FileScan.IO or VirusTotal for apk scanning recommended?

kebab_definite

I search for an option to detect malware in apks.

other8026

kebab_definite I wouldn't suggest relying too heavily on this sort of apk scanning. These scanners scan for anything that's known to be malicious. These kinds of virus scanning apps that rely on badness enumeration to work cannot possibly catch other malicious code, for example a malicious developer making changes to their app to steal private data and the scanner would never catch the change.

Better that you get apps from trustworthy sources or at least check if apps you're installing are genuine using something like AppVerifier.

trashaccount

Virustotal never failed me. But if you dont trust an app, use a different profile for it.

kebab_definite

other8026 are apps in the appverifier database safe to use?

One app Requests permission android.permission.RECEIVE_BOOT_COMPLETED

"Has permission to execute code after phone reboot"
Verdict
suspicious

Arcording to virus total the app is No threat

other8026

kebab_definite are apps in the appverifier database safe to use?

I don't believe that's the point of AppVerifier. It's primary purpose is to help make it easier for users to make sure they have or will install apps signed with the expected keys.

kebab_definite One app Requests permission android.permission.RECEIVE_BOOT_COMPLETED

This is kind of normal. I wouldn't be suspicious of an app just because it does that. It could be fetching data from a server to see if anything was missed when the phone was off or some other valid reason like that.

kebab_definite

other8026
Thank you a lot for helping out. So i guess its not so likely an app like a game from github or itch.io contains malware that isn't detected by virustotal?

Or from a app like a modified music production or drawing app?

kebab_definite

trashaccount i use a second profile for the music app and have a all ways on vpn. I restricted the app in battery settings so the app can't turn on by its self. So if i have forget to turn off wifi in the first user, it cant get access. Beside that the profile has all exploited protection on maximum.

The app also has no permissions granted and works well. So i guess all is right.

For games i have a nother profile with the same setup.

trashaccount

kebab_definite Yeah your setup sounds good. If the apps have network permission denied they cant send any data.