirus undetected
No result reported
Engine 1.0.170.26895
Paloalto type-unsupported
No result reported
Engine 0.9.0.1003
Panda undetected
No result reported
Engine 4.6.4.2
Rising undetected
No result reported
Engine 25.0.0.28
SUPERAntiSpyware undetected
No result reported
Engine 5.6.0.1032
Sangfor undetected
No result reported
Engine 2.22.3.0
SentinelOne undetected
No result reported
Engine 7.6.2.19
Skyhigh undetected
No result reported
Engine v2021.2.0+4045
Sophos undetected
No result reported
Engine 3.4.1.0
Symantec undetected
No result reported
Engine 1.22.0.0
SymantecMobileInsight undetected
No result reported
Engine 2.0
TACHYON undetected
No result reported
Engine 2026-04-07.02
Tencent undetected
No result reported
Engine 1.0.0.1
Trapmine type-unsupported
No result reported
Engine 4.0.11.0
TrellixENS undetected
No result reported
Engine 6.0.6.653
TrendMicro undetected
No result reported
Engine 24.550.0.1002
TrendMicro-HouseCall undetected
No result reported
Engine 24.550.0.1002
Trustlook undetected
No result reported
Engine 1.0
VBA32 undetected
No result reported
Engine 5.5.1
VIPRE undetected
No result reported
Engine 6.0.0.35
Varist undetected
No result reported
Engine 6.6.1.3
ViRobot undetected
No result reported
Engine 2014.3.20.0
VirIT undetected
No result reported
Engine 9.5.1181
Webroot undetected
No result reported
Engine 1.9.0.8
Xcitium undetected
No result reported
Engine 38550
Yandex undetected
No result reported
Engine 5.5.2.24
Zillya undetected
No result reported
Engine 2.0.0.5576
ZoneAlarm undetected
No result reported
Engine 6.23-113519421
Zoner undetected
No result reported
Engine 2.2.2.0
alibabacloud type-unsupported
No result reported
Engine 2.2.0
huorong undetected
No result reported
Engine 7139403:7139403:fd748a7:fd748a7
tehtris type-unsupported
No result reported

File Signatures

SHA-256 97393a1d63ab4520d2492003ecdd62c17ba37c1f04db256df52492ed59529d29
MD5 a017b16282a2c8fae2a1a9579a9c303c
SHA-1 bbe2cc4fccdbd589bca3b28f99681ae606e7167f
SSDEEP 196608:OVBZwgYOg3mXMedMuaML7wNPBz6q4LOis0rF7jLbdLWwuw+NHjD6wQ5gXdoRWND2:2Brm3myBi7w5N18Oi5LLOZvlQ5gEWND2
TLSH T1AE77BE07E7528D72C8BEA73958B69351B331AD89BB4357832008F5B96DBB6C81F583C4
VHASH a813bad7b63a7d63d547f0ada8ef464d
PERMHASH ef4647483d2299dd5d12d9023f22e9d6a901316a04d28f036bb00835a266fb6c

File Intelligence

Type Description Android Human-friendly file type name based on multiple detection methods.
Type Extension apk Most likely file extension inferred from the content.
Type Tag android Primary type tag assigned by the classifier.
Type Tags executable, mobile, android, apk Additional type tags that describe the file content.
Magic Zip archive data, at least v2.0 to extract, compression method=deflate File signature result from magic bytes inspection.
Magika APK File type predicted by Magika (ML-based file type detection).
TrID Android Package (35.7%), Java Archive (17.8%), VYM Mind Map (16.5%), Sweet Home 3D Design (generic) (13.9%), Konfabulator widget (10.5%) TrID file type guesses with probabilities.
dhash 00003c1e1e1d1a00 Perceptual hash used to compare visual similarity of files.
raw md5 b9a25732fabce161064caacccef9ce16 Raw MD5 hash of the file contents.
extensions xml (389), txt (137), version (119), webp (108), png (84), properties (57), json (40), so (23), kotlin_builtins (8), dex (3), jnilib (3), kotlin_module (3), proto (3), a (2), dll (2), md (2), bin (1), BlockHoundIntegration (1), BuiltInsLoader (1), c (1), conf (1), ExternalOverridabilityCondition (1), gz (1), jks (1), ogg (1), p12 (1), prof (1), profm (1), textproto (1), x (1), yaml (1) File extensions found inside the APK and how many of each.
file types unknown (472), XML (389), PNG (84), ELF (23), JSON (23), Mac OS X Executable (3), Portable Executable (2), ZIP (2), Java Bytecode (1), OGG (1) Detected embedded file types and their counts.
highest datetime 2026-03-09 09:27:14 UTC Latest timestamp found among files inside the archive.
lowest datetime 1981-01-01 01:01:02 UTC Earliest timestamp found among files inside the archive.
num children 2182 Number of files contained within the archive.
type APK Container type detected for the analyzed file.
uncompressed size 30 MB Estimated total size of all files after extraction.

Deep Manifest Analysis

Activity Intents (1)

com.duosecurity.duomobile.ui.router.DeepLinkRouterActivity
Actions
View Activity Action: Display the data to the user. android.intent.action.VIEW
Categories
android.intent.category.DEFAULT android.intent.category.BROWSABLE

Service Intents (3)

com.duosecurity.duomobile.push.DuoFcmListenerService
Actions
Firebase messaging event Action used by Firebase to deliver a push message to the app. com.google.firebase.MESSAGING_EVENT
com.duosecurity.duomobile.wearable.HandheldMessageListenerService
Actions
com.google.android.gms.wearable.REQUEST_RECEIVED com.google.android.gms.wearable.REQUEST_RECEIVED
Firebase messaging service Handles push notifications and data messages from Firebase Cloud Messaging. com.google.firebase.messaging.FirebaseMessagingService
Actions
Firebase messaging event Action used by Firebase to deliver a push message to the app. com.google.firebase.MESSAGING_EVENT

Receiver Intents (9)

Profile installer Installs performance profiles to speed up app startup and hot paths. androidx.profileinstaller.ProfileInstallReceiver
Actions
Install performance profile Installs a profile that helps optimize app performance. androidx.profileinstaller.action.INSTALL_PROFILE
Skip profile install Skips profile installation for this build. androidx.profileinstaller.action.SKIP_FILE
Save performance profile Saves a profile generated during app usage. androidx.profileinstaller.action.SAVE_PROFILE
Benchmark operation Runs a profile installer benchmark operation. androidx.profileinstaller.action.BENCHMARK_OPERATION
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
Actions
Power Connected Broadcast Action: External power has been connected to the device. android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
Actions
Battery Okay Broadcast Action: Indicates the battery is now okay after being low. android.intent.action.BATTERY_OKAY
Battery Low Broadcast Action: Indicates low battery condition on the device. android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
Actions
android.net.conn.CONNECTIVITY_CHANGE android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
Actions
Device Storage Low Broadcast Action: A sticky broadcast that indicates low memory android.intent.action.DEVICE_STORAGE_LOW
Device Storage Ok Broadcast Action: Indicates low memory condition on the device no longer exists android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
Actions
androidx.work.impl.background.systemalarm.UpdateProxies androidx.work.impl.background.systemalarm.UpdateProxies
Work rescheduler Reschedules background work after reboot or app update. androidx.work.impl.background.systemalarm.RescheduleReceiver
Actions
Boot Completed Broadcast Action: This is broadcast once, after the system has finished android.intent.action.BOOT_COMPLETED
Time Changed Broadcast Action: The time was set. android.intent.action.TIME_SET
Timezone Changed Broadcast Action: The timezone has changed. android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.diagnostics.DiagnosticsReceiver
Actions
androidx.work.diagnostics.REQUEST_DIAGNOSTICS androidx.work.diagnostics.REQUEST_DIAGNOSTICS
com.google.firebase.iid.FirebaseInstanceIdReceiver
Actions
com.google.android.c2dm.intent.RECEIVE com.google.android.c2dm.intent.RECEIVE

Native Libraries (5)

libandroidx.graphics.path libandroidx.graphics.path.so
libimage_processing_util_jni libimage_processing_util_jni.so
librenderscript-toolkit librenderscript-toolkit.so
libsodiumjni libsodiumjni.so
libsurface_util_jni libsurface_util_jni.so

Requested Permissions (17)

Cloud messaging receive Allows the app to receive push messages via Google/Firebase Cloud Messaging. com.google.android.c2dm.permission.RECEIVE
have full network access Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet. android.permission.INTERNET
take pictures and videos This app can take pictures and record videos using the camera while the app is in use. android.permission.CAMERA
view network connections Allows the app to view information about network connections such as which networks exist and are connected. android.permission.ACCESS_NETWORK_STATE
keep car screen turned on Allows the app to keep the car screen turned on. android.permission.WAKE_LOCK
android.permission.BLUETOOTH_CONNECT Custom app or vendor permission (not publicly documented). android.permission.BLUETOOTH_CONNECT
android.permission.BLUETOOTH_ADVERTISE Custom app or vendor permission (not publicly documented). android.permission.BLUETOOTH_ADVERTISE
android.permission.BLUETOOTH_SCAN Custom app or vendor permission (not publicly documented). android.permission.BLUETOOTH_SCAN
record audio android.permission.RECORD_AUDIO
android.permission.POST_NOTIFICATIONS Custom app or vendor permission (not publicly documented). android.permission.POST_NOTIFICATIONS
control vibration Allows the app to control the vibrator. android.permission.VIBRATE
android.permission.USE_BIOMETRIC Custom app or vendor permission (not publicly documented). android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT Custom app or vendor permission (not publicly documented). android.permission.USE_FINGERPRINT
Install Referrer service Allows Google Play to bind to the app's Install Referrer service for install attribution. com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
run at startup Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the tablet and allow the app to slow down the overall tablet by always running. android.permission.RECEIVE_BOOT_COMPLETED
Foreground service Allows the app to run a foreground service. android.permission.FOREGROUND_SERVICE
Dynamic receiver access Internal app permission used to protect dynamic broadcast receivers. com.duosecurity.duomobile.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Uses Features (8)

Camera Feature for {@link #getSystemAvailableFeatures} and android.hardware.camera
Camera Autofocus Feature for {@link #getSystemAvailableFeatures} and android.hardware.camera.autofocus
Camera Flash Feature for {@link #getSystemAvailableFeatures} and android.hardware.camera.flash
Camera Front Feature for {@link #getSystemAvailableFeatures} and android.hardware.camera.front
Microphone Feature for {@link #getSystemAvailableFeatures} and android.hardware.microphone
Screen Landscape Feature for {@link #getSystemAvailableFeatures} and android.hardware.screen.landscape
Screen Portrait Feature for {@link #getSystemAvailableFeatures} and android.hardware.screen.portrait
Wifi Feature for {@link #getSystemAvailableFeatures} and android.hardware.wifi

Activities (11)

com.duosecurity.duomobile.ui.main.V4MainActivity
com.duosecurity.duomobile.ui.router.LauncherRouterActivity
com.duosecurity.duomobile.ui.inline_auth.InlineAuthFromChromeActivity
com.duosecurity.duomobile.ui.router.DeepLinkRouterActivity
com.withpersona.sdk2.inquiry.internal.InquiryActivity
androidx.credentials.playservices.HiddenActivity
androidx.credentials.playservices.IdentityCredentialApiHiddenActivity
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
com.google.android.gms.common.api.GoogleApiActivity
com.journeyapps.barcodescanner.CaptureActivity
com.google.android.play.core.common.PlayCoreDialogWrapperActivity

Services (20)

com.duosecurity.duomobile.push.DuoFcmListenerService
com.duosecurity.duomobile.push.PushTransactionService
com.duosecurity.duomobile.push.PushRegistrationJobIntentService
com.duosecurity.duomobile.wearable.HandheldMessageListenerService
com.duosecurity.duokit.playintegrity.PlayIntegrityService
com.google.firebase.components.ComponentDiscoveryService
Firebase messaging service Handles push notifications and data messages from Firebase Cloud Messaging. com.google.firebase.messaging.FirebaseMessagingService
androidx.credentials.playservices.CredentialProviderMetadataHolder
com.google.mlkit.common.internal.MlKitComponentDiscoveryService
androidx.camera.core.impl.MetadataHolderService
com.google.android.gms.auth.api.signin.RevocationBoundService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.firebase.sessions.SessionLifecycleService
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

Broadcast Receivers (12)

com.google.firebase.iid.FirebaseInstanceIdReceiver com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.gms.measurement.AppMeasurementReceiver com.google.android.gms.measurement.AppMeasurementReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
Work rescheduler Reschedules background work after reboot or app update. androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver androidx.work.impl.diagnostics.DiagnosticsReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
Profile installer Installs performance profiles to speed up app startup and hot paths. androidx.profileinstaller.ProfileInstallReceiver

Content Providers (6)

com.duosecurity.duomobile.push.NotificationSoundContentProvider
androidx.core.content.FileProvider
com.withpersona.sdk2.inquiry.DocumentFileProvider
com.google.mlkit.common.internal.MlKitInitProvider
com.google.firebase.provider.FirebaseInitProvider
androidx.startup.InitializationProvider

URL Endpoints (36)

http://commons.apache.org/logging/tech.html http://commons.apache.org/logging/troubleshooting.html http://www.bouncycastle.org http://www.slf4j.org/codes.html#StaticLoggerBinder http://www.slf4j.org/codes.html#loggerNameMismatch http://www.slf4j.org/codes.html#multiple_bindings http://www.slf4j.org/codes.html#replay http://www.slf4j.org/codes.html#substituteLogger http://www.slf4j.org/codes.html#unsuccessfulInit http://www.slf4j.org/codes.html#version_mismatch https://docs.withpersona.com/docs/mobile-sdks-v1 https://duo.com/legal/privacy-notice-services https://duo.com/legal/terms https://duosecurity-com-api-project-848238537804.firebaseio.com https://github.com/journeyapps/zxing-android-embedded https://guide.duo.com/duo-restore https://guide.duo.com/third-party-accounts https://help.duo.com/s/article/4524 https://help.duo.com/s/article/4683 https://help.duo.com/s/article/4886

Submission Details

Submitted At 2026-07-19
First Submission 2026-07-19
Last Submission 2026-07-19
Stored Until 2026-08-18
Names & Tags
com.duosecurity.duomobile_4.108.0-4108020_minAPI30(arm64-v8a,armeabi,armeabi-v7a,mips,mips64,x86,x86_64)(nodpi)_apkmirror.com.apk 704g9shbz.dll q9w8zzska.dll ghbposui2.dll DuoMobile-latest.apk DuoMobile-4.108.0.apk 97393a1d63ab4520d2492003ecdd62c17ba37c1f04db256df52492ed59529d29.apk Duo Mobile_4.108.0.apk contains-pe android detect-debug-environment obfuscated reflection apk contains-elf contains-macho