# Sleep Pillow

状态：active
Platform：android
Package：com.fitness22.sleeppillow
Version：2.5.1
Opportunity：2026-06-10-white-noise-sleep-sounds-rain

## 摘要

- 包类型：xapk，inner APK 数：19
- 引擎 / 框架：未识别
- SDK 线索：firebase
- Endpoint candidates：0
- 结论口径：本报告只基于静态 ZIP / Manifest / 字符串证据；不代表真实运行路径已验证。

## 直接证据

- [high] Manifest package id is com.fitness22.sleeppillow（source: `AndroidManifest.xml`，status: `verified`）
- [high] Manifest declares 5 permissions（source: `AndroidManifest.xml`，status: `verified`）

## 推断

- [medium] SDK markers suggest: firebase（source: `Manifest, filenames, and text strings`，status: `inferred`）

## 权限和组件

### 权限

- `android.permission.ACCESS_NETWORK_STATE`
- `android.permission.FOREGROUND_SERVICE`
- `android.permission.INTERNET`
- `android.permission.WAKE_LOCK`
- `com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE`

### 组件

- Activities：com.fitness22.sleeppillow.activitiesandfragments.CreateEditMixActivity, com.fitness22.sleeppillow.activitiesandfragments.MainActivity, com.fitness22.sleeppillow.activitiesandfragments.SelectAlarmSoundActivity, com.fitness22.sleeppillow.activitiesandfragments.SplashActivity, com.fitness22.sleeppillow.managers.alarm.AlarmActivity, com.uservoice.uservoicesdk.activity.ArticleActivity, com.uservoice.uservoicesdk.activity.ContactActivity, com.uservoice.uservoicesdk.activity.ForumActivity, com.uservoice.uservoicesdk.activity.PortalActivity, com.uservoice.uservoicesdk.activity.PostIdeaActivity, com.uservoice.uservoicesdk.activity.TopicActivity
- Services：com.fitness22.sleeppillow.managers.alarm.AlarmService, com.fitness22.sleeppillow.managers.sound.SoundManagerService, com.fitness22.sleeppillow.managers.timer.TimerManagerService, com.google.android.gms.measurement.AppMeasurementJobService, com.google.android.gms.measurement.AppMeasurementService, com.google.firebase.components.ComponentDiscoveryService
- Receivers：com.google.android.gms.measurement.AppMeasurementReceiver
- Providers：com.google.firebase.provider.FirebaseInitProvider

## SDK / Endpoint

### SDK

- `firebase`

### Endpoint candidates

- 未发现

## Warnings

- apktool manifest decode skipped 18 split APK(s)
- binary AndroidManifest.xml decoded with apktool

## 下一步

- 真机/模拟器验证 onboarding、paywall、首个可感知价值和崩溃路径。
- 把 endpoint candidates 与 HAR / MITM / Frida 动态证据对齐，避免只凭静态字符串下结论。
- 多版本对比权限、SDK、endpoint、native libs 和资源路径变化。