UNIA7C9A54__20260714105213.apk

云智联

34.85 MB

Analyzed: 2026-07-15 02:40 UTC

Twitter / X Facebook LinkedIn WhatsApp Telegram Reddit

Analyze Another

APK Security & Privacy Score

Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.

Security Scan-weighted

84/100

Threat scan flagged

Privacy Permissions & network

49/100

High-risk permissions

62/100

Caution

Overall trust

Facts

Threat scan 1/74 flagged, 0 suspicious

Permissions 35 requested

Network strings 1 URLs (0 HTTP, 1 HTTPS)

Target SDK 33

Certificate Valid until 2125-10-13 (99 years, suspicious)

Warnings

Threat scan flagged: 1/74 scanners marked this file as malicious.

High-risk permissions detected: android.permission.REQUEST_INSTALL_PACKAGES, android.permission.WRITE_SETTINGS

Requests 35 permissions (review carefully).

Package Name com.sanchuan.sczhyzl

Version Code 139

Version Name 1.3.9

Application Name io.dcloud.application.DCloudApplication

Debuggable No

Allow Backup No

Min SDK Android 21 (Lollipop)

Target SDK Android 33 (Android 13)

Supported ABIs

arm64-v8a

Certificate & Signer

Valid From 2025-11-06 08:36:20

Valid To 2125-10-13 08:36:20

Serial Number 1d654d30836d6240

Thumbprint 3afc02ab083948148d89045e2cff664fea15e90d

Issuer: C cn

Issuer: CN yzl

Issuer: DN C:cn, CN:yzl, L:hangzhou, O:yzl, ST:zhejiang, OU:yzl

Issuer: L hangzhou

Issuer: O yzl

Issuer: OU yzl

Issuer: ST zhejiang

Subject: C cn

Subject: CN yzl

Subject: DN C:cn, CN:yzl, L:hangzhou, O:yzl, ST:zhejiang, OU:yzl

Subject: L hangzhou

Subject: O yzl

Subject: OU yzl

Subject: ST zhejiang

Security Scan

1 /74

⚠️ Threats Detected

Detected by 1 vendor: K7GW (Trojan ( 0058bdfd1 ))

Scanned by 74 security vendors

Last scan: 2026-07-15 02:40 UTC

Malicious

Suspicious

Harmless

Undetected

Timeout

Failure

Scan Providers

74 vendors

ALYac undetected

No result reported

Engine 2.0.0.10

APEX type-unsupported

No result reported

Engine 6.798

AVG undetected

No result reported

Engine 23.9.8494.0

Acronis undetected

No result reported

Engine 1.2.0.121

AhnLab-V3 undetected

No result reported

Engine 3.30.1.10706

Alibaba undetected

No result reported

Engine 0.3.0.5

Antiy-AVL undetected

No result reported

Engine 3.0

Arcabit undetected

No result reported

Engine 2025.0.0.23

Avast undetected

No result reported

Engine 23.9.8494.0

Avast-Mobile undetected

No result reported

Engine 260714-04

Avira undetected

No result reported

Engine 8.3.3.24

BitDefender undetected

No result reported

Engine 7.2

BitDefenderFalx undetected

No result reported

Engine 2.0.936

Bkav undetected

No result reported

Engine 8.2.40(8338)

CAT-QuickHeal undetected

No result reported

Engine 22.00

CMC undetected

No result reported

Engine 2.4.2022.1

CTX undetected

No result reported

Engine 2024.8.29.1

ClamAV timeout

No result reported

Engine 1.5.3.0

CrowdStrike undetected

No result reported

Engine 1.0

Cylance type-unsupported

No result reported

Engine 3.0.0.0

Cynet undetected

No result reported

Engine 4.0.3.4

DrWeb undetected

No result reported

Engine 7.0.75.2070

ESET-NOD32 undetected

No result reported

Engine 18.2.18.0

Elastic undetected

No result reported

Engine 4.0.271

Emsisoft undetected

No result reported

Engine 2024.8.0.61147

F-Secure undetected

No result reported

Engine 18.10.1547.307

Fortinet undetected

No result reported

Engine 7.0.48.0

GData undetected

No result reported

Engine GD:27.45267AVA:64.31580

Google undetected

No result reported

Engine 1784080866

Gridinsoft undetected

No result reported

Engine 1.0.250.174

Ikarus failure

No result reported

Engine 6.5.4.0

Jiangmin undetected

No result reported

Engine 16.0.100

K7AntiVirus undetected

No result reported

Engine 14.63.60132

K7GW malicious

Trojan ( 0058bdfd1 )

Engine 14.63.60132

Kaspersky undetected

No result reported

Engine 22.0.1.28

Kingsoft undetected

No result reported

Engine None

Lionic undetected

No result reported

Engine 8.16

Malwarebytes undetected

No result reported

Engine 3.1.0.246

MaxSecure timeout

No result reported

Engine 1.0.0.1

McAfeeD undetected

No result reported

Engine 1.2.0.15146

MicroWorld-eScan undetected

No result reported

Engine 14.0.409.0

Microsoft undetected

No result reported

Engine 1.1.26060.3008

NANO-Antivirus undetected

No result reported

Engine 1.0.170.26895

Paloalto type-unsupported

No result reported

Engine 0.9.0.1003

Panda undetected

No result reported

Engine 4.6.4.2

Rising undetected

No result reported

Engine 25.0.0.28

SUPERAntiSpyware undetected

No result reported

Engine 5.6.0.1032

Sangfor undetected

No result reported

Engine 2.22.3.0

SentinelOne undetected

No result reported

Engine 7.7.0.1

Skyhigh undetected

No result reported

Engine v2021.2.0+4045

Sophos undetected

No result reported

Engine 3.6.2.0

Symantec undetected

No result reported

Engine 1.22.0.0

SymantecMobileInsight undetected

No result reported

Engine 2.0

TACHYON undetected

No result reported

Engine 2026-07-14.02

Tencent undetected

No result reported

Engine 1.0.0.1

Trapmine type-unsupported

No result reported

Engine 4.0.14.0

TrellixENS undetected

No result reported

Engine 6.0.6.653

TrendMicro undetected

No result reported

Engine 24.550.0.1002

TrendMicro-HouseCall undetected

No result reported

Engine 24.550.0.1002

Trustlook undetected

No result reported

Engine 1.0

VBA32 undetected

No result reported

Engine 5.6.1

VIPRE undetected

No result reported

Engine 6.0.0.35

Varist undetected

No result reported

Engine 6.6.1.3

ViRobot undetected

No result reported

Engine 2014.3.20.0

VirIT undetected

No result reported

Engine 9.5.1249

Webroot undetected

No result reported

Engine 1.9.0.8

Xcitium undetected

No result reported

Engine 38806

Yandex undetected

No result reported

Engine 5.5.2.24

Zillya undetected

No result reported

Engine 2.0.0.5641

ZoneAlarm undetected

No result reported

Engine 6.26-117392185

Zoner undetected

No result reported

Engine 2.2.2.0

alibabacloud type-unsupported

No result reported

Engine 2.2.0

huorong undetected

No result reported

Engine ea8a3cb:ea8a3cb:fad7bf3:fad7bf3

tehtris type-unsupported

No result reported

File Signatures

SHA-256 e69a78570b1fd32275383dfe9cc20d9fb13d1dd6d72b2bc107a612dd9582b6cc

MD5 f85dd1cf52bb939d00d7921bb6d2d1a8

SHA-1 00ce4658671a0e6d2eb717393cb749c14ceb8642

SSDEEP 786432:2aeacl3/f3PeK8uHK6i3Dh4lSarpsAvpG/zKSHorgybjO1ke1PDkQ8aWdSwkAY:2afclX3PeKLK6eDyt1sAvpMmSHosl1k2

TLSH T10787335BFB0AEA66F0B345396762456376332C850112E6123B4DB12C2FB7EC09A4EFD5

VHASH 44ddc7cc68e5ad887aa529bc9baab6d5

PERMHASH cda6f8870323dc62a073bbdbf0442db86afbc4bce01803fcb7ab662cd799523b

File Intelligence

Type Description Android Human-friendly file type name based on multiple detection methods.

Type Extension apk Most likely file extension inferred from the content.

Type Tag android Primary type tag assigned by the classifier.

Type Tags executable, mobile, android, apk Additional type tags that describe the file content.

Magic Zip archive data, at least v2.0 to extract, compression method=deflate File signature result from magic bytes inspection.

Magika APK File type predicted by Magika (ML-based file type detection).

TrID Android Package (39.1%), Opera Widget (20.2%), Java Archive (19.5%), Sweet Home 3D Design (generic) (15.2%), ZIP compressed archive (5.7%) TrID file type guesses with probabilities.

dhash 000000080e0f0400 Perceptual hash used to compare visual similarity of files.

raw md5 982e5a9e51e55ec3f25f5f84ccd78b35 Raw MD5 hash of the file contents.

extensions png (492), xml (358), data (87), js (18), html (6), svg (6), gif (5), glsl (5), ttf (5), dex (4), json (3), css (2), arsc (1), ck (1), fnt (1), prof (1), profm (1), scss (1), woff (1), woff2 (1), zip (1) File extensions found inside the APK and how many of each.

file types PNG (499), XML (358), unknown (124), HTML (6), GIF (5), DEX (3), JSON (2), ZIP (2), JavaScript (1) Detected embedded file types and their counts.

highest datetime 2026-07-14 10:52:20 UTC Latest timestamp found among files inside the archive.

lowest datetime 2026-07-14 10:52:18 UTC Earliest timestamp found among files inside the archive.

num children 1126 Number of files contained within the archive.

type APK Container type detected for the analyzed file.

uncompressed size 36 MB Estimated total size of all files after extraction.

Deep Manifest Analysis

Activity Intents (1)

io.dcloud.PandoraEntry

Actions

Main Activity Action: Start as a main entry point, does not expect to android.intent.action.MAIN

View Activity Action: Display the data to the user. android.intent.action.VIEW

Receiver Intents (1)

Profile installer Installs performance profiles to speed up app startup and hot paths. androidx.profileinstaller.ProfileInstallReceiver

Actions

Install performance profile Installs a profile that helps optimize app performance. androidx.profileinstaller.action.INSTALL_PROFILE

Skip profile install Skips profile installation for this build. androidx.profileinstaller.action.SKIP_FILE

Save performance profile Saves a profile generated during app usage. androidx.profileinstaller.action.SAVE_PROFILE

Benchmark operation Runs a profile installer benchmark operation. androidx.profileinstaller.action.BENCHMARK_OPERATION

Native Libraries (16)

lib39285EFA lib39285EFA.so

libAMapSDK_MAP_v10_0_700 libAMapSDK_MAP_v10_0_700.so

Breakpad Crash Reporter Crash reporting library that captures diagnostic minidumps. libbreakpad-core.so

C++ Standard Library Android NDK C++ runtime used by native code. libc++_shared.so

libdcblur libdcblur.so

libgifimage libgifimage.so

libimagepipeline libimagepipeline.so

liblamemp3 liblamemp3.so

libnative-filters libnative-filters.so

libnative-imagetranscoder libnative-imagetranscoder.so

libpl_droidsonroids_gif libpl_droidsonroids_gif.so

libstatic-webp libstatic-webp.so

libweexcore libweexcore.so

libweexjsb libweexjsb.so

libweexjss libweexjss.so

libweexjst libweexjst.so

Requested Permissions (46)

modify or delete the contents of your shared storage Allows the app to write the contents of your shared storage. android.permission.WRITE_EXTERNAL_STORAGE

read phone status and identity Allows the app to access the phone features of the device. This permission allows the app to determine the phone number and device IDs, whether a call is active, and the remote number connected by a call. android.permission.READ_PHONE_STATE

read the contents of your shared storage Allows the app to read the contents of your shared storage. android.permission.READ_EXTERNAL_STORAGE

view network connections Allows the app to view information about network connections such as which networks exist and are connected. android.permission.ACCESS_NETWORK_STATE

have full network access Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet. android.permission.INTERNET

com.asus.msa.SupplementaryDID.ACCESS

android.permission.READ_MEDIA_IMAGES Custom app or vendor permission (not publicly documented). android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO Custom app or vendor permission (not publicly documented). android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED Custom app or vendor permission (not publicly documented). android.permission.READ_MEDIA_VISUAL_USER_SELECTED

App badge update Allows the app to update the launcher icon badge count on Huawei launchers. com.huawei.android.launcher.permission.CHANGE_BADGE

App badge update Allows the app to update the launcher icon badge count on launcher launchers. com.vivo.notification.permission.BADGE_ICON

take pictures and videos This app can take pictures and record videos using the camera while the app is in use. android.permission.CAMERA

Dynamic receiver access Internal app permission used to protect dynamic broadcast receivers. com.sanchuan.sczhyzl.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

view Wi-Fi connections Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices. android.permission.ACCESS_WIFI_STATE

Install Packages android.permission.INSTALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES Custom app or vendor permission (not publicly documented). android.permission.REQUEST_INSTALL_PACKAGES

change network connectivity Allows the app to change the state of network connectivity. android.permission.CHANGE_NETWORK_STATE

Mount Unmount Filesystems android.permission.MOUNT_UNMOUNT_FILESYSTEMS

control vibration Allows the app to control the vibrator. android.permission.VIBRATE

Read Logs android.permission.READ_LOGS

record audio android.permission.RECORD_AUDIO

find accounts on the device Allows the app to get the list of accounts known by the tablet. This may include any accounts created by applications you have installed. android.permission.GET_ACCOUNTS

change your audio settings Allows the app to modify global audio settings such as volume and which speaker is used for output. android.permission.MODIFY_AUDIO_SETTINGS

connect and disconnect from Wi-Fi Allows the app to connect to and disconnect from Wi-Fi access points and to make changes to device configuration for Wi-Fi networks. android.permission.CHANGE_WIFI_STATE

keep car screen turned on Allows the app to keep the car screen turned on. android.permission.WAKE_LOCK

directly call phone numbers Allows the app to call phone numbers without your intervention. This may result in unexpected charges or calls. Note that this doesn\'t allow the app to call emergency numbers. Malicious apps may cost you money by making calls without your confirmation, or dial carrier codes which cause incoming calls to be automatically forwarded to another number. android.permission.CALL_PHONE

Flashlight android.permission.FLASHLIGHT

access approximate location only in the foreground This app can get your approximate location from location services while the app is in use. Location services for your device must be turned on for the app to get location. android.permission.ACCESS_COARSE_LOCATION

access precise location only in the foreground This app can get your precise location from location services while the app is in use. Location services for your device must be turned on for the app to get location. This may increase battery usage. android.permission.ACCESS_FINE_LOCATION

pair with Bluetooth devices Allows the app to view the configuration of Bluetooth on the tablet, and to make and accept connections with paired devices. android.permission.BLUETOOTH

access Bluetooth settings Allows the app to configure the local Bluetooth tablet, and to discover and pair with remote devices. android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_SCAN Custom app or vendor permission (not publicly documented). android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH_CONNECT Custom app or vendor permission (not publicly documented). android.permission.BLUETOOTH_CONNECT

modify system settings Allows the app to modify the system\'s settings data. Malicious apps may corrupt your system\'s configuration. android.permission.WRITE_SETTINGS

access extra location provider commands Allows the app to access extra location provider commands. This may allow the app to interfere with the operation of the GPS or other location sources. android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

Uses Features (2)

Camera Feature for {@link #getSystemAvailableFeatures} and android.hardware.camera

Camera Autofocus Feature for {@link #getSystemAvailableFeatures} and android.hardware.camera.autofocus

Activities (11)

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.WebAppActivity

io.dcloud.ProcessMediator

io.dcloud.WebviewActivity

com.dmcbig.mediapicker.PickerActivity

com.dmcbig.mediapicker.PreviewActivity

io.dcloud.feature.gallery.imageedit.IMGEditActivity

io.dcloud.sdk.activity.WebViewActivity

uts.sdk.modules.DCloudUniMedia.SystemPickerActivity

Services (2)

com.amap.api.location.APSService

io.dcloud.sdk.base.service.DownloadService

Broadcast Receivers (2)

com.taobao.weex.WXGlobalEventReceiver com.taobao.weex.WXGlobalEventReceiver

Profile installer Installs performance profiles to speed up app startup and hot paths. androidx.profileinstaller.ProfileInstallReceiver

Content Providers (3)

io.dcloud.common.util.DCloud_FileProvider

io.dcloud.sdk.base.service.provider.DCloudAdFileProvider

androidx.startup.InitializationProvider

URL Endpoints (1)

https://ask.dcloud.net.cn/article/36199

Submission Details

Submitted At 2026-07-15

First Submission 2026-07-15

Last Submission 2026-07-15

Stored Until 2026-08-14

Names & Tags

__UNI__A7C9A54__20260714105213.apk apk android obfuscated checks-gps telephony detect-debug-environment checks-cpu-name reflection