Moderate Risk

Threat level

com.easycancha.bcentralcaja

BCentral Caja

Analyzed on 2022-01-23T03:37:34.375680

28

permissions

38

activities

21

services

12

receivers

28

domains

File sums

MD5 0a00f8e2414606c906ed45fcdd8fa8a8
SHA1 cdba07b5931d159cb0caeb1973aaff13d7653c45
SHA256 23f917d89352ab355d02ee584fef3ab6183206752139d705a1c0fa4bc525556e
Size 23.83MB

APKiD

Information computed with APKiD.

/tmp/tmpp_2ipmzl!assets/audience_network.dex
anti_vm
  • possible Build.SERIAL check
anti_debug
  • Debug.isDebuggerConnected() check
compiler
  • unknown (please file detection issue!)
/tmp/tmpp_2ipmzl!classes.dex
anti_vm
  • Build.FINGERPRINT check
  • Build.MODEL check
  • Build.MANUFACTURER check
  • Build.PRODUCT check
  • possible Build.SERIAL check
  • network operator name check
  • device ID check
  • possible VM check
compiler
  • r8
/tmp/tmpp_2ipmzl!classes2.dex
anti_vm
  • Build.FINGERPRINT check
  • Build.MODEL check
  • Build.MANUFACTURER check
  • Build.PRODUCT check
  • Build.HARDWARE check
  • possible Build.SERIAL check
  • Build.TAGS check
  • SIM operator check
  • network operator name check
  • device ID check
  • possible VM check
anti_debug
  • Debug.isDebuggerConnected() check
compiler
  • r8 without marker (suspicious)
/tmp/tmpp_2ipmzl!classes3.dex
anti_vm
  • Build.MANUFACTURER check
compiler
  • r8 without marker (suspicious)

SSdeep

Information computed with ssdeep.

APK file 393216:tvhVVeDfTLDEyqNRoTEiX94KjxwS+GPabt7K79nudJGTr4xUp3yCi/S2rCQIdxEd:tvdMTMyqNOTEKqkmY1uJG4xUxLi7rXBd
Manifest 768:xzperK3SEUm2enmQFidMCWrI8FS3osbUQt9WpJdo9Oe9bl7yUaAtBgBKcKvFJGCj:…
assets/audience_network.dex 24576:41m3pLgBe0HIvPAU+woTXtFd+3VTDrLNQJPyUQH+9S4C6pBSkE7a:6m3t0HIvoD…
classes.dex 98304:w7+Lifv1ZIttzF20zlTLUZs99mDChb4Ee2WUxR+XntvO9KBqVwVcC9:w7+C1GTz…
classes2.dex 98304:AUYj529fGs+r/W5EWl+zUgWVpPlCf2rze3QPJdB:KNZ/xdKt0cfRdB
classes3.dex 49152:S9EOEinpVfH/qquUjxcG731wEyjUahqkJcYccZZGKLtEXN4Z5PD3DuPxRksRSJp…

Dexofuzzy

Information computed with Dexofuzzy.

APK file 12288:O65NVjnT/1/DPCxbrSO1T27Y9bbbbfafjC2lMwg8XwnKXKUkbfY/:1jnZrKx3SO…
assets/audience_network.dex 6144:m79dMyWoYz/Ma/ynjFt6cmejLZZZZZxqw:4dMyWoK1E67sz
classes.dex 6144:OUm9uF2u3kidYZ8NV559hoqqAbTzT/8C/1lCGjPCxbrSO1PVXlbjME8sduHCA7l7…
classes2.dex 6144:in5MObbbbZygWdo6nN5k12lMW8eB/zOa3+IkNsdon8GiwwDTCJZu4p:29bbbbfaf…
classes3.dex 6144:nRKxdKQS06ejo8YRzRTsYDDG8cV3Muazmt:RKXKUkbfY/

APK details

Information computed with AndroGuard and Pithus.

Package com.easycancha.bcentralcaja
App name BCentral Caja
Version name 5.5.1
Version code 127
SDK 21 - 30
UAID 142de204b21b23c05ac3d6b510afd2174239382d
Signature Signature V1 Signature V2 Signature V3
Frosting Frosted
Blocks found within V2 signature:
  • 0x7109871a: Unknown
  • 0xf05368c0: Unknown
  • 0x6dff800d: Source stamp V2 X509 cert
  • 0x2146444e: Google metadata
  • 0x42726577: Verity padding

Certificate details

Information computed with AndroGuard.

MD5 b16a6ce883cfea2cca1ef3320d7d474b
SHA1 73f880746c8dcea2ed52ed259f41d14149eee706
SHA256 549910a85bd07798bf2907272d76c76b584a4d1a5d4152d966741637be19ecc8
Issuer Common Name: Android, Organizational Unit: Android, Organization: Google Inc., Locality: Mountain View, State/Province: California, Country: US
Not before 2021-10-15T21:48:20+00:00
Not after 2051-10-15T21:48:20+00:00

File Analysis

Information computed with MobSF.

Findings Files
Certificate/Key files hardcoded inside the app. assets/ds-amex.pem
assets/ds-cartesbancaires.pem
assets/ds-discover.cer
assets/ds-mastercard.crt
assets/ds-visa.crt
okhttp3/internal/publicsuffix/NOTICE
stamp-cert-sha256

Manifest analysis

Information computed with MobSF.

High Clear text traffic is Enabled For App[android:usesCleartextTraffic=true]
The app intends to use cleartext network traffic, such as cleartext HTTP, FTP stacks, DownloadManager, and MediaPlayer. The default value for apps that target API level 27 or lower is "true". Apps that target API level 28 or higher default to "false". The key reason for avoiding cleartext traffic is the lack of confidentiality, authenticity, and protections against tampering; a network attacker can eavesdrop on transmitted data and also modify it without being detected.
Medium Application Data can be Backed up[android:allowBackup=true]
This flag allows anyone to backup your application data via adb. It allows users who have enabled USB debugging to copy application data off of the device.
High Activity (host.exp.exponent.LauncherActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (host.exp.exponent.experience.TvActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (net.openid.appauth.RedirectUriReceiverActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (expo.modules.payments.stripe.RedirectUriReceiver) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (abi42_0_0.expo.modules.payments.stripe.RedirectUriReceiver) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (abi41_0_0.expo.modules.payments.stripe.RedirectUriReceiver) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (abi40_0_0.expo.modules.payments.stripe.RedirectUriReceiver) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (abi39_0_0.expo.modules.payments.stripe.RedirectUriReceiver) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.facebook.CustomTabActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (host.exp.exponent.referrer.InstallReferrerReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (host.exp.exponent.fcm.ExpoFcmMessagingService) is not Protected.An intent-filter exists.
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Service is explicitly exported.
High Broadcast Receiver (host.exp.exponent.notifications.receivers.SchedulingTriggerReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.stripe.android.payments.StripeBrowserLauncherActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Service (com.google.android.gms.auth.api.signin.RevocationBoundService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Broadcast Receiver (com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: android.permission.INSTALL_PACKAGES [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Service (com.google.android.play.core.assetpacks.AssetPackExtractionService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.

Browsable activities

Information computed with MobSF.

host.exp.exponent.MainActivity

Schemes: bcentral-caja://

net.openid.appauth.RedirectUriReceiverActivity

Schemes: com.easycancha.bcentralcaja://

expo.modules.payments.stripe.RedirectUriReceiver

Schemes: expo.modules.payments.stripe.5a1ad075-e59e-41ff-b0ed-25bc39e6c46c://

abi42_0_0.expo.modules.payments.stripe.RedirectUriReceiver

Schemes: abi42_0_0.expo.modules.payments.stripe://

abi41_0_0.expo.modules.payments.stripe.RedirectUriReceiver

Schemes: abi41_0_0.expo.modules.payments.stripe://

abi40_0_0.expo.modules.payments.stripe.RedirectUriReceiver

Schemes: abi40_0_0.expo.modules.payments.stripe://

abi39_0_0.expo.modules.payments.stripe.RedirectUriReceiver

Schemes: abi39_0_0.expo.modules.payments.stripe://

com.facebook.CustomTabActivity

Hosts: cct.com.easycancha.bcentralcaja

Schemes: fb1841691959385271:// fbconnect://

com.stripe.android.payments.StripeBrowserLauncherActivity

Hosts: payment_return_url

Schemes: stripesdk://

Main Activity

Information computed with AndroGuard. 

host.exp.exponent.MainActivity

Activities

Information computed with AndroGuard. 

host.exp.exponent.LauncherActivity
host.exp.exponent.experience.ExperienceActivity
host.exp.exponent.MainActivity
host.exp.exponent.experience.HomeActivity
host.exp.exponent.experience.TvActivity
com.facebook.react.devsupport.DevSettingsActivity
net.openid.appauth.RedirectUriReceiverActivity
expo.modules.payments.stripe.RedirectUriReceiver
abi42_0_0.expo.modules.payments.stripe.RedirectUriReceiver
abi41_0_0.expo.modules.payments.stripe.RedirectUriReceiver
abi40_0_0.expo.modules.payments.stripe.RedirectUriReceiver
abi39_0_0.expo.modules.payments.stripe.RedirectUriReceiver
host.exp.exponent.experience.ErrorActivity
com.facebook.FacebookActivity
com.facebook.CustomTabActivity
com.facebook.ads.InterstitialAdActivity
com.theartofdev.edmodo.cropper.CropImageActivity
expo.modules.appauth.AppAuthBrowserActivity
com.stripe.android.view.AddPaymentMethodActivity
com.stripe.android.view.PaymentMethodsActivity
com.stripe.android.view.PaymentFlowActivity
com.stripe.android.view.PaymentAuthWebViewActivity
com.stripe.android.view.PaymentRelayActivity
com.stripe.android.payments.StripeBrowserLauncherActivity
com.stripe.android.view.Stripe3ds2CompletionActivity
com.stripe.android.paymentsheet.PaymentSheetActivity
com.stripe.android.paymentsheet.PaymentOptionsActivity
com.stripe.android.googlepay.StripeGooglePayActivity
com.stripe.android.stripe3ds2.views.ChallengeActivity
com.stripe.android.stripe3ds2.views.ChallengeProgressActivity
com.facebook.CustomTabMainActivity
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
net.openid.appauth.AuthorizationManagementActivity
com.facebook.ads.AudienceNetworkActivity
com.google.android.gms.common.api.GoogleApiActivity
com.google.android.gms.ads.AdActivity
com.google.android.play.core.missingsplits.PlayCoreMissingSplitsActivity
com.google.android.play.core.common.PlayCoreDialogWrapperActivity

Receivers

Information computed with AndroGuard. 

host.exp.exponent.referrer.InstallReferrerReceiver
com.google.android.gms.analytics.AnalyticsReceiver
host.exp.exponent.notifications.ScheduledNotificationReceiver
host.exp.exponent.notifications.receivers.SchedulingTriggerReceiver
host.exp.exponent.notifications.ExpoNotificationsService
expo.modules.notifications.service.NotificationsService
expo.modules.taskManager.TaskBroadcastReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
com.facebook.CurrentAccessTokenExpirationBroadcastReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.gms.measurement.AppMeasurementReceiver
com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

Services

Information computed with AndroGuard. 

host.exp.exponent.ExponentIntentService
com.google.android.gms.analytics.AnalyticsService
host.exp.exponent.fcm.ExpoFcmMessagingService
host.exp.exponent.fcm.FcmRegistrationIntentService
expo.modules.location.services.LocationTaskService
expo.modules.notifications.service.ExpoFirebaseMessagingService
expo.modules.taskManager.TaskJobService
com.google.android.gms.analytics.AnalyticsJobService
com.google.android.gms.auth.api.signin.RevocationBoundService
io.nlopez.smartlocation.activity.providers.ActivityGooglePlayServicesProvider$ActivityRecognitionService
io.nlopez.smartlocation.geofencing.providers.GeofencingGooglePlayServicesProvider$GeofencingService
io.nlopez.smartlocation.geocoding.providers.AndroidGeocodingProvider$AndroidGeocodingService
com.google.firebase.components.ComponentDiscoveryService
com.google.firebase.messaging.FirebaseMessagingService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.android.gms.ads.AdService
androidx.room.MultiInstanceInvalidationService
com.google.android.play.core.assetpacks.AssetPackExtractionService

NIAP analysis

Information computed with MobSF.

FCS_RBG_EXT.1.1 The application implement DRBG functionality for its cryptographic operations.
Random Bit Generation Services
FCS_STO_EXT.1.1 The application does not store any credentials to non-volatile memory.
Storage of Credentials
FCS_CKM_EXT.1.1 The application implement asymmetric key generation.
Cryptographic Key Generation Services
FDP_DEC_EXT.1.1 The application has access to ['location', 'network connectivity', 'camera'].
Access to Platform Resources
FDP_DEC_EXT.1.2 The application has access to no sensitive information repositories.
Access to Platform Resources
FDP_NET_EXT.1.1 The application has user/application initiated network communications.
Network Communications
FDP_DAR_EXT.1.1 The application implement functionality to encrypt sensitive data in non-volatile memory.
Encryption Of Sensitive Application Data
FMT_MEC_EXT.1.1 The application invoke the mechanisms recommended by the platform vendor for storing and setting configuration options.
Supported Configuration Mechanism
FTP_DIT_EXT.1.1 The application does encrypt some transmitted data with HTTPS/TLS/SSH between itself and another trusted IT product.
Protection of Data in Transit
FCS_RBG_EXT.2.1
FCS_RBG_EXT.2.2		 The application perform all deterministic random bit generation (DRBG) services in accordance with NIST Special Publication 800-90A using Hash_DRBG. The deterministic RBG is seeded by an entropy source that accumulates entropy from a platform-based DRBG and a software-based noise source, with a minimum of 256 bits of entropy at least equal to the greatest security strength (according to NIST SP 800-57) of the keys and hashes that it will generate.
Random Bit Generation from Application
FCS_CKM.1.1(1) The application generate asymmetric cryptographic keys not in accordance with FCS_CKM.1.1(1) using key generation algorithm RSA schemes and cryptographic key sizes of 1024-bit or lower.
Cryptographic Asymmetric Key Generation
FCS_CKM.1.1(3)
FCS_CKM.1.2(3)		 A password/passphrase shall perform [Password-based Key Derivation Functions] in accordance with a specified cryptographic algorithm..
Password Conditioning
FCS_COP.1.1(1) The application perform encryption/decryption in accordance with a specified cryptographic algorithm AES-CBC (as defined in NIST SP 800-38A) mode or AES-GCM (as defined in NIST SP 800-38D) and cryptographic key sizes 256-bit/128-bit.
Cryptographic Operation - Encryption/Decryption
FCS_COP.1.1(2) The application perform cryptographic hashing services not in accordance with FCS_COP.1.1(2) and uses the cryptographic algorithm RC2/RC4/MD4/MD5.
Cryptographic Operation - Hashing
FCS_COP.1.1(3) The application perform cryptographic signature services (generation and verification) in accordance with a specified cryptographic algorithm RSA schemes using cryptographic key sizes of 2048-bit or greater.
Cryptographic Operation - Signing
FCS_HTTPS_EXT.1.1 The application implement the HTTPS protocol that complies with RFC 2818.
HTTPS Protocol
FCS_HTTPS_EXT.1.2 The application implement HTTPS using TLS.
HTTPS Protocol
FCS_HTTPS_EXT.1.3 The application notify the user and not establish the connection or request application authorization to establish the connection if the peer certificate is deemed invalid.
HTTPS Protocol
FIA_X509_EXT.1.1 The application invoked platform-provided functionality to validate certificates in accordance with the following rules: ['The application validate a certificate path by ensuring the presence of the basicConstraints extension and that the CA flag is set to TRUE for all CA certificates', 'The application validate the revocation status of the certificate using the Online Certificate Status Protocol (OCSP) as specified in RFC 2560 or a Certificate Revocation List (CRL) as specified in RFC 5759 or an OCSP TLS Status Request Extension (i.e., OCSP stapling) as specified in RFC 6066'].
X.509 Certificate Validation
FIA_X509_EXT.1.2 The application treat a certificate as a CA certificate only if the basicConstraints extension is present and the CA flag is set to TRUE.
X.509 Certificate Validation
FIA_X509_EXT.2.1 The application use X.509v3 certificates as defined by RFC 5280 to support authentication for HTTPS , TLS.
X.509 Certificate Authentication
FIA_X509_EXT.2.2 When the application cannot establish a connection to determine the validity of a certificate, the application allow the administrator to choose whether to accept the certificate in these cases or accept the certificate ,or not accept the certificate.
X.509 Certificate Authentication
FPT_TUD_EXT.2.1 The application shall be distributed using the format of the platform-supported package manager.
Integrity for Installation and Update
FCS_CKM.1.1(2) The application shall generate symmetric cryptographic keys using a Random Bit Generator as specified in FCS_RBG_EXT.1 and specified cryptographic key sizes 128 bit or 256 bit.
Cryptographic Symmetric Key Generation

Code analysis

Information computed with MobSF.

High
CVSS:7.5
The App uses an insecure Random Number Generator.
MASVS: MSTG-CRYPTO-6
CWE-330 Use of Insufficiently Random Values
M5: Insufficient Cryptography
Files: 
 f/f/b/e/f/o/n6.java
 f/f/b/e/f/i/q8.java
 f/f/b/e/f/e/k1.java
 f/f/b/e/f/o/rd.java
 f/f/b/e/f/r/a7.java
 f/f/b/e/f/r/f5.java
 n/b/e/b/f.java
 host/exp/exponent/notifications/k.java
 n/b/a/c3/e.java
 kotlin/o0/a0/d/m0/h/x.java
 f/f/b/e/f/r/y6.java
 f/f/b/e/f/e/p0.java
 f/f/b/e/f/i/s6.java
 kotlin/o0/a0/d/m0/o/i.java
 f/f/b/e/f/e/z3.java
 kotlin/m0/e/a.java
 f/f/b/e/f/o/e3.java
 f/f/b/e/f/r/w7.java
 f/f/b/e/f/r/x5.java
 f/f/b/e/f/o/a3.java
 f/f/b/e/f/o/x3.java
 f/f/b/e/f/e/f3.java
 f/f/b/e/f/e/t1.java
 butterknife/internal/ImmutableList.java
 f/f/e/a/e/k/n.java
 f/f/b/e/f/e/d1.java
 f/f/b/e/f/e/g1.java
 f/f/b/e/f/e/x.java
 m/m.java
 f/f/b/e/f/r/r5.java
 expo/modules/updates/UpdatesUtils.java
 f/f/b/e/f/o/q4.java
 f/f/b/e/f/i/u4.java
 f/f/b/e/f/o/m5.java
 f/f/b/e/f/e/t.java
 f/f/b/e/f/r/j1.java
 f/f/b/e/f/o/f5.java
 versioned/host/exp/exponent/modules/api/notifications/NotificationsModule.java
 f/f/b/e/f/r/h4.java
 f/f/b/e/f/o/p6.java
 kotlin/o0/a0/d/m0/h/n.java
 f/f/b/e/f/i/f6.java
 kotlin/d0/w.java
 f/f/c/b/c.java
 f/f/b/e/f/e/z1.java
 f/f/b/e/f/o/m4.java
 f/f/b/e/f/i/m.java
 n/b/e/d/c.java
 f/f/b/e/f/r/a5.java
 f/f/b/e/f/r/o3.java
 f/f/b/e/f/i/m6.java
 kotlin/m0/b.java
 f/f/b/e/f/r/u4.java
 f/f/b/e/f/o/k7.java
 kotlin/d0/y.java
 kotlin/d0/b.java
 kotlin/d0/j.java
 f/f/b/e/f/r/h3.java
 f/f/b/e/f/o/u4.java
 kotlin/m0/a.java
 f/f/b/e/f/i/z5.java
 f/f/b/e/f/i/r7.java
 n/b/e/b/e.java
Info
CVSS:0
This App may have root detection capabilities.
MASVS: MSTG-RESILIENCE-1
Files: 
 f/f/b/e/f/r/o.java
 f/f/b/g/a/a/s.java
 expo/modules/device/DeviceModule.java
 f/f/b/e/f/o/v1.java
Low
CVSS:7.5
The App logs information. Sensitive information should never be logged.
MASVS: MSTG-STORAGE-3
CWE-532 Insertion of Sensitive Information into Log File
Files: 
 f/d/a/n/e.java
 f/f/b/e/f/i/b4.java
 versioned/host/exp/exponent/modules/api/components/reactnativestripesdk/StripeSdkModule$mActivityEventListener$1.java
 f/f/b/e/f/o/rd.java
 f/f/b/e/f/l/j.java
 versioned/host/exp/exponent/modules/api/components/svg/MaskView.java
 d/k/a/d.java
 com/raizlabs/android/dbflow/config/g.java
 d/r/a/b.java
 expo/modules/notifications/service/delegates/ExpoSchedulingDelegate.java
 expo/modules/updates/db/Converters.java
 expo/modules/notifications/notifications/presentation/builders/ChannelAwareNotificationBuilder.java
 expo/modules/location/services/LocationTaskService.java
 f/f/b/e/f/m/d0.java
 n/e/a/b.java
 f/f/b/e/c/i.java
 f/f/b/e/f/o/y1.java
 com/bumptech/glide/load/p/c/i.java
 versioned/host/exp/exponent/modules/api/components/svg/ImageView.java
 host/exp/exponent/notifications/p/a.java
 d/h/e/k.java
 d/v/a/c.java
 expo/modules/screencapture/ScreenshotEventEmitter$contentObserver$1.java
 f/f/b/e/f/l/u1.java
 com/amplitude/api/AmplitudeClient.java
 host/exp/exponent/fcm/FcmRegistrationIntentService.java
 com/bumptech/glide/load/o/f.java
 com/stripe/android/Logger$Companion$REAL_LOGGER$1.java
 f/f/b/e/f/o/i1.java
 expo/modules/updates/UpdatesConfiguration.java
 l/a/a/c.java
 expo/modules/imagepicker/ImagePickerUtilsKt.java
 f/d/a/n/n.java
 f/f/b/e/f/o/a2.java
 expo/modules/notifications/service/NotificationsService.java
 d/a/o/g.java
 versioned/host/exp/exponent/modules/api/components/datetimepicker/MinuteIntervalSnappableTimePickerDialog.java
 j/a/a/j/c.java
 f/f/b/e/f/o/b.java
 d/y/l0.java
 f/f/b/e/f/l/d1.java
 versioned/host/exp/exponent/modules/api/appearance/rncappearance/RNCAppearanceModule.java
 expo/modules/imagepicker/PickerResultsStore.java
 n/b/f/d/a/j.java
 d/q/a/a.java
 f/f/b/e/f/e/m.java
 expo/modules/splashscreen/singletons/SplashScreen$show$2.java
 host/exp/exponent/k.java
 f/f/b/e/f/r/s.java
 d/h/m/f0.java
 d/z/a/a/i.java
 expo/modules/constants/ExponentInstallationId.java
 expo/modules/updates/manifest/LegacyManifest$assetEntityList$2.java
 expo/modules/notifications/notifications/background/BackgroundRemoteNotificationTaskConsumer.java
 d/n/a/a.java
 com/bumptech/glide/load/n/k.java
 d/h/m/x.java
 d/s/a/a.java
 d/k/a/b.java
 f/f/b/f/w/b.java
 f/d/a/m/d.java
 d/r/b/c.java
 expo/modules/updates/manifest/LegacyManifest.java
 f/f/b/e/f/e/m5.java
 f/f/b/e/f/m/c0.java
 versioned/host/exp/exponent/modules/api/viewshot/ViewShot.java
 com/bumptech/glide/load/m/j.java
 versioned/host/exp/exponent/modules/api/components/svg/VirtualView.java
 f/c/a/a/a.java
 versioned/host/exp/exponent/modules/api/components/sharedelement/RNSharedElementNode.java
 expo/modules/updates/loader/RemoteLoader.java
 f/d/a/n/k.java
 d/h/m/b.java
 d/h/l/b.java
 com/bumptech/glide/load/n/a0/j.java
 com/bumptech/glide/load/n/z.java
 h/a/a/b.java
 f/f/b/e/f/e/a6.java
 f/d/a/c.java
 f/f/b/e/f/o/k6.java
 versioned/host/exp/exponent/modules/api/components/svg/ClipPathView.java
 f/f/b/e/f/r/o.java
 f/f/b/e/f/o/u1.java
 f/d/a/n/l.java
 f/f/b/e/f/r/c.java
 expo/modules/updates/selectionpolicy/SelectionPolicies.java
 d/f/b/k/f.java
 f/f/b/e/f/r/w1.java
 n/d/d/g.java
 versioned/host/exp/exponent/modules/api/components/gesturehandler/react/RNGestureHandlerRootView.java
 com/bumptech/glide/load/p/c/l.java
 expo/modules/av/video/MediaController.java
 com/theartofdev/edmodo/cropper/CropOverlayView.java
 f/f/b/e/h/b/a.java
 com/bumptech/glide/load/m/l.java
 com/bumptech/glide/load/p/g/a.java
 expo/modules/notifications/serverregistration/InstallationId.java
 versioned/host/exp/exponent/modules/api/components/svg/PatternView.java
 expo/modules/taskManager/TaskService.java
 expo/modules/notifications/notifications/ArgumentsNotificationContentBuilder.java
 expo/modules/securestore/SecureStoreModule.java
 f/f/b/e/i/a.java
 f/d/a/s/l/a.java
 d/f/b/d.java
 expo/modules/imagepicker/ImagePickerModule.java
 com/amplitude/api/AmplitudeLog.java
 com/amplitude/api/DatabaseHelper.java
 expo/modules/notifications/notifications/presentation/ExpoNotificationPresentationEffectsManager.java
 com/bumptech/glide/load/n/c0/a.java
 f/f/b/e/f/o/h1.java
 versioned/host/exp/exponent/modules/api/components/maps/FileUtil.java
 com/bumptech/glide/load/m/o/c.java
 expo/modules/backgroundfetch/BackgroundFetchTaskConsumer.java
 versioned/host/exp/exponent/modules/api/components/webview/RNCWebViewManager.java
 com/bumptech/glide/load/n/b0/e.java
 f/f/b/e/f/o/s2.java
 expo/modules/filesystem/FileSystemModule.java
 com/theartofdev/edmodo/cropper/c.java
 d/h/e/g.java
 expo/modules/location/LocationModule.java
 f/d/a/n/f.java
 d/h/m/g0/c.java
 versioned/host/exp/exponent/modules/universal/ScopedSecureStoreModule.java
 com/bumptech/glide/load/o/s.java
 f/a/a/y/c.java
 f/f/b/e/f/r/u.java
 expo/modules/location/LocationHelpers.java
 expo/modules/av/player/SimpleExoPlayerData.java
 f/d/a/o/d.java
 com/bumptech/glide/load/n/i.java
 expo/modules/calendar/CalendarModule.java
 host/exp/exponent/t/r.java
 f/f/b/b/i/t/a.java
 h/a/a/c.java
 versioned/host/exp/exponent/modules/api/components/maps/AirMapGradientPolyline.java
 d/h/m/h.java
 d/x/a.java
 com/bumptech/glide/load/n/h.java
 expo/modules/contacts/Contact.java
 f/d/a/m/e.java
 host/exp/exponent/notifications/e.java
 com/segment/analytics/WebhookIntegration.java
 f/f/b/f/l/h.java
 com/bumptech/glide/load/o/t.java
 d/w/a/c.java
 expo/modules/barcodescanner/ExpoBarCodeScanner.java
 host/exp/exponent/x/c.java
 expo/modules/notifications/badge/SetBadgeCountNotificationEffect.java
 f/a/a/d.java
 f/i/a/e0.java
 expo/modules/updates/manifest/ManifestMetadata.java
 f/f/b/f/y/g.java
 f/f/b/e/f/e/l.java
 com/bumptech/glide/load/p/c/s.java
 expo/modules/ads/facebook/AdSettingsManager.java
 f/f/b/e/f/m/a0.java
 d/t/a.java
 f/f/b/e/f/r/v.java
 expo/modules/updates/manifest/NewManifest$assetEntityList$2.java
 d/h/e/j.java
 expo/modules/updates/db/Reaper.java
 versioned/host/exp/exponent/modules/api/components/svg/LinearGradientView.java
 d/y/k.java
 expo/modules/updates/UpdatesController.java
 com/stripe/android/IssuingCardPinService.java
 host/exp/exponent/l.java
 d/t/c.java
 com/bumptech/glide/load/p/c/f.java
 f/f/b/e/f/i/b3.java
 versioned/host/exp/exponent/modules/api/viewshot/RNViewShotModule.java
 org/unimodules/adapters/react/views/a.java
 expo/modules/updates/loader/EmbeddedLoader.java
 expo/modules/updates/loader/LoaderTask.java
 expo/modules/gl/GLContext.java
 expo/modules/location/taskConsumers/LocationTaskConsumer.java
 f/f/b/e/f/r/k.java
 f/f/b/e/f/h/k.java
 expo/modules/updates/UpdatesUtils.java
 f/f/b/e/f/o/v1.java
 com/bumptech/glide/load/n/q.java
 expo/modules/updates/launcher/NoDatabaseLauncher.java
 expo/modules/notifications/notifications/JSONNotificationContentBuilder.java
 host/exp/exponent/notifications/n.java
 d/a/k/a/a.java
 d/h/e/f.java
 expo/modules/notifications/service/delegates/ExpoPresentationDelegate.java
 expo/modules/medialibrary/MediaLibraryUtils.java
 com/bumptech/glide/load/p/g/d.java
 host/exp/exponent/taskManager/ExpoHeadlessAppLoader.java
 com/bumptech/glide/load/n/b0/i.java
 expo/modules/notifications/notifications/presentation/builders/CategoryAwareNotificationBuilder.java
 versioned/host/exp/exponent/VersionedUtils.java
 expo/modules/constants/ConstantsService.java
 com/bumptech/glide/load/p/g/j.java
 f/f/b/e/f/r/b9.java
 f/f/b/e/f/o/r1.java
 f/f/b/f/v/d.java
 f/f/b/e/f/e/c.java
 f/f/b/e/f/i/s.java
 expo/modules/sensors/modules/BaseSensorModule.java
 expo/modules/location/taskConsumers/GeofencingTaskConsumer.java
 f/f/b/e/f/o/w1.java
 expo/modules/updates/launcher/DatabaseLauncher.java
 versioned/host/exp/exponent/modules/api/appearance/ExpoAppearanceModule.java
 expo/modules/notifications/notifications/presentation/builders/ExpoNotificationBuilder.java
 versioned/host/exp/exponent/modules/api/reanimated/NativeMethodsHelper.java
 versioned/host/exp/exponent/modules/api/components/svg/UseView.java
 f/f/b/e/f/o/b2.java
 expo/modules/updates/loader/FileDownloader.java
 f/f/b/g/a/a/c0.java
 f/f/e/a/e/k/m.java
 d/h/m/a0.java
 d/h/e/c.java
 f/f/b/a/c.java
 expo/modules/splashscreen/singletons/SplashScreen$show$4.java
 expo/modules/screencapture/ScreenshotEventEmitter.java
 com/bumptech/glide/load/m/b.java
 expo/modules/network/NetworkModule.java
 com/stripe/android/stripe3ds2/transaction/Logger$Companion$REAL_LOGGER$1.java
 expo/modules/notifications/service/delegates/ExpoHandlingDelegate.java
 expo/modules/ads/facebook/AdOptionsWrapperView.java
 f/f/b/e/f/e/f.java
 com/segment/analytics/integrations/Logger.java
 f/f/b/e/f/s/c.java
 expo/modules/taskManager/Utils.java
 f/f/b/e/f/o/l9.java
 expo/modules/notifications/badge/ExpoBadgeManager.java
 com/bumptech/glide/load/p/c/c.java
 expo/modules/ads/admob/PublisherBannerView.java
 versioned/host/exp/exponent/modules/api/components/svg/Brush.java
 versioned/host/exp/exponent/modules/api/components/maps/AirMapHeatmap.java
 versioned/host/exp/exponent/modules/api/components/gesturehandler/react/RNGestureHandlerRootHelper.java
 com/bumptech/glide/load/m/o/e.java
 host/exp/exponent/t/h.java
 expo/modules/updates/manifest/BareManifest$assetEntityList$2.java
 net/openid/appauth/w/a.java
 com/bumptech/glide/load/n/a0/k.java
 f/f/b/e/f/r/z1.java
 expo/modules/barcodescanner/scanners/GMVBarCodeScanner.java
 expo/modules/updates/db/DatabaseHolder.java
 d/c/b/c.java
 d/h/e/e.java
 butterknife/ButterKnife.java
 d/h/j/l.java
 versioned/host/exp/exponent/modules/api/viewshot/DebugViews.java
 org/unimodules/adapters/react/services/d.java
 versioned/host/exp/exponent/modules/api/reanimated/nodes/DebugNode.java
 com/bumptech/glide/load/o/c.java
 f/d/a/q/h.java
 expo/modules/updates/manifest/NewManifest.java
 versioned/host/exp/exponent/modules/api/components/webview/RNCWebViewModule.java
 host/exp/exponent/u/f.java
 expo/modules/av/player/MediaPlayerData.java
 d/h/m/j.java
 expo/modules/updates/UpdatesModule.java
 d/j/b/c.java
 f/f/d/c.java
 d/y/v0.java
 f/d/a/n/o.java
 f/f/b/e/f/j/d1.java
 expo/modules/application/ApplicationModule.java
 d/h/m/w.java
 f/f/b/e/f/r/f.java
 f/f/b/g/a/a/e.java
 host/exp/exponent/ReactNativeStaticHelpers.java
 expo/modules/taskManager/TaskManagerUtils.java
 com/theartofdev/edmodo/cropper/CropImageActivity.java
 com/bumptech/glide/load/o/d.java
 f/f/b/c/u0/n.java
 f/f/b/e/f/r/g5.java
 expo/modules/ads/facebook/NativeAdModule.java
 h/a/a/l.java
 versioned/host/exp/exponent/modules/api/safeareacontext/SafeAreaView.java
 f/f/b/e/f/l/a.java
 host/exp/exponent/o/b.java
 f/f/b/e/b/a.java
 f/f/b/e/f/r/z8.java
 versioned/host/exp/exponent/modules/api/components/svg/RadialGradientView.java
 com/bumptech/glide/load/p/c/h.java
 f/f/b/e/f/e/k.java
 f/f/b/e/f/e/w5.java
High
CVSS:7.4
Files may contain hardcoded sensitive informations like usernames, passwords, keys etc.
MASVS: MSTG-STORAGE-14
CWE-312 Cleartext Storage of Sensitive Information
M9: Reverse Engineering
Files: 
 expo/modules/notifications/notifications/channels/serializers/NotificationsChannelGroupSerializer.java
 expo/modules/webbrowser/WebBrowserModule.java
 com/stripe/android/model/Source.java
 expo/modules/appauth/AppAuthConstants.java
 expo/modules/notifications/notifications/channels/serializers/NotificationsChannelSerializer.java
 expo/modules/interfaces/permissions/PermissionsResponse.java
 expo/modules/facedetector/ExpoFaceDetector.java
 expo/modules/contacts/EXColumns.java
 expo/modules/errorrecovery/ErrorRecoveryModuleKt.java
 expo/modules/notifications/badge/SetBadgeCountNotificationEffect.java
 com/stripe/android/view/PaymentAuthWebViewClient.java
 expo/modules/updates/manifest/ManifestMetadata.java
 com/segment/analytics/integrations/BasePayload.java
 com/stripe/android/EphemeralKey.java
 com/segment/analytics/SegmentIntegration.java
 expo/modules/facebook/FacebookModule.java
 com/stripe/android/model/ConfirmPaymentIntentParams.java
 com/stripe/android/model/ConfirmSetupIntentParams.java
 com/stripe/android/model/SourceParams.java
 com/stripe/android/model/parsers/EphemeralKeyJsonParser.java
 expo/modules/notifications/notifications/handling/NotificationsHandler.java
 expo/modules/imagepicker/PickerResultsStoreKt.java
 com/segment/analytics/integrations/TrackPayload.java
 expo/modules/notifications/notifications/categories/ExpoNotificationCategoriesModule.java
 com/stripe/android/model/PaymentIntent.java
 com/segment/analytics/Analytics.java
 com/bumptech/glide/load/n/d.java
 expo/modules/notifications/notifications/presentation/builders/BadgeSettingNotificationBuilder.java
 com/stripe/android/stripe3ds2/transaction/AuthenticationRequestParameters.java
 expo/modules/notifications/permissions/NotificationPermissionsModule.java
 com/stripe/android/stripe3ds2/transaction/AcsData.java
 expo/modules/analytics/segment/SegmentModule.java
 expo/modules/av/AVManager.java
 expo/modules/notifications/serverregistration/InstallationId.java
 com/amplitude/api/AmplitudeClient.java
 com/stripe/android/model/Stripe3ds2AuthParams.java
 expo/modules/location/taskConsumers/LocationTaskConsumer.java
 com/stripe/android/paymentsheet/PaymentSheet.java
 com/bumptech/glide/load/n/p.java
 expo/modules/updates/UpdatesConfiguration.java
 com/stripe/android/stripe3ds2/transaction/AcsDataParser.java
 expo/modules/notifications/notifications/ArgumentsNotificationContentBuilder.java
 com/stripe/android/PaymentConfiguration.java
 com/stripe/android/paymentsheet/flowcontroller/InitData.java
 host/exp/exponent/experience/v.java
 com/stripe/android/stripe3ds2/utils/ParcelUtils.java
 com/stripe/android/auth/PaymentBrowserAuthContract.java
 expo/modules/notifications/notifications/JSONNotificationContentBuilder.java
 com/stripe/android/model/SetupIntent.java
 expo/modules/facedetector/FaceDetectorModule.java
 expo/modules/notifications/service/delegates/ExpoPresentationDelegate.java
 com/segment/analytics/Traits.java
 com/stripe/android/stripe3ds2/observability/DefaultSentryConfig.java
 com/segment/analytics/ProjectSettings.java
 com/stripe/android/model/Stripe3ds2Fingerprint.java
 com/stripe/android/networking/ApiRequest.java
 expo/modules/notifications/tokens/PushTokenModule.java
 com/stripe/android/model/ConfirmStripeIntentParams.java
 com/stripe/android/model/parsers/SetupIntentJsonParser.java
 com/segment/analytics/Properties.java
 com/stripe/android/model/parsers/PaymentIntentJsonParser.java
 expo/modules/camera/ExpoCameraView.java
 expo/modules/constants/ExponentInstallationId.java
 com/bumptech/glide/load/n/x.java
 org/unimodules/adapters/react/NativeModulesProxy.java
 expo/modules/notifications/notifications/background/BackgroundRemoteNotificationTaskConsumer.java
 expo/modules/taskManager/TaskManagerUtils.java
 expo/modules/filesystem/FileSystemModule.java
 com/bumptech/glide/load/h.java
 com/segment/analytics/Options.java
 expo/modules/sms/SMSModule.java
 com/stripe/android/model/parsers/SourceJsonParser.java
 expo/modules/location/LocationModule.java
 expo/modules/camera/tasks/ResolveTakenPictureAsyncTask.java
 com/segment/analytics/android/integrations/firebase/FirebaseIntegration.java
 expo/modules/notifications/notifications/presentation/builders/ExpoNotificationBuilder.java
 com/segment/analytics/integrations/AliasPayload.java
 com/stripe/android/paymentsheet/PaymentSheetContract.java
 com/stripe/android/paymentsheet/flowcontroller/DefaultFlowController.java
 expo/modules/sharing/SharingModule.java
 com/segment/analytics/integrations/GroupPayload.java
 com/segment/analytics/integrations/ScreenPayload.java
 com/stripe/android/payments/PaymentFlowResult.java
 com/segment/analytics/integrations/IdentifyPayload.java
 com/stripe/android/networking/AnalyticsRequestFactory.java
 com/segment/analytics/AnalyticsContext.java
Medium
CVSS:4.3
IP Address disclosure
MASVS: MSTG-CODE-2
CWE-200 Information Exposure
Files: 
 n/b/a/b3/b.java
 n/b/a/i2/a.java
 n/b/a/j2/a.java
 n/b/f/a/e.java
 expo/modules/network/NetworkModule.java
 n/b/a/e3/f/c.java
 n/b/a/d2/b.java
 n/b/a/h2/a.java
 n/b/a/f3/w0.java
 n/b/a/z2/a.java
 n/b/a/f3/x0.java
 n/b/a/s2/c.java
 n/b/a/x2/b.java
 n/b/a/p2/a.java
 n/b/a/f2/a.java
 n/b/a/f3/a.java
 n/b/a/f3/a1.java
 n/b/a/e2/a.java
 n/b/a/r2/a.java
 n/b/a/f3/c0.java
 n/b/a/e3/f/e.java
 n/b/a/c3/f.java
 n/b/a/l2/b.java
 n/b/a/u2/a.java
 n/b/a/o2/a.java
 n/b/a/y2/n.java
 n/b/a/n2/a.java
 n/b/a/f3/u.java
 n/b/a/w2/d.java
 n/b/a/v2/a.java
 n/b/a/m2/a.java
 f/g/a/a0/a.java
 n/b/a/a3/d.java
 n/b/a/f3/y0.java
 n/b/a/t2/b.java
 n/b/a/g3/o.java
High
CVSS:5.9
App uses SQLite Database and execute raw SQL query. Untrusted user input in raw SQL queries can cause SQL Injection. Also sensitive information should be encrypted and written to the database.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
M7: Client Code Quality
Files: 
 f/f/b/b/i/v/j/z.java
 f/f/b/e/f/l/v.java
 f/h/a/a/g/j/a.java
 f/h/a/a/g/j/b.java
 expo/modules/sqlite/SQLiteModule.java
 f/f/b/b/i/v/j/e0.java
 com/amplitude/api/DatabaseHelper.java
 d/v/a/g/a.java
 f/f/b/b/i/v/j/d0.java
 f/f/b/e/f/l/w.java
High
CVSS:5.5
App creates temp file. Sensitive information should never be written into a temp file.
MASVS: MSTG-STORAGE-2
CWE-276 Incorrect Default Permissions
M2: Insecure Data Storage
Files: 
 versioned/host/exp/exponent/modules/api/components/maps/AirMapModule.java
 com/theartofdev/edmodo/cropper/CropImageActivity.java
 versioned/host/exp/exponent/modules/api/components/maps/FileUtil.java
 d/t/c.java
 com/theartofdev/edmodo/cropper/c.java
 versioned/host/exp/exponent/modules/api/components/webview/RNCWebViewModule.java
 versioned/host/exp/exponent/modules/api/viewshot/RNViewShotModule.java
Low
CVSS:0
This App copies data to clipboard. Sensitive data should not be copied to clipboard as other applications can access it.
MASVS: MSTG-STORAGE-10
Files: 
 expo/modules/clipboard/ClipboardModule.java
Low
CVSS:3.9
App can write to App Directory. Sensitive Information should be encrypted.
MASVS: MSTG-STORAGE-14
CWE-276 Incorrect Default Permissions
Files: 
 expo/modules/notifications/service/delegates/SharedPreferencesNotificationsStore.java
 expo/modules/errorrecovery/ErrorRecoveryModule.java
 expo/modules/imagepicker/PickerResultsStore.java
 org/unimodules/adapters/react/i/a.java
 versioned/host/exp/exponent/modules/universal/ScopedErrorRecoveryModule.java
Info
CVSS:0
This App uses SSL certificate pinning to detect or prevent MITM attacks in secure communication channel.
MASVS: MSTG-NETWORK-4
Files: 
 com/amplitude/api/PinnedAmplitudeClient.java
High
CVSS:5.5
App can read/write to External Storage. Any App can read data written to External Storage.
MASVS: MSTG-STORAGE-2
CWE-276 Incorrect Default Permissions
M2: Insecure Data Storage
Files: 
 versioned/host/exp/exponent/modules/api/components/webview/RNCWebViewModule.java
 expo/modules/medialibrary/MediaLibraryUtils.java
Medium
CVSS:0
This app listens to Clipboard changes. Some malwares also listen to Clipboard changes.
MASVS: MSTG-PLATFORM-4
Files: 
 expo/modules/clipboard/ClipboardEventEmitter.java
Pygal Austria: 100 Switzerland: 100 Germany: 300 Ireland: 300 United States: 2000

Map computed by Pithus.

Domains analysis

Information computed with MobSF.

US api.amplitude.com 54.191.209.196
US expo.fyi 76.223.123.94
US google.github.io 185.199.110.153
IE api.stripe.com 34.241.54.72
DE d3lwq5rlu14cro.cloudfront.net 99.86.1.52
CH www.slf4j.org 83.173.251.158
DE d1wp6m56sqw74a.cloudfront.net 99.86.3.88
US ssl.google-analytics.com 142.250.181.232
US exp.host 34.132.55.135
US s3.amazonaws.com 52.217.139.128
US stripe.com 54.187.159.182
AT docs.expo.io 13.32.22.71
IE files.stripe.com 34.247.101.32
US twitter.com 104.244.42.65
US m.stripe.com 34.215.192.98
IE hooks.stripe.com 34.241.202.139
US www.googleapis.com 142.250.186.74
US expo.io 34.132.55.135
US www.example.com 93.184.216.34
US app-measurement.com 142.250.184.206
US q.stripe.com 54.187.159.182
US www.w3.org 128.30.52.100
US errors.stripe.com 54.187.119.242
US www.google-analytics.com 172.217.18.110
US goo.gl 142.250.186.46
US inthecheesefactory.com 104.21.5.227
US github.com 140.82.121.4
DE cdn-settings.segment.com 99.86.0.85

URL analysis

Information computed with MobSF.

https://exp.host/@exponent/home/bundle
Defined in host/exp/exponent/h.java
https://exp.host/--/manifest-public-key
https://s3.amazonaws.com/exp-brand-assets/ExponentEmptyManifest_192.png
https://d1wp6m56sqw74a.cloudfront.net/%40expo-home-dev%2Fexpo-home-dev-9bdace7ee8228da075babf71fc0b0c21911a5814%2F42.0.0%2F933ff5ef9f439e7346e90324fb44d3f9-42.0.0-android.js
https://d3lwq5rlu14cro.cloudfront.net/ExponentEmptyManifest_192.png
Defined in host/exp/exponent/l.java
https://exp.host/--/manifest-public-key
https://s3.amazonaws.com/exp-brand-assets/ExponentEmptyManifest_192.png
https://d1wp6m56sqw74a.cloudfront.net/%40expo-home-dev%2Fexpo-home-dev-9bdace7ee8228da075babf71fc0b0c21911a5814%2F42.0.0%2F933ff5ef9f439e7346e90324fb44d3f9-42.0.0-android.js
https://d3lwq5rlu14cro.cloudfront.net/ExponentEmptyManifest_192.png
Defined in host/exp/exponent/l.java
https://exp.host/--/manifest-public-key
https://s3.amazonaws.com/exp-brand-assets/ExponentEmptyManifest_192.png
https://d1wp6m56sqw74a.cloudfront.net/%40expo-home-dev%2Fexpo-home-dev-9bdace7ee8228da075babf71fc0b0c21911a5814%2F42.0.0%2F933ff5ef9f439e7346e90324fb44d3f9-42.0.0-android.js
https://d3lwq5rlu14cro.cloudfront.net/ExponentEmptyManifest_192.png
Defined in host/exp/exponent/l.java
https://exp.host/--/manifest-public-key
https://s3.amazonaws.com/exp-brand-assets/ExponentEmptyManifest_192.png
https://d1wp6m56sqw74a.cloudfront.net/%40expo-home-dev%2Fexpo-home-dev-9bdace7ee8228da075babf71fc0b0c21911a5814%2F42.0.0%2F933ff5ef9f439e7346e90324fb44d3f9-42.0.0-android.js
https://d3lwq5rlu14cro.cloudfront.net/ExponentEmptyManifest_192.png
Defined in host/exp/exponent/l.java
https://expo.io:443/@easycancha/bcentral-caja
Defined in host/exp/exponent/MainActivity.java
https://docs.expo.io/versions/latest/guides/using-fcm
https://exp.host/--/api/v2/push/getExpoPushToken
Defined in host/exp/exponent/notifications/j.java
https://docs.expo.io/versions/latest/guides/using-fcm
https://exp.host/--/api/v2/push/getExpoPushToken
Defined in host/exp/exponent/notifications/j.java
https://exp.host/--/api/v2/push/updateDeviceToken
https://inthecheesefactory.com/blog/how-to-install-google-services-on-genymotion/en
Defined in host/exp/exponent/notifications/e.java
https://exp.host/--/api/v2/push/updateDeviceToken
https://inthecheesefactory.com/blog/how-to-install-google-services-on-genymotion/en
Defined in host/exp/exponent/notifications/e.java
https://expo.io:443/@easycancha/bcentral-caja
https://d1wp6m56sqw74a.cloudfront.net/%40easycancha%2Fbcentral-caja%2F5.5.1%2Ff506e32f5de9f29e4e68d48ceafbabe2-42.0.0-android.js
Defined in host/exp/exponent/generated/AppConstants.java
https://expo.io:443/@easycancha/bcentral-caja
https://d1wp6m56sqw74a.cloudfront.net/%40easycancha%2Fbcentral-caja%2F5.5.1%2Ff506e32f5de9f29e4e68d48ceafbabe2-42.0.0-android.js
Defined in host/exp/exponent/generated/AppConstants.java
https://exp.host/status
Defined in i/a/a/b.java
https://www.googleapis.com/auth/fitness.activity.read
Defined in versioned/host/exp/exponent/modules/api/PedometerModule.java
https://github.com/software-mansion/react-native-screens/issues/17#issuecomment-424704067
Defined in versioned/host/exp/exponent/modules/api/screens/ScreenFragment.java
https://github.com/software-mansion/react-native-screens/issues/17#issuecomment-424704067
Defined in versioned/host/exp/exponent/modules/api/screens/ScreenStackFragment.java
http://www.slf4j.org/codes.html#StaticLoggerBinder
http://www.slf4j.org/codes.html#substituteLogger
http://www.slf4j.org/codes.html#unsuccessfulInit
http://www.slf4j.org/codes.html#loggerNameMismatch
http://www.slf4j.org/codes.html#multiple_bindings
http://www.slf4j.org/codes.html#version_mismatch
Defined in n/d/c.java
http://www.slf4j.org/codes.html#StaticLoggerBinder
http://www.slf4j.org/codes.html#substituteLogger
http://www.slf4j.org/codes.html#unsuccessfulInit
http://www.slf4j.org/codes.html#loggerNameMismatch
http://www.slf4j.org/codes.html#multiple_bindings
http://www.slf4j.org/codes.html#version_mismatch
Defined in n/d/c.java
http://www.slf4j.org/codes.html#StaticLoggerBinder
http://www.slf4j.org/codes.html#substituteLogger
http://www.slf4j.org/codes.html#unsuccessfulInit
http://www.slf4j.org/codes.html#loggerNameMismatch
http://www.slf4j.org/codes.html#multiple_bindings
http://www.slf4j.org/codes.html#version_mismatch
Defined in n/d/c.java
http://www.slf4j.org/codes.html#StaticLoggerBinder
http://www.slf4j.org/codes.html#substituteLogger
http://www.slf4j.org/codes.html#unsuccessfulInit
http://www.slf4j.org/codes.html#loggerNameMismatch
http://www.slf4j.org/codes.html#multiple_bindings
http://www.slf4j.org/codes.html#version_mismatch
Defined in n/d/c.java
http://www.slf4j.org/codes.html#StaticLoggerBinder
http://www.slf4j.org/codes.html#substituteLogger
http://www.slf4j.org/codes.html#unsuccessfulInit
http://www.slf4j.org/codes.html#loggerNameMismatch
http://www.slf4j.org/codes.html#multiple_bindings
http://www.slf4j.org/codes.html#version_mismatch
Defined in n/d/c.java
http://www.slf4j.org/codes.html#StaticLoggerBinder
http://www.slf4j.org/codes.html#substituteLogger
http://www.slf4j.org/codes.html#unsuccessfulInit
http://www.slf4j.org/codes.html#loggerNameMismatch
http://www.slf4j.org/codes.html#multiple_bindings
http://www.slf4j.org/codes.html#version_mismatch
Defined in n/d/c.java
https://google.github.io/ExoPlayer/faqs.html#what-do-player-is-accessed-on-the-wrong-thread-warnings-mean
Defined in f/f/b/c/g0.java
http://www.w3.org/ns/ttml#parameter
Defined in f/f/b/c/r0/r/a.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/fitness.blood_pressure.read
https://www.googleapis.com/auth/fitness.blood_pressure.write
https://www.googleapis.com/auth/fitness.blood_glucose.read
https://www.googleapis.com/auth/fitness.blood_glucose.write
https://www.googleapis.com/auth/fitness.oxygen_saturation.read
https://www.googleapis.com/auth/fitness.oxygen_saturation.write
https://www.googleapis.com/auth/fitness.body_temperature.read
https://www.googleapis.com/auth/fitness.body_temperature.write
https://www.googleapis.com/auth/fitness.reproductive_health.read
https://www.googleapis.com/auth/fitness.reproductive_health.write
Defined in f/f/b/e/d/g.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/fitness.blood_pressure.read
https://www.googleapis.com/auth/fitness.blood_pressure.write
https://www.googleapis.com/auth/fitness.blood_glucose.read
https://www.googleapis.com/auth/fitness.blood_glucose.write
https://www.googleapis.com/auth/fitness.oxygen_saturation.read
https://www.googleapis.com/auth/fitness.oxygen_saturation.write
https://www.googleapis.com/auth/fitness.body_temperature.read
https://www.googleapis.com/auth/fitness.body_temperature.write
https://www.googleapis.com/auth/fitness.reproductive_health.read
https://www.googleapis.com/auth/fitness.reproductive_health.write
Defined in f/f/b/e/d/g.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/fitness.blood_pressure.read
https://www.googleapis.com/auth/fitness.blood_pressure.write
https://www.googleapis.com/auth/fitness.blood_glucose.read
https://www.googleapis.com/auth/fitness.blood_glucose.write
https://www.googleapis.com/auth/fitness.oxygen_saturation.read
https://www.googleapis.com/auth/fitness.oxygen_saturation.write
https://www.googleapis.com/auth/fitness.body_temperature.read
https://www.googleapis.com/auth/fitness.body_temperature.write
https://www.googleapis.com/auth/fitness.reproductive_health.read
https://www.googleapis.com/auth/fitness.reproductive_health.write
Defined in f/f/b/e/d/g.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/fitness.blood_pressure.read
https://www.googleapis.com/auth/fitness.blood_pressure.write
https://www.googleapis.com/auth/fitness.blood_glucose.read
https://www.googleapis.com/auth/fitness.blood_glucose.write
https://www.googleapis.com/auth/fitness.oxygen_saturation.read
https://www.googleapis.com/auth/fitness.oxygen_saturation.write
https://www.googleapis.com/auth/fitness.body_temperature.read
https://www.googleapis.com/auth/fitness.body_temperature.write
https://www.googleapis.com/auth/fitness.reproductive_health.read
https://www.googleapis.com/auth/fitness.reproductive_health.write
Defined in f/f/b/e/d/g.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/fitness.blood_pressure.read
https://www.googleapis.com/auth/fitness.blood_pressure.write
https://www.googleapis.com/auth/fitness.blood_glucose.read
https://www.googleapis.com/auth/fitness.blood_glucose.write
https://www.googleapis.com/auth/fitness.oxygen_saturation.read
https://www.googleapis.com/auth/fitness.oxygen_saturation.write
https://www.googleapis.com/auth/fitness.body_temperature.read
https://www.googleapis.com/auth/fitness.body_temperature.write
https://www.googleapis.com/auth/fitness.reproductive_health.read
https://www.googleapis.com/auth/fitness.reproductive_health.write
Defined in f/f/b/e/d/g.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/fitness.blood_pressure.read
https://www.googleapis.com/auth/fitness.blood_pressure.write
https://www.googleapis.com/auth/fitness.blood_glucose.read
https://www.googleapis.com/auth/fitness.blood_glucose.write
https://www.googleapis.com/auth/fitness.oxygen_saturation.read
https://www.googleapis.com/auth/fitness.oxygen_saturation.write
https://www.googleapis.com/auth/fitness.body_temperature.read
https://www.googleapis.com/auth/fitness.body_temperature.write
https://www.googleapis.com/auth/fitness.reproductive_health.read
https://www.googleapis.com/auth/fitness.reproductive_health.write
Defined in f/f/b/e/d/g.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/fitness.blood_pressure.read
https://www.googleapis.com/auth/fitness.blood_pressure.write
https://www.googleapis.com/auth/fitness.blood_glucose.read
https://www.googleapis.com/auth/fitness.blood_glucose.write
https://www.googleapis.com/auth/fitness.oxygen_saturation.read
https://www.googleapis.com/auth/fitness.oxygen_saturation.write
https://www.googleapis.com/auth/fitness.body_temperature.read
https://www.googleapis.com/auth/fitness.body_temperature.write
https://www.googleapis.com/auth/fitness.reproductive_health.read
https://www.googleapis.com/auth/fitness.reproductive_health.write
Defined in f/f/b/e/d/g.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/fitness.blood_pressure.read
https://www.googleapis.com/auth/fitness.blood_pressure.write
https://www.googleapis.com/auth/fitness.blood_glucose.read
https://www.googleapis.com/auth/fitness.blood_glucose.write
https://www.googleapis.com/auth/fitness.oxygen_saturation.read
https://www.googleapis.com/auth/fitness.oxygen_saturation.write
https://www.googleapis.com/auth/fitness.body_temperature.read
https://www.googleapis.com/auth/fitness.body_temperature.write
https://www.googleapis.com/auth/fitness.reproductive_health.read
https://www.googleapis.com/auth/fitness.reproductive_health.write
Defined in f/f/b/e/d/g.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/fitness.blood_pressure.read
https://www.googleapis.com/auth/fitness.blood_pressure.write
https://www.googleapis.com/auth/fitness.blood_glucose.read
https://www.googleapis.com/auth/fitness.blood_glucose.write
https://www.googleapis.com/auth/fitness.oxygen_saturation.read
https://www.googleapis.com/auth/fitness.oxygen_saturation.write
https://www.googleapis.com/auth/fitness.body_temperature.read
https://www.googleapis.com/auth/fitness.body_temperature.write
https://www.googleapis.com/auth/fitness.reproductive_health.read
https://www.googleapis.com/auth/fitness.reproductive_health.write
Defined in f/f/b/e/d/g.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/fitness.blood_pressure.read
https://www.googleapis.com/auth/fitness.blood_pressure.write
https://www.googleapis.com/auth/fitness.blood_glucose.read
https://www.googleapis.com/auth/fitness.blood_glucose.write
https://www.googleapis.com/auth/fitness.oxygen_saturation.read
https://www.googleapis.com/auth/fitness.oxygen_saturation.write
https://www.googleapis.com/auth/fitness.body_temperature.read
https://www.googleapis.com/auth/fitness.body_temperature.write
https://www.googleapis.com/auth/fitness.reproductive_health.read
https://www.googleapis.com/auth/fitness.reproductive_health.write
Defined in f/f/b/e/d/g.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/fitness.blood_pressure.read
https://www.googleapis.com/auth/fitness.blood_pressure.write
https://www.googleapis.com/auth/fitness.blood_glucose.read
https://www.googleapis.com/auth/fitness.blood_glucose.write
https://www.googleapis.com/auth/fitness.oxygen_saturation.read
https://www.googleapis.com/auth/fitness.oxygen_saturation.write
https://www.googleapis.com/auth/fitness.body_temperature.read
https://www.googleapis.com/auth/fitness.body_temperature.write
https://www.googleapis.com/auth/fitness.reproductive_health.read
https://www.googleapis.com/auth/fitness.reproductive_health.write
Defined in f/f/b/e/d/g.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/fitness.blood_pressure.read
https://www.googleapis.com/auth/fitness.blood_pressure.write
https://www.googleapis.com/auth/fitness.blood_glucose.read
https://www.googleapis.com/auth/fitness.blood_glucose.write
https://www.googleapis.com/auth/fitness.oxygen_saturation.read
https://www.googleapis.com/auth/fitness.oxygen_saturation.write
https://www.googleapis.com/auth/fitness.body_temperature.read
https://www.googleapis.com/auth/fitness.body_temperature.write
https://www.googleapis.com/auth/fitness.reproductive_health.read
https://www.googleapis.com/auth/fitness.reproductive_health.write
Defined in f/f/b/e/d/g.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/fitness.blood_pressure.read
https://www.googleapis.com/auth/fitness.blood_pressure.write
https://www.googleapis.com/auth/fitness.blood_glucose.read
https://www.googleapis.com/auth/fitness.blood_glucose.write
https://www.googleapis.com/auth/fitness.oxygen_saturation.read
https://www.googleapis.com/auth/fitness.oxygen_saturation.write
https://www.googleapis.com/auth/fitness.body_temperature.read
https://www.googleapis.com/auth/fitness.body_temperature.write
https://www.googleapis.com/auth/fitness.reproductive_health.read
https://www.googleapis.com/auth/fitness.reproductive_health.write
Defined in f/f/b/e/d/g.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/fitness.blood_pressure.read
https://www.googleapis.com/auth/fitness.blood_pressure.write
https://www.googleapis.com/auth/fitness.blood_glucose.read
https://www.googleapis.com/auth/fitness.blood_glucose.write
https://www.googleapis.com/auth/fitness.oxygen_saturation.read
https://www.googleapis.com/auth/fitness.oxygen_saturation.write
https://www.googleapis.com/auth/fitness.body_temperature.read
https://www.googleapis.com/auth/fitness.body_temperature.write
https://www.googleapis.com/auth/fitness.reproductive_health.read
https://www.googleapis.com/auth/fitness.reproductive_health.write
Defined in f/f/b/e/d/g.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/fitness.blood_pressure.read
https://www.googleapis.com/auth/fitness.blood_pressure.write
https://www.googleapis.com/auth/fitness.blood_glucose.read
https://www.googleapis.com/auth/fitness.blood_glucose.write
https://www.googleapis.com/auth/fitness.oxygen_saturation.read
https://www.googleapis.com/auth/fitness.oxygen_saturation.write
https://www.googleapis.com/auth/fitness.body_temperature.read
https://www.googleapis.com/auth/fitness.body_temperature.write
https://www.googleapis.com/auth/fitness.reproductive_health.read
https://www.googleapis.com/auth/fitness.reproductive_health.write
Defined in f/f/b/e/d/g.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/fitness.blood_pressure.read
https://www.googleapis.com/auth/fitness.blood_pressure.write
https://www.googleapis.com/auth/fitness.blood_glucose.read
https://www.googleapis.com/auth/fitness.blood_glucose.write
https://www.googleapis.com/auth/fitness.oxygen_saturation.read
https://www.googleapis.com/auth/fitness.oxygen_saturation.write
https://www.googleapis.com/auth/fitness.body_temperature.read
https://www.googleapis.com/auth/fitness.body_temperature.write
https://www.googleapis.com/auth/fitness.reproductive_health.read
https://www.googleapis.com/auth/fitness.reproductive_health.write
Defined in f/f/b/e/d/g.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/fitness.blood_pressure.read
https://www.googleapis.com/auth/fitness.blood_pressure.write
https://www.googleapis.com/auth/fitness.blood_glucose.read
https://www.googleapis.com/auth/fitness.blood_glucose.write
https://www.googleapis.com/auth/fitness.oxygen_saturation.read
https://www.googleapis.com/auth/fitness.oxygen_saturation.write
https://www.googleapis.com/auth/fitness.body_temperature.read
https://www.googleapis.com/auth/fitness.body_temperature.write
https://www.googleapis.com/auth/fitness.reproductive_health.read
https://www.googleapis.com/auth/fitness.reproductive_health.write
Defined in f/f/b/e/d/g.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
https://www.googleapis.com/auth/fitness.blood_pressure.read
https://www.googleapis.com/auth/fitness.blood_pressure.write
https://www.googleapis.com/auth/fitness.blood_glucose.read
https://www.googleapis.com/auth/fitness.blood_glucose.write
https://www.googleapis.com/auth/fitness.oxygen_saturation.read
https://www.googleapis.com/auth/fitness.oxygen_saturation.write
https://www.googleapis.com/auth/fitness.body_temperature.read
https://www.googleapis.com/auth/fitness.body_temperature.write
https://www.googleapis.com/auth/fitness.reproductive_health.read
https://www.googleapis.com/auth/fitness.reproductive_health.write
Defined in f/f/b/e/d/g.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
Defined in f/f/b/e/d/a.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
Defined in f/f/b/e/d/a.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
Defined in f/f/b/e/d/a.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
Defined in f/f/b/e/d/a.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
Defined in f/f/b/e/d/a.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
Defined in f/f/b/e/d/a.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
Defined in f/f/b/e/d/a.java
https://www.googleapis.com/auth/fitness.activity.read
https://www.googleapis.com/auth/fitness.activity.write
https://www.googleapis.com/auth/fitness.location.read
https://www.googleapis.com/auth/fitness.location.write
https://www.googleapis.com/auth/fitness.body.read
https://www.googleapis.com/auth/fitness.body.write
https://www.googleapis.com/auth/fitness.nutrition.read
https://www.googleapis.com/auth/fitness.nutrition.write
Defined in f/f/b/e/d/a.java
https://goo.gl/J1sWQy
Defined in f/f/b/e/f/o/rd.java