Validation
Last updated
Once you have successfully integrated the freeMalware Detection module and configured your detection settings, you should verify your setup.
To safely test the integration without exposing your development device to real malware, download our official test samples below. These APKs are completely harmless but are specifically designed to trigger the detection engine.
Once downloaded and sideloaded onto your test device, observe the malware callback. Based on your configuration, you can expect the following:
Detection Trigger: These samples request highly sensitive permissions (e.g., READ_SMS, BIND_ACCESSIBILITY_SERVICE) and are installed from outside a trusted source.
Expected Flags: The callback will report these applications with one or more of the following reasons:
installSource — the application was sideloaded from an untrusted installer.
suspiciousPermission — the application requests dangerous permission combinations matching your configured sets.
blocklist — if you explicitly added the test package name or hash to your configuration.
Configuration Dependency
The reasons reported depend directly on your SuspiciousAppDetectionConfig settings. If no permission sets are configured, only installSource and blocklist reasons can be triggered.
Online Detection Not Available
Free tier detection operates entirely on-device. The onlineMalwareDatabase reason — which cross-references applications against a global threat database — is available exclusively in the Premium tier.
Last updated