# Emochi

状态：active
Platform：android
Package：com.flow.mobile
Version：2.1.1
Opportunity：2026-06-10-emochi-chat-with-character

## 摘要

- 包类型：xapk，inner APK 数：20
- 引擎 / 框架：native
- SDK 线索：admob, appsflyer, facebook, firebase, react_native, revenuecat
- Endpoint candidates：51
- 结论口径：本报告只基于静态 ZIP / Manifest / 字符串证据；不代表真实运行路径已验证。

## 直接证据

- [high] Manifest package id is com.flow.mobile（source: `AndroidManifest.xml`，status: `verified`）
- [high] Manifest declares 31 permissions（source: `AndroidManifest.xml`，status: `verified`）
- [high] Engine/framework markers: native（source: `APK file inventory`，status: `verified`）
- [high] Static strings include 51 endpoint candidates（source: `Text/string scan`，status: `verified`）
- [high] Package contains 19 native libraries（source: `APK file inventory`，status: `verified`）

## 推断

- [medium] SDK markers suggest: admob, appsflyer, facebook, firebase, react_native, revenuecat（source: `Manifest, filenames, and text strings`，status: `inferred`）

## 权限和组件

### 权限

- `android.permission.ACCESS_ADSERVICES_AD_ID`
- `android.permission.ACCESS_ADSERVICES_ATTRIBUTION`
- `android.permission.ACCESS_ADSERVICES_TOPICS`
- `android.permission.ACCESS_NETWORK_STATE`
- `android.permission.ACCESS_WIFI_STATE`
- `android.permission.BLUETOOTH`
- `android.permission.BLUETOOTH_CONNECT`
- `android.permission.CAMERA`
- `android.permission.FLASHLIGHT`
- `android.permission.FOREGROUND_SERVICE`
- `android.permission.INTERNET`
- `android.permission.POST_NOTIFICATIONS`
- `android.permission.READ_EXTERNAL_STORAGE`
- `android.permission.RECEIVE_BOOT_COMPLETED`
- `android.permission.RECORD_AUDIO`
- `android.permission.SCHEDULE_EXACT_ALARM`
- `android.permission.USE_BIOMETRIC`
- `android.permission.USE_FINGERPRINT`
- `android.permission.VIBRATE`
- `android.permission.WAKE_LOCK`
- `android.permission.WRITE_EXTERNAL_STORAGE`
- `com.amazon.privacypass.ATTEST`
- `com.android.vending.BILLING`
- `com.android.vending.CHECK_LICENSE`
- `com.flow.mobile.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION`
- `com.google.android.c2dm.permission.RECEIVE`
- `com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE`
- `com.google.android.gms.permission.AD_ID`
- `com.google.android.providers.gsf.permission.READ_GSERVICES`
- `com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA`
- `com.samsung.android.mapsagent.permission.READ_APP_INFO`

### 组件

- Activities：androidx.credentials.playservices.HiddenActivity, androidx.credentials.playservices.IdentityCredentialApiHiddenActivity, com.amplifyframework.devmenu.DeveloperMenuActivity, com.android.billingclient.api.ProxyBillingActivity, com.android.billingclient.api.ProxyBillingActivityV2, com.applovin.adview.AppLovinFullscreenActivity, com.applovin.adview.AppLovinFullscreenImmersiveActivity, com.applovin.creative.MaxCreativeDebuggerActivity, com.applovin.creative.MaxCreativeDebuggerDisplayedAdActivity, com.applovin.mediation.MaxDebuggerActivity, com.applovin.mediation.MaxDebuggerAdUnitDetailActivity, com.applovin.mediation.MaxDebuggerAdUnitWaterfallsListActivity, com.applovin.mediation.MaxDebuggerAdUnitsListActivity, com.applovin.mediation.MaxDebuggerCmpNetworksListActivity, com.applovin.mediation.MaxDebuggerDetailActivity, com.applovin.mediation.MaxDebuggerMultiAdActivity, com.applovin.mediation.MaxDebuggerTcfConsentStatusesListActivity, com.applovin.mediation.MaxDebuggerTcfInfoListActivity, com.applovin.mediation.MaxDebuggerTcfStringActivity, com.applovin.mediation.MaxDebuggerTestLiveNetworkActivity, com.applovin.mediation.MaxDebuggerTestModeNetworkActivity, com.applovin.mediation.MaxDebuggerUnifiedFlowActivity, com.applovin.mediation.MaxDebuggerWaterfallSegmentsActivity, com.applovin.sdk.AppLovinWebViewActivity, com.bytedance.sdk.openadsdk.activity.TTFullWebActivity, com.bytedance.sdk.openadsdk.activity.TTRewardWebActivity, com.bytedance.sdk.openadsdk.activity.single.IABLandingPageActivity, com.bytedance.sdk.openadsdk.activity.single.TTAdActivity, com.bytedance.sdk.openadsdk.activity.single.TTAppOpenAdActivity, com.bytedance.sdk.openadsdk.activity.single.TTAppOpenAdTransActivity, com.bytedance.sdk.openadsdk.activity.single.TTCeilingLandingPageActivity, com.bytedance.sdk.openadsdk.activity.single.TTDelegateActivity, com.bytedance.sdk.openadsdk.activity.single.TTFullScreenExpressVideoActivity, com.bytedance.sdk.openadsdk.activity.single.TTFullScreenVideoActivity, com.bytedance.sdk.openadsdk.activity.single.TTHistoryActivity, com.bytedance.sdk.openadsdk.activity.single.TTHistoryLandingPageActivity, com.bytedance.sdk.openadsdk.activity.single.TTLandingPageActivity, com.bytedance.sdk.openadsdk.activity.single.TTPlayableLandingPageActivity, com.bytedance.sdk.openadsdk.activity.single.TTRewardExpressVideoActivity, com.bytedance.sdk.openadsdk.activity.single.TTRewardVideoActivity, com.bytedance.sdk.openadsdk.activity.single.TTVideoLandingPageLink2Activity, com.bytedance.sdk.openadsdk.activity.single.TTWebsiteActivity, com.facebook.CustomTabActivity, com.facebook.CustomTabMainActivity, com.facebook.FacebookActivity, com.facebook.ads.AudienceNetworkActivity, com.flow.mobile.MainActivity, com.flow.mobile.chat.ui.ChatActivity, com.flow.mobile.chat.ui.ImagePreviewActivity, com.flow.mobile.ui.SplashActivity, com.flow.mobile.ui.auth.EmailLoginActivity, com.flow.mobile.ui.auth.OAuthLoginActivity, com.flow.mobile.ui.chat.ChatGenerateImageDetailActivity, com.flow.mobile.ui.chat.ChatShareActivity, com.flow.mobile.ui.chat.CustomBackgroundActivity, com.flow.mobile.ui.chat.bot_album.BotAlbumActivity, com.flow.mobile.ui.chat.memory.AutoMemoryActivity, com.flow.mobile.ui.chat.memory.ChatMemoryActivity, com.flow.mobile.ui.chat.narrator.NarratorStyleComparisonActivity, com.flow.mobile.ui.chat.narrator.NarratorWhatsNewActivity, com.flow.mobile.ui.chat.theme.ChatThemeSettingsActivity, com.flow.mobile.ui.chathistory.ChatHistoryActivity, com.flow.mobile.ui.chathistory.ChatHistoryConversationActivity, com.flow.mobile.ui.community.detail.CommunityRankingDetailActivity, com.flow.mobile.ui.createbot.CreateEntryActivity, com.flow.mobile.ui.flux.FluxActivity, com.flow.mobile.ui.main.ComposeMainActivity, com.flow.mobile.ui.misc.NetworkDiagnosticsActivity, com.flow.mobile.ui.novel.NovelLibraryActivity, com.flow.mobile.ui.persona.PersonaActivity, com.flow.mobile.ui.persona.PersonaPreferenceActivity, com.flow.mobile.ui.profile.EditProfileActivity, com.flow.mobile.ui.profile.ImageCropperActivity, com.flow.mobile.ui.profile.UserFollowersActivity, com.flow.mobile.ui.profile.UserFollowingActivity, com.flow.mobile.ui.prompt.BotCreatorProfileActivity, com.flow.mobile.ui.prompt.PromptDetailActivity, com.flow.mobile.ui.search.SearchActivity, com.flow.mobile.ui.settings.AboutActivity, com.flow.mobile.ui.settings.BlockListActivity, com.flow.mobile.ui.settings.BugReportActivity, com.flow.mobile.ui.settings.ContentSettingsActivity, com.flow.mobile.ui.settings.DeleteAccountActivity, com.flow.mobile.ui.settings.ModelSettingsActivity, com.flow.mobile.ui.settings.SettingsActivity, com.flow.mobile.ui.subscribe.BillActivity, com.flow.mobile.ui.subscribe.SubscribeActivity, com.flow.mobile.ui.tts.TtsSettingsActivity, com.flow.mobile.ui.tts.TtsVoicePickerActivity, com.flow.mobile.ui.webview.WebViewActivity, com.fyber.inneractive.sdk.activities.FyberReportAdActivity, com.fyber.inneractive.sdk.activities.InneractiveFullscreenAdActivity, com.fyber.inneractive.sdk.activities.InneractiveInternalBrowserActivity, com.fyber.inneractive.sdk.activities.InneractiveRichMediaVideoPlayerActivityCore, com.fyber.inneractive.sdk.activities.InternalStoreWebpageActivity, com.google.android.gms.ads.AdActivity, com.google.android.gms.ads.NotificationHandlerActivity, com.google.android.gms.ads.OutOfContextTestingActivity, com.google.android.gms.auth.api.signin.internal.SignInHubActivity, com.google.android.gms.common.api.GoogleApiActivity, com.google.android.play.core.common.PlayCoreDialogWrapperActivity, com.google.firebase.auth.internal.GenericIdpActivity, com.google.firebase.auth.internal.RecaptchaActivity, com.ironsource.mediationsdk.testSuite.TestSuiteActivity, com.ironsource.sdk.controller.ControllerActivity, com.ironsource.sdk.controller.InterstitialActivity, com.ironsource.sdk.controller.OpenUrlActivity, com.kwai.network.framework.adCommon.activity.AllianceEmptyShellActivity, com.mbridge.msdk.activity.MBCommonActivity, com.mbridge.msdk.config.activity.MBRewardVideoActivity, com.mbridge.msdk.out.LoadingActivity, com.mbridge.msdk.reward.player.MBRewardVideoActivity, com.moloco.sdk.xenoss.sdkdevkit.android.adrenderer.internal.mraid.MraidActivity, com.moloco.sdk.xenoss.sdkdevkit.android.adrenderer.internal.staticrenderer.StaticAdActivity, com.moloco.sdk.xenoss.sdkdevkit.android.adrenderer.internal.templates.renderer.fullscreen.FullscreenWebviewActivity, com.moloco.sdk.xenoss.sdkdevkit.android.adrenderer.internal.vast.VastActivity, com.secmtp.sdk.core.activity.ATGdprAuthActivity, com.secmtp.sdk.core.basead.ui.web.WebLandPageActivity, com.secmtp.sdk.core.common.inner.ui.ATLandscapeActivity, com.secmtp.sdk.core.common.inner.ui.ATLandscapeTranslucentActivity, com.secmtp.sdk.core.common.inner.ui.ATPortraitActivity, com.secmtp.sdk.core.common.inner.ui.ATPortraitTranslucentActivity, com.secmtp.sdk.core.common.inner.ui.activity.ATMixSplashActivity, com.secmtp.sdk.debug.activity.DeviceInfoActivity, com.secmtp.sdk.debug.activity.IntegrateStatusActivity, com.secmtp.sdk.debug.activity.MainActivity, com.secmtp.sdk.debug.activity.OnlinePlacementActivity, com.secmtp.sdk.debug.activity.SplashAdShowActivity, com.secmtp.sdk.debug.activity.UmpStatusActivity, com.smartdigimkt.expressad.reward.player.ATRewardVideoActivity, com.smartdigimkt.sdk.basead.ui.ATLandscapeActivity, com.smartdigimkt.sdk.basead.ui.ATLandscapeTranslucentActivity, com.smartdigimkt.sdk.basead.ui.ATPortraitActivity, com.smartdigimkt.sdk.basead.ui.ATPortraitTranslucentActivity, com.smartdigimkt.sdk.basead.ui.RewardExitConfirmDialogActivity, com.smartdigimkt.sdk.basead.ui.web.WebLandPageActivity, com.unity3d.ads.adplayer.FullScreenWebViewDisplay, com.unity3d.ironsourceads.internal.services.InlineStoreActivity, com.unity3d.services.ads.adunit.AdUnitActivity, com.unity3d.services.ads.adunit.AdUnitSoftwareActivity, com.unity3d.services.ads.adunit.AdUnitTransparentActivity, com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity, com.vungle.ads.internal.ui.VungleActivity, io.bidmachine.iab.mraid.MraidActivity, io.bidmachine.iab.vast.activity.VastActivity, io.bidmachine.nativead.view.VideoPlayerActivity, io.bidmachine.rendering.ad.fullscreen.FullScreenActivity, io.bidmachine.rendering.ad.view.ExpandActivity, net.openid.appauth.AuthorizationManagementActivity, net.openid.appauth.RedirectUriReceiverActivity, sg.bigo.ads.ad.splash.AdSplashActivity, sg.bigo.ads.ad.splash.LandscapeAdSplashActivity, sg.bigo.ads.api.AdActivity, sg.bigo.ads.api.CompanionAdActivity, sg.bigo.ads.api.LandingStyleableActivity, sg.bigo.ads.api.LandscapeAdActivity, sg.bigo.ads.api.LandscapeCompanionAdActivity, sg.bigo.ads.api.PopupAdActivity, sg.bigo.ads.controller.form.AdFormActivity, sg.bigo.ads.core.mraid.MraidVideoActivity
- Services：androidx.credentials.playservices.CredentialProviderMetadataHolder, androidx.room.MultiInstanceInvalidationService, androidx.work.impl.background.systemalarm.SystemAlarmService, androidx.work.impl.background.systemjob.SystemJobService, androidx.work.impl.foreground.SystemForegroundService, com.applovin.impl.adview.activity.FullscreenAdService, com.flow.mobile.network.EmochiFcmService, com.google.android.datatransport.runtime.backends.TransportBackendDiscovery, com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService, com.google.android.gms.ads.AdService, com.google.android.gms.auth.api.signin.RevocationBoundService, com.google.android.gms.measurement.AppMeasurementJobService, com.google.android.gms.measurement.AppMeasurementService, com.google.firebase.components.ComponentDiscoveryService, com.google.firebase.messaging.FirebaseMessagingService, com.google.firebase.sessions.SessionLifecycleService
- Receivers：androidx.profileinstaller.ProfileInstallReceiver, androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy, androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver, androidx.work.impl.background.systemalarm.RescheduleReceiver, androidx.work.impl.diagnostics.DiagnosticsReceiver, androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver, com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver, com.facebook.CurrentAccessTokenExpirationBroadcastReceiver, com.flow.mobile.MyInstallReceiver, com.flow.mobile.chat.ui.dialog.ShareExternalSuccessReceiver, com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver, com.google.android.gms.measurement.AppMeasurementReceiver, com.google.firebase.iid.FirebaseInstanceIdReceiver, com.mbridge.msdk.foundation.same.broadcast.NetWorkChangeReceiver
- Providers：androidx.core.content.FileProvider, androidx.startup.InitializationProvider, com.applovin.sdk.AppLovinInitProvider, com.facebook.ads.AudienceNetworkContentProvider, com.facebook.internal.FacebookInitProvider, com.google.android.gms.ads.MobileAdsInitProvider, com.google.firebase.provider.FirebaseInitProvider, com.ironsource.lifecycle.IronsourceLifecycleProvider, com.ironsource.lifecycle.LevelPlayActivityLifecycleProvider, com.mbridge.msdk.config.component.status.MBComponentLifecycleProvider, com.secmtp.sdk.core.api.ATInitializationProvider, com.secmtp.sdk.debug.provider.DebuggerContentProvider, com.smartdigimkt.sdk.api.SDMInitializationProvider, com.tramini.plugin.api.TraminiContentProvider, com.vungle.ads.VungleProvider, io.bidmachine.BidMachineInitProvider, io.sentry.android.core.SentryInitProvider, io.sentry.android.core.SentryPerformanceProvider, sg.bigo.ads.controller.provider.BigoAdsProvider

## SDK / Endpoint

### SDK

- `admob`
- `appsflyer`
- `facebook`
- `firebase`
- `react_native`
- `revenuecat`

### Endpoint candidates

- http://www.apache.org/licenses/
- http://www.apache.org/licenses/LICENSE-2.0
- https://github.com/JakeWharton/DiskLruCache
- https://github.com/google/ExoPlayer
- https://tools.iabtechlab.com/pdf/Native-App-1.1.pdf
- https://iabtechlab.com/open-measurement-sdk/
- https://github.com/protocolbuffers/protobuf
- https://iabtechlab.com/specifications-guidelines/open-measurementsdk/
- https://iabtechlab.com/standards/openmeasurement-sdk/native-app-compatability-mapping
- https://iabtechlab.com/standards/open-measurement-sdk/webvideo-compatability-mapping
- https://iabtechlab.com/omsdk/inapp/integration_onboard
- https://iabtechlab.com/omsdk/IVC_guide
- https://github.com/zloirock/core-js/blob/v3.31.1/LICENSE
- https://github.com/zloirock/core-js
- http://a
- http://a/c%20d?a=1&c=3
- https://a@b
- http://тест
- http://a#б
- http://x
- https://cdn.prod.website-files.com/6799fdf147956ac3a5fda2e2/6799fdf147956ac3a5fda2ec_Roboto-Medium.ttf
- https://cdn.prod.website-files.com/6799fdf147956ac3a5fda2e2/6799fdf147956ac3a5fda2f3_Roboto-Black.ttf
- https://cdn.prod.website-files.com/6799fdf147956ac3a5fda2e2/6799fdf147956ac3a5fda2f0_Roboto-Bold.ttf
- https://cdn.prod.website-files.com/6799fdf147956ac3a5fda2e2/6799fdf147956ac3a5fda2ed_Roboto-Regular.ttf
- https://ae.iads.unity3d.com/logs
- https://postlog.supersonic.com/logs
- http://qa.analytics.qa
- https://secure.ironbeast.io
- http://supersonic.ironbeast.io
- http://qa-analytics.unity3d.com?%24%7Bt%7D%60%29.catch%28%28%28%29=
- https://ironsource.mobi/privacy-policy/privacypolicy.html
- http://iron-debug-controller.com?log=
- https://akm.ssacdn.com/users/cdn/jsonFile.json
- https://akm.ssacdn.com/users/cdn/videoFile.mp4
- https://akm.ssacdn.com/users/cdn/imgFile.png
- https://cncn.ssacdn.com/users/cdn/jsonFile.json
- https://cncn.ssacdn.com/users/cdn/videoFile.mp4
- https://cncn.ssacdn.com/users/cdn/imgFile.png
- https://itcn.ssacdn.com/users/cdn/jsonFile.json
- https://itcn.ssacdn.com/users/cdn/videoFile.mp4

## Warnings

- apktool manifest decode skipped 19 split APK(s)
- binary AndroidManifest.xml decoded with apktool

## 下一步

- 真机/模拟器验证 onboarding、paywall、首个可感知价值和崩溃路径。
- 把 endpoint candidates 与 HAR / MITM / Frida 动态证据对齐，避免只凭静态字符串下结论。
- 多版本对比权限、SDK、endpoint、native libs 和资源路径变化。
- 订阅/广告 SDK 线索存在，后续需拆 paywall、free trial、退款和广告频率。