XrayFA is an open-source (Apache-2.0) Android app by Q7DF1. The APK we host is 26 MB, it needs Android 9 or newer, and it declares 12 permissions.
The file on this page is XrayFA 1.7.3, 26.39 MB, and it installs on Android 9 and newer.
We compared the signing certificate of this build with the certificate recorded the first time com.android.xrayfa entered the site, and published both the file's SHA-256 and the certificate's fingerprint above so you can check the download yourself. That comparison says the file was not repackaged by someone else; it is not a review of what the app does.
The manifest inside the APK declares 12 permissions, including access to the camera. Android asks you to approve those the first time the app needs them.
Its licence is Apache-2.0. We took this build from F-Droid, and the source for this exact version is linked below.
We do not show a star rating or an install count for this page: we have no measured figure for either, and a number we cannot source is worth less than an empty field.
- Version
- 1.7.3
- Size
- 26.39 MB
- Requires Android
- API 28
- Package
- com.android.xrayfa
- Signature checked on
- Oct 31, 2026
- Where this file came from
- F-Droid
- Licence
- Apache-2.0
- Source code
- Source for this version
File SHA-256: ff07d51c7af1b06f7042ef88c286e2ab4db6c71f4a7d6e9f6f7e4c3473375f0a
Signing certificate (SHA-256): f62d348b1ea01b9b286326a6db58807df2315b3a04fc71291a3b97c9cc907381
We check that this file carries the same signing certificate as earlier releases of the same package. That shows the APK was not repackaged by someone else — it is not a security review of the app.
Declared permissions
- FOREGROUND_SERVICE_SPECIAL_USE
- FOREGROUND_SERVICE
- POST_NOTIFICATIONS
- POST_PROMOTED_NOTIFICATIONS
- INTERNET
- CAMERA
- MANAGE_EXTERNAL_STORAGE
- READ_EXTERNAL_STORAGE
- WRITE_EXTERNAL_STORAGE
- QUERY_ALL_PACKAGES
- RECEIVE_BOOT_COMPLETED
- com.android.xrayfa.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Screenshots


