# AppLock

状态：active
Platform：android
Package：com.domobile.applockwatcher
Version：6.1.0
Opportunity：2026-06-10-applock

## 摘要

- 包类型：xapk，inner APK 数：2
- 引擎 / 框架：native
- SDK 线索：admob, facebook, firebase
- Endpoint candidates：80
- 结论口径：本报告只基于静态 ZIP / Manifest / 字符串证据；不代表真实运行路径已验证。

## 直接证据

- [high] Manifest package id is com.domobile.applockwatcher（source: `AndroidManifest.xml`，status: `verified`）
- [high] Manifest declares 44 permissions（source: `AndroidManifest.xml`，status: `verified`）
- [high] Engine/framework markers: native（source: `APK file inventory`，status: `verified`）
- [high] Static strings include 80 endpoint candidates（source: `Text/string scan`，status: `verified`）
- [high] Package contains 12 native libraries（source: `APK file inventory`，status: `verified`）

## 推断

- [medium] SDK markers suggest: admob, facebook, firebase（source: `Manifest, filenames, and text strings`，status: `inferred`）

## 权限和组件

### 权限

- `android.permission.ACCESS_ADSERVICES_AD_ID`
- `android.permission.ACCESS_ADSERVICES_ATTRIBUTION`
- `android.permission.ACCESS_ADSERVICES_TOPICS`
- `android.permission.ACCESS_NETWORK_STATE`
- `android.permission.ACCESS_WIFI_STATE`
- `android.permission.BLUETOOTH`
- `android.permission.BLUETOOTH_ADMIN`
- `android.permission.BLUETOOTH_CONNECT`
- `android.permission.CAMERA`
- `android.permission.CHANGE_NETWORK_STATE`
- `android.permission.CHANGE_WIFI_STATE`
- `android.permission.DELETE_PACKAGES`
- `android.permission.FOREGROUND_SERVICE`
- `android.permission.FOREGROUND_SERVICE_SPECIAL_USE`
- `android.permission.GET_TASKS`
- `android.permission.INSTALL_PACKAGES`
- `android.permission.INTERNET`
- `android.permission.KILL_BACKGROUND_PROCESSES`
- `android.permission.MANAGE_EXTERNAL_STORAGE`
- `android.permission.MOUNT_UNMOUNT_FILESYSTEMS`
- `android.permission.PACKAGE_USAGE_STATS`
- `android.permission.POST_NOTIFICATIONS`
- `android.permission.READ_EXTERNAL_STORAGE`
- `android.permission.READ_SYNC_SETTINGS`
- `android.permission.RECEIVE_BOOT_COMPLETED`
- `android.permission.REORDER_TASKS`
- `android.permission.RESTART_PACKAGES`
- `android.permission.SYSTEM_ALERT_WINDOW`
- `android.permission.USE_BIOMETRIC`
- `android.permission.USE_FINGERPRINT`
- `android.permission.VIBRATE`
- `android.permission.WAKE_LOCK`
- `android.permission.WRITE_EXTERNAL_STORAGE`
- `android.permission.WRITE_SYNC_SETTINGS`
- `com.android.launcher.permission.INSTALL_SHORTCUT`
- `com.android.launcher.permission.UNINSTALL_SHORTCUT`
- `com.android.vending.BILLING`
- `com.android.vending.CHECK_LICENSE`
- `com.domobile.applockwatcher.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION`
- `com.domobile.applockwatcher.PERMISSON_MANAGE_OVERLAY`

### 组件

- Activities：androidx.biometric.internal.ui.FingerprintDialogActivity, androidx.credentials.playservices.HiddenActivity, com.amazon.aps.ads.activity.ApsInterstitialActivity, com.amazon.device.ads.DTBAdActivity, com.amazon.device.ads.DTBInterstitialActivity, com.android.billingclient.api.ProxyBillingActivity, com.android.billingclient.api.ProxyBillingActivityV2, com.applovin.adview.AppLovinFullscreenActivity, com.applovin.adview.AppLovinFullscreenImmersiveActivity, com.applovin.creative.MaxCreativeDebuggerActivity, com.applovin.creative.MaxCreativeDebuggerDisplayedAdActivity, com.applovin.mediation.MaxDebuggerActivity, com.applovin.mediation.MaxDebuggerAdUnitDetailActivity, com.applovin.mediation.MaxDebuggerAdUnitWaterfallsListActivity, com.applovin.mediation.MaxDebuggerAdUnitsListActivity, com.applovin.mediation.MaxDebuggerCmpNetworksListActivity, com.applovin.mediation.MaxDebuggerDetailActivity, com.applovin.mediation.MaxDebuggerMultiAdActivity, com.applovin.mediation.MaxDebuggerTcfConsentStatusesListActivity, com.applovin.mediation.MaxDebuggerTcfInfoListActivity, com.applovin.mediation.MaxDebuggerTcfStringActivity, com.applovin.mediation.MaxDebuggerTestLiveNetworkActivity, com.applovin.mediation.MaxDebuggerTestModeNetworkActivity, com.applovin.mediation.MaxDebuggerUnifiedFlowActivity, com.applovin.mediation.MaxDebuggerWaterfallSegmentsActivity, com.applovin.sdk.AppLovinWebViewActivity, com.blankj.utilcode.util.UtilsTransActivity, com.blankj.utilcode.util.UtilsTransActivity4MainProcess, com.bytedance.sdk.openadsdk.activity.TTAdActivity, com.bytedance.sdk.openadsdk.activity.TTAppOpenAdActivity, com.bytedance.sdk.openadsdk.activity.TTAppOpenAdTransActivity, com.bytedance.sdk.openadsdk.activity.TTCeilingLandingPageActivity, com.bytedance.sdk.openadsdk.activity.TTDelegateActivity, com.bytedance.sdk.openadsdk.activity.TTFullScreenExpressVideoActivity, com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity, com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity, com.bytedance.sdk.openadsdk.activity.TTPlayableLandingPageActivity, com.bytedance.sdk.openadsdk.activity.TTRewardExpressVideoActivity, com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity, com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageLink2Activity, com.bytedance.sdk.openadsdk.activity.TTWebsiteActivity, com.domobile.applockwatcher.HomeBootActivity, com.domobile.applockwatcher.LaunchActivity, com.domobile.applockwatcher.MainActivity, com.domobile.applockwatcher.calculator, com.domobile.applockwatcher.compass, com.domobile.applockwatcher.gradienter, com.domobile.applockwatcher.ui.backup.BackupMainActivity, com.domobile.applockwatcher.ui.backup.LocalBackupActivity, com.domobile.applockwatcher.ui.backup.LocalRestoreActivity, com.domobile.applockwatcher.ui.backup.RestoreJobActivity, com.domobile.applockwatcher.ui.backup.RestoreReadyActivity, com.domobile.applockwatcher.ui.browser.controller.BookmarkEditActivity, com.domobile.applockwatcher.ui.browser.controller.BookmarksActivity, com.domobile.applockwatcher.ui.browser.controller.BrowserActivity, com.domobile.applockwatcher.ui.browser.controller.DownloadsActivity, com.domobile.applockwatcher.ui.browser.controller.GameListActivity, com.domobile.applockwatcher.ui.browser.controller.GameSceneActivity, com.domobile.applockwatcher.ui.browser.controller.ImageDisplayActivity, com.domobile.applockwatcher.ui.browser.controller.VideoDisplayActivity, com.domobile.applockwatcher.ui.browser.controller.WebsiteDetailsActivity, com.domobile.applockwatcher.ui.browser.controller.WebsiteGuideActivity, com.domobile.applockwatcher.ui.clean.controller.CleanFlowActivity, com.domobile.applockwatcher.ui.clean.controller.CleanMainActivity, com.domobile.applockwatcher.ui.cloud.CloudBackupActivity, com.domobile.applockwatcher.ui.cloud.CloudRestoreActivity, com.domobile.applockwatcher.ui.cloud.CloudTrashActivity, com.domobile.applockwatcher.ui.common.controller.AllowScreenActivity, com.domobile.applockwatcher.ui.common.controller.AppOpenActivity, com.domobile.applockwatcher.ui.common.controller.DialogHostActivity, com.domobile.applockwatcher.ui.common.controller.ManagerSpaceActivity, com.domobile.applockwatcher.ui.common.controller.MediaReceiverActivity, com.domobile.applockwatcher.ui.common.controller.OpenAppActivity, com.domobile.applockwatcher.ui.common.controller.PrivacyPolicyActivity, com.domobile.applockwatcher.ui.common.controller.RenewAgreementActivity, com.domobile.applockwatcher.ui.common.controller.UpgradeNewActivity, com.domobile.applockwatcher.ui.common.controller.UserAgreementActivity, com.domobile.applockwatcher.ui.domob.DomobInterActivity, com.domobile.applockwatcher.ui.fake.controller.FakeFCActivity, com.domobile.applockwatcher.ui.fake.controller.FakeFSActivity, com.domobile.applockwatcher.ui.fake.controller.FakeIconActivity, com.domobile.applockwatcher.ui.fake.controller.FakeSetupActivity, com.domobile.applockwatcher.ui.hiboard.controller.HiboardFlowerActivity, com.domobile.applockwatcher.ui.intruder.controller.IntruderAlertActivity, com.domobile.applockwatcher.ui.intruder.controller.IntruderDetailActivity, com.domobile.applockwatcher.ui.intruder.controller.IntruderMainActivity, com.domobile.applockwatcher.ui.lock.SFA, com.domobile.applockwatcher.ui.lock.controller.LockActivity, com.domobile.applockwatcher.ui.lock.controller.NumberSetupActivity, com.domobile.applockwatcher.ui.lock.controller.PatternSetupActivity, com.domobile.applockwatcher.ui.lock.controller.RandomBoardActivity, com.domobile.applockwatcher.ui.lock.controller.RelockActivity, com.domobile.applockwatcher.ui.lock.controller.VerifyActivity, com.domobile.applockwatcher.ui.main.controller.AppSearchActivity, com.domobile.applockwatcher.ui.main.controller.GoogleBillingActivity, com.domobile.applockwatcher.ui.main.controller.HideApplockActivity, com.domobile.applockwatcher.ui.main.controller.HomeActivity, com.domobile.applockwatcher.ui.main.controller.HuaweiBillingActivity, com.domobile.applockwatcher.ui.main.controller.KeepLiveActivity, com.domobile.applockwatcher.ui.main.controller.SceneActiveActivity, com.domobile.applockwatcher.ui.main.controller.SceneEditActivity, com.domobile.applockwatcher.ui.main.controller.SceneListActivity, com.domobile.applockwatcher.ui.main.controller.SceneShortcutActivity, com.domobile.applockwatcher.ui.main.controller.SecurityGradeActivity, com.domobile.applockwatcher.ui.main.controller.TimeLockActivity, com.domobile.applockwatcher.ui.main.controller.VIPFeedbackActivity, com.domobile.applockwatcher.ui.move.controller.FileMoveDelActivity, com.domobile.applockwatcher.ui.move.controller.FileMoveInActivity, com.domobile.applockwatcher.ui.move.controller.FileMoveOutActivity, com.domobile.applockwatcher.ui.move.controller.MediaMoveDelActivity, com.domobile.applockwatcher.ui.move.controller.MediaMoveInActivity, com.domobile.applockwatcher.ui.move.controller.MediaMoveOutActivity, com.domobile.applockwatcher.ui.notice.controller.NoticeCenterActivity, com.domobile.applockwatcher.ui.permission.controller.PermissionGuideActivity, com.domobile.applockwatcher.ui.permission.controller.PermissionProxyActivity, com.domobile.applockwatcher.ui.repwd.controller.ChinaRepwdActivity, com.domobile.applockwatcher.ui.repwd.controller.GoogleRepwdActivity, com.domobile.applockwatcher.ui.repwd.controller.HuaweiAuthActivity, com.domobile.applockwatcher.ui.repwd.controller.HuaweiRepwdActivity, com.domobile.applockwatcher.ui.repwd.controller.HuaweiRepwdLegacyActivity, com.domobile.applockwatcher.ui.repwd.controller.HuaweiVerifyActivity, com.domobile.applockwatcher.ui.settings.controller.AboutActivity, com.domobile.applockwatcher.ui.settings.controller.GGAccountSetupActivity, com.domobile.applockwatcher.ui.settings.controller.GGSecuritySetupActivity, com.domobile.applockwatcher.ui.settings.controller.GuideActivity, com.domobile.applockwatcher.ui.settings.controller.HWAccountSetupActivity, com.domobile.applockwatcher.ui.settings.controller.HWSecuritySetupActivity, com.domobile.applockwatcher.ui.settings.controller.SettingsActivity, com.domobile.applockwatcher.ui.settings.controller.UnlockSettingsActivity, com.domobile.applockwatcher.ui.source.controller.ApkPickerActivity, com.domobile.applockwatcher.ui.source.controller.AudioPickerActivity, com.domobile.applockwatcher.ui.source.controller.FilePickerActivity, com.domobile.applockwatcher.ui.source.controller.MediaPickerActivity, com.domobile.applockwatcher.ui.test.controller.TestActivity, com.domobile.applockwatcher.ui.theme.controller.PictureDownloadActivity, com.domobile.applockwatcher.ui.theme.controller.SkinApplyActivity, com.domobile.applockwatcher.ui.theme.controller.ThemeApplyActivity, com.domobile.applockwatcher.ui.theme.controller.ThemeDownloadActivity, com.domobile.applockwatcher.ui.theme.controller.ThemeFlowerActivity, com.domobile.applockwatcher.ui.theme.controller.ThemeMainActivity, com.domobile.applockwatcher.ui.vault.controller.ApkListActivity, com.domobile.applockwatcher.ui.vault.controller.AudioListActivity, com.domobile.applockwatcher.ui.vault.controller.FileListActivity, com.domobile.applockwatcher.ui.vault.controller.MediaGalleryActivity, com.domobile.applockwatcher.ui.vault.controller.PhotoBucketActivity, com.domobile.applockwatcher.ui.vault.controller.PhotoPlayerActivity, com.domobile.applockwatcher.ui.vault.controller.TextViewerActivity, com.domobile.applockwatcher.ui.vault.controller.VaultActivity, com.domobile.applockwatcher.ui.vault.controller.VaultRestoreActivity, com.domobile.applockwatcher.ui.vault.controller.VideoBucketActivity, com.domobile.applockwatcher.ui.vault.controller.VideoPlayerActivity, com.google.android.gms.ads.AdActivity, com.google.android.gms.ads.NotificationHandlerActivity, com.google.android.gms.ads.OutOfContextTestingActivity, com.google.android.gms.auth.api.signin.internal.SignInHubActivity, com.google.android.gms.common.api.GoogleApiActivity, com.google.android.play.core.common.PlayCoreDialogWrapperActivity, com.google.firebase.auth.internal.GenericIdpActivity, com.google.firebase.auth.internal.RecaptchaActivity, com.inmobi.ads.rendering.InMobiAdActivity, com.mbridge.msdk.activity.MBCommonActivity, com.mbridge.msdk.config.activity.MBRewardVideoActivity, com.mbridge.msdk.out.LoadingActivity, com.mbridge.msdk.reward.player.MBRewardVideoActivity, com.smaato.sdk.core.browser.SmaatoSdkBrowserActivity, com.smaato.sdk.interstitial.view.InterstitialAdActivity, com.smaato.sdk.rewarded.view.RewardedInterstitialAdActivity, com.vungle.ads.internal.ui.VungleActivity, io.bidmachine.iab.mraid.MraidActivity, io.bidmachine.iab.vast.activity.VastActivity, io.bidmachine.nativead.view.VideoPlayerActivity, io.bidmachine.rendering.ad.fullscreen.FullScreenActivity, io.bidmachine.rendering.ad.view.ExpandActivity, net.pubnative.lite.sdk.consent.UserConsentActivity, net.pubnative.lite.sdk.contentinfo.AdFeedbackActivity, net.pubnative.lite.sdk.interstitial.activity.MraidInterstitialActivity, net.pubnative.lite.sdk.interstitial.activity.VastInterstitialActivity, net.pubnative.lite.sdk.rewarded.activity.MraidRewardedActivity, net.pubnative.lite.sdk.rewarded.activity.VastRewardedActivity, net.pubnative.lite.sdk.utils.browser.BrowserActivity
- Services：aaa.domobile.applock.accessibility.service.MyAccessibilityService, androidx.camera.core.impl.MetadataHolderService, androidx.credentials.playservices.CredentialProviderMetadataHolder, androidx.room.MultiInstanceInvalidationService, androidx.work.impl.background.systemjob.SystemJobService, androidx.work.impl.foreground.SystemForegroundService, com.applovin.impl.adview.activity.FullscreenAdService, com.blankj.utilcode.util.MessengerUtils$ServerService, com.bytedance.sdk.openadsdk.multipro.aidl.BinderPoolService, com.domobile.applockwatcher.service.LockService, com.domobile.applockwatcher.service.NotificationService, com.google.android.datatransport.runtime.backends.TransportBackendDiscovery, com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService, com.google.android.gms.ads.AdService, com.google.android.gms.auth.api.signin.RevocationBoundService, com.google.android.gms.measurement.AppMeasurementJobService, com.google.android.gms.measurement.AppMeasurementService, com.google.android.gms.metadata.ModuleDependencies, com.google.firebase.components.ComponentDiscoveryService, com.google.firebase.sessions.SessionLifecycleService
- Receivers：androidx.profileinstaller.ProfileInstallReceiver, androidx.work.impl.background.systemalarm.RescheduleReceiver, androidx.work.impl.diagnostics.DiagnosticsReceiver, androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver, com.domobile.applockwatcher.AppLockWatcherDeviceAdmin, com.domobile.applockwatcher.SwitchWidget, com.domobile.applockwatcher.receiver.CoreReceiver, com.domobile.applockwatcher.receiver.LockReceiver, com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver, com.google.android.gms.measurement.AppMeasurementReceiver, com.mbridge.msdk.foundation.same.broadcast.NetWorkChangeReceiver
- Providers：androidx.startup.InitializationProvider, com.applovin.sdk.AppLovinInitProvider, com.blankj.utilcode.util.UtilsFileProvider, com.domobile.applockwatcher.provider.AppDataProvider, com.domobile.applockwatcher.provider.GenericFileProvider, com.domobile.applockwatcher.provider.ProfilesProvider, com.google.android.gms.ads.MobileAdsInitProvider, com.google.firebase.provider.FirebaseInitProvider, com.mbridge.msdk.config.component.status.MBComponentLifecycleProvider, com.smaato.sdk.core.lifecycle.ProcessLifecycleOwnerInitializer, com.squareup.picasso.PicassoProvider, com.vungle.ads.VungleProvider, io.bidmachine.BidMachineInitProvider

## SDK / Endpoint

### SDK

- `admob`
- `facebook`
- `firebase`

### Endpoint candidates

- http://www.apache.org/licenses/
- https://aax-us-east.amazon-adsystem.com/x/px/p/PH/
- https://prod.tahoe-analytics.publishers.advertising.a2z.com/logevent/putRecords
- https://dl.amazon.com/redirect/ref=mm_1_aps-mobile-dl?campaignId=QALXjR&failureMode=MobileWebMostly&url=
- https://${i.vastHost}/${i.dataCenter}/e/msdk/vast?b=%24%7Bi.bidId%7D&%24%7Boe%28t.debugMode=
- https://media.admob.com/api/v1/google_mobile_app_ads.js
- https://m.media-amazon.com/images/I/11gqnnPRWRL.js
- https://video-player.aps.amazon-adsystem.com/apsvid.js
- https://beta-video-player.aps.amazon-adsystem.com/apsvid.js
- https://c.amazon-adsystem.com/bao-csm/mobile/csm.js.gz
- https://www.instagram.com
- https://www.facebook.com/
- https://www.messenger.com
- https://accounts.snapchat.com/accounts/login
- https://pinterest.com
- https://badoo.com/
- https://www.meetme.com/
- http://www.pof.com/
- https://twitter.com/login
- https://www.tumblr.com/
- https://linkedin.com/
- https://www.flickr.com/
- https://www.zoosk.com/
- https://www.bigo.tv/
- http://www.skout.com/
- https://www.twoo.com/
- https://www.box.com/home
- https://discordapp.com/
- https://slack.com/
- https://www.skype.com/en/
- http://weheartit.com/
- https://waplog.com/
- https://www.pscp.tv/
- https://www.lovoo.com/
- https://web.telegram.org/#/login
- https://overview.mail.yahoo.com/
- https://outlook.live.com/owa/
- https://mail.google.com/mail/u/0/
- https://www.quora.com/
- https://hotornot.com/

## Warnings

- apktool manifest decode skipped 1 split APK(s)
- binary AndroidManifest.xml decoded with apktool

## 下一步

- 真机/模拟器验证 onboarding、paywall、首个可感知价值和崩溃路径。
- 把 endpoint candidates 与 HAR / MITM / Frida 动态证据对齐，避免只凭静态字符串下结论。
- 多版本对比权限、SDK、endpoint、native libs 和资源路径变化。
- 订阅/广告 SDK 线索存在，后续需拆 paywall、free trial、退款和广告频率。