With a double-click, the archive exploded into a folder: Fake_Snap_888_Installer . Inside: an APK named SystemHelper.apk , a file named libsurfaceflinger.so , and a README.txt with only three words: "Flash via recovery?"