Checks Android system properties for emulator presence.

Checks known Qemu files.

Checks for known Qemu files that exist on Android virtual device images.

Loads dropped Dex/Jar

Runs executable file dropped to the device during analysis.

Requests dangerous framework permissions

Reads information about phone network operator.

Removes a system notification.

Uses Crypto APIs (Might try to encrypt user data).