APK Security & Privacy Score
Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.
Security
Scan-weighted
78/100
Threat scan flagged
Outdated target SDK
Privacy
Permissions & network
46/100
High-risk permissions
HTTP URLs found
AllowBackup enabled
Possible tracking
58/100
Caution
Overall trust
Facts
Threat scan
1/76 flagged, 0 suspicious
Permissions
29 requested
Network strings
111 URLs (99 HTTP, 12 HTTPS)
Target SDK
27
Certificate
Valid until 2035-07-17 (9 years, suspicious)
Warnings
Threat scan flagged: 1/76 scanners marked this file as malicious.
Found 99 HTTP URL strings (unencrypted).
High-risk permissions detected: android.permission.SYSTEM_ALERT_WINDOW, android.permission.WRITE_SETTINGS, android.permission.RECEIVE_BOOT_COMPLETED
Requests 29 permissions (review carefully).
AllowBackup is enabled.
Possible analytics/tracking domains found: alog.umeng.com, alog.umengcloud.com, uop.umeng.com
Package Name
cn.kuwo.kwmusiccas
Version Code
5000
Version Name
5.0.0.0
Application Name
cn.kuwo.kwmusiccar.App
Debuggable
No
Allow Backup
Yes
Min SDK
Android 16 (Jelly Bean)
Target SDK
Android 27 (Oreo)
Supported ABIs
armeabi
Certificate & Signer
Valid From
Valid To
Serial Number
Thumbprint
Issuer: C
Issuer: CN
Issuer: DN
Issuer: L
Issuer: O
Issuer: OU
Issuer: ST
Issuer: email
Subject: C
Subject: CN
Subject: DN
Subject: L
Subject: O
Subject: OU
Subject: ST
Subject: email
Security Scan
1
⚠️ Threats Detected
Detected by
1 vendor:
Avast-Mobile
(Android:Evo-gen [Trj])
Malicious
1
Suspicious
0
Harmless
0
Undetected
65
Timeout
0
Failure
0
Scan Providers
ALYac
APEX
AVG
Acronis
Ad-Aware
AhnLab-V3
Alibaba
Antiy-AVL
Arcabit
Avast
Avast-Mobile
Android:Evo-gen [Trj]
Avira
Baidu
BitDefender
BitDefenderFalx
BitDefenderTheta
Bkav
CAT-QuickHeal
CMC
ClamAV
Comodo
CrowdStrike
Cybereason
Cylance
Cynet
Cyren
DrWeb
ESET-NOD32
Elastic
Emsisoft
F-Secure
FireEye
Fortinet
GData
Google
Gridinsoft
Ikarus
Jiangmin
K7AntiVirus
K7GW
Kaspersky
Kingsoft
Lionic
MAX
Malwarebytes
MaxSecure
McAfee
McAfee-GW-Edition
MicroWorld-eScan
Microsoft
NANO-Antivirus
Paloalto
Panda
Rising
SUPERAntiSpyware
Sangfor
SentinelOne
Sophos
Symantec
SymantecMobileInsight
TACHYON
Tencent
Trapmine
TrendMicro
TrendMicro-HouseCall
Trustlook
VBA32
VIPRE
ViRobot
VirIT
Webroot
Yandex
Zillya
ZoneAlarm
Zoner
tehtris
File Signatures
SHA-256
6fb8f785639c033427087b5315c92bd49e1c4c14d7f536831e6b8bdebfeb2a6b
MD5
4f01e0aa6f1a37d5028df25f93d27dac
SHA-1
34476971a48ebc8e40a355983ae79cf560b9ccf4
SSDEEP
786432:dfCGrMNQsWz0FYY6rxPvUTxBNQ+vB7XbYcTvOBluridHaev9rMqzc:dfBdsWtVrxns/v1HiBIridaevNA
TLSH
T16B67238EA699F31BC4764433CAA21432B6768E1C251A81371A95B0F45CBBF341B87FDD
VHASH
568ea7ca7f1f84a82d90c00c3b24a6d4
File Intelligence
Type Description
Human-friendly file type name based on multiple detection methods.
Type Extension
Most likely file extension inferred from the content.
Type Tag
Primary type tag assigned by the classifier.
Type Tags
Additional type tags that describe the file content.
Magic
File signature result from magic bytes inspection.
TrID
TrID file type guesses with probabilities.
extensions
File extensions found inside the APK and how many of each.
file types
Detected embedded file types and their counts.
highest datetime
Latest timestamp found among files inside the archive.
lowest datetime
Earliest timestamp found among files inside the archive.
num children
Number of files contained within the archive.
type
Container type detected for the analyzed file.
uncompressed size
Estimated total size of all files after extraction.
Deep Manifest Analysis
Activity Intents (1)
cn.kuwo.kwmusiccar.WelcomeActivity
Service Intents (3)
cn.kuwo.autosdk.AutoSdkService
cn.kuwo.mod.push.PushService
cn.kuwo.service.MainService
Receiver Intents (4)
cn.kuwo.base.util.NetworkStateUtil
cn.kuwo.kwmusiccar.MediaButtonReceiver
cn.kuwo.kwmusiccar.PlayMusicReceiver
cn.kuwo.mod.notification.NotificationReceiver
Native Libraries (18)
libcalsig
libcalsig.so
libgifimage
libgifimage.so
libijkffmpeg
libijkffmpeg.so
libijkplayer
libijkplayer.so
libijkplayerV7
libijkplayerV7.so
libijksdl
libijksdl.so
libijksdlV7
libijksdlV7.so
libimagepipeline
libimagepipeline.so
libkwbase
libkwbase.so
libkwframe
libkwframe.so
libkwframeV7
libkwframeV7.so
liblocSDK7a
liblocSDK7a.so
libmsc
libmsc.so
libmusic3d
libmusic3d.so
libopenal
libopenal.so
libopenalwrapper
libopenalwrapper.so
libp2p
libp2p.so
libzegoliveroom
libzegoliveroom.so
Requested Permissions (41)
modify or delete the contents of your shared storage
android.permission.WRITE_EXTERNAL_STORAGE
read the contents of your shared storage
android.permission.READ_EXTERNAL_STORAGE
run at startup
android.permission.RECEIVE_BOOT_COMPLETED
modify system settings
android.permission.WRITE_SETTINGS
have full network access
android.permission.INTERNET
modify or delete the contents of your shared storage
android.permission.WRITE_EXTERNAL_STORAGE
Mount Format Filesystems
android.permission.MOUNT_FORMAT_FILESYSTEMS
keep car screen turned on
android.permission.WAKE_LOCK
read phone status and identity
android.permission.READ_PHONE_STATE
view network connections
android.permission.ACCESS_NETWORK_STATE
Read Logs
android.permission.READ_LOGS
control vibration
android.permission.VIBRATE
App badge update
com.android.launcher.permission.INSTALL_SHORTCUT
App badge update
com.android.launcher.permission.UNINSTALL_SHORTCUT
reorder running apps
android.permission.REORDER_TASKS
view Wi-Fi connections
android.permission.ACCESS_WIFI_STATE
connect and disconnect from Wi-Fi
android.permission.CHANGE_WIFI_STATE
This app can appear on top of other apps
android.permission.SYSTEM_ALERT_WINDOW
disable your screen lock
android.permission.DISABLE_KEYGUARD
retrieve running apps
android.permission.GET_TASKS
take pictures and videos
android.permission.CAMERA
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
change your audio settings
android.permission.MODIFY_AUDIO_SETTINGS
view network connections
android.permission.ACCESS_NETWORK_STATE
view Wi-Fi connections
android.permission.ACCESS_WIFI_STATE
change network connectivity
android.permission.CHANGE_NETWORK_STATE
read phone status and identity
android.permission.READ_PHONE_STATE
access approximate location only in the foreground
android.permission.ACCESS_COARSE_LOCATION
access precise location only in the foreground
android.permission.ACCESS_FINE_LOCATION
view Wi-Fi connections
android.permission.ACCESS_WIFI_STATE
view network connections
android.permission.ACCESS_NETWORK_STATE
connect and disconnect from Wi-Fi
android.permission.CHANGE_WIFI_STATE
read phone status and identity
android.permission.READ_PHONE_STATE
modify or delete the contents of your shared storage
android.permission.WRITE_EXTERNAL_STORAGE
Mount Unmount Filesystems
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
Read Logs
android.permission.READ_LOGS
control vibration
android.permission.VIBRATE
keep car screen turned on
android.permission.WAKE_LOCK
record audio
android.permission.RECORD_AUDIO
pair with Bluetooth devices
android.permission.BLUETOOTH
reroute outgoing calls
android.permission.PROCESS_OUTGOING_CALLS
Activities (5)
cn.kuwo.kwmusiccar.MainActivity
cn.kuwo.kwmusiccar.NoSDCardActivity
cn.kuwo.kwmusiccar.ad.AdOpenActivity
cn.kuwo.kwmusiccar.WelcomeActivity
cn.kuwo.show.live.activities.MainActivity
Services (4)
com.baidu.location.f
cn.kuwo.service.MainService
cn.kuwo.autosdk.AutoSdkService
cn.kuwo.mod.push.PushService
Broadcast Receivers (4)
cn.kuwo.base.util.NetworkStateUtil
cn.kuwo.base.util.NetworkStateUtil
cn.kuwo.kwmusiccar.MediaButtonReceiver
cn.kuwo.kwmusiccar.MediaButtonReceiver
cn.kuwo.mod.notification.NotificationReceiver
cn.kuwo.mod.notification.NotificationReceiver
cn.kuwo.kwmusiccar.PlayMusicReceiver
cn.kuwo.kwmusiccar.PlayMusicReceiver
URL Endpoints (111)
http://60.28.198.33/music.pay
http://60.28.200.82:808/uparcrash.lct
http://60.28.210.108:8080/
http://ad.tencentmusic.com
http://ad.tencentmusic.com/track/getAdFail
http://ad.tencentmusic.com/track/heap
http://alog.umeng.com/app_logs
http://alog.umengcloud.com/app_logs
http://ar.i.kuwo.cn/US_NEW
http://ar.i.kuwo.cn/US_NEW/kuwo/vuser
http://ar.i.kuwo.cn/US_NEW/kuwo/vuser?f=ar&q=
http://artistpic.kuwo.cn/pic.web
http://artistpicserver.kuwo.cn/pic.web
http://car-vip.kuwo.cn/
http://car-vip.kuwo.cn/vehicle/merge
http://car-vip.kuwo.cn/vehicle/vipinfo
http://cfg.imtt.qq.com/tbs?v=2&mk=
http://checkdcserver.kuwo.cn/u.dc?type=updatedc
http://console.ecom.kuwo.cn/vip_adv/v2/vipzone/carSongList
http://data.openspeech.cn/index.php/clientrequest/clientcollect/isCollect
Submission Details
Submitted At
First Submission
Last Submission
Stored Until