# Categorizr

状态：active
Platform：android
Package：com.app.categorizr
Version：3.0.7
Opportunity：2026-06-10-categorizr-receipt-scanner

## 摘要

- 包类型：xapk，inner APK 数：4
- 引擎 / 框架：native
- SDK 线索：firebase
- Endpoint candidates：80
- 结论口径：本报告只基于静态 ZIP / Manifest / 字符串证据；不代表真实运行路径已验证。

## 直接证据

- [high] Manifest package id is com.app.categorizr（source: `AndroidManifest.xml`，status: `verified`）
- [high] Manifest declares 19 permissions（source: `AndroidManifest.xml`，status: `verified`）
- [high] Engine/framework markers: native（source: `APK file inventory`，status: `verified`）
- [high] Static strings include 80 endpoint candidates（source: `Text/string scan`，status: `verified`）
- [high] Package contains 12 native libraries（source: `APK file inventory`，status: `verified`）

## 推断

- [medium] SDK markers suggest: firebase（source: `Manifest, filenames, and text strings`，status: `inferred`）

## 权限和组件

### 权限

- `android.permission.ACCESS_ADSERVICES_AD_ID`
- `android.permission.ACCESS_ADSERVICES_ATTRIBUTION`
- `android.permission.ACCESS_NETWORK_STATE`
- `android.permission.CAMERA`
- `android.permission.FLASHLIGHT`
- `android.permission.FOREGROUND_SERVICE`
- `android.permission.GET_ACCOUNTS`
- `android.permission.INTERNET`
- `android.permission.MANAGE_ACCOUNTS`
- `android.permission.POST_NOTIFICATIONS`
- `android.permission.READ_EXTERNAL_STORAGE`
- `android.permission.RECEIVE_BOOT_COMPLETED`
- `android.permission.VIBRATE`
- `android.permission.WAKE_LOCK`
- `android.permission.WRITE_EXTERNAL_STORAGE`
- `com.app.categorizr.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION`
- `com.google.android.c2dm.permission.RECEIVE`
- `com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE`
- `com.google.android.gms.permission.AD_ID`

### 组件

- Activities：com.app.categorizr.activities.AddAttribute, com.app.categorizr.activities.AddAttributeCustomisations, com.app.categorizr.activities.AddCatagoryNew, com.app.categorizr.activities.AddExpenseNew, com.app.categorizr.activities.AddInsurance, com.app.categorizr.activities.AddItem, com.app.categorizr.activities.AddItemsCustomizations, com.app.categorizr.activities.AddLocation, com.app.categorizr.activities.AddLookup, com.app.categorizr.activities.AddSplitExpense, com.app.categorizr.activities.AddSplitExpenseNew, com.app.categorizr.activities.AddStore, com.app.categorizr.activities.AddSubcategoryNew, com.app.categorizr.activities.AddTaxTypes, com.app.categorizr.activities.CameraActivity, com.app.categorizr.activities.ConfirmInsuranceActivity, com.app.categorizr.activities.CreateAccount, com.app.categorizr.activities.CreateAccount2, com.app.categorizr.activities.DriverInfo, com.app.categorizr.activities.DriverListingScreen, com.app.categorizr.activities.EditProfileScreen, com.app.categorizr.activities.EditReceiptNew, com.app.categorizr.activities.EnterCoverageAmountActivity, com.app.categorizr.activities.ForgotUsernamePassword, com.app.categorizr.activities.ForwardNetworkListingScreen, com.app.categorizr.activities.HomePage, com.app.categorizr.activities.InsuranceCoverageActivity, com.app.categorizr.activities.InsurancePoliciesListActivity, com.app.categorizr.activities.IntroFourthScreen, com.app.categorizr.activities.ItemListing, com.app.categorizr.activities.LoginScreen, com.app.categorizr.activities.MenuScreen, com.app.categorizr.activities.NetworkListingScren, com.app.categorizr.activities.OnBoardingScreen, com.app.categorizr.activities.PdfGenerator, com.app.categorizr.activities.PdfViewScreen, com.app.categorizr.activities.PolicyHolderInformation, com.app.categorizr.activities.PropertyInfo, com.app.categorizr.activities.PropertyInformationScreen, com.app.categorizr.activities.ReceiptCustomisations, com.app.categorizr.activities.ReceiptImagesScreen, com.app.categorizr.activities.ResetPassword, com.app.categorizr.activities.SearchWeb, com.app.categorizr.activities.SelectCatagory, com.app.categorizr.activities.SelectClaimItemsActivity, com.app.categorizr.activities.SelectInsuranceLocationActivity, com.app.categorizr.activities.SelectSortType, com.app.categorizr.activities.SelectStores, com.app.categorizr.activities.SettingsLoginSignup, com.app.categorizr.activities.SettingsScreen, com.app.categorizr.activities.SimpleScannerActivity, com.app.categorizr.activities.SplashScreen, com.app.categorizr.activities.SplitExpenses, com.app.categorizr.activities.StandAloneCamera, com.app.categorizr.activities.StandAloneGallery, com.app.categorizr.activities.SubmitInsuranceListActivity, com.app.categorizr.activities.TaxTypesList, com.app.categorizr.activities.TermsAndCondition, com.app.categorizr.activities.TermsScreen, com.app.categorizr.activities.VehicleInfo, com.app.categorizr.activities.VehicleListingScreen, com.app.categorizr.activities.ViewItemInformation, com.app.categorizr.activities.WebviewScren, com.app.categorizr.activities.WelcomeActivity, com.app.categorizr.activities.WriteMessageActivity, com.app.categorizr.camerafunctions.activity.ScanActivity, com.app.categorizr.documentscanner.AppScanActivity, com.app.categorizr.documentscanner.ScanActivity, com.app.categorizr.documentscanner.ui.scan.InternalScanActivity, com.app.categorizr.photoeditor.PhotoEditorActivity, com.facebook.CustomTabActivity, com.facebook.CustomTabMainActivity, com.facebook.FacebookActivity, com.google.android.gms.auth.api.signin.internal.SignInHubActivity, com.google.android.gms.common.api.GoogleApiActivity, com.google.android.play.core.common.PlayCoreDialogWrapperActivity, com.jaiselrahman.filepicker.activity.DirSelectActivity, com.jaiselrahman.filepicker.activity.FilePickerActivity, com.scanlibrary.ScanActivity
- Services：androidx.room.MultiInstanceInvalidationService, androidx.work.impl.background.systemalarm.SystemAlarmService, androidx.work.impl.background.systemjob.SystemJobService, androidx.work.impl.foreground.SystemForegroundService, com.app.categorizr.firebase.MyFirebaseMessagingService, com.app.categorizr.utils.AddReceiptService, com.app.categorizr.utils.BackupService, com.app.categorizr.utils.OcrService, com.app.categorizr.utils.PrepareReceiptService, com.app.categorizr.utils.SaveReceiptService, com.google.android.datatransport.runtime.backends.TransportBackendDiscovery, com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService, com.google.android.gms.auth.api.signin.RevocationBoundService, com.google.android.gms.measurement.AppMeasurementJobService, com.google.android.gms.measurement.AppMeasurementService, com.google.android.gms.metadata.ModuleDependencies, com.google.firebase.components.ComponentDiscoveryService, com.google.firebase.messaging.FirebaseMessagingService, com.google.firebase.sessions.SessionLifecycleService, com.google.mlkit.common.internal.MlKitComponentDiscoveryService
- Receivers：androidx.profileinstaller.ProfileInstallReceiver, androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy, androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver, androidx.work.impl.background.systemalarm.RescheduleReceiver, androidx.work.impl.diagnostics.DiagnosticsReceiver, androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver, com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver, com.facebook.CurrentAccessTokenExpirationBroadcastReceiver, com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver, com.google.android.gms.measurement.AppMeasurementReceiver, com.google.firebase.iid.FirebaseInstanceIdReceiver
- Providers：androidx.core.content.FileProvider, androidx.startup.InitializationProvider, com.facebook.internal.FacebookInitProvider, com.google.firebase.provider.FirebaseInitProvider, com.google.mlkit.common.internal.MlKitInitProvider, com.jaiselrahman.filepicker.utils.FilePickerProvider

## SDK / Endpoint

### SDK

- `firebase`

### Endpoint candidates

- http://www.apache.org/licenses/
- http://www.unicode.org/terms_of_use.html
- http://www.unicode.org/reports/tr44/
- http://www.unicode.org/reports/tr24/
- http://www.unicode.org/reports/tr24/#Assignment_Script_Values
- http://www.unicode.org/reports/tr24/#Assignment_ScriptX_Values
- http://www.apache.org/licenses/LICENSE-2.0
- http://sourceforge.net/adobe/aglfn/
- http://www.unicode.org/unicode/reports/tr9/
- http://partners.adobe.com/asn/developer/typeforum/unicodegn.html
- http://schemas.openxmlformats.org/drawingml/2006/main
- http://fsf.org/
- http://www.gnu.org/licenses/
- http://www.gnu.org/licenses
- http://itextpdf.com/terms-of-use/
- http://www.javaspecialists.eu/archive/Issue033.html
- http://www.javaworld.com/javaworld/javatips/jw-javatip128.html
- http://www.unicode.org/copyright.html#Exhibit1
- http://www.unicode.org/Public/
- http://www.unicode.org/reports/
- http://www.unicode.org/cldr/data/
- http://www.unicode.org/copyright.html
- http://www.adobe.com/devnet/xmp/library/eula-xmp-library-java.html
- http://www.adobe.com/products/acrobat/acrrasianfontpack.html
- http://partners.adobe.com/public/developer/acrobat/index_advanced.html#pci
- http://partners.adobe.com/asn/developer/typeforum/corporateuse.txt
- https://mozilla.org/MPL/2.0/
- https://publicsuffix.org/list/public_suffix_list.dat
- https://publicsuffix.org/list/
- https://en.wikipedia.org/wiki/.ac
- https://en.wikipedia.org/wiki/.ad
- https://en.wikipedia.org/wiki/.ae
- http://www.aeda.ae/eng/aepolicy.php
- https://www.information.aero/index.php?id=66
- http://www.nic.af/help.jsp
- http://www.nic.ag/prices.htm
- http://nic.com.ai/
- http://www.ert.gov.al/ert_alb/faq_det.html?Id=31
- https://www.amnic.net/policy/en/Policy_EN.pdf
- https://en.wikipedia.org/wiki/.ao

## Warnings

- apktool manifest decode skipped 3 split APK(s)
- binary AndroidManifest.xml decoded with apktool

## 下一步

- 真机/模拟器验证 onboarding、paywall、首个可感知价值和崩溃路径。
- 把 endpoint candidates 与 HAR / MITM / Frida 动态证据对齐，避免只凭静态字符串下结论。
- 多版本对比权限、SDK、endpoint、native libs 和资源路径变化。