Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.MulDrop.276.origin
File system changes:
Creates the following files:
- /data/data/####/.np_ext.apk
- /data/data/####/.np_ext.apk.cur.prof
- /data/data/####/.np_ext.vdex
Miscellaneous:
Loads the following dynamic libraries:
- libxmygovln
Gets information about installed apps.
Displays its own windows over windows of other apps.
Requests the system alert window permission.
Appears corrupted in a way typical for malicious files.
Contains hidden alternative main activities.
