APK Security & Privacy Score
Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.
Security
Scan-weighted
71/100
Threat scan flagged
Debuggable build
Privacy
Permissions & network
78/100
High-risk permissions
HTTP URLs found
AllowBackup enabled
Possible tracking
74/100
Caution
Overall trust
Facts
Threat scan
3/75 flagged, 0 suspicious
Permissions
32 requested
Network strings
32 URLs (5 HTTP, 27 HTTPS)
Target SDK
33
Certificate
Valid until 2055-04-07 (29 years, suspicious)
Warnings
Threat scan flagged: 3/75 scanners marked this file as malicious.
Found 5 HTTP URL strings (unencrypted).
High-risk permissions detected: android.permission.RECEIVE_BOOT_COMPLETED
Requests 32 permissions (review carefully).
AllowBackup is enabled.
Possible analytics/tracking domains found: app.adjust.com, app.adjust.io, gdpr.adjust.com, gdpr.adjust.io, pagead2.googlesyndication.com
Package Name
com.ind.appb9mega1
Version Code
59
Version Name
1.0.59
Application Name
com.ind.appb9mega1.MyApplication
Debuggable
Yes
Allow Backup
Yes
Min SDK
Android 22 (Lollipop)
Target SDK
Android 33 (Android 13)
Supported ABIs
arm64-v8a
armeabi-v7a
x86
x86_64
Certificate & Signer
Valid From
Valid To
Serial Number
Thumbprint
Issuer: C
Issuer: CN
Issuer: DN
Issuer: O
Subject: C
Subject: CN
Subject: DN
Subject: O
Security Scan
3
⚠️ Threats Detected
Detected by
3 vendors:
AhnLab-V3
(PUP/Android.Agent.1202236), Google
(Detected), Ikarus
(Trojan-Spy.AndroidOS.Joker)
Malicious
3
Suspicious
0
Harmless
0
Undetected
60
Timeout
3
Failure
1
Scan Providers
ALYac
APEX
AVG
Acronis
AhnLab-V3
PUP/Android.Agent.1202236
Alibaba
Antiy-AVL
Arcabit
Avast
Avast-Mobile
Avira
BitDefender
BitDefenderFalx
Bkav
CAT-QuickHeal
CMC
CTX
ClamAV
CrowdStrike
Cylance
Cynet
DeepInstinct
DrWeb
ESET-NOD32
Elastic
Emsisoft
F-Secure
Fortinet
GData
Google
Detected
Gridinsoft
Ikarus
Trojan-Spy.AndroidOS.Joker
Jiangmin
K7AntiVirus
K7GW
Kaspersky
Kingsoft
Lionic
Malwarebytes
MaxSecure
McAfeeD
MicroWorld-eScan
Microsoft
NANO-Antivirus
Paloalto
Panda
Rising
SUPERAntiSpyware
Sangfor
SentinelOne
Skyhigh
Sophos
Symantec
SymantecMobileInsight
TACHYON
Tencent
Trapmine
TrellixENS
TrendMicro
TrendMicro-HouseCall
Trustlook
VBA32
VIPRE
Varist
ViRobot
VirIT
Webroot
Xcitium
Yandex
Zillya
ZoneAlarm
Zoner
alibabacloud
huorong
tehtris
File Signatures
SHA-256
a9eff4719bca744e0df12e7a8e3f2bd5e4c1c4ef1f0da96ba268dca81d63fcdb
MD5
ddc5f3bc0b3ab7a354742319d92e80af
SHA-1
3b59c1af827437bf24baeb328c57dd5efda5e194
SSDEEP
786432:/qiYAMoIWQIFzaU+xOV2jFjvz+CpvhnovHdW0ujU8bTbLeR9KcG3t4R/:/qiYAlbQizw53pvcHdWNTbKRkPdA/
TLSH
T165A73327FB85981AF1F396325BA18156A1078D10C747E28395307B7C7DBBAC80B49EF9
VHASH
cfa44e8750f1c5ab99db5ad80ce57f65
PERMHASH
46df4000fda6089ba87a9d978454b347a7c508b55d2fb3a9530faa9f40043d99
File Intelligence
Type Description
Human-friendly file type name based on multiple detection methods.
Type Extension
Most likely file extension inferred from the content.
Type Tag
Primary type tag assigned by the classifier.
Type Tags
Additional type tags that describe the file content.
Magic
File signature result from magic bytes inspection.
Magika
File type predicted by Magika (ML-based file type detection).
TrID
TrID file type guesses with probabilities.
dhash
Perceptual hash used to compare visual similarity of files.
raw md5
Raw MD5 hash of the file contents.
extensions
File extensions found inside the APK and how many of each.
file types
Detected embedded file types and their counts.
highest datetime
Latest timestamp found among files inside the archive.
lowest datetime
Earliest timestamp found among files inside the archive.
num children
Number of files contained within the archive.
type
Container type detected for the analyzed file.
uncompressed size
Estimated total size of all files after extraction.
Deep Manifest Analysis
Activity Intents (2)
com.ind.appb9mega1.MainActivity
com.onesignal.NotificationOpenedActivityHMS
Service Intents (2)
Firebase messaging service
com.google.firebase.messaging.FirebaseMessagingService
OneSignal Huawei messaging service
com.onesignal.notifications.services.HmsMessageServiceOneSignal
Receiver Intents (13)
Profile installer
androidx.profileinstaller.ProfileInstallReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
Work rescheduler
androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
com.adjust.sdk.AdjustReferrerReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.onesignal.notifications.receivers.BootUpReceiver
com.onesignal.notifications.receivers.FCMBroadcastReceiver
com.onesignal.notifications.receivers.UpgradeReceiver
Native Libraries (1)
libsigner
libsigner.so
Requested Permissions (32)
have full network access
android.permission.INTERNET
view network connections
android.permission.ACCESS_NETWORK_STATE
read the contents of your shared storage
android.permission.READ_EXTERNAL_STORAGE
modify or delete the contents of your shared storage
android.permission.WRITE_EXTERNAL_STORAGE
read phone status and identity
android.permission.READ_PHONE_STATE
Use Credentials
android.permission.USE_CREDENTIALS
com.google.android.gms.permission.AD_ID
com.google.android.gms.permission.AD_ID
Cloud messaging
com.ind.appb9mega1.permission.C2D_MESSAGE
android.permission.POST_NOTIFICATIONS
android.permission.POST_NOTIFICATIONS
keep car screen turned on
android.permission.WAKE_LOCK
Cloud messaging receive
com.google.android.c2dm.permission.RECEIVE
control vibration
android.permission.VIBRATE
run at startup
android.permission.RECEIVE_BOOT_COMPLETED
App badge update
com.sec.android.provider.badge.permission.READ
App badge update
com.sec.android.provider.badge.permission.WRITE
App badge update
com.htc.launcher.permission.READ_SETTINGS
App badge update
com.htc.launcher.permission.UPDATE_SHORTCUT
App badge update
com.sonyericsson.home.permission.BROADCAST_BADGE
App badge update
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
App badge update
com.anddoes.launcher.permission.UPDATE_COUNT
App badge update
com.majeur.launcher.permission.UPDATE_BADGE
App badge update
com.huawei.android.launcher.permission.CHANGE_BADGE
App badge update
com.huawei.android.launcher.permission.READ_SETTINGS
App badge update
com.huawei.android.launcher.permission.WRITE_SETTINGS
App badge update
android.permission.READ_APP_BADGE
App badge update
com.oppo.launcher.permission.READ_SETTINGS
App badge update
com.oppo.launcher.permission.WRITE_SETTINGS
App badge update
me.everything.badger.permission.BADGE_COUNT_READ
App badge update
me.everything.badger.permission.BADGE_COUNT_WRITE
Install Referrer service
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
Foreground service
android.permission.FOREGROUND_SERVICE
Dynamic receiver access
com.ind.appb9mega1.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Activities (7)
com.ind.appb9mega1.MainActivity
com.onesignal.NotificationOpenedActivityHMS
com.onesignal.notifications.activities.NotificationOpenedActivity
com.onesignal.notifications.activities.NotificationOpenedActivityAndroid22AndOlder
com.onesignal.core.activities.PermissionsActivity
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
com.google.android.gms.common.api.GoogleApiActivity
Services (11)
OneSignal Huawei messaging service
com.onesignal.notifications.services.HmsMessageServiceOneSignal
com.onesignal.core.services.SyncJobService
com.google.android.gms.auth.api.signin.RevocationBoundService
Firebase messaging service
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.components.ComponentDiscoveryService
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
Broadcast Receivers (16)
com.adjust.sdk.AdjustReferrerReceiver
com.adjust.sdk.AdjustReferrerReceiver
com.onesignal.notifications.receivers.FCMBroadcastReceiver
com.onesignal.notifications.receivers.FCMBroadcastReceiver
com.onesignal.notifications.receivers.NotificationDismissReceiver
com.onesignal.notifications.receivers.NotificationDismissReceiver
com.onesignal.notifications.receivers.BootUpReceiver
com.onesignal.notifications.receivers.BootUpReceiver
com.onesignal.notifications.receivers.UpgradeReceiver
com.onesignal.notifications.receivers.UpgradeReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
Work rescheduler
androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
Profile installer
androidx.profileinstaller.ProfileInstallReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
Content Providers (4)
androidx.core.content.FileProvider
com.adjust.sdk.SystemLifecycleContentProvider
com.google.firebase.provider.FirebaseInitProvider
androidx.startup.InitializationProvider
URL Endpoints (33)
http://$uri
http://portal.toushibao.com
http://portal.toushibao.com/api/v2/mobile/sdk/user_info
http://portal.toushibao.com/api/v2/mobile/setting
http://portal.toushibao.com/api/v2/mobile/timestamp
https://*/*
https://accounts.google.com/o/oauth2/revoke?token=
https://api.onesignal.com/
https://app
https://app.adjust.com
https://app.adjust.io
https://capacitorjs.com/docs/apis/splash-screen#hiding-the-splash-screen
https://firebase.google.com/support/privacy/init-options
https://gdpr
https://gdpr.adjust.com
https://gdpr.adjust.io
https://github.com/adjust/android_sdk#can-i-trigger-an-event-at-application-launch
https://issuetracker.google.com/issues/new?component=413107&template=1096568
https://pagead2.googlesyndication.com/pagead/gen_204?id=gmob-apps
https://plus.google.com/
Submission Details
Submitted At
First Submission
Last Submission
Stored Until