if the signature verified, then upload to https://androidobservatory.org
upload to VirusTotal if signature verifies