Package Forensics · static MVP

SpicyBox

Packagecom.ai.app.spicybox.spicybox

Version1.0.2

Engineflutter

Endpoints5

直接证据

ID	Claim	Status	Confidence
pkg-static-001	Manifest package id is com.ai.app.spicybox.spicybox	verified	high
pkg-static-002	Manifest declares 14 permissions	verified	high
pkg-static-003	Engine/framework markers: flutter	verified	high
pkg-static-005	Static strings include 5 endpoint candidates	verified	high
pkg-static-006	Package contains 4 native libraries	verified	high

推断

ID	Claim	Status	Confidence
pkg-static-004	SDK markers suggest: firebase	inferred	medium

权限

android.permission.ACCESS_ADSERVICES_AD_ID
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.POST_NOTIFICATIONS
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
android.permission.WAKE_LOCK
com.ai.app.spicybox.spicybox.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.android.vending.CHECK_LICENSE
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.gms.permission.AD_ID
com.google.android.providers.gsf.permission.READ_GSERVICES

SDK / Endpoint

SDK

firebase

Endpoint candidates

http://www.apache.org/licenses/
https://www.jsdelivr.com/using-sri-with-dynamic-files
https://github.com/apvarun/toastify-js
https://github.com/richtr/NoSleep.js/issues/15
https://developer.mozilla.org/en-US/docs/Web/API/WakeLockSentinel/released