# Duplicate Photo Finder Remover

状态：active
Platform：android
Package：ee.simplesoft.picsweep
Version：1.13.19
Opportunity：2026-06-10-duplicate-photo-finder-remover

## 摘要

- 包类型：xapk，inner APK 数：20
- 引擎 / 框架：native
- SDK 线索：admob, firebase, revenuecat
- Endpoint candidates：26
- 结论口径：本报告只基于静态 ZIP / Manifest / 字符串证据；不代表真实运行路径已验证。

## 直接证据

- [high] Manifest package id is ee.simplesoft.picsweep（source: `AndroidManifest.xml`，status: `verified`）
- [high] Manifest declares 22 permissions（source: `AndroidManifest.xml`，status: `verified`）
- [high] Engine/framework markers: native（source: `APK file inventory`，status: `verified`）
- [high] Static strings include 26 endpoint candidates（source: `Text/string scan`，status: `verified`）
- [high] Package contains 13 native libraries（source: `APK file inventory`，status: `verified`）

## 推断

- [medium] SDK markers suggest: admob, firebase, revenuecat（source: `Manifest, filenames, and text strings`，status: `inferred`）

## 权限和组件

### 权限

- `android.permission.ACCESS_ADSERVICES_AD_ID`
- `android.permission.ACCESS_ADSERVICES_ATTRIBUTION`
- `android.permission.ACCESS_ADSERVICES_TOPICS`
- `android.permission.ACCESS_NETWORK_STATE`
- `android.permission.ACCESS_WIFI_STATE`
- `android.permission.FOREGROUND_SERVICE`
- `android.permission.FOREGROUND_SERVICE_DATA_SYNC`
- `android.permission.INTERNET`
- `android.permission.POST_NOTIFICATIONS`
- `android.permission.READ_EXTERNAL_STORAGE`
- `android.permission.READ_MEDIA_IMAGES`
- `android.permission.READ_MEDIA_VISUAL_USER_SELECTED`
- `android.permission.RECEIVE_BOOT_COMPLETED`
- `android.permission.VIBRATE`
- `android.permission.WAKE_LOCK`
- `android.permission.WRITE_EXTERNAL_STORAGE`
- `com.amazon.privacypass.ATTEST`
- `com.android.vending.BILLING`
- `com.android.vending.CHECK_LICENSE`
- `com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE`
- `com.google.android.gms.permission.AD_ID`
- `ee.simplesoft.picsweep.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION`

### 组件

- Activities：com.amazon.aps.ads.activity.ApsInterstitialActivity, com.amazon.device.ads.DTBAdActivity, com.amazon.device.ads.DTBInterstitialActivity, com.android.billingclient.api.ProxyBillingActivity, com.android.billingclient.api.ProxyBillingActivityV2, com.applovin.adview.AppLovinFullscreenActivity, com.applovin.adview.AppLovinFullscreenImmersiveActivity, com.applovin.creative.MaxCreativeDebuggerActivity, com.applovin.creative.MaxCreativeDebuggerDisplayedAdActivity, com.applovin.mediation.MaxDebuggerActivity, com.applovin.mediation.MaxDebuggerAdUnitDetailActivity, com.applovin.mediation.MaxDebuggerAdUnitWaterfallsListActivity, com.applovin.mediation.MaxDebuggerAdUnitsListActivity, com.applovin.mediation.MaxDebuggerCmpNetworksListActivity, com.applovin.mediation.MaxDebuggerDetailActivity, com.applovin.mediation.MaxDebuggerMultiAdActivity, com.applovin.mediation.MaxDebuggerTcfConsentStatusesListActivity, com.applovin.mediation.MaxDebuggerTcfInfoListActivity, com.applovin.mediation.MaxDebuggerTcfStringActivity, com.applovin.mediation.MaxDebuggerTestLiveNetworkActivity, com.applovin.mediation.MaxDebuggerTestModeNetworkActivity, com.applovin.mediation.MaxDebuggerUnifiedFlowActivity, com.applovin.mediation.MaxDebuggerWaterfallSegmentsActivity, com.applovin.sdk.AppLovinWebViewActivity, com.appodeal.ads.TestActivity, com.appodeal.ads.adapters.iab.unified.VideoPlayerActivity, com.appodeal.consent.form.ConsentActivity, com.bytedance.sdk.openadsdk.activity.single.TTAdActivity, com.bytedance.sdk.openadsdk.activity.single.TTAppOpenAdActivity, com.bytedance.sdk.openadsdk.activity.single.TTAppOpenAdTransActivity, com.bytedance.sdk.openadsdk.activity.single.TTCeilingLandingPageActivity, com.bytedance.sdk.openadsdk.activity.single.TTDelegateActivity, com.bytedance.sdk.openadsdk.activity.single.TTFullScreenExpressVideoActivity, com.bytedance.sdk.openadsdk.activity.single.TTFullScreenVideoActivity, com.bytedance.sdk.openadsdk.activity.single.TTLandingPageActivity, com.bytedance.sdk.openadsdk.activity.single.TTPlayableLandingPageActivity, com.bytedance.sdk.openadsdk.activity.single.TTRewardExpressVideoActivity, com.bytedance.sdk.openadsdk.activity.single.TTRewardVideoActivity, com.bytedance.sdk.openadsdk.activity.single.TTVideoLandingPageLink2Activity, com.bytedance.sdk.openadsdk.activity.single.TTWebsiteActivity, com.chartboost.sdk.internal.clickthrough.EmbeddedBrowserActivity, com.chartboost.sdk.view.CBImpressionActivity, com.chartboost.sdk.view.FullscreenAdActivity, com.explorestack.iab.mraid.MraidActivity, com.explorestack.iab.mraid.MraidDialogActivity, com.explorestack.iab.vast.activity.VastActivity, com.facebook.ads.AudienceNetworkActivity, com.fyber.inneractive.sdk.activities.FyberReportAdActivity, com.fyber.inneractive.sdk.activities.InneractiveFullscreenAdActivity, com.fyber.inneractive.sdk.activities.InneractiveInternalBrowserActivity, com.fyber.inneractive.sdk.activities.InneractiveRichMediaVideoPlayerActivityCore, com.fyber.inneractive.sdk.activities.InternalStoreWebpageActivity, com.google.android.gms.ads.AdActivity, com.google.android.gms.ads.NotificationHandlerActivity, com.google.android.gms.ads.OutOfContextTestingActivity, com.google.android.gms.auth.api.signin.internal.SignInHubActivity, com.google.android.gms.common.api.GoogleApiActivity, com.inmobi.ads.rendering.InMobiAdActivity, com.ironsource.mediationsdk.testSuite.TestSuiteActivity, com.ironsource.sdk.controller.ControllerActivity, com.ironsource.sdk.controller.InterstitialActivity, com.ironsource.sdk.controller.OpenUrlActivity, com.mbridge.msdk.activity.MBCommonActivity, com.mbridge.msdk.config.activity.MBRewardVideoActivity, com.mbridge.msdk.out.LoadingActivity, com.mbridge.msdk.reward.player.MBRewardVideoActivity, com.mobilefuse.sdk.MobileFuseFullscreenActivity, com.mobilefuse.sdk.MobileFuseFullscreenTransparentActivity, com.mobilefuse.sdk.ad.rendering.splashad.MobileFuseSplashAdActivity, com.mobilefuse.sdk.experimental.NativeInterstitialActivity, com.moloco.sdk.xenoss.sdkdevkit.android.adrenderer.internal.mraid.MraidActivity, com.moloco.sdk.xenoss.sdkdevkit.android.adrenderer.internal.staticrenderer.StaticAdActivity, com.moloco.sdk.xenoss.sdkdevkit.android.adrenderer.internal.templates.renderer.fullscreen.FullscreenWebviewActivity, com.moloco.sdk.xenoss.sdkdevkit.android.adrenderer.internal.vast.VastActivity, com.my.target.common.MyTargetActivity, com.ogury.ad.interstitial.ui.InterstitialActivity, com.ogury.ad.interstitial.ui.InterstitialAndroid8RotableActivity, com.ogury.ad.interstitial.ui.InterstitialAndroid8TransparentActivity, com.pairip.licensecheck.LicenseActivity, com.pubmatic.sdk.common.browser.POBInternalBrowserActivity, com.pubmatic.sdk.webrendering.mraid.POBVideoPlayerActivity, com.pubmatic.sdk.webrendering.ui.POBFullScreenActivity, com.revenuecat.purchases.SimulatedStoreErrorDialogActivity, com.revenuecat.purchases.amazon.purchasing.ProxyAmazonBillingActivity, com.revenuecat.purchases.ui.revenuecatui.activity.PaywallActivity, com.revenuecat.purchases.ui.revenuecatui.customercenter.CustomerCenterActivity, com.smaato.sdk.core.browser.SmaatoSdkBrowserActivity, com.smaato.sdk.interstitial.view.InterstitialAdActivity, com.smaato.sdk.rewarded.view.RewardedInterstitialAdActivity, com.startapp.sdk.ads.interstitials.OverlayActivity, com.startapp.sdk.ads.list3d.List3DActivity, com.startapp.sdk.adsbase.consent.ConsentActivity, com.taurusx.tax.mraid.MraidBrowser, com.taurusx.tax.mraid.MraidVideoPlayerActivity, com.taurusx.tax.ui.AppOpenAdActivity, com.taurusx.tax.ui.AppOpenNativeAdActivity, com.taurusx.tax.ui.TaurusxH5Activity, com.taurusx.tax.ui.TaxVideoActivity, com.taurusx.tax.ui.TaxWebViewActivity, com.taurusx.tax.utils.webview.TaxBrowserActivity, com.unity3d.ads.adplayer.FullScreenWebViewDisplay, com.unity3d.ironsourceads.internal.services.InlineStoreActivity, com.unity3d.services.ads.adunit.AdUnitActivity, com.unity3d.services.ads.adunit.AdUnitSoftwareActivity, com.unity3d.services.ads.adunit.AdUnitTransparentActivity, com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity, com.vungle.ads.internal.ui.VungleActivity, com.zmaticoo.sdk.flow.components.AdActivity, ee.simplesoft.picsweep.MainActivity, io.bidmachine.iab.mraid.MraidActivity, io.bidmachine.iab.vast.activity.VastActivity, io.bidmachine.nativead.view.VideoPlayerActivity, io.bidmachine.rendering.ad.fullscreen.FullScreenActivity, io.bidmachine.rendering.ad.view.ExpandActivity, net.pubnative.lite.sdk.consent.UserConsentActivity, net.pubnative.lite.sdk.contentinfo.AdFeedbackActivity, net.pubnative.lite.sdk.interstitial.activity.MraidInterstitialActivity, net.pubnative.lite.sdk.interstitial.activity.VastInterstitialActivity, net.pubnative.lite.sdk.rewarded.activity.MraidRewardedActivity, net.pubnative.lite.sdk.rewarded.activity.VastRewardedActivity, net.pubnative.lite.sdk.utils.browser.BrowserActivity, sg.bigo.ads.ad.splash.AdSplashActivity, sg.bigo.ads.ad.splash.LandscapeAdSplashActivity, sg.bigo.ads.api.AdActivity, sg.bigo.ads.api.CompanionAdActivity, sg.bigo.ads.api.LandingStyleableActivity, sg.bigo.ads.api.LandscapeAdActivity, sg.bigo.ads.api.LandscapeCompanionAdActivity, sg.bigo.ads.api.PopupAdActivity, sg.bigo.ads.controller.form.AdFormActivity, sg.bigo.ads.core.mraid.MraidVideoActivity
- Services：androidx.room.MultiInstanceInvalidationService, androidx.work.impl.background.systemjob.SystemJobService, androidx.work.impl.foreground.SystemForegroundService, com.applovin.impl.adview.activity.FullscreenAdService, com.chartboost.sdk.internal.video.repository.exoplayer.VideoRepositoryDownloadService, com.google.android.datatransport.runtime.backends.TransportBackendDiscovery, com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService, com.google.android.gms.ads.AdService, com.google.android.gms.auth.api.signin.RevocationBoundService, com.google.android.gms.measurement.AppMeasurementJobService, com.google.android.gms.measurement.AppMeasurementService, com.google.firebase.components.ComponentDiscoveryService, com.google.firebase.sessions.SessionLifecycleService, com.startapp.sdk.cachedservice.BackgroundService, com.startapp.sdk.jobs.SchedulerService, ee.simplesoft.picsweep.features.background.PhotoScanService
- Receivers：androidx.profileinstaller.ProfileInstallReceiver, androidx.work.impl.background.systemalarm.RescheduleReceiver, androidx.work.impl.diagnostics.DiagnosticsReceiver, androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver, com.appodeal.ads.AppodealPackageAddedReceiver, com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver, com.google.android.gms.measurement.AppMeasurementReceiver, com.mbridge.msdk.foundation.same.broadcast.NetWorkChangeReceiver, com.ogury.core.internal.LogEnablerReceiver, com.startapp.sdk.adsbase.remoteconfig.BootCompleteListener, ee.simplesoft.picsweep.background.BootReceiver
- Providers：androidx.startup.InitializationProvider, com.applovin.sdk.AppLovinInitProvider, com.facebook.ads.AudienceNetworkContentProvider, com.google.android.gms.ads.MobileAdsInitProvider, com.google.firebase.provider.FirebaseInitProvider, com.ironsource.lifecycle.IronsourceLifecycleProvider, com.ironsource.lifecycle.LevelPlayActivityLifecycleProvider, com.mbridge.msdk.config.component.status.MBComponentLifecycleProvider, com.mobilefuse.sdk.MobileFuseSdkInitProvider, com.my.target.common.MyTargetContentProvider, com.smaato.sdk.core.lifecycle.ProcessLifecycleOwnerInitializer, com.squareup.picasso.PicassoProvider, com.taurusx.tax.core.TaurusXProvider, com.vungle.ads.VungleProvider, io.bidmachine.BidMachineInitProvider, sg.bigo.ads.controller.provider.BigoAdsProvider

## SDK / Endpoint

### SDK

- `admob`
- `firebase`
- `revenuecat`

### Endpoint candidates

- http://www.apache.org/licenses/
- https://aax-us-east.amazon-adsystem.com/x/px/p/PH/
- https://pubmatic.com/
- https://prod.tahoe-analytics.publishers.advertising.a2z.com/logevent/putRecords
- https://dl.amazon.com/redirect/ref=mm_1_aps-mobile-dl?campaignId=QALXjR&failureMode=MobileWebMostly&url=
- https://${i.vastHost}/${i.dataCenter}/e/msdk/vast?b=%24%7Bi.bidId%7D&%24%7Boe%28t.debugMode=
- https://media.admob.com/api/v1/google_mobile_app_ads.js
- https://m.media-amazon.com/images/I/11gqnnPRWRL.js
- https://video-player.aps.amazon-adsystem.com/apsvid.js
- https://beta-video-player.aps.amazon-adsystem.com/apsvid.js
- https://c.amazon-adsystem.com/bao-csm/mobile/csm.js.gz
- https://sdk-webview.mobilefuse.com/mraid/
- https://www.iab.com/wp-content/uploads/2017/07/MRAID_3.0_FINAL.pdf
- http://tizen.org/system/model_name
- http://tizen.org/feature/platform.version
- https://github.com/jeromeetienne/microevent.js
- https://github.com/scottcorgan/tiny-emitter/blob/master/index.js
- https://www.google.com/policies/privacy/
- https://support.google.com/admob/answer/6128543?hl=en
- https://www.appodeal.com/home/privacy-policy/
- https://firebase.google.com/support/privacy
- https://www.facebook.com/about/privacy
- https://www.revenuecat.com/privacy/
- https://www.revenuecat.com/privacy
- http://www.apache.org/licenses/LICENSE-2.0
- https://serving.stat-rock.com/player/smaato.js

## Warnings

- apktool manifest decode skipped 19 split APK(s)
- binary AndroidManifest.xml decoded with apktool

## 下一步

- 真机/模拟器验证 onboarding、paywall、首个可感知价值和崩溃路径。
- 把 endpoint candidates 与 HAR / MITM / Frida 动态证据对齐，避免只凭静态字符串下结论。
- 多版本对比权限、SDK、endpoint、native libs 和资源路径变化。
- 订阅/广告 SDK 线索存在，后续需拆 paywall、free trial、退款和广告频率。