Androlyzer

Know more about your apps

App description

Messenger – Text and Video Chat for Free

com.facebook.orca
Rating:
(4.0)
Downloads: 1,000,000,000 - 5,000,000,000
Version: 100.0.0.29.61 (45821348)
by Facebook

Instantly connect with the people in your life. Messenger is free, fast, and secure. - Reach anyone. You can use names or phone numbers to find friends. - Use everywhere. Messenger works across all mobile and desktop devices. You can even connect with people internationally! - Connect however you want. Send a text message, share a photo, or start a video chat — all in Messenger. - Communicate better with groups. Catch up in real time with high quality group video chat or customize your messaging experience with colors, nicknames, and group photos. - Call and video chat your friends 1:1 or in groups. It's free over Wi-Fi (otherwise standard data charges apply), so talk as long as you want, even with people in other countries. - Express yourself. Send emojis, stickers, and GIFs to conversations or add new masks and effects to your video chats. - Capture photos and videos with fun art and effects. You can save these to camera roll, send to conversations, or post to your Day, a place where people can see what you're up to. - Play games and compete with your friends. You can compare scores and see how you rank against other people. - Chat with businesses. You can make reservations, check on orders, and get real-time customer service.

Analysis results

Malicious code

  • Sideload APK

Privacy leaks

  • Calendar to HTTP Header
  • Calendar to HTTP upload
  • Calendar to Network
  • Calendar to Outgoing NFC
  • Calendar to Outgoing SMS
  • Calendar to Socket
  • Call logs to HTTP Header
  • Call logs to HTTP upload
  • Call logs to Network
  • Call logs to Outgoing NFC
  • Call logs to Outgoing SMS
  • Call logs to Socket
  • Call number
  • Camera hardware to HTTP Header
  • Camera hardware to HTTP upload
  • Camera hardware to Network
  • Camera hardware to Outgoing NFC
  • Camera hardware to Outgoing SMS
  • Camera hardware to Socket
  • Contacts to HTTP Header
  • Contacts to HTTP upload
  • Contacts to Network
  • Contacts to Outgoing NFC
  • Contacts to Outgoing SMS
  • Contacts to Socket
  • Current Wifi info to HTTP Header
  • Current Wifi info to HTTP upload
  • Current Wifi info to Network
  • Current Wifi info to Outgoing NFC
  • Current Wifi info to Outgoing SMS
  • Current Wifi info to Socket
  • IMSI to HTTP Header
  • IMSI to HTTP upload
  • IMSI to Network
  • IMSI to Outgoing NFC
  • IMSI to Outgoing SMS
  • IMSI to Socket
  • Local images to HTTP Header
  • Local images to HTTP upload
  • Local images to Network
  • Local images to Outgoing NFC
  • Local images to Outgoing SMS
  • Local images to Socket
  • Location to HTTP Header
  • Location to HTTP upload
  • Location to Network
  • Location to Outgoing NFC
  • Location to Outgoing SMS
  • Location to Socket
  • Photo to HTTP Header
  • Photo to HTTP upload
  • Photo to Network
  • Photo to Outgoing NFC
  • Photo to Outgoing SMS
  • Photo to Socket
  • SIM ID to HTTP Header
  • SIM ID to HTTP upload
  • SIM ID to Network
  • SIM ID to Outgoing NFC
  • SIM ID to Outgoing SMS
  • SIM ID to Socket
  • SMS to HTTP Header
  • SMS to HTTP upload
  • SMS to Network
  • SMS to Outgoing NFC
  • SMS to Outgoing SMS
  • SMS to Socket
  • Telephone number to HTTP Header
  • Telephone number to HTTP upload
  • Telephone number to Network
  • Telephone number to Outgoing NFC
  • Telephone number to Outgoing SMS
  • Telephone number to Socket
  • User Input to HTTP Header
  • User Input to HTTP upload
  • User Input to Network
  • User Input to Outgoing NFC
  • User Input to Outgoing SMS
  • User Input to Socket
  • User profiles to HTTP Header
  • User profiles to HTTP upload
  • User profiles to Network
  • User profiles to Outgoing NFC
  • User profiles to Outgoing SMS
  • User profiles to Socket

Confidential sources

  • Calendar
  • Call logs
  • Camera hardware
  • Contacts
  • Current Wifi info
  • IMEI
  • IMSI
  • Incoming NFC
  • Local images
  • Location
  • Photo
  • SIM ID
  • SMS
  • Screenshot
  • Telephone number
  • User Input
  • User profiles

Suspicious functions

  • Make Call
  • Obfuscation
  • Record audio
  • Start Media Recorder

Permissions

  • android.permission.ACCESS_COARSE_LOCATION
  • android.permission.ACCESS_FINE_LOCATION
  • android.permission.ACCESS_NETWORK_STATE
  • android.permission.ACCESS_WIFI_STATE
  • android.permission.AUTHENTICATE_ACCOUNTS
  • android.permission.BATTERY_STATS
  • android.permission.BLUETOOTH
  • android.permission.CALL_PHONE
  • android.permission.CAMERA
  • android.permission.CHANGE_NETWORK_STATE
  • android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
  • android.permission.GET_ACCOUNTS
  • android.permission.INTERNET
  • android.permission.MANAGE_ACCOUNTS
  • android.permission.MODIFY_AUDIO_SETTINGS
  • android.permission.NFC
  • android.permission.PROCESS_OUTGOING_CALLS
  • android.permission.READ_CALL_LOG
  • android.permission.READ_CONTACTS
  • android.permission.READ_EXTERNAL_STORAGE
  • android.permission.READ_PHONE_STATE
  • android.permission.READ_PROFILE
  • android.permission.READ_SMS
  • android.permission.READ_SYNC_SETTINGS
  • android.permission.RECEIVE_BOOT_COMPLETED
  • android.permission.RECEIVE_MMS
  • android.permission.RECEIVE_SMS
  • android.permission.RECORD_AUDIO
  • android.permission.REQUEST_INSTALL_PACKAGES
  • android.permission.SEND_SMS
  • android.permission.SYSTEM_ALERT_WINDOW
  • android.permission.VIBRATE
  • android.permission.WAKE_LOCK
  • android.permission.WRITE_CONTACTS
  • android.permission.WRITE_EXTERNAL_STORAGE
  • android.permission.WRITE_SMS
  • android.permission.WRITE_SYNC_SETTINGS
  • com.amazon.device.messaging.permission.RECEIVE
  • com.android.launcher.permission.INSTALL_SHORTCUT
  • com.facebook.home.permission.WRITE_BADGES
  • com.facebook.katana.provider.ACCESS
  • com.facebook.mlite.provider.ACCESS
  • com.facebook.orca.permission.C2D_MESSAGE
  • com.facebook.orca.permission.CROSS_PROCESS_BROADCAST_MANAGER
  • com.facebook.orca.permission.RECEIVE_ADM_MESSAGE
  • com.facebook.orca.provider.ACCESS
  • com.facebook.permission.prod.FB_APP_COMMUNICATION
  • com.facebook.receiver.permission.ACCESS
  • com.google.android.c2dm.permission.RECEIVE
  • com.google.android.providers.gsf.permission.READ_GSERVICES
  • com.htc.launcher.permission.READ_SETTINGS
  • com.htc.launcher.permission.UPDATE_SHORTCUT
  • com.huawei.android.launcher.permission.CHANGE_BADGE
  • com.nokia.pushnotifications.permission.RECEIVE
  • com.sec.android.provider.badge.permission.READ
  • com.sec.android.provider.badge.permission.WRITE
  • com.sonyericsson.home.permission.BROADCAST_BADGE

Features used

  • android.hardware.NFC
  • android.hardware.bluetooth
  • android.hardware.camera
  • android.hardware.camera.autofocus
  • android.hardware.camera.flash
  • android.hardware.location
  • android.hardware.location.gps
  • android.hardware.location.network
  • android.hardware.microphone
  • android.hardware.telephony
  • android.hardware.wifi

URLs

Other URLs

  • http://1.base.maps.cit.api.here.com
  • http://api.tiles.mapbox.com
  • http://b-www.facebook.com
  • http://cdn8.staztic.com
  • http://facebook.com
  • http://h.fb.com
  • http://java.sun.com
  • http://m.facebook.com
  • http://maps.google.com
  • http://media-channel.nationalgeographic.com
  • http://our.graph.prod.intern.facebook.com
  • http://pcautivo.telcel.com
  • http://play.google.com
  • http://pm1.narvii.com
  • http://portal.fb.com
  • http://schemas.android.com
  • http://share.here.com
  • http://vignette1.wikia.nocookie.net
  • http://www.*/images/emoji/unicode/
  • http://www.android.com
  • http://www.facebook.com
  • http://www.gstatic.com
  • https://173.252.112.83
  • https://android.googleapis.com
  • https://api.amazon.com
  • https://b-api.facebook.com
  • https://b-graph.facebook.com
  • https://b-graph.secure.facebook.com
  • https://b-www.facebook.com
  • https://connect.facebook.net
  • https://dev503.prn2.facebook.com
  • https://developers.facebook.com
  • https://facebook.com
  • https://fbcdn-sphotos-e-a.akamaihd.net
  • https://graph.facebook.com
  • https://image.maps.api.here.com
  • https://logger.instagram.com
  • https://lookaside.fbsbx.com
  • https://m.facebook.com
  • https://m.facebook.com/p2p/verify/?id=*&source=orca_android&ts=%d&seed=*
  • https://market.android.com
  • https://mts1.google.com
  • https://nnapi.ovi.com
  • https://our.intern.facebook.com
  • https://play.google.com
  • https://rupload.facebook.com
  • https://secure.m.facebook.com
  • https://upload.wikimedia.org
  • https://www.facebook.com
  • https://www.googleapis.com

Version info

APK hash: 435cdf2b913d3029efd31d0679e5fb9b52aa788a
Other versions:
70896126/e3f4f517a58abbcf0f534a0c30af402ab9cf7b51
56904850/c9886ff2bb893b8bc77012cfadad00e64dc94a8c
56904849/27aea6e370ce50201343a970d76db3bb99c1d654
45821263/4288b0a13c8a4712c41c67509580d5d83354941b
44366444/596447e9c138f2fbd95baced284ffe9752b0a2dd
43868100/5c376a7a0101c89753e9847bc04d8b33ff91983b
43868098/762af48620a37e67bb56470078ccaceb8ca83f1e
43399534/e9bf1057e35ac394d900c773d2b0f8df8c19ba6a
43399506/eecea5a5b85d72739051d8003e2b3b16fc7f0d59
42967489/0e2b351fcfa76935173bedcf1c18271521df535b
41212901/518b8721b2356915cab254a68def0555fc93ee17
41212901/518b8721b2356915cab254a68def0555fc93ee17
41212901/518b8721b2356915cab254a68def0555fc93ee17
41212901/518b8721b2356915cab254a68def0555fc93ee17
41212901/518b8721b2356915cab254a68def0555fc93ee17
41212901/518b8721b2356915cab254a68def0555fc93ee17
41212901/518b8721b2356915cab254a68def0555fc93ee17
41212901/518b8721b2356915cab254a68def0555fc93ee17
40018461/766b6588d27c472bc181aa9e4499e64abb3fee44
34707158/4c332561d30ccbcdae812c359a5f0d5c4bfa5da1
26638477/46fa9514feff85d9646160639bae88c7263d3565

Source structure


Used libraries

    • Utility

    JavaX Annotations

    Metadata Facility for the Java Programming Language
    Show details ⇓
    • Open source
    • Utility

    Android support library

    Simplify your development by offering more APIs that you can bundle with your application so you can worry less about platform versions
    Show details ⇓
    • Open source
    • Utility

    Guava

    The Guava project contains several of Google's core libraries: collections, caching, primitives support, concurrency libraries, common annotations, string processing, I/O, etc.
    Show details ⇓
    • Open source
    • Utility

    FasterXML Jackson

    Multi-purpose Java library for processing JSON data format.
    Show details ⇓
    • Utility

    google-gson

    Library to serialize java objects to their JSON representation and back.
    Show details ⇓
    • Public service binding
    • Open source

    Facebook API

    SDK for Facebook integration.
    Show details ⇓
    • Private service binding

    Google Play services

    Google Play services binding library.
    Show details ⇓
    • Utility
    • Hack

    google-guice

    lightweight dependency injection framework
    Show details ⇓

APIs used

  • junit.framework
  • javax.microedition.khronos.egl
  • java.nio
  • java.sql
  • android.content.pm
  • org.apache.http.impl.client
  • android.os
  • android.media.audiofx
  • android.location
  • android.widget
  • org.xml.sax
  • android.text.util
  • org.apache.http.impl
  • android.view.accessibility
  • org.w3c.dom.ls
  • android.preference
  • android.app
  • android.opengl
  • android.telephony.gsm
  • java.math
  • org.json
  • java.security.spec
  • android.hardware.display
  • java.util.concurrent
  • android.animation
  • javax.xml.datatype
  • android.text.format
  • android.content
  • org.apache.http.conn.ssl
  • java.lang.annotation
  • org.apache.http.client.utils
  • android.net.wifi
  • java.util.logging
  • android.webkit
  • android.app.admin
  • javax.net.ssl
  • android.net.http
  • android.net
  • android.hardware.camera2
  • org.w3c.dom
  • android.content.res
  • android.view.animation
  • javax.crypto.spec
  • android.transition
  • org.apache.http.util
  • java.util.zip
  • java.util.regex
  • java.util
  • android.text.method
  • android.telephony
  • android.view.inputmethod
  • javax.crypto
  • android.provider
  • android.nfc
  • org.apache.http.conn
  • android.database.sqlite
  • android.view
  • java.net
  • javax.xml.namespace
  • android.hardware
  • android.drm
  • java.util.concurrent.locks
  • org.apache.http.client.methods
  • android.graphics
  • com.android.internal.util
  • android.telephony.cdma
  • javax.security.auth.x500
  • org.apache.http.entity
  • android.system
  • org.apache.http.impl.conn.tsccm
  • android.graphics.drawable.shapes
  • java.util.concurrent.atomic
  • org.apache.http.impl.conn
  • android.accessibilityservice
  • android.graphics.drawable
  • org.apache.http.protocol
  • javax.net
  • android.accounts
  • org.apache.http.message
  • android.media
  • javax.microedition.khronos.opengles
  • org.apache.http
  • javax.xml.parsers
  • java.lang.reflect
  • org.xml.sax.helpers
  • android.database
  • java.lang.ref
  • java.nio.channels
  • java.io
  • android.bluetooth
  • android.util
  • java.security
  • java.text
  • dalvik.system
  • java.util.jar
  • java.lang
  • org.xmlpull.v1
  • org.apache.http.conn.scheme
  • java.security.cert
  • org.apache.http.client.params
  • org.apache.http.params
  • android.text
  • org.apache.http.client
  • java.nio.charset
  • org.apache.http.cookie
  • android.text.style
  • android.hardware.camera2.params
  • android.app.job

Other packages

  • a.a.a
  • android_src.a
  • android_src.b.a
  • android_src.c
  • android_src.d
  • android_src.mmsv2
  • android_src.mmsv2.a
  • android_src.mmsv2.b
  • b
  • c.a
  • com.a.a
  • com.google.a
  • com.google.android.exoplayer
  • com.google.android.exoplayer.a
  • com.google.android.exoplayer.b
  • com.google.android.exoplayer.c
  • com.google.android.exoplayer.c.a
  • com.google.android.exoplayer.d
  • com.google.android.exoplayer.e
  • com.google.android.exoplayer.e.a
  • com.google.android.exoplayer.e.b
  • com.google.android.exoplayer.e.c
  • com.google.android.exoplayer.e.d
  • com.google.android.exoplayer.e.e
  • com.google.android.exoplayer.e.f
  • com.google.android.exoplayer.e.g
  • com.google.android.exoplayer.ext.opus
  • com.google.android.exoplayer.f
  • com.google.android.exoplayer.g.a
  • com.google.android.exoplayer.g.b
  • com.google.android.exoplayer.h
  • com.google.android.exoplayer.h.a
  • com.google.android.exoplayer.i
  • com.google.android.exoplayer.i.a
  • com.google.b
  • com.google.c
  • com.google.j2objc.annotations
  • com.instagram.common.guavalite.a
  • com.instagram.common.guavalite.annotations
  • com.instagram.common.guavalite.b
  • com.instagram.common.json
  • com.instagram.common.json.annotation
  • com.mediatek.a
  • com.mediatek.b.a
  • com.mediatek.hotknot
  • d
  • e
  • e.a
  • e.a.a
  • e.a.b
  • e.a.c
  • e.a.d
  • e.a.e
  • e.a.f
  • e.a.g
  • e.a.h
  • e.b
  • f
  • f.a
  • g.a.a
  • generated_declarative_autorequire_module
  • generated_rootmodule
  • gifdrawable.pl.droidsonroids.gif
  • h
  • it.sephiroth.android.library
  • it.sephiroth.android.library.a
  • it.sephiroth.android.library.a.a
  • it.sephiroth.android.library.a.b
  • it.sephiroth.android.library.a.c
  • it.sephiroth.android.library.widget
  • javax.inject
  • me.msqrd.sdk.android.a
  • me.msqrd.sdk.android.a.a
  • me.msqrd.sdk.android.b
  • me.msqrd.sdk.android.c
  • me.msqrd.sdk.android.d
  • me.msqrd.sdk.android.util
  • me.msqrd.sdk.nativecalls.effectsframework
  • org.a.a.a
  • org.a.a.a.a
  • org.codehaus.mojo.animal_sniffer
  • org.webrtc
  • org.webrtc.a
  • org.webrtc.videoengine
  • org.webrtc.voiceengine
  • org.whispersystems.a
  • org.whispersystems.a.a
  • org.whispersystems.a.b
  • org.whispersystems.a.b.a
  • org.whispersystems.a.b.b
  • org.whispersystems.a.c
  • org.whispersystems.a.d
  • org.whispersystems.a.e
  • org.whispersystems.a.f
  • org.whispersystems.a.g
  • org.whispersystems.a.g.a
  • org.whispersystems.a.h
  • org.whispersystems.a.h.a
  • org.whispersystems.curve25519
  • org.whispersystems.curve25519.a
  • rx
  • rx.a
  • rx.annotations
  • rx.b
  • rx.c.a
  • rx.c.b
  • rx.d
  • rx.e
  • rx.f
  • rx.g
  • secondary.dex01
  • secondary.dex02
  • secondary.dex03
  • secondary.dex04
  • secondary.dex05
  • secondary.dex06