inat-boxv15.apk

15.0

18.23 MB

Analyzed: 2026-02-04 02:38 UTC

Twitter / X Facebook LinkedIn WhatsApp Telegram Reddit
Analyze Another

APK Security & Privacy Score

Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.

Security Scan-weighted
71/100
Threat scan clean Modern target SDK
Privacy Permissions & network
85/100
High-risk permissions HTTP URLs found Possible tracking
77/100
Good
Overall trust

Source Verification

Status unverified
Observed hash 4e50823b5c5829b8ef7779116d6244dfae55d23d63e79179538c9b3a745a70b9
A reference release was found, but hash values were not published.

Facts

Threat scan 0/76 flagged, 0 suspicious
Permissions 32 requested
Network strings 29 URLs (5 HTTP, 24 HTTPS)
Target SDK 36
Certificate Valid until 2046-01-17
Source verification UNVERIFIED (hash missing)

Warnings

Found 5 HTTP URL strings (unencrypted).
High-risk permissions detected: android.permission.REQUEST_INSTALL_PACKAGES, android.permission.RECEIVE_BOOT_COMPLETED
Reference release exists, but published hash is unavailable; trust confidence is reduced.
Requests 32 permissions (review carefully).
Possible analytics/tracking domains found: app-measurement.com, firebase-settings.crashlytics.com, pagead2.googlesyndication.com
Package Name com.bp.box
Version Code 15
Version Name 15.0
Application Name com.bp.box.BoxApplication
Debuggable No
Allow Backup No
Min SDK Android 23 (Marshmallow)
Target SDK Android 36 (Unknown)
Supported ABIs
arm64-v8a armeabi-v7a x86 x86_64

Certificate & Signer

Valid From 2021-01-23 21:54:09
Valid To 2046-01-17 21:54:09
Serial Number 42a5f123
Thumbprint 8e37df3c18e142d4a4de88db68e08a180d060a91
Issuer: C 90
Issuer: CN İnat Box
Issuer: DN C:90, CN:İnat Box, L:Turkey, O:Beyazport, ST:Istanbul, OU:Beyazport
Issuer: L Turkey
Issuer: O Beyazport
Issuer: OU Beyazport
Issuer: ST Istanbul
Subject: C 90
Subject: CN İnat Box
Subject: DN C:90, CN:İnat Box, L:Turkey, O:Beyazport, ST:Istanbul, OU:Beyazport
Subject: L Turkey
Subject: O Beyazport
Subject: OU Beyazport
Subject: ST Istanbul

Security Scan

0 /76
✓ Clean
Scanned by 76 security vendors
Last scan: 2026-02-03 17:29:30 +0000 UTC
Malicious
0
Suspicious
0
Harmless
0
Undetected
66
Timeout
0
Failure
1

Scan Providers

76 vendors
ALYac undetected
No result reported
Engine 2.0.0.10
APEX type-unsupported
No result reported
Engine 6.743
AVG undetected
No result reported
Engine 23.9.8494.0
Acronis undetected
No result reported
Engine 1.2.0.121
AhnLab-V3 undetected
No result reported
Engine 3.29.1.10604
Alibaba undetected
No result reported
Engine 0.3.0.5
Antiy-AVL undetected
No result reported
Engine 3.0
Arcabit undetected
No result reported
Engine 2025.0.0.23
Avast undetected
No result reported
Engine 23.9.8494.0
Avast-Mobile undetected
No result reported
Engine 260203-00
Avira undetected
No result reported
Engine 8.3.3.24
Baidu undetected
No result reported
Engine 1.0.0.2
BitDefender undetected
No result reported
Engine 7.2
BitDefenderFalx undetected
No result reported
Engine 2.0.936
Bkav undetected
No result reported
Engine 2.0.0.1
CAT-QuickHeal undetected
No result reported
Engine 22.00
CMC undetected
No result reported
Engine 2.4.2022.1
CTX undetected
No result reported
Engine 2024.8.29.1
ClamAV undetected
No result reported
Engine 1.5.1.0
CrowdStrike undetected
No result reported
Engine 1.0
Cylance type-unsupported
No result reported
Engine 3.0.0.0
Cynet type-unsupported
No result reported
Engine 4.0.3.4
DeepInstinct type-unsupported
No result reported
Engine 5.0.0.8
DrWeb undetected
No result reported
Engine 7.0.74.11120
ESET-NOD32 undetected
No result reported
Engine 18.2.18.0
Elastic undetected
No result reported
Engine 4.0.248
Emsisoft undetected
No result reported
Engine 2024.8.0.61147
F-Secure undetected
No result reported
Engine 18.10.1547.307
Fortinet undetected
No result reported
Engine 7.0.30.0
GData undetected
No result reported
Engine GD:27.43411AVA:64.30601
Google undetected
No result reported
Engine 1770130846
Gridinsoft undetected
No result reported
Engine 1.0.237.174
Ikarus undetected
No result reported
Engine 6.4.16.0
Jiangmin undetected
No result reported
Engine 16.0.100
K7AntiVirus undetected
No result reported
Engine 14.33.58482
K7GW undetected
No result reported
Engine 14.33.58483
Kaspersky undetected
No result reported
Engine 22.0.1.28
Kingsoft undetected
No result reported
Engine None
Lionic undetected
No result reported
Engine 8.16
Malwarebytes undetected
No result reported
Engine 3.1.0.207
MaxSecure undetected
No result reported
Engine 1.0.0.1
McAfeeD undetected
No result reported
Engine 1.2.0.13486
MicroWorld-eScan undetected
No result reported
Engine 14.0.409.0
Microsoft undetected
No result reported
Engine 1.1.25110.1
NANO-Antivirus undetected
No result reported
Engine 1.0.170.26895
Paloalto type-unsupported
No result reported
Engine 0.9.0.1003
Panda undetected
No result reported
Engine 4.6.4.2
Rising undetected
No result reported
Engine 25.0.0.28
SUPERAntiSpyware undetected
No result reported
Engine 5.6.0.1032
Sangfor undetected
No result reported
Engine 2.22.3.0
SentinelOne type-unsupported
No result reported
Engine 7.5.3.1
Skyhigh failure
No result reported
Sophos undetected
No result reported
Engine 3.3.1.0
Symantec undetected
No result reported
Engine 1.22.0.0
SymantecMobileInsight undetected
No result reported
Engine 2.0
TACHYON undetected
No result reported
Engine 2026-02-03.02
Tencent undetected
No result reported
Engine 1.0.0.1
Trapmine type-unsupported
No result reported
Engine 4.0.9.0
TrellixENS undetected
No result reported
Engine 6.0.6.653
TrendMicro undetected
No result reported
Engine 24.550.0.1002
TrendMicro-HouseCall undetected
No result reported
Engine 24.550.0.1002
Trustlook undetected
No result reported
Engine 1.0
VBA32 undetected
No result reported
Engine 5.5.0
VIPRE undetected
No result reported
Engine 6.0.0.35
Varist undetected
No result reported
Engine 6.6.1.3
ViRobot undetected
No result reported
Engine 2014.3.20.0
VirIT undetected
No result reported
Engine 9.5.1137
Webroot undetected
No result reported
Engine 1.9.0.8
Xcitium undetected
No result reported
Engine 38383
Yandex undetected
No result reported
Engine 5.5.2.24
Zillya undetected
No result reported
Engine 2.0.0.5536
ZoneAlarm undetected
No result reported
Engine 6.22-112233604
Zoner undetected
No result reported
Engine 2.2.2.0
alibabacloud type-unsupported
No result reported
Engine 2.2.0
huorong undetected
No result reported
Engine 71f0b6d:71f0b6d:c477ed4:c477ed4
tehtris type-unsupported
No result reported

File Signatures

SHA-256 4e50823b5c5829b8ef7779116d6244dfae55d23d63e79179538c9b3a745a70b9
MD5 3cff33efff07d2bb76f3036aa188409b
SHA-1 8f17f7560bfda772fbb6fcd91b0cd27a7f704faf
SSDEEP 196608:Su809yOSKdfZwLM0CDJB9RfXx3SeF+wIW9eETfDmJ/8j/LQf1m6fWD/HbBzakxXZ:SLu/TBDf9d+EeBWPDDB++
TLSH T13E17D043F249483EEDBAA434565F8331E9257C49831686EB6608F6343DB3AE44F2D7E1
VHASH 40e629ac0efed561d7fcd821ed0f0866
PERMHASH c8fa8e3111886797f143519664c62c0a766a2c3ac407f6bdc9cba0066d867ba1

File Intelligence

Type Description Android Human-friendly file type name based on multiple detection methods.
Type Extension apk Most likely file extension inferred from the content.
Type Tag android Primary type tag assigned by the classifier.
Type Tags executable, mobile, android, apk Additional type tags that describe the file content.
Magic Zip archive data, at least v0.0 to extract, compression method=deflate File signature result from magic bytes inspection.
Magika APK File type predicted by Magika (ML-based file type detection).
TrID Android Package (40%), Java Archive (20%), VYM Mind Map (18.5%), Sweet Home 3D Design (generic) (15.5%), ZIP compressed archive (5.9%) TrID file type guesses with probabilities.
dhash 0000181e1e1d0408 Perceptual hash used to compare visual similarity of files.
raw md5 e9a271df33627a3f87a8a3c6cb26703b Raw MD5 hash of the file contents.
extensions png (507), xml (267), version (104), so (28), properties (24), proto (23), kotlin_builtins (8), txt (8), webp (7), kotlin_module (6), mp3 (5), dex (2), js (2), a (1), bin (1), list (1), prof (1), profm (1), textproto (1), ttf (1), x (1) File extensions found inside the APK and how many of each.
file types PNG (507), XML (267), unknown (190), ELF (28), MP3 (5), DEX (2), Java Bytecode (1) Detected embedded file types and their counts.
highest datetime 1981-01-01 01:01:02 UTC Latest timestamp found among files inside the archive.
lowest datetime 1981-01-01 01:01:02 UTC Earliest timestamp found among files inside the archive.
num children 1760 Number of files contained within the archive.
type APK Container type detected for the analyzed file.
uncompressed size 22 MB Estimated total size of all files after extraction.

Deep Manifest Analysis

Activity Intents (3)

com.bp.box.activities.SplashActivity
Actions
Main Activity Action: Start as a main entry point, does not expect to android.intent.action.MAIN
Categories
android.intent.category.LAUNCHER android.intent.category.LEANBACK_LAUNCHER
com.bp.box.exo.PlayerActivity
Actions
com.google.android.exoplayer.demo.action.VIEW com.google.android.exoplayer.demo.action.VIEW
com.google.android.exoplayer.demo.action.VIEW_LIST com.google.android.exoplayer.demo.action.VIEW_LIST
Categories
android.intent.category.DEFAULT
com.onesignal.NotificationOpenedActivityHMS
Actions
View Activity Action: Display the data to the user. android.intent.action.VIEW

Service Intents (2)

Firebase messaging service Handles push notifications and data messages from Firebase Cloud Messaging. com.google.firebase.messaging.FirebaseMessagingService
Actions
Firebase messaging event Action used by Firebase to deliver a push message to the app. com.google.firebase.MESSAGING_EVENT
OneSignal Huawei messaging service Receives Huawei Push Kit messages for OneSignal notifications. com.onesignal.notifications.services.HmsMessageServiceOneSignal
Actions
Huawei messaging event Action used by Huawei Push Kit to deliver a push message to the app. com.huawei.push.action.MESSAGING_EVENT

Receiver Intents (7)

Profile installer Installs performance profiles to speed up app startup and hot paths. androidx.profileinstaller.ProfileInstallReceiver
Actions
Install performance profile Installs a profile that helps optimize app performance. androidx.profileinstaller.action.INSTALL_PROFILE
Skip profile install Skips profile installation for this build. androidx.profileinstaller.action.SKIP_FILE
Save performance profile Saves a profile generated during app usage. androidx.profileinstaller.action.SAVE_PROFILE
Benchmark operation Runs a profile installer benchmark operation. androidx.profileinstaller.action.BENCHMARK_OPERATION
Work rescheduler Reschedules background work after reboot or app update. androidx.work.impl.background.systemalarm.RescheduleReceiver
Actions
Boot Completed Broadcast Action: This is broadcast once, after the system has finished android.intent.action.BOOT_COMPLETED
androidx.work.impl.diagnostics.DiagnosticsReceiver
Actions
androidx.work.diagnostics.REQUEST_DIAGNOSTICS androidx.work.diagnostics.REQUEST_DIAGNOSTICS
com.google.firebase.iid.FirebaseInstanceIdReceiver
Actions
com.google.android.c2dm.intent.RECEIVE com.google.android.c2dm.intent.RECEIVE
com.onesignal.notifications.receivers.BootUpReceiver
Actions
Boot Completed Broadcast Action: This is broadcast once, after the system has finished android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON android.intent.action.QUICKBOOT_POWERON
com.onesignal.notifications.receivers.FCMBroadcastReceiver
Actions
com.google.android.c2dm.intent.RECEIVE com.google.android.c2dm.intent.RECEIVE
com.onesignal.notifications.receivers.UpgradeReceiver
Actions
My Package Replaced Broadcast Action: A new version of your application has been installed android.intent.action.MY_PACKAGE_REPLACED

Native Libraries (7)

libandroidx.graphics.path libandroidx.graphics.path.so
libbox libbox.so
libconscrypt_jni libconscrypt_jni.so
libcpp01 libcpp01.so
libdatastore_shared_counter libdatastore_shared_counter.so
libmain libmain.so
libsecurity_utils libsecurity_utils.so

Requested Permissions (32)

have full network access Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet. android.permission.INTERNET
run at startup Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the tablet and allow the app to slow down the overall tablet by always running. android.permission.RECEIVE_BOOT_COMPLETED
view network connections Allows the app to view information about network connections such as which networks exist and are connected. android.permission.ACCESS_NETWORK_STATE
android.permission.POST_NOTIFICATIONS Custom app or vendor permission (not publicly documented). android.permission.POST_NOTIFICATIONS
control vibration Allows the app to control the vibrator. android.permission.VIBRATE
android.permission.REQUEST_INSTALL_PACKAGES Custom app or vendor permission (not publicly documented). android.permission.REQUEST_INSTALL_PACKAGES
keep car screen turned on Allows the app to keep the car screen turned on. android.permission.WAKE_LOCK
com.google.android.gms.permission.AD_ID Custom app or vendor permission (not publicly documented). com.google.android.gms.permission.AD_ID
AdServices Attribution Required to call AdServices Attribution APIs. android.permission.ACCESS_ADSERVICES_ATTRIBUTION
AdServices Advertising ID Required to call AdServices Advertising ID APIs. android.permission.ACCESS_ADSERVICES_AD_ID
Install Referrer service Allows Google Play to bind to the app's Install Referrer service for install attribution. com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
Foreground service Allows the app to run a foreground service. android.permission.FOREGROUND_SERVICE
Cloud messaging Allows the app to receive push messages (legacy C2DM/FCM). com.bp.box.permission.C2D_MESSAGE
Cloud messaging receive Allows the app to receive push messages via Google/Firebase Cloud Messaging. com.google.android.c2dm.permission.RECEIVE
App badge update Allows the app to update the launcher icon badge count on Samsung launchers. com.sec.android.provider.badge.permission.READ
App badge update Allows the app to update the launcher icon badge count on Samsung launchers. com.sec.android.provider.badge.permission.WRITE
App badge update Allows the app to update the launcher icon badge count on HTC launchers. com.htc.launcher.permission.READ_SETTINGS
App badge update Allows the app to update the launcher icon badge count on HTC launchers. com.htc.launcher.permission.UPDATE_SHORTCUT
App badge update Allows the app to update the launcher icon badge count on Sony launchers. com.sonyericsson.home.permission.BROADCAST_BADGE
App badge update Allows the app to update the launcher icon badge count on Sony launchers. com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
App badge update Allows the app to update the launcher icon badge count on Apex launchers. com.anddoes.launcher.permission.UPDATE_COUNT
App badge update Allows the app to update the launcher icon badge count on Nova launchers. com.majeur.launcher.permission.UPDATE_BADGE
App badge update Allows the app to update the launcher icon badge count on Huawei launchers. com.huawei.android.launcher.permission.CHANGE_BADGE
App badge update Allows the app to update the launcher icon badge count on Huawei launchers. com.huawei.android.launcher.permission.READ_SETTINGS
App badge update Allows the app to update the launcher icon badge count on Huawei launchers. com.huawei.android.launcher.permission.WRITE_SETTINGS
App badge update Allows the app to update the launcher icon badge count on Android launchers. android.permission.READ_APP_BADGE
App badge update Allows the app to update the launcher icon badge count on Oppo launchers. com.oppo.launcher.permission.READ_SETTINGS
App badge update Allows the app to update the launcher icon badge count on Oppo launchers. com.oppo.launcher.permission.WRITE_SETTINGS
App badge update Allows the app to update the launcher icon badge count on Badger launchers. me.everything.badger.permission.BADGE_COUNT_READ
App badge update Allows the app to update the launcher icon badge count on Badger launchers. me.everything.badger.permission.BADGE_COUNT_WRITE
AdServices Topics Required to call AdServices Topics APIs. android.permission.ACCESS_ADSERVICES_TOPICS
Dynamic receiver access Internal app permission used to protect dynamic broadcast receivers. com.bp.box.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Uses Features (2)

Touchscreen Feature for {@link #getSystemAvailableFeatures} and android.hardware.touchscreen
Leanback Feature for {@link #getSystemAvailableFeatures} and android.software.leanback

Activities (22)

com.bp.box.activities.SplashActivity
com.bp.box.activities.MainActivity
com.bp.box.activities.DiziDetayActivity
com.bp.box.activities.FilmDetayActivity
com.bp.box.activities.TVActivity
com.bp.box.activities.DiziActivity
com.bp.box.activities.SDrmPlusActivity
com.bp.box.activities.FchActivity
com.bp.box.activities.WebActivity
com.bp.box.activities.WebActivityBasic
com.bp.box.util.Update
com.bp.box.exo.PlayerActivity
com.onesignal.NotificationOpenedActivityHMS
com.onesignal.notifications.activities.NotificationOpenedActivity
com.onesignal.notifications.activities.NotificationOpenedActivityAndroid22AndOlder
com.onesignal.core.activities.PermissionsActivity
com.unity3d.services.ads.adunit.AdUnitActivity
com.unity3d.services.ads.adunit.AdUnitTransparentActivity
com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity
com.unity3d.services.ads.adunit.AdUnitSoftwareActivity
com.unity3d.ads.adplayer.FullScreenWebViewDisplay
com.google.android.gms.common.api.GoogleApiActivity

Services (14)

com.google.firebase.components.ComponentDiscoveryService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.android.gms.cast.framework.ReconnectionService
OneSignal Huawei messaging service Receives Huawei Push Kit messages for OneSignal notifications. com.onesignal.notifications.services.HmsMessageServiceOneSignal
com.onesignal.core.services.SyncJobService
com.onesignal.SyncJobService
Firebase messaging service Handles push notifications and data messages from Firebase Cloud Messaging. com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.sessions.SessionLifecycleService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

Broadcast Receivers (12)

com.google.android.gms.measurement.AppMeasurementReceiver com.google.android.gms.measurement.AppMeasurementReceiver
com.google.android.gms.cast.framework.media.MediaIntentReceiver com.google.android.gms.cast.framework.media.MediaIntentReceiver
com.onesignal.notifications.receivers.FCMBroadcastReceiver com.onesignal.notifications.receivers.FCMBroadcastReceiver
com.onesignal.notifications.receivers.NotificationDismissReceiver com.onesignal.notifications.receivers.NotificationDismissReceiver
com.onesignal.notifications.receivers.BootUpReceiver com.onesignal.notifications.receivers.BootUpReceiver
com.onesignal.notifications.receivers.UpgradeReceiver com.onesignal.notifications.receivers.UpgradeReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver com.google.firebase.iid.FirebaseInstanceIdReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
Work rescheduler Reschedules background work after reboot or app update. androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver androidx.work.impl.diagnostics.DiagnosticsReceiver
Profile installer Installs performance profiles to speed up app startup and hot paths. androidx.profileinstaller.ProfileInstallReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Content Providers (3)

androidx.core.content.FileProvider
androidx.startup.InitializationProvider
com.google.firebase.provider.FirebaseInitProvider

URL Endpoints (33)

http://dashif.org/guidelines/last-segment-number http://dashif.org/guidelines/thumbnail_tile http://dashif.org/guidelines/trickmode http://dashif.org/thumbnail_tile http://g.co/dev/packagevisibility http://schemas.microsoft.com/DRM/2007/03/protocols/AcquireLicense https://aomedia.org/emsg/ID3 https://api.onesignal.com/ https://app-measurement.com/a https://app-measurement.com/s/d https://default.url https://developer.android.com/guide/topics/media/issues/cleartext-not-permitted https://developer.android.com/guide/topics/media/issues/player-accessed-on-wrong-thread https://developer.android.com/training/articles/direct-boot https://developer.apple.com/streaming/emsg-id3 https://dns.google/dns-query https://firebase-settings.crashlytics.com/spi/v2/platforms/android/gmp/ https://firebase.google.com/docs/crashlytics/get-started?platform=android#add-plugin https://firebase.google.com/support/guides/disable-analytics https://firebase.google.com/support/privacy/init-options

Submission Details

Submitted At 2026-02-04
First Submission 2026-02-04
Last Submission 2026-02-04
Stored Until 2026-03-06
Names & Tags
inat-box-v15.apk android contains-elf obfuscated reflection detect-debug-environment apk checks-gps telephony