Queries information about running processes on the device

Application may abuse the framework's APIs to collect information about running processes on the device.

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks if the internet connection is available

Schedules tasks to execute at a specified time

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.