APK Security & Privacy Score
Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.
Security
Scan-weighted
98/100
Threat scan clean
Modern target SDK
Privacy
Permissions & network
72/100
High-risk permissions
HTTP URLs found
Possible tracking
83/100
Good
Overall trust
Facts
Threat scan
0/76 flagged, 0 suspicious
Permissions
23 requested
Network strings
34 URLs (2 HTTP, 32 HTTPS)
Target SDK
34
Certificate
Valid until 2048-09-01 (22 years, suspicious)
Warnings
Found 2 HTTP URL strings (unencrypted).
High-risk permissions detected: android.permission.RECEIVE_BOOT_COMPLETED
Possible analytics/tracking domains found: api.mixpanel.com, app-measurement.com, pagead2.googlesyndication.com
Package Name
com.leafiomobileapp.production
Version Code
52
Version Name
1.19.3
Application Name
com.leafiomobileapp.MainApplication
Debuggable
No
Allow Backup
No
Min SDK
Android 23 (Marshmallow)
Target SDK
Android 34 (Android 14)
Supported ABIs
arm64-v8a
armeabi-v7a
x86
x86_64
Certificate & Signer
Valid From
Valid To
Serial Number
Thumbprint
Issuer: C
Issuer: CN
Issuer: DN
Issuer: L
Issuer: O
Issuer: OU
Issuer: ST
Subject: C
Subject: CN
Subject: DN
Subject: L
Subject: O
Subject: OU
Subject: ST
Security Scan
0
✓ Clean
Malicious
0
Suspicious
0
Harmless
0
Undetected
65
Timeout
0
Failure
2
Scan Providers
ALYac
APEX
AVG
Acronis
AhnLab-V3
Alibaba
Antiy-AVL
Arcabit
Avast
Avast-Mobile
Avira
Baidu
BitDefender
BitDefenderFalx
Bkav
CAT-QuickHeal
CMC
CTX
ClamAV
CrowdStrike
Cylance
Cynet
DeepInstinct
DrWeb
ESET-NOD32
Elastic
Emsisoft
F-Secure
Fortinet
GData
Google
Gridinsoft
Ikarus
Jiangmin
K7AntiVirus
K7GW
Kaspersky
Kingsoft
Lionic
Malwarebytes
MaxSecure
McAfeeD
MicroWorld-eScan
Microsoft
NANO-Antivirus
Paloalto
Panda
Rising
SUPERAntiSpyware
Sangfor
SentinelOne
Skyhigh
Sophos
Symantec
SymantecMobileInsight
TACHYON
Tencent
Trapmine
TrellixENS
TrendMicro
TrendMicro-HouseCall
Trustlook
VBA32
VIPRE
Varist
ViRobot
VirIT
Webroot
Xcitium
Yandex
Zillya
ZoneAlarm
Zoner
alibabacloud
huorong
tehtris
File Signatures
SHA-256
4a68ff9faa845aa3c2104af93a0573c219f5734c30cbe8c45b14184706ea5ff3
MD5
79ebef8ecfa4bdb0c12d85dcebd438ec
SHA-1
3751a2cccda0290360bf94facb740b5d983b32b3
SSDEEP
1572864:hHk8dQZqoaFGlBPy9SEwMi3b7qmspflGn0vqdalOr0:hHxQZqUPy9SEwMi3b7qmspf20vqS
TLSH
T17118BF47F606889BCDD674B8950F5272AB207C48432290DBAE46FA147E3B3E95F7D381
VHASH
01a9dbfb4d0da56655b97f53387360ee
PERMHASH
87f2a877708c85dbdc799b29ab50ebacc2c1b2b65267faf7ef7a918f8fca9c4b
File Intelligence
Type Description
Human-friendly file type name based on multiple detection methods.
Type Extension
Most likely file extension inferred from the content.
Type Tag
Primary type tag assigned by the classifier.
Type Tags
Additional type tags that describe the file content.
Magic
File signature result from magic bytes inspection.
Magika
File type predicted by Magika (ML-based file type detection).
TrID
TrID file type guesses with probabilities.
dhash
Perceptual hash used to compare visual similarity of files.
raw md5
Raw MD5 hash of the file contents.
extensions
File extensions found inside the APK and how many of each.
file types
Detected embedded file types and their counts.
highest datetime
Latest timestamp found among files inside the archive.
lowest datetime
Earliest timestamp found among files inside the archive.
num children
Number of files contained within the archive.
type
Container type detected for the analyzed file.
uncompressed size
Estimated total size of all files after extraction.
Deep Manifest Analysis
Activity Intents (1)
com.leafiomobileapp.MainActivity
Service Intents (2)
Firebase messaging service
com.google.firebase.messaging.FirebaseMessagingService
io.invertase.firebase.messaging.ReactNativeFirebaseMessagingService
Receiver Intents (13)
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
Work rescheduler
androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
app.notifee.core.AlarmPermissionBroadcastReceiver
app.notifee.core.BlockStateBroadcastReceiver
app.notifee.core.NotificationAlarmReceiver
app.notifee.core.RebootBroadcastReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
io.invertase.firebase.messaging.ReactNativeFirebaseMessagingReceiver
Native Libraries (50)
libbarhopper_v3
libbarhopper_v3.so
C++ Standard Library
libc++_shared.so
libconceal
libconceal.so
libfabricjni
libfabricjni.so
FBJNI
libfbjni.so
libfolly_runtime
libfolly_runtime.so
libglog
libglog.so
libhermes
libhermes.so
libhermes_executor
libhermes_executor.so
libhermesinstancejni
libhermesinstancejni.so
libimage_processing_util_jni
libimage_processing_util_jni.so
libimagepipeline
libimagepipeline.so
libjscinstance
libjscinstance.so
libjsi
libjsi.so
libjsijniprofiler
libjsijniprofiler.so
libjsinspector
libjsinspector.so
libmapbufferjni
libmapbufferjni.so
libnative-filters
libnative-filters.so
libnative-imagetranscoder
libnative-imagetranscoder.so
libreact_codegen_rncore
libreact_codegen_rncore.so
libreact_cxxreactpackage
libreact_cxxreactpackage.so
libreact_debug
libreact_debug.so
libreact_devsupportjni
libreact_devsupportjni.so
libreact_featureflags
libreact_featureflags.so
libreact_featureflagsjni
libreact_featureflagsjni.so
libreact_nativemodule_core
libreact_nativemodule_core.so
libreact_newarchdefaults
libreact_newarchdefaults.so
libreact_render_componentregistry
libreact_render_componentregistry.so
libreact_render_core
libreact_render_core.so
libreact_render_debug
libreact_render_debug.so
libreact_render_graphics
libreact_render_graphics.so
libreact_render_imagemanager
libreact_render_imagemanager.so
libreact_render_mapbuffer
libreact_render_mapbuffer.so
libreact_utils
libreact_utils.so
libreactnativeblob
libreactnativeblob.so
libreactnativejni
libreactnativejni.so
libreactnativemmkv
libreactnativemmkv.so
libreactperfloggerjni
libreactperfloggerjni.so
libreanimated
libreanimated.so
librninstance
librninstance.so
librnscreens
librnscreens.so
librrc_image
librrc_image.so
librrc_legacyviewmanagerinterop
librrc_legacyviewmanagerinterop.so
librrc_view
librrc_view.so
libruntimeexecutor
libruntimeexecutor.so
libsentry-android
libsentry-android.so
libsentry
libsentry.so
libturbomodulejsijni
libturbomodulejsijni.so
libuimanagerjni
libuimanagerjni.so
libyoga
libyoga.so
Requested Permissions (23)
have full network access
android.permission.INTERNET
access precise location only in the foreground
android.permission.ACCESS_FINE_LOCATION
android.permission.USE_BIOMETRIC
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
android.permission.USE_FINGERPRINT
take pictures and videos
android.permission.CAMERA
control vibration
android.permission.VIBRATE
read the contents of your shared storage
android.permission.READ_EXTERNAL_STORAGE
modify or delete the contents of your shared storage
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.POST_NOTIFICATIONS
android.permission.POST_NOTIFICATIONS
view network connections
android.permission.ACCESS_NETWORK_STATE
view Wi-Fi connections
android.permission.ACCESS_WIFI_STATE
keep car screen turned on
android.permission.WAKE_LOCK
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
run at startup
android.permission.RECEIVE_BOOT_COMPLETED
Foreground service
android.permission.FOREGROUND_SERVICE
Cloud messaging receive
com.google.android.c2dm.permission.RECEIVE
Install Referrer service
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
AdServices Attribution
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
AdServices Advertising ID
android.permission.ACCESS_ADSERVICES_AD_ID
Dynamic receiver access
com.leafiomobileapp.production.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
android.permission.SCHEDULE_EXACT_ALARM
android.permission.SCHEDULE_EXACT_ALARM
android.permission.BROADCAST_CLOSE_SYSTEM_DIALOGS
android.permission.BROADCAST_CLOSE_SYSTEM_DIALOGS
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.ACCESS_NOTIFICATION_POLICY
Activities (5)
com.leafiomobileapp.MainActivity
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
com.google.android.gms.common.api.GoogleApiActivity
app.notifee.core.NotificationReceiverActivity
com.jakewharton.processphoenix.ProcessPhoenix
Services (17)
io.invertase.firebase.messaging.ReactNativeFirebaseMessagingHeadlessService
io.invertase.firebase.messaging.ReactNativeFirebaseMessagingService
com.google.firebase.components.ComponentDiscoveryService
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
androidx.camera.core.impl.MetadataHolderService
com.google.android.gms.auth.api.signin.RevocationBoundService
Firebase messaging service
com.google.firebase.messaging.FirebaseMessagingService
com.google.mlkit.common.internal.MlKitComponentDiscoveryService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
app.notifee.core.ReceiverService
app.notifee.core.ForegroundService
Broadcast Receivers (16)
io.invertase.firebase.messaging.ReactNativeFirebaseMessagingReceiver
io.invertase.firebase.messaging.ReactNativeFirebaseMessagingReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
Work rescheduler
androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.gms.measurement.AppMeasurementReceiver
com.google.android.gms.measurement.AppMeasurementReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
app.notifee.core.RebootBroadcastReceiver
app.notifee.core.RebootBroadcastReceiver
app.notifee.core.AlarmPermissionBroadcastReceiver
app.notifee.core.AlarmPermissionBroadcastReceiver
app.notifee.core.NotificationAlarmReceiver
app.notifee.core.NotificationAlarmReceiver
app.notifee.core.BlockStateBroadcastReceiver
app.notifee.core.BlockStateBroadcastReceiver
Content Providers (10)
io.invertase.notifee.NotifeeInitProvider
io.invertase.firebase.app.ReactNativeFirebaseAppInitProvider
com.ReactNativeBlobUtil.Utils.FileProvider
com.imagepicker.ImagePickerProvider
cl.json.RNShareFileProvider
androidx.startup.InitializationProvider
com.google.mlkit.common.internal.MlKitInitProvider
com.google.firebase.provider.FirebaseInitProvider
io.sentry.android.core.SentryInitProvider
io.sentry.android.core.SentryPerformanceProvider
URL Endpoints (36)
http://10.0.2.2:8969/stream
http://www.android.com/
https://accounts.google.com/o/oauth2/revoke?token=
https://api.crowdin.com/api/v2
https://api.mixpanel.com
https://api.super-app.leafio.cloud
https://app-measurement.com/a
https://app-measurement.com/s/d
https://docs.swmansion.com/react-native-gesture-handler/docs/guides/migrating-off-rnghenabledroot
https://docs.swmansion.com/react-native-reanimated/docs/guides/troubleshooting#java-side-failed-to-resolve-c-code-version
https://docs.swmansion.com/react-native-reanimated/docs/guides/troubleshooting#mismatch-between-java-code-version-and-c-code-version
https://firebase.google.com/docs/analytics
https://firebase.google.com/docs/android/kotlin-migration
https://firebase.google.com/support/guides/disable-analytics
https://firebase.google.com/support/privacy/init-options
https://github.com/software-mansion/react-native-screens/issues
https://github.com/software-mansion/react-native-screens/issues/17#issuecomment-424704067
https://goo.gl/NAOOOI
https://google.com/search
https://pagead2.googlesyndication.com/pagead/gen_204?id=gmob-apps
Submission Details
Submitted At
First Submission
Last Submission
Stored Until