Splitwise icon

Splitwise-26.2.2.apk

Splitwise

86.43 MB

Analyzed: 2026-03-01 19:00 UTC

APK Security & Privacy Score

Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.

Security Scan-weighted
98/100
Threat scan clean Modern target SDK
Privacy Permissions & network
82/100
High-risk permissions HTTP URLs found AllowBackup enabled
89/100
Good
Overall trust

Facts

Threat scan 0/76 flagged, 0 suspicious
Permissions 20 requested
Network strings 8 URLs (1 HTTP, 7 HTTPS)
Target SDK 35
Certificate Valid until 2041-10-25 (16 years, suspicious)

Warnings

Found 1 HTTP URL strings (unencrypted).
High-risk permissions detected: android.permission.RECEIVE_BOOT_COMPLETED
AllowBackup is enabled.
Package Name com.Splitwise.SplitwiseMobile
Version Code 904
Version Name 26.2.2
Application Name com.Splitwise.SplitwiseMobile.SplitwiseApplication
Debuggable No
Allow Backup Yes
Min SDK Android 28 (Pie)
Target SDK Android 35 (Android 15)
Supported ABIs
arm64-v8a armeabi-v7a x86 x86_64

Certificate & Signer

Valid From 2011-09-13 04:29:25
Valid To 2041-10-25 04:29:25
Serial Number 4e6edc25
Thumbprint 373559486d7c1be1298aec3bfbf7d629c274564b
Issuer: C US
Issuer: CN Ryan Laughlin
Issuer: DN C:US, CN:Ryan Laughlin, L:Cambridge, O:Splitwise, ST:MA, OU:Splitwise
Issuer: L Cambridge
Issuer: O Splitwise
Issuer: OU Splitwise
Issuer: ST MA
Subject: C US
Subject: CN Ryan Laughlin
Subject: DN C:US, CN:Ryan Laughlin, L:Cambridge, O:Splitwise, ST:MA, OU:Splitwise
Subject: L Cambridge
Subject: O Splitwise
Subject: OU Splitwise
Subject: ST MA

Security Scan

0 /76
✓ Clean
Scanned by 76 security vendors
Last scan: 2026-02-26 08:06 UTC
Malicious
0
Suspicious
0
Harmless
0
Undetected
63
Timeout
4
Failure
0

Scan Providers

76 vendors
ALYac undetected
No result reported
Engine 2.0.0.10
APEX type-unsupported
No result reported
Engine 6.752
AVG undetected
No result reported
Engine 23.9.8494.0
Acronis undetected
No result reported
Engine 1.2.0.121
AhnLab-V3 undetected
No result reported
Engine 3.29.1.10604
Alibaba undetected
No result reported
Engine 0.3.0.5
Antiy-AVL undetected
No result reported
Engine 3.0
Arcabit undetected
No result reported
Engine 2025.0.0.23
Avast undetected
No result reported
Engine 23.9.8494.0
Avast-Mobile undetected
No result reported
Engine 260225-02
Avira undetected
No result reported
Engine 8.3.3.24
Baidu undetected
No result reported
Engine 1.0.0.2
BitDefender undetected
No result reported
Engine 7.2
BitDefenderFalx undetected
No result reported
Engine 2.0.936
Bkav undetected
No result reported
Engine 2.0.0.1
CAT-QuickHeal undetected
No result reported
Engine 22.00
CMC undetected
No result reported
Engine 2.4.2022.1
CTX undetected
No result reported
Engine 2024.8.29.1
ClamAV timeout
No result reported
Engine 1.5.1.0
CrowdStrike undetected
No result reported
Engine 1.0
Cylance type-unsupported
No result reported
Engine 3.0.0.0
Cynet type-unsupported
No result reported
Engine 4.0.3.4
DeepInstinct type-unsupported
No result reported
Engine 5.0.0.8
DrWeb undetected
No result reported
Engine 7.0.75.2070
ESET-NOD32 undetected
No result reported
Engine 18.2.18.0
Elastic undetected
No result reported
Engine 4.0.250
Emsisoft undetected
No result reported
Engine 2024.8.0.61147
F-Secure undetected
No result reported
Engine 18.10.1547.307
Fortinet timeout
No result reported
Engine 7.0.30.0
GData undetected
No result reported
Engine GD:27.43663AVA:64.30730
Google undetected
No result reported
Engine 1772085634
Gridinsoft undetected
No result reported
Engine 1.0.239.174
Ikarus undetected
No result reported
Engine 6.4.16.0
Jiangmin undetected
No result reported
Engine 16.0.100
K7AntiVirus undetected
No result reported
Engine 14.38.58708
K7GW undetected
No result reported
Engine 14.38.58709
Kaspersky undetected
No result reported
Engine 22.0.1.28
Kingsoft undetected
No result reported
Engine None
Lionic undetected
No result reported
Engine 8.16
Malwarebytes undetected
No result reported
Engine 3.1.0.211
MaxSecure timeout
No result reported
Engine 1.0.0.1
McAfeeD undetected
No result reported
Engine 1.2.0.14023
MicroWorld-eScan undetected
No result reported
Engine 14.0.409.0
Microsoft undetected
No result reported
Engine 1.1.26010.1
NANO-Antivirus undetected
No result reported
Engine 1.0.170.26895
Paloalto type-unsupported
No result reported
Engine 0.9.0.1003
Panda undetected
No result reported
Engine 4.6.4.2
Rising undetected
No result reported
Engine 25.0.0.28
SUPERAntiSpyware undetected
No result reported
Engine 5.6.0.1032
Sangfor undetected
No result reported
Engine 2.22.3.0
SentinelOne type-unsupported
No result reported
Engine 7.5.3.1
Skyhigh undetected
No result reported
Engine v2021.2.0+4045
Sophos undetected
No result reported
Engine 3.3.1.0
Symantec undetected
No result reported
Engine 1.22.0.0
SymantecMobileInsight undetected
No result reported
Engine 2.0
TACHYON undetected
No result reported
Engine 2026-02-26.02
Tencent undetected
No result reported
Engine 1.0.0.1
Trapmine type-unsupported
No result reported
Engine 4.0.10.0
TrellixENS timeout
No result reported
Engine 6.0.6.653
TrendMicro undetected
No result reported
Engine 24.550.0.1002
TrendMicro-HouseCall undetected
No result reported
Engine 24.550.0.1002
Trustlook undetected
No result reported
Engine 1.0
VBA32 undetected
No result reported
Engine 5.5.1
VIPRE undetected
No result reported
Engine 6.0.0.35
Varist undetected
No result reported
Engine 6.6.1.3
ViRobot undetected
No result reported
Engine 2014.3.20.0
VirIT undetected
No result reported
Engine 9.5.1153
Webroot undetected
No result reported
Engine 1.9.0.8
Xcitium undetected
No result reported
Engine 38443
Yandex undetected
No result reported
Engine 5.5.2.24
Zillya undetected
No result reported
Engine 2.0.0.5552
ZoneAlarm undetected
No result reported
Engine 6.23-113518456
Zoner undetected
No result reported
Engine 2.2.2.0
alibabacloud type-unsupported
No result reported
Engine 2.2.0
huorong undetected
No result reported
Engine 2c65c7a:2c65c7a:f6b357d:f6b357d
tehtris type-unsupported
No result reported

File Signatures

SHA-256 a1684d4292ee550ff34c2dcc2a9ac2f68fdb4e8299fb9a7b0b95aa4266df6a7c
MD5 d4ee33c3209bf9c3fde1e2bdbb31fb41
SHA-1 c3d3f0577d32be692644d6b7026be9783b30d7db
SSDEEP 786432:es3RPLhFsYeKna8Tnq+0VPn0vmRdCZ+E21SKty4x5QQZJwWTsQLkD7LjSPWkl:ekPM8MBtREAWKtRx5vJpTs3vG+0
TLSH T1F818D026A7025931C67F27351EFA4740BF301E96A34387971204B4BCBEF32D5AA997C9
VHASH 767d9921542fcb0da89a6cb4c8197027
PERMHASH dc4de19ef9292f0067155e49f965c74d8037394a4474023dcd85d1c0c12f7600

File Intelligence

Type Description Android Human-friendly file type name based on multiple detection methods.
Type Extension apk Most likely file extension inferred from the content.
Type Tag android Primary type tag assigned by the classifier.
Type Tags executable, mobile, android, apk Additional type tags that describe the file content.
Magic Zip archive data, at least v2.0 to extract, compression method=deflate File signature result from magic bytes inspection.
Magika APK File type predicted by Magika (ML-based file type detection).
TrID SPSS Extension (30.7%), Android Package (27.6%), Java Archive (13.8%), VYM Mind Map (12.8%), Sweet Home 3D Design (generic) (10.7%) TrID file type guesses with probabilities.
dhash 0000101e1c150800 Perceptual hash used to compare visual similarity of files.
raw md5 a30b72f23d7f83fc4cbe3d79aaaec621 Raw MD5 hash of the file contents.
extensions png (245), version (112), kotlin_module (84), binarypb (10), dex (6), js (6), txt (5), properties (4), tflite (4), bincfg (2), fb (2), bin (1), BuiltInsLoader (1), CommandLineProcessor (1), ComponentRegistrar (1), conv_model (1), CoroutineExceptionHandler (1), DefaultErrorMessages$Extension (1), ExternalOverridabilityCondition (1), FirExtensionRegistrar (1), html (1), JsonFactory (1), lstm_model (1), MainDispatcherFactory (1), MF (1), Module (1), ObjectCodec (1), pb (1), prof (1), profm (1), proto (1), textproto (1), xml (1) File extensions found inside the APK and how many of each.
file types unknown (752), PNG (245), HTML (1), Java Bytecode (1), XML (1) Detected embedded file types and their counts.
highest datetime 2026-02-19 14:53:54 UTC Latest timestamp found among files inside the archive.
lowest datetime 1981-01-01 01:01:02 UTC Earliest timestamp found among files inside the archive.
num children 3201 Number of files contained within the archive.
type APK Container type detected for the analyzed file.
uncompressed size 59 MB Estimated total size of all files after extraction.

Sandbox

Sandbox Verdicts

Zenbox android category: harmless | confidence: 93 | classification: CLEAN | sandbox: Zenbox android

Deep Manifest Analysis

Activity Intents (3)

com.Splitwise.SplitwiseMobile.features.expense.AddExpenseScreen
Actions
Send Activity Action: Deliver some data to someone else. android.intent.action.SEND
Categories
android.intent.category.DEFAULT
com.Splitwise.SplitwiseMobile.views.SplitwiseSplashScreen
Actions
Main Activity Action: Start as a main entry point, does not expect to android.intent.action.MAIN
View Activity Action: Display the data to the user. android.intent.action.VIEW
Categories
android.intent.category.LAUNCHER android.intent.category.DEFAULT android.intent.category.BROWSABLE
com.plaid.internal.LinkRedirectActivity
Actions
View Activity Action: Display the data to the user. android.intent.action.VIEW
Categories
android.intent.category.DEFAULT android.intent.category.BROWSABLE

Service Intents (2)

com.Splitwise.SplitwiseMobile.services.SWMessagingService
Actions
Firebase messaging event Action used by Firebase to deliver a push message to the app. com.google.firebase.MESSAGING_EVENT
Firebase messaging service Handles push notifications and data messages from Firebase Cloud Messaging. com.google.firebase.messaging.FirebaseMessagingService
Actions
Firebase messaging event Action used by Firebase to deliver a push message to the app. com.google.firebase.MESSAGING_EVENT

Receiver Intents (9)

Profile installer Installs performance profiles to speed up app startup and hot paths. androidx.profileinstaller.ProfileInstallReceiver
Actions
Install performance profile Installs a profile that helps optimize app performance. androidx.profileinstaller.action.INSTALL_PROFILE
Skip profile install Skips profile installation for this build. androidx.profileinstaller.action.SKIP_FILE
Save performance profile Saves a profile generated during app usage. androidx.profileinstaller.action.SAVE_PROFILE
Benchmark operation Runs a profile installer benchmark operation. androidx.profileinstaller.action.BENCHMARK_OPERATION
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
Actions
Power Connected Broadcast Action: External power has been connected to the device. android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
Actions
Battery Okay Broadcast Action: Indicates the battery is now okay after being low. android.intent.action.BATTERY_OKAY
Battery Low Broadcast Action: Indicates low battery condition on the device. android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
Actions
android.net.conn.CONNECTIVITY_CHANGE android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
Actions
Device Storage Low Broadcast Action: A sticky broadcast that indicates low memory android.intent.action.DEVICE_STORAGE_LOW
Device Storage Ok Broadcast Action: Indicates low memory condition on the device no longer exists android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
Actions
androidx.work.impl.background.systemalarm.UpdateProxies androidx.work.impl.background.systemalarm.UpdateProxies
Work rescheduler Reschedules background work after reboot or app update. androidx.work.impl.background.systemalarm.RescheduleReceiver
Actions
Boot Completed Broadcast Action: This is broadcast once, after the system has finished android.intent.action.BOOT_COMPLETED
Time Changed Broadcast Action: The time was set. android.intent.action.TIME_SET
Timezone Changed Broadcast Action: The timezone has changed. android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.diagnostics.DiagnosticsReceiver
Actions
androidx.work.diagnostics.REQUEST_DIAGNOSTICS androidx.work.diagnostics.REQUEST_DIAGNOSTICS
com.google.firebase.iid.FirebaseInstanceIdReceiver
Actions
com.google.android.c2dm.intent.RECEIVE com.google.android.c2dm.intent.RECEIVE

Native Libraries (8)

libandroidx.graphics.path libandroidx.graphics.path.so
libbinary-logging libbinary-logging.so
libimage_processing_util_jni libimage_processing_util_jni.so
libimagepipeline libimagepipeline.so
libmlkit_google_ocr_pipeline libmlkit_google_ocr_pipeline.so
libnative-filters libnative-filters.so
libnative-imagetranscoder libnative-imagetranscoder.so
libsurface_util_jni libsurface_util_jni.so

Requested Permissions (20)

have full network access Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet. android.permission.INTERNET
read your contacts Allows the app to read data about your contacts stored on your tablet. Apps will also have access to the accounts on your tablet that have created contacts. This may include accounts created by apps you have installed. This permission allows apps to save your contact data, and malicious apps may share contact data without your knowledge. android.permission.READ_CONTACTS
control vibration Allows the app to control the vibrator. android.permission.VIBRATE
find accounts on the device Allows the app to get the list of accounts known by the tablet. This may include any accounts created by applications you have installed. android.permission.GET_ACCOUNTS
Use Credentials android.permission.USE_CREDENTIALS
view network connections Allows the app to view information about network connections such as which networks exist and are connected. android.permission.ACCESS_NETWORK_STATE
toggle sync on and off Allows an app to modify the sync settings for an account. For example, this can be used to enable sync of the People app with an account. android.permission.WRITE_SYNC_SETTINGS
Authenticate Accounts android.permission.AUTHENTICATE_ACCOUNTS
read sync settings Allows the app to read the sync settings for an account. For example, this can determine whether the People app is synced with an account. android.permission.READ_SYNC_SETTINGS
Cloud messaging receive Allows the app to receive push messages via Google/Firebase Cloud Messaging. com.google.android.c2dm.permission.RECEIVE
com.google.android.c2dm.permission.REGISTRATION Custom app or vendor permission (not publicly documented). com.google.android.c2dm.permission.REGISTRATION
android.permission.POST_NOTIFICATIONS Custom app or vendor permission (not publicly documented). android.permission.POST_NOTIFICATIONS
take pictures and videos This app can take pictures and record videos using the camera while the app is in use. android.permission.CAMERA
android.permission.USE_BIOMETRIC Custom app or vendor permission (not publicly documented). android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT Custom app or vendor permission (not publicly documented). android.permission.USE_FINGERPRINT
keep car screen turned on Allows the app to keep the car screen turned on. android.permission.WAKE_LOCK
com.android.vending.BILLING
run at startup Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the tablet and allow the app to slow down the overall tablet by always running. android.permission.RECEIVE_BOOT_COMPLETED
Foreground service Allows the app to run a foreground service. android.permission.FOREGROUND_SERVICE
Dynamic receiver access Internal app permission used to protect dynamic broadcast receivers. com.Splitwise.SplitwiseMobile.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Uses Features (3)

Camera Feature for {@link #getSystemAvailableFeatures} and android.hardware.camera
Camera Autofocus Feature for {@link #getSystemAvailableFeatures} and android.hardware.camera.autofocus
Camera Flash Feature for {@link #getSystemAvailableFeatures} and android.hardware.camera.flash

Activities (37)

com.Splitwise.SplitwiseMobile.views.SplitwiseSplashScreen
com.plaid.internal.LinkRedirectActivity
com.Splitwise.SplitwiseMobile.features.login.LoggedOutHomeScreen
com.Splitwise.SplitwiseMobile.features.login.ExpiredSessionScreen
com.Splitwise.SplitwiseMobile.views.WebViewScreen
com.Splitwise.SplitwiseMobile.features.expense.AddExpenseScreen
com.Splitwise.SplitwiseMobile.features.payment.AddPaymentActivity
com.Splitwise.SplitwiseMobile.features.applock.PasscodeActivity
com.Splitwise.SplitwiseMobile.views.ExpenseAddedActivity
com.Splitwise.SplitwiseMobile.views.InviteHandlingActivity
com.Splitwise.SplitwiseMobile.views.GroupInviteHandlingActivity
com.Splitwise.SplitwiseMobile.views.InviteAcceptanceActivity
com.Splitwise.SplitwiseMobile.features.selectpeople.SelectPeopleWizard
com.canhub.cropper.CropImageActivity
com.Splitwise.SplitwiseMobile.views.PasswordResetLinkHandlingActivity
com.Splitwise.SplitwiseMobile.views.MagicLoginLinkHandlingActivity
com.Splitwise.SplitwiseMobile.views.PasswordResetLinkActivity
com.Splitwise.SplitwiseMobile.views.ShareSheetLinkHandlingActivity
com.Splitwise.SplitwiseMobile.views.AddFriendLinkHandlingActivity
com.Splitwise.SplitwiseMobile.features.selectpeople.SelectedPeopleHandlingActivity
com.Splitwise.SplitwiseMobile.views.DashboardActivity
com.Splitwise.SplitwiseMobile.features.shared.views.AppLinkAlertsActivity
com.Splitwise.SplitwiseMobile.features.shared.views.AccountSetupWebView
com.Splitwise.SplitwiseMobile.features.cards.request.SandboxPushProvisioningActivity
com.Splitwise.SplitwiseMobile.features.applock.BiometricsActivity
com.Splitwise.SplitwiseMobile.features.shared.views.MonthYearPickerComponent
com.Splitwise.SplitwiseMobile.features.shared.views.ImageCaptureScreen
com.Splitwise.SplitwiseMobile.features.livesplits.LiveSplitsHandlingActivity
dev.enro.core.hosts.ActivityHostForAnyInstruction
dev.enro.core.hosts.HiltActivityHostForAnyInstruction
com.google.mlkit.vision.documentscanner.internal.GmsDocumentScanningDelegateActivity
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
com.android.billingclient.api.ProxyBillingActivity
com.android.billingclient.api.ProxyBillingActivityV2
com.google.android.gms.common.api.GoogleApiActivity
androidx.compose.ui.tooling.PreviewActivity
com.google.android.play.core.common.PlayCoreDialogWrapperActivity

Services (13)

com.Splitwise.SplitwiseMobile.services.SWMessagingService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
androidx.camera.core.impl.MetadataHolderService
com.google.mlkit.common.internal.MlKitComponentDiscoveryService
com.google.android.gms.auth.api.signin.RevocationBoundService
com.google.firebase.components.ComponentDiscoveryService
Firebase messaging service Handles push notifications and data messages from Firebase Cloud Messaging. com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.sessions.SessionLifecycleService
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

Broadcast Receivers (14)

com.Splitwise.SplitwiseMobile.services.ContentSharedViaBroadcastReceiver com.Splitwise.SplitwiseMobile.services.ContentSharedViaBroadcastReceiver
com.Splitwise.SplitwiseMobile.services.CodeSharedViaBroadcastReceiver com.Splitwise.SplitwiseMobile.services.CodeSharedViaBroadcastReceiver
com.Splitwise.SplitwiseMobile.services.ReminderSentViaBroadcastReceiver com.Splitwise.SplitwiseMobile.services.ReminderSentViaBroadcastReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver com.google.firebase.iid.FirebaseInstanceIdReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
Work rescheduler Reschedules background work after reboot or app update. androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver androidx.work.impl.diagnostics.DiagnosticsReceiver
Profile installer Installs performance profiles to speed up app startup and hot paths. androidx.profileinstaller.ProfileInstallReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Content Providers (6)

com.Splitwise.SplitwiseMobile.data.DummyContentProvider
androidx.core.content.FileProvider
com.canhub.cropper.CropFileProvider
androidx.startup.InitializationProvider
com.google.mlkit.common.internal.MlKitInitProvider
com.google.firebase.provider.FirebaseInitProvider

Submission Details

Submitted At 2026-03-01
First Submission 2026-03-01
Last Submission 2026-03-01
Stored Until 2026-03-31