Universal Installer iconUniversal Installer
Security4 min readUpdated Sep 6, 2026

How to Scan Android APKs for Malware with VirusTotal Before Installing

Sideloading APKs from third-party websites comes with security risks. Here is how to use Universal Installer's built-in VirusTotal integration to inspect hashes and scan packages against 70+ antivirus engines before hitting install.

The Importance of Pre-Install Verification

When you install an APK from outside the Google Play Store, Google Play Protect may only perform basic checks after the package is already staged.

Repackaged or modded APKs can contain trojans, adware, or spyware hidden alongside legitimate application code.

Universal Installer integrates directly with VirusTotal — the world's leading threat intelligence service analyzing files against 70+ top antivirus scanners including Kaspersky, Bitdefender, Microsoft Defender, and Symantec.

How to Set Up VirusTotal API Key in Universal Installer

1. Visit VirusTotal.com and create a free account.

2. Open your VirusTotal user profile and copy your personal API key (free tier includes 500 lookups per day).

3. Open Universal Installer → Settings → Security & VirusTotal.

4. Paste your API key and enable 'Check with VirusTotal'.

Universal Installer calculates the SHA-256 hash of the APK locally and queries VirusTotal's database first, ensuring fast lookups without wasting mobile data.

Interpreting Scan Results and Strict Mode

When inspecting an APK, tap 'Check VirusTotal'. Universal Installer displays the detection ratio (e.g. 0/72 clean, or 4/72 flagged).

You can enable 'Strict Mode' in Settings: if an APK is flagged by known engines or has never been analyzed before, Universal Installer will prompt you with a safety warning before proceeding.

Frequently Asked Questions

Does Universal Installer upload my personal files to VirusTotal?

By default, Universal Installer only sends the SHA-256 checksum hash to look up existing scan records. If a file has never been seen before, it will ask for your explicit confirmation before uploading the APK for analysis.

Is the VirusTotal integration free to use?

Yes! VirusTotal provides free public API keys for personal use with generous daily quotas that easily cover normal app installs.

Try Universal Installer for free

Install any APK, APKS, or XAPK format across your Phone, Wear OS smartwatch, and Android TV. Open source, zero ads, no accounts.