App inventory — Appmiral platform investigation
Generated 2026-06-24. Authoritative list of every app examined in this investigation.
Update 2026-06-28 — full re-harvest. The cohort was re-enumerated from the live device and all installed apps pulled as APKs: 140 Appmiral/Appstrakt apps now installed (+26 new vs the 114 below, 0 removed), 375 split-APK files (~7.08 GB). The tracking analysis is now driven by an actual integration scan of those binaries, not a preset list. See
07-apk-harvest-and-identification.md,08-integration-matrix.md(advertised vs. embedded),09-active-config-km-killswitch.md(live km-range + remote kill-switch across the fleet) and10-apk-harvest-reproduction.md(replicate from scratch). Key result: the Crowd Connected capability (Cognito + Kinesis Firehose + Fused Location) ships in ~139/140 apps, and at capture time TT Festival was the one app with the kill-switch ON (60 km) while others sat armed but OFF.
- Static cohort (manifests, SDKs, permissions, privacy policies): 114 apps (→ 140 installed as of 2026-06-28)
- Sideloaded & runtime-capable on Pixel 10a (Android 16): 94 apps
- CrowdConnected location-tracking club: 12 apps (11 runtime-probed) — now shown to be a floor: CC capability is bundled fleet-wide (
08)
Not-installed apps are 32-bit-only / x86-only APKPure archives, unrunnable on the arm64-only Pixel 10a.
Documents in this folder
| Doc | What it covers |
|---|---|
01-on-device-cohort.md |
Phase 1: 11-app on-device comparison |
02-full-platform-deep-dive.md |
Phase 2: 114-app static cohort + runtime probe |
../methodology-and-reproduction.md |
Full reproduction guide: app harvest, decompile, runtime probe, GPS spoofing, HTTPS MITM, evidence/chain of custody |
04-live-capture-2026-06-26.md |
Live proof: TT Festival kill-switch ON + 60 km zone armed, transmitting to AWS US |
07-apk-harvest-and-identification.md |
2026-06-28 re-harvest: 140 apps pulled as 375 split-APKs (~7.08 GB); enumerate/reconcile + identification |
08-integration-matrix.md |
Advertised vs. actually-embedded integrations across all 140 apps (+ obfuscated-CC finding) |
09-active-config-km-killswitch.md |
Live km-range + remote kill-switch for every app with a Crowd Connected config (fleet-wide) |
10-apk-harvest-reproduction.md |
Reproduce from scratch: prereqs, pinned versions, exact commands, expected outputs, checksum verification |
03-ondevice-egress-dutchgp-museumnacht.md |
Phase 3: live on-device proof Dutch GP & Museumnacht collect + upload to CrowdConnected (+ reusable prompt, Appendix A) |
crowd-connected-endpoints.md |
Per-app appKey/token/secret, backend endpoints, re-check runbook |
crowd-connected-map.html |
Interactive geofence map (filterable by status/event) |
tt-stage-coordinates.md |
GPS coordinates of all TT Festival stages (from the in-app map) |
CrowdConnected location-tracking club (the core of the investigation)
| Package | Installed | Runtime state observed |
|---|---|---|
com.appmiral.ttfestival |
yes | 🔴 LIVE: newer SDK (2.1.0), Settings.active=1, Mode=BACKGROUND, in-zone → Firehose us-east-1 (Phase 3 §6) |
be.appstrakt.werchter2010 |
yes | 🟠 geo observer active @1800s |
com.appmiral.dutchgp |
yes | 🔴 caught live: in-zone collect+upload to Firehose us-east-1 (Phase 3) |
com.appmiral.mdlbeast |
yes | server active=false (stopped) |
com.appmiral.rockforpeople |
yes | server active=false (stopped) |
com.appmiral.sicknewworld |
yes | dormant (settings null); indoor flag=true |
com.appmiral.loversandfriends |
yes | SDK present, consent not passed |
com.appmiral.museumnachtamsterdam |
yes | registered+consented+location-permitted; server active=false → 0 collection even with permission granted (Phase 3) |
com.appmiral.teamnl |
yes | SDK present, consent not passed |
com.appmiral.tomorrowlandbrasil |
yes | SDK present, consent not passed |
com.appmiral.werchterboutique |
yes | SDK present, consent not passed |
com.appmiral.werchterparklife |
no | not installable (32-bit-only) |
See 02-full-platform-deep-dive.md for the full runtime methodology and evidence (data/runtime_logs2/, data/cc_runtime_state_round2.csv).
Runtime kill-switch (the operative on/off). Legacy-schema apps (Dutch GP, Museumnacht) are
gated by the server activeAPIResponse heartbeat string (currently 120,false,… → OFF);
the newer SDK (TT Festival 2.1.0) gates on a Settings.active column (=1 → ON). The
local geoEnabled=1 / sendPositionData=1 flags are not the switch. Full live three-way
config comparison (live TT vs gated MN/DGP) and the relocated-kill-switch finding:
Phase 3 §6.
Full static cohort (114 apps)
| # | Package | Installed | CC-club | Native ABI | Size (MB) |
|---|---|---|---|---|---|
| 1 | appmiral.freaksofnature |
yes | no-native | 28.1 | |
| 2 | appmiral.risefestival |
yes | no-native | 11.9 | |
| 3 | be.appstrakt.dour2010 |
no | no-native | 63.8 | |
| 4 | be.appstrakt.extremabe |
yes | arm64 | 43.7 | |
| 5 | be.appstrakt.gmm2010 |
yes | arm64 | 219.6 | |
| 6 | be.appstrakt.lesardentes |
yes | arm64 | 139.5 | |
| 7 | be.appstrakt.pinkpop |
yes | no-native | 103.7 | |
| 8 | be.appstrakt.pukkelpop2010 |
yes | arm64 | 36.3 | |
| 9 | be.appstrakt.werchter2010 |
yes | yes | arm64 | 205.9 |
| 10 | com.appmiral.afaslive |
no | no-native | 103.5 | |
| 11 | com.appmiral.afastheater |
yes | no-native | 31 | |
| 12 | com.appmiral.alandrockoff |
yes | no-native | 28.9 | |
| 13 | com.appmiral.alcatrazfestival |
yes | no-native | 27.2 | |
| 14 | com.appmiral.alltogethernow |
yes | no-native | 28.1 | |
| 15 | com.appmiral.arcticwintergames |
no | no-native | 28.4 | |
| 16 | com.appmiral.bangkokmusiccity |
yes | no-native | 35.5 | |
| 17 | com.appmiral.bbcradio1 |
yes | no-native | 97.2 | |
| 18 | com.appmiral.beatvenues |
yes | no-native | 39.7 | |
| 19 | com.appmiral.beautifulsummer |
no | no-native | 91.2 | |
| 20 | com.appmiral.bergenfest |
no | no-native | 36.4 | |
| 21 | com.appmiral.bigbang |
yes | no-native | 12.1 | |
| 22 | com.appmiral.bittersweet |
yes | no-native | 29.3 | |
| 23 | com.appmiral.blackworks |
yes | no-native | 12 | |
| 24 | com.appmiral.blockfest |
yes | no-native | 14.2 | |
| 25 | com.appmiral.brunchelectronik |
yes | no-native | 28 | |
| 26 | com.appmiral.brusselsphilharmonic |
yes | arm64 | 32.3 | |
| 27 | com.appmiral.campbestival |
yes | no-native | 35 | |
| 28 | com.appmiral.crammerock |
yes | no-native | 28.2 | |
| 29 | com.appmiral.dauwpop |
no | no-native | 28.5 | |
| 30 | com.appmiral.deliciousfestival |
yes | no-native | 84 | |
| 31 | com.appmiral.dmugen |
no | no-native | 14.8 | |
| 32 | com.appmiral.doelle |
yes | no-native | 26.7 | |
| 33 | com.appmiral.dranouter |
yes | arm64 | 37.3 | |
| 34 | com.appmiral.dutchgp |
yes | yes | arm64 | 57.9 |
| 35 | com.appmiral.elbenwaldfestival |
yes | no-native | 28.6 | |
| 36 | com.appmiral.electricavenue |
yes | no-native | 14.7 | |
| 37 | com.appmiral.electriccastle |
yes | arm64 | 28 | |
| 38 | com.appmiral.electriclovefestival |
no | no-native | 37.6 | |
| 39 | com.appmiral.electrisizefestival |
yes | no-native | 8.5 | |
| 40 | com.appmiral.festningen |
yes | no-native | 26.7 | |
| 41 | com.appmiral.findings |
yes | arm64 | 31.5 | |
| 42 | com.appmiral.fissnowboardbigairworldcup |
yes | no-native | 13.9 | |
| 43 | com.appmiral.francofolies |
yes | arm64 | 48.3 | |
| 44 | com.appmiral.franglish |
yes | no-native | 35 | |
| 45 | com.appmiral.fullcircle |
no | no-native | 28.1 | |
| 46 | com.appmiral.fullforce |
yes | arm64 | 42.7 | |
| 47 | com.appmiral.gentsefeesten |
yes | no-native | 27 | |
| 48 | com.appmiral.glucksgefuhle |
no | no-native | 11.7 | |
| 49 | com.appmiral.harmonyofhardcore |
yes | no-native | 28.7 | |
| 50 | com.appmiral.heroesfestival |
yes | no-native | 15.1 | |
| 51 | com.appmiral.homegrown |
yes | no-native | 12 | |
| 52 | com.appmiral.internationalsanicoleairshow |
no | no-native | 27.9 | |
| 53 | com.appmiral.jellingmusikfestival |
yes | no-native | 28.6 | |
| 54 | com.appmiral.klmopen |
yes | arm64 | 36.4 | |
| 55 | com.appmiral.kloftenfestivalen |
yes | arm64 | 29.1 | |
| 56 | com.appmiral.lapunta |
yes | no-native | 28.2 | |
| 57 | com.appmiral.latinvillage |
yes | arm64 | 30 | |
| 58 | com.appmiral.lokersefeesten |
no | 32-bit-only | 9.3 | |
| 59 | com.appmiral.lostminds |
yes | no-native | 35.4 | |
| 60 | com.appmiral.loversandfriends |
yes | yes | arm64 | 35.8 |
| 61 | com.appmiral.lovetomorrow |
yes | no-native | 29.4 | |
| 62 | com.appmiral.maanrock |
yes | arm64 | 38.9 | |
| 63 | com.appmiral.mananamanana |
yes | arm64 | 30.3 | |
| 64 | com.appmiral.mdlbeast |
yes | yes | no-native | 12.5 |
| 65 | com.appmiral.meltfestival |
yes | arm64 | 31.9 | |
| 66 | com.appmiral.museumnachtamsterdam |
yes | yes | no-native | 30.1 |
| 67 | com.appmiral.museumnachtantwerpen |
yes | no-native | 27.6 | |
| 68 | com.appmiral.nascarmexico |
yes | no-native | 34.8 | |
| 69 | com.appmiral.nibefestival |
no | no-native | 11.8 | |
| 70 | com.appmiral.noisily |
yes | no-native | 36.4 | |
| 71 | com.appmiral.northseajazz |
yes | no-native | 39.6 | |
| 72 | com.appmiral.northside |
no | no-native | 32.4 | |
| 73 | com.appmiral.nurburgring |
yes | no-native | 28.1 | |
| 74 | com.appmiral.onthewaterfront |
yes | no-native | 39.8 | |
| 75 | com.appmiral.openbeatz |
yes | no-native | 28.1 | |
| 76 | com.appmiral.paaspop |
no | no-native | 28.6 | |
| 77 | com.appmiral.provinssi |
yes | no-native | 23.6 | |
| 78 | com.appmiral.punkrockholidayfestival |
yes | no-native | 28.5 | |
| 79 | com.appmiral.reuzengilde |
yes | no-native | 30.3 | |
| 80 | com.appmiral.rijversfestival |
yes | no-native | 28.4 | |
| 81 | com.appmiral.rockforpeople |
yes | yes | no-native | 38.9 |
| 82 | com.appmiral.shutdownfestival |
yes | no-native | 29.6 | |
| 83 | com.appmiral.sicknewworld |
yes | yes | no-native | 33.4 |
| 84 | com.appmiral.singoutloudfestival |
yes | no-native | 28.7 | |
| 85 | com.appmiral.smerrig |
yes | arm64 | 29 | |
| 86 | com.appmiral.sopronfest |
yes | no-native | 27 | |
| 87 | com.appmiral.splashfestival |
yes | no-native | 48.9 | |
| 88 | com.appmiral.statefayre |
yes | no-native | 104.3 | |
| 89 | com.appmiral.stjohnscanadagames |
yes | no-native | 27 | |
| 90 | com.appmiral.strandfesztival |
no | no-native | 28.2 | |
| 91 | com.appmiral.studiobrusselsnowcase |
yes | no-native | 28.7 | |
| 92 | com.appmiral.suikerrock |
yes | no-native | 28.4 | |
| 93 | com.appmiral.summersessions |
yes | no-native | 103.5 | |
| 94 | com.appmiral.sunice |
yes | no-native | 28.1 | |
| 95 | com.appmiral.sunrisefestival |
yes | no-native | 12.5 | |
| 96 | com.appmiral.sunsetbeachfestival |
no | no-native | 28.8 | |
| 97 | com.appmiral.superbloomfestival |
yes | no-native | 14.7 | |
| 98 | com.appmiral.suset |
yes | no-native | 34 | |
| 99 | com.appmiral.teamnl |
yes | yes | no-native | 12.6 |
| 100 | com.appmiral.theicestmoritz |
yes | no-native | 28.4 | |
| 101 | com.appmiral.theqontinent |
yes | arm64 | 36.4 | |
| 102 | com.appmiral.theroyalinternationalairtattoo |
no | no-native | 28.6 | |
| 103 | com.appmiral.tinderbox |
yes | no-native | 28.5 | |
| 104 | com.appmiral.tomorrowlandbrasil |
yes | yes | no-native | 30.2 |
| 105 | com.appmiral.ttfestival |
yes | yes | no-native | 31 |
| 106 | com.appmiral.turf |
yes | no-native | 29 | |
| 107 | com.appmiral.twclassic |
yes | arm64 | 48.8 | |
| 108 | com.appmiral.veldfestival |
yes | no-native | 34.8 | |
| 109 | com.appmiral.werchterboutique |
yes | yes | arm64 | 114.8 |
| 110 | com.appmiral.werchterparklife |
no | yes | no-native | 105.4 |
| 111 | com.appmiral.withintemptation |
yes | arm64 | 43.1 | |
| 112 | com.appmiral.zwartecross |
yes | no-native | 11.6 | |
| 113 | com.triple.verstappen |
yes | no-native | 28.9 | |
| 114 | pl.mysticfestival |
no | no-native | 28.4 |