Shot Factor
com.piratebrig.multigun Analysis scope and limitations
Selected package build: 880897172. Every technical section is restricted to this build; missing sections were not analyzed.
Stored static package extraction and inventory; not a live security test. Only the selected build is represented. Missing data means not analyzed, not safe. Scanner identity and scan time are unavailable for sources that did not record them.
Recorded extraction times: 2026-01-03T03:38:20.194140, 2026-01-03T03:38:20.216810, 2026-01-03T03:38:20.240649, 2026-01-03T03:38:20.264556, 2026-01-03T03:38:20.289121, 2026-01-03T03:38:20.310092, 2026-01-03T03:38:20.329225, 2026-01-03T03:38:20.349412, 2026-01-03T03:38:20.372168, 2026-05-23 20:30:34.
19 known version identifiers; 1 have package metadata. Placeholder identifiers are not shown as archived packages.
| Version | Build | Size | Release | Ext ID |
|---|---|---|---|---|
| 1.0.5 | 0 | 166.6 MB | 2025-12-22 11:01:28 | 880897172 |
Ad Networks
| Name | Vendor | Version | Bundle ID |
|---|---|---|---|
| AppLovinQualityService | AppLovin | 7.10.3 | com.applovin.AppLovinQualityService |
| DTBiOSSDK | Amazon | 1.0 | com.a9.pdp.DTBiOSSDK |
| InMobiSDK | InMobi | 10.8.0 | com.inmobi.InMobiSDK |
Other
| Name | Vendor | Version | Bundle ID |
|---|---|---|---|
| AdjoeWaveSDK | — | 1.3.0 | io.adjoe.wave |
| ConsentViewController | — | 7.7.1 | org.cocoapods.ConsentViewController |
| OMSDK_Appodeal | — | 1.5.4 | com.iabtechlab.OMSDK-Appodeal |
| OMSDK_Pubmatic | — | 1.5.4 | com.iabtechlab.OMSDK-Pubmatic |
| UnityFramework | — | 1.0 | com.unity3d.framework |
| VoodooAppUpdateFramework | — | 1.0 | com.voodoo.voodoosauce.VoodooAppUpdateFramework |
No engine detections found.
No entitlement data found.
Info.plist Signals
- Usage descriptions:
NSPhotoLibraryUsageDescription: This app does not use the photo library.NSLocationAlwaysUsageDescription: This app uses location for ad targeting purposes.NSUserTrackingUsageDescription: Your data may be used by Voodoo and its partners for personalized advertising and analytics purposes.NSCalendarsUsageDescription: This app does not use the calendar.NSLocationWhenInUseUsageDescription: This app uses location for ad targeting purposes.
- Non-exempt encryption: No
- URL schemes: {'CFBundleURLName': 'com.piratebrig.multigun', 'CFBundleURLSchemes': ['multigun']}
- Required capabilities: arm64, metal
| Severity | Category | Title | Detail |
|---|---|---|---|
| info | Firebase | Firebase client configuration present | Project: shot-factor. Firebase client API keys are public identifiers by design. Presence alone does not establish a vulnerability; API restrictions and access rules were not tested. |
| info | ATS | NSAllowsArbitraryLoads: true | The package declares an ATS exception. Actual network traffic and use of cleartext connections were not tested. |
No file structure data found. App may not have been unpacked yet.