metasploit | McAfeeSecurityAntivirusVPN[.]apk

Sharing

Copy URL

Twitter E-mail

General

Target

McAfeeSecurityAntivirusVPN.apk
Size

106.9MB
MD5

0b6071f311e7cba13fa2dfb0a6d08813
SHA1

26ae7051b9113b7180515b0634055bacbf25ac16
SHA256

b530895eb5541e9a40c194a15147e9a22471a407d01d1120702c97301f0cbcd3
SHA512

04b1debab171a8a8aa8e93faaebd3eecf182b9028c46cd3cae843baf2d40104e326dfba73c4d98a125107a6962afc751ab21776a2b478bd055bd7616adbdb77e
SSDEEP

3145728:uh+aGMjOkxtSw9z6cXdH7KRdV3Y8i6UgUq:uh+6OruH7kIKUTq

Score

10^/10

metasploit

Malware Config

Signatures

Metasploit family
metasploit
Metasploit payload 1 IoCs

Processes:

resource yara_rule

sample family_metasploit

resource	yara_rule
sample	family_metasploit

Declares services with permission to bind to the system 3 IoCs

Processes:

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 11 IoCs

Processes:

description	ioc
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Files

McAfeeSecurityAntivirusVPN.apk
.apk android arch:arm arch:x64 arch:x86 arch:arm64

com.wsandroid.suite

com.android.mcafee.ui.framework.BaseActivity

Activities

com.android.mcafee.ui.framework.BaseActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.mcafee.financialtrasactionmonitoring.InAppFastLinkBrowserActivity

android.intent.action.VIEW

com.microsoft.identity.client.BrowserTabActivity

android.intent.action.VIEW

net.openid.appauth.RedirectUriReceiverActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.mcafee.vpn_sdk.PermissionActivity

com.mcafee.action.VPNPermissionActivity

com.auth0.android.provider.RedirectActivity

android.intent.action.VIEW

com.google.firebase.auth.internal.GenericIdpActivity

android.intent.action.VIEW

com.google.firebase.auth.internal.RecaptchaActivity

android.intent.action.VIEW

Permissions

android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.USE_FULL_SCREEN_INTENT
com.android.vending.BILLING
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.REQUEST_DELETE_PACKAGES
android.permission.QUERY_ALL_PACKAGES
android.permission.FOREGROUND_SERVICE
android.permission.READ_PHONE_NUMBERS
android.permission.POST_NOTIFICATIONS
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
org.ntpsync.permission.GET_TIME
android.permission.CHANGE_COMPONENT_ENABLED_STATE
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.READ_CONTACTS
com.google.android.c2dm.permission.RECEIVE
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_AD_ID
android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.USE_EXACT_ALARM
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
com.google.android.providers.gsf.permission.READ_GSERVICES
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.wsandroid.suite.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

com.appsflyer.SingleInstallBroadcastReceiver

com.android.vending.INSTALL_REFERRER

com.android.mcafee.receivers.PPSBootCompleteBroadcastReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.LOCKED_BOOT_COMPLETED
android.intent.action.MY_PACKAGE_REPLACED

com.android.mcafee.ui.receiver.DeepLinkReceiver

com.mcafee.pps.deeplink.intent

com.android.mcafee.ui.receiver.PPSBootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

com.android.mcafee.upgrade.UpgradeBroadcastReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.mcafee.oac.ui.notification.NotificationPublisher

android.intent.action.NOTIFY

com.mcafee.vsm.sdk.receiver.BootupBroadcastReceiver

android.intent.action.QUICKBOOT_POWERON
android.intent.action.BOOT_COMPLETED

com.mcafee.vsm.sdk.receiver.PackageBroadcastReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.mcafee.vsm.sdk.receiver.SdcardBroadcastReceiver

android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_SCANNER_STARTED
android.intent.action.MEDIA_UNMOUNTED
android.intent.action.MEDIA_BAD_REMOVAL
android.intent.action.MEDIA_EJECT

com.android.mcafee.receivers.LocaleBroadcastReceiver

android.intent.action.LOCALE_CHANGED

com.mcafee.sg.broadcastReciever.SmsReceiver

android.provider.Telephony.SMS_RECEIVED

com.mcafee.sg.broadcastReciever.RCSReceiver

com.google.android.rcs.message.RECEIVED

com.mcafee.android.network.NetworkChangesReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.mcafee.android.battery.BatteryChargingReceiver

android.os.action.CHARGING
android.os.action.DISCHARGING
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.mcafee.android.schedule.TimeReceiver

android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.mcafee.mcanalytics.dataenrichment.observers.LocaleObserver

android.intent.action.LOCALE_CHANGED

com.mcafee.mcanalytics.dataenrichment.observers.TimezoneObserver

android.intent.action.TIMEZONE_CHANGED

com.mcafee.csp.service.CspCommonCIDReceiver

com.mcafee.csp.clientidinfo

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.mcafee.bp.messaging.MessagingConfigReciever

com.mcafee.bp.messaging.internal.provider.CspProvider.getPolicy

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

Services

com.android.mcafee.service.PPSForegroundService

com.mcafee.pps.wifi.action.start
com.mcafee.pps.wifi.action.stop
com.mcafee.pps.wifi.action.status
com.mcafee.pps.vsm.action.init
com.mcafee.pps.vsm.action.stop
com.mcafee.pps.vsm.cancelscan
com.mcafee.pps.vpn.action.start
com.mcafee.pps.vpn.action.retry_last_connection
com.mcafee.pps.vpn.action.stop
com.mcafee.pps.vpn.action.register
com.mcafee.pps.vpn.action.unregister
com.mcafee.pps.vpn.action.status
com.mcafee.pps.vpn.action.kill_switch_state
com.mcafee.pps.sb.action.enable

com.mcafee.pps.messaging.GoogleFCMMessageReceiver

com.google.firebase.MESSAGING_EVENT

com.mcafee.sdk.wifi.realtime.WifiStateService

com.mcafee.wifi.WiFiState.changed

com.mcafee.sb.core.SafeBrowsingService

android.net.VpnService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.tunnelbear.vpn.PolarVpnService

android.net.VpnService

com.wireguard.android.backend.GoBackend$VpnService

android.net.VpnService

Android Permissions

McAfeeSecurityAntivirusVPN.apk

Permissions

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.USE_FULL_SCREEN_INTENT

com.android.vending.BILLING

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_NUMBERS

android.permission.POST_NOTIFICATIONS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

org.ntpsync.permission.GET_TIME

android.permission.CHANGE_COMPONENT_ENABLED_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.READ_CONTACTS

com.google.android.c2dm.permission.RECEIVE

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.USE_EXACT_ALARM

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.google.android.providers.gsf.permission.READ_GSERVICES

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.wsandroid.suite.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

Files

com.wsandroid.suite

com.android.mcafee.ui.framework.BaseActivity

Activities

com.android.mcafee.ui.framework.BaseActivity

com.mcafee.financialtrasactionmonitoring.InAppFastLinkBrowserActivity

com.microsoft.identity.client.BrowserTabActivity

net.openid.appauth.RedirectUriReceiverActivity

com.mcafee.vpn_sdk.PermissionActivity

com.auth0.android.provider.RedirectActivity

com.google.firebase.auth.internal.GenericIdpActivity

com.google.firebase.auth.internal.RecaptchaActivity

Permissions

Receivers

com.appsflyer.SingleInstallBroadcastReceiver

com.android.mcafee.receivers.PPSBootCompleteBroadcastReceiver

com.android.mcafee.ui.receiver.DeepLinkReceiver

com.android.mcafee.ui.receiver.PPSBootReceiver

com.android.mcafee.upgrade.UpgradeBroadcastReceiver

com.mcafee.oac.ui.notification.NotificationPublisher

com.mcafee.vsm.sdk.receiver.BootupBroadcastReceiver

com.mcafee.vsm.sdk.receiver.PackageBroadcastReceiver

com.mcafee.vsm.sdk.receiver.SdcardBroadcastReceiver

com.android.mcafee.receivers.LocaleBroadcastReceiver

com.mcafee.sg.broadcastReciever.SmsReceiver

com.mcafee.sg.broadcastReciever.RCSReceiver

com.mcafee.android.network.NetworkChangesReceiver

com.mcafee.android.battery.BatteryChargingReceiver

com.mcafee.android.schedule.TimeReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.mcafee.mcanalytics.dataenrichment.observers.LocaleObserver

com.mcafee.mcanalytics.dataenrichment.observers.TimezoneObserver

com.mcafee.csp.service.CspCommonCIDReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.mcafee.bp.messaging.MessagingConfigReciever

androidx.profileinstaller.ProfileInstallReceiver

Services

com.android.mcafee.service.PPSForegroundService

com.mcafee.pps.messaging.GoogleFCMMessageReceiver

com.mcafee.sdk.wifi.realtime.WifiStateService

com.mcafee.sb.core.SafeBrowsingService

com.google.firebase.messaging.FirebaseMessagingService

com.tunnelbear.vpn.PolarVpnService

com.wireguard.android.backend.GoBackend$VpnService

Android Permissions

McAfeeSecurityAntivirusVPN.apk