What Is classes.dex? Reading an Android DEX Inventory

Read the inventory with Android-aware tooling

Use the actual release artifact:

apkanalyzer dex list app-release.apk
apkanalyzer dex references app-release.apk
apkanalyzer dex packages app-release.apk

The commands expose different views: packaged DEX files, referenced methods and package/class structure. Consult the command options when restricting output to a particular DEX. Analyzer reference.

Distinguish definitions from references

A method defined by your application is not the same as a method referenced by code in the DEX. Dependencies and platform calls affect reference counts. Comparing two tools' numbers without checking the definition can produce an apparent disagreement that is only a metric mismatch.

The DEX format has tables for strings, types, prototypes, fields, methods and class definitions. It is a structured binary format, not compressed Java source. DEX format.

Explain multiple DEX files before trying to merge them

classes2.dex is not inherently suspicious. Multidex supports applications whose code cannot fit into a single DEX method-reference space. Shrinking can reduce unnecessary code, while multidex handles the remaining packaging requirement.

Do not delete a secondary DEX file to make an APK smaller. Classes needed only after opening a later screen can live there, so a launch smoke test may miss the damage.

Use package counts as an investigation lead

A large new package namespace after a dependency update can reveal a newly bundled library. Confirm the origin in Gradle's resolved dependency tree. Obfuscation can make application package names less descriptive, and generated or merged classes can complicate attribution.

A class being present does not prove it is executed. Conversely, code loaded from a dynamic feature or native library may not appear in the base DEX inventory.

Keep the result bounded

Save the analyzed artifact, tool version, selected DEX files and count definitions with your comparison. If an online analyzer imposes parsing limits, its aggregate count should not be represented as a complete unrestricted inventory.

APKLint's DEX / Smali Analyzer and APK Analyzer are useful starting points. For a bytecode-level question, inspect the actual method and its control flow; for performance, measure runtime behavior rather than ranking applications by method count alone.