Analysis

  • max time kernel
    634136s
  • max time network
    149s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230621-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230621-enlocale:en-usos:android-11-x64system
  • submitted
    05/07/2023, 08:41

General

  • Target

    CPF10.apk

  • Size

    47.8MB

  • MD5

    7d1acd01f2a08ccdccb90d719fc969b8

  • SHA1

    ef35fa3b06d02cd6a75ceb505d50e29c2afca5a9

  • SHA256

    d70330bff40a771fda25702e66572bbb364080d7971989a60dc172bb52b2ffc0

  • SHA512

    d5bab5785010389aa68ffbadd7e24612ee8274ce3184f5da15c436c885497c86ad6286c999efeb855992b4dd8e6bb346210174790069c1741038290fe507c480

  • SSDEEP

    786432:WZ+OcioTGT8m4iXToYeLFKmNT9b6EF6RU8SKEQVgtjOdYAqu83KMVmxn0D9:WZxYGwviDheLQQRbGaZKq/9oY9

Score
9/10

Malware Config

Signatures

  • Renames multiple (56) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.whatsapp
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4353

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.whatsapp/databases/_jobqueue-WhatsAppJobManager

          Filesize

          64KB

          MD5

          dd3be3f5aff12d58d00fa42bb71e4807

          SHA1

          f905d812a1b7d89280e85403017d2483c4ff1635

          SHA256

          94413a3109bb336cb7c567682f2410dab016f8eda4df886323ac2744bbd06b1c

          SHA512

          44c46ca7fbfb2236e855524aaf3251c4e41336c4a3cdafc31080654df0fb253010c396b71f9b7e90b2b52b93ef51a0e3604abe5897be81fd328241c62944dbfa

        • /data/user/0/com.whatsapp/databases/_jobqueue-WhatsAppJobManager-journal

          Filesize

          1KB

          MD5

          8703f379b3b84144f8b53992407666ea

          SHA1

          23275922845a64cb6c7d87f57db3ca3611252f9d

          SHA256

          2a8730cc50c4fa209d24fc2b07490ec1a9c8d4f9a3759da8c17debdf879ec655

          SHA512

          0a003d1dcda39a01f1143e10433815f9eeea9190fb94a5d79e44935bf9591f5ac0e647eacee54a2cac97e628ae2935828af4ec86055bcafc0870bc94750bd5c7

        • /data/user/0/com.whatsapp/databases/axolotl.db

          Filesize

          288KB

          MD5

          b1558445406bbf111929c5445a19035e

          SHA1

          cd087ce1ec72de4c1327a9abb23c60f0affe8a3e

          SHA256

          29d506d3679e542f0b681b5c7905a2bc4266c4921e850984423330554990d3b4

          SHA512

          4e718d7887924d293e272115ddc9f6ab195704de581d9ea9bfce152ec3949114d878fde2ae71a60668a866396c2410d47ea53e5ea7b07daa733d71403246e38a

        • /data/user/0/com.whatsapp/databases/axolotl.db-journal

          Filesize

          1KB

          MD5

          32a50ef1cde258c378921edfa57b146c

          SHA1

          3922187c4a0a999dca2f45f755e56e4ae0af61bc

          SHA256

          f791147ecf2bb771242ea26da99545c635951ec01d8ce61c728f9c2f961d05e4

          SHA512

          641340a4c82822ab66012f33716d1d50be006b98f7160760e4c8cbcefd7947988936c2b2197e13541053e75ecc8967c7c1ff51024507bb4475eb15fe19430be3

        • /data/user/0/com.whatsapp/databases/axolotl.db-shm

          Filesize

          16B

          MD5

          4ae71336e44bf9bf79d2752e234818a5

          SHA1

          e129f27c5103bc5cc44bcdf0a15e160d445066ff

          SHA256

          374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

          SHA512

          0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

        • /data/user/0/com.whatsapp/databases/axolotl.db-wal

          Filesize

          1.3MB

          MD5

          5a6a868a31f870123d89bcfa7f9f349c

          SHA1

          f698e7792e7e9d00bae7d88d09ba2e834c6b3c64

          SHA256

          46266817076c578748178ccae365fcd7cc3179a968ddeec56f121cccb3119b24

          SHA512

          7702055b9c7bcbe8be218a1b227d06d108550189669986f65c5f492d9cd926852d9286c677878ddcbe90eecd0cb4ffad84d5a5c3cad3cc9b0bfc5223abb449d1

        • /data/user/0/com.whatsapp/databases/chatsettings.db

          Filesize

          8KB

          MD5

          e579a6b00eef1318f9166352228eba18

          SHA1

          76988896854f0139083e77862eea1a4846cf039f

          SHA256

          4b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935

          SHA512

          c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699

        • /data/user/0/com.whatsapp/databases/chatsettings.db-journal

          Filesize

          1KB

          MD5

          43f768fe8e7e6dd86778b45dc0610be5

          SHA1

          5cbce9332aa181403bb549ffc252dc2c295136bc

          SHA256

          6f73b45420e38fe6b2db327b8d5b7c7100220d048fd75242c5ccac19256a1647

          SHA512

          a61ca33af34f6b044027b8bd09c5f38bd553b78cb3697f58fce83f3a1c76b097ecdf8f75402bd342129f39a6cb5b4ffe5729075ebf2b9a2cc6e7cf3652867a29

        • /data/user/0/com.whatsapp/databases/chatsettings.db-shm

          Filesize

          16B

          MD5

          4ae71336e44bf9bf79d2752e234818a5

          SHA1

          e129f27c5103bc5cc44bcdf0a15e160d445066ff

          SHA256

          374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

          SHA512

          0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

        • /data/user/0/com.whatsapp/databases/chatsettings.db-wal

          Filesize

          72KB

          MD5

          c97aebdb7619c46cb391a92e116addce

          SHA1

          43bd4bc8997ddfea8087043c38712e38d9ad2306

          SHA256

          cb4df3fb7535c2e66ee061fd81b916bb5952685634234d78d1e759b18cde9c38

          SHA512

          9751eb2f04864c29f5e461a206e13ff3ff9b653cca12dbea3b21daa68dddb776a200d5c91cb369ae73777f8d747f204290d10f52b7c9dd3cc593e966838251bd

        • /data/user/0/com.whatsapp/databases/stickers.db

          Filesize

          8KB

          MD5

          e579a6b00eef1318f9166352228eba18

          SHA1

          76988896854f0139083e77862eea1a4846cf039f

          SHA256

          4b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935

          SHA512

          c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699

        • /data/user/0/com.whatsapp/databases/stickers.db-journal

          Filesize

          1KB

          MD5

          ac187ab23849f75142aa1601539bbd3b

          SHA1

          4dd4afc3926efed7511ae58f7407acad46f31c92

          SHA256

          f2f1b81b59f61693f113b822722e1265d5ae04bacc19acb736fcbe598111d3be

          SHA512

          a23633aef531739ea6aa2e7c5e67168fcdea1365e36d1c7c2eaf79f10137a71036f2e599f4e4f7bdbf280d72fa0dc4d12d2a5225a4a0aa4c6bd1c8fbd2785fdc

        • /data/user/0/com.whatsapp/databases/stickers.db-shm

          Filesize

          16B

          MD5

          4ae71336e44bf9bf79d2752e234818a5

          SHA1

          e129f27c5103bc5cc44bcdf0a15e160d445066ff

          SHA256

          374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

          SHA512

          0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

        • /data/user/0/com.whatsapp/databases/stickers.db-wal

          Filesize

          507KB

          MD5

          5e11d6d5219221a5c7f6b8eab6492b51

          SHA1

          8ee665f88d0018a9d327fb4feaf337c4d5fba288

          SHA256

          1c5c404baea9d641cb3d1b5f51e1fde8a5289a6221b91ab2a476e1d5f4be7009

          SHA512

          b069b6d1af8a7d1162dbb854053ba2a6bdf5ef38c6d743c0eefade5c1498abfa40d9bef9b6899a36f6b8d959b1294eef886c4f8a44673a2839a733123c53bc7e

        • /data/user/0/com.whatsapp/databases/sync.db

          Filesize

          8KB

          MD5

          e579a6b00eef1318f9166352228eba18

          SHA1

          76988896854f0139083e77862eea1a4846cf039f

          SHA256

          4b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935

          SHA512

          c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699

        • /data/user/0/com.whatsapp/databases/sync.db-journal

          Filesize

          1KB

          MD5

          8a925717be50b38f2dd07589f7acdeee

          SHA1

          a4bbaa14a52500887a7cad46cc4200c22f8bbca9

          SHA256

          6cd3a86858634b5544ec9e919175ec1dec3a6dcebd39988a21b6ee78d917b429

          SHA512

          8f1b92ccd4e03e841fa0dd5189d655c38fa2ec773fe6a934cc07306e40addbfcd55f910eedbf0b1d4f8409e5263a506867273d0a5754a220f1072b19700f1e07

        • /data/user/0/com.whatsapp/databases/sync.db-shm

          Filesize

          16B

          MD5

          4ae71336e44bf9bf79d2752e234818a5

          SHA1

          e129f27c5103bc5cc44bcdf0a15e160d445066ff

          SHA256

          374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

          SHA512

          0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

        • /data/user/0/com.whatsapp/databases/sync.db-wal

          Filesize

          233KB

          MD5

          c54e51fe7d517ac6b7af43643780dad7

          SHA1

          154350e0b4e9b45a9d08d994dfaaff87188785f3

          SHA256

          406c043cd40c0748933e3860cb175b350ec5b8134692e0f7d79b437673e6e451

          SHA512

          fc46196651bdd1d9d932e024cb59de8335ce1f200635f7ed08de1522f04431e27b65fe8641eddca837c711fbf34689b4af81e2460a65db2c810069a94398f39b

        • /data/user/0/com.whatsapp/databases/wa.db

          Filesize

          8KB

          MD5

          e579a6b00eef1318f9166352228eba18

          SHA1

          76988896854f0139083e77862eea1a4846cf039f

          SHA256

          4b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935

          SHA512

          c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699

        • /data/user/0/com.whatsapp/databases/wa.db-journal

          Filesize

          1KB

          MD5

          071bc9b4c1125c79bf6b3ef1f3da266a

          SHA1

          6debc10f431606e7e710bf04d1b0cdff53f4567e

          SHA256

          d1d5fe7c2b33d5739d9152894d8f4c41c47d5a5a7f1132e4af847dd77ea279a4

          SHA512

          ab5254b55ce159711a991226492f3a89c291a90ef255153d29405f877690f77accc6ac5c8a1ba174cb2dbe96237799701c45215624559642afd51b6914e09ab0

        • /data/user/0/com.whatsapp/databases/wa.db-shm

          Filesize

          16B

          MD5

          4ae71336e44bf9bf79d2752e234818a5

          SHA1

          e129f27c5103bc5cc44bcdf0a15e160d445066ff

          SHA256

          374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

          SHA512

          0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

        • /data/user/0/com.whatsapp/databases/wa.db-wal

          Filesize

          716KB

          MD5

          34c449b04d7efa5f962148b052e96217

          SHA1

          f8c9ec7ac3ecebd62fce097df70772f869c994db

          SHA256

          190dfc213414680c9bc2eeaab70a62646aa22febc000afba871221d753a30e3d

          SHA512

          78a0a5fc5b202773b87fa84280c6f2c34c39b3f1870485238a277c2f064615fbd610082882d4ca0ee88be74924ab632170ad77fba40864f867ec5afa6805d725

        • /data/user/0/com.whatsapp/files/Logs/whatsapp.log

          Filesize

          41KB

          MD5

          491819b2c533b1b7a7d1814f1d435e39

          SHA1

          25b65ea2561885cab32323445192629eaa001784

          SHA256

          027f2db4da6ef748d4573ae219c160ba748551f529a47d361a55a016d4e1c505

          SHA512

          ebb5fa3e470722187cff19807e95d3448a31fc51bf9223b78699b0ead6a0bd327f2ef690d44870ae09c9e81bf0308017d79f8462ee5e52294a793f55cfa07ed7

        • /data/user/0/com.whatsapp/files/decompressed/libs.spk.zst/.superpack_version

          Filesize

          31B

          MD5

          db06f1b253fdfc6af918a60e21f3f8d6

          SHA1

          9f474b16a2aae5a7b6984b59ae0f13c33ef92464

          SHA256

          e1024d9df43a6693bef8dcc62fa058b575b3a213a9e241268b6ba4a07ed95377

          SHA512

          6221172562f505ceb545755beec4e7e1067e6a852a80de92bd5f256e739ba70a4a8dff0e3a8361df70a1b6e1e783e3a1f7d778e1edfb556905432d66c0363122

        • /data/user/0/com.whatsapp/files/extracted_pack_file.pack.tmp

          Filesize

          211KB

          MD5

          0c723e248d4fbd04fba6b9716c4c4da7

          SHA1

          a665110bf4b35616b3678debd41e5d7ed86fe4a4

          SHA256

          fe0b20920dadfcca4b2dcfef21719bd39f5db5a4df9f69e11e1f6c178795cdf6

          SHA512

          f718a2d52c84107d89d7476555f9dd193c4be7e16b75c26c1081aa93ebd2c56398035c7882328ffb3aa2c21f32b03ad223de01eadf786cfc6e023f9a2f7df8c4

        • /data/user/0/com.whatsapp/files/wam.wam

          Filesize

          341B

          MD5

          1c41d94946d4ca20a5c2550f39be2836

          SHA1

          bf941942a572cf6c936c487954a8bbca326923a2

          SHA256

          58d77b260945d53ad069834af78fd630ec6f74b74328961c3d33791eee73dd04

          SHA512

          3a33756960e053dd39279cd382fdcb50bef182fea429ef1591d3ba5a7b31295404ca40ba27e8070f33a8ff9dd859aa8b72021d143038e38cc83a0f4a6fca1f4c

        • /data/user/0/com.whatsapp/files/wamprivatestats.wam

          Filesize

          97B

          MD5

          a33819b94dd0d2a419f7c56ba4ddc2d2

          SHA1

          6691508bd3c3a0ce80a54e6ba0f065d3569cd2f4

          SHA256

          7ec3c9b55ea95da34f9cbe0519ac3d684af0c7df110b6a6a2f93ea3199c8782f

          SHA512

          2b28b0c800726632bd3eea84e26646e3422ce76bf53ec0f8f32ba836a71dd0b118a4da87c2456b289bdf409d0b27f5abf9aa8fd1f6257c7c2c35f20bd154e7ca

        • /data/user/0/com.whatsapp/files/wamrealtime.wam

          Filesize

          197B

          MD5

          22a9d9c3a11defd795a708f503b65fef

          SHA1

          d34ac45b697a6b6a1118dd4103b4b0b92a4790bf

          SHA256

          08402965d1a9f96a0d91e81060fbd84c87abb057b16515eb958f559e69cc3e9f

          SHA512

          e59c684f6eb3827e20e3aef1b283a0ef48dbd65144649688030f7ae1bcbad6d4c2d9845f331bb6c36d8c1723e75d1b9c0043403e420257e9df660fab41eafce8

        • /data/user/0/com.whatsapp/no_backup/androidx.work.workdb

          Filesize

          8KB

          MD5

          e579a6b00eef1318f9166352228eba18

          SHA1

          76988896854f0139083e77862eea1a4846cf039f

          SHA256

          4b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935

          SHA512

          c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699

        • /data/user/0/com.whatsapp/no_backup/androidx.work.workdb-journal

          Filesize

          1KB

          MD5

          2d0d5f7c78c2b69d00dd9942ed50e4b8

          SHA1

          a7dcb3aa71f151680c2746f6634b07babb8b7087

          SHA256

          46e30220c76d3e669346bc7f0dbea9f50fe2a6ea79102b337725456ad029344a

          SHA512

          5fec89f4f21b76a0ebe696e41b3431e6bc128ca76b043620f009637052279086be561ee95b8cd4be47709748be1fef7755aa2dda7fe428da7a6ea886ab58822c

        • /data/user/0/com.whatsapp/no_backup/androidx.work.workdb-shm

          Filesize

          16B

          MD5

          4ae71336e44bf9bf79d2752e234818a5

          SHA1

          e129f27c5103bc5cc44bcdf0a15e160d445066ff

          SHA256

          374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

          SHA512

          0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

        • /data/user/0/com.whatsapp/no_backup/androidx.work.workdb-wal

          Filesize

          482KB

          MD5

          e797bfb8fa90e56d11a87e665c2b8ac8

          SHA1

          c62801b89634447321020e116651f6a0c2d4fd7f

          SHA256

          7955abc54430dc48029d8f928cd982e4f34d849ff308b5c8edee9a90e2ff7a63

          SHA512

          8b985a2678502a28b314984d93b5835dbc5360fb19ff65878c906ba1f26d8a43dfaaa2bd59f4812e15dd500d874c83ccc3e55d6eea175f761da011e474dd1188

        • /data/user/0/com.whatsapp/shared_prefs/ab-props.xml

          Filesize

          65B

          MD5

          9781ca003f10f8d0c9c1945b63fdca7f

          SHA1

          4156cf5dc8d71dbab734d25e5e1598b37a5456f4

          SHA256

          3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

          SHA512

          25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

        • /data/user/0/com.whatsapp/shared_prefs/block_reasons_prefs.xml

          Filesize

          65B

          MD5

          9781ca003f10f8d0c9c1945b63fdca7f

          SHA1

          4156cf5dc8d71dbab734d25e5e1598b37a5456f4

          SHA256

          3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

          SHA512

          25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

        • /data/user/0/com.whatsapp/shared_prefs/block_reasons_prefs.xml

          Filesize

          135B

          MD5

          1359c4a8e63f09a1001b409d1fded8dc

          SHA1

          cef0d42dde466fd33386d3d1246ff0d3e21cd608

          SHA256

          94ccd99b083adcb06ffcd7bfb1ccd189d2b1e358e7574694bcf6637c33a9e65b

          SHA512

          c8c01a5e704081388404e303e077aa740a07b5a63fc48b2ac022b02edc3e2d68387db4503f707576eaf329a01254e353ed6184b08946768ee0b0c0f978052481

        • /data/user/0/com.whatsapp/shared_prefs/com.google.android.gms.appid.xml

          Filesize

          477B

          MD5

          6957d13cdc82dc7dbcbd632e983c95ff

          SHA1

          c857686013dfb67136bc9d2a2a5c796fc9911512

          SHA256

          9fbf03ecea2a1cddb3a663234015a7cc5c5af5f5363bb7cbd74e3112eb85138e

          SHA512

          20861defe06bb7e902c20bd302f420b04ce0f5d5e89e309e92053ddc2ea0396bde9db62ea92b86095b2ed5cfd99e06134da446b4ef12e3a910afcc4dc1b42dbd

        • /data/user/0/com.whatsapp/shared_prefs/com.google.android.gms.appid.xml

          Filesize

          165B

          MD5

          c9684a00ddbe1f57099e25054e16c1f6

          SHA1

          7cd3b75e6aa9a845689d38ffcbe32301b974878e

          SHA256

          5e1d3164d36280251ea174211a4d4e79cef193ef2599a29ddbcd01d326e38fa9

          SHA512

          67dade5f97f507a569878e8574b9ad2d3730259a87477a84f3de89ec3068793d84a22347b25318005d5d62a1a173b9f99aff4d0f1d418ba25abbbc3e43d93d6d

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences.xml

          Filesize

          136B

          MD5

          005955cb5b99d967bc6307de64f923e7

          SHA1

          e2a3491ef78af59b69ceea4b664398284846d083

          SHA256

          802376f759e5ad4db6de2d453d05ff87563ebc89d11907b224396be2ea02a24a

          SHA512

          af3bd3ee8a7449a88a2ae0377bac53ddce40b76dbfb9b2a5fc0855c0fa416f54a523d7fcd2848b66028878d5c602b86387a29818a4c0830dc536e947543fd67b

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences.xml

          Filesize

          197B

          MD5

          f5dedcfae2b390201b2c0d559b4e3434

          SHA1

          cea0d9499597e51e602c065f756966fc6454bf05

          SHA256

          116daf2e677f73477ba67da9d70c23de4d984cf4120e18d2b2be568a1c08d875

          SHA512

          f721980e46c76c5f80d884cd7373a27683a74b2b01d42b01bf5f2028245360c49732d289278f74ae1bd6402e200057a84533faf822e370a5d36c00f1433a5d95

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences_light.xml

          Filesize

          733B

          MD5

          e708e63d37d59c464d51b1e6d5c3bc5f

          SHA1

          ce85f21722043269f22bb42f7baadc6336cdd025

          SHA256

          dc208b846103459a4043aa6186a078426871a7de4bbfe6b321b9de89b95312fb

          SHA512

          59c8153efa841dc5fd83d7e7cddd66b99e741615c79b30095fe3d9a265097cba27ea751df59dc35b2f33dc09211b9ac8fec448d80c404942948580403400ebf4

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences_light.xml

          Filesize

          796B

          MD5

          986f18ee25ec088291f7a9cb2c0a2f1f

          SHA1

          256edd1e310ddad126ac04efcf3e12dfda629b59

          SHA256

          03231e22bb6d994620dca47b89720030029e64411d091fe3f9e5118bd58e0309

          SHA512

          d860d74eaa84dbcfc9207de189263ea8da39087f092313363ec8c7f63a06da10ff0f9bf3b9004cefccaf6dbc657f104683bd13b2a94e59bbe60f9ba7a95930a2

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences_light.xml

          Filesize

          862B

          MD5

          d4adf5fc0c34e432c068ceb2d822698b

          SHA1

          5a9a1fc2fb8462881f321e9bfbb0ed13c747b226

          SHA256

          5399ff30dd321701da8dbde334c261a3468728b0958b680c15f692901eb2e11a

          SHA512

          446e3f233799b86c6166eded63753ab46648a61a6c682bc4fb11ba4e2cb980f8c366e77fe4ecdedef78066a18444e6a7da87f2f1d721616290ff7ee2e21ffbc9

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences_light.xml

          Filesize

          928B

          MD5

          4ca599b75610cf1777d6d9a55e867943

          SHA1

          d650bd058b84ac6fa0eecce65eab8c5a1ad4589d

          SHA256

          afafb06caa511737f14b5796cdbc88701aa38522d5887f5790975cbe09adced9

          SHA512

          afc456dca47a4460c91f66b420ef4f49946018240998a3ca49cb69ee76e492bc1fa645fbfcece28d4cc989151e6659eab7b5a97b51037fa00c20e41b01cd0dbd

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences_light.xml

          Filesize

          1KB

          MD5

          621012ba18d710d5a8f82fda3dbb6ce3

          SHA1

          1da78c7dbac08400cda121666e684db8a0afe8f2

          SHA256

          e82469272fe69eee217480ba95e78b7d24c9698b019e5792f55089d844b11cec

          SHA512

          d19674d30bbdd59d0228181d72072f8c923ec15c8381b8cc3b3667c26800327b97c626d0aabca6f53d36fa32d18a20af155f2e34eec0039108164cdfffecd156

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences_light.xml

          Filesize

          1KB

          MD5

          458b6f53bb1be5dd17a68c9f6a5acffe

          SHA1

          d7388a5060639a64485b6e1efa93c2b37b5e5719

          SHA256

          ac0f88bb13a0ce88126627174eb9c2bcb8e1d8875422a7da9113be65f167292d

          SHA512

          640c6d9fa979cf5df9ba2388af7b3a8238b6ccd6c8c0b68006c2c879c145a2fd28190cdaf886df8e568179dd3343b093df229479d08d2368ca7d976d20e5e6ea

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences_light.xml

          Filesize

          1KB

          MD5

          3a80687007a2cff7fd975ddb8401ea09

          SHA1

          a789d6ba0aaf80dbd203532eac2c1665c835a0d2

          SHA256

          c105ade707fcca76a671eff04100feea4442581772564eb873922ec03a0c885c

          SHA512

          515d783f414e6a507e3773fbab5417a2b05432c8e03357f84e3d5ae580b0dafa9332b1855a8c98df282a748c8affdb87043e094a9b2cbbf40383d1c52a9c0952

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences_light.xml

          Filesize

          1KB

          MD5

          a73bd5d26d4126f2d3455c1a855c6ddf

          SHA1

          95928876602d779f3158805f8cdf5ec74fa44fe4

          SHA256

          c37058fec4e0ba84b15b069434e36e2db4352f174ad1accafd3afbd97cb25eee

          SHA512

          3cb313f113484ea896d3e5dab366fb87d2f6d1dd10e05004f849094c71783622bf0e6f8f00a76070156fb922c54763b9a57b8ee4d90e35230b58f2f0c5adfe2f

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences_light.xml

          Filesize

          1KB

          MD5

          be0d7922b9841849f3cf2f537076a5b7

          SHA1

          8bcc013c704bcdd961510d08486e1f76a5f7976b

          SHA256

          e47d70e14586ccef9c2771babbe6d270a4ed49bfb5508af164e4f83b8c6b8511

          SHA512

          ee632304be71259f0d92e2be6d41235ef4a4fe00b3ed6ee3c0202cfd7bae491b87947e64e82fa6e9c68668f4c339db62643f9a7fe480d9a194b9e27da69db941

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences_light.xml

          Filesize

          1KB

          MD5

          89afb3e761b54a59bae26500b0b5a958

          SHA1

          58c85a53de177361d0167439d58cdcfe9ff51165

          SHA256

          ebd0d2515835e62b9b201f9bbd12fe608674d7b39cbee223cc2a9789ff52d4e4

          SHA512

          9ca7bc456cc2c9d86207ccd6ec985a9a01715490a12819a4e8da484a549671e9b14bef9bb72fb223b504a0fadecb8ea95a0ee71d626c8a88aae996778925ac78

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences_light.xml

          Filesize

          152B

          MD5

          38a8f92fd555c6f8693ba68c5124da53

          SHA1

          e00a7db92e8e39edd78b54e97630378aa6ca0b62

          SHA256

          cfca519f3cdc07cc6df4252bc0bdab4e7662871fe57d701793a5ed241ee8f98f

          SHA512

          dacad3cf189d4bb942db43ab8e30aaa1ac3228e7a040eb846b068b86221e31b0fed22afecf496cc6775cfa6181e75670ed3a1549a3a28a78a2f54b92e70a458a

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences_light.xml

          Filesize

          232B

          MD5

          0743f4732be14e2c86fe2c2af6272ed7

          SHA1

          a9dd7cd03f66fdaab471253ddcf7f8a3c456c6aa

          SHA256

          e95fb913a67c1a5717b528b70a2039473732240309ebf768f2b3cf295c2c3632

          SHA512

          5aee8650c7755adb8f411ac834969cd20c24415bbc2872d43b8ad1e773e14729da9659689f5509cc34e39741b58807831c3ac8081c05732b5506ebbb35be332a

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences_light.xml

          Filesize

          301B

          MD5

          790786987bfba8b99dad964768592b06

          SHA1

          7d828a33a315f021d21d285823ad416a572c7a65

          SHA256

          c567e82a20c553f27c890597c9d5ca58373eab413acefce795eefa9af6e0d3a0

          SHA512

          c3f1d54c14a0daa3e03f104e44fdc24791f7e1c7c25f9191c1b0ad395a549d4359bc9fec23b99744ef27e921301061b7cfbb73111980a958471f20d507f965c3

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences_light.xml

          Filesize

          366B

          MD5

          75c32a79ea31ded01d9095c78494651a

          SHA1

          6d9d8c4a57781c1642ca7dc4c4ed5ed84caa372e

          SHA256

          02953b9dfc5fd71e9bc72b4432543021a3695b2c903a34dc808b73fa1b637065

          SHA512

          f49df2498bbf6323dab518b3bacd74317969f29d3dba35e453788f0ab14bc6b9ac4a1cca240be83dcc1ee9e7cef2a8290fc3964ba41b4732a743d8d9081be82e

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences_light.xml

          Filesize

          432B

          MD5

          7e7881ef7d5ea9ec5cfdcf257933938d

          SHA1

          c41ade68bb320e03ab6f81e3ae5ef8a26402fa3e

          SHA256

          2e89f57d662b592627917f73f5d4d208c387d3e50f74cdeca06c5e48eb303178

          SHA512

          5f1e97454fc7bf6c070c35791e3b592e465f277c21729014c23e35e086c8b91be8f7d6861168fe224b8edefcb5a518c7d4ab01ef5e9fcf87026232e94bb58a63

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences_light.xml

          Filesize

          568B

          MD5

          d91407cb16077e7a8cec10f6795553ee

          SHA1

          a47e4f3f62d5be6fb7f5615a1855bf4ab2c76b3e

          SHA256

          04f307cf90a5cb62bffa0ce48b92a7570beae35038cd2c31541e508ce079100f

          SHA512

          204da5a0273928b14fb64883d55422c54f8c06c4bd10e0b52c362c225efd55b043f824960d84e8ea2ba2382a8e438e9a0ee4152a76e45898400812e6a13bcda0

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences_light.xml

          Filesize

          633B

          MD5

          57e05d964c24686e51d9583af657bff4

          SHA1

          fc7762a539e31de43ec59e8f894e3bcb3d25c196

          SHA256

          50ba695e11c44171cb29c12e92dfa58f6cd35a37d40db145e641d18d9110d91b

          SHA512

          bdbf6a09cbf897cc8bf4527898b187c7a7f22277f00f9af9afe08ecbc02db2c3f039847ebbb6dbcaf3695a39200c5808b45d0d3aee9975540b3d56790c07c29f

        • /data/user/0/com.whatsapp/shared_prefs/com.whatsapp_preferences_light.xml

          Filesize

          676B

          MD5

          21f41066b959018a7b05e768c0a882ca

          SHA1

          b1805385ae1491690e05e0d003a1504c1ecea969

          SHA256

          853ce08633944ed1737a577e73a3a461cc49348d7e6b9e9cd3d7d430f5aaabde

          SHA512

          1bcb4784108cee6fc712f0784eacb7820740aaf89cd68b22781a1c9753e9d33812ea11c3fca036569090edcc496f6fce6ae8fd2bdf3835fab420817c56073714

        • /data/user/0/com.whatsapp/shared_prefs/core_health_event_pref_file.xml

          Filesize

          188B

          MD5

          d7f006df542f3a6223f75b0e9a4fae59

          SHA1

          3f7a725b6c53b500978c15abdc7fe1af5a412ac5

          SHA256

          a8f7f7257f39625c330b49ffee8c624d79e87b2673a6fdccbb554ef8a02514e0

          SHA512

          ac6e00a082072986c30c734aba68ca55796661fb81206ec72cef31276862bcff2b529f0156eb9e6e8a309a79fecedcf4c1818faa813873f204444ff52a136718

        • /data/user/0/com.whatsapp/shared_prefs/google_bug_154855417.xml

          Filesize

          112B

          MD5

          9f93211fbb98a1171cd4db03967ec9e8

          SHA1

          b80d06ee0c6bf3b300e12ed306a7dba6761e4d0a

          SHA256

          ec7f6db87628ba6288b1c86c628411c4dc271c646f213de830c3fdff1347b3b5

          SHA512

          abf73d01341888fee1e47afdec632d2fdd0cf50801e0d230dd605b555a75a9ec5387ecbc283bd9dbb1269e72d994e16fcb47193a1e7e61f377017f5a06136af4

        • /data/user/0/com.whatsapp/shared_prefs/keystore.xml

          Filesize

          133B

          MD5

          65f4d6a44733d573d69d7a0d6f3462f9

          SHA1

          c760de9e6305a19c4a2e5e8dbf321241df0b71af

          SHA256

          a9159c2cb08c81c25d0e6646441a6f0f3597f721c8067b01fdfdfb3f022ea31f

          SHA512

          8910c05f886eae760aeadeb929e505a6b5db061ac9498fd7a171c78389d4e43d78681d223fdc6c9eec43c7246e4836cb8e3a39166a40320120f74c693b685ef5

        • /data/user/0/com.whatsapp/shared_prefs/keystore.xml

          Filesize

          386B

          MD5

          f508da4b5297b5b6c0e4f9b84946dbf5

          SHA1

          ee1cc4f4fdb368a1873f8f4eaea9e1154cda43e6

          SHA256

          8fe2133e4ff1501bb3e7f63e75704276b91c050dda7e9cceca450015cf6cda16

          SHA512

          5ea04ca56bf82c62a451e4b1c10ac3641d1296b5daf3da3b7e7d12322db0a36dc4846e1ed8313dfc7ef2a8ad52bc14bf54dafbed2418aa990e68f2876184d83c

        • /data/user/0/com.whatsapp/shared_prefs/notice_store.xml

          Filesize

          238B

          MD5

          566f37e78e3901bc57e704cb481ad34f

          SHA1

          99a645f5a14e3eb0e185e9f7fddb2f64a7e9cbb4

          SHA256

          af82193a661b8b52ad42dfb8e731305020ef79e73648902cfafb0d4a6a581426

          SHA512

          11056b15e2c8d57ad514b604093627b99152c58336a44df66ca653d15dc0ff52c05a0b41858af15ae558d84539fe4b94afc30cbe96888b55dfb0d6640dcc0e36

        • /data/user/0/com.whatsapp/shared_prefs/ntp-scheduler.xml

          Filesize

          156B

          MD5

          fb105ef22ef272a4f8031973791f5f01

          SHA1

          e2100bad75062d169533068c883c0d350dfee7c0

          SHA256

          2094acc27f1bcbfcf8048df90279f505e0a9a350c09c58c06207ab2eed97332d

          SHA512

          f3c4389854028bc4ea7982d9d871a710113e9cda9c89e1e10bf55450645135dfba37fad8819e664693229e279df65c37aa830fdeacdc92a5b506b38d24497f72

        • /data/user/0/com.whatsapp/shared_prefs/ntp-scheduler.xml

          Filesize

          112B

          MD5

          8a73df323a773d69cf850c4137a166a7

          SHA1

          850df6a93789f321a5aa31bbdb7029d2d66dc490

          SHA256

          4bb31fb51bf7f7d6a657bd11cbade24f105ab3f67587347d7dd6177cde57907d

          SHA512

          15f837f5427bcd5ae13f0f0baf779b84601007556bdb2e13914b0511afa6e41f9a3e584776024483b496d4928f9e40ac2c963b185b8e8b674e91e0ae1f55bbb1

        • /data/user/0/com.whatsapp/shared_prefs/privatestats_props.xml

          Filesize

          127B

          MD5

          a832d660c2f46733915333a195834b34

          SHA1

          c99d2762794b1f2f6fe435b98e840fb9a8b1ddc5

          SHA256

          6ebad12309152fccdcfed3d7f28a240479a1ca077de4a9762b9a12f8f11e93a3

          SHA512

          26d0cc3586b3e8e5589fc1be3c500e24dda23d684896bb871d10b79cc4c9844c1b605350c0e16abc8e493bd679bdf5f1cf3c98283ea19e6f79cf7ab36e81f76c

        • /data/user/0/com.whatsapp/shared_prefs/privatestats_props.xml

          Filesize

          243B

          MD5

          cfada4aa56cd498ca43bb988e0e24294

          SHA1

          e2988b0fa640e735ddd056bb5bd5f6abbc134302

          SHA256

          e75ebb2dc46ad347a3233e33fc632d40c3d3baf548a1269b2426ba82f3a57a2a

          SHA512

          f77e08f1cf7128854e08436e862ec74080dcde24244d88f5a64ce3c45738f41e2ac8881a45f976c9faeb9f3bf9974e8f385593c7135d4211d6dbd20e22627da2

        • /data/user/0/com.whatsapp/shared_prefs/server_prop_preferences.xml

          Filesize

          137B

          MD5

          a08b82a57a0afaea23c4ac3bd7da6a7f

          SHA1

          560c92a4f7d3d68e8242a2688544962db18e582a

          SHA256

          d8c94a4219a625faa7de689a863ee9edb94383d2e09bf68c731fa09bbcfbf3b1

          SHA512

          2f18cd6dc256a07547fc9ad3f73b6a93fa67ab52da3184540d91fbfb9d32191fd59df1b940b8c504ccc43fa697f07de2bf4b7cd372b307562a55d0cc943bdbfb

        • /data/user/0/com.whatsapp/shared_prefs/startup_prefs.xml

          Filesize

          427B

          MD5

          45f63b6d6c47e44d662d43a2ae974eec

          SHA1

          9988d5d4739b96691f025c78fa4f1d91446348b6

          SHA256

          ee2ee428dabe7528410fcaa323e9a6dda05d319f7d41f4771c6df17c13c54b93

          SHA512

          5d0eb24f32111c7835697095961638ac5fb1a1dff483cd51efbb499d197772cdb675e0d07ebde0f34352a0071aaa8cdae962fd9e7f45b0f7cb41a0395ce97d4d

        • /data/user/0/com.whatsapp/shared_prefs/startup_prefs.xml

          Filesize

          544B

          MD5

          cab8822ed5917c476ebee860c245309a

          SHA1

          f3973311ca88b4a7124014ca792c3f3919b4c920

          SHA256

          4c559aaf6ed63bd5a3cf1f17c7a346878083d58d4ba92a5efd2589d695964193

          SHA512

          c425b9b51244b3648ef114445cad7a4dc6489a49c65387a370ba487dd6959632aac9e1d9eb36c84c4929fba20153dfb0bd0ffc96338dd35e5f370d9ec74e5002

        • /data/user/0/com.whatsapp/shared_prefs/startup_prefs.xml

          Filesize

          491B

          MD5

          89fa1a976b423066495eb1c4aaee7611

          SHA1

          e345100e8642be4ee2e91177afd1401cd77ad26c

          SHA256

          ae128e40c9aaf8acacdfd9132e59bc791869045c9ababe1e64a8615ed577dd7e

          SHA512

          1979b7426e121d93d768b2b3d0f09ae9af03584184ce56a605fbc788f171f9aff4ae0cf77ed15b5c84ab6aae3de03545d6e3803f7f4a143753233ff46ff2681c

        • /data/user/0/com.whatsapp/shared_prefs/startup_prefs.xml

          Filesize

          124B

          MD5

          ee15b98fa539fb0ad15fb6981b402389

          SHA1

          e77fddb93e8d6811a92682c198ec1daab4c55c5c

          SHA256

          9285772b52e50a122cfe2ca9d882728650e7ebe17a50986842fda3cbc8a2646a

          SHA512

          f6acf23b0915bd4d182d6cb9a8fd7786b313359b9daeec2a056779de17db9a2af66a7b83e532ac44bf8e6b171527330ae7de348b47b36863e62b78d7ac2afcc0

        • /data/user/0/com.whatsapp/shared_prefs/startup_prefs.xml

          Filesize

          426B

          MD5

          8b8455ea60173fb8e755d8364f5ccab6

          SHA1

          73d8693d9bcd5b44f4212e8fca141db97f278b5a

          SHA256

          3c8ab7f7510fb632642c39704be40c994ba0c02d376d82a4ab6dd0ecb7598f38

          SHA512

          4502177f12bf3e3516407a7420e363ea00d650a25532a411590a4138b7e7223f91aaac0623f413b892336f25d46ac9d791682fe17e557311e7b12be8db802721

        • /data/user/0/com.whatsapp/shared_prefs/time_spent_prefs.xml

          Filesize

          133B

          MD5

          ccb85541371cc5ec98ac83ac245f7e2b

          SHA1

          b5a8182bbb18aa21ba9c18399a0602117eea979e

          SHA256

          bfe82533109e1143dcfbbcdd3ab061e4b806322582b58e3f420fe52d495ef1cb

          SHA512

          fa22e94267f69b5bfdf5e0db76d44d2b4df347dbe9b1c9940cafe1c2579d4be7d123673fc4ccf6066850c7f3aaaff8bdd0a651f92e25de2995b09ad1547153a0

        • /data/user/0/com.whatsapp/shared_prefs/time_spent_prefs.xml

          Filesize

          353B

          MD5

          1a38f21e36707de80504cdc128f15840

          SHA1

          68f59eab5a162ff7e428f408c3774f16039f8097

          SHA256

          8224928c130459e1c43b017cbc82b5c8776ea13b091aac08f90160a3e99b7475

          SHA512

          e8d6163918c4eaf71f1e0770fc6e5d35be3923e7c1dbfadba6b51e50e8c1d42aac7d5902c3042043e40b2f90663dfef8a353c7ee9b022901aca1fcfb9075ed9b

        • /data/user/0/com.whatsapp/shared_prefs/user_notice_prefs.xml

          Filesize

          118B

          MD5

          3d9c2d0c0659da661c428eccdbb075e4

          SHA1

          f3077d86a8e3c1e5425f3e18d8bd6d3be05f8776

          SHA256

          451d76191dd8d4c2680439429d40c15106bf046f616defb7d68d8a1354853446

          SHA512

          d2db487f8fe0e666a90344b7823fbc92bca4b2717d5159f164e59e8c0b86cb3d2d760e9fcf8e193eeffe66332ac73c710b842e723c49137d0bcb9cd8be364585