NewBraz icon

newbraz.apk

NewBraz

25.25 MB

Analyzed: 2026-02-10 17:46 UTC

Twitter / X Facebook LinkedIn WhatsApp Telegram Reddit
Analyze Another

APK Security & Privacy Score

Security scoring uses multi-engine scan signals and APK indicators. Privacy scoring uses requested permissions and network endpoint patterns.

Security Scan-weighted
82/100
Threat scan flagged Modern target SDK
Privacy Permissions & network
80/100
High-risk permissions HTTP URLs found AllowBackup enabled Possible tracking
81/100
Good
Overall trust

Facts

Threat scan 1/75 flagged, 0 suspicious
Permissions 20 requested
Network strings 36 URLs (4 HTTP, 32 HTTPS)
Target SDK 34
Certificate Valid until 2035-07-17 (9 years, suspicious)

Warnings

Threat scan flagged: 1/75 scanners marked this file as malicious.
Found 4 HTTP URL strings (unencrypted).
High-risk permissions detected: android.permission.REQUEST_INSTALL_PACKAGES, android.permission.SYSTEM_ALERT_WINDOW, android.permission.RECEIVE_BOOT_COMPLETED
AllowBackup is enabled.
Possible analytics/tracking domains found: app-measurement.com, pagead2.googlesyndication.com
Package Name com.newbraz.p2p
Version Code 811
Version Name 8.1.1
Application Name org.sopcast.android.SopCert
Debuggable No
Allow Backup Yes
Min SDK Android 21 (Lollipop)
Target SDK Android 34 (Android 14)
Supported ABIs
arm64-v8a armeabi-v7a

Certificate & Signer

Valid From 2008-02-29 01:33:46
Valid To 2035-07-17 01:33:46
Serial Number 936eacbe07f201df
Thumbprint 61ed377e85d386a8dfee6b864bd85b0bfaa5af81
Issuer: C US
Issuer: CN Android
Issuer: DN C:US, CN:Android, L:Mountain View, O:Android, ST:California, OU:Android, email:android@android.com
Issuer: L Mountain View
Issuer: O Android
Issuer: OU Android
Issuer: ST California
Issuer: email android@android.com
Subject: C US
Subject: CN Android
Subject: DN C:US, CN:Android, L:Mountain View, O:Android, ST:California, OU:Android, email:android@android.com
Subject: L Mountain View
Subject: O Android
Subject: OU Android
Subject: ST California
Subject: email android@android.com

Security Scan

1 /75
⚠️ Threats Detected
Detected by 1 vendor: BitDefenderFalx (Android.Riskware.TestKey.rA)
Scanned by 75 security vendors
Last scan: 2026-01-13 09:22 UTC
Malicious
1
Suspicious
0
Harmless
0
Undetected
64
Timeout
1
Failure
0

Scan Providers

75 vendors
ALYac undetected
No result reported
Engine 2.0.0.10
APEX type-unsupported
No result reported
Engine 6.735
AVG undetected
No result reported
Engine 23.9.8494.0
Acronis undetected
No result reported
Engine 1.2.0.121
AhnLab-V3 undetected
No result reported
Engine 3.29.1.10604
Alibaba undetected
No result reported
Engine 0.3.0.5
Antiy-AVL undetected
No result reported
Engine 3.0
Arcabit undetected
No result reported
Engine 2025.0.0.23
Avast undetected
No result reported
Engine 23.9.8494.0
Avast-Mobile undetected
No result reported
Engine 260112-02
Avira undetected
No result reported
Engine 8.3.3.24
Baidu undetected
No result reported
Engine 1.0.0.2
BitDefender undetected
No result reported
Engine 7.2
BitDefenderFalx malicious
Android.Riskware.TestKey.rA
Engine 2.0.936
Bkav undetected
No result reported
Engine 2.0.0.1
CAT-QuickHeal undetected
No result reported
Engine 22.00
CMC undetected
No result reported
Engine 2.4.2022.1
CTX undetected
No result reported
Engine 2024.8.29.1
ClamAV timeout
No result reported
Engine 1.5.1.0
CrowdStrike undetected
No result reported
Engine 1.0
Cylance type-unsupported
No result reported
Engine 3.0.0.0
Cynet type-unsupported
No result reported
Engine 4.0.3.4
DeepInstinct type-unsupported
No result reported
Engine 5.0.0.8
DrWeb undetected
No result reported
Engine 7.0.72.9030
ESET-NOD32 undetected
No result reported
Engine 18.2.18.0
Elastic undetected
No result reported
Engine 4.0.244
Emsisoft undetected
No result reported
Engine 2024.8.0.61147
F-Secure undetected
No result reported
Engine 18.10.1547.307
Fortinet undetected
No result reported
Engine 7.0.30.0
GData undetected
No result reported
Engine GD:27.43159AVA:64.30494
Google undetected
No result reported
Engine 1768291408
Gridinsoft undetected
No result reported
Engine 1.0.233.174
Ikarus undetected
No result reported
Engine 6.4.16.0
Jiangmin undetected
No result reported
Engine 16.0.100
K7AntiVirus undetected
No result reported
Engine 14.29.58270
K7GW undetected
No result reported
Engine 14.29.58271
Kaspersky undetected
No result reported
Engine 22.0.1.28
Kingsoft undetected
No result reported
Engine None
Lionic undetected
No result reported
Engine 8.16
Malwarebytes undetected
No result reported
Engine 3.1.0.185
MaxSecure undetected
No result reported
Engine 1.0.0.1
McAfeeD undetected
No result reported
Engine 1.2.0.10275
MicroWorld-eScan undetected
No result reported
Engine 14.0.409.0
Microsoft undetected
No result reported
Engine 1.1.25110.1
Paloalto type-unsupported
No result reported
Engine 0.9.0.1003
Panda undetected
No result reported
Engine 4.6.4.2
Rising undetected
No result reported
Engine 25.0.0.28
SUPERAntiSpyware undetected
No result reported
Engine 5.6.0.1032
Sangfor undetected
No result reported
Engine 2.22.3.0
SentinelOne type-unsupported
No result reported
Engine 7.5.3.1
Skyhigh undetected
No result reported
Engine v2021.2.0+4045
Sophos undetected
No result reported
Engine 3.3.1.0
Symantec undetected
No result reported
Engine 1.22.0.0
SymantecMobileInsight undetected
No result reported
Engine 2.0
TACHYON undetected
No result reported
Engine 2026-01-13.02
Tencent undetected
No result reported
Engine 1.0.0.1
Trapmine type-unsupported
No result reported
Engine 4.0.8.0
TrellixENS undetected
No result reported
Engine 6.0.6.653
TrendMicro undetected
No result reported
Engine 24.550.0.1002
TrendMicro-HouseCall undetected
No result reported
Engine 24.550.0.1002
Trustlook undetected
No result reported
Engine 1.0
VBA32 undetected
No result reported
Engine 5.5.0
VIPRE undetected
No result reported
Engine 6.0.0.35
Varist undetected
No result reported
Engine 6.6.1.3
ViRobot undetected
No result reported
Engine 2014.3.20.0
VirIT undetected
No result reported
Engine 9.5.1121
Webroot undetected
No result reported
Engine 1.9.0.8
Xcitium undetected
No result reported
Engine 38331
Yandex undetected
No result reported
Engine 5.5.2.24
Zillya undetected
No result reported
Engine 2.0.0.5522
ZoneAlarm undetected
No result reported
Engine 6.21-110947605
Zoner undetected
No result reported
Engine 2.2.2.0
alibabacloud type-unsupported
No result reported
Engine 2.2.0
huorong undetected
No result reported
Engine 6cfde4c:6cfde4c:ffdbdd4:ffdbdd4
tehtris type-unsupported
No result reported

File Signatures

SHA-256 5186218bdbe831d11157a830bb78910579d9bebd213d93b48d7e69de7f875b4d
MD5 5a0e8d30f0e41e73c7a62f0dafcac36a
SHA-1 acf3ce7c021b78d0b53b7af87205dc4c5bad8734
SSDEEP 393216:918/HX0Yah9iPNo2rzJdRWyh8B4LRYYY1JaAY9LR+DBhcL2lq3hizbET8m7AJM7N:9l0PNvzJnuORwJS0938izbET8wuRKr9
TLSH T1E3471286AB34AF1AC87310710BD9637A111D6D1F87A2574B680CFA1F36739D91E8EBC4
VHASH 33da95e0212aae59f3607890072bb92b
PERMHASH 41eed599319a418f696be49fd45bde2f37b945da23136aacf47d36a4cb502751

File Intelligence

Type Description Android Human-friendly file type name based on multiple detection methods.
Type Extension apk Most likely file extension inferred from the content.
Type Tag android Primary type tag assigned by the classifier.
Type Tags executable, mobile, android, apk Additional type tags that describe the file content.
Magic Zip archive data, at least v0.0 to extract, compression method=deflate File signature result from magic bytes inspection.
Magika APK File type predicted by Magika (ML-based file type detection).
TrID Android Package (40%), Java Archive (20%), VYM Mind Map (18.5%), Sweet Home 3D Design (generic) (15.5%), ZIP compressed archive (5.9%) TrID file type guesses with probabilities.
dhash 0000001c0d0c0000 Perceptual hash used to compare visual similarity of files.
raw md5 a4e162494a2a5f9a851fcc7757a92ee4 Raw MD5 hash of the file contents.
extensions png (488), xml (402), version (55), properties (23), kotlin_builtins (7), so (4), dex (3), jpg (3), txt (3), ttf (2), bin (1), d0 (1), gz (1), k0 (1), MF (1), prof (1), profm (1), proto (1), textproto (1) File extensions found inside the APK and how many of each.
file types PNG (488), XML (402), unknown (99), ELF (4), DEX (3), JPG (3), Java Bytecode (1) Detected embedded file types and their counts.
highest datetime 1981-01-01 01:01:02 UTC Latest timestamp found among files inside the archive.
lowest datetime 1981-01-01 01:01:02 UTC Earliest timestamp found among files inside the archive.
num children 2534 Number of files contained within the archive.
type APK Container type detected for the analyzed file.
uncompressed size 44 MB Estimated total size of all files after extraction.

Sandbox

Sandbox Verdicts

Zenbox android category: harmless | confidence: 84 | classification: CLEAN | sandbox: Zenbox android

Deep Manifest Analysis

Activity Intents (1)

org.sopcast.android.SopCast
Actions
Main Activity Action: Start as a main entry point, does not expect to android.intent.action.MAIN
Categories
android.intent.category.LAUNCHER android.intent.category.DEFAULT android.intent.category.BROWSABLE android.intent.category.LEANBACK_LAUNCHER

Service Intents (1)

org.sopcast.android.dns.DNSVpnService
Actions
android.net.VpnService android.net.VpnService

Receiver Intents (2)

Profile installer Installs performance profiles to speed up app startup and hot paths. androidx.profileinstaller.ProfileInstallReceiver
Actions
Install performance profile Installs a profile that helps optimize app performance. androidx.profileinstaller.action.INSTALL_PROFILE
Skip profile install Skips profile installation for this build. androidx.profileinstaller.action.SKIP_FILE
Save performance profile Saves a profile generated during app usage. androidx.profileinstaller.action.SAVE_PROFILE
Benchmark operation Runs a profile installer benchmark operation. androidx.profileinstaller.action.BENCHMARK_OPERATION
org.sopcast.android.broadcast.ActionReceiver
Actions
Boot Completed Broadcast Action: This is broadcast once, after the system has finished android.intent.action.BOOT_COMPLETED
Screen Off Broadcast Action: Sent when the device goes to sleep and becomes non-interactive. android.intent.action.SCREEN_OFF
Screen On Broadcast Action: Sent when the device wakes up and becomes interactive. android.intent.action.SCREEN_ON
android.net.conn.CONNECTIVITY_CHANGE android.net.conn.CONNECTIVITY_CHANGE
Time Changed Broadcast Action: The time was set. android.intent.action.TIME_SET
org.sopcast.android.PIP_TOGGLE_PLAYER org.sopcast.android.PIP_TOGGLE_PLAYER

Native Libraries (2)

libgojni libgojni.so
libtvcore libtvcore.so

Requested Permissions (20)

have full network access Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet. android.permission.INTERNET
read phone status and identity Allows the app to access the phone features of the device. This permission allows the app to determine the phone number and device IDs, whether a call is active, and the remote number connected by a call. android.permission.READ_PHONE_STATE
android.permission.READ_OWNER_DATA Custom app or vendor permission (not publicly documented). android.permission.READ_OWNER_DATA
Read Privileged Phone State android.permission.READ_PRIVILEGED_PHONE_STATE
android.permission.WRITE_OWNER_DATA Custom app or vendor permission (not publicly documented). android.permission.WRITE_OWNER_DATA
view network connections Allows the app to view information about network connections such as which networks exist and are connected. android.permission.ACCESS_NETWORK_STATE
view Wi-Fi connections Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices. android.permission.ACCESS_WIFI_STATE
modify or delete the contents of your shared storage Allows the app to write the contents of your shared storage. android.permission.WRITE_EXTERNAL_STORAGE
read the contents of your shared storage Allows the app to read the contents of your shared storage. android.permission.READ_EXTERNAL_STORAGE
run at startup Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the tablet and allow the app to slow down the overall tablet by always running. android.permission.RECEIVE_BOOT_COMPLETED
keep car screen turned on Allows the app to keep the car screen turned on. android.permission.WAKE_LOCK
change your audio settings Allows the app to modify global audio settings such as volume and which speaker is used for output. android.permission.MODIFY_AUDIO_SETTINGS
This app can appear on top of other apps This app can appear on top of other apps or other parts of the screen. This may interfere with normal app usage and change the way that other apps appear. android.permission.SYSTEM_ALERT_WINDOW
android.permission.REQUEST_INSTALL_PACKAGES Custom app or vendor permission (not publicly documented). android.permission.REQUEST_INSTALL_PACKAGES
Foreground service Allows the app to run a foreground service. android.permission.FOREGROUND_SERVICE
com.google.android.gms.permission.AD_ID Custom app or vendor permission (not publicly documented). com.google.android.gms.permission.AD_ID
Install Referrer service Allows Google Play to bind to the app's Install Referrer service for install attribution. com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
AdServices Attribution Required to call AdServices Attribution APIs. android.permission.ACCESS_ADSERVICES_ATTRIBUTION
AdServices Advertising ID Required to call AdServices Advertising ID APIs. android.permission.ACCESS_ADSERVICES_AD_ID
Dynamic receiver access Internal app permission used to protect dynamic broadcast receivers. com.newbraz.p2p.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Uses Features (2)

Touchscreen Feature for {@link #getSystemAvailableFeatures} and android.hardware.touchscreen
Leanback Feature for {@link #getSystemAvailableFeatures} and android.software.leanback

Activities (3)

org.sopcast.android.SopCast
org.sopcast.android.dns.BackgroundVpnConfigureActivity
com.google.android.gms.common.api.GoogleApiActivity

Services (10)

com.tvbus.engine.TVService
org.sopcast.android.dns.DNSVpnService
org.sopcast.android.dns.ConnectivityBackgroundService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
com.google.android.gms.cast.framework.ReconnectionService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.firebase.components.ComponentDiscoveryService
com.google.firebase.sessions.SessionLifecycleService

Broadcast Receivers (5)

org.sopcast.android.broadcast.ActionReceiver org.sopcast.android.broadcast.ActionReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
com.google.android.gms.cast.framework.media.MediaIntentReceiver com.google.android.gms.cast.framework.media.MediaIntentReceiver
com.google.android.gms.measurement.AppMeasurementReceiver com.google.android.gms.measurement.AppMeasurementReceiver
Profile installer Installs performance profiles to speed up app startup and hot paths. androidx.profileinstaller.ProfileInstallReceiver

Content Providers (3)

androidx.core.content.FileProvider
com.google.firebase.provider.FirebaseInitProvider
androidx.startup.InitializationProvider

URL Endpoints (39)

http://dashif.org/guidelines/last-segment-number http://dashif.org/guidelines/thumbnail_tile http://dashif.org/guidelines/trickmode http://dashif.org/thumbnail_tile http://schemas.microsoft.com/DRM/2007/03/protocols/AcquireLicense https://aomedia.org/emsg/ID3 https://app-measurement.com/a https://default.url https://developer.android.com/guide/topics/media/issues/cleartext-not-permitted https://developer.android.com/guide/topics/media/issues/player-accessed-on-wrong-thread https://developer.apple.com/streaming/emsg-id3 https://firebase.google.com/docs/android/kotlin-migration https://firebase.google.com/docs/crashlytics/get-started?platform=android#add-plugin https://firebase.google.com/support/guides/disable-analytics https://firebase.google.com/support/privacy/init-options https://goo.gl/NAOOOI https://google.com/search https://imdb.com/title/ https://issuetracker.google.com/issues/new?component=907884&template=1466542 https://pagead2.googlesyndication.com/pagead/gen_204?id=gmob-apps

Submission Details

Submitted At 2026-02-10
First Submission 2026-02-10
Last Submission 2026-02-10
Stored Until 2026-03-12
Names & Tags
071225043033.apk base.apk 1763995649675-NewBraz%208.apk checks-cpu-name contains-elf apk checks-gps telephony reflection android obfuscated