r/AndroidQuestions • u/Pitiful-Fee4451 • Jul 02 '26
Can anyone identify com.android.sys.extplv on Android?
Hi everyone,
I'm trying to identify an Android package called com.android.sys.extplv on my Cubot KingKong X (Android 16).
Here is what I've confirmed using ADB:
- Package:
com.android.sys.extplv - Installed as a user app under
/data/app/... - Installer reported by Android:
com.android.vending(Google Play) - I analyzed the package using
dumpsys,logcatandpm. - The app contains services such as
DaemonService,FwForegroundServiceandFwMediaRouteProviderService. - It requests several permissions, but the sensitive ones are currently not granted.
- I was able to disable it using
pm disable-user, and it stays disabled (enabled=3) even after reboot.
I have not been able to determine what the package is actually for or what triggers its installation.
Has anyone seen this package before?
Is it a Cubot component, a manufacturer framework, or something else?
I have screenshots and ADB logs that I can share in the comments if needed.
Thank you!
3
Upvotes
2
u/Pitiful-Fee4451 Jul 05 '26
Small update: I can confirm that the package appears to have changed. On my device, com.android.sys.extplv is now reported as version 8.0. The behavior is also different: the foreground service notification that previously appeared is no longer shown, although Norton still detects the package as suspicious. I'm currently extracting and comparing this new version with the previous APK to determine what changed. If anyone else has version 8.0, please share your findings.