We are working on ELF mining. We are unable to find path of ELF executable in Android 5.0 ART Architecture. I currently found .so and .oat files via Xplore, but these are not ELF executable binaries.
More Detail: After Android 4.4.4 the Dalvik VM was replaced by ART. In Android 5.0 the DVM's App's dex code was converted to odex to get executed. In ART its converted to ELF executable code.
I am working on Malware detection software which works by mining ELF files to cluster patterns of anomalies. As ART works on AOT compilation so executable binary file (ELF) should exist against each App in internal storage.
My question: I want to know the path of the ELF file of Apps or some method to obtain ELF from .apk or .dex file.