It can typically target both user-installed apps and system applications.

For full functionality, the app usually requires Root Access to bypass Android's sandboxing protections and access private data folders. Critical Security and Ethical Risks

Modifying internal app data can lead to frequent crashes, data corruption, or permanent account bans, especially in apps with online components and server-side checks.