--- /home/fdroid/fdroiddata/tmp/de.benibela.videlibri_2592.apk +++ /home/fdroid/fdroiddata/tmp/sigcp_de.benibela.videlibri_2592.apk ├── /usr/lib/android-sdk/build-tools/debian/apksigner verify --verbose --print-certs {} │┄ error from `/usr/lib/android-sdk/build-tools/debian/apksigner verify --verbose --print-certs {}` (b): │┄ DOES NOT VERIFY │┄ ERROR: APK Signature Scheme v3 signer #1: APK integrity check failed. CHUNKED_SHA256 digest mismatch. Expected: <61d796dbe02aba56a70b177845894db782839a9dfb740debba151faa747719be>, actual: <45c9f9c8175ff90c4a82effee13219e5ce89e86d50304c63d3fcabcb21d245ae> │┄ ERROR: APK Signature Scheme v3 signer #1: APK integrity check failed. VERITY_CHUNKED_SHA256 digest mismatch. Expected: <9e55f8048c2cddb5df08dd5d5d30a69f3287e8e9f1bc66186c33c3fe8a76ac8eadaf6a0000000000>, actual: <27c9f4e2079ace3c78e9bf7cc5e17d3bf8608fe23c7bdecc9be57b5730b90571adaf6a0000000000> │ @@ -1,58 +0,0 @@ │ -Verifies │ -Verified using v1 scheme (JAR signing): true │ -Verified using v2 scheme (APK Signature Scheme v2): true │ -Verified using v3 scheme (APK Signature Scheme v3): true │ -Verified using v4 scheme (APK Signature Scheme v4): false │ -Verified for SourceStamp: false │ -Number of signers: 1 │ -Signer #1 certificate DN: CN=FDroid, OU=FDroid, O=fdroid.org, L=ORG, ST=ORG, C=UK │ -Signer #1 certificate SHA-256 digest: 2c71b4a796c4723d31976a76270394f0685fcc7f96902c0d12e80912d9abbad0 │ -Signer #1 certificate SHA-1 digest: 7915064767d933b0a4f23bd3e27280a94c55f9f6 │ -Signer #1 certificate MD5 digest: f2017f310eb782044d2cfe11ac4ddd5d │ -Signer #1 key algorithm: RSA │ -Signer #1 key size (bits): 2048 │ -Signer #1 public key SHA-256 digest: d102aa85f4f67a1922561fcd80f3b3e77a879f5d956ca71a4b58899d868b062a │ -Signer #1 public key SHA-1 digest: 55b3e29f23648ede031831a7ae8183404a0d2aa1 │ -Signer #1 public key MD5 digest: 3dc783371afee28a27a8461b961336b0 │ -WARNING: META-INF/com/android/build/gradle/app-metadata.properties not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.activity_activity.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.annotation_annotation-experimental.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.appcompat_appcompat-resources.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.appcompat_appcompat.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.arch.core_core-runtime.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.cardview_cardview.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.coordinatorlayout_coordinatorlayout.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.core_core.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.cursoradapter_cursoradapter.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.customview_customview.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.databinding_viewbinding.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.documentfile_documentfile.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.drawerlayout_drawerlayout.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.dynamicanimation_dynamicanimation.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.fragment_fragment.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.interpolator_interpolator.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.legacy_legacy-support-core-utils.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-livedata-core.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-livedata.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-runtime.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-viewmodel-savedstate.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-viewmodel.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.loader_loader.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.localbroadcastmanager_localbroadcastmanager.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.preference_preference.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.print_print.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.recyclerview_recyclerview.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.savedstate_savedstate.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.tracing_tracing.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.transition_transition.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.vectordrawable_vectordrawable-animated.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.vectordrawable_vectordrawable.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.versionedparcelable_versionedparcelable.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.viewpager2_viewpager2.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.viewpager_viewpager.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/com.google.android.material_material.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/services/org.acra.collector.Collector not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/services/org.acra.config.ConfigurationBuilderFactory not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/services/org.acra.interaction.ReportInteraction not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/services/org.acra.sender.ReportSenderFactory not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/services/org.acra.startup.StartupProcessor not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. ├── zipinfo {} │ @@ -1339,8 +1339,8 @@ │ -rw---- 2.0 fat 14151 b- defN 81-Jan-01 01:01 kotlin/kotlin.kotlin_builtins │ -rw---- 2.0 fat 2301 b- defN 81-Jan-01 01:01 kotlin/ranges/ranges.kotlin_builtins │ -rw---- 2.0 fat 2338 b- defN 81-Jan-01 01:01 kotlin/reflect/reflect.kotlin_builtins │ -rw---- 2.0 fat 34000 b- defN 81-Jan-01 01:01 okhttp3/internal/publicsuffix/publicsuffixes.gz │ -rw---- 2.0 fat 111658 b- defN 81-Jan-01 01:01 META-INF/6B5D23D5.SF │ -rw---- 2.0 fat 1326 b- defN 81-Jan-01 01:01 META-INF/6B5D23D5.RSA │ -rw---- 2.0 fat 111550 b- defN 81-Jan-01 01:01 META-INF/MANIFEST.MF │ -1344 files, 17940877 bytes uncompressed, 6807802 bytes compressed: 62.1% │ +1344 files, 17940877 bytes uncompressed, 6807811 bytes compressed: 62.1% ├── lib/armeabi/liblclapp.so │┄ File has been modified after NT_GNU_BUILD_ID has been applied. │ ├── readelf --wide --notes {} │ │ @@ -1,8 +1,8 @@ │ │ │ │ Displaying notes found in: .note.gnu.build-id │ │ Owner Data size Description │ │ - GNU 0x00000014 NT_GNU_BUILD_ID (unique build ID bitstring) Build ID: d7e48dd7ff590cefbc29c5bec961baf8b84e2d19 │ │ + GNU 0x00000014 NT_GNU_BUILD_ID (unique build ID bitstring) Build ID: f2c005c69ad9f62c86b23320844a527eee5db5f4 │ │ │ │ Displaying notes found in: .note.android.ident │ │ Owner Data size Description │ │ Android 0x00000084 NT_VERSION (version) description data: 1e 00 00 00 72 32 31 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 37 30 37 35 35 32 39 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 │ ├── strings --all --bytes=8 {} │ │ @@ -7636,15 +7636,15 @@ │ │ ()Lorg/apache/http/client/CredentialsProvider; │ │ getCredentialsProvider │ │ org/apache/http/client/CredentialsProvider │ │ (Lorg/apache/http/auth/AuthScope;Lorg/apache/http/auth/Credentials;)V │ │ setCredentials │ │ org/apache/http/auth/AuthScope │ │ org/apache/http/auth/UsernamePasswordCredentials │ │ -FPC 3.2.3 [2022/07/13] for arm - Android │ │ +FPC 3.2.3 [2022/08/10] for arm - Android │ │ TObjectl │ │ &{00000000-0000-0000-C000-000000000046} │ │ TInterfacedObject │ │ 0123456789ABCDEF │ │ ShortInt │ │ SmallInt │ │ LongWord │ ├── readelf --wide --decompress --hex-dump=.data {} │ │ @@ -35,15 +35,15 @@ │ │ 0x0026e200 fc7f2000 4c842000 44332e00 4c842000 .. .L. .D3..L. . │ │ 0x0026e210 e8a52000 2c342e00 e8a52000 94c62000 .. .,4.... ... . │ │ 0x0026e220 a4362e00 94c62000 3ce32000 9c382e00 .6.... .<. ..8.. │ │ 0x0026e230 3ce32000 44e82000 4c392e00 44e82000 <. .D. .L9..D. . │ │ 0x0026e240 fc422100 4c442e00 fc422100 08462100 .B!.LD...B!..F!. │ │ 0x0026e250 a4472e00 08462100 08462100 a4472e00 .G...F!..F!..G.. │ │ 0x0026e260 08462100 e4802100 46504320 332e322e .F!...!.FPC 3.2. │ │ - 0x0026e270 33205b32 3032322f 30372f31 335d2066 3 [2022/07/13] f │ │ + 0x0026e270 33205b32 3032322f 30382f31 305d2066 3 [2022/08/10] f │ │ 0x0026e280 6f722061 726d202d 20416e64 726f6964 or arm - Android │ │ 0x0026e290 90e22600 24000000 00000000 1c080500 ..&.$........... │ │ 0x0026e2a0 00000000 3c210500 00000000 d4150500 ....