mjclient20260520beta.apk

笔记本

15.36 MB

Analyzed: 2026-05-20 05:52 UTC

Twitter / X Facebook LinkedIn WhatsApp Telegram Reddit

Analyze Another

APK Security & Privacy Score

Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.

Security Scan-weighted

65/100

Threat scan flagged Outdated target SDK

Privacy Permissions & network

59/100

HTTP URLs found Possible tracking

62/100

Caution

Overall trust

Facts

Threat scan 4/75 flagged, 0 suspicious

Permissions 10 requested

Network strings 112 URLs (64 HTTP, 48 HTTPS)

Target SDK 28

Certificate Valid until 2121-12-26 (96 years, suspicious)

Warnings

Threat scan flagged: 4/75 scanners marked this file as malicious.

Found 64 HTTP URL strings (unencrypted).

Possible analytics/tracking domains found: alogsus.umeng.com, alogus.umeng.com, developer.umeng.com, ouplog.umeng.com, plbslog.umeng.com

Package Name com.differ.xiaoming

Version Code 2813

Version Name 28.1.3

Application Name org.cocos2dx.javascript.AppApplication

Debuggable No

Allow Backup No

Min SDK Android 24 (Nougat)

Target SDK Android 28 (Pie)

Supported ABIs

armeabi

Certificate & Signer

Valid From 2022-01-19 06:58:29

Valid To 2121-12-26 06:58:29

Serial Number 18b85fc3

Thumbprint 92594d114f62cf1337604b363a39768d88c38b1f

Issuer: C aa

Issuer: CN aa

Issuer: DN C:aa, CN:aa, L:aa, O:aa, ST:aa, OU:aa

Issuer: L aa

Issuer: O aa

Issuer: OU aa

Issuer: ST aa

Subject: C aa

Subject: CN aa

Subject: DN C:aa, CN:aa, L:aa, O:aa, ST:aa, OU:aa

Subject: L aa

Subject: O aa

Subject: OU aa

Subject: ST aa

Security Scan

4 /75

⚠️ Threats Detected

Detected by 4 vendors: AhnLab-V3 (PUP/Android.Agent.1311865), BitDefenderFalx (Android.Riskware.Agent.OSP), Google (Detected)

Scanned by 75 security vendors

Last scan: 2026-05-20 05:52 UTC

Malicious

Suspicious

Harmless

Undetected

Timeout

Failure

Scan Providers

75 vendors

ALYac undetected

No result reported

Engine 2.0.0.10

APEX type-unsupported

No result reported

Engine 6.780

AVG undetected

No result reported

Engine 23.9.8494.0

Acronis undetected

No result reported

Engine 1.2.0.121

AhnLab-V3 malicious

PUP/Android.Agent.1311865

Engine 3.30.0.10666

Alibaba undetected

No result reported

Engine 0.3.0.5

Antiy-AVL undetected

No result reported

Engine 3.0

Arcabit undetected

No result reported

Engine 2025.0.0.23

Avast undetected

No result reported

Engine 23.9.8494.0

Avast-Mobile undetected

No result reported

Engine 260519-00

Avira undetected

No result reported

Engine 8.3.3.24

BitDefender undetected

No result reported

Engine 7.2

BitDefenderFalx malicious

Android.Riskware.Agent.OSP

Engine 2.0.936

Bkav undetected

No result reported

Engine 8.2.40(8338)

CAT-QuickHeal undetected

No result reported

Engine 22.00

CMC undetected

No result reported

Engine 2.4.2022.1

CTX undetected

No result reported

Engine 2024.8.29.1

ClamAV undetected

No result reported

Engine 1.5.2.0

CrowdStrike undetected

No result reported

Engine 1.0

Cylance type-unsupported

No result reported

Engine 3.0.0.0

Cynet undetected

No result reported

Engine 4.0.3.4

DeepInstinct type-unsupported

No result reported

Engine 5.0.0.8

DrWeb undetected

No result reported

Engine 7.0.75.2070

ESET-NOD32 undetected

No result reported

Engine 18.2.18.0

Elastic undetected

No result reported

Engine 4.0.261

Emsisoft undetected

No result reported

Engine 2024.8.0.61147

F-Secure undetected

No result reported

Engine 18.10.1547.307

Fortinet undetected

No result reported

Engine 7.0.48.0

GData undetected

No result reported

Engine GD:27.44607AVA:64.31277

Google malicious

Detected

Engine 1779253270

Gridinsoft undetected

No result reported

Engine 1.0.245.174

Ikarus malicious

Trojan.AndroidOS.Agent

Engine 6.4.16.0

Jiangmin undetected

No result reported

Engine 16.0.100

K7AntiVirus undetected

No result reported

Engine 14.53.59556

K7GW undetected

No result reported

Engine 14.53.59556

Kaspersky undetected

No result reported

Engine 22.0.1.28

Kingsoft undetected

No result reported

Engine None

Lionic undetected

No result reported

Engine 8.16

Malwarebytes undetected

No result reported

Engine 3.1.0.235

MaxSecure undetected

No result reported

Engine 1.0.0.1

McAfeeD undetected

No result reported

Engine 1.2.0.14532

MicroWorld-eScan undetected

No result reported

Engine 14.0.409.0

Microsoft undetected

No result reported

Engine 1.1.26040.8

NANO-Antivirus undetected

No result reported

Engine 1.0.170.26895

Paloalto type-unsupported

No result reported

Engine 0.9.0.1003

Panda undetected

No result reported

Engine 4.6.4.2

Rising undetected

No result reported

Engine 25.0.0.28

SUPERAntiSpyware undetected

No result reported

Engine 5.6.0.1032

Sangfor undetected

No result reported

Engine 2.22.3.0

SentinelOne type-unsupported

No result reported

Engine 7.6.2.19

Skyhigh undetected

No result reported

Engine v2021.2.0+4045

Sophos undetected

No result reported

Engine 3.5.1.0

Symantec undetected

No result reported

Engine 1.22.0.0

SymantecMobileInsight undetected

No result reported

Engine 2.0

TACHYON undetected

No result reported

Engine 2026-05-20.01

Tencent undetected

No result reported

Engine 1.0.0.1

Trapmine type-unsupported

No result reported

Engine 4.0.12.0

TrellixENS undetected

No result reported

Engine 6.0.6.653

TrendMicro undetected

No result reported

Engine 24.550.0.1002

TrendMicro-HouseCall undetected

No result reported

Engine 24.550.0.1002

Trustlook undetected

No result reported

Engine 1.0

VBA32 undetected

No result reported

Engine 5.6.1

VIPRE undetected

No result reported

Engine 6.0.0.35

Varist undetected

No result reported

Engine 6.6.1.3

ViRobot undetected

No result reported

Engine 2014.3.20.0

VirIT undetected

No result reported

Engine 9.5.1210

Webroot undetected

No result reported

Engine 1.9.0.8

Xcitium undetected

No result reported

Engine 38662

Yandex undetected

No result reported

Engine 5.5.2.24

Zillya undetected

No result reported

Engine 2.0.0.5604

ZoneAlarm undetected

No result reported

Engine 6.24-114820982

Zoner undetected

No result reported

Engine 2.2.2.0

alibabacloud type-unsupported

No result reported

Engine 2.2.0

huorong undetected

No result reported

Engine dce1c44:dce1c44:e4a2f15:e4a2f15

tehtris type-unsupported

No result reported

Engine v0.1.4

File Signatures

SHA-256 7883caa896424cdd09bbbf57bec3b9bd765798ff0c614fd775ad03ddd7cbe243

MD5 8a26f0e975b4012b5d4c60944b1b1897

SHA-1 610a36f7413e9816bd845335a89fd21f7585107c

SSDEEP 393216:ktiUB2msUZfJ/f545WDF01ptkdjLkWnPd1gIO5/PTipQv4p2BhwiM:OAmsmf9fmAJEEjLld1zAH9R9M

TLSH T13AF622A1954CA809CF29E073C17963B2B49B6F407625B432FDCDF1582BB5972E60CB87

VHASH e068881bdb7e8693e85163c909f3ccf2

PERMHASH d8ee64b2f56b40f555d10c538be2736e28f6f65d5eefe9756244e329ab08aea4

File Intelligence

Type Description Android Human-friendly file type name based on multiple detection methods.

Type Extension apk Most likely file extension inferred from the content.

Type Tag android Primary type tag assigned by the classifier.

Type Tags executable, mobile, android, apk Additional type tags that describe the file content.

Magic Java archive data (JAR) File signature result from magic bytes inspection.

Magika APK File type predicted by Magika (ML-based file type detection).

TrID Android Package (53.4%), Java Archive (26.7%), Windows Media Player skin (11.8%), ZIP compressed archive (7.9%) TrID file type guesses with probabilities.

dhash 000000000e0f0400 Perceptual hash used to compare visual similarity of files.

raw md5 ee24b98f65244fee636122b0542494f7 Raw MD5 hash of the file contents.

extensions png (312), xml (244), jsc (60), so (5), dex (2), json (2), manifest (2), arsc (1), jar (1), jpp (1), js (1), md (1), MF (1), mp4 (1), RSA (1), SF (1), txt (1), wav (1) File extensions found inside the APK and how many of each.

file types PNG (312), XML (244), unknown (75), ELF (5), DEX (2), JavaScript (1), ZIP (1) Detected embedded file types and their counts.

highest datetime 2026-05-20 12:18:28 UTC Latest timestamp found among files inside the archive.

lowest datetime 2019-07-30 17:57:04 UTC Earliest timestamp found among files inside the archive.

num children 640 Number of files contained within the archive.

type APK Container type detected for the analyzed file.

uncompressed size 36 MB Estimated total size of all files after extraction.

Deep Manifest Analysis

Activity Intents (2)

cn.jpush.android.ui.PushActivity

Actions

cn.jpush.android.ui.PushActivity cn.jpush.android.ui.PushActivity

Service Intents (2)

cn.jpush.android.service.DaemonService

Actions

cn.jpush.android.intent.DaemonService cn.jpush.android.intent.DaemonService

cn.jpush.android.service.PushService

Actions

cn.jpush.android.intent.REGISTER cn.jpush.android.intent.REGISTER

cn.jpush.android.intent.REPORT cn.jpush.android.intent.REPORT

cn.jpush.android.intent.PushService cn.jpush.android.intent.PushService

cn.jpush.android.intent.PUSH_TIME cn.jpush.android.intent.PUSH_TIME

Receiver Intents (1)

cn.jpush.android.service.PushReceiver

Actions

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY

User Present Broadcast Action: Sent when the user is present after device wakes up (e.g when the android.intent.action.USER_PRESENT

android.net.conn.CONNECTIVITY_CHANGE android.net.conn.CONNECTIVITY_CHANGE

Package Added Broadcast Action: A new application package has been installed on the android.intent.action.PACKAGE_ADDED

Package Removed Broadcast Action: An existing application package has been removed from android.intent.action.PACKAGE_REMOVED

Native Libraries (5)

libBugly libBugly.so

libcocos2djs libcocos2djs.so

libjcore123 libjcore123.so

libmp3lame libmp3lame.so

libpl_droidsonroids_gif libpl_droidsonroids_gif.so

Requested Permissions (10)

have full network access Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet. android.permission.INTERNET

control vibration Allows the app to control the vibrator. android.permission.VIBRATE

view network connections Allows the app to view information about network connections such as which networks exist and are connected. android.permission.ACCESS_NETWORK_STATE

view Wi-Fi connections Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices. android.permission.ACCESS_WIFI_STATE

modify or delete the contents of your shared storage Allows the app to write the contents of your shared storage. android.permission.WRITE_EXTERNAL_STORAGE

read the contents of your shared storage Allows the app to read the contents of your shared storage. android.permission.READ_EXTERNAL_STORAGE

record audio android.permission.RECORD_AUDIO

take pictures and videos This app can take pictures and record videos using the camera while the app is in use. android.permission.CAMERA

access approximate location only in the foreground This app can get your approximate location from location services while the app is in use. Location services for your device must be turned on for the app to get location. android.permission.ACCESS_COARSE_LOCATION

access precise location only in the foreground This app can get your precise location from location services while the app is in use. Location services for your device must be turned on for the app to get location. This may increase battery usage. android.permission.ACCESS_FINE_LOCATION

Uses Features (2)

Camera Feature for {@link #getSystemAvailableFeatures} and android.hardware.camera

Microphone Feature for {@link #getSystemAvailableFeatures} and android.hardware.microphone

Activities (6)

org.cocos2dx.javascript.AdsActivity

org.cocos2dx.javascript.AppActivity

com.differ.xiaoming.wxapi.WXEntryActivity

com.differ.xiaoming.apshare.ShareEntryActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

Services (2)

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

Broadcast Receivers (1)

cn.jpush.android.service.PushReceiver cn.jpush.android.service.PushReceiver

Content Providers (1)

cn.jpush.android.service.DownloadProvider

URL Endpoints (114)

http://119.29.29.29/d?dn= http://120.24.210.161:52234/gateway/red/dispatcher http://182.92.20.189:9099/ http://188.188.1.94:2018/api/gateway http://223.252.220.223/lbs/conf http://223.252.220.223/lbsrc/conf.jsp http://abroad.apilocate.amap.com/mobile/binary http://android.bugly.qq.com/rqd/async http://apilocate.amap.com/mobile/binary http://apilocatesrc.amap.com/mobile/binary http://appsupport.qq.com/cgi-bin/qzapps/mapp_addapp.cgi http://c.isdspeed.qq.com/code.cgi http://cfg.imtt.qq.com/tbs?v=2&mk= http://cgi.connect.qq.com/qqconnectopen/openapi/policy_conf http://cgicol.amap.com/collection/writedata?ver=v1.0_ali& http://da.qiyukf.netease.com http://da.ysf.space http://data.iapppay.com:8048/domain?dn=data.iapppay.com http://debugtbs.qq.com http://debugtbs.qq.com?10000 http://debugx5.qq.com http://developer.umeng.com/docs/66650/cate/66650 http://fusion.qq.com/cgi-bin/qzapps/unified_jump?appid=%1$s&from=%2$s&isOpenAppID=1 http://h5.m.taobao.com/trade/paySuccess.html?bizOrderId=$OrderId$& http://hydra.alibaba.com/ http://lbs.amap.com/api/android-location-sdk/guide/utilities/errorcode/ http://log.tbs.qq.com/ajax?c=dl&k= http://log.tbs.qq.com/ajax?c=pu&tk= http://log.tbs.qq.com/ajax?c=pu&v=2&k= http://log.tbs.qq.com/ajax?c=ucfu&k= http://log.tbs.qq.com/ajax?c=ul&v=2&k= http://m.alipay.com/?action=h5quit http://mcgw.alipay.com/sdklog.do http://mdc.html5.qq.com/mh?channel_id=50079&u= http://mobilegw-1-64.test.alipay.net/mgw.htm http://mobilegw.aaa.alipay.net/mgw.htm http://mobilegw.alipay.com/mgw.htm http://mobilegw.stable.alipay.net/mgw.htm http://mqqad.html5.qq.com/adjs http://openmobile.qq.com/oauth2.0/m_jump_by_version http://pms.mb.qq.com/rsp204 http://qiyukf.netease.com http://qydev.netease.com http://qzs.qq.com http://qzs.qq.com/open/mobile/invite/sdk_invite.html http://qzs.qq.com/open/mobile/login/qzsjump.html http://qzs.qq.com/open/mobile/request/sdk_request.html http://qzs.qq.com/open/mobile/sendstory/sdk_sendstory_v1.3.html http://restapi.amap.com http://restapi.amap.com/v3/config/district http://restapi.amap.com/v3/geocode/regeo http://restapi.amap.com/v3/iasdkauth http://restapi.amap.com/v3/place/around http://restapi.amap.com/v3/place/text http://rqd.uu.qq.com/rqd/sync http://sdk.e.qq.com/activate http://sdk.e.qq.com/err http://sdk.e.qq.com/launch http://soft.tbs.imtt.qq.com/17421/tbs_res_imtt_tbs_DebugPlugin_DebugPlugin.tbs http://wspeed.qq.com/w.cgi http://wup.imtt.qq.com:8080 http://www.meetqs.com/wap/share/index http://xiangliao.kaicd.com/share/shareWX http://xmlpull.org/v1/doc/features.html#indent-output http://ysf.space http://|https:// https://alogsus.umeng.com/unify_logs https://alogus.umeng.com/unify_logs https://api.weixin.qq.com/sns/oauth2/access_token?appid= https://api.weixin.qq.com/sns/userinfo?access_token= https://appsupport.qq.com/cgi-bin/appstage/mstats_batch_report https://cdn.jtcfgames.com/protocol/js3mj/download/Icon-57.png https://cmnsguider.yunos.com:443/genDeviceToken https://da.qiyukf.com https://data.iapppay.com/useractive https://developer.umeng.com/docs/66632/detail/ https://developer.umeng.com/docs/66632/detail/70018?um_channel=sdk https://dt.netease.im/api/getConfig https://dt.netease.im/api/updateInfo https://graph.qq.com/oauth2.0/me https://huatuocode.huatuo.qq.com https://iapppay-data.iapppay.com/useractive https://iapppay.halodigit.com https://ipay.iapppay.com https://lark.alipay.com/yj131525/byt0wl/ufnf3i#A10200 https://lbs.netease.im/lbs/conf.jsp https://mcgw.alipay.com/sdklog.do https://mclient.alipay.com/home/exterfaceAssign.htm https://mobilegw.alipay.com/mgw.htm https://mobilegw.alipaydev.com/mgw.htm https://nim.nosdn.127.net/ https://nim.qiyukf.com https://open.qingic.com/connect/appinfo https://open.qingic.com/connect/share https://openmobile.qq.com/ https://openmobile.qq.com/oauth2.0/m_authorize https://openmobile.qq.com/user/user_login_statis https://openmobile.qq.com/v3/user/get_info https://ouplog.umeng.com https://paygate-yf.meituan.com/paygate/notify/alipay/paynotify/simple https://payment.iapppay.com https://plbslog.umeng.com https://qy-swallow.qiyukf.com https://restapi.amap.com/v3/iasdkauth https://ssgw.updrips.com/oauth2/accessToken https://ssgw.updrips.com/oauth2/checkAppInfo https://ssgw.updrips.com/resource/user/getUserInfo https://tsis.jpush.cn https://ulogs.umeng.com/unify_logs https://ulogs.umengcloud.com/unify_logs https://wanproxy.127.net/lbs https://wappaygw.alipay.com/home/exterfaceAssign.htm https://wspeed.qq.com/w.cgi https://www.jtcfgame.com

Submission Details

Submitted At 2026-05-20

First Submission 2026-05-20

Last Submission 2026-05-20

Stored Until 2026-06-19

Names & Tags

mjclient20260520beta.apk android contains-elf apk obfuscated checks-gps telephony checks-cpu-name checks-network-adapters detect-debug-environment reflection