easylight.apk

50.18 MB

Analyzed: 2026-02-22 18:17 UTC

Twitter / X Facebook LinkedIn WhatsApp Telegram Reddit
Analyze Another

APK Security & Privacy Score

Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.

Security Scan-weighted
97/100
Threat scan clean Modern target SDK
Privacy Permissions & network
89/100
High-risk permissions HTTP URLs found AllowBackup enabled Possible tracking
93/100
Excellent
Overall trust

Facts

Threat scan 0/76 flagged, 0 suspicious
Permissions 14 requested
Network strings 27 URLs (3 HTTP, 24 HTTPS)
Target SDK 36
Certificate Valid until 2048-12-17 (23 years, suspicious)

Warnings

Found 3 HTTP URL strings (unencrypted).
High-risk permissions detected: android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS, android.permission.RECEIVE_BOOT_COMPLETED
AllowBackup is enabled.
Possible analytics/tracking domains found: app-measurement.com, pagead2.googlesyndication.com
Package Name com.easylight.vpn
Version Code 4000181
Version Name 2.8.1181
Application Name com.easylight.vpn.App
Debuggable No
Allow Backup Yes
Min SDK Android 23 (Marshmallow)
Target SDK Android 36 (Unknown)
Supported ABIs
arm64-v8a armeabi-v7a x86 x86_64

Certificate & Signer

Valid From 2023-12-24 18:02:04
Valid To 2048-12-17 18:02:04
Serial Number 1
Thumbprint a01617be9869696b15bf1f0b8c7b53e5feabb882
Issuer: C 7
Issuer: CN nikita samsonov
Issuer: DN C:7, CN:nikita samsonov, L:spb, O:easylight, ST:spb, OU:developer
Issuer: L spb
Issuer: O easylight
Issuer: OU developer
Issuer: ST spb
Subject: C 7
Subject: CN nikita samsonov
Subject: DN C:7, CN:nikita samsonov, L:spb, O:easylight, ST:spb, OU:developer
Subject: L spb
Subject: O easylight
Subject: OU developer
Subject: ST spb

Security Scan

0 /76
✓ Clean
Scanned by 76 security vendors
Last scan: 2026-02-19 19:26 UTC
Malicious
0
Suspicious
0
Harmless
0
Undetected
65
Timeout
1
Failure
1

Scan Providers

76 vendors
ALYac undetected
No result reported
Engine 2.0.0.10
APEX type-unsupported
No result reported
Engine 6.749
AVG undetected
No result reported
Engine 23.9.8494.0
Acronis undetected
No result reported
Engine 1.2.0.121
AhnLab-V3 undetected
No result reported
Engine 3.29.1.10604
Alibaba undetected
No result reported
Engine 0.3.0.5
Antiy-AVL undetected
No result reported
Engine 3.0
Arcabit undetected
No result reported
Engine 2025.0.0.23
Avast undetected
No result reported
Engine 23.9.8494.0
Avast-Mobile undetected
No result reported
Engine 260219-00
Avira undetected
No result reported
Engine 8.3.3.24
Baidu undetected
No result reported
Engine 1.0.0.2
BitDefender undetected
No result reported
Engine 7.2
BitDefenderFalx undetected
No result reported
Engine 2.0.936
Bkav undetected
No result reported
Engine 2.0.0.1
CAT-QuickHeal undetected
No result reported
Engine 22.00
CMC undetected
No result reported
Engine 2.4.2022.1
CTX undetected
No result reported
Engine 2024.8.29.1
ClamAV undetected
No result reported
Engine 1.5.1.0
CrowdStrike undetected
No result reported
Engine 1.0
Cylance type-unsupported
No result reported
Engine 3.0.0.0
Cynet type-unsupported
No result reported
Engine 4.0.3.4
DeepInstinct type-unsupported
No result reported
Engine 5.0.0.8
DrWeb undetected
No result reported
Engine 7.0.75.2070
ESET-NOD32 undetected
No result reported
Engine 18.2.18.0
Elastic undetected
No result reported
Engine 4.0.248
Emsisoft undetected
No result reported
Engine 2024.8.0.61147
F-Secure undetected
No result reported
Engine 18.10.1547.307
Fortinet undetected
No result reported
Engine 7.0.30.0
GData undetected
No result reported
Engine GD:27.43586AVA:64.30688
Google undetected
No result reported
Engine 1771524081
Gridinsoft undetected
No result reported
Engine 1.0.237.174
Ikarus undetected
No result reported
Engine 6.4.16.0
Jiangmin undetected
No result reported
Engine 16.0.100
K7AntiVirus undetected
No result reported
Engine 14.37.58644
K7GW undetected
No result reported
Engine 14.37.58643
Kaspersky undetected
No result reported
Engine 22.0.1.28
Kingsoft undetected
No result reported
Engine None
Lionic undetected
No result reported
Engine 8.16
Malwarebytes undetected
No result reported
Engine 3.1.0.209
MaxSecure undetected
No result reported
Engine 1.0.0.1
McAfeeD undetected
No result reported
Engine 1.2.0.13781
MicroWorld-eScan undetected
No result reported
Engine 14.0.409.0
Microsoft undetected
No result reported
Engine 1.1.26010.1
NANO-Antivirus undetected
No result reported
Engine 1.0.170.26895
Paloalto type-unsupported
No result reported
Engine 0.9.0.1003
Panda undetected
No result reported
Engine 4.6.4.2
Rising undetected
No result reported
Engine 25.0.0.28
SUPERAntiSpyware undetected
No result reported
Engine 5.6.0.1032
Sangfor undetected
No result reported
Engine 2.22.3.0
SentinelOne type-unsupported
No result reported
Engine 7.5.3.1
Skyhigh undetected
No result reported
Engine v2021.2.0+4045
Sophos undetected
No result reported
Engine 3.3.1.0
Symantec failure
No result reported
Engine 1.22.0.0
SymantecMobileInsight undetected
No result reported
Engine 2.0
TACHYON undetected
No result reported
Engine 2026-02-19.02
Tencent undetected
No result reported
Engine 1.0.0.1
Trapmine type-unsupported
No result reported
Engine 4.0.9.0
TrellixENS timeout
No result reported
Engine 6.0.6.653
TrendMicro undetected
No result reported
Engine 24.550.0.1002
TrendMicro-HouseCall undetected
No result reported
Engine 24.550.0.1002
Trustlook undetected
No result reported
Engine 1.0
VBA32 undetected
No result reported
Engine 5.5.1
VIPRE undetected
No result reported
Engine 6.0.0.35
Varist undetected
No result reported
Engine 6.6.1.3
ViRobot undetected
No result reported
Engine 2014.3.20.0
VirIT undetected
No result reported
Engine 9.5.1149
Webroot undetected
No result reported
Engine 1.9.0.8
Xcitium undetected
No result reported
Engine 38424
Yandex undetected
No result reported
Engine 5.5.2.24
Zillya undetected
No result reported
Engine 2.0.0.5548
ZoneAlarm undetected
No result reported
Engine 6.23-113518302
Zoner undetected
No result reported
Engine 2.2.2.0
alibabacloud type-unsupported
No result reported
Engine 2.2.0
huorong undetected
No result reported
Engine 74dc94e:74dc94e:b97a070:b97a070
tehtris type-unsupported
No result reported
Engine v0.1.4

File Signatures

SHA-256 f5dbb7caaad98cc4a8ae38c2818e3c65243c143233ac0b0fcc4ec833b31bbb82
MD5 59a0cd880a58a29ec5c52df22f870892
SHA-1 1ee3ae6b4640d288f65b79f48f3b713cd3e4716e
SSDEEP 1572864:2aU29SMNXQSbWeQtWXW4cYR+rC0r1EZwo:XUeSEFQgXer7rWZwo
TLSH T146B73387F36D483EC9F722B10DAE462667A54D02028B7B033994772C6AB398D1F5DBC5
VHASH c0ae92068ce9cf6bd6ce6467c9aed9f7
PERMHASH cd24ea6e0fcac38fc40a437ca0213f073532304ea0fb78a331739b44c4ba8a4e

File Intelligence

Type Description Android Human-friendly file type name based on multiple detection methods.
Type Extension apk Most likely file extension inferred from the content.
Type Tag android Primary type tag assigned by the classifier.
Type Tags executable, mobile, android, apk Additional type tags that describe the file content.
Magic Zip archive data, at least v0.0 to extract, compression method=deflate File signature result from magic bytes inspection.
Magika APK File type predicted by Magika (ML-based file type detection).
TrID Android Package (40%), Java Archive (20%), VYM Mind Map (18.5%), Sweet Home 3D Design (generic) (15.5%), ZIP compressed archive (5.9%) TrID file type guesses with probabilities.
dhash 0000001e0d080800 Perceptual hash used to compare visual similarity of files.
raw md5 1f307f454ffa141f57d3a48ad938c300 Raw MD5 hash of the file contents.
extensions xml (783), png (72), version (71), properties (23), so (16), kotlin_builtins (8), txt (4), json (3), dat (2), ttf (2), webp (2), a (1), b (1), bin (1), dex (1), gz (1), MF (1), prof (1), profm (1), textproto (1) File extensions found inside the APK and how many of each.
file types XML (783), unknown (126), PNG (72), ELF (16), DEX (1), Java Bytecode (1), JSON (1) Detected embedded file types and their counts.
highest datetime 1981-01-01 01:01:02 UTC Latest timestamp found among files inside the archive.
lowest datetime 1981-01-01 01:01:02 UTC Earliest timestamp found among files inside the archive.
num children 2446 Number of files contained within the archive.
type APK Container type detected for the analyzed file.
uncompressed size 136 MB Estimated total size of all files after extraction.

Deep Manifest Analysis

Activity Intents (2)

com.easylight.vpn.MainActivity
Actions
android.service.quicksettings.action.QS_TILE_PREFERENCES android.service.quicksettings.action.QS_TILE_PREFERENCES
com.easylight.vpn.WelcomeActivity
Actions
Main Activity Action: Start as a main entry point, does not expect to android.intent.action.MAIN
Categories
android.intent.category.DEFAULT android.intent.category.LAUNCHER android.intent.category.LEANBACK_LAUNCHER

Service Intents (2)

com.easylight.vpn.service.V2RayVpnService
Actions
android.net.VpnService android.net.VpnService
io.appmetrica.analytics.internal.AppMetricaService
Actions
io.appmetrica.analytics.IAppMetricaService io.appmetrica.analytics.IAppMetricaService

Receiver Intents (3)

Profile installer Installs performance profiles to speed up app startup and hot paths. androidx.profileinstaller.ProfileInstallReceiver
Actions
Install performance profile Installs a profile that helps optimize app performance. androidx.profileinstaller.action.INSTALL_PROFILE
Skip profile install Skips profile installation for this build. androidx.profileinstaller.action.SKIP_FILE
Save performance profile Saves a profile generated during app usage. androidx.profileinstaller.action.SAVE_PROFILE
Benchmark operation Runs a profile installer benchmark operation. androidx.profileinstaller.action.BENCHMARK_OPERATION
Work rescheduler Reschedules background work after reboot or app update. androidx.work.impl.background.systemalarm.RescheduleReceiver
Actions
Boot Completed Broadcast Action: This is broadcast once, after the system has finished android.intent.action.BOOT_COMPLETED
androidx.work.impl.diagnostics.DiagnosticsReceiver
Actions
androidx.work.diagnostics.REQUEST_DIAGNOSTICS androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Native Libraries (4)

libdatastore_shared_counter libdatastore_shared_counter.so
libgojni libgojni.so
libmmkv libmmkv.so
libtun2socks libtun2socks.so

Requested Permissions (14)

view network connections Allows the app to view information about network connections such as which networks exist and are connected. android.permission.ACCESS_NETWORK_STATE
change network connectivity Allows the app to change the state of network connectivity. android.permission.CHANGE_NETWORK_STATE
have full network access Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet. android.permission.INTERNET
android.permission.POST_NOTIFICATIONS Custom app or vendor permission (not publicly documented). android.permission.POST_NOTIFICATIONS
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS Custom app or vendor permission (not publicly documented). android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
Foreground service Allows the app to run a foreground service. android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_SPECIAL_USE Custom app or vendor permission (not publicly documented). android.permission.FOREGROUND_SERVICE_SPECIAL_USE
keep car screen turned on Allows the app to keep the car screen turned on. android.permission.WAKE_LOCK
Install Referrer service Allows Google Play to bind to the app's Install Referrer service for install attribution. com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.gms.permission.AD_ID Custom app or vendor permission (not publicly documented). com.google.android.gms.permission.AD_ID
AdServices Attribution Required to call AdServices Attribution APIs. android.permission.ACCESS_ADSERVICES_ATTRIBUTION
AdServices Advertising ID Required to call AdServices Advertising ID APIs. android.permission.ACCESS_ADSERVICES_AD_ID
run at startup Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the tablet and allow the app to slow down the overall tablet by always running. android.permission.RECEIVE_BOOT_COMPLETED
Dynamic receiver access Internal app permission used to protect dynamic broadcast receivers. com.easylight.vpn.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Uses Features (2)

Touchscreen Feature for {@link #getSystemAvailableFeatures} and android.hardware.touchscreen
Leanback Feature for {@link #getSystemAvailableFeatures} and android.software.leanback

Activities (14)

com.easylight.vpn.WelcomeActivity
com.easylight.vpn.MainActivity
com.easylight.vpn.AboutActivity
com.easylight.vpn.ServerActivity
com.easylight.vpn.ProfileActivity
com.easylight.vpn.AuthorizeActivity
com.easylight.vpn.MailConfirmActivity
com.easylight.vpn.TariffsActivity
com.easylight.vpn.ShareActivity
com.easylight.vpn.RoutingActivity
com.easylight.vpn.ReportActivity
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
com.google.android.gms.common.api.GoogleApiActivity
com.google.android.play.core.common.PlayCoreDialogWrapperActivity

Services (9)

com.easylight.vpn.service.V2RayVpnService
com.google.android.gms.auth.api.signin.RevocationBoundService
io.appmetrica.analytics.internal.AppMetricaService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.firebase.components.ComponentDiscoveryService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
androidx.room.MultiInstanceInvalidationService

Broadcast Receivers (5)

com.google.android.gms.measurement.AppMeasurementReceiver com.google.android.gms.measurement.AppMeasurementReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
Work rescheduler Reschedules background work after reboot or app update. androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver androidx.work.impl.diagnostics.DiagnosticsReceiver
Profile installer Installs performance profiles to speed up app startup and hot paths. androidx.profileinstaller.ProfileInstallReceiver

Content Providers (3)

androidx.startup.InitializationProvider
io.appmetrica.analytics.internal.PreloadInfoContentProvider
com.google.firebase.provider.FirebaseInitProvider

URL Endpoints (30)

http://api.externalip.net/ip/ http://icanhazip.com/ http://myip.dnsomatic.com/ https://accounts.google.com/o/oauth2/revoke?token= https://app-measurement.com/a https://app-measurement.com/s/d https://appmetrica.io/docs/mobile-sdk-dg/android/about/android-initialize.html https://developer.android.com/reference/com/google/android/play/core/review/model/ReviewErrorCode.html# https://developer.android.com/training/articles/direct-boot https://easylightvpn.com https://firebase.google.com/support/guides/disable-analytics https://firebase.google.com/support/privacy/init-options https://firebaseinstallations.googleapis.com/v1/ https://github.com/google/gson/blob/main/Troubleshooting.md# https://goo.gl/NAOOOI https://google.com/search https://issuetracker.google.com/issues/241760537 https://issuetracker.google.com/issues/new?component=907884&template=1466542 https://pagead2.googlesyndication.com/pagead/gen_204?id=gmob-apps https://play.google.com/store/apps/details?id=

Submission Details

Submitted At 2026-02-22
First Submission 2026-02-22
Last Submission 2026-02-22
Stored Until 2026-03-24
Names & Tags
apk android contains-elf crypto obfuscated runtime-modules reflection detect-debug-environment checks-gps telephony