APK Evidence

File analyzed locally: Berger_LFP_1.0.3_APKPure.xapk
Source: APKPure direct XAPK download
Play URL: https://play.google.com/store/apps/details?id=com.jbd.berger&hl=de
App package: com.jbd.berger
App label: Berger LFP
Publisher shown by APKPure/Play metadata: Fritz Berger GmbH
Version: 1.0.3 / 8
XAPK SHA-256: 962eb7d0c62a34e03bfbe034632fd227e0f352cd66fac9ac3d77166cec0abb5e
Base APK SHA-256: aa2325cfe3777824657f0ade0c381cf4bc296f9630179e0d33ed4eb56d78c1bb
Signer DN: CN=Unknown, OU=Unknown, O=Unknown, L=Unknown, ST=Unknown, C=Unknown
Signer cert SHA-256: ec11c6d3260adecb382186a61207e61657834b3b025e3ca31bc6ef4d88f720f9
Source stamp signer DN: CN=Android, OU=Android, O=Google Inc., L=Mountain View, ST=California, C=US
Source stamp signer SHA-256: 3257d599a49d2c961a471ca9843f59d341a405884583fc087df4237b733bbd6d

The XAPK contains:

Split/package SHA-256:

File	SHA-256
`com.jbd.berger.apk`	`aa2325cfe3777824657f0ade0c381cf4bc296f9630179e0d33ed4eb56d78c1bb`
`config.armeabi_v7a.apk`	`fc3006094ca26f1b3e51b8848f7c2e2c9225c0fb10aafd08214845bd1e262d1b`
`config.en.apk`	`bf9472ba9cb732827ec1483287cca9598614f1f4daa20b905e494cd49eaba3da`
`config.mdpi.apk`	`45546c07728a3ffb05c9c7d42418160adeda29466000f813d8b17747073da43d`
`config.zh.apk`	`f1c18a5f380a45f7175baa7d646f15b774ede0d582ee436d7fafc86f456cab67`
`manifest.json`	`9a35b17653ed11342cc93e2abc81f3a7698632def42ec9a0644f5eb62848255d`

Local analysis outputs:

XAPK unpack: berger-ble-work/xapk
apktool output: berger-ble-work/apktool-out
Main app bundle: berger-ble-work/apktool-out/assets/apps/__UNI__F61076D/www/app-service.js

The APK/XAPK files are intentionally not committed into this repository.