Eve.apk

52.54 MB

Analyzed: 2026-07-14 11:57 UTC

Twitter / X Facebook LinkedIn WhatsApp Telegram Reddit
Analyze Another

APK Security & Privacy Score

Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.

Security Scan-weighted
89/100
Threat scan flagged
Privacy Permissions & network
100/100
HTTP URLs found Low data access
94/100
Excellent
Overall trust

Source Verification

Status unverified
Observed hash 37beef28f6d64ae9c9f083ff1396e596fa7f3f1a188c17772c92f7e2b868254a
Reference hash verification could not be completed.

Facts

Threat scan 1/74 flagged, 0 suspicious
Permissions 0 requested
Network strings 18 URLs (5 HTTP, 13 HTTPS)
Target SDK Unknown
Certificate Valid until 2053-11-29 (27 years, suspicious)
Source verification UNVERIFIED (parse error)

Warnings

Threat scan flagged: 1/74 scanners marked this file as malicious.
Found 5 HTTP URL strings (unencrypted).

Analysis Coverage

This report is partial. Some core metadata could not be extracted.
package_name
version
permissions_or_components
Package Name
Version Code
Version Name
Debuggable No
Allow Backup No
Min SDK Unknown
Target SDK Unknown
Supported ABIs
arm64-v8a armeabi-v7a

Certificate & Signer

Valid From 2026-07-14 09:49:20
Valid To 2053-11-29 09:49:20
Serial Number 163ce95
Thumbprint 66c50431220630bac0022b146c715085cf3f2fde
Issuer: C cn
Issuer: CN bm@202607141749
Issuer: DN C:cn, CN:bm@202607141749, L:beijing, O:bm@202607141749, ST:bm@202607141749, OU:bm@202607141749
Issuer: L beijing
Issuer: O bm@202607141749
Issuer: OU bm@202607141749
Issuer: ST bm@202607141749
Subject: C cn
Subject: CN bm@202607141749
Subject: DN C:cn, CN:bm@202607141749, L:beijing, O:bm@202607141749, ST:bm@202607141749, OU:bm@202607141749
Subject: L beijing
Subject: O bm@202607141749
Subject: OU bm@202607141749
Subject: ST bm@202607141749

Security Scan

1 /74
⚠️ Threats Detected
Detected by 1 vendor: K7GW (Trojan ( 005c9c5a1 ))
Scanned by 74 security vendors
Last scan: 2026-07-14 11:56 UTC
Malicious
1
Suspicious
0
Harmless
0
Undetected
62
Timeout
0
Failure
2

Scan Providers

74 vendors
ALYac failure
No result reported
Engine 2.0.0.10
APEX type-unsupported
No result reported
Engine 6.798
AVG undetected
No result reported
Engine 23.9.8494.0
Acronis undetected
No result reported
Engine 1.2.0.121
AhnLab-V3 undetected
No result reported
Engine 3.30.1.10706
Alibaba undetected
No result reported
Engine 0.3.0.5
Antiy-AVL undetected
No result reported
Engine 3.0
Arcabit undetected
No result reported
Engine 2025.0.0.23
Avast undetected
No result reported
Engine 23.9.8494.0
Avast-Mobile undetected
No result reported
Engine 260713-04
Avira undetected
No result reported
Engine 8.3.3.24
BitDefender undetected
No result reported
Engine 7.2
BitDefenderFalx undetected
No result reported
Engine 2.0.936
Bkav undetected
No result reported
Engine 8.2.40(8338)
CAT-QuickHeal undetected
No result reported
Engine 22.00
CMC undetected
No result reported
Engine 2.4.2022.1
CTX undetected
No result reported
Engine 2024.8.29.1
ClamAV undetected
No result reported
Engine 1.5.3.0
CrowdStrike undetected
No result reported
Engine 1.0
Cylance type-unsupported
No result reported
Engine 3.0.0.0
Cynet type-unsupported
No result reported
Engine 4.0.3.4
DrWeb undetected
No result reported
Engine 7.0.75.2070
ESET-NOD32 undetected
No result reported
Engine 18.2.18.0
Elastic undetected
No result reported
Engine 4.0.271
Emsisoft undetected
No result reported
Engine 2024.8.0.61147
F-Secure undetected
No result reported
Engine 18.10.1547.307
Fortinet undetected
No result reported
Engine 7.0.48.0
GData undetected
No result reported
Engine GD:27.45261AVA:64.31579
Google undetected
No result reported
Engine 1784026842
Gridinsoft undetected
No result reported
Engine 1.0.250.174
Ikarus failure
No result reported
Engine 6.5.4.0
Jiangmin undetected
No result reported
Engine 16.0.100
K7AntiVirus undetected
No result reported
Engine 14.62.60126
K7GW malicious
Trojan ( 005c9c5a1 )
Engine 14.62.60128
Kaspersky undetected
No result reported
Engine 22.0.1.28
Kingsoft undetected
No result reported
Engine None
Lionic undetected
No result reported
Engine 8.16
Malwarebytes undetected
No result reported
Engine 3.1.0.246
MaxSecure undetected
No result reported
Engine 1.0.0.1
McAfeeD undetected
No result reported
Engine 1.2.0.15146
MicroWorld-eScan undetected
No result reported
Engine 14.0.409.0
Microsoft undetected
No result reported
Engine 1.1.26060.3008
NANO-Antivirus undetected
No result reported
Engine 1.0.170.26895
Paloalto type-unsupported
No result reported
Engine 0.9.0.1003
Panda undetected
No result reported
Engine 4.6.4.2
Rising undetected
No result reported
Engine 25.0.0.28
SUPERAntiSpyware undetected
No result reported
Engine 5.6.0.1032
Sangfor undetected
No result reported
Engine 2.22.3.0
SentinelOne type-unsupported
No result reported
Engine 7.7.0.1
Skyhigh undetected
No result reported
Engine v2021.2.0+4045
Sophos undetected
No result reported
Engine 3.6.2.0
Symantec undetected
No result reported
Engine 1.22.0.0
SymantecMobileInsight type-unsupported
No result reported
Engine 2.0
TACHYON undetected
No result reported
Engine 2026-07-14.02
Tencent undetected
No result reported
Engine 1.0.0.1
Trapmine type-unsupported
No result reported
Engine 4.0.14.0
TrellixENS undetected
No result reported
Engine 6.0.6.653
TrendMicro undetected
No result reported
Engine 24.550.0.1002
TrendMicro-HouseCall undetected
No result reported
Engine 24.550.0.1002
Trustlook undetected
No result reported
Engine 1.0
VBA32 undetected
No result reported
Engine 5.6.1
VIPRE undetected
No result reported
Engine 6.0.0.35
Varist undetected
No result reported
Engine 6.6.1.3
ViRobot undetected
No result reported
Engine 2014.3.20.0
VirIT undetected
No result reported
Engine 9.5.1248
Webroot undetected
No result reported
Engine 1.9.0.8
Xcitium undetected
No result reported
Engine 38804
Yandex undetected
No result reported
Engine 5.5.2.24
Zillya undetected
No result reported
Engine 2.0.0.5640
ZoneAlarm undetected
No result reported
Engine 6.26-117392154
Zoner undetected
No result reported
Engine 2.2.2.0
alibabacloud type-unsupported
No result reported
Engine 2.2.0
huorong undetected
No result reported
Engine 4418106:4418106:24c61d3:24c61d3
tehtris type-unsupported
No result reported

File Signatures

SHA-256 37beef28f6d64ae9c9f083ff1396e596fa7f3f1a188c17772c92f7e2b868254a
MD5 c92ffda43907d64e59805a6aa65831e3
SHA-1 b018acdbadc5b0201d834f0c9f7f92898aab2e8f
SSDEEP 786432:TuEq0jYIvNMyJULdbbm8TKuJBBdiAupnVx2xL8wTqdkckLqBCPNBiH9GG9VbdX6e:yaMwNXUNbiHnvQLTq8/NkH9GG9mPxM
TLSH T1D5C7339BF7809EE9D0F303368C7651AAA94B4C259B4382E72D94B63C19777D00EC5BC9
VHASH bed2a50e6af19250ae25756aea937b0e

File Intelligence

Type Description Android Human-friendly file type name based on multiple detection methods.
Type Extension apk Most likely file extension inferred from the content.
Type Tag android Primary type tag assigned by the classifier.
Type Tags executable, mobile, android, apk Additional type tags that describe the file content.
Magic Zip archive data, at least v1.0 to extract, compression method=[0x2b5d] File signature result from magic bytes inspection.
Magika APK File type predicted by Magika (ML-based file type detection).
TrID Android Package (40.2%), Java Archive (20.1%), 1C:Enterprise bundled add-in (17.9%), Sweet Home 3D Design (generic) (15.6%), ZIP compressed archive (5.9%) TrID file type guesses with probabilities.
dhash 0000001e1e1d0c00 Perceptual hash used to compare visual similarity of files.
raw md5 56202468f8d638f2806106774dde0020 Raw MD5 hash of the file contents.
extensions xml (805), png (175), dex (18) File extensions found inside the APK and how many of each.
file types XML (806), PNG (175), DEX (18) Detected embedded file types and their counts.
highest datetime 2026-07-14 17:48:56 UTC Latest timestamp found among files inside the archive.
lowest datetime 2026-07-14 17:48:40 UTC Earliest timestamp found among files inside the archive.
num children 2643 Number of files contained within the archive.
type APK Container type detected for the analyzed file.
uncompressed size 31 MB Estimated total size of all files after extraction.

Deep Manifest Analysis

Native Libraries (13)

libBugly_Native libBugly_Native.so
libImSDK libImSDK.so
libclientcore libclientcore.so
libconscrypt_jni libconscrypt_jni.so
libdownloadproxy libdownloadproxy.so
libliteavsdk libliteavsdk.so
libpl_droidsonroids_gif libpl_droidsonroids_gif.so
libtencentloc libtencentloc.so
libtpcore-master libtpcore-master.so
libtpthirdparties-master libtpthirdparties-master.so
libtuikitengineroom libtuikitengineroom.so
libtxffmpeg libtxffmpeg.so
libtxsoundtouch libtxsoundtouch.so

URL Endpoints (22)

http://10.0.2.2:20005 http://h5.m.taobao.com/trade/paySuccess.html?bizOrderId=$OrderId$& http://m.alipay.com/?action=h5quit http://s3.amazonaws.com/doc/2006-03-01/ http://www.ngs.ac.uk/tools/jcepolicyfiles https://android.bugly.qq.com/rqd/async https://buy.cloud.tencent.com/avc?activeId=plugin&regionId=1 https://cloud.tencent.com/document/product/269/11673?from=17219#.E5.9F.BA.E7.A1.80.E6.9C.8D.E5.8A.A1.E8.AF.A6.E6.83.85 https://cloud.tencent.com/document/product/269/32458 https://en.wikipedia.org/wiki/Blend_modes https://github.com/vinc3m1 https://github.com/vinc3m1/RoundedImageView https://github.com/vinc3m1/RoundedImageView.git https://github.com/yyued/SVGAPlayer-Android#cache https://intl.cloud.tencent.com/document/product/1047/36021?lang=en&pg=#changing-configuration https://mclient.alipay.com/home/exterfaceAssign.htm https://mobilegw.alipay.com/mgw.htm https://mobilegw.alipaydev.com/mgw.htm https://paygate-yf.meituan.com/paygate/notify/alipay/paynotify/simple https://wappaygw.alipay.com/home/exterfaceAssign.htm

Submission Details

Submitted At 2026-07-14
First Submission 2026-07-14
Last Submission 2026-07-14
Stored Until 2026-08-13
Names & Tags
Eve.apk apk android checks-gps telephony checks-network-adapters checks-cpu-name reflection