APK Security & Privacy Score
Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.
Security
Scan-weighted
89/100
Threat scan flagged
Modern target SDK
Privacy
Permissions & network
98/100
High-risk permissions
AllowBackup enabled
Low data access
93/100
Excellent
Overall trust
Facts
Threat scan
1/73 flagged, 0 suspicious
Permissions
10 requested
Network strings
5 URLs (0 HTTP, 5 HTTPS)
Target SDK
34
Certificate
Valid until 2065-04-21 (39 years, suspicious)
Warnings
Threat scan flagged: 1/73 scanners marked this file as malicious.
High-risk permissions detected: android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS, android.permission.RECEIVE_BOOT_COMPLETED
AllowBackup is enabled.
Package Name
it.deviato.spotifuck
Version Code
34
Version Name
1.7.0
App Category
1
Application Name
it.deviato.spotifuck.AppSingleton
Debuggable
No
Allow Backup
Yes
Min SDK
Android 21 (Lollipop)
Target SDK
Android 34 (Android 14)
Supported ABIs
arm64-v8a
armeabi-v7a
x86
x86_64
Certificate & Signer
Valid From
Valid To
Serial Number
Thumbprint
Issuer: C
Issuer: CN
Issuer: DN
Issuer: L
Issuer: O
Issuer: OU
Issuer: ST
Subject: C
Subject: CN
Subject: DN
Subject: L
Subject: O
Subject: OU
Subject: ST
Security Scan
1
⚠️ Threats Detected
Detected by
1 vendor:
AhnLab-V3
(PUP/Android.Moda.1319175)
Malicious
1
Suspicious
0
Harmless
0
Undetected
64
Timeout
1
Failure
2
Scan Providers
ALYac
APEX
AVG
Acronis
AhnLab-V3
PUP/Android.Moda.1319175
Alibaba
Antiy-AVL
Arcabit
Avast
Avast-Mobile
Avira
BitDefender
BitDefenderFalx
Bkav
CAT-QuickHeal
CMC
CTX
ClamAV
CrowdStrike
Cylance
Cynet
DrWeb
ESET-NOD32
Elastic
Emsisoft
F-Secure
Fortinet
GData
Google
Gridinsoft
Ikarus
Jiangmin
K7AntiVirus
K7GW
Kaspersky
Kingsoft
Lionic
Malwarebytes
MaxSecure
McAfeeD
MicroWorld-eScan
Microsoft
NANO-Antivirus
Paloalto
Panda
Rising
SUPERAntiSpyware
Sangfor
SentinelOne
Skyhigh
Sophos
Symantec
SymantecMobileInsight
TACHYON
Tencent
TrellixENS
TrendMicro
TrendMicro-HouseCall
Trustlook
VBA32
VIPRE
Varist
ViRobot
VirIT
Webroot
Xcitium
Yandex
Zillya
ZoneAlarm
Zoner
alibabacloud
huorong
tehtris
File Signatures
SHA-256
933181ed2c691d46173e8a6f7cc599f6c9e8e4f70f309f2cc0f3861df872141c
MD5
5aec6ba31f467a7daa91dff762299df0
SHA-1
aa454b0a858ac3a761600d613f38e4d6d27fb898
SSDEEP
49152:Vc8V365Ks07JEWpTRSFPtWYd3wo0jYbhLjYtxD8lJTYb1/mgt73Gdjx:PV0V0yFPtXwo0qhHSxD8rTq73Gdjx
TLSH
T1FA06BF49BF89B92FC87B00320FA6877566568C168E82D7477454372CAC7B6D80F5AFC8
VHASH
3df9e09533571d8669c3a14c491955a1
PERMHASH
3831c0942c0c0582952e6c46db4e4f3256d8ffb19b0bdba6cf41ad225484ee02
File Intelligence
Type Description
Human-friendly file type name based on multiple detection methods.
Type Extension
Most likely file extension inferred from the content.
Type Tag
Primary type tag assigned by the classifier.
Type Tags
Additional type tags that describe the file content.
Magic
File signature result from magic bytes inspection.
Magika
File type predicted by Magika (ML-based file type detection).
TrID
TrID file type guesses with probabilities.
dhash
Perceptual hash used to compare visual similarity of files.
raw md5
Raw MD5 hash of the file contents.
extensions
File extensions found inside the APK and how many of each.
file types
Detected embedded file types and their counts.
highest datetime
Latest timestamp found among files inside the archive.
lowest datetime
Earliest timestamp found among files inside the archive.
num children
Number of files contained within the archive.
type
Container type detected for the analyzed file.
uncompressed size
Estimated total size of all files after extraction.
Deep Manifest Analysis
Activity Intents (2)
it.deviato.spotifuck.LinkHandler
it.deviato.spotifuck.MainActivity
Service Intents (1)
it.deviato.spotifuck.WebService
Receiver Intents (4)
androidx.media.session.MediaButtonReceiver
Profile installer
androidx.profileinstaller.ProfileInstallReceiver
it.deviato.spotifuck.HomeWidget
it.deviato.spotifuck.WebService$MediaActionReceiver
Native Libraries (1)
libmoddersu7
libmoddersu7.so
Requested Permissions (10)
run at startup
android.permission.RECEIVE_BOOT_COMPLETED
have full network access
android.permission.INTERNET
pair with Bluetooth devices
android.permission.BLUETOOTH
android.permission.BLUETOOTH_CONNECT
android.permission.BLUETOOTH_CONNECT
Foreground service
android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK
android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK
android.permission.POST_NOTIFICATIONS
android.permission.POST_NOTIFICATIONS
keep car screen turned on
android.permission.WAKE_LOCK
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
Dynamic receiver access
it.deviato.spotifuck.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Activities (3)
it.deviato.spotifuck.SettingsActivity
it.deviato.spotifuck.MainActivity
it.deviato.spotifuck.LinkHandler
Services (1)
it.deviato.spotifuck.WebService
Broadcast Receivers (4)
androidx.media.session.MediaButtonReceiver
androidx.media.session.MediaButtonReceiver
it.deviato.spotifuck.WebService$MediaActionReceiver
it.deviato.spotifuck.WebService$MediaActionReceiver
it.deviato.spotifuck.HomeWidget
it.deviato.spotifuck.HomeWidget
Profile installer
androidx.profileinstaller.ProfileInstallReceiver
Content Providers (2)
com.squareup.picasso.PicassoProvider
androidx.startup.InitializationProvider
URL Endpoints (7)
Submission Details
Submitted At
First Submission
Last Submission
Stored Until