capable of reading memory images from different Android kernel versions, and capable of performing a wide range of memory analysis and digital evidence extraction. Volatility analyzes memory images, which must be extracted from the physical memory of the Android device, these images are extracted using Linux Memory Extractor “LiME” [12], to this moment, I`m not aware of any other Android memory image extractor. This loadable kernel module can acquire the full memory address range from an Android
Malicious software, or simply malware, can be described as software that a computer user never authorized to be loaded. This means that the software can be found on user’s computer without his or her knowledge. Furthermore, a malware can be described as software that collects private information from any computer without user’s knowledge and authorization. As the name suggests, this software is malicious and can do great damage to a computer, mobile device, or other related devices. This damage can