529db9024ac270087cef13924eb2f4a0a47e9f10a8bcb62c77c84d7b9ab776fd

Analysis

max time kernel
7s
max time network
136s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
09-08-2024 07:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

529db9024ac270087cef13924eb2f4a0a47e9f10a8bcb62c77c84d7b9ab776fd.apk
Size

82.6MB
MD5

9e03bef6b8add72146097db67439c300
SHA1

662ac27678390b72e20aa9c8861e5103371b1aa7
SHA256

529db9024ac270087cef13924eb2f4a0a47e9f10a8bcb62c77c84d7b9ab776fd
SHA512

643c9360e99e9a2ea56161d0a0af458d74d53246fd102be989d7e063d1b91d95eb80a1d9408ab4dfb94949c784a031443b230108bc10e94a2972534641393f21
SSDEEP

1572864:Stm6F5vMmOTRS8FuPbrT9lQHMejaYVPapJHVrUVxDtH:SVFJqyPbrT2MQa4QVrUVz

Score

8^/10

discovery persistence upx

Malware Config

Signatures

Patched UPX-packed file 1 IoCs

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

Processes:

resource	yara_rule
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libmagi.so	patched_upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

Processes:

resource	yara_rule
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libmagi.so	upx

Acquires the wake lock 1 IoCs

Processes:

com.gbwhatsapp

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.gbwhatsapp
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.gbwhatsapp

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.gbwhatsapp
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.gbwhatsapp

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.gbwhatsapp
Checks memory information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.gbwhatsapp

description ioc process

File opened for read /proc/meminfo com.gbwhatsapp

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.gbwhatsapp

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.gbwhatsapp

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.gbwhatsapp

description	ioc	process
File opened for read	/proc/meminfo	com.gbwhatsapp

com.gbwhatsapp
1⤵
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
PID:4297

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.gbwhatsapp/databases/BTOR.DB

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.gbwhatsapp/databases/BTOR.DB-journal

Filesize
512B

MD5
674a9e81cd432f799b176327e4765af4

SHA1
f496103570d27c764fdcbd035424edfe3aa3bb29

SHA256
d96ab524ce85f2a91114a9c826a84e68899eb98ce40134c1a3aa1e48de4b62b8

SHA512
d4751cc74fc4d2415b72ad1c3fc9971077a592dd6f854fc6a18424aab77d770524ee995072a5c2e29216e6efe0d3a3a9ff25e1632a36473bea13bc55a2e7865c

Download Submit
/data/data/com.gbwhatsapp/databases/BTOR.DB-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.gbwhatsapp/databases/BTOR.DB-wal

Filesize
32KB

MD5
5a5102763a7793cb79ba80ce5f852f1a

SHA1
9d9bbb36f82f19ef59f4702b58bfaf745cb962d3

SHA256
abeed0fbc39451fe03cf51b70b8ac6d6ce03ea289c9c77172bd48219ee3c6654

SHA512
36110b94d99729c3b46bbd6e9e25ff2978f370bb57859218acc1bf21a85f3486da126e1426b276f7b2f663e204252d1c4b072f9435f5f445f2c712a9156fc289

Download Submit
/data/data/com.gbwhatsapp/databases/EHS.DB-journal

Filesize
512B

MD5
6080cfa8bd7883dd214a79b77e1b2a44

SHA1
99fa632ef879107c5ae6bb03cc5a57ba2b6443bb

SHA256
e04754a54aaf9331466295870a3be9ecafd8f4205577b6ab82265a5c220a4ef3

SHA512
18181697dc6fe6a08fc44401d71510f24906fc146669a95a6bb6f0e8bd18c9dacb6d197f3c9408721828fd17747058ce456c1ede874686f20efbdb7434bbdd18

Download Submit
/data/data/com.gbwhatsapp/databases/EHS.DB-wal

Filesize
32KB

MD5
13139c2248f95888d97d547ed44f4d11

SHA1
10387795ee001d37f0df2480875950abddecf2f0

SHA256
7551904fd1f56626c50dcf3d18d80511b901096df429e8a07bd207fe04f4d600

SHA512
5e68fc921bf99057649f712cbd0c049814670da16776257549eed567d0633bb55ae017d30f4749bc9449aae4561a80721a21b8f1acfa7565f03566af99ccb151

Download Submit
/data/data/com.gbwhatsapp/files/Logs/whatsapp.log

Filesize
5KB

MD5
d8822c990da39ace6cc9a1fa1f564425

SHA1
c88615105494eff2aaffdf10f1cccb35473a2bce

SHA256
5819683b0595f8664bf7de361e8fdb43278da0315ce619b47d0bfd2436df4661

SHA512
2843be452c3ef23ea46928b3eb047723fd1d72485f59e527614b07ae8f0ab08e39a869194ba672e626b2fc666028662234552efb9cc4b3d4e4bd88911e574f2d

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/.superpack_version

Filesize
32B

MD5
92de80bd8a5e7da793bb806b11efda17

SHA1
7416bcb56a5225e53047db347708bd770b648fe0

SHA256
cf5252c935f1d7c2e18888c354dbb8e184dc35445f75758592e46a503d11f1ed

SHA512
78d55768e873a6ce45e749292cebc4fdb66768b140743ad14d77dc2713c2e048f299b1903f89b44380a8665319095716f38be50107696b154cbaad21d8df21c8

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libaom.so

Filesize
1.3MB

MD5
8ac27187d0a2be73c96344935136e3fe

SHA1
2110cad1d9d3674e65de704f94e163e12d66a9f4

SHA256
ac281af3f756fa17e267b431af458ee570d13321aba53bb68d9a3fc17ae1c009

SHA512
9cef2266277d6a4b3ad72d8c5e7e7d62f87a4442ce3cab8ae45613ab8b2c4b94a3c9a22005ba7d53a8adfecc01bf54ac3c09f842d435b34b699affa1db156d01

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libar-bundle1.so

Filesize
59KB

MD5
17bb8fc684413fb3da844ab23df49ef5

SHA1
407c67d4010e93b9f72f8710899309e06926c04b

SHA256
75246b29897c81ecf4ec636845e39eb8e79d44e38433bdf450856f9e53180a0a

SHA512
e424ae1282b87369ce75af3ff31454811dc0cb522b1cfa394a9bb52a94fedad623d9c258db74b54b8ea9424a778345adcff3a58a67610afb046ce2502d57b190

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libar-bundle2.so

Filesize
1.9MB

MD5
529ebbef7dfeebdf67c488ee6e7a7fab

SHA1
3270cac7c84a66befab528336f5f86950f437b0a

SHA256
d9fada0fb56341653f2bbd54eb5acdd7d19ce72160fd57f2fa7d6894567405f5

SHA512
8f7a82a0e6ff09e3e9d33bee6a4f7405fa418e8c8ded92619fa3aa895a4624d2e6641d8371316b7fb11cba754365e18bfce13b61076929c62f7228beea1ad256

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libar-bundle3.so

Filesize
1.0MB

MD5
18b14e8b2685d2a679b3f1363bfa6cc0

SHA1
c1751d2f308b7517afc52525e2905294fa563a50

SHA256
7486a0a030800a70bc2110e9b2cbedb549be1f6c9a5a48f4f3bc1d0f07398c15

SHA512
f161da1494006a5fe6e45c93ab1cd708fa214fd298f39fa79bdeaff6a124e093a5393f31908d87bb423150e7df6f6e217cdb85263d223314ac50d957358db9ef

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libar-bundle4.so

Filesize
875KB

MD5
1493c74e73782cd7d2ffaf478deac81c

SHA1
c1e686498fe1344291be7dafd7a5fc0d3053a29e

SHA256
88cc4e3fa7f527414ea783c2e9471efe0ed22e64247dffbe4a66e6f80d7f127a

SHA512
5733c4f85db81756e3d39a08966cc8fa403ca9fa1dd09fdf7dbf5c8d93ade941ff1079cb4f652657450c786265a508981bc4c41cadb7d9c78896588645c84537

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libar-bundle5.so

Filesize
7.0MB

MD5
12b53c7db92a38f42a49fae9211d3cc6

SHA1
1f6a9b419420df7318630f07a6a255ef421fc4ad

SHA256
c63c517a2ff65552b70a479b88f2f5aac877e382b662ac72a46adbfcd29910ec

SHA512
6483ecef81c53f6c44753520d982b738e1ba6d020cedc5066d7104c6f6482b05e01ec2fdcb4311eebbfbbbeb5b6110b3f3ace923d6386257213ef83c58e2da55

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libc++_shared.so

Filesize
595KB

MD5
8060fa3cd601636d5d4a0cc0507b1cbf

SHA1
1b9e793e6e306b85d06ef7ab4b53e64736561bdb

SHA256
b216ebebe5303bbd9787bc7b771b67ed56beaf337b783b65b19eb36041f99571

SHA512
803de486b71e43c6e03820e0cd486114631743a03b74bde9497caa5499604d62e2dca6774c8c54a2f0ad60073b449eed1feef7b01f1f35cb0b0f86cc1076f40e

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libcurve25519.so

Filesize
116KB

MD5
2b8e8800859a19977ed3f5745ca187b5

SHA1
a847a54219b50fd3a85b050c2e1e17a6e1ba0077

SHA256
cd4465d9e00b8870d63764e2ef34f00dcd9887dcd183acddb886859511a8aaca

SHA512
13e4dd72341d00667f46bda48acce760df7b6852fed8db4befad5fcf662b2da828887829ecb52249b0f2aa30cd3fe7b085398af7af7b813cd256f7ed70bd21d0

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libfb.so

Filesize
58KB

MD5
c816fa5a6fb494142b1e0de26de7f987

SHA1
023018670e23972301a83b104d6fc485daabbbce

SHA256
69e757c3f9529202cd83df719ed964d3b33f3d12b0f72bdca71f38bdfd9520bb

SHA512
16fb0c7e48a7764d48e00d120f0c2d8a5bf6417a1bdc2828e218b1868666170714828ee4c05460d6ead9f82ba07c2655ab6f698e7550ae0fb694a94115320e92

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libfbjni.so

Filesize
118KB

MD5
9b45ecde9fe0ab4d5d722d89cbd06ea9

SHA1
88c0975215ffcfabe2646f270e4a780b8628ee33

SHA256
42e738473d46330d84f6846c4f408d1e49e82261e5eeede0cefe3e8af662ad98

SHA512
d295a72ff568c42631bee612cba31abeb307aab2ace40006805354ea85ccfd8a232a872938bfc64e2a2f0bbf28ef53330b3213d1d2473d899424171ae77e40d3

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libfbjni_kt.so

Filesize
20KB

MD5
ef72b75841ecd076099917a4c29e124a

SHA1
2bba80d440782a8814ace865507ca5137bad2ffb

SHA256
650725d603409b5f1356d38a894a7b522c4a12535a1d70a4b40cb7192e84e2a4

SHA512
717dfde78d80b7f7e92d14d69bcd18507df1f5d6f36d47b0d66c016575f92d2bf2e1d0d798e32abd445307435351a698dbcaeaf0f814f8f008825fa0134bfe78

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libfbsofterror.so

Filesize
7KB

MD5
98855642e947eb56d4323534235dbe1e

SHA1
0fdc4f7e2722495ce14f377b742b5c5f9c24f817

SHA256
560d3664ede8f005f83def2dcac075a3a4e5f356127b7b400c9c274981dfcce6

SHA512
400e8bed7898246bb9a8e49d3934821765b6e39dbcd1304b7819db526cd39cd162e57edb5c39cadb3556e10eee71535610ced2bc092d681c82401f19c5686687

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libflexlayout.so

Filesize
32KB

MD5
ce94fb228d28ee1c7e90c2dcfdd93d7a

SHA1
0392ed44de10d1f93c5a1da6b5a4e9e0fd40e84a

SHA256
1d6096faad5544480508b4f3a6b12f289ec76f36c71f170d613935cf6b38a14b

SHA512
87127fd5e9ea6138a64705527c1e63cccb8a0133539b0a15d70e6f936143b1eaa44d96de8e8fa23f7252bdb1fc3edcf25cbbe6a5f67d26f208b787fb22de8f90

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libgifimage.so

Filesize
26KB

MD5
c5c6d02253b63c0b92c7c72bfbc511af

SHA1
12816158b89ec871db8e0a0f38ec73bae0bdf1eb

SHA256
3c2390143f9aefc97930a284a685e4852e41d916af37bee29047671d10184311

SHA512
d140d9f9317b7c6eb22e092540c04c9a6398c7bd342f1c4fed3b5725cd9add5aa45747749cab513cc366d5b61dcb048163b7a1a2fed2a75c6eda58b447d4dcc3

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libglog.so

Filesize
74KB

MD5
b0014b1faa696ee2e438bade6c1438a9

SHA1
e16854bd1ed4d3ebb199294791a7e6de47b94536

SHA256
242270fa61881a3008d00334bc527040e8948457419a10b1ddd6594a29e10ec5

SHA512
209096736246c3adde0d47830ff68e911ff8672ccaf6f3e5fdfeb216792498035f9b8082467416e198e27bf35791affbd905d01c63ad6dcb9924a5f3764bd89f

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libgraphicsengine-arengineservices-whatsappservicehost-native.so

Filesize
1.2MB

MD5
1877649293e501c4e6c0eacde30ad2bf

SHA1
c3a1e168a6090da9ceab712c42e8965d15fbf4a6

SHA256
0b5ff0869be9a6fcf374b92e3bb73220cfc79a15f5caf0883f64765260b49eb3

SHA512
295e66e8070aa47e80ab94140f514a7580aa5a387dd784ae113ed3f194f4b6de5d9a88dc4ea9e179aa7d4f84a31633dfa1edffb564e051e7589185efe607f416

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libmagi.so

Filesize
981KB

MD5
04bde943a01ac53779032e3467a73ec1

SHA1
ae01d23da16d7f19a591ad179b592d88c9211838

SHA256
372288abd307774b94e588d769e3b9e4ea8b2d653545fa3774c8af794d72276d

SHA512
6d194cc47c810dc27a5edc1377f653b1a876c8ab80ae8ddd5cd29b67c8e3b9c5346ba270e5bf6f4afdddf2c558c548e5e8f7393eb6a1a65781e756f747554d53

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libminscompiler-jni.so

Filesize
42KB

MD5
4ec6cd25ea99b51f1fe9f4f14f52125f

SHA1
d5170425c9c036b6e417bca377d17477c7265495

SHA256
bbfc153ea77034d5802ded9e725944adaaa79af02b4e553509e135dddc5236bb

SHA512
1c5c0e50fb038ee0ce724d08b72c930838fc34c1d17fd84cdf45d5af2fd4ca7583e91c7ed5bc6973620c5ced0dc729ed57390a71f4ca3ed5a7f58bccce038f3a

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo.so

Filesize
70KB

MD5
d3076f529c7daecb9ce0cd0a349f277a

SHA1
9ac8c29468c93b8c9769be5d426338e7e03c00a5

SHA256
03787b8cf4aa571cc39039ac738ea60ade4f600a3816d50cae2ee64176d56305

SHA512
5445caccbd72b7df0b0b71f80c86994df300d4b20fe04947cc8c029c47eadde212f4d4766a4f013e0b4bccd309388a9931daebce2dd7490fb8678c1ceccd91ee

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo_atrace.so

Filesize
20KB

MD5
cba14ae588a50a51a71a708d94223430

SHA1
94079f9a6a8b7c871fdaf724f1d5a424c8446d54

SHA256
21d9e7a1a192c10d89a110e0950b121b931649b7e676d02864eb6eaa99b2f057

SHA512
335b2968b3cbd2bb36b61f1234d0f8dfd971f7e5bc386cff5d29ab872aa4da8dd3192717df6ed47390df038fdf24d492cc14d5d8395a56ffc9dcf8b281b87d9c

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo_build.so

Filesize
3KB

MD5
34ecbfb7f64b1eb828f710a8a0c5f8a4

SHA1
e3563bb92409d837537a62f981a5d2866b9d5c84

SHA256
fee251137ea0db03b6e7524ed194088c47910e4b05b05897371df4cc5cfded1a

SHA512
b6e07549d805eb87f7bfd281d621c430f011438317f93044007a5a4716208f4cbaef660df473a859905c302bfc6ada389d6e7552d4da905fc9e3d375c9a4c6f2

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo_counters.so

Filesize
30KB

MD5
39c56f27593165b17aed015baa9833c6

SHA1
c8e85b0e17bf39e905d3311ddc296429721caff7

SHA256
131948869bcb693511cd487ff87dd3e5fcd1cfdb69c3dc8767a9d89a1642c78a

SHA512
7512136c1ad282a2d8a87cc5f797758cc4c0008c25f3a26bc07f9eaacfbf90ab5a4dcec690eaa4d891fca512e569fc4b76c7350fdb614a4cfd659a7e8625eac4

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo_fb.so

Filesize
3KB

MD5
e11367038b25e60796022892729ed18e

SHA1
ca3c1dd4c335e20f157f7e098930eee8215b548b

SHA256
f5ebe5b7ad257fa47b40bd9fe2c15c36df2a0ef6d566c782ed9b942670bf0d46

SHA512
daaeb60ce1b3229e0e089bd2794e2e10b3780660f145bdc8388a330b034a4d717887b634e022540f1baee8e84949127d6867dbbe913f5b0eb17ebb9b399ea612

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo_fmt.so

Filesize
2KB

MD5
2fe063abcc33f1178e34d5a40086326f

SHA1
cfb5a3c1948100dadad247718e809da04eb33993

SHA256
ba55d9c0bb946278098a279a1b4827bca80b7bbc9f07d84d98fbf83b8a797ed0

SHA512
24255344ce429e8d5f0446a8e9eebc671ca6c434190d5d171f191b6d38574c289cfb941bac23350b734e14884f70bac8ec46afde4290e2d7d8ca996a1932cf14

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo_jmulti_buffer_logger.so

Filesize
14KB

MD5
dea5fc9ab05864c89c7b9e50410d2664

SHA1
7e3568e2acc4b31ad7706fc38008df055769aff9

SHA256
87e5ee6c5e3c3f18b612a4bb85ba70a68a2900243b24c4f4f92912ed18d3c9f4

SHA512
3fa15be9440a9471a702d9190fb90cd5b70873a3c806b9ae9e0d42c2f2747bec684f82a1f0fc11610ac1a9aea839e88d7e757783bae66911be32d106e9a264e5

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo_linker.so

Filesize
15KB

MD5
95cd7e221b423d8f5e2e297472c83dc4

SHA1
df0b2abd1bab3caa4dfd713a4cb772285032a2c4

SHA256
3eb9bae2df1c67c0284d5a0409483e05c7285490e8d4b358439481dd8f303458

SHA512
9d12385c24d486934b5072bffa01e262c698dfc0b5fe4f84b3259675ff4028511fd3b73934e796954c00edcf961f61e4e4e80829a8c4daa261bb52ceb57c478a

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo_logger.so

Filesize
11KB

MD5
e3da014656068088abdcbed9c909edfd

SHA1
48e0c270bb89cdef233a171c41b1a2319696b389

SHA256
c6f9ebfb0a56d0b4c7a8e902979267e450171908dd6ffd301ab471d5d02abf49

SHA512
5df76df9b4caa4d1505f14ba00dafe2a730f0b37992c272e39f5c53b5505f53987e58433e4a6a0def4afc03b31758371841886daa7e33b7a433fce321e204fc6

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo_mmapbuf.so

Filesize
19KB

MD5
962aa5577822ac7dd0b7f6b774ceaa82

SHA1
ff0a10b89cbada2d7eceea406d1d54541437318b

SHA256
7488d68d5faedc49e4910c68b61af220e76fc649cf246715946446bc38033623

SHA512
eed54c2b31382c8b27048a2e30b4436e7466694062931cadbbaf78427dd4702cf6fa3df698c2746560e4f4ee4254c5b2eff9eefa449847c63329108aa915e7d8

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo_mmapbuf_buffer.so

Filesize
8KB

MD5
93efa0b57d0a608a99a06c2e487f9e69

SHA1
f597cb533c8c2d9564b886586109c7b237dd1e43

SHA256
b1d29ff3cf332bd5b33717943985f37b40e62c5f2e756969982eb53ac10c2611

SHA512
3ff6fefb85d275022a70d6e29678fc45b6ff99475240ff49132e337f176e98d4edeb15f3bcb470c25554b970f17cabe02623c53aa108d5d1f1ec5f1bdc3cbc94

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo_mmapbuf_buffer_jni.so

Filesize
11KB

MD5
396899cff1e9ef46dc1ffce853051bf7

SHA1
a5e9eea3cf878d8c0d04f01f31338f225f94a797

SHA256
782be1a5c070fdd2d5e0171c107dfd1f14e0fe240cc6591c4cdcfd2eff40ac50

SHA512
80c02e4565f61f88ec86c12d1e94ecca32d45e48ce18b26a92c7436e0898d69f0562944e7bbe2ad89113d893d8173e2c00bf3520ca2408fac766228f5105d62e

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo_multi_buffer_logger.so

Filesize
7KB

MD5
e4f82f90d8eea150eec751f9d0cd0a8b

SHA1
050b2a2424cac5100bc99968858029ed1427d3f4

SHA256
5b365219161471be3ef155fc20f2d0bffcc239225eeb5ff27dc4d6663aa87ae0

SHA512
948477443c16c48132e9d08f291a55f7a0d285654f8f3393b915dcfd4b6fedb261ecc43728051c571db68a8ed85d12fe21f4339252eb76f4044177d52223088c

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo_plthooks.so

Filesize
18KB

MD5
d2793c0167f621b37a599bba572756a3

SHA1
be9206bd407ffb9e1a707af1ce46422491c6d681

SHA256
4d6ecff951dfc617b16ce11328d0db8d64667f955e15506e5ee953e9a96ad4ec

SHA512
11a0c8471169e721f1d2e4cff99198300b75678608c1852f1ae69d0873afc193dae64d1f4a37d08da8b7ce979401cb9b50f05d400bdb401d646dd6370c1e499d

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo_sigmux.so

Filesize
5KB

MD5
62bced8e7bfbf62b404ff43c8d518c7b

SHA1
c5afb8225f2605b3ef2923dd25d2f757c521126b

SHA256
f63740874ef8e1ce4f7de0b42c7b28165b50a30361b436d89ad6743e6d90413e

SHA512
7a8beca1a1d765176f9d74bdb486f8f8a3a6c4c9df1a4218f5335c6405672fa9cc8f7527174993265a5c237e7270c5751640468ff5edfe468b23c57ac2d12e28

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo_stacktrace.so

Filesize
71KB

MD5
3fcf26a7b42477841136bfa4bd3ce83e

SHA1
9b09292e54fe973e05ee055cc10f917a60854a0e

SHA256
a39b9f0de8d314fef9026be37a3f6cc7ad12634c0cdd08e498b0f96661b91927

SHA512
7f61f13bc081efa770e0ef76662853d09518be073735d614b0297e374e96afe85f062b70923fac697d51244726f92caae921b96de948a40f547eecdb22266ca0

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo_systemcounters.so

Filesize
29KB

MD5
fcdefa08b6c8be3221adeefd96938c92

SHA1
8e3206466243d06493096716309fb1c88749c640

SHA256
b340a464a9be8a543b122edaac190a1e2ee83a0399c6318869eebbc8bc2be2bf

SHA512
695774ec0b2c7eb214d47138d406783f5308f81a00fac7597bc767d82300cc4890d1ed58cb6fb1378539dcc27250fcd8281de2e0e2238fc4c67ea4a3aeb0d80d

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo_threadmetadata.so

Filesize
9KB

MD5
59745c63e1f631148daf982615af9923

SHA1
f299dbc36a4f7c1b44b99b05cf97140899f85aea

SHA256
a30520646c136aff9d230f1a8d93e072b5d9004fd8ec4053800618827cbedd75

SHA512
1f677856805688f0aa077c936705f5e9f26029a76c5e6fe8dbb0fbf03084c375b08b0342f0396818ec4039bf4055910159d69dc71b6a1658565e63706e89bf5b

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofilo_util.so

Filesize
18KB

MD5
9653071fdb42af2302aed293c1a9b06d

SHA1
e8edbaf0791123cb55e39454250e9f6010620eda

SHA256
fe5d65434225350317d072d66a6753406f8c89da5fa9c9ee32ea4ddfe9172301

SHA512
1a75c6fe772e2a7dcc51eab1bcb6a703f0c1f114b61f7765623f38e7ee2c591110621856ee83cbd850231ac9390845224a5f17cd63d8c57ca9cc0512aa83275f

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libprofiloextapi.so

Filesize
2KB

MD5
e5c09191ae8a6151a958d0003808801f

SHA1
6e49c81ddd45272b6ad69133c08c2253e1c44272

SHA256
a5a4436ec4931d758933b2efd07c11e010297639ddefe812e30bdc41d059c265

SHA512
400e2040717d9af07a8312563db4fe3816cb22fef0d795090e9a9ad2f7d58571a082fa581fe903930b3e296eefd8d0d55dc4251f007793564065f0133afe3d78

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libpytorch.so

Filesize
1.4MB

MD5
698a46ccada9c7fe29bbeda2b25055e8

SHA1
bc1ae712a0aae5f6d317c31f47f493d921a9071b

SHA256
2d08d174ad9f5e3690b9ea5087e2c7c67eba5ba04329d06cc14ae8d37ceeb7b5

SHA512
e273db963603bf65686cc963ba71769cf590c391e03a3dfcf7c850d286c2188eccdf64b460d37e5b6d3af2097478707b9e0461fb8d074fe7572561e2c59da0c5

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libstatic-webp.so

Filesize
316KB

MD5
50d9419191876d000916bb189ee7d966

SHA1
64df0c113113f3c608111c7a46a69ae92f5cb094

SHA256
4fd27128e1e6ea8c82357c6cc213e2d1b87d6e0e15a635b35e8ac5a496514ce6

SHA512
44b1a64162fb76ae829295847f9ec53da0a13e3d82932eaece0d38ede4e8975306353d8411b3952bdee263aa40a07487ce8d8df3aac2535c6555da19abd43b2a

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libtorch-code-gen.so

Filesize
2.3MB

MD5
af9e3dfa4a0b2f789f8124cd51d9b572

SHA1
56cc0f753052690516cd14525e0588420666005d

SHA256
633dfb6017129c91d60e3e1d465d70b3596cf2466445035e9c4aea7edaf77e2f

SHA512
99f38534c4728a146a025099e5bf873e8d2fd1ea18fe6931f9617caa2bd4c91f060051f45cd1c1ee1fdcfea3660c970694741da8cf70585f05643217aef2625d

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libvlc.so

Filesize
4KB

MD5
00b580f2cc695dd334c71c793793df85

SHA1
94039c6949ede7f177bad74bdd728e53142c9205

SHA256
3c8cbbc2744b37121c38ea93804f5a91d62cd11c3e8f3403a3f560d1e9f1cf72

SHA512
11aaa695de889f2a68e302a35affd76f13e5f3bae2a3adf4c8a3ca92d039e2e915b5d75c6cbdbbed1d08b0a7f8eeb505a5f75d0128b56ff8be59475c75a7a0f5

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libwhatsapp.so

Filesize
6.3MB

MD5
c5333ed84b816ee6c5855cc487ab16eb

SHA1
5d9994171fa77546253b20db209e67af31229def

SHA256
7c26a96ba4283f56ec37bfb07b619ad70d106ad1a50cd530fd90b24771c9676a

SHA512
3e93cbf3464c8d3c29ae12a7442d21abb4d98b244a8582a09652415a43523cf027c75f710fb82103a8989f6a67b72800f454383f6f4b9060e1617026ea6ad369

Download Submit
/data/data/com.gbwhatsapp/files/decompressed/libs.spo/libxplat_graphics_rdocsupport_rdocsupportAndroid.so

Filesize
2KB

MD5
b67df1844ce17df7f1651ff408024238

SHA1
6e2fba695aef80e71fd3c5c88ad8e0cbd3b9fb53

SHA256
ba5a38b948339cb7d6d30aefaf95226d20a687836db0546b4e76506731a4175f

SHA512
af00e14d1de17cfded4b497d76d532840665e88db84e173336b9ad56c822052843c54c15434b26d539b3072c5cdc8d51a80ac9dd401fe77b4604c7de0fbf4a66

Download Submit
/data/data/com.gbwhatsapp/lib-main/dso_deps

Filesize
272B

MD5
b2b736b09a6ea4bdb931d271db0d104c

SHA1
c306f0b5f5635d4c1c294286605d349313a8e279

SHA256
616d2044cc03cd13686a8237d7d1d03fe42b26c4964eace5c5a6d1f983df95fd

SHA512
9491bffb07f04ede13a84ad53d2e071112d3f4c1987cef1d246f881e98a867a5e4b6d2c2359d46ac8537a1e82bfbf1e4118d57092ebea43eb05ffcf17c66cac2

Download Submit
/data/data/com.gbwhatsapp/lib-main/dso_manifest

Filesize
5B

MD5
c06857e9ea338f3f3a24bb78f8fbdf6f

SHA1
c5a0a2529d2deb60fec041b4fbd722a2ebe31702

SHA256
957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

SHA512
29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

Download Submit
/data/data/com.gbwhatsapp/lib-main/dso_state

Filesize
1B

MD5
93b885adfe0da089cdf634904fd59f71

SHA1
5ba93c9db0cff93f52b521d7420e43f6eda2784f

SHA256
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

SHA512
b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

Download Submit
/data/data/com.gbwhatsapp/lib-main/dso_state

Filesize
1B

MD5
55a54008ad1ba589aa210d2629c1df41

SHA1
bf8b4530d8d246dd74ac53a13471bba17941dff7

SHA256
4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

SHA512
7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

Download Submit
/data/data/com.gbwhatsapp/no_backup/com.google.InstanceId.properties

Filesize
63B

MD5
63fbb173e9508b2f6419d90d2d9edc69

SHA1
4f3693a0204f173e96b9853fe7f90d21a84ebffb

SHA256
ec00b5bc1a51214c040226be0aecc98424076c8be63cbc308860a99ac1d24246

SHA512
c17be5ff8aa67687884c56612b317b7630377f897f0a9b25baad60b07a57296001cee3a0ebdd6a20414d96055905dc6838665f0a9eead04e63d9814a8fff473d

Download Submit