Androlyzer

Know more about your apps

App description

File Manager (File transfer)

com.rhmsoft.fm
Rating:
(4.4)
Downloads: 50,000,000 - 100,000,000
Version: 2.5.9 (20590605)
by CM_Filemanager

Fully Featured File Management Tool! Developed by the Clean Master teamHighlights of File Manager☆ Fully featured:Cut, copy, paste, delete, compress, decompress, search and more.☆ Cloud support:Switch between local and cloud files - supports Dropbox, Box, Google Drive, SkyDrive and more.☆ Wi-Fi File transfer:Use your PC to wirelessly edit your mobile files using FTP.☆ Super convenient:View files by type (image, audio, video, recent, download etc.), use a widget to access folders in one tap from the homescreen.☆ Multiple protocols: Supports file transfers using FTP, FTPS, SFTP, WebDAV and LAN/SMB, stream media from LAN/SMB/FTP/WebDAV/Cloud without downloading.--Supported languagesEnglish, Arabic, Czech, German, Greek, Spanish, French, Hungarian, Italian, Japanese, Korean, Dutch, Polish, Portuguese, Russian, Slovak, Slovenian, Swedish, Thai, Turkish, Simplified Chinese, Traditional Chinese, Bahasa Indonesian, Hebrew, Finnish, Hindi, Croatian and Serbian

Analysis results

Malicious code

  • Gain superuser privileges
  • Sideload APK

Privacy leaks

  • Current Wifi info to HTTP Header
  • Current Wifi info to HTTP upload
  • Current Wifi info to Network
  • Current Wifi info to Socket
  • Local images to HTTP Header
  • Local images to HTTP upload
  • Local images to Network
  • Local images to Socket
  • User Input to HTTP Header
  • User Input to HTTP upload
  • User Input to Network
  • User Input to Socket

Confidential sources

  • Bluetooth MAC address
  • Calendar
  • Current Wifi info
  • IMEI
  • Local images
  • Location
  • Photo
  • Screenshot
  • User Input
  • Wifi MAC address

Suspicious functions

  • Make Call
  • Obfuscation

Permissions

  • android.permission.ACCESS_NETWORK_STATE
  • android.permission.ACCESS_SUPERUSER
  • android.permission.ACCESS_WIFI_STATE
  • android.permission.CHANGE_NETWORK_STATE
  • android.permission.CHANGE_WIFI_STATE
  • android.permission.GET_TASKS
  • android.permission.INTERNET
  • android.permission.RECEIVE_BOOT_COMPLETED
  • android.permission.SYSTEM_ALERT_WINDOW
  • android.permission.SYSTEM_OVERLAY_WINDOW
  • android.permission.WAKE_LOCK
  • android.permission.WRITE_EXTERNAL_STORAGE

URLs

Other URLs

  • file:///android_asset/*
  • http://10.60.82.130
  • http://221.228.204.186
  • http://52.35.247.178
  • http://ad.cmcm.com
  • http://adlog.flurry.com
  • http://ads.flurry.com
  • http://ads.mopub.com
  • http://analytics.rayjump.com
  • http://cmdump.upload.duba.net
  • http://cr.m.ksmobile.com
  • http://cr.m.liebao.cn
  • http://help.pc120.com
  • http://infoc2.duba.net
  • http://n.m.ksmobile.net
  • http://net.rayjump.com
  • http://play.google.com
  • http://plus.google.com
  • http://rcv.mobad.ijinshan.com
  • http://schemas.google.com
  • http://setting.rayjump.com
  • http://test.cr.m.ksmobile.com
  • http://ufs.adkmob.com
  • http://up.cm.ksmobile.com
  • http://us.st.dp.ksmobile.com
  • http://www.baidu.com
  • http://www.cmcm.com
  • http://www.google.com
  • http://www.slf4j.org
  • https://accounts.google.com
  • https://adlog.flurry.com
  • https://ads.flurry.com
  • https://analytics.mopub.com
  • https://api.box.com
  • https://api.sugarsync.com
  • https://apis.live.net
  • https://app.box.com
  • https://csi.gstatic.com
  • https://docs.google.com
  • https://googleads.g.doubleclick.net
  • https://graph.*.facebook.com/network_ads_common/
  • https://graph.facebook.com
  • https://login.live.com
  • https://m.box.net
  • https://ms.cmcm.com
  • https://play.google.com
  • https://ssdk.adkmob.com
  • https://twitter.com
  • https://unconf.adkmob.com
  • https://unconf.mobad.ijinshan.com
  • https://upload.box.com
  • https://ups.ksmobile.net
  • https://webdav.yandex.ru
  • https://ws.ksmobile.net
  • https://www.*.facebook.com
  • https://www.box.com
  • https://www.facebook.com
  • https://www.googleapis.com
  • https://www.mopub.com
  • mailto:fm@cmcm.com

Version info

APK hash: 2929fc9dea1beac98af74568521b33210eceb4c4
Other versions:
20650633/b2548989cda4fec17e5cf12cf541433ff8325cc6
20640628/a2833e918763de5744c11d17f449e5a57a68559f
20590601/0cc11667d0867d3a0176a6b7e3fbfc25c7b0c02c
20580589/a818632edd6d42d9db20ba5c4fd5ceeaf00a2b3b
20580589/a818632edd6d42d9db20ba5c4fd5ceeaf00a2b3b
20570557/f9309f31264c43385f7df2ea91e3fb2396425a1c
20550534/9610c1b5ba6bf6c1373b6e4f4642904f28c142cb
20540517/bd71e2f3a9e611e7cb09baf2255f27c80d814c43
20530502/2c7255e491c8899e68566aa36e898c02c959e409
20520480/4f7812eec05596573a03e1abd4091d1cb24bf48b

Source structure


Used libraries

    • Private service binding

    Google Play services

    Google Play services binding library.
    Show details ⇓
    • Public service binding
    • Open source

    Facebook API

    SDK for Facebook integration.
    Show details ⇓
    • Ads

    Google Mobile Ads

    SDK for Google's mobile ad service
    Show details ⇓
    • Utility

    google-gson

    Library to serialize java objects to their JSON representation and back.
    Show details ⇓
    • Open source
    • Utility

    Apache Commons Net

    Collection of network utilities and protocol implementations.
    Show details ⇓
    • Open source
    • Utility

    Android support library

    Simplify your development by offering more APIs that you can bundle with your application so you can worry less about platform versions
    Show details ⇓
    • Public service binding

    Dropbox SDK

    The SDK contains platform-specific libraries that wrap the raw HTTP calls to the Dropbox API.
    Show details ⇓
    • Public service binding
    • Open source

    Box REST API

    Box Android Library
    Show details ⇓
    • Open source
    • Utility

    Apache HttpComponents

    Low-level HTTP component library.
    Show details ⇓
    • Open source
    • Utility

    Apache log4j

    Logging library
    Show details ⇓
    • Open source
    • Utility

    JSON

    Library to encode and decode JSON.
    Show details ⇓
    • Analytics

    Flurry

    SDK to track and analyze user-behavior and app runtime performance across different devices.
    Show details ⇓
    • Open source
    • Utility

    Android Volley

    Volley networking framework.
    Show details ⇓
    • Utility
    • Private service binding

    Google In-App Billing

    An Android Market service that lets you sell digital content in your applications.
    Show details ⇓

APIs used

  • java.nio
  • java.sql
  • android.content.pm
  • org.apache.http.impl.client
  • android.os
  • android.location
  • android.widget
  • org.xml.sax
  • javax.sql
  • org.apache.http.impl
  • android.view.accessibility
  • java.security.interfaces
  • android.preference
  • android.app
  • android.opengl
  • android.print
  • java.math
  • org.json
  • java.security.spec
  • org.apache.http.conn.util
  • android.hardware.display
  • java.util.concurrent
  • android.animation
  • android.content
  • org.apache.http.conn.ssl
  • android.app.backup
  • java.lang.annotation
  • android.net.wifi
  • java.util.logging
  • android.webkit
  • org.apache.http.client.entity
  • javax.net.ssl
  • android.security
  • android.net.http
  • android.net
  • android.speech.tts
  • org.w3c.dom
  • android.content.res
  • android.view.animation
  • javax.crypto.spec
  • android.transition
  • org.apache.http.util
  • org.apache.http.impl.cookie
  • java.util.zip
  • java.util.regex
  • java.util
  • android.text.method
  • android.media.session
  • android.telephony
  • android.view.inputmethod
  • javax.crypto
  • org.apache.http.impl.conn.tsccm
  • android.provider
  • org.apache.http.conn
  • android.database.sqlite
  • android.view
  • java.net
  • android.hardware
  • android.print.pdf
  • java.util.concurrent.locks
  • org.apache.http.client.methods
  • android.graphics
  • org.apache.http.auth
  • javax.crypto.interfaces
  • java.beans
  • org.apache.http.entity
  • org.apache.http.conn.params
  • android.graphics.drawable.shapes
  • java.util.concurrent.atomic
  • org.apache.http.impl.conn
  • android.accessibilityservice
  • android.graphics.drawable
  • org.apache.http.protocol
  • javax.net
  • android.accounts
  • org.apache.http.message
  • android.media
  • org.apache.http
  • javax.xml.parsers
  • java.lang.reflect
  • org.xml.sax.helpers
  • android.graphics.pdf
  • android.database
  • java.lang.ref
  • java.nio.channels
  • java.io
  • org.apache.commons.logging
  • android.bluetooth
  • android.util
  • java.security
  • java.text
  • dalvik.system
  • org.apache.http.client.utils
  • java.lang
  • android.app.usage
  • org.xmlpull.v1
  • org.apache.http.conn.scheme
  • java.security.cert
  • org.apache.http.client.params
  • org.apache.http.params
  • android.text
  • org.apache.http.client
  • java.nio.charset
  • android.hardware.usb
  • android.text.style
  • android.renderscript

Other packages

  • a.a.a
  • com.a.a
  • com.b.a
  • com.b.b
  • com.b.c.a
  • com.cleanmaster.a
  • com.cleanmaster.b
  • com.cleanmaster.base
  • com.cleanmaster.base.util.a
  • com.cleanmaster.base.util.b
  • com.cleanmaster.base.util.c
  • com.cleanmaster.base.util.concurrent
  • com.cleanmaster.base.util.d
  • com.cleanmaster.base.util.e
  • com.cleanmaster.c
  • com.cleanmaster.cleancloud
  • com.cleanmaster.cloudconfig
  • com.cleanmaster.fm.receiver
  • com.cleanmaster.fm.service
  • com.cleanmaster.func.cache
  • com.cleanmaster.monitor
  • com.cleanmaster.notifyfloat
  • com.cleanmaster.notifyfloat.a
  • com.cleanmaster.photomanager
  • com.cleanmaster.photomanager.easing
  • com.cleanmaster.photomanager.ui
  • com.cleanmaster.provider
  • com.cleanmaster.util
  • com.cleanmaster.watcher
  • com.cm.a
  • com.cm.kinfoc
  • com.cm.kinfoc.base
  • com.cm.util
  • com.cmbee
  • com.cmbee.a
  • com.cmbee.service
  • com.cmbee.service.a
  • com.cmbee.service.command
  • com.cmbee.service.file
  • com.cmbee.service.wifiap
  • com.cmcm.a.a
  • com.cmcm.ad
  • com.cmcm.adsdk
  • com.cmcm.adsdk.a
  • com.cmcm.adsdk.adapter
  • com.cmcm.adsdk.adapter.a
  • com.cmcm.adsdk.b
  • com.cmcm.adsdk.banner
  • com.cmcm.adsdk.c
  • com.cmcm.adsdk.d
  • com.cmcm.adsdk.e
  • com.cmcm.adsdk.nativead
  • com.cmcm.adsdk.splashad
  • com.cmcm.adsdk.view
  • com.cmcm.anim
  • com.cmcm.b
  • com.cmcm.dmc.sdk
  • com.cmcm.dmc.sdk.a
  • com.cmcm.dmc.sdk.b
  • com.cmcm.dmc.sdk.b.a
  • com.cmcm.dmc.sdk.c
  • com.cmcm.dmc.sdk.d
  • com.cmcm.dmc.sdk.report
  • com.cmcm.fm.a
  • com.cmcm.fm.libaums
  • com.cmcm.fm.libaums.a
  • com.cmcm.fm.libaums.a.a
  • com.cmcm.fm.libaums.b
  • com.cmcm.fm.libaums.b.a
  • com.cmcm.fm.libaums.driver
  • com.cmcm.fm.libaums.driver.scsi
  • com.cmcm.fm.libaums.driver.scsi.commands
  • com.cmcm.fm.libaums.tasks
  • com.cmcm.fm.libaums.tasks.a
  • com.cmcm.newsview.a
  • com.cmcm.newsview.fragment
  • com.cmcm.newsview.pulltorefresh
  • com.cmcm.newsview.ui
  • com.cmcm.newsview.ui.a
  • com.cmcm.newsview.ui.a.a
  • com.cmcm.newsview.ui.a.a.a
  • com.cmcm.newsview.ui.a.b
  • com.cmcm.onews.a
  • com.cmcm.onews.api
  • com.cmcm.onews.b
  • com.cmcm.onews.bitmapcache
  • com.cmcm.onews.c
  • com.cmcm.onews.d
  • com.cmcm.onews.e
  • com.cmcm.onews.f
  • com.cmcm.onews.fragment
  • com.cmcm.onews.listlib
  • com.cmcm.onews.loader
  • com.cmcm.onews.loader.a
  • com.cmcm.onews.model
  • com.cmcm.onews.pulltorefresh
  • com.cmcm.onews.report
  • com.cmcm.onews.report.a
  • com.cmcm.onews.report.b.a
  • com.cmcm.onews.report.b.b
  • com.cmcm.onews.sdk
  • com.cmcm.onews.service
  • com.cmcm.onews.storage
  • com.cmcm.onews.system
  • com.cmcm.onews.transport
  • com.cmcm.onews.ui
  • com.cmcm.onews.ui.a
  • com.cmcm.onews.ui.detailpage
  • com.cmcm.onews.ui.indicator
  • com.cmcm.onews.ui.push
  • com.cmcm.onews.ui.wave
  • com.cmcm.onews.ui.widget
  • com.cmcm.onews.util
  • com.cmcm.onews.util.a
  • com.cmcm.onews.util.template
  • com.cmcm.orion.adsdk
  • com.cmcm.orion.picks
  • com.cmcm.orion.picks.a
  • com.cmcm.orion.picks.a.a
  • com.cmcm.orion.picks.api
  • com.cmcm.orion.picks.b
  • com.cmcm.orion.picks.impl
  • com.cmcm.orion.picks.impl.a
  • com.cmcm.orion.picks.impl.a.a
  • com.cmcm.orion.picks.impl.b
  • com.cmcm.orion.picks.webview
  • com.cmcm.orion.utils
  • com.cmcm.orion.utils.internal
  • com.cmcm.orion.utils.internal.a
  • com.cmcm.picks.internal
  • com.cmcm.picks.internal.a
  • com.cmcm.util
  • com.cmcm.utils
  • com.cmcm.utils.a
  • com.cmcm.utils.b
  • com.cooperate
  • com.flurry.sdk
  • com.google.analytics.tracking.android
  • com.ijinshan.a.a
  • com.ijinshan.cloudconfig.a
  • com.ijinshan.cloudconfig.b
  • com.ijinshan.cloudconfig.c
  • com.ijinshan.cloudconfig.d
  • com.ijinshan.cloudconfig.deepcloudconfig
  • com.jcraft.jsch
  • com.jcraft.jsch.jce
  • com.jcraft.jsch.jcraft
  • com.jcraft.jsch.jgss
  • com.keniu.security
  • com.keniu.security.a
  • com.keniu.security.util
  • com.microsoft.live
  • com.mobvista.msdk
  • com.mobvista.msdk.a
  • com.mobvista.msdk.a.a
  • com.mobvista.msdk.appwall
  • com.mobvista.msdk.appwall.a
  • com.mobvista.msdk.appwall.b
  • com.mobvista.msdk.appwall.c.a
  • com.mobvista.msdk.appwall.d
  • com.mobvista.msdk.appwall.e
  • com.mobvista.msdk.appwall.f
  • com.mobvista.msdk.appwall.g.a
  • com.mobvista.msdk.appwall.h
  • com.mobvista.msdk.appwall.report
  • com.mobvista.msdk.appwall.report.eventcache
  • com.mobvista.msdk.appwall.view
  • com.mobvista.msdk.appwall.viewpager
  • com.mobvista.msdk.appwall.viewpager.indicater
  • com.mobvista.msdk.b
  • com.mobvista.msdk.b.a
  • com.mobvista.msdk.base.a.a
  • com.mobvista.msdk.base.adapter
  • com.mobvista.msdk.base.b
  • com.mobvista.msdk.base.b.a
  • com.mobvista.msdk.base.b.b
  • com.mobvista.msdk.base.b.b.a
  • com.mobvista.msdk.base.b.c
  • com.mobvista.msdk.base.b.c.a
  • com.mobvista.msdk.base.b.c.b
  • com.mobvista.msdk.base.b.d
  • com.mobvista.msdk.base.c
  • com.mobvista.msdk.base.d
  • com.mobvista.msdk.base.e
  • com.mobvista.msdk.base.entity
  • com.mobvista.msdk.base.fragment
  • com.mobvista.msdk.base.mapping
  • com.mobvista.msdk.base.mapping.a
  • com.mobvista.msdk.base.mapping.b
  • com.mobvista.msdk.base.mapping.broadcast
  • com.mobvista.msdk.base.mapping.c
  • com.mobvista.msdk.base.mapping.d
  • com.mobvista.msdk.base.webview
  • com.mobvista.msdk.c.a
  • com.mobvista.msdk.c.b
  • com.mobvista.msdk.c.c
  • com.mobvista.msdk.c.d
  • com.mobvista.msdk.c.d.a
  • com.mobvista.msdk.click
  • com.mobvista.msdk.config.system
  • com.mobvista.msdk.out
  • com.mobvista.msdk.pluginFramework
  • com.mobvista.msdk.shell
  • com.mopub.common
  • com.mopub.common.event
  • com.mopub.common.factories
  • com.mopub.common.logging
  • com.mopub.common.util
  • com.mopub.exceptions
  • com.mopub.mobileads
  • com.mopub.mobileads.factories
  • com.mopub.mobileads.resource
  • com.mopub.mobileads.util
  • com.mopub.mraid
  • com.mopub.nativeads
  • com.mopub.nativeads.factories
  • com.mopub.network
  • com.mopub.volley
  • com.mopub.volley.toolbox
  • com.nostra13.universalimageloader.a.a
  • com.nostra13.universalimageloader.a.a.a
  • com.nostra13.universalimageloader.a.a.a.a
  • com.nostra13.universalimageloader.a.a.b
  • com.nostra13.universalimageloader.a.b
  • com.nostra13.universalimageloader.a.b.a
  • com.nostra13.universalimageloader.b
  • com.nostra13.universalimageloader.core
  • com.nostra13.universalimageloader.core.a
  • com.nostra13.universalimageloader.core.assist
  • com.nostra13.universalimageloader.core.assist.deque
  • com.nostra13.universalimageloader.core.b
  • com.nostra13.universalimageloader.core.c
  • com.nostra13.universalimageloader.core.d
  • com.nostra13.universalimageloader.core.download
  • com.nostra13.universalimageloader.core.listener
  • de.aflx.sardine
  • de.aflx.sardine.impl
  • de.aflx.sardine.impl.handler
  • de.aflx.sardine.impl.io
  • de.aflx.sardine.impl.methods
  • de.aflx.sardine.model
  • de.aflx.sardine.util
  • de.innosystec.unrar
  • de.innosystec.unrar.a
  • de.innosystec.unrar.b
  • de.innosystec.unrar.exception
  • de.innosystec.unrar.rarfile
  • de.innosystec.unrar.unpack
  • de.innosystec.unrar.unpack.a
  • de.innosystec.unrar.unpack.ppm
  • de.innosystec.unrar.unpack.vm
  • de.innosystec.unrar.unsigned
  • jcifs
  • jcifs.dcerpc
  • jcifs.dcerpc.msrpc
  • jcifs.dcerpc.ndr
  • jcifs.http
  • jcifs.https
  • jcifs.netbios
  • jcifs.ntlmssp
  • jcifs.smb
  • jcifs.util
  • jcifs.util.transport
  • net.lingala.zip4j.a
  • net.lingala.zip4j.b
  • net.lingala.zip4j.b.a
  • net.lingala.zip4j.b.b
  • net.lingala.zip4j.c
  • net.lingala.zip4j.d
  • net.lingala.zip4j.e
  • net.lingala.zip4j.exception
  • net.lingala.zip4j.f
  • net.lingala.zip4j.g
  • org.apache.ftpserver
  • org.apache.ftpserver.command
  • org.apache.ftpserver.command.impl
  • org.apache.ftpserver.command.impl.listing
  • org.apache.ftpserver.filesystem.nativefs
  • org.apache.ftpserver.filesystem.nativefs.impl
  • org.apache.ftpserver.ftplet
  • org.apache.ftpserver.ftpletcontainer
  • org.apache.ftpserver.ftpletcontainer.impl
  • org.apache.ftpserver.impl
  • org.apache.ftpserver.ipfilter
  • org.apache.ftpserver.listener
  • org.apache.ftpserver.listener.nio
  • org.apache.ftpserver.main
  • org.apache.ftpserver.message
  • org.apache.ftpserver.message.impl
  • org.apache.ftpserver.ssl
  • org.apache.ftpserver.ssl.impl
  • org.apache.ftpserver.usermanager
  • org.apache.ftpserver.usermanager.impl
  • org.apache.ftpserver.util
  • org.apache.mina.core
  • org.apache.mina.core.buffer
  • org.apache.mina.core.file
  • org.apache.mina.core.filterchain
  • org.apache.mina.core.future
  • org.apache.mina.core.polling
  • org.apache.mina.core.service
  • org.apache.mina.core.session
  • org.apache.mina.core.write
  • org.apache.mina.filter.buffer
  • org.apache.mina.filter.codec
  • org.apache.mina.filter.codec.demux
  • org.apache.mina.filter.codec.prefixedstring
  • org.apache.mina.filter.codec.serialization
  • org.apache.mina.filter.codec.statemachine
  • org.apache.mina.filter.codec.textline
  • org.apache.mina.filter.errorgenerating
  • org.apache.mina.filter.executor
  • org.apache.mina.filter.firewall
  • org.apache.mina.filter.keepalive
  • org.apache.mina.filter.logging
  • org.apache.mina.filter.reqres
  • org.apache.mina.filter.ssl
  • org.apache.mina.filter.statistic
  • org.apache.mina.filter.stream
  • org.apache.mina.filter.util
  • org.apache.mina.handler.chain
  • org.apache.mina.handler.demux
  • org.apache.mina.handler.multiton
  • org.apache.mina.handler.stream
  • org.apache.mina.proxy
  • org.apache.mina.proxy.event
  • org.apache.mina.proxy.filter
  • org.apache.mina.proxy.handlers
  • org.apache.mina.proxy.handlers.http
  • org.apache.mina.proxy.handlers.http.basic
  • org.apache.mina.proxy.handlers.http.digest
  • org.apache.mina.proxy.handlers.http.ntlm
  • org.apache.mina.proxy.handlers.socks
  • org.apache.mina.proxy.session
  • org.apache.mina.proxy.utils
  • org.apache.mina.transport.socket
  • org.apache.mina.transport.socket.nio
  • org.apache.mina.transport.vmpipe
  • org.apache.mina.util
  • org.apache.mina.util.byteaccess
  • org.mozilla.intl.chardet
  • org.simpleframework.xml
  • org.simpleframework.xml.convert
  • org.simpleframework.xml.core
  • org.simpleframework.xml.filter
  • org.simpleframework.xml.strategy
  • org.simpleframework.xml.stream
  • org.simpleframework.xml.transform
  • org.simpleframework.xml.util
  • org.slf4j
  • org.slf4j.helpers
  • org.slf4j.impl
  • org.slf4j.spi
  • org.swiftp