# QR & Barcode Scanner

状态：active
Platform：android
Package：com.qr.code.reader.scanner.qrscan.android
Version：3.17.0
Opportunity：2026-06-10-qr-barcode-scanner-launcher

## 摘要

- 包类型：xapk，inner APK 数：4
- 引擎 / 框架：native
- SDK 线索：admob, facebook, firebase, react_native
- Endpoint candidates：12
- 结论口径：本报告只基于静态 ZIP / Manifest / 字符串证据；不代表真实运行路径已验证。

## 直接证据

- [high] Manifest package id is com.qr.code.reader.scanner.qrscan.android（source: `AndroidManifest.xml`，status: `verified`）
- [high] Manifest declares 51 permissions（source: `AndroidManifest.xml`，status: `verified`）
- [high] Engine/framework markers: native（source: `APK file inventory`，status: `verified`）
- [high] Static strings include 12 endpoint candidates（source: `Text/string scan`，status: `verified`）
- [high] Package contains 5 native libraries（source: `APK file inventory`，status: `verified`）

## 推断

- [medium] SDK markers suggest: admob, facebook, firebase, react_native（source: `Manifest, filenames, and text strings`，status: `inferred`）

## 权限和组件

### 权限

- `android.permission.ACCESS_ADSERVICES_AD_ID`
- `android.permission.ACCESS_ADSERVICES_ATTRIBUTION`
- `android.permission.ACCESS_ADSERVICES_TOPICS`
- `android.permission.ACCESS_FINE_LOCATION`
- `android.permission.ACCESS_NETWORK_STATE`
- `android.permission.ACCESS_WIFI_STATE`
- `android.permission.BIND_APPWIDGET`
- `android.permission.BROADCAST_CLOSE_SYSTEM_DIALOGS`
- `android.permission.CAMERA`
- `android.permission.CHANGE_WIFI_STATE`
- `android.permission.CONTROL_REMOTE_APP_TRANSITION_ANIMATIONS`
- `android.permission.EXPAND_STATUS_BAR`
- `android.permission.INSTALL_SHORTCUT`
- `android.permission.INTERNET`
- `android.permission.POST_NOTIFICATIONS`
- `android.permission.RECEIVE_BOOT_COMPLETED`
- `android.permission.REORDER_TASKS`
- `android.permission.REQUEST_DELETE_PACKAGES`
- `android.permission.SET_WALLPAPER`
- `android.permission.SET_WALLPAPER_HINTS`
- `android.permission.VIBRATE`
- `android.permission.WAKE_LOCK`
- `ch.android.launcher.lawnfeed.CONNECT_SERVICE`
- `com.anddoes.launcher.permission.READ_SETTINGS`
- `com.anddoes.launcher.permission.WRITE_SETTINGS`
- `com.android.launcher.permission.LAUNCHER_ANIMATION`
- `com.android.launcher.permission.READ_SETTINGS`
- `com.android.launcher.permission.WRITE_SETTINGS`
- `com.android.permission.RECEIVE_LAUNCH_BROADCASTS`
- `com.android.vending.CHECK_LICENSE`
- `com.google.android.apps.nexuslauncher.permission.READ_SETTINGS`
- `com.google.android.apps.nexuslauncher.permission.WRITE_SETTINGS`
- `com.google.android.c2dm.permission.RECEIVE`
- `com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE`
- `com.google.android.gms.permission.AD_ID`
- `com.huawei.android.thememanager.permission.ACCESS_CHANGE_WALLPAPER`
- `com.huawei.wallpaperservcie.permission.SET_WALLPAPER_OFFSET`
- `com.inveno.hwread.permission.LAUNCHER_RECEIVE`
- `com.lge.launcher3.permission.READ_SETTINGS`
- `com.motorola.launcher3.permission.READ_SETTINGS`

### 组件

- Activities：androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity, androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivity, androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivity, ch.android.launcher.AppStartupActivity, ch.android.launcher.BlankActivity, ch.android.launcher.ChooserToastActivity, ch.android.launcher.LawnchairLauncher, ch.android.launcher.LawnchairLauncher$Screenshot, ch.android.launcher.backup.BackupListActivity, ch.android.launcher.backup.NewBackupActivity, ch.android.launcher.backup.RestoreBackupActivity, ch.android.launcher.fake_launcher.FakeLauncherActivity, ch.android.launcher.font.settingsui.FontSelectionActivity, ch.android.launcher.gestures.handlers.SleepTimeoutActivity, ch.android.launcher.gestures.ui.SelectAppActivity, ch.android.launcher.iconpack.ApplyIconPackActivity, ch.android.launcher.iconpack.EditIconActivity, ch.android.launcher.iconpack.IconPickerActivity, ch.android.launcher.instructions.sidebar_intro.SidebarIntroActivity, ch.android.launcher.preferences.SelectableAppsActivity, ch.android.launcher.search.SearchActivity, ch.android.launcher.settings.ui.CustomAboutActivity, ch.android.launcher.settings.ui.CustomLicensesActivity, ch.android.launcher.settings.ui.SettingsActivity, ch.android.launcher.settings.ui.SettingsIntegrationActivity, ch.android.launcher.settings.ui.SettingsSearchActivity, ch.android.launcher.settings.ui.SettingsV2Activity, ch.android.launcher.settings.ui.search.SettingsSearchActivity, ch.android.launcher.util.notification.PersistentNotificationClickHandlerActivity, com.android.launcher.qrscanner.presentation.activities.NavigationActivity, com.android.launcher.qrscanner.presentation.activities.ScreenActivity, com.android.launcher.qrscanner.presentation.activities.WelcomeOnBoardingActivity, com.android.launcher.qrscanner.presentation.activities.WelcomeOnBoardingActivityV1, com.android.launcher3.AdContainerActivity, com.android.launcher3.allapps.AppsSearchActivity, com.android.launcher3.dragndrop.AddItemActivity, com.android.launcher3.freeze.AppRecreateActivity, com.android.launcher3.help.page.HelpActivity, com.android.launcher3.help.page.HelpDetailActivity, com.android.launcher3.inappreview.InAppReviewActivity, com.android.launcher3.offboarding.OffboardingActivity, com.android.launcher3.proxy.ProxyActivityStarter, com.android.launcher3.wallpaper.WallpaperActivity, com.android.quickstep.LockScreenRecentsActivity, com.android.quickstep.RecentsActivity, com.atom.app.android.deeplinkv2.DeeplinkHandlerActivity, com.atom.app.android.wallpaper.presentation.activities.WallpapersActivity, com.atom.app.android.weathersdk.ui.home.WeatherInfoActivity, com.atom.app.platform.appaddition.ui.AppAdditionActivity, com.google.android.apps.nexuslauncher.search.AppLaunchActivity, com.google.android.gms.ads.AdActivity, com.google.android.gms.ads.NotificationHandlerActivity, com.google.android.gms.ads.OutOfContextTestingActivity, com.google.android.gms.common.api.GoogleApiActivity, com.google.android.play.core.common.PlayCoreDialogWrapperActivity, com.launcher.android.deeplink.NotificationClickHandlerActivity, com.launcher.android.onboarding.OnBoardingScreen, com.launcher.android.util.ChromeCustomTabActivity, com.launcher.android.voice_search.SpeechToTextActivity, com.launcher.android.webview.WebViewActivity, com.pairip.licensecheck.LicenseActivity, com.survicate.surveys.SurveyActivity, net.consentmanager.sdk.consentlayer.ui.consentLayer.CmpConsentLayerActivity
- Services：androidx.camera.core.impl.MetadataHolderService, androidx.room.MultiInstanceInvalidationService, androidx.work.impl.background.systemalarm.SystemAlarmService, androidx.work.impl.background.systemjob.SystemJobService, androidx.work.impl.foreground.SystemForegroundService, ch.android.launcher.firebase.PushNotificationService, ch.android.launcher.webpush.NotificationHandlerService, com.android.launcher3.notification.NotificationListener, com.android.launcher3.uioverrides.WallpaperManagerCompat$ColorExtractionService, com.android.quickstep.TouchInteractionService, com.google.android.datatransport.runtime.backends.TransportBackendDiscovery, com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService, com.google.android.gms.ads.AdService, com.google.android.gms.measurement.AppMeasurementJobService, com.google.android.gms.measurement.AppMeasurementService, com.google.firebase.components.ComponentDiscoveryService, com.google.firebase.messaging.FirebaseMessagingService, com.google.firebase.sessions.SessionLifecycleService, com.google.mlkit.common.internal.MlKitComponentDiscoveryService
- Receivers：androidx.profileinstaller.ProfileInstallReceiver, androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy, androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver, androidx.work.impl.background.systemalarm.RescheduleReceiver, androidx.work.impl.diagnostics.DiagnosticsReceiver, androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver, ch.android.launcher.debug.TestAutomationReceiver, ch.android.launcher.gestures.handlers.SleepMethodDeviceAdmin$SleepDeviceAdmin, ch.android.launcher.webpush.NotificationHandlerReceiver, com.adjust.sdk.AdjustReferrerReceiver, com.android.launcher3.AppWidgetsRestoredReceiver, com.android.launcher3.InstallShortcutReceiver, com.android.launcher3.SessionCommitReceiver, com.android.launcher3.util.CustomChromeTabReceiver, com.atom.app.android.weathersdk.ui.widget.widgetprovider.WidgetProvider, com.google.android.apps.nexuslauncher.qsb.OPAStatusReceiver, com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver, com.google.android.gms.measurement.AppMeasurementReceiver, com.google.firebase.iid.FirebaseInstanceIdReceiver
- Providers：androidx.core.content.FileProvider, androidx.startup.InitializationProvider, ch.android.launcher.FiveSecsProvider, ch.android.launcher.settings.ui.preview.GridOptionsProvider, com.adjust.sdk.SystemLifecycleContentProvider, com.android.launcher3.LauncherProvider, com.android.launcher3.graphics.GridOptionsProvider, com.android.launcher3.testing.TestInformationProvider, com.android.quickstep.LauncherSearchIndexablesProvider, com.google.android.apps.nexuslauncher.search.AppSearchProvider, com.google.android.gms.ads.MobileAdsInitProvider, com.google.firebase.provider.FirebaseInitProvider, com.google.mlkit.common.internal.MlKitInitProvider

## SDK / Endpoint

### SDK

- `admob`
- `facebook`
- `firebase`
- `react_native`

### Endpoint candidates

- http://www.apache.org/licenses/
- http://www.apache.org/licenses/LICENSE-2.0
- https://example.com;end::#Intent;action=android.media.action.STILL_IMAGE_CAMERA;end#Intent;type=images/*;end
- https://example.com;end::#Intent;action=android.media.action.STILL_IMAGE_CAMERA;end-101

0

1

2

3

4

5custom-appwidgetfavorite
- https://config.qrscanner.com/matrix/v7https://firebasestorage.googleapis.com/v0/b/qr-code-scanner-b5c79.appspot.com/o/HelpSectionImages%2Ffind_apps_in_app_drawer.png?alt=media&token=%3Credacted%3E
- https://log.webmaxlogger.nethttps://qrscanner.com/==https://qrscanner.com/atom/qrcodescanner/terms/ccpa_form.html
- https://qrscanner.com/atom/qrcodescanner/terms/contact-us.htmlAAhttps://qrscanner.com/atom/qrcodescanner/terms/privacypolicy.htmlBBhttps://qrscanner.com/atom/qrcodescanner/terms/termsofservice.html==https://qrscanner.com/atom/qrcodescanner/terms/uninstall.html&&https://search.yahoo.com/beacon/geop/p
- https://search.yahoo.com/search?p=%00
- https://search.yahoo.com/search?q=%00%15%15https%3A%2F%2Funsplash.com%2F%00%3D%3Dhttps%3A%2F%2Fus-central1-qr-code-scanner-b5c79.cloudfunctions.net%2F%00
- https://weatherport.co/apps/
- https://www.google.com/search?q=%00%06%06i3oam5%00%0E%0Eimguploadtoken%00%25%25in_app_rating_max_sidebar_swipe_count%00%13%13is_hotwords_enabled%00%03%03key%00%14%14launcher_fcm_channel%00
- https://example.com;end::#Intent;action=android.media.action.STILL_IMAGE_CAMERA;end-101

0

1

2

3

5custom-appwidgetfavorite

## Warnings

- apktool manifest decode skipped 3 split APK(s)
- binary AndroidManifest.xml decoded with apktool

## 下一步

- 真机/模拟器验证 onboarding、paywall、首个可感知价值和崩溃路径。
- 把 endpoint candidates 与 HAR / MITM / Frida 动态证据对齐，避免只凭静态字符串下结论。
- 多版本对比权限、SDK、endpoint、native libs 和资源路径变化。
- 订阅/广告 SDK 线索存在，后续需拆 paywall、free trial、退款和广告频率。