If a file is not coming from Google Play, treat it as untrusted until you have a checksum, a publisher you recognize, and a reason the official store is not an option.
Guides
How to vet an Android APK before you sideload
If a file is not coming from Google Play, treat it as untrusted until you have a checksum, a publisher you recognize, and a…