# AntiVirus Clean Master

状态：active
Platform：android
Package：com.anti.cleaner.phoener
Version：1.2.0.0
Opportunity：2026-06-10-antivirus-clean-master-cleaner

## 摘要

- 包类型：xapk，inner APK 数：2
- 引擎 / 框架：native
- SDK 线索：admob, amplitude, appsflyer, facebook, firebase, revenuecat
- Endpoint candidates：4
- 结论口径：本报告只基于静态 ZIP / Manifest / 字符串证据；不代表真实运行路径已验证。

## 直接证据

- [high] Manifest package id is com.anti.cleaner.phoener（source: `AndroidManifest.xml`，status: `verified`）
- [high] Manifest declares 29 permissions（source: `AndroidManifest.xml`，status: `verified`）
- [high] Engine/framework markers: native（source: `APK file inventory`，status: `verified`）
- [high] Static strings include 4 endpoint candidates（source: `Text/string scan`，status: `verified`）
- [high] Package contains 12 native libraries（source: `APK file inventory`，status: `verified`）

## 推断

- [medium] SDK markers suggest: admob, amplitude, appsflyer, facebook, firebase, revenuecat（source: `Manifest, filenames, and text strings`，status: `inferred`）

## 权限和组件

### 权限

- `android.permission.ACCESS_ADSERVICES_AD_ID`
- `android.permission.ACCESS_ADSERVICES_ATTRIBUTION`
- `android.permission.ACCESS_ADSERVICES_CUSTOM_AUDIENCE`
- `android.permission.ACCESS_ADSERVICES_TOPICS`
- `android.permission.ACCESS_NETWORK_STATE`
- `android.permission.ACCESS_WIFI_STATE`
- `android.permission.AD_ID`
- `android.permission.CHANGE_WIFI_STATE`
- `android.permission.FOREGROUND_SERVICE`
- `android.permission.FOREGROUND_SERVICE_SPECIAL_USE`
- `android.permission.INTERNET`
- `android.permission.MANAGE_EXTERNAL_STORAGE`
- `android.permission.POST_NOTIFICATIONS`
- `android.permission.QUERY_ALL_PACKAGES`
- `android.permission.READ_EXTERNAL_STORAGE`
- `android.permission.READ_MEDIA_AUDIO`
- `android.permission.READ_MEDIA_IMAGES`
- `android.permission.READ_MEDIA_VIDEO`
- `android.permission.READ_MEDIA_VISUAL_USER_SELECTED`
- `android.permission.REQUEST_DELETE_PACKAGES`
- `android.permission.WAKE_LOCK`
- `android.permission.WRITE_EXTERNAL_STORAGE`
- `com.android.vending.CHECK_LICENSE`
- `com.anti.cleaner.phoener.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION`
- `com.google.android.c2dm.permission.RECEIVE`
- `com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE`
- `com.google.android.gms.permission.AD_ID`
- `com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA`
- `com.samsung.android.mapsagent.permission.READ_APP_INFO`

### 组件

- Activities：cc.admaster.android.proxy.api.AppActivity, cc.admaster.android.proxy.api.BdShellActivity, cc.admaster.android.proxy.api.MobRewardVideoActivity, com.blankj.utilcode.util.UtilsTransActivity, com.blankj.utilcode.util.UtilsTransActivity4MainProcess, com.bytedance.sdk.openadsdk.activity.TTAdActivity, com.bytedance.sdk.openadsdk.activity.TTAppOpenAdActivity, com.bytedance.sdk.openadsdk.activity.TTAppOpenAdTransActivity, com.bytedance.sdk.openadsdk.activity.TTCeilingLandingPageActivity, com.bytedance.sdk.openadsdk.activity.TTDelegateActivity, com.bytedance.sdk.openadsdk.activity.TTFullScreenExpressVideoActivity, com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity, com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity, com.bytedance.sdk.openadsdk.activity.TTPlayableLandingPageActivity, com.bytedance.sdk.openadsdk.activity.TTRewardExpressVideoActivity, com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity, com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageLink2Activity, com.bytedance.sdk.openadsdk.activity.TTWebsiteActivity, com.facebook.CustomTabActivity, com.facebook.CustomTabMainActivity, com.facebook.FacebookActivity, com.facebook.ads.AudienceNetworkActivity, com.google.android.ads.mediationtestsuite.activities.ConfigurationItemDetailActivity, com.google.android.ads.mediationtestsuite.activities.ConfigurationItemsSearchActivity, com.google.android.ads.mediationtestsuite.activities.HomeActivity, com.google.android.ads.mediationtestsuite.activities.NetworkDetailActivity, com.google.android.gms.ads.AdActivity, com.google.android.gms.ads.NotificationHandlerActivity, com.google.android.gms.ads.OutOfContextTestingActivity, com.google.android.gms.common.api.GoogleApiActivity, com.google.android.play.core.common.PlayCoreDialogWrapperActivity, com.inmobi.ads.rendering.InMobiAdActivity, com.mbridge.msdk.activity.MBCommonActivity, com.mbridge.msdk.config.activity.MBRewardVideoActivity, com.mbridge.msdk.out.LoadingActivity, com.mbridge.msdk.reward.player.MBRewardVideoActivity, com.pairip.licensecheck.LicenseActivity, com.se.ui.act.AboutAct, com.se.ui.act.AndAct, com.se.ui.act.AnimAct, com.se.ui.act.AudioAct, com.se.ui.act.BigFileAct, com.se.ui.act.CleanAct, com.se.ui.act.CloudScanAct, com.se.ui.act.CloudScanRuAct, com.se.ui.act.ComPreAct, com.se.ui.act.FristLoadAct, com.se.ui.act.ImageAbAct, com.se.ui.act.LanAct, com.se.ui.act.MainAct, com.se.ui.act.PhotoCleanAct, com.se.ui.act.RoundingAct, com.se.ui.act.SetAct, com.se.ui.act.SimPhotosAct, com.se.ui.act.SoftAct, com.se.ui.act.SplashAct, com.se.ui.act.VideoAct, com.se.ui.act.WebAct, com.se.ui.act.WhatsAppAct, com.smartdigimkt.expressad.reward.player.ATRewardVideoActivity, com.smartdigimkt.sdk.basead.ui.ATLandscapeActivity, com.smartdigimkt.sdk.basead.ui.ATLandscapeTranslucentActivity, com.smartdigimkt.sdk.basead.ui.ATPortraitActivity, com.smartdigimkt.sdk.basead.ui.ATPortraitTranslucentActivity, com.smartdigimkt.sdk.basead.ui.RewardExitConfirmDialogActivity, com.smartdigimkt.sdk.basead.ui.web.WebLandPageActivity, com.thinkup.core.activity.TUGdprAuthActivity, com.thinkup.core.common.inner.ui.TULandscapeActivity, com.thinkup.core.common.inner.ui.TULandscapeTranslucentActivity, com.thinkup.core.common.inner.ui.TUPortraitActivity, com.thinkup.core.common.inner.ui.TUPortraitTranslucentActivity, com.thinkup.core.common.inner.ui.activity.TUMixSplashActivity, com.unity3d.ads.adplayer.FullScreenWebViewDisplay, com.unity3d.services.ads.adunit.AdUnitActivity, com.unity3d.services.ads.adunit.AdUnitSoftwareActivity, com.unity3d.services.ads.adunit.AdUnitTransparentActivity, com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity, com.vungle.ads.internal.ui.VungleActivity, com.yandex.mobile.ads.common.AdActivity, com.yandex.mobile.ads.features.debugpanel.ui.IntegrationInspectorActivity, sg.bigo.ads.ad.splash.AdSplashActivity, sg.bigo.ads.ad.splash.LandscapeAdSplashActivity, sg.bigo.ads.api.AdActivity, sg.bigo.ads.api.CompanionAdActivity, sg.bigo.ads.api.LandingStyleableActivity, sg.bigo.ads.api.LandscapeAdActivity, sg.bigo.ads.api.LandscapeCompanionAdActivity, sg.bigo.ads.api.PopupAdActivity, sg.bigo.ads.controller.form.AdFormActivity, sg.bigo.ads.core.mraid.MraidVideoActivity
- Services：androidx.room.MultiInstanceInvalidationService, androidx.work.impl.background.systemalarm.SystemAlarmService, androidx.work.impl.background.systemjob.SystemJobService, androidx.work.impl.foreground.SystemForegroundService, com.blankj.utilcode.util.MessengerUtils$ServerService, com.bytedance.sdk.openadsdk.multipro.aidl.BinderPoolService, com.google.android.datatransport.runtime.backends.TransportBackendDiscovery, com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService, com.google.android.gms.ads.AdService, com.google.android.gms.measurement.AppMeasurementJobService, com.google.android.gms.measurement.AppMeasurementService, com.google.firebase.components.ComponentDiscoveryService, com.google.firebase.messaging.FirebaseMessagingService, com.google.firebase.sessions.SessionLifecycleService, com.se.service.FcmPushService, com.se.service.ForeverService, com.trustlook.sdk.job.TlJobService, io.appmetrica.analytics.internal.AppMetricaService
- Receivers：androidx.profileinstaller.ProfileInstallReceiver, androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy, androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver, androidx.work.impl.background.systemalarm.RescheduleReceiver, androidx.work.impl.diagnostics.DiagnosticsReceiver, androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver, com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver, com.facebook.CurrentAccessTokenExpirationBroadcastReceiver, com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver, com.google.android.gms.measurement.AppMeasurementReceiver, com.google.firebase.iid.FirebaseInstanceIdReceiver, com.mbridge.msdk.foundation.same.broadcast.NetWorkChangeReceiver, com.se.notify.reciver.NotifyCloseReceiver
- Providers：androidx.startup.InitializationProvider, com.adjust.sdk.SystemLifecycleContentProvider, com.blankj.utilcode.util.UtilsFileProvider, com.facebook.ads.AudienceNetworkContentProvider, com.facebook.internal.FacebookInitProvider, com.google.android.gms.ads.MobileAdsInitProvider, com.google.firebase.provider.FirebaseInitProvider, com.mbridge.msdk.config.component.status.MBComponentLifecycleProvider, com.pairip.licensecheck.LicenseContentProvider, com.preff.admmkv.manager.MMKVProvider, com.smartdigimkt.sdk.api.SDMInitializationProvider, com.squareup.picasso.PicassoProvider, com.thinkup.core.api.TUInitializationProvider, com.tramini.plugin.api.TraminiContentProvider, com.vungle.ads.VungleProvider, com.yandex.mobile.ads.core.initializer.MobileAdsInitializeProvider, com.yandex.mobile.ads.features.debugpanel.data.local.DebugPanelFileProvider, io.appmetrica.analytics.internal.PreloadInfoContentProvider, sg.bigo.ads.controller.provider.BigoAdsProvider

## SDK / Endpoint

### SDK

- `admob`
- `amplitude`
- `appsflyer`
- `facebook`
- `firebase`
- `revenuecat`

### Endpoint candidates

- http://www.apache.org/licenses/
- http://www.apache.org/licenses/LICENSE-2.0
- http://tizen.org/system/model_name
- http://tizen.org/feature/platform.version

## Warnings

- apktool manifest decode skipped 1 split APK(s)
- binary AndroidManifest.xml decoded with apktool

## 下一步

- 真机/模拟器验证 onboarding、paywall、首个可感知价值和崩溃路径。
- 把 endpoint candidates 与 HAR / MITM / Frida 动态证据对齐，避免只凭静态字符串下结论。
- 多版本对比权限、SDK、endpoint、native libs 和资源路径变化。
- 订阅/广告 SDK 线索存在，后续需拆 paywall、free trial、退款和广告频率。