# APK Evidence

- File analyzed locally: `Berger_LFP_1.0.3_APKPure.xapk`
- Source: APKPure direct XAPK download
- Play URL: `https://play.google.com/store/apps/details?id=com.jbd.berger&hl=de`
- App package: `com.jbd.berger`
- App label: `Berger LFP`
- Publisher shown by APKPure/Play metadata: `Fritz Berger GmbH`
- Version: `1.0.3` / `8`
- XAPK SHA-256: `962eb7d0c62a34e03bfbe034632fd227e0f352cd66fac9ac3d77166cec0abb5e`
- Base APK SHA-256: `aa2325cfe3777824657f0ade0c381cf4bc296f9630179e0d33ed4eb56d78c1bb`
- Signer DN: `CN=Unknown, OU=Unknown, O=Unknown, L=Unknown, ST=Unknown, C=Unknown`
- Signer cert SHA-256: `ec11c6d3260adecb382186a61207e61657834b3b025e3ca31bc6ef4d88f720f9`
- Source stamp signer DN: `CN=Android, OU=Android, O=Google Inc., L=Mountain View, ST=California, C=US`
- Source stamp signer SHA-256: `3257d599a49d2c961a471ca9843f59d341a405884583fc087df4237b733bbd6d`

The XAPK contains:

- `com.jbd.berger.apk`
- `config.armeabi_v7a.apk`
- language splits: `en`, `zh`
- density split: `config.mdpi.apk`
- `manifest.json`
- `icon.png`

Split/package SHA-256:

| File | SHA-256 |
| --- | --- |
| `com.jbd.berger.apk` | `aa2325cfe3777824657f0ade0c381cf4bc296f9630179e0d33ed4eb56d78c1bb` |
| `config.armeabi_v7a.apk` | `fc3006094ca26f1b3e51b8848f7c2e2c9225c0fb10aafd08214845bd1e262d1b` |
| `config.en.apk` | `bf9472ba9cb732827ec1483287cca9598614f1f4daa20b905e494cd49eaba3da` |
| `config.mdpi.apk` | `45546c07728a3ffb05c9c7d42418160adeda29466000f813d8b17747073da43d` |
| `config.zh.apk` | `f1c18a5f380a45f7175baa7d646f15b774ede0d582ee436d7fafc86f456cab67` |
| `manifest.json` | `9a35b17653ed11342cc93e2abc81f3a7698632def42ec9a0644f5eb62848255d` |

Local analysis outputs:

- XAPK unpack: `berger-ble-work/xapk`
- apktool output: `berger-ble-work/apktool-out`
- Main app bundle: `berger-ble-work/apktool-out/assets/apps/__UNI__F61076D/www/app-service.js`

The APK/XAPK files are intentionally not committed into this repository.