Malware distributors use double extensions to trick users who have “Hide extensions for known file types” enabled in Windows. For example:
How to generate JSON report for an APK · Issue #708 - GitHub SalesBuzz.Client 4.52.01.74.apk.7z
SalesBuzz.Client.4.52.01.74.apk.7z (12.4 MB extracted → 34.1 MB APK) Malware distributors use double extensions to trick users
If you need a report on the APK's internal structure or security: SalesBuzz.Client 4.52.01.74.apk.7z
Let’s break down why.