Forensics Android APKs on the phone

(Just for my reference)

Purpose: Check .apk files in the phone using VirusTotal.

Tools:

1.     VirusTotal website: https://virustotal.com

2.     MOBILedit Forensic Express 7

3.     sigcheck64: https://docs.microsoft.com/en-us/sysinternals/downloads/sigcheck

Steps:

1.     Use MOBILedit to create a full report

2.     Open a command line window and Go to the report folder Run sigcheck64 -h -a -c -w ..\apks.csv -u -s .\*.apk

3.     Run sigcheck64 -c -w .\samsung.csv -vrs -vt -o .\apks.csv to get these

4.     Open the csv file and analyze the output.