use dynamic code loading ( dcl ) ? yes provenance / entity identification dynamic analysis app execution engine .
An Android Application Sandbox system for suspicious software detection