Static Analysis [Link]

 APP SCORES  FILE INFORMATION  APP INFORMATION

File Name [Link] App Name Barooom

Size 101.33MB Package Name [Link]
MD5 7755efcb7f92dba63ae0576b655a6bf3 Main Activity [Link]
Security Score 51/100
SHA1 640696396f2903647dd97b0d0cd00ec1d545e760 Target SDK 34 Min SDK 23 Max SDK
Trackers Detection 0/432
SHA256 262edf896d2�00f7e49�e0914b3a9ace85cb8a�acd105793be0a63330f70b Android Version Name 1.0.12 Android Version Code 9

 PLAYSTORE INFORMATION

Title Barooom
Score None Installs 10+ Price 0 Android Version Support Category Business Play Store URL [Link]
Developer The Cottrill Group, Developer ID The+Cottrill+Group
Developer Address None
Developer Website [Link]
Developer Email scottrillbarooom@[Link]
Release Date Dec 10, 2024 Privacy Policy Privacy link
Description

Barooom is a streamlined platform connecting bars with skilled bartenders, making staffing efficient and reliable. Bars can easily
find, vet, and hire bartenders based on tailored needs, ensuring the right fit for their establishment, while bartenders discover
local job opportunities that match their skills and availability. With Barooom, bars benefit from trusted connections and
personalized matches, and bartenders can build their professional reputation through ratings and flexible shift options, fostering a
thriving community of professionals and establishments alike.

4 / 32 2 / 18 4 / 13 1 / 11
EXPORTED ACTIVITIES  EXPORTED SERVICES  EXPORTED RECEIVERS  EXPORTED PROVIDERS 
View All  View All  View All  View All 

1 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

 SCAN OPTIONS

 DECOMPILED CODE

 SIGNER CERTIFICATE

Binary is signed
v1 signature: True
v2 signature: True
v3 signature: True
v4 signature: False
X.509 Subject: C=US, ST=California, L=Mountain View, O=Google Inc., OU=Android, CN=Android
Signature Algorithm: rsassa_pkcs1v15
Valid From: 2024-11-22 17:27:51+00:00
Valid To: 2054-11-22 17:27:51+00:00
Issuer: C=US, ST=California, L=Mountain View, O=Google Inc., OU=Android, CN=Android
Serial Number: 0x74fb48fc56b6bf528a35adb09adc48fa989b476f
Hash Algorithm: sha256
md5: 9d1c7f193f9c6a0da9412670abc41e97
sha1: 52bc95854977be5287d190a7b906ba68ad2978ad
sha256: 5a380be929093bbc11506032fff2c94b4d6f17f91f464a690c97171acbf5b1b7
sha512:
982c07684985b528cfcb990401c07aa8949c84e20c8f14666679764305d977ea0457767af79a7f18d4248cec0e2d17dcaacc7e0edae887ad68429f6efb8802b0
PublicKey Algorithm: rsa
Bit Size: 4096
Fingerprint: 88963a4a861945b704e49936acdf0327e87e530683701aa08730d99f85427558
Found 1 unique certificates

 APPLICATION PERMISSIONS

Search:

2 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

▲ ▲ ▲ ▲
CODE ▲
▼ ▼ ▼ ▼ ▼
PERMISSION STATUS INFO DESCRIPTION MAPPINGS

[Link].ACCESS_COARSE_LOCATION dangerous coarse (network-based) Access coarse location sources,

location such as the mobile network
database, to determine an
approximate phone location,
where available. Malicious
applications can use this to
determine approximately where
you are.

[Link].ACCESS_FINE_LOCATION dangerous fine (GPS) location Access fine location sources,

such as the Global Positioning
System on the phone, where
available. Malicious applications
can use this to determine where
you are and may consume
additional battery power.

[Link].ACCESS_NETWORK_STATE normal view network status Allows an application to view

the status of all networks.

[Link].ACCESS_WIFI_STATE normal view Wi-Fi status Allows an application to view

the information about the status
of Wi-Fi.

[Link] dangerous take pictures and videos Allows application to take

pictures and videos with the
camera. This allows the
application to collect images
that the camera is seeing at any
time.

[Link].DOWNLOAD_WITHOUT_NOTIFICATION unknown Unknown permission Unknown permission from

android reference

3 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

CODE
PERMISSION STATUS INFO DESCRIPTION MAPPINGS

[Link].FOREGROUND_SERVICE normal enables regular apps to Allows a regular application to

use use [Link].
[Link].

[Link] normal full Internet access Allows an application to create

network sockets.

[Link].POST_NOTIFICATIONS dangerous allows an app to post Allows an app to post

notifications. notifications

[Link].READ_APP_BADGE normal show app notification Allows an application to show

app icon badges.

Showing 1 to 10 of 41 entries

Previous 1 2 3 4 5 Next

 ANDROID API

Search:

API ▲ FILES ▲
▼ ▼

Android Notifications

Base64 Decode

Base64 Encode

Certificate Handling

4 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

API FILES

Content Provider

Crypto

Dynamic Class and Dexloading

Get Installed Applications

Get Running App Processes

Get System Service

Showing 1 to 10 of 29 entries

Previous 1 2 3 Next

 BROWSABLE ACTIVITIES

Search:

ACTIVITY ▲ INTENT ▲
▼ ▼

[Link] Schemes: mycoolredirect://, [Link]://, exp+barooom-

ihijzcw8qcaiy6kd4at3://,

[Link] Schemes: stripe-auth://, stripe://,

Hosts: link-accounts, link-native-accounts, native-redirect, auth-redirect,
Paths: /[Link]/success, /[Link]/cancel,
Path Prefixes: /[Link]/authentication_return, /
[Link],

5 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

ACTIVITY INTENT

[Link] Schemes: link-popup://,

Hosts: complete,
Paths: /[Link],

[Link] Schemes: stripesdk://,

Hosts: payment_return_url,
Paths: /[Link],

Showing 1 to 4 of 4 entries

Previous 1 Next

 NETWORK SECURITY

Search:

NO ▲ SCOPE ▲ SEVERITY ▲ DESCRIPTION ▲

▼ ▼ ▼ ▼

No data available in table

Showing 0 to 0 of 0 entries

Previous Next

 CERTIFICATE ANALYSIS

HIGH WARNING INFO

0 1 1

Search:

TITLE ▲ SEVERITY ▲ DESCRIPTION ▲

▼ ▼ ▼

6 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

TITLE SEVERITY DESCRIPTION

Application vulnerable to warning Application is signed with v1 signature scheme, making it vulnerable to Janus vulnerability on Android 5.0-8.0, if signed
Janus Vulnerability only with v1 signature scheme. Applications running on Android 5.0-7.0 signed with v1, and v2/v3 scheme is also
vulnerable.

Signed Application info Application is signed with a code signing certificate

Showing 1 to 2 of 2 entries

Previous 1 Next

 MANIFEST ANALYSIS

HIGH WARNING INFO SUPPRESSED

1 12 0 0

Search:

NO ▲
▼ ISSUE ▲
▼ SEVERITY ▲
▼ DESCRIPTION ▲
▼ OPTIONS ▲
▼

1 App can be installed on a vulnerable upatched Android version high This application can be installed
Android 6.0-6.0.1, [minSdk=23] on an older version of android
that has multiple unfixed
vulnerabilities. These devices
won't receive reasonable
security updates from Google.
Support an Android version =>
10, API 29 to receive reasonable
security updates.

7 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

NO ISSUE SEVERITY DESCRIPTION OPTIONS

2 Application Data can be Backed up warning This flag allows anyone to

[android:allowBackup=true] backup your application data
via adb. It allows users who
have enabled USB debugging to
copy application data o� of the
device.

3 Broadcast Receiver warning A Broadcast Receiver is found to

([Link]) is Protected by be shared with other apps on
a permission, but the protection level of the permission should be checked. the device therefore leaving it
Permission: [Link] accessible to any other
[android:exported=true] application on the device. It is
protected by a permission which
is not defined in the analysed
application. As a result, the
protection level of the
permission should be checked
where it is defined. If it is set to
normal or dangerous, a
malicious application can
request and obtain the
permission and interact with the
component. If it is set to
signature, only applications
signed with the same certificate
can obtain the permission.

4 Content Provider ([Link]) is not Protected. warning A Content Provider is found to

[android:exported=true] be shared with other apps on
the device therefore leaving it
accessible to any other
application on the device.

8 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

NO ISSUE SEVERITY DESCRIPTION OPTIONS

5 Activity ([Link]) is not Protected. warning An Activity is found to be shared

[android:exported=true] with other apps on the device
therefore leaving it accessible to
any other application on the
device.

6 Activity warning An Activity is found to be shared

([Link]) is with other apps on the device
not Protected. therefore leaving it accessible to
[android:exported=true] any other application on the
device.

7 Activity ([Link]) is not Protected. warning An Activity is found to be shared

[android:exported=true] with other apps on the device
therefore leaving it accessible to
any other application on the
device.

8 Activity ([Link]) is not warning An Activity is found to be shared

Protected. with other apps on the device
[android:exported=true] therefore leaving it accessible to
any other application on the
device.

9 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

NO ISSUE SEVERITY DESCRIPTION OPTIONS

9 Service ([Link]) is Protected warning A Service is found to be shared

by a permission, but the protection level of the permission should be checked. with other apps on the device
Permission: therefore leaving it accessible to
[Link].REVOCATION_NOTIFICATION any other application on the
[android:exported=true] device. It is protected by a
permission which is not defined
in the analysed application. As a
result, the protection level of
the permission should be
checked where it is defined. If it
is set to normal or dangerous, a
malicious application can
request and obtain the
permission and interact with the
component. If it is set to
signature, only applications
signed with the same certificate
can obtain the permission.

10 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

NO ISSUE SEVERITY DESCRIPTION OPTIONS

10 Broadcast Receiver ([Link]) is Protected by warning A Broadcast Receiver is found to

a permission, but the protection level of the permission should be checked. be shared with other apps on
Permission: [Link] the device therefore leaving it
[android:exported=true] accessible to any other
application on the device. It is
protected by a permission which
is not defined in the analysed
application. As a result, the
protection level of the
permission should be checked
where it is defined. If it is set to
normal or dangerous, a
malicious application can
request and obtain the
permission and interact with the
component. If it is set to
signature, only applications
signed with the same certificate
can obtain the permission.

Showing 1 to 10 of 13 entries

Previous 1 2 Next

 CODE ANALYSIS

HIGH WARNING INFO SECURE SUPPRESSED

1 8 3 0 0

Search:

NO ▲
▼ ISSUE ▲
▼ SEVERITY ▲
▼ STANDARDS ▲
▼ FILES ▲
▼ OPTIONS ▲
▼

11 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

NO ISSUE SEVERITY STANDARDS FILES OPTIONS

1 Files may contain hardcoded sensitive information warning CWE: CWE-312: Cleartext Storage
like usernames, passwords, keys etc. of Sensitive Information
OWASP Top 10: M9: Reverse
Engineering
OWASP MASVS: MSTG-
STORAGE-14

2 The App logs information. Sensitive information info CWE: CWE-532: Insertion of
should never be logged. Sensitive Information into Log
File
OWASP MASVS: MSTG-
STORAGE-3

3 MD5 is a weak hash known to have hash collisions. warning CWE: CWE-327: Use of a Broken
or Risky Cryptographic Algorithm
OWASP Top 10: M5: Insu�icient
Cryptography
OWASP MASVS: MSTG-CRYPTO-4

4 App can read/write to External Storage. Any App can warning CWE: CWE-276: Incorrect Default
read data written to External Storage. Permissions
OWASP Top 10: M2: Insecure
Data Storage
OWASP MASVS: MSTG-
STORAGE-2

5 The App uses an insecure Random Number warning CWE: CWE-330: Use of expo/modules/updates/
Generator. Insu�iciently Random Values [Link]
OWASP Top 10: M5: Insu�icient
Cryptography
OWASP MASVS: MSTG-CRYPTO-6

12 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

NO ISSUE SEVERITY STANDARDS FILES OPTIONS

6 IP Address disclosure warning CWE: CWE-200: Information com/nimbusds/jose/jwk/[Link]

Exposure expo/modules/updates/codesigning/
OWASP MASVS: MSTG-CODE-2 [Link]
expo/modules/updates/codesigning/
[Link]

7 App creates temp file. Sensitive information should warning CWE: CWE-276: Incorrect Default
never be written into a temp file. Permissions
OWASP Top 10: M2: Insecure
Data Storage
OWASP MASVS: MSTG-
STORAGE-2

8 The App uses the encryption mode CBC with PKCS5/ high CWE: CWE-649: Reliance on com/nimbusds/jose/crypto/impl/
PKCS7 padding. This configuration is vulnerable to Obfuscation or Encryption of [Link]
padding oracle attacks. Security-Relevant Inputs without com/nimbusds/jose/jca/
Integrity Checking [Link]
OWASP Top 10: M5: Insu�icient
Cryptography
OWASP MASVS: MSTG-CRYPTO-3

9 Insecure WebView Implementation. Execution of warning CWE: CWE-749: Exposed com/stripe/hcaptcha/webview/

user controlled code in WebView is a critical Security Dangerous Method or Function [Link]
Hole. OWASP Top 10: M1: Improper
Platform Usage
OWASP MASVS: MSTG-
PLATFORM-7

10 App uses SQLite Database and execute raw SQL warning CWE: CWE-89: Improper com/reactnativecommunity/
query. Untrusted user input in raw SQL queries can Neutralization of Special asyncstorage/
cause SQL Injection. Also sensitive information Elements used in an SQL [Link]
should be encrypted and written to the database. Command ('SQL Injection') com/reactnativecommunity/
OWASP Top 10: M7: Client Code asyncstorage/
Quality [Link]

13 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

Showing 1 to 10 of 12 entries

Previous 1 2 Next

 SHARED LIBRARY BINARY ANALYSIS

No Shared Objects found.

Search:

NO ▲ SHARED OBJECT ▲ NX ▲ PIE ▲ STACK CANARY ▲ RELRO ▲ RPATH ▲ RUNPATH ▲ FORTIFY ▲ SYMBOLS STRIPPED ▲
▼ ▼ ▼ ▼ ▼ ▼ ▼ ▼ ▼ ▼

No data available in table

Showing 0 to 0 of 0 entries

Previous Next

 NIAP ANALYSIS v1.3

Search:

NO ▲ IDENTIFIER ▲ REQUIREMENT ▲ FEATURE ▲ DESCRIPTION ▲

▼ ▼ ▼ ▼ ▼

No data available in table

Showing 0 to 0 of 0 entries

Previous Next

 FILE ANALYSIS

Search:

14 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

NO ▲ ISSUE ▲ FILES ▲
▼ ▼ ▼

1 Certificate/Key files hardcoded inside the app. assets/[Link]

assets/[Link]
assets/[Link]
assets/[Link]
assets/[Link]
assets/[Link]

Showing 1 to 1 of 1 entries

Previous 1 Next

 FIREBASE DATABASE ANALYSIS

Search:

TITLE ▲ SEVERITY ▲ DESCRIPTION ▲

▼ ▼ ▼

Firebase Remote secure Firebase Remote Config is disabled for [Link]

Config disabled firebase:fetch?key=AIzaSyCT4LDlKiyteWBkaDWr42djkiSL1yIaKCc. This is indicated by the response: {'state': 'NO_TEMPLATE'}

Showing 1 to 1 of 1 entries

Previous 1 Next

 MALWARE LOOKUP

 VirusTotal Report  Triage Report  MetaDefender Report  Hybrid Analysis Report

 APKiD ANALYSIS

15 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

Search:

DEX ▲ DETECTIONS ▲
▼ ▼

[Link] Search:

FINDINGS ▲ DETAILS ▲
▼ ▼

Anti-VM Code possible VM check

Showing 1 to 1 of 1 entries

Previous 1 Next

[Link] Search:

FINDINGS ▲ DETAILS ▲
▼ ▼

Anti-VM Code [Link] check

Compiler r8 without marker (suspicious)

Showing 1 to 2 of 2 entries

Previous 1 Next

16 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

DEX DETECTIONS

[Link] Search:

FINDINGS ▲ DETAILS ▲
▼ ▼

Anti-VM Code [Link] check

[Link] check
[Link] check
[Link] check

Compiler r8 without marker (suspicious)

Showing 1 to 2 of 2 entries

Previous 1 Next

[Link] Search:

FINDINGS ▲ DETAILS ▲
▼ ▼

Anti-VM Code [Link] check

[Link] check
possible [Link] check

Compiler r8 without marker (suspicious)

Showing 1 to 2 of 2 entries

Previous 1 Next

17 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

DEX DETECTIONS

[Link] Search:

FINDINGS ▲ DETAILS ▲
▼ ▼

Compiler r8 without marker (suspicious)

Showing 1 to 1 of 1 entries

Previous 1 Next

[Link] Search:

FINDINGS ▲ DETAILS ▲
▼ ▼

Anti-VM Code [Link] check

Compiler r8 without marker (suspicious)

Showing 1 to 2 of 2 entries

Previous 1 Next

18 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

DEX DETECTIONS

[Link] Search:

FINDINGS ▲ DETAILS ▲
▼ ▼

Anti Debug Code [Link]() check

Anti-VM Code [Link] check

[Link] check
[Link] check
[Link] check
[Link] check
[Link] check
possible VM check

Compiler r8 without marker (suspicious)

Showing 1 to 3 of 3 entries

Previous 1 Next

[Link] Search:

FINDINGS ▲ DETAILS ▲
▼ ▼

Compiler unknown (please file detection issue!)

Showing 1 to 1 of 1 entries

Previous 1 Next

Showing 1 to 8 of 8 entries

Previous 1 Next

19 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

 BEHAVIOUR ANALYSIS

Search:

RULE ▲ ▲ ▲ ▲
▼ ▼ ▼ ▼
ID BEHAVIOUR LABEL FILES

00001 Initialize bitmap object and compress data (e.g. JPEG) into camera com/rnmaps/maps/[Link]
bitmap object com/rnmaps/maps/[Link]
expo/modules/clipboard/[Link]

00004 Get filename and put it to JSON object file collection com/airbnb/lottie/[Link]

00005 Get absolute path of file and put it to JSON object file com/airbnb/lottie/[Link]
expo/modules/updates/[Link]

00009 Put data in cursor to JSON object file com/reactnativecommunity/asyncstorage/[Link]

00011 Query data from URI (SMS, CALLLOGS) sms calllog collection com/ReactNativeBlobUtil/Utils/[Link]
me/leolin/shortcutbadger/impl/[Link]

00013 Read file and put it into a stream file

00014 Read file into a stream and put it into a JSON object file expo/modules/updates/[Link]

00022 Open a file from given absolute path of the file file

00024 Write file a�er Base64 decoding reflection file

00028 Read file from assets directory file com/caverock/androidsvg/[Link]

Showing 1 to 10 of 32 entries

Previous 1 2 3 4 Next

20 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

 ABUSED PERMISSIONS

Top Malware Permissions 14/25 Other Common Permissions 5/44

[Link].ACCESS_COARSE_LOCATION, [Link].WRITE_CONTACTS,
[Link].ACCESS_FINE_LOCATION, [Link],
[Link], [Link], [Link].FOREGROUND_SERVICE,
[Link].READ_CONTACTS, [Link].BIND_GET_INSTALL_REFERRER_SERVICE,
[Link].READ_EXTERNAL_STORAGE, [Link].ACTIVITY_RECOGNITION
[Link].RECORD_AUDIO,
[Link].SYSTEM_ALERT_WINDOW,
[Link],
[Link].WRITE_EXTERNAL_STORAGE,
[Link].WAKE_LOCK,
[Link].ACCESS_NETWORK_STATE,
[Link].ACCESS_WIFI_STATE,
[Link].RECEIVE_BOOT_COMPLETED

Malware Permissions are the top permissions that are widely abused by known malware.
Other Common Permissions are permissions that are commonly abused by known malware.

 SERVER LOCATIONS

21 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

This app may communicate with the following OFAC sanctioned list of countries.

Search:

DOMAIN ▲ COUNTRY/REGION ▲
▼ ▼

No data available in table

Showing 0 to 0 of 0 entries

Previous Next

 DOMAIN MALWARE CHECK

22 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

Search:

DOMAIN ▲ STATUS ▲ GEOLOCATION ▲

▼ ▼ ▼

.css ok No Geolocation information available.

.jpg ok No Geolocation information available.

[Link] ok IP: [Link]

Country: Singapore
Region: Singapore
City: Singapore
Latitude: 1.289670
Longitude: 103.850067
View: Google Map

[Link] ok IP: [Link]

Country: India
Region: Delhi
City: Delhi
Latitude: 28.666670
Longitude: 77.216667
View: Google Map

[Link] ok IP: [Link]

Country: United States of America
Region: Washington
City: Seattle
Latitude: 47.627499
Longitude: -122.346199
View: Google Map

23 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

DOMAIN STATUS GEOLOCATION

[Link] ok IP: [Link]

Country: United States of America
Region: California
City: Redwood City
Latitude: 37.532440
Longitude: -122.248833
View: Google Map

[Link] ok IP: [Link]

Country: Singapore
Region: Singapore
City: Singapore
Latitude: 1.289670
Longitude: 103.850067
View: Google Map

[Link] ok IP: [Link]

Country: United States of America
Region: California
City: San Francisco
Latitude: 37.775700
Longitude: -122.395203
View: Google Map

[Link] ok IP: [Link]

Country: United States of America
Region: Ohio
City: Miamisburg
Latitude: 39.630859
Longitude: -84.262108
View: Google Map

24 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

DOMAIN STATUS GEOLOCATION

[Link] ok IP: [Link]

Country: United States of America
Region: California
City: San Francisco
Latitude: 37.775700
Longitude: -122.395203
View: Google Map

Showing 1 to 10 of 53 entries

Previous 1 2 3 4 5 6 Next

 URLS

Search:

URL ▲ FILE ▲
▼ ▼

data:image com/bumptech/glide/load/model/[Link]

[Link] expo/modules/filesystem/[Link]

[Link] expo/modules/imageloader/[Link]

[Link] com/bumptech/glide/load/model/[Link]

25 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

URL FILE

[Link] org/brotli/dec/[Link]
[Link]
[Link]
[Link]
javascript:constituentwas
[Link]
[Link]
javascript:--
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
javascript:(new
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]/tr/xhtml1/pe
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]

26 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

URL FILE

[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
javascript:void(0);
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
www.risktabsprev10pxrise25pxblueding300,[Link](!
pickevil$(
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]

27 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

URL FILE

[Link] com/caverock/androidsvg/[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]

[Link] com/stripe/android/core/networking/[Link]

[Link] com/stripe/android/repository/[Link]

[Link] com/stripe/android/financialconnections/repository/
[Link] [Link]

[Link] com/stripe/android/financialconnections/repository/api/
[Link]

Showing 1 to 10 of 53 entries

Previous 1 2 3 4 5 6 Next

 EMAILS

Search:

EMAIL ▲ FILE ▲
▼ ▼

email@[Link] com/stripe/android/paymentsheet/paymentdatacollection/bacs/
ComposableSingletons$[Link]

28 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

EMAIL FILE

email@[Link] com/stripe/android/link/ui/inline/ComposableSingletons$[Link]

email@[Link] com/stripe/android/link/ui/inline/ComposableSingletons$[Link]

email@[Link] com/stripe/android/financialconnections/features/networkinglinkloginwarmup/
[Link]

hatcouldbreakalayout@[Link] com/stripe/android/financialconnections/features/networkingsavetolinkverification/
[Link]

hatcouldbreakalayout@[Link] com/stripe/android/financialconnections/features/linkstepupverification/
[Link]

hatcouldbreakalayout@[Link] com/stripe/android/financialconnections/features/networkinglinkverification/
[Link]

support@[Link] com/stripe/android/networking/[Link]

support@[Link] com/stripe/android/core/networking/[Link]

support@[Link] com/stripe/android/core/exception/[Link]

Showing 1 to 10 of 13 entries

Previous 1 2 Next

 TRACKERS

Search:

TRACKER NAME ▲ CATEGORIES ▲ URL ▲

▼ ▼ ▼

29 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

TRACKER NAME CATEGORIES URL

No data available in table

Showing 0 to 0 of 0 entries

Previous Next

 POSSIBLE HARDCODED SECRETS

▸ Show all 416 secrets

 STRINGS

From APK Resource

▸ Show all 731 strings

From Code

▸ Show all 90029 strings

From Shared Objects

 ACTIVITIES

▾ Showing all 32 activities

[Link]
[Link]
[Link]
[Link]
[Link]
[Link]

30 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link].threeds2.Stripe3ds2TransactionActivity
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]

 SERVICES

▾ Showing all 18 services

[Link]
[Link]
[Link]
[Link]
[Link]

31 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]$ActivityRecognitionService
[Link]$GeofencingService
[Link]$AndroidGeocodingService

 RECEIVERS

▾ Showing all 13 receivers

[Link]
[Link]
[Link]
[Link]$BroadcastReceiver
[Link]$BatteryChargingProxy
[Link]$BatteryNotLowProxy
[Link]$StorageNotLowProxy
[Link]$NetworkStateProxy
[Link]
[Link]
[Link]
[Link]
[Link]

 PROVIDERS

32 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

▾ Showing all 11 providers

[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]

 LIBRARIES

▾ Showing all 1 libraries

[Link]

 SBOM

▾ Showing all 96 Versioned Packages

[Link]:activity-compose@1.8.2
[Link]:activity-ktx@1.8.2
[Link]:activity@1.8.2
[Link]:annotation-experimental@1.3.0
[Link]:appcompat-resources@1.6.1
[Link]:appcompat@1.6.1
[Link]:core-runtime@dynamic
[Link]:asynclayoutinflater@1.0.0
[Link]:autofill@1.1.0
[Link]:browser@1.7.0
[Link]:cardview@1.0.0
[Link]:animation-core@1.5.4
[Link]:animation@1.5.4

33 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

[Link]:foundation-layout@1.5.4
[Link]:foundation@1.5.4
[Link].material3:material3@1.0.1
[Link]:material-icons-core@1.5.4
[Link]:material-ripple@1.5.4
[Link]:material@1.5.4
[Link]:runtime-livedata@1.5.4
[Link]:runtime-saveable@1.5.4
[Link]:runtime@1.5.4
[Link]:ui-geometry@1.5.4
[Link]:ui-graphics@1.5.4
[Link]:ui-text@1.5.4
[Link]:ui-tooling-preview@1.5.4
[Link]:ui-unit@1.5.4
[Link]:ui-util@1.5.4
[Link]:ui-viewbinding@1.5.4
[Link]:ui@1.5.4
[Link]:coordinatorlayout@1.2.0
[Link]:core-ktx@1.12.0
[Link]:core@1.12.0
[Link]:cursoradapter@1.0.0
[Link]:customview-poolingcontainer@1.0.0
[Link]:customview@1.1.0
[Link]:viewbinding@8.3.1
[Link]:documentfile@1.0.0
[Link]:drawerlayout@1.1.1
[Link]:dynamicanimation@1.0.0
androidx.emoji2:emoji2-views-helper@1.3.0
androidx.emoji2:emoji2@1.3.0
[Link]:exifinterface@1.3.6
[Link]:fragment-ktx@1.6.2
[Link]:fragment@1.6.2
[Link]:interpolator@1.0.0
[Link]:legacy-support-core-ui@1.0.0
[Link]:legacy-support-core-utils@1.0.0
[Link]:legacy-support-v4@1.0.0
[Link]:lifecycle-extensions@2.2.0

34 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

[Link]:lifecycle-livedata-core-ktx@2.7.0
[Link]:lifecycle-livedata-core@2.7.0
[Link]:lifecycle-livedata-ktx@2.7.0
[Link]:lifecycle-livedata@2.7.0
[Link]:lifecycle-process@2.7.0
[Link]:lifecycle-runtime-ktx@2.7.0
[Link]:lifecycle-runtime@2.7.0
[Link]:lifecycle-service@2.7.0
[Link]:lifecycle-viewmodel-compose@2.7.0
[Link]:lifecycle-viewmodel-ktx@2.7.0
[Link]:lifecycle-viewmodel-savedstate@2.7.0
[Link]:lifecycle-viewmodel@2.7.0
[Link]:loader@1.1.0
[Link]:localbroadcastmanager@1.0.0
[Link]:media@1.0.0
[Link]:navigation-common-ktx@2.7.6
[Link]:navigation-common@2.7.6
[Link]:navigation-compose@2.7.6
[Link]:navigation-runtime-ktx@2.7.6
[Link]:navigation-runtime@2.7.6
[Link]:print@1.0.0
[Link]:profileinstaller@1.3.0
[Link]:recyclerview@1.3.2
[Link]:room-runtime@2.6.1
[Link]:savedstate-ktx@1.2.1
[Link]:savedstate@1.2.1
[Link]:slidingpanelayout@1.0.0
[Link]:sqlite-framework@2.4.0
[Link]:sqlite@2.4.0
[Link]:startup-runtime@1.1.1
[Link]:swiperefreshlayout@1.1.0
[Link]:tracing-ktx@1.2.0
[Link]:tracing@1.2.0
[Link]:transition@1.2.0
[Link]:vectordrawable-animated@1.1.0
[Link]:vectordrawable@1.1.0
[Link]:versionedparcelable@1.1.1

35 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

androidx.viewpager2:viewpager2@1.1.0-beta02
[Link]:viewpager@1.0.0
[Link]:webkit@1.4.0
[Link]:work-runtime@2.7.1
[Link]:material@1.11.0
[Link]:dagger@2.50
[Link]:kotlinx-coroutines-android@1.7.3
[Link]:kotlinx-coroutines-core@1.7.3
[Link]:kotlinx-coroutines-play-services@1.7.3
▾ Showing all 78 Packages
a.a
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
bolts
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]

36 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
dagger
defpackage
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]
[Link]

37 of 38 1/25/25, 5:11 AM
Static Analysis [Link]

[Link]
[Link]
[Link]
okio
[Link]
[Link]
[Link]
[Link].animal_sni�er
[Link]
[Link]
[Link]
[Link]
[Link]
third_party.libavif

 FILES

▸ Show all 1744 files

© 2025 Mobile Security Framework - MobSF | Ajin Abraham | OpenSecurity. Version v4.3.0

38 of 38 1/25/25, 5:11 AM