I have created an image of my entire device and all of its partitions (mmcblk0.img). I would like to perform an "offline" scan of my device on my computer.

Is there any known projects or ways of performing an analysis, scan, or investigation of this image for spyware or malware? Maybe an emulator built for this purpose could help here?

  • 1
    You don't need to create a partition dump to perform scanning, it can be done on device too (with root privileges). I have a working ClamAV setup on my phone which I run sometimes. Otherwise create dump of individual partitions you want to scan, mount them on Linux PC and run malware scanner. Or even in custom recovery expose the partition as UMS and that will appear as USB drive on PC. – Irfan Latif Nov 16 '19 at 21:07

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.