# GLandGo

状态：active
Platform：android
Package：glandgo.gpsarea.fieldareameasure
Version：1.5.14
Opportunity：2026-06-10-gps-field-measure-glandgo

## 摘要

- 包类型：xapk，inner APK 数：19
- 引擎 / 框架：未识别
- SDK 线索：firebase
- Endpoint candidates：4
- 结论口径：本报告只基于静态 ZIP / Manifest / 字符串证据；不代表真实运行路径已验证。

## 直接证据

- [high] Manifest package id is glandgo.gpsarea.fieldareameasure（source: `AndroidManifest.xml`，status: `verified`）
- [high] Manifest declares 24 permissions（source: `AndroidManifest.xml`，status: `verified`）
- [high] Static strings include 4 endpoint candidates（source: `Text/string scan`，status: `verified`）

## 推断

- [medium] SDK markers suggest: firebase（source: `Manifest, filenames, and text strings`，status: `inferred`）

## 权限和组件

### 权限

- `android.permission.ACCESS_ADSERVICES_AD_ID`
- `android.permission.ACCESS_ADSERVICES_ATTRIBUTION`
- `android.permission.ACCESS_COARSE_LOCATION`
- `android.permission.ACCESS_FINE_LOCATION`
- `android.permission.ACCESS_LOCATION_EXTRA_COMMANDS`
- `android.permission.ACCESS_NETWORK_STATE`
- `android.permission.ACCESS_WIFI_STATE`
- `android.permission.BLUETOOTH`
- `android.permission.BLUETOOTH_ADMIN`
- `android.permission.BLUETOOTH_CONNECT`
- `android.permission.BLUETOOTH_SCAN`
- `android.permission.INTERNET`
- `android.permission.POST_NOTIFICATIONS`
- `android.permission.READ_EXTERNAL_STORAGE`
- `android.permission.USE_BIOMETRIC`
- `android.permission.USE_FINGERPRINT`
- `android.permission.VIBRATE`
- `android.permission.WAKE_LOCK`
- `android.permission.WRITE_EXTERNAL_STORAGE`
- `com.android.vending.BILLING`
- `com.google.android.c2dm.permission.RECEIVE`
- `com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE`
- `com.google.android.providers.gsf.permission.READ_GSERVICES`
- `glandgo.gpsarea.fieldareameasure.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION`

### 组件

- Activities：androidx.credentials.playservices.HiddenActivity, androidx.credentials.playservices.IdentityCredentialApiHiddenActivity, com.android.billingclient.api.ProxyBillingActivity, com.android.billingclient.api.ProxyBillingActivityV2, com.google.android.gms.auth.api.signin.internal.SignInHubActivity, com.google.android.gms.common.api.GoogleApiActivity, com.google.android.play.core.common.PlayCoreDialogWrapperActivity, com.google.firebase.auth.internal.GenericIdpActivity, com.google.firebase.auth.internal.RecaptchaActivity, com.studio.converter.HomeActivity, com.studio.converter.account.AccountActivity, com.studio.converter.account.EmailForgotActivity, com.studio.converter.account.EmailLoginActivity, com.studio.converter.account.EmailSignupActivity, com.studio.converter.account.LoginSelectActivity, com.studio.converter.bluetooth.BluetoothActivity, com.studio.converter.compass.CompassActivity, com.studio.converter.coordinates.CoordinatesActivity, com.studio.converter.export.JpgExportActivity, com.studio.converter.export.PdfExportActivity, com.studio.converter.history.MeasureDesActivity, com.studio.converter.history.MeasureNoteActivity, com.studio.converter.history.MeasureSaveActivity, com.studio.converter.layer.ImageLayerActivity, com.studio.converter.layer.ImageLayerShowActivity, com.studio.converter.measure.split.SplitActivity, com.studio.converter.more.AboutActivity, com.studio.converter.more.GroupSettingActivity, com.studio.converter.parse.ImportListActivity, com.studio.converter.project.ImportLocalListActivity, com.studio.converter.project.ProjectMapActivity, com.studio.converter.project.ProjectRecordActivity, com.studio.converter.project.ProjectSaveActivity, com.studio.converter.project.ProjectSettingsActivity, com.studio.converter.project.settings.EditUserRoleActivity, com.studio.converter.project.settings.InviteUserActivity, com.studio.converter.project.settings.InviteUserCodeActivity, com.studio.converter.project.settings.JoinProjectActivity, com.studio.converter.project.settings.ProjectUserActivity, com.studio.converter.search.AddressSearchActivity, com.studio.infra.base.BrowserActivity, com.studio.login.AppleAuthCallbackActivity, com.tejpratapsingh.pdfcreator.activity.PDFCreatorActivity, com.tejpratapsingh.pdfcreator.activity.PDFViewerActivity
- Services：androidx.credentials.playservices.CredentialProviderMetadataHolder, androidx.room.MultiInstanceInvalidationService, com.google.android.datatransport.runtime.backends.TransportBackendDiscovery, com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService, com.google.android.gms.auth.api.signin.RevocationBoundService, com.google.android.gms.measurement.AppMeasurementJobService, com.google.android.gms.measurement.AppMeasurementService, com.google.firebase.components.ComponentDiscoveryService, com.google.firebase.messaging.FirebaseMessagingService, com.studio.infra.push.FirebaseMessageService
- Receivers：androidx.profileinstaller.ProfileInstallReceiver, com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver, com.google.android.gms.measurement.AppMeasurementReceiver, com.google.firebase.iid.FirebaseInstanceIdReceiver
- Providers：androidx.startup.InitializationProvider, com.google.firebase.provider.FirebaseInitProvider

## SDK / Endpoint

### SDK

- `firebase`

### Endpoint candidates

- https://github.com/ReactiveX/RxJava.git
- http://eclipse-rbe.sourceforge.net
- http://www.apache.org/licenses/LICENSE-2.0
- http://java.sun.com/j2se/1.5.0/docs/api/java/util/Properties.html#encoding

## Warnings

- apktool manifest decode skipped 18 split APK(s)
- binary AndroidManifest.xml decoded with apktool

## 下一步

- 真机/模拟器验证 onboarding、paywall、首个可感知价值和崩溃路径。
- 把 endpoint candidates 与 HAR / MITM / Frida 动态证据对齐，避免只凭静态字符串下结论。
- 多版本对比权限、SDK、endpoint、native libs 和资源路径变化。