jcpos_V1.1.5_online.apk

巨彩付收银台

30.36 MB

Analyzed: 2026-06-03 05:59 UTC

Twitter / X Facebook LinkedIn WhatsApp Telegram Reddit

Analyze Another

APK Security & Privacy Score

Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.

Security Scan-weighted

93/100

Threat scan clean Outdated target SDK

Privacy Permissions & network

78/100

High-risk permissions HTTP URLs found

85/100

Good

Overall trust

Facts

Threat scan 0/75 flagged, 0 suspicious

Permissions 22 requested

Network strings 21 URLs (4 HTTP, 17 HTTPS)

Target SDK 26

Certificate Valid until 2125-10-07 (99 years, suspicious)

Warnings

Found 4 HTTP URL strings (unencrypted).

High-risk permissions detected: android.permission.REQUEST_INSTALL_PACKAGES

Package Name com.jucaishangfu.gtong

Version Code 160

Version Name 1.1.5

Application Name io.dcloud.application.DCloudApplication

Debuggable No

Allow Backup No

Min SDK Android 21 (Lollipop)

Target SDK Android 26 (Oreo)

Supported ABIs

arm64-v8a armeabi-v7a x86

Certificate & Signer

Valid From 2025-10-31 06:26:03

Valid To 2125-10-07 06:26:03

Serial Number 583b88fd

Thumbprint e4af63c6fed9e0e153070c29b4ab93d72b47e568

Issuer: C CN

Issuer: CN JC

Issuer: DN C:CN, CN:JC, O:JC, OU:IT

Issuer: O JC

Issuer: OU IT

Subject: C CN

Subject: CN JC

Subject: DN C:CN, CN:JC, O:JC, OU:IT

Subject: O JC

Subject: OU IT

Security Scan

0 /75

✓ Clean

Scanned by 75 security vendors

Last scan: 2026-06-03 05:59 UTC

Malicious

Suspicious

Harmless

Undetected

Timeout

Failure

Scan Providers

75 vendors

ALYac undetected

No result reported

Engine 2.0.0.10

APEX type-unsupported

No result reported

Engine 6.783

AVG undetected

No result reported

Engine 23.9.8494.0

Acronis undetected

No result reported

Engine 1.2.0.121

AhnLab-V3 undetected

No result reported

Engine 3.30.0.10666

Alibaba undetected

No result reported

Engine 0.3.0.5

Antiy-AVL undetected

No result reported

Engine 3.0

Arcabit undetected

No result reported

Engine 2025.0.0.23

Avast undetected

No result reported

Engine 23.9.8494.0

Avast-Mobile undetected

No result reported

Engine 260602-00

Avira undetected

No result reported

Engine 8.3.3.24

BitDefender undetected

No result reported

Engine 7.2

BitDefenderFalx undetected

No result reported

Engine 2.0.936

Bkav undetected

No result reported

Engine 8.2.40(8338)

CAT-QuickHeal undetected

No result reported

Engine 22.00

CMC undetected

No result reported

Engine 2.4.2022.1

CTX undetected

No result reported

Engine 2024.8.29.1

ClamAV timeout

No result reported

Engine 1.5.2.0

CrowdStrike undetected

No result reported

Engine 1.0

Cylance type-unsupported

No result reported

Engine 3.0.0.0

Cynet type-unsupported

No result reported

Engine 4.0.3.4

DeepInstinct type-unsupported

No result reported

Engine 5.0.0.8

DrWeb undetected

No result reported

Engine 7.0.75.2070

ESET-NOD32 undetected

No result reported

Engine 18.2.18.0

Elastic undetected

No result reported

Engine 4.0.264

Emsisoft undetected

No result reported

Engine 2024.8.0.61147

F-Secure undetected

No result reported

Engine 18.10.1547.307

Fortinet undetected

No result reported

Engine 7.0.48.0

GData undetected

No result reported

Engine GD:27.44773AVA:64.31357

Google undetected

No result reported

Engine 1780462870

Gridinsoft undetected

No result reported

Engine 1.0.247.174

Ikarus failure

No result reported

Engine 6.5.4.0

Jiangmin undetected

No result reported

Engine 16.0.100

K7AntiVirus undetected

No result reported

Engine 14.55.59696

K7GW timeout

No result reported

Engine 14.55.59696

Kaspersky undetected

No result reported

Engine 22.0.1.28

Kingsoft undetected

No result reported

Engine None

Lionic undetected

No result reported

Engine 8.16

Malwarebytes undetected

No result reported

Engine 3.1.0.238

MaxSecure timeout

No result reported

Engine 1.0.0.1

McAfeeD undetected

No result reported

Engine 1.2.0.14833

MicroWorld-eScan undetected

No result reported

Engine 14.0.409.0

Microsoft undetected

No result reported

Engine 1.1.26040.8

NANO-Antivirus undetected

No result reported

Engine 1.0.170.26895

Paloalto type-unsupported

No result reported

Engine 0.9.0.1003

Panda undetected

No result reported

Engine 4.6.4.2

Rising undetected

No result reported

Engine 25.0.0.28

SUPERAntiSpyware undetected

No result reported

Engine 5.6.0.1032

Sangfor undetected

No result reported

Engine 2.22.3.0

SentinelOne undetected

No result reported

Engine 7.6.2.19

Skyhigh undetected

No result reported

Engine v2021.2.0+4045

Sophos undetected

No result reported

Engine 3.5.1.0

Symantec undetected

No result reported

Engine 1.22.0.0

SymantecMobileInsight undetected

No result reported

Engine 2.0

TACHYON undetected

No result reported

Engine 2026-06-03.01

Tencent undetected

No result reported

Engine 1.0.0.1

Trapmine type-unsupported

No result reported

Engine 4.0.12.0

TrellixENS undetected

No result reported

Engine 6.0.6.653

TrendMicro timeout

No result reported

Engine 24.550.0.1002

TrendMicro-HouseCall undetected

No result reported

Engine 24.550.0.1002

Trustlook undetected

No result reported

Engine 1.0

VBA32 timeout

No result reported

VIPRE undetected

No result reported

Engine 6.0.0.35

Varist timeout

No result reported

Engine 6.6.1.3

ViRobot undetected

No result reported

Engine 2014.3.20.0

VirIT undetected

No result reported

Engine 9.5.1219

Webroot undetected

No result reported

Engine 1.9.0.8

Xcitium undetected

No result reported

Engine 38696

Yandex undetected

No result reported

Engine 5.5.2.24

Zillya undetected

No result reported

Engine 2.0.0.5613

ZoneAlarm undetected

No result reported

Engine 6.25-116107230

Zoner undetected

No result reported

Engine 2.2.2.0

alibabacloud type-unsupported

No result reported

Engine 2.2.0

huorong undetected

No result reported

Engine c4d26dc:c4d26dc:7d44d68:7d44d68

tehtris type-unsupported

No result reported

Engine v0.1.4

File Signatures

SHA-256 3b96d2b03af5fe469f0a2bafa4ca828b4126f65029df08f458a6f29d8a6254a5

MD5 86632c57df8115e2646093eedbddecc8

SHA-1 856cf2c5922ab3b28752df87be48e2b680877fb1

SSDEEP 786432:fZhsXOobIZoGhxjjOoTgZjznpRg8icj63i1R7kqcjZMn7:zIOcGoGhxjjxTOj7g8P6WRaM7

TLSH T1B2673386E378C62FF97715754F968A32E7604D8802839BCA21DCBA7921B36C80F55FC5

VHASH 6a03725770cd7866ce42f9756057eee8

PERMHASH ef036af319073dd36b03d21f460e41ee7aeb64c60e183f43645efcdfdebb6c71

File Intelligence

Type Description Android Human-friendly file type name based on multiple detection methods.

Type Extension apk Most likely file extension inferred from the content.

Type Tag android Primary type tag assigned by the classifier.

Type Tags executable, mobile, android, apk Additional type tags that describe the file content.

Magic Zip archive data, at least v0.0 to extract, compression method=deflate File signature result from magic bytes inspection.

Magika APK File type predicted by Magika (ML-based file type detection).

TrID Android Package (49%), Java Archive (24.5%), Sweet Home 3D Design (generic) (19%), ZIP compressed archive (7.2%) TrID file type guesses with probabilities.

dhash 0000001e1e0c0908 Perceptual hash used to compare visual similarity of files.

raw md5 d1b24ff4a62cb4a4a65af73909ddd3a6 Raw MD5 hash of the file contents.

extensions png (448), xml (305), so (45), version (31), mp3 (20), js (17), kotlin_builtins (8), json (7), dex (4), properties (4), gif (3), gz (2), html (2), ttf (2), arsc (1), AutoDiscoverable (1), bin (1), BuiltInsLoader (1), CoroutineExceptionHandler (1), css (1), dat (1), ExternalOverridabilityCondition (1), jpg (1), LIST (1), MainDispatcherFactory (1), MessageBodyReader (1), MessageBodyWriter (1), MetadataExtensions (1), MF (1), ogg (1), prof (1), profm (1), Provider (1), Providers (1), RSA (1), SF (1), textproto (1), txt (1) File extensions found inside the APK and how many of each.

file types PNG (448), XML (305), unknown (89), ELF (45), MP3 (20), DEX (3), GIF (3), JSON (3), HTML (2), Java Bytecode (1), JavaScript (1), JPG (1), OGG (1) Detected embedded file types and their counts.

highest datetime 1981-01-01 01:01:02 UTC Latest timestamp found among files inside the archive.

lowest datetime 1981-01-01 01:01:02 UTC Earliest timestamp found among files inside the archive.

num children 922 Number of files contained within the archive.

type APK Container type detected for the analyzed file.

uncompressed size 75 MB Estimated total size of all files after extraction.

Sandbox

Sandbox Verdicts

Zenbox android

Harmless 96% confidence CLEAN

Deep Manifest Analysis

Activity Intents (1)

io.dcloud.PandoraEntry

Actions

Main Activity Action: Start as a main entry point, does not expect to android.intent.action.MAIN

View Activity Action: Display the data to the user. android.intent.action.VIEW

Service Intents (2)

com.jucai.jcplugin_cardpay.service.A8sDeviceService

Actions

com.usdk.apiservice com.usdk.apiservice

com.jucai.jcplugin_cardpay.service.DeviceService

Actions

com.newland.DeviceService com.newland.DeviceService

Receiver Intents (1)

Profile installer Installs performance profiles to speed up app startup and hot paths. androidx.profileinstaller.ProfileInstallReceiver

Actions

Install performance profile Installs a profile that helps optimize app performance. androidx.profileinstaller.action.INSTALL_PROFILE

Skip profile install Skips profile installation for this build. androidx.profileinstaller.action.SKIP_FILE

Save performance profile Saves a profile generated during app usage. androidx.profileinstaller.action.SAVE_PROFILE

Benchmark operation Runs a profile installer benchmark operation. androidx.profileinstaller.action.BENCHMARK_OPERATION

Native Libraries (15)

lib39285EFA lib39285EFA.so

Breakpad Crash Reporter Crash reporting library that captures diagnostic minidumps. libbreakpad-core.so

libdcblur libdcblur.so

libgifimage libgifimage.so

libimagepipeline libimagepipeline.so

liblamemp3 liblamemp3.so

libnative-filters libnative-filters.so

libnative-imagetranscoder libnative-imagetranscoder.so

libpl_droidsonroids_gif libpl_droidsonroids_gif.so

libstatic-webp libstatic-webp.so

libuts-runtime libuts-runtime.so

libweexcore libweexcore.so

libweexjsb libweexjsb.so

libweexjss libweexjss.so

libweexjst libweexjst.so

Requested Permissions (23)

modify or delete the contents of your shared storage Allows the app to write the contents of your shared storage. android.permission.WRITE_EXTERNAL_STORAGE

read phone status and identity Allows the app to access the phone features of the device. This permission allows the app to determine the phone number and device IDs, whether a call is active, and the remote number connected by a call. android.permission.READ_PHONE_STATE

read the contents of your shared storage Allows the app to read the contents of your shared storage. android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES Custom app or vendor permission (not publicly documented). android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO Custom app or vendor permission (not publicly documented). android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED Custom app or vendor permission (not publicly documented). android.permission.READ_MEDIA_VISUAL_USER_SELECTED

have full network access Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet. android.permission.INTERNET

view network connections Allows the app to view information about network connections such as which networks exist and are connected. android.permission.ACCESS_NETWORK_STATE

App badge update Allows the app to update the launcher icon badge count on Huawei launchers. com.huawei.android.launcher.permission.CHANGE_BADGE

App badge update Allows the app to update the launcher icon badge count on launcher launchers. com.vivo.notification.permission.BADGE_ICON

com.asus.msa.SupplementaryDID.ACCESS

android.permission.BIND_DEVICE_SERVICE Custom app or vendor permission (not publicly documented). android.permission.BIND_DEVICE_SERVICE

Foreground service Allows the app to run a foreground service. android.permission.FOREGROUND_SERVICE

keep car screen turned on Allows the app to keep the car screen turned on. android.permission.WAKE_LOCK

com.usdk.scanner.perm.NORMAL_FUNC

com.usdk.innerscanner.perm.NORMAL_FUNC

Dynamic receiver access Internal app permission used to protect dynamic broadcast receivers. com.jucaishangfu.gtong.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

view Wi-Fi connections Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices. android.permission.ACCESS_WIFI_STATE

Install Packages android.permission.INSTALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES Custom app or vendor permission (not publicly documented). android.permission.REQUEST_INSTALL_PACKAGES

take pictures and videos This app can take pictures and record videos using the camera while the app is in use. android.permission.CAMERA

control Near Field Communication Allows the app to communicate with Near Field Communication (NFC) tags, cards, and readers. android.permission.NFC

Activities (10)

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.WebAppActivity

io.dcloud.ProcessMediator

io.dcloud.WebviewActivity

com.dmcbig.mediapicker.PickerActivity

com.dmcbig.mediapicker.PreviewActivity

io.dcloud.feature.gallery.imageedit.IMGEditActivity

io.dcloud.sdk.activity.WebViewActivity

Services (4)

io.dcloud.sdk.base.service.DownloadService

cn.postar.sdk.service.PostarService

com.jucai.jcplugin_cardpay.service.DeviceService

com.jucai.jcplugin_cardpay.service.A8sDeviceService

Broadcast Receivers (2)

com.taobao.weex.WXGlobalEventReceiver com.taobao.weex.WXGlobalEventReceiver

Profile installer Installs performance profiles to speed up app startup and hot paths. androidx.profileinstaller.ProfileInstallReceiver

Content Providers (5)

io.dcloud.common.util.DCloud_FileProvider

io.dcloud.sdk.base.service.provider.DCloudAdFileProvider

com.jucai.jcplugin_cardpay.MyProvider

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

URL Endpoints (21)

http://netty.io/wiki/forked-tomcat-native.html http://netty.io/wiki/reference-counted-objects.html http://netty.io/wiki/sslcontextbuilder-and-private-key.html http://www.eclipse.org/jetty/documentation/current/alpn-chapter.html#alpn-starting https://ask.dcloud.net.cn/article/282 https://ask.dcloud.net.cn/article/283 https://ask.dcloud.net.cn/article/287 https://ask.dcloud.net.cn/article/35058 https://ask.dcloud.net.cn/article/35627 https://ask.dcloud.net.cn/article/35877 https://ask.dcloud.net.cn/article/36199 https://er.dcloud.io/rv https://er.dcloud.io/sc https://er.dcloud.net.cn/rv https://er.dcloud.net.cn/sc https://m3w.cn/s/ https://tools.ietf.org/html/rfc7540#section-8.1.2.3 https://wiki.eclipse.org/Jetty/Feature/NPN https://www.openssl.org/docs/manmaster/apps/verify.html https://youtrack.jetbrains.com/issue/KT-55980 https://youtrack.jetbrains.com/issue/KT-67202

Submission Details

Submitted At 2026-06-03

First Submission 2026-06-03

Last Submission 2026-06-03

Stored Until 2026-07-03

Names & Tags

jcpos_V1.1.5_online.apk android apk contains-elf reflection

Other Versions

巨彩付收银台 com.jucaishangfu.gtong 1.1.4 (153) jcpos_V1.1.4_online.apk Analyzed 2026-06-03 05:36 UTC

View report