Is Minecraft Education.apk safe?
None of 78 engines detected a threat, while completed runtime analysis found no offensive activity or maliciously reputed domain contacts.
The APK produced no detections across 78 engines, including 18 reporting tier-1 engines. One completed sandbox found no offensive behavior or malicious runtime assessment, and all five contacted domains were covered by the reputation check without warnings; obtain the app from an official store because publisher identity was not verified here.
caac888048ceaaf617…56113a4f7b6a2dRecommended next actions
Before installing
Install it only from Google Play, the developer's official store, or another source you independently trust.
If you already installed it
Keep normal device protection enabled and stop if the file behaves unexpectedly.
Intelligence
The saved assessment, checked against the scan evidence and recorded coverage.
The reasoning behind this verdict
This section explains the evidence supporting the verdict and keeps conflicting or missing signals visible.
The APK produced no detections across 78 engines, including 18 reporting tier-1 engines. One completed sandbox found no offensive behavior or malicious runtime assessment, and all five contacted domains were covered by the reputation check without warnings; obtain the app from an official store because publisher identity was not verified here.
No engine among 78 flagged the sample, and the reporting tier-1 products found no threat. One completed sandbox recorded ten common Android techniques but no offensive techniques, persistence indicators, dropped files, or malicious runtime assessment. The five observed domains were fully covered by the host-reputation check and none carried malicious or suspicious cache status. Research feeds supplied no MalwareBazaar, CIRCL, or YARAify corroboration, while the sample has been known for roughly three years. Its reflection, telephony, location, and device-discovery capabilities warrant normal privacy caution, and the payload does not establish official publisher provenance.
What We Detected
None of 78 antivirus engines flagged the APK, including reporting tier-1 products such as Avast, BitDefender, ESET-NOD32, Fortinet, and Kaspersky. No named malware family, potentially unwanted application label, or hacktool label was reported. CIRCL, MalwareBazaar, and YARAify also supplied no threat corroboration.
Threat Behavior
One completed sandbox observed ten common Android techniques and no offensive techniques, malicious runtime assessment, persistence indicators, or dropped files. The application contacted five Google-owned service domains; the reputation check covered all five distinct domains and returned no malicious or suspicious entries. Static tags show reflection plus access to telephony, GPS, CPU, and network-adapter information, which may relate to ordinary application functions but can carry privacy implications.
What To Do Now
Use an official app store or Microsoft-controlled distribution channel and verify that the package identifier and developer match the expected Minecraft Education release. Keep Android security protections enabled and review requested permissions before installation, especially location and phone-related access.
Where this verdict could be wrong3 caveats
- The APK uses reflection and accesses telephony, GPS, CPU, and network-adapter information according to file.tags; these capabilities can be privacy-sensitive even though no offensive technique was observed.
- prevalence.uniqueSources=7 and prevalence.timesSubmitted=9 provide only moderate distribution evidence, not authoritative publisher provenance.
- signing.applicable=false means this payload provides no verified publisher identity for confirming that the APK came from an official Minecraft Education channel.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- 0/78 engines reported a malicious or suspicious result.
- All 18 reporting tier-1 engines returned no detection.
- One sandbox found 0 offensive techniques and no malicious runtime assessment.
- All five contacted domains were inspected with no malicious or suspicious reputation hits.
- MalwareBazaar, CIRCL, and YARAify returned no matching threat intelligence.
- Static file.tags include reflection, telephony, GPS, CPU-name, and network-adapter checks.
- The evidence does not provide verified publisher provenance for this Android package.
- Distribution evidence is moderate at 7 sources and 9 submissions.
Install only from an official Microsoft or managed education channel, verify the developer and package details, and keep device protection enabled. Review location and telephony permissions before granting them.
Coverage & freshness
Complete means the check returned a usable result. It does not mean the file is safe.
Antivirus
Complete0 of 78 engines flagged the file.
Sandbox
Complete1 isolated runtime environment contributed observations.
Network
Partial5 of 14 contacted hosts were cross-checked; coverage is incomplete.
YARA
CompleteRule evaluation completed with no recorded matches.
External intel
Complete3 of 3 independent reference sources completed.
Behavior
Plain-English impact first, then the observed runtime evidence.
Runtime flight recorder
Capture complete- 1isolated sandbox run
- 10MITRE ATT&CK techniques
- 0spawned processes
- 15network contacts
- 0filesystem & mutex artifacts
What this file did when executed
This file was detonated in 1 sandbox and its runtime behaviour was observed.
Adversary techniques mapped to the MITRE ATT&CK framework.
- connectivitycheck.gstatic.com
- android.googleapis.com
- www.googleapis.com
- gmscompliance-pa.googleapis.com
- clientservices.googleapis.com
- 173.194.79.94
- 74.125.128.113
- 172.217.218.103
- 142.250.145.95
- 108.177.126.103
- 108.177.126.105
- 74.125.143.94
- 173.194.69.95
- 108.177.127.99
- http://connectivitycheck.gstatic.com/generate_204
Detection & Forensics
Consensus, attribution, signatures, code structure, prevalence, and identity.
Evidence integrity
Chain of custody for the facts preserved in this report.
- 0rule hits recorded
- 0 / 78engines flagged
- 7sources in submission history
Why these facts are shown
Each statement identifies whether it was directly recorded or derived from saved scan facts.
- 01
0 of 78 antivirus engines flagged the file.
Verdict inputView chapterProvenanceObservedSourceAntivirus analysisObserved at - 02
The hash has been submitted 9 times from 7 sources.
ProvenanceDerivedSourceSaved report factsObserved at - 03
Scanned file: Minecraft Education.apk — caac888048ceaaf617aedab716847ebd49bc03cf1b20acbdad56113a4f7b6a2d
ProvenanceObservedSourceUploaded fileObserved at - 04
Contacted host: connectivitycheck.gstatic.com — Contact observed during runtime.
ProvenanceObservedSourceIsolated runtime analysisObserved at - 05
Contacted host: android.googleapis.com — Contact observed during runtime.
ProvenanceObservedSourceIsolated runtime analysisObserved at
Detection sources at a glance
The available sources did not agree on a named threat category.
MalwareBazaar, YARAify, and CIRCL hashlookup completed and returned no entries for this hash.
YARA rules
No matchesThe rule pass completed without a saved public match.
0 of 78 engines flagged this file
View all 78 engine results
PE structure
Not applicablePE structure analysis applies to Windows executable formats, not this file type.
How widely this file has been seen
Moderate prevalence — neither rare nor common. No strong prior applies.
Fingerprint and provenance
- File name
- Minecraft Education.apk
- Format
- Android
- Code signing
- Not applicable to this file type
- Size
- 6.2 MB
- Last analyzed
- Oct 1, 2026, 9:19 PM UTC
caac888048ceaaf617aedab716847ebd49bc03cf1b20acbdad56113a4f7b6a2dSafety & FAQ
Complete recovery guidance and answers for the next decision.
What to do now
This file appears low risk based on the evidence available now.
- Recovery step 01
Install it only from Google Play, the developer's official store, or another source you independently trust.
- Recovery step 02
A clean result reduces known risk, but it cannot guarantee that every new or targeted threat has been detected.
- Recovery step 03
Keep your antivirus and Windows updates switched on so you stay protected.
Safety FAQ
Direct answers grounded in the saved verdict and evidence in this report.
Is Minecraft Education.apk safe?
What is Minecraft Education.apk?
How many antivirus engines detected Minecraft Education.apk?
What is the SHA-256 hash of Minecraft Education.apk?
Is it safe to install Minecraft Education.apk?
How up to date is this analysis of Minecraft Education.apk?
Community
Member reviews and reports for this exact file hash.