APK Security & Privacy Score
Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.
Security
Scan-weighted
93/100
Threat scan clean
Outdated target SDK
Privacy
Permissions & network
78/100
High-risk permissions
HTTP URLs found
85/100
Good
Overall trust
Facts
Threat scan
0/75 flagged, 0 suspicious
Permissions
21 requested
Network strings
23 URLs (5 HTTP, 18 HTTPS)
Target SDK
26
Certificate
Valid until 2125-10-07 (99 years, suspicious)
Warnings
Found 5 HTTP URL strings (unencrypted).
High-risk permissions detected: android.permission.REQUEST_INSTALL_PACKAGES
Package Name
com.jucaishangfu.gtong
Version Code
153
Version Name
1.1.4
Application Name
io.dcloud.application.DCloudApplication
Debuggable
No
Allow Backup
No
Min SDK
Android 21 (Lollipop)
Target SDK
Android 26 (Oreo)
Supported ABIs
arm64-v8a
armeabi-v7a
x86
Certificate & Signer
Valid From
Valid To
Serial Number
Thumbprint
Issuer: C
Issuer: CN
Issuer: DN
Issuer: O
Issuer: OU
Subject: C
Subject: CN
Subject: DN
Subject: O
Subject: OU
Security Scan
0
✓ Clean
Malicious
0
Suspicious
0
Harmless
0
Undetected
66
Timeout
1
Failure
1
Scan Providers
ALYac
APEX
AVG
Acronis
AhnLab-V3
Alibaba
Antiy-AVL
Arcabit
Avast
Avast-Mobile
Avira
BitDefender
BitDefenderFalx
Bkav
CAT-QuickHeal
CMC
CTX
ClamAV
CrowdStrike
Cylance
Cynet
DeepInstinct
DrWeb
ESET-NOD32
Elastic
Emsisoft
F-Secure
Fortinet
GData
Google
Gridinsoft
Ikarus
Jiangmin
K7AntiVirus
K7GW
Kaspersky
Kingsoft
Lionic
Malwarebytes
MaxSecure
McAfeeD
MicroWorld-eScan
Microsoft
NANO-Antivirus
Paloalto
Panda
Rising
SUPERAntiSpyware
Sangfor
SentinelOne
Skyhigh
Sophos
Symantec
SymantecMobileInsight
TACHYON
Tencent
Trapmine
TrellixENS
TrendMicro
TrendMicro-HouseCall
Trustlook
VBA32
VIPRE
Varist
ViRobot
VirIT
Webroot
Xcitium
Yandex
Zillya
ZoneAlarm
Zoner
alibabacloud
huorong
tehtris
File Signatures
SHA-256
e19e45574c133f5f0de5262b49de1ddc4a4fdc477932151ddcee9b7f87b2659b
MD5
7ac3a55a2bf60a010dbd8cf55e5b2e69
SHA-1
021f1fcf5307636b4c91e56eb59611f7473f9efc
SSDEEP
786432:Nx9gMWO2RhySbNlBEgZjznpRg8icj63i1R7kqcjZMqk:NxebdXyShQOj7g8P6WRaMqk
TLSH
T104673356E369D62FEDB311364E968E3527908E4846829B0631ECBA7C2573ACC0FD5FC4
VHASH
18aa0e51329c02d33ced36385e1f603e
PERMHASH
393df91b7bfee28a3c8b5746210f7ecba73e5cbfbe9e0825e818c2cffa39e604
File Intelligence
Type Description
Human-friendly file type name based on multiple detection methods.
Type Extension
Most likely file extension inferred from the content.
Type Tag
Primary type tag assigned by the classifier.
Type Tags
Additional type tags that describe the file content.
Magic
File signature result from magic bytes inspection.
Magika
File type predicted by Magika (ML-based file type detection).
TrID
TrID file type guesses with probabilities.
dhash
Perceptual hash used to compare visual similarity of files.
raw md5
Raw MD5 hash of the file contents.
extensions
File extensions found inside the APK and how many of each.
file types
Detected embedded file types and their counts.
highest datetime
Latest timestamp found among files inside the archive.
lowest datetime
Earliest timestamp found among files inside the archive.
num children
Number of files contained within the archive.
type
Container type detected for the analyzed file.
uncompressed size
Estimated total size of all files after extraction.
Deep Manifest Analysis
Activity Intents (1)
io.dcloud.PandoraEntry
Service Intents (2)
com.jucai.jcplugin_cardpay.service.A8sDeviceService
com.jucai.jcplugin_cardpay.service.DeviceService
Receiver Intents (1)
Profile installer
androidx.profileinstaller.ProfileInstallReceiver
Native Libraries (15)
lib39285EFA
lib39285EFA.so
Breakpad Crash Reporter
libbreakpad-core.so
libdcblur
libdcblur.so
libgifimage
libgifimage.so
libimagepipeline
libimagepipeline.so
liblamemp3
liblamemp3.so
libnative-filters
libnative-filters.so
libnative-imagetranscoder
libnative-imagetranscoder.so
libpl_droidsonroids_gif
libpl_droidsonroids_gif.so
libstatic-webp
libstatic-webp.so
libuts-runtime
libuts-runtime.so
libweexcore
libweexcore.so
libweexjsb
libweexjsb.so
libweexjss
libweexjss.so
libweexjst
libweexjst.so
Requested Permissions (22)
modify or delete the contents of your shared storage
android.permission.WRITE_EXTERNAL_STORAGE
read phone status and identity
android.permission.READ_PHONE_STATE
read the contents of your shared storage
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.READ_MEDIA_VIDEO
android.permission.READ_MEDIA_VISUAL_USER_SELECTED
android.permission.READ_MEDIA_VISUAL_USER_SELECTED
have full network access
android.permission.INTERNET
view network connections
android.permission.ACCESS_NETWORK_STATE
App badge update
com.huawei.android.launcher.permission.CHANGE_BADGE
App badge update
com.vivo.notification.permission.BADGE_ICON
com.asus.msa.SupplementaryDID.ACCESS
take pictures and videos
android.permission.CAMERA
android.permission.BIND_DEVICE_SERVICE
android.permission.BIND_DEVICE_SERVICE
Foreground service
android.permission.FOREGROUND_SERVICE
keep car screen turned on
android.permission.WAKE_LOCK
com.usdk.printer.perm.NORMAL_FUNC
Dynamic receiver access
com.jucaishangfu.gtong.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
view Wi-Fi connections
android.permission.ACCESS_WIFI_STATE
Install Packages
android.permission.INSTALL_PACKAGES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_INSTALL_PACKAGES
control Near Field Communication
android.permission.NFC
Activities (11)
io.dcloud.PandoraEntry
io.dcloud.PandoraEntryActivity
io.dcloud.feature.nativeObj.photoview.PhotoActivity
io.dcloud.WebAppActivity
io.dcloud.ProcessMediator
io.dcloud.WebviewActivity
com.dmcbig.mediapicker.PickerActivity
com.dmcbig.mediapicker.PreviewActivity
io.dcloud.feature.gallery.imageedit.IMGEditActivity
io.dcloud.sdk.activity.WebViewActivity
uts.sdk.modules.DCloudUniMedia.SystemPickerActivity
Services (4)
io.dcloud.sdk.base.service.DownloadService
cn.postar.sdk.service.PostarService
com.jucai.jcplugin_cardpay.service.DeviceService
com.jucai.jcplugin_cardpay.service.A8sDeviceService
Broadcast Receivers (2)
com.taobao.weex.WXGlobalEventReceiver
com.taobao.weex.WXGlobalEventReceiver
Profile installer
androidx.profileinstaller.ProfileInstallReceiver
Content Providers (5)
io.dcloud.common.util.DCloud_FileProvider
io.dcloud.sdk.base.service.provider.DCloudAdFileProvider
com.jucai.jcplugin_cardpay.MyProvider
androidx.core.content.FileProvider
androidx.startup.InitializationProvider
URL Endpoints (23)
http://netty.io/wiki/forked-tomcat-native.html
http://netty.io/wiki/reference-counted-objects.html
http://netty.io/wiki/sslcontextbuilder-and-private-key.html
http://www.android.com/
http://www.eclipse.org/jetty/documentation/current/alpn-chapter.html#alpn-starting
https://ask.dcloud.net.cn/article/282
https://ask.dcloud.net.cn/article/283
https://ask.dcloud.net.cn/article/287
https://ask.dcloud.net.cn/article/35058
https://ask.dcloud.net.cn/article/35627
https://ask.dcloud.net.cn/article/35877
https://ask.dcloud.net.cn/article/36199
https://er.dcloud.io/rv
https://er.dcloud.io/sc
https://er.dcloud.net.cn/rv
https://er.dcloud.net.cn/sc
https://m3w.cn/s/
https://mch-dev.jucaishangfu.com/dev-api/
https://tools.ietf.org/html/rfc7540#section-8.1.2.3
https://wiki.eclipse.org/Jetty/Feature/NPN
Submission Details
Submitted At
First Submission
Last Submission
Stored Until
Other Versions
巨彩付收银台
1.1.5 (160)
View report