SysScope is a default application on Samsung devices. It s a system application because you can t delete it without root. It s unknown what SysScope is, but the name points to “System Scoper”.Apparently SysScope is using a SQL database SysScopeassetsdatabasesSysScope.db. And there is an interesting table. It looks like to me SysScope is reading su binary from the offset for the size bytes, and comparing the data s md hash? Under SysScope.apksmalicomsecandroidappsysscopej . Editor s Note To confirm you have the spyware and not a standard Android app by the same name, follow these steps to open the spy app dial the phone number. Editor s Note See our in depth study of mobile security apps for more detail on of the most common spyware programs and .