ketv.apk

ShellTV

30.12 MB

Analyzed: 2026-06-07 12:52 UTC

Twitter / X Facebook LinkedIn WhatsApp Telegram Reddit

Analyze Another

APK Security & Privacy Score

Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.

Security Scan-weighted

45/100

Threat scan flagged Outdated target SDK

Privacy Permissions & network

72/100

High-risk permissions HTTP URLs found

55/100

Caution

Overall trust

Facts

Threat scan 7/75 flagged, 0 suspicious

Permissions 16 requested

Network strings 16 URLs (13 HTTP, 3 HTTPS)

Target SDK 28

Certificate Valid until 2051-05-22 (25 years, suspicious)

Warnings

Threat scan flagged: 7/75 scanners marked this file as malicious.

Found 13 HTTP URL strings (unencrypted).

High-risk permissions detected: android.permission.REQUEST_INSTALL_PACKAGES, android.permission.RECEIVE_BOOT_COMPLETED

Package Name com.fongmi.android.tv

Version Code 241

Version Name 2.4.2

App Category 2

Application Name com.fongmi.android.tv.App

Debuggable No

Allow Backup No

Min SDK Android 21 (Lollipop)

Target SDK Android 28 (Pie)

Supported ABIs

armeabi-v7a

Certificate & Signer

Valid From 2026-05-28 03:10:15

Valid To 2051-05-22 03:10:15

Serial Number 1

Thumbprint e378b56e87fd51fddf7ab1c5f70825af1aac4151

Issuer: C 019281

Issuer: CN tvboxx

Issuer: DN C:019281, CN:tvboxx, L:shanghai, O:china, ST:lissslxxxi, OU:tvboxx

Issuer: L shanghai

Issuer: O china

Issuer: OU tvboxx

Issuer: ST lissslxxxi

Subject: C 019281

Subject: CN tvboxx

Subject: DN C:019281, CN:tvboxx, L:shanghai, O:china, ST:lissslxxxi, OU:tvboxx

Subject: L shanghai

Subject: O china

Subject: OU tvboxx

Subject: ST lissslxxxi

Security Scan

7 /75

⚠️ Threats Detected

Detected by 7 vendors: AhnLab-V3 (PUP/Android.Agent.1230564), BitDefenderFalx (Android.Riskware.Agent.JUS), Google (Detected)

Scanned by 75 security vendors

Last scan: 2026-06-07 12:52 UTC

Malicious

Suspicious

Harmless

Undetected

Timeout

Failure

Scan Providers

75 vendors

ALYac undetected

No result reported

Engine 2.0.0.10

APEX type-unsupported

No result reported

Engine 6.786

AVG undetected

No result reported

Engine 23.9.8494.0

Acronis undetected

No result reported

Engine 1.2.0.121

AhnLab-V3 malicious

PUP/Android.Agent.1230564

Engine 3.30.0.10666

Alibaba undetected

No result reported

Engine 0.3.0.5

Antiy-AVL undetected

No result reported

Engine 3.0

Arcabit undetected

No result reported

Engine 2025.0.0.23

Avast undetected

No result reported

Engine 23.9.8494.0

Avast-Mobile undetected

No result reported

Engine 260607-00

Avira undetected

No result reported

Engine 8.3.3.24

BitDefender undetected

No result reported

Engine 7.2

BitDefenderFalx malicious

Android.Riskware.Agent.JUS

Engine 2.0.936

Bkav undetected

No result reported

Engine 8.2.40(8338)

CAT-QuickHeal undetected

No result reported

Engine 22.00

CMC undetected

No result reported

Engine 2.4.2022.1

CTX undetected

No result reported

Engine 2024.8.29.1

ClamAV timeout

No result reported

Engine 1.5.2.0

CrowdStrike undetected

No result reported

Engine 1.0

Cylance type-unsupported

No result reported

Engine 3.0.0.0

Cynet undetected

No result reported

Engine 4.0.3.4

DeepInstinct type-unsupported

No result reported

Engine 5.0.0.8

DrWeb undetected

No result reported

Engine 7.0.75.2070

ESET-NOD32 undetected

No result reported

Engine 18.2.18.0

Elastic undetected

No result reported

Engine 4.0.264

Emsisoft undetected

No result reported

Engine 2024.8.0.61147

F-Secure undetected

No result reported

Engine 18.10.1547.307

Fortinet undetected

No result reported

Engine 7.0.48.0

GData undetected

No result reported

Engine GD:27.44823AVA:64.31375

Google malicious

Detected

Engine 1780830050

Gridinsoft undetected

No result reported

Engine 1.0.247.174

Ikarus failure

No result reported

Engine 6.5.4.0

Jiangmin undetected

No result reported

Engine 16.0.100

K7AntiVirus undetected

No result reported

Engine 14.55.59739

K7GW undetected

No result reported

Engine 14.55.59739

Kaspersky undetected

No result reported

Engine 22.0.1.28

Kingsoft undetected

No result reported

Engine None

Lionic undetected

No result reported

Engine 8.16

Malwarebytes undetected

No result reported

Engine 3.1.0.238

MaxSecure undetected

No result reported

Engine 1.0.0.1

McAfeeD undetected

No result reported

Engine 1.2.0.14833

MicroWorld-eScan undetected

No result reported

Engine 14.0.409.0

Microsoft undetected

No result reported

Engine 1.1.26040.8

NANO-Antivirus undetected

No result reported

Engine 1.0.170.26895

Paloalto type-unsupported

No result reported

Engine 0.9.0.1003

Panda undetected

No result reported

Engine 4.6.4.2

Rising undetected

No result reported

Engine 25.0.0.28

SUPERAntiSpyware undetected

No result reported

Engine 5.6.0.1032

Sangfor undetected

No result reported

Engine 2.22.3.0

SentinelOne type-unsupported

No result reported

Engine 7.6.2.19

Skyhigh timeout

No result reported

Sophos malicious

Andr/Xgen-BQJ

Engine 3.5.1.0

Symantec undetected

No result reported

Engine 1.22.0.0

SymantecMobileInsight undetected

No result reported

Engine 2.0

TACHYON undetected

No result reported

Engine 2026-06-07.02

Tencent undetected

No result reported

Engine 1.0.0.1

Trapmine type-unsupported

No result reported

Engine 4.0.12.0

TrellixENS undetected

No result reported

Engine 6.0.6.653

TrendMicro malicious

PUA.AndroidOS.NpRepack.A

Engine 24.550.0.1002

TrendMicro-HouseCall malicious

PUA.AndroidOS.NpRepack.A

Engine 24.550.0.1002

Trustlook undetected

No result reported

Engine 1.0

VBA32 undetected

No result reported

Engine 5.6.1

VIPRE undetected

No result reported

Engine 6.0.0.35

Varist undetected

No result reported

Engine 6.6.1.3

ViRobot undetected

No result reported

Engine 2014.3.20.0

VirIT undetected

No result reported

Engine 9.5.1222

Webroot undetected

No result reported

Engine 1.10.0.2

Xcitium undetected

No result reported

Engine 38709

Yandex undetected

No result reported

Engine 5.5.2.24

Zillya undetected

No result reported

Engine 2.0.0.5616

ZoneAlarm malicious

Andr/Xgen-BQJ

Engine 6.25-116107380

Zoner undetected

No result reported

Engine 2.2.2.0

alibabacloud type-unsupported

No result reported

Engine 2.2.0

huorong undetected

No result reported

Engine 73e0c6e:73e0c6e:d28a123:d28a123

tehtris type-unsupported

No result reported

Engine v0.1.4

File Signatures

SHA-256 21ca9ac75fa2c53789bb62cb99f1e33a9bcdda1cef5d486af994d7a77e9d240f

MD5 c748c7fc053124cb414e1f61561fc973

SHA-1 5f3958f42b67a68a3cfaf556e7d5ab5b0c1d720e

SSDEEP 786432:zHbD1wRvJExOoy6UfY1XxZzZmZ0ZgZsf1hO5m2DijsaNrLnN7jeHWJAa:r9iR+jX1XxZzZmZ0ZgZsm1BInZjeHra

TLSH T12B6723E6F3589E2FC47751B14D6A7232226A5D22CF8397476848332D3AB75E40F09BD8

VHASH 1da90fc77abf2dcbe0e45e8aafe76fb1

PERMHASH 2411ca9f9d39ac8fe2c3d2247e493248b372301a9c6129df92c4de9443eaf05e

File Intelligence

Type Description Android Human-friendly file type name based on multiple detection methods.

Type Extension apk Most likely file extension inferred from the content.

Type Tag android Primary type tag assigned by the classifier.

Type Tags executable, mobile, android, apk Additional type tags that describe the file content.

Magic Zip archive data, at least v0.0 to extract, compression method=deflate File signature result from magic bytes inspection.

TrID Android Package (40%), Java Archive (20%), VYM Mind Map (18.5%), Sweet Home 3D Design (generic) (15.5%), ZIP compressed archive (5.9%) TrID file type guesses with probabilities.

dhash 0000001c1d0c0008 Perceptual hash used to compare visual similarity of files.

raw md5 a59968ca98e8741fe806d28a155015fe Raw MD5 hash of the file contents.

extensions xml (472), png (349), version (61), properties (40), so (19), js (9), xsd (8), kotlin_builtins (7), svg (4), css (3), ogg (3), webp (3), dex (2), ico (2), json (2), 2_VERSION (1), 3_VERSION (1), bin (1), gz (1), h (1), html (1), jpg (1), md (1), prof (1), profm (1), ttf (1), XmlPullParserFactory (1) File extensions found inside the APK and how many of each.

file types XML (479), PNG (349), unknown (142), ELF (20), OGG (3), DEX (2), JavaScript (2), HTML (1), Java Bytecode (1), JPG (1) Detected embedded file types and their counts.

highest datetime 1981-01-01 01:01:02 UTC Latest timestamp found among files inside the archive.

lowest datetime 1981-01-01 01:01:02 UTC Earliest timestamp found among files inside the archive.

num children 1786 Number of files contained within the archive.

type APK Container type detected for the analyzed file.

uncompressed size 54 MB Estimated total size of all files after extraction.

Sandbox

Sandbox Verdicts

Zenbox android

Harmless 93% confidence CLEAN

Deep Manifest Analysis

Activity Intents (2)

com.fongmi.android.tv.ui.activity.CastActivity

Actions

com.fongmi.android.tv.cast com.fongmi.android.tv.cast

Receiver Intents (4)

androidx.media.session.MediaButtonReceiver

Actions

Media Button Broadcast Action: The "Media Button" was pressed. android.intent.action.MEDIA_BUTTON

Profile installer Installs performance profiles to speed up app startup and hot paths. androidx.profileinstaller.ProfileInstallReceiver

Actions

Install performance profile Installs a profile that helps optimize app performance. androidx.profileinstaller.action.INSTALL_PROFILE

Skip profile install Skips profile installation for this build. androidx.profileinstaller.action.SKIP_FILE

Save performance profile Saves a profile generated during app usage. androidx.profileinstaller.action.SAVE_PROFILE

Benchmark operation Runs a profile installer benchmark operation. androidx.profileinstaller.action.BENCHMARK_OPERATION

com.fongmi.android.tv.receiver.ActionReceiver

Actions

com.fongmi.android.tv.stop com.fongmi.android.tv.stop

com.fongmi.android.tv.prev com.fongmi.android.tv.prev

com.fongmi.android.tv.next com.fongmi.android.tv.next

com.fongmi.android.tv.play com.fongmi.android.tv.play

com.fongmi.android.tv.pause com.fongmi.android.tv.pause

com.fongmi.android.tv.receiver.BootReceiver

Actions

Boot Completed Broadcast Action: This is broadcast once, after the system has finished android.intent.action.BOOT_COMPLETED

android.intent.action.QUICKBOOT_POWERON android.intent.action.QUICKBOOT_POWERON

Native Libraries (18)

libcronet.76.0.3809.111 libcronet.76.0.3809.111.so

libijkffmpeg libijkffmpeg.so

libijksdl libijksdl.so

libjpa libjpa.so

libmitv libmitv.so

libp2p libp2p.so

libp3p libp3p.so

libp4p libp4p.so

libp5p libp5p.so

libp6p libp6p.so

libp7p libp7p.so

libp8p libp8p.so

libp9p libp9p.so

libplayer libplayer.so

libquickjs-android-wrapper libquickjs-android-wrapper.so

librtmp-jni librtmp-jni.so

libxl_stat libxl_stat.so

libxl_thunder_sdk libxl_thunder_sdk.so

Requested Permissions (16)

record audio android.permission.RECORD_AUDIO

Foreground service Allows the app to run a foreground service. android.permission.FOREGROUND_SERVICE

run at startup Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the tablet and allow the app to slow down the overall tablet by always running. android.permission.RECEIVE_BOOT_COMPLETED

have full network access Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet. android.permission.INTERNET

view Wi-Fi connections Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices. android.permission.ACCESS_WIFI_STATE

view network connections Allows the app to view information about network connections such as which networks exist and are connected. android.permission.ACCESS_NETWORK_STATE

read the contents of your shared storage Allows the app to read the contents of your shared storage. android.permission.READ_EXTERNAL_STORAGE

modify or delete the contents of your shared storage Allows the app to write the contents of your shared storage. android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES Custom app or vendor permission (not publicly documented). android.permission.REQUEST_INSTALL_PACKAGES

android.permission.USE_BIOMETRIC Custom app or vendor permission (not publicly documented). android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT Custom app or vendor permission (not publicly documented). android.permission.USE_FINGERPRINT

allow Wi-Fi Multicast reception Allows the app to receive packets sent to all devices on a Wi-Fi network using multicast addresses, not just your tablet. It uses more power than the non-multicast mode. android.permission.CHANGE_WIFI_MULTICAST_STATE

keep car screen turned on Allows the app to keep the car screen turned on. android.permission.WAKE_LOCK

access approximate location only in the foreground This app can get your approximate location from location services while the app is in use. Location services for your device must be turned on for the app to get location. android.permission.ACCESS_COARSE_LOCATION

access precise location only in the foreground This app can get your precise location from location services while the app is in use. Location services for your device must be turned on for the app to get location. This may increase battery usage. android.permission.ACCESS_FINE_LOCATION

Dynamic receiver access Internal app permission used to protect dynamic broadcast receivers. com.fongmi.android.tv.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Uses Features (3)

Microphone Feature for {@link #getSystemAvailableFeatures} and android.hardware.microphone

Touchscreen Feature for {@link #getSystemAvailableFeatures} and android.hardware.touchscreen

Leanback Feature for {@link #getSystemAvailableFeatures} and android.software.leanback

Activities (17)

com.fongmi.android.tv.ui.activity.HomeActivity

com.fongmi.android.tv.ui.activity.CastActivity

com.fongmi.android.tv.ui.activity.VodActivity

com.fongmi.android.tv.ui.activity.LiveActivity

com.fongmi.android.tv.ui.activity.VideoActivity

com.fongmi.android.tv.ui.activity.HistoryActivity

com.fongmi.android.tv.ui.activity.KeepActivity

com.fongmi.android.tv.ui.activity.PushActivity

com.fongmi.android.tv.ui.activity.SearchActivity

com.fongmi.android.tv.ui.activity.CollectActivity

com.fongmi.android.tv.ui.activity.SettingActivity

com.fongmi.android.tv.ui.activity.SettingPlayerActivity

com.fongmi.android.tv.ui.activity.SettingDanmuActivity

com.fongmi.android.tv.ui.activity.SettingCustomActivity

com.fongmi.android.tv.ui.activity.CrashActivity

cat.ereza.customactivityoncrash.activity.DefaultErrorActivity

com.obsez.android.lib.filechooser.permissions.PermissionActivity

Services (11)

com.android.cast.dlna.dmr.DLNARendererService

com.forcetech.service.P2PService

com.forcetech.service.P3PService

com.forcetech.service.P4PService

com.forcetech.service.P5PService

com.forcetech.service.P6PService

com.forcetech.service.P7PService

com.forcetech.service.P8PService

com.forcetech.service.P9PService

com.gsoft.mitv.MainActivity

androidx.room.MultiInstanceInvalidationService

Broadcast Receivers (4)

com.fongmi.android.tv.receiver.BootReceiver com.fongmi.android.tv.receiver.BootReceiver

androidx.media.session.MediaButtonReceiver androidx.media.session.MediaButtonReceiver

com.fongmi.android.tv.receiver.ActionReceiver com.fongmi.android.tv.receiver.ActionReceiver

Profile installer Installs performance profiles to speed up app startup and hot paths. androidx.profileinstaller.ProfileInstallReceiver

Content Providers (5)

androidx.core.content.FileProvider

com.fongmi.quickjs.Provider

cat.ereza.customactivityoncrash.provider.CaocInitProvider

me.jessyan.autosize.InitProvider

androidx.startup.InitializationProvider

URL Endpoints (42)

Submission Details

Submitted At 2026-06-07

First Submission 2026-06-07

Last Submission 2026-06-07

Stored Until 2026-07-07

Names & Tags

ketv.apk android contains-elf apk obfuscated reflection

Other Versions

TV com.fongmi.android.tv 5.4.2 (542) ______5.4.2_64__.apk Analyzed 2026-05-12 05:55 UTC

View report