3pattino1 icon

3pattiNo1-013322__1_.apk

3pattino1

45.97 MB

Analyzed: 2026-02-10 16:41 UTC

Twitter / X Facebook LinkedIn WhatsApp Telegram Reddit
Analyze Another

APK Security & Privacy Score

Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.

Security Scan-weighted
82/100
Threat scan flagged
Privacy Permissions & network
90/100
High-risk permissions AllowBackup enabled Possible tracking Low data access
86/100
Good
Overall trust

Facts

Threat scan 2/74 flagged, 0 suspicious
Permissions 15 requested
Network strings 32 URLs (0 HTTP, 32 HTTPS)
Target SDK 33
Certificate Valid until 2125-06-19 (99 years, suspicious)

Warnings

Threat scan flagged: 2/74 scanners marked this file as malicious.
High-risk permissions detected: android.permission.RECEIVE_BOOT_COMPLETED
AllowBackup is enabled.
Possible analytics/tracking domains found: app-measurement.com, app.adjust.com, app.adjust.net.in, app.adjust.world, app.eu.adjust.com
Package Name noone.notwo.nothree
Version Code 1
Version Name 1.0
Application Name androidx.multidex.MultiDexApplication
Debuggable No
Allow Backup Yes
Min SDK Android 19 (KitKat)
Target SDK Android 33 (Android 13)
Supported ABIs
Universal

Certificate & Signer

Valid From 2025-07-13 13:09:30
Valid To 2125-06-19 13:09:30
Serial Number 3b3c5deb
Thumbprint 9fd6eadd232f8b39a7bb434a9e480a6172175230
Issuer: C dY1
Issuer: CN Rl1
Issuer: DN C:dY1, CN:Rl1, L:1a1, O:zz1, ST:VN1, OU:1Z1
Issuer: L 1a1
Issuer: O zz1
Issuer: OU 1Z1
Issuer: ST VN1
Subject: C dY1
Subject: CN Rl1
Subject: DN C:dY1, CN:Rl1, L:1a1, O:zz1, ST:VN1, OU:1Z1
Subject: L 1a1
Subject: O zz1
Subject: OU 1Z1
Subject: ST VN1

Security Scan

2 /74
⚠️ Threats Detected
Detected by 2 vendors: Ikarus (PUA.AndroidOS.Agent), K7GW (Trojan ( 0001140e1 ))
Scanned by 74 security vendors
Last scan: 2026-02-01 23:56 UTC
Malicious
2
Suspicious
0
Harmless
0
Undetected
63
Timeout
0
Failure
0

Scan Providers

74 vendors
APEX type-unsupported
No result reported
Engine 6.743
AVG undetected
No result reported
Engine 23.9.8494.0
Acronis undetected
No result reported
Engine 1.2.0.121
AhnLab-V3 undetected
No result reported
Engine 3.29.1.10604
Alibaba undetected
No result reported
Engine 0.3.0.5
Antiy-AVL undetected
No result reported
Engine 3.0
Arcabit undetected
No result reported
Engine 2025.0.0.23
Avast undetected
No result reported
Engine 23.9.8494.0
Avast-Mobile undetected
No result reported
Engine 260201-02
Avira undetected
No result reported
Engine 8.3.3.24
Baidu undetected
No result reported
Engine 1.0.0.2
BitDefender undetected
No result reported
Engine 7.2
BitDefenderFalx undetected
No result reported
Engine 2.0.936
CAT-QuickHeal undetected
No result reported
Engine 22.00
CMC undetected
No result reported
Engine 2.4.2022.1
CTX undetected
No result reported
Engine 2024.8.29.1
ClamAV undetected
No result reported
Engine 1.5.1.0
CrowdStrike undetected
No result reported
Engine 1.0
Cylance type-unsupported
No result reported
Engine 3.0.0.0
Cynet undetected
No result reported
Engine 4.0.3.4
DeepInstinct type-unsupported
No result reported
Engine 5.0.0.8
DrWeb undetected
No result reported
Engine 7.0.74.11120
ESET-NOD32 undetected
No result reported
Engine 18.2.18.0
Elastic type-unsupported
No result reported
Engine 4.0.247
Emsisoft undetected
No result reported
Engine 2024.8.0.61147
F-Secure undetected
No result reported
Engine 18.10.1547.307
Fortinet undetected
No result reported
Engine 7.0.30.0
GData undetected
No result reported
Engine GD:27.43390AVA:64.30592
Google undetected
No result reported
Engine 1769986858
Gridinsoft undetected
No result reported
Engine 1.0.237.174
Ikarus malicious
PUA.AndroidOS.Agent
Engine 6.4.16.0
Jiangmin undetected
No result reported
Engine 16.0.100
K7AntiVirus undetected
No result reported
Engine 14.32.58462
K7GW malicious
Trojan ( 0001140e1 )
Engine 14.32.58462
Kaspersky undetected
No result reported
Engine 22.0.1.28
Kingsoft undetected
No result reported
Engine None
Lionic undetected
No result reported
Engine 8.16
Malwarebytes undetected
No result reported
Engine 3.1.0.206
MaxSecure undetected
No result reported
Engine 1.0.0.1
McAfeeD undetected
No result reported
Engine 1.2.0.13486
MicroWorld-eScan undetected
No result reported
Engine 14.0.409.0
Microsoft undetected
No result reported
Engine 1.1.25110.1
NANO-Antivirus undetected
No result reported
Engine 1.0.170.26895
Paloalto type-unsupported
No result reported
Engine 0.9.0.1003
Panda undetected
No result reported
Engine 4.6.4.2
Rising undetected
No result reported
Engine 25.0.0.28
SUPERAntiSpyware undetected
No result reported
Engine 5.6.0.1032
Sangfor undetected
No result reported
Engine 2.22.3.0
SentinelOne type-unsupported
No result reported
Engine 7.5.3.1
Skyhigh undetected
No result reported
Engine v2021.2.0+4045
Sophos undetected
No result reported
Engine 3.3.1.0
Symantec undetected
No result reported
Engine 1.22.0.0
SymantecMobileInsight undetected
No result reported
Engine 2.0
TACHYON undetected
No result reported
Engine 2026-02-01.02
Tencent undetected
No result reported
Engine 1.0.0.1
Trapmine type-unsupported
No result reported
Engine 4.0.8.0
TrellixENS undetected
No result reported
Engine 6.0.6.653
TrendMicro undetected
No result reported
Engine 24.550.0.1002
TrendMicro-HouseCall undetected
No result reported
Engine 24.550.0.1002
Trustlook undetected
No result reported
Engine 1.0
VBA32 undetected
No result reported
Engine 5.5.0
VIPRE undetected
No result reported
Engine 6.0.0.35
Varist undetected
No result reported
Engine 6.6.1.3
ViRobot undetected
No result reported
Engine 2014.3.20.0
VirIT undetected
No result reported
Engine 9.5.1135
Webroot undetected
No result reported
Engine 1.9.0.8
Xcitium undetected
No result reported
Engine 38378
Yandex undetected
No result reported
Engine 5.5.2.24
Zillya undetected
No result reported
Engine 2.0.0.5535
ZoneAlarm undetected
No result reported
Engine 6.22-112233573
Zoner undetected
No result reported
Engine 2.2.2.0
alibabacloud type-unsupported
No result reported
Engine 2.2.0
huorong undetected
No result reported
Engine 0b55108:0b55108:5a5090d:5a5090d
tehtris type-unsupported
No result reported

File Signatures

SHA-256 c80ff7f5e194ceefba396a6bfc2367fca0d19dfc8a74123e8324175407a67129
MD5 5a888df9635ae2fc1c49110df231b690
SHA-1 070f4cc82e8e17455bfa66b24f22b6892583e33b
SSDEEP 786432:dBxgnJONr4xZNy3J79+JTLcNhsY+R6qMYmx5qx3SsHD+w+pn9wMRD:dBxmE8XynyTLcDV+R6YsKiwG9b9
TLSH T12FB7338AFF14A62ED97350B3475E5B3237158E068E538A47E998331C29B76D44F88FC8
VHASH 0e8ffe5419916daff62ebcf85f377140
PERMHASH 4153eabcc2f5711fff6e7a16d95e0d467b1f0504379a8258367c67cf4d0aacc8

File Intelligence

Type Description Android Human-friendly file type name based on multiple detection methods.
Type Extension apk Most likely file extension inferred from the content.
Type Tag android Primary type tag assigned by the classifier.
Type Tags executable, mobile, android, apk Additional type tags that describe the file content.
Magic Zip archive data, at least v0.0 to extract, compression method=store File signature result from magic bytes inspection.
Magika APK File type predicted by Magika (ML-based file type detection).
TrID Android Package (40%), Java Archive (20%), VYM Mind Map (18.5%), Sweet Home 3D Design (generic) (15.5%), ZIP compressed archive (5.9%) TrID file type guesses with probabilities.
dhash 0000001e1e0d1408 Perceptual hash used to compare visual similarity of files.
raw md5 7069e9710f2ed86aa5c831c85562d8b2 Raw MD5 hash of the file contents.
extensions xml (521), png (211), version (51), properties (30), kotlin_module (8), kotlin_builtins (7), rer (3), mp3 (2), ttrr (2), wrr (2), arsc (1), dex (1), ewtew (1), greg (1), MF (1), RSA (1), saff (1), SF (1), txt (1), wfe (1) File extensions found inside the APK and how many of each.
file types XML (521), PNG (208), unknown (116), DEX (1), ZIP (1) Detected embedded file types and their counts.
highest datetime 1981-01-01 01:01:02 UTC Latest timestamp found among files inside the archive.
lowest datetime 1981-01-01 01:01:02 UTC Earliest timestamp found among files inside the archive.
num children 847 Number of files contained within the archive.
type APK Container type detected for the analyzed file.
uncompressed size 49 MB Estimated total size of all files after extraction.

Deep Manifest Analysis

Activity Intents (2)

com.facebook.CustomTabActivity
Actions
View Activity Action: Display the data to the user. android.intent.action.VIEW
Categories
android.intent.category.DEFAULT android.intent.category.BROWSABLE
goldaaa.goldaab.goldabc.StartGame
Actions
Main Activity Action: Start as a main entry point, does not expect to android.intent.action.MAIN
Categories
android.intent.category.LAUNCHER

Service Intents (2)

Firebase messaging service Handles push notifications and data messages from Firebase Cloud Messaging. com.google.firebase.messaging.FirebaseMessagingService
Actions
Firebase messaging event Action used by Firebase to deliver a push message to the app. com.google.firebase.MESSAGING_EVENT
goldaaa.goldaab.goldabc.zzzzMessagingService
Actions
Firebase messaging event Action used by Firebase to deliver a push message to the app. com.google.firebase.MESSAGING_EVENT

Receiver Intents (9)

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
Actions
Power Connected Broadcast Action: External power has been connected to the device. android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
Actions
Battery Okay Broadcast Action: Indicates the battery is now okay after being low. android.intent.action.BATTERY_OKAY
Battery Low Broadcast Action: Indicates low battery condition on the device. android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
Actions
android.net.conn.CONNECTIVITY_CHANGE android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
Actions
Device Storage Low Broadcast Action: A sticky broadcast that indicates low memory android.intent.action.DEVICE_STORAGE_LOW
Device Storage Ok Broadcast Action: Indicates low memory condition on the device no longer exists android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
Actions
androidx.work.impl.background.systemalarm.UpdateProxies androidx.work.impl.background.systemalarm.UpdateProxies
Work rescheduler Reschedules background work after reboot or app update. androidx.work.impl.background.systemalarm.RescheduleReceiver
Actions
Boot Completed Broadcast Action: This is broadcast once, after the system has finished android.intent.action.BOOT_COMPLETED
Time Changed Broadcast Action: The time was set. android.intent.action.TIME_SET
Timezone Changed Broadcast Action: The timezone has changed. android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.diagnostics.DiagnosticsReceiver
Actions
androidx.work.diagnostics.REQUEST_DIAGNOSTICS androidx.work.diagnostics.REQUEST_DIAGNOSTICS
com.facebook.CurrentAccessTokenExpirationBroadcastReceiver
Actions
com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED
com.google.firebase.iid.FirebaseInstanceIdReceiver
Actions
com.google.android.c2dm.intent.RECEIVE com.google.android.c2dm.intent.RECEIVE

Requested Permissions (16)

view Wi-Fi connections Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices. android.permission.ACCESS_WIFI_STATE
read the contents of your shared storage Allows the app to read the contents of your shared storage. android.permission.READ_EXTERNAL_STORAGE
have full network access Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet. android.permission.INTERNET
view network connections Allows the app to view information about network connections such as which networks exist and are connected. android.permission.ACCESS_NETWORK_STATE
modify or delete the contents of your shared storage Allows the app to write the contents of your shared storage. android.permission.WRITE_EXTERNAL_STORAGE
change network connectivity Allows the app to change the state of network connectivity. android.permission.CHANGE_NETWORK_STATE
connect and disconnect from Wi-Fi Allows the app to connect to and disconnect from Wi-Fi access points and to make changes to device configuration for Wi-Fi networks. android.permission.CHANGE_WIFI_STATE
read the contents of your shared storage Allows the app to read the contents of your shared storage. android.permission.READ_EXTERNAL_STORAGE
android.permission.SCHEDULE_EXACT_ALARM Custom app or vendor permission (not publicly documented). android.permission.SCHEDULE_EXACT_ALARM
android.permission.POST_NOTIFICATIONS Custom app or vendor permission (not publicly documented). android.permission.POST_NOTIFICATIONS
control vibration Allows the app to control the vibrator. android.permission.VIBRATE
Install Referrer service Allows Google Play to bind to the app's Install Referrer service for install attribution. com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
keep car screen turned on Allows the app to keep the car screen turned on. android.permission.WAKE_LOCK
Cloud messaging receive Allows the app to receive push messages via Google/Firebase Cloud Messaging. com.google.android.c2dm.permission.RECEIVE
run at startup Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the tablet and allow the app to slow down the overall tablet by always running. android.permission.RECEIVE_BOOT_COMPLETED
Foreground service Allows the app to run a foreground service. android.permission.FOREGROUND_SERVICE

Activities (32)

goldaaa.goldaab.goldabc.goldtwoasLa0pe
goldaaa.goldaab.goldabc.goldtwohyLebru
goldaaa.goldaab.goldabc.goldtworrL2zpn
goldaaa.goldaab.goldabc.goldtwowerrL2z
goldaaa.goldaab.goldabc.goldtwofrLfh3j
goldaaa.goldaab.goldabc.goldtwokkfrLfh
goldaaa.goldaab.goldabc.goldtwoziLqb4f
goldaaa.goldaab.goldabc.goldtwojfziLqb
goldaaa.goldaab.goldabc.goldtwogcLommo
goldaaa.goldaab.goldabc.goldtwosqgcLom
goldaaa.goldaab.goldabc.goldtwoobLvroe
goldaaa.goldaab.goldabc.goldtwognobLvr
goldaaa.goldaab.goldabc.goldtwojpLfqhf
goldaaa.goldaab.goldabc.goldtwomcjpLfq
goldaaa.goldaab.goldabc.goldtwogiLcazr
goldaaa.goldaab.goldabc.goldtwohegiLca
goldaaa.goldaab.goldabc.goldtwosbLc9yv
goldaaa.goldaab.goldabc.goldtwolksbLc9
goldaaa.goldaab.goldabc.goldtwodmLhctv
goldaaa.goldaab.goldabc.goldtwobfdmLhc
goldaaa.goldaab.goldabc.goldtwozuLquzz
goldaaa.goldaab.goldabc.goldtwootzuLqu
goldaaa.goldaab.goldabc.goldtwohqLdjtg
goldaaa.goldaab.goldabc.goldtwofvhqLdj
goldaaa.goldaab.goldabc.StartGame
goldaaa.goldaab.goldabc.goldtwojiasLa0
goldaaa.goldaab.goldabc.goldtwoMaxActivity
goldaaa.goldaab.goldabc.zzzzMainActivity
com.facebook.FacebookActivity
goldaaa.goldaab.goldabc.goldtwoglhyLeb
com.facebook.CustomTabMainActivity
com.facebook.CustomTabActivity

Services (11)

goldaaa.goldaab.goldabc.zzzzMessagingService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.firebase.components.ComponentDiscoveryService
Firebase messaging service Handles push notifications and data messages from Firebase Cloud Messaging. com.google.firebase.messaging.FirebaseMessagingService
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

Broadcast Receivers (12)

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver com.facebook.CurrentAccessTokenExpirationBroadcastReceiver
com.google.android.gms.measurement.AppMeasurementReceiver com.google.android.gms.measurement.AppMeasurementReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver com.google.firebase.iid.FirebaseInstanceIdReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
Work rescheduler Reschedules background work after reboot or app update. androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver androidx.work.impl.diagnostics.DiagnosticsReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Content Providers (3)

com.facebook.internal.FacebookInitProvider
com.google.firebase.provider.FirebaseInitProvider
androidx.startup.InitializationProvider

URL Endpoints (33)

https://.facebook.com https://app-measurement.com/a https://app.adjust.com https://app.adjust.net.in https://app.adjust.world https://app.eu.adjust.com https://app.tr.adjust.com https://app.us.adjust.com https://developers.facebook.com/docs/android/getting-started https://developers.facebook.com/docs/app-events/getting-started-app-events-android#disable-auto-events https://developers.facebook.com/docs/sharing/android https://facebook.com https://facebook.com/device?user_code=%1$s&qr=1 https://firebase.google.com/support/guides/disable-analytics https://firebase.google.com/support/privacy/init-options https://gdpr.adjust.com https://gdpr.adjust.net.in https://gdpr.adjust.world https://gdpr.eu.adjust.com https://gdpr.tr.adjust.com

Submission Details

Submitted At 2026-02-10
First Submission 2026-02-10
Last Submission 2026-02-10
Stored Until 2026-03-12
Names & Tags
3pattiNo1-013322.apk android apk obfuscated runtime-modules reflection telephony checks-gps