# APK Evidence

- File analyzed locally: `Bulltron_1.1.33_APKPure.xapk`
- Source: APKPure direct XAPK download
- App package: `com.inuker.bluetooth.bulltron`
- App label: `BullTron`
- Version: `1.1.33` / `1133001`
- XAPK SHA-256: `35388e6c2b9afeeb4bafd97df09fcb1e33427802dd98f74a2a4648099dda71ff`
- Base APK SHA-256: `f1d486b410c1fa2fae78837fcc27a63aa16c6cb1b45f096a17c9968908add363`
- Signer DN: `CN=smart_daly, OU=smart_daly, O=smart_daly, L=smart_daly, ST=smart_daly`
- Signer cert SHA-256: `996caf450ecdb34d0ba45d2b2c6a2df56243338c7be3b7b497168af4e3d00ae4`

The XAPK contains:

- `com.inuker.bluetooth.bulltron.apk`
- `config.arm64_v8a.apk`
- language splits: `ar`, `de`, `en`, `es`, `fr`, `hi`, `in`, `it`, `ja`, `ko`, `my`, `pt`, `ru`, `th`, `tr`, `vi`, `zh`
- density split: `config.xhdpi.apk`

Code identity check against the separately mirrored PGYER APK:

| DEX | SHA-256 |
| --- | --- |
| `classes.dex` | `5fcc413fbddb0ff7dd55b97da55f1c0f08d0bfb1ad6c90de61043f36c7d9afb2` |
| `classes2.dex` | `881ef2146bf644ad6b25dca82798891c588b32a6ad096ba2a9d768a774c8ba88` |
| `classes3.dex` | `130f23081d0c563c791b1ed41d3ceccc22cdfd9da37d004ca711808e1688a1ae` |

Local decompile outputs used during analysis:

- apktool output: `bulltron-ble-work/apktool-out`
- JADX output: `bulltron-ble-work/jadx-out`
- BLE symbol scan: `bulltron-ble-work/ble-symbols-jadx.md`
- smali BLE symbol scan: `bulltron-ble-work/ble-symbols-smali.md`

The APK itself is intentionally not committed into this repository.