Found an APK inside another APK
1 1 for some testing purposes I use the Google Pixels 2 with the Android Version 8.0. Yes I know there is an Update to 9.0 but I do not want to right now. On this Device there is the Google keep App (Pakage: com.google.android.keep) installed. I pulled this App via ADB, renamed to .zip and extracted it to a folder. Now I found another APK inside the /res/raw folder and I do not know why there is a second APK. Please explain to me why there is a second APK. Is there any security reason to do so? Also if I try to verify the signature I receive the error: DOES NOT VERIFY ERROR: APK Signature Scheme v2 signer #1: Malformed additional attribute #1 i used the apksignier but with jarsigner I do not receive any error. There i receive jar verified and some Warnings. Now I think its probably one of the Warnings which is causing my error with apksigner. Warning: This jar contains entries whoes certificate chain is invalid. Reason: PKIX path building failed: sun.security.provider.cer...