Low reputation app warning - unknown app (file name is string of numbers)

Can you help me understand a security message from my the Sophos antivirus app on my Android phone (Samsung S5)? It's a notification about a low reputation app, but the name of the app is just a string of numbers. Does anyone know what this is? Is it malware of some kind?

The file name: 1549406981572

The file path:

/storage/emulated/0/Android/data/com.android.vending/files/dna_data

The notification included a list the following security considerations for the app:

- built for outdated Android versions

- contains executables

- unusual building tool

- read phone number

- little readable text

- not from a trusted app store

- read storage

- write storage

I told the Sophos app to delete it, so hopefully my phone is safe now. But I'd still like to know what it was, and how to prevent getting it in the future. Also, is there anything else I should do besides deleting it? Is my phone data or other apps compromised in any way from this incident?

Parents
  • By chance are you using samsung with the home screen layout customizations found in things like good lock and/or home up?

    I had similar problems myself and while doing a deep clean I found similar named photos which were screenshots of my home screen which I know the app home up uses to re-establish your home screen on a. I'm wondering if the app might produce an executable that is actually used to re-establish your home screen.

    If that's the case we would be able to inform sophos and have this white listed in some manner

Reply
  • By chance are you using samsung with the home screen layout customizations found in things like good lock and/or home up?

    I had similar problems myself and while doing a deep clean I found similar named photos which were screenshots of my home screen which I know the app home up uses to re-establish your home screen on a. I'm wondering if the app might produce an executable that is actually used to re-establish your home screen.

    If that's the case we would be able to inform sophos and have this white listed in some manner

Children
No Data