I'm opening this in jadx.
This is the same software we're going
to use to look at malware later in this course.
Under AndroidManifest, it tells you all the permissions.
So then, you can read this, and you can see that it says,
Android permission to Bluetooth to read your calls,
your contacts, your dictionary, your SMS, your internet.
The only thing that has a write permission
is to write to external storage.
That's how it's pulling the data off to give us a report.
It is not pulling user databases.
It is not doing anything malicious in nature.
Now, what I am curious about is that one that I just pulled.
So if you wanted to open that, I'm going to open jadx.
And you can do this with any APK.
Let's say that you download Facebook,
and you want to see what permissions Facebook has,
do this.
It's great.
AndroidManifest, and here, we can see we
have these different intents.
So I'm not sure what this is associated with,
but we can see here, MMS_SETTINGS_UPDATE,
SECRET_CODES--
that's an interesting file.
But this is where you would go and examine that.
So if someone questioned you, why did you install Oxygen?
Why did you install Magnet?
Why did you install Cellebrite onto this device?
You can say, because it's essentially doing collection.
It is doing logical collection of Bluetooth, calls, contacts,
user dictionary, SMS, bookmarks, internet, downloads,
and calendar.
And it's collecting it and writing it to an HTML report.
It's that simple.
This is a way just to cover yourself if questioned.