CSINT Mobile Exposure Graph evidence bundle
The original APK is not included.
The manifest binds each included file with SHA-256.
This v1 bundle is hash-bound but not cryptographically signed.
The report is a bounded static review aid, not a malware or security verdict.