Linked Questions

31
votes
3answers
47k views

How to check an application's checksum or hash on Google Play? [duplicate]

Some free applications on Google Play are limited to the United States so the rest of the world has to use dodgy sites to get them. However the security of such sites are questionable as the apps ...
1
vote
1answer
85 views

Can we find out who has developed the app by looking on the signature? [duplicate]

Is it possible that the published app is not signed by its developer andd if yes, How can we find out who is the app developer?
7
votes
1answer
1k views

APK signature verified but warns file “not protected by signature”?

I'm using apksigner to verify the authenticity of a Google Podcast apk that I downloaded from an apk mirror. This apk (and older versions) verifies successfully (v1/v2/v3) and returns exit code 0 but ...
4
votes
1answer
3k views

Does `adb install` do APK signature verification?

When using adb install something.apk, does the Android Package Manager verify the signature of the APK? adb install seems to bring up nothing up on the phone's screen, so it's hard for me to know if ...
2
votes
2answers
4k views

Comparing signatures of apks

I have two .apk files that are supposed to be different versions of the same app. What is the best way to check if they where both signed with the same key? I want to make sure no mistakes were done ...
0
votes
2answers
832 views

How to calculate/verify SHA-256-Digest from META-INF/*.SF file?

I'm trying to manually verify an APK file in the way Android would do when such file is installed in some old system (<7). I have one problem I can't really solve. They say the following: As ...
1
vote
1answer
737 views

Manual icon change now apk wont install

Well I've went into the res folder to spruce up an app icon figuring it would look much better with the modified alternative. The icon png 's are stored in about five different folders. res\drawable-...
0
votes
0answers
311 views

Root - patch/change installed application's smali code

I want to modify an existing android application, but I want to have it keep its original signature, or at least its capabilities of auto updating and using Google Play services. I am aware of Lucky ...
0
votes
1answer
48 views

Play Store not updating some apps

On my Samsung Galaxy Tab S2 running LineageOS 16 with Opengapps, some apps are not being updated to the latest versions. In particular there is Google Meet and Sheets. Meet is stuck on a version dated ...
0
votes
0answers
45 views

Does verifying the apk signature fingerprint guarantees it has no malware? [duplicate]

I want to check if an apk file is really from a specific developer and that the whole apk has no malware in it. I unzipped the apk and in the sub-folder META/INF I used the following command in ...
0
votes
0answers
30 views

How to verify that an application is untouched?

What are some ways to verify that an app is untouched? I see things that are released with the apk file like: PGP Signature Build Log guaranteed to correspond to source tarball If you would like to ...