File scan report
Verdict Safe
Is Bit
Not one of the 67 antivirus engines that checked it flagged this Android app, including all 18 major antivirus engines, and it was widely submitted with only ordinary sandbox behaviour.
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
No threat evidence was found. Get the app only from its official release page and check the permissions it asks for before installing.
Good practice2 tips
We found nothing harmful in this file.
Install it only from Google Play or the developer's own website.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 67 flagged
- Flagged 0
- No detection 67
- No result 8
- Code signing Not applicable
- Test run Completed
- First seen 4d ago
Chapter 02
Why we think so
1 point against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
None of the 67 antivirus engines that checked it flagged this Android package, and every major antivirus engine returned a clean result. The sandbox run showed only techniques common in legitimate software, and 151 distinct submitters sent the file.
Zero of the 67 antivirus engines that checked it flagged the file, and all 18 major antivirus engines returned clean results. The single sandbox run produced only techniques common in legitimate software, with no injection, no high-risk techniques and no malicious sandbox verdict. The 15 contacted IP addresses match none of our malicious or suspicious host records. The file was submitted by 151 distinct sources, which fits a popular app build more than a targeted sample. We have not inspected the package contents ourselves, so the call rests on engine, sandbox and prevalence evidence.
What We Detected
No engine flagged the Android package, and none of the 18 major antivirus engines reported a threat. No malware family is named by any source.Threat Behavior
The one sandbox run mapped only communication-related techniques that ordinary apps also show. No process injection, persistence or dropped malicious file was recorded, and the single dropped file carries no verdict, which is neutral. Contacted addresses matched none of our malicious or suspicious host records.What To Do Now
The file is consistent with a legitimate app build. As with any app, install it only from the project's official release page and review the permissions it requests.Where this verdict could be wrong2 caveats
- The file was first seen on Nov 6, 2026 and no one has inspected the APK contents, so a very new trojanized build could still be undetected by the engines.
- The app carries telephony and GPS-check tags, which suit a legitimate torrent client but are also permissions a hostile app could use.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 67 antivirus engines that checked it flagged the file, including all 18 major antivirus engines.
- Widely submitted by 151 distinct sources.
- Sandbox behaviour limited to techniques common in legitimate software.
- None of the 15 contacted addresses appear in our malicious or suspicious host records.
- The file is new, first seen on Nov 6, 2026, and its contents were not inspected by us.
6 sources checked · all complete. See every source
Chapter 03
What it did in our test
It ran in 1 isolated test; no test environment rated what it did as risky.
Test run summary
Capture complete- 1isolated sandbox run
- 7sandbox rule tags
- 0spawned processes
- 15network contacts
- 0filesystem & mutex artifacts
What this file did when executed
This file was detonated in 1 sandbox and its runtime behaviour was observed.
Techniques observed in the sandbox
7MITRE ATT&CK techniques the sandbox mapped. Highlighted ones are rare in normal software; the others are common in legitimate programs too.
- T1071· Application protocol
- T1409
- T1421
- T1422
- T1426
- T1430
- T1573
Observed activity
Network contacts
1515 hosts, listed as 15 addresses. Links show the host and path only.
- IP address
142.251.152.119 - IP address
173.194.194.94 - IP address
104.21.64.137 - IP address
173.194.193.138 - IP address
173.194.206.106 - IP address
172.217.118.4
Show all 15 entries for network contacts
- IP address
172.217.119.4 - IP address
104.21.4.124 - IP address
140.82.114.6 - IP address
142.251.150.4 - IP address
192.179.17.132 - IP address
172.217.116.4 - IP address
173.194.206.102 - IP address
173.194.194.101 - IP address
172.217.112.4
Files this sample writes at runtime
This file drops 1 child at runtime. None are currently flagged malicious in our cache. 1 has no saved verdict and was not checked; that is missing coverage, not a finding.
- 185a00d940db75975a7e…2180a6Not checkedno saved verdict
Chapter 04
Technical details
None of the 67 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · all complete. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Nov 10, 2026, 2:48 PM UTC
- SHA-256
31cdb3d402615ad0134906b28a2ecb13914e83147bd1a1e15d16050a8092d950- SHA-1
a4ef3f7dd4340962f0c0ab014edd6ae66ea50ff0- MD5
81df18c2e2a182e20cf9c615a2a9479b
About this file
BitChord-v1.9.1_arm64-v8a.apk is an Android file of 89.3 MB.
- Type and size
- Android · 89.3 MB
- Signer
- Not applicable
- First seen
- Nov 6, 2026On VirusTotal.
- Submitted by
- 151 distinct sources
First scanned
Antivirus consensus
0 of 67 engines flagged this file
8 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-118 engines0flagged
- Tier-238 engines0flagged
- Low-trust11 engines0flagged
View all 75 engine results
- AcronisClean
- AhnLab-V3Clean
- AlibabaClean
- alibabacloudNo result
- ALYacClean
- Antiy-AVLClean
- APEXNo result
- ArcabitClean
- AvastClean
- Avast-MobileClean
- AVGClean
- AviraClean
- BitDefenderClean
- BitDefenderFalxClean
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceNo result
- CynetNo result
- DeepInstinctNo result
- DrWebClean
- ElasticClean
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoNo result
- PandaClean
- RisingClean
- SangforClean
- SentinelOneClean
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightClean
- TACHYONClean
- tehtrisNo result
- TencentClean
- TrapmineNo result
- TrellixENSClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookClean
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootClean
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
How widely this file has been seen
Lots of people are uploading this but it's recent — typical of newly-released legitimate software. Low prior for malware.
Chapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is BitChord-v1.9.1_arm64-v8a.apk safe?
What is BitChord-v1.9.1_arm64-v8a.apk?
How many antivirus engines detected BitChord-v1.9.1_arm64-v8a.apk?
What is the SHA-256 hash of BitChord-v1.9.1_arm64-v8a.apk?
Is it safe to install BitChord-v1.9.1_arm64-v8a.apk?
How up to date is this analysis of BitChord-v1.9.1_arm64-v8a.apk?
Community
Member reviews and reports for this exact file hash.