Analysis

  • max time kernel
    12s
  • max time network
    133s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    20-09-2024 03:10

General

  • Target

    OGWhatsAppProv20.85.apk

  • Size

    90.7MB

  • MD5

    cfb809f6b6583924ac3028f65fde7edd

  • SHA1

    6c722fd47a1bdbd2c4d4a25f6a6d047e26ad5582

  • SHA256

    e82485e1a587d5ab5004cefb214d3cc0635309816c505bb542b28dc9c2c6f27f

  • SHA512

    4f2a8131aae1b890e8d7900487d8fc1065b69b10f8e58f5a5a0c10c862237069705ec9e73d9c50f2bb27c7b49168d53687b54bd02e35b4232403f01265c76df6

  • SSDEEP

    1572864:dUxuK95aiftMn31Jo3qnZbcZT9fX1EgC3NADI24ehVGHfbn30HrF/OR:SuKmiFM31JgqJ0B1FC36I24dHfb3UZ/O

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.gbwhatsapp3
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks memory information
    PID:4361

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.gbwhatsapp3/databases/BTOR.DB-journal

    Filesize

    512B

    MD5

    a4fc08532c313b7c7a8d66cafec50a18

    SHA1

    4fbdddb7397680edc01704f5486c54310e0db182

    SHA256

    acbc3ed911adf7eb8982e3080203532375cfdf29e0f2df05d82a4365dbdf53eb

    SHA512

    37f2f768852c72e6efe017b78359b90e2fdd2646d8f582368c4efb61e244612be4f3acd08d3dd4534adb940a7809b0abe788c8e3a0f264b885e0288df93b7505

  • /data/data/com.gbwhatsapp3/databases/BTOR.DB-wal

    Filesize

    32KB

    MD5

    0624ee863b1f0137ff67ed1855f5c641

    SHA1

    930e0946a9fe53b6394e826edd5facceec9c06d8

    SHA256

    9272d6a0de6b121b3636cc433a990e251c6712fd6563c842ad3a5bc45e45da59

    SHA512

    6d541f6ec63383970cb425bb01113c599b3147340dd5a2609f4bf1cf77c9a7db1672d17706cf24968ef5e5d36782c34d18cb6072e30abdd8ecd4ffe10d4381f8

  • /data/data/com.gbwhatsapp3/databases/EHS.DB-journal

    Filesize

    512B

    MD5

    a277adca74c08df7f66eeb2d23e14c68

    SHA1

    bb2f66fa0cc2a4ad714a02cd3944e977dc89e402

    SHA256

    2856dd28f652c6f470cb8fd5d63b8999d10c6a7ff42155f31b921167394bdfc5

    SHA512

    4c439ccfadbc6a7b744ef6328e2ef21125008b1db96a21571ad23330daa69ce6218e7b9605c3082a8d2c4382471c396ae8c16bf3e0eb1f9e1ebaf5f64bb793a2

  • /data/data/com.gbwhatsapp3/databases/EHS.DB-wal

    Filesize

    32KB

    MD5

    a7ce49e40539a195281d217c98108d71

    SHA1

    ec76bf81c4909b663b383a9efad3ff1df68c2a5b

    SHA256

    ad782503d5304f41dc7cb01eb7b7f8b9002133bd072eec04bf942343824dc568

    SHA512

    fbdfd3fba6a620d41e32b97d8683f4fe8b65d54b1730563e408033c62cf55d7fef8e0da9556ca7774ea27a9b7a0adc5fb45d62b128bb65a0fbfeb8eb652fcfee

  • /data/data/com.gbwhatsapp3/databases/com.google.android.datatransport.events

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.gbwhatsapp3/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    1962837ff5f151627fda4618ad61812c

    SHA1

    ad07a3bc21f115e470e8c06938f7b44202ade80a

    SHA256

    8e17515dcfb428fb875ac910929d6908e87f501da4bf5b2422b77e99330ee878

    SHA512

    140e0b1afef722e7f2d0409719b554b174da3a7d7863867b3069a86edd383fa8b3b18e751adedb8b40427e78a37b8e1902b78899079ca568c2f4988feeb309ec

  • /data/data/com.gbwhatsapp3/databases/com.google.android.datatransport.events-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.gbwhatsapp3/databases/com.google.android.datatransport.events-wal

    Filesize

    68KB

    MD5

    cd6cc8e266961c2869de93d7861227cb

    SHA1

    8477c28061a72ad8b810c5ea1bee52acbd389715

    SHA256

    1965cd8fa5fb63c0aff5d58f8d3efc6bc6b7e86528077aa4eca8b3c69ffc1a36

    SHA512

    233a51cf593961e959c972fae355a1e1ecb8fe45d7be652e5ce4a7387c9b46382b44d87a4e59ff6cce4fe71d6f80bf774394bc7525e387414734e6ea7a5d4b32

  • /data/data/com.gbwhatsapp3/databases/wa.db-journal

    Filesize

    512B

    MD5

    ff14c2a866291502245519ccf1df70cc

    SHA1

    3c27a7ca537b0694496f4b779e14962abe994778

    SHA256

    b2effb253ec86ed00449d5c7be070df95b201a2cac01aceef18edcafab321a6a

    SHA512

    14eef085a1a247085adf1ed5a47826ce1de2102598c5a37f0c996786dee09854603894cf9e86e08653ed03be0d1f2efad35c25497df9258cf30b8a811a496dcf

  • /data/data/com.gbwhatsapp3/databases/wa.db-wal

    Filesize

    16KB

    MD5

    e8cbc028d5e6e249313d836ba74857b0

    SHA1

    de1508cd8e80f0e135f846cd897039b8faab50ac

    SHA256

    0bce70aa5dcdfba192cf006f5890d0addb08a068841cda94f6b08208f7992f00

    SHA512

    b521024e53d591fdac126e6f0ff52dd98648ce87244a3b6dc12ee5ba5e1fa79561caf254ac5ef3a2869d8ed2ebd8189d4dc1087fca878e38c71109045c9398e9

  • /data/data/com.gbwhatsapp3/files/Logs/whatsapp.log

    Filesize

    5KB

    MD5

    f1266cdb66c2427d01b88540ccb8a85b

    SHA1

    77cea036b43cf24429ebebdee9acc70913c76b77

    SHA256

    ecdd734aa6d093b4cbf4bc4f5e85613cc4961be829d61f088db01ca12e6028b8

    SHA512

    9ff66f69873ed60d24f7df0f8ea3e6989bee0c51dc799164a67d12a42d0b97df1dc3863c34e625e10eaf2aeb5ab333f0695e381980c7e711458cd140af31d7f5

  • /data/data/com.gbwhatsapp3/files/PersistedInstallation4982861485945119298tmp

    Filesize

    114B

    MD5

    25a66d36688373c30d1f11ce22dca2d8

    SHA1

    6435573e1c9325eca4f55a684413a795a65cbf40

    SHA256

    e67e52f5c0a0038ccf7102dab90db04b07802a011db678cc26b9e6c1f1c8e1f1

    SHA512

    12b0cc2dbc3bb43b9549dd76dacedd9e7a531651dac59c467b2c56daafa475307a1178aa2da509573a69c3caebc5213409bba274b2f1057de61a0c5af8e207e7

  • /data/data/com.gbwhatsapp3/files/PersistedInstallation8436367035742539450tmp

    Filesize

    90B

    MD5

    405e6c97a7cf3532d11b385b56100bfe

    SHA1

    e9b541aefaa069ca9481dcf578c1df7e01c12933

    SHA256

    8333853339874a15863b0db8f6d98461bcd73db47288b55b3d89c0858b492511

    SHA512

    ea8728524f5c6e19b6156686555de8282805d47c80338e27714a39cc1f97c92dc6243f5d95326a9f35c29bd4f8185b64f23398d5f9c3e4635b94cf550930e324

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/.superpack_version

    Filesize

    33B

    MD5

    205f2b0610748f67f0ebb53b1164ca4b

    SHA1

    59f7acdf9e285b969910c5bd9d6c61b487f29840

    SHA256

    bee52a4849e2ca9e3e98908f54d912a4e7af9a0155a136ea42cf2828e17aca70

    SHA512

    b964afe2bf1f9a2584f2fa0c2df19cdaf8bb18acc33ecae14cba2f24c2cfac623894272cd235f95da2cb87fb7ed7ac6664f4d45dbf9df61a58c6d9d9b43820b6

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libaom.so

    Filesize

    1.6MB

    MD5

    d9fff2670223df20f0f398578b562a46

    SHA1

    b92f9212db1cd6fccd856bced6edbe8db0e83bd1

    SHA256

    473ca56553ccfb1c4ece4c30d79561df0c40b9a6a41610c2e56424b84fa119bd

    SHA512

    b4bab034605bf985fbbcfc942d6e969acfdb47b9a8a4deacef961ef75a9ca5dcf7ae54cedd55ea8d4b691f05c0ba1650316912bcb5fbad8d88d329425cc0cddf

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libar-bundle1.so

    Filesize

    64KB

    MD5

    7f9d90334ab46243db280ca7e5fcb2e8

    SHA1

    295f7ee89e05b7f639dae7875d1e248dc0a3a149

    SHA256

    d2ae8c6a36864f8258cbcf8de5aaa8bd76fbf7a60c6604843a2e1b00bf726839

    SHA512

    280063f9f1ed3e775005e98afae337d3f13b287104f99b746d4f49fde0833e560df458e26d7d2c853a22792d18c810125ebe41b6e3d8c99629f5e9ba41a9e260

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libar-bundle2.so

    Filesize

    1.9MB

    MD5

    ec08e0b0bfbec66ce3e93953819ddc73

    SHA1

    be44591229f7a4d59fcd4c78cfa76b9ac5e2ca9c

    SHA256

    b9062f1fb22b01fd44e3b5c68576e91eccc030226df0f0968b51143c6c67fe0a

    SHA512

    8b10243180c3c89dc85106e0ea668a9786ced146d3033ff1eb6f9007489e693d234ab01bfeaea6739409dbc7f42917e278523b24093ff372278744d20d7ef139

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libar-bundle3.so

    Filesize

    1.4MB

    MD5

    7505f1ad3473c4dd45b325b411548481

    SHA1

    6991b67f0ec1777669a58e0da2234237fbe6cac4

    SHA256

    39b2b415d00b30adfbcab2e92704c908681ef57d7fae0d34771565e9515db6c6

    SHA512

    9cd9f2595271fba084ff8ca160e83f6bf774b0b10821e3834a98fa2d083816b93ed157355fbed6c7ff7b16312f0c6c0835036595c6937e2315f192b9407715e3

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libar-bundle4.so

    Filesize

    3.5MB

    MD5

    7f0362e37c310adb63beff7a4d32208c

    SHA1

    6fafe23f8bfd8eef0ffef3bbe4c2311938480d30

    SHA256

    80f28c99cc6d18b0370b71488a7638349b287a7c511a28240d5452e40c840a57

    SHA512

    a970e0bc248ce58a89d80fcaaea293d5756d2e89dcd00ab9f7f2d2f377cae46b67e9ef506cb1201eabeabdc9c638b572298e6f96fb97bc12f805393b4e01bc3b

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libar-bundle5.so

    Filesize

    10.0MB

    MD5

    6749ccfd7acc413377355e4e5a9ceb2b

    SHA1

    eb388379bb07a0e65fb2b993396078519721c981

    SHA256

    fd4eecbdd6836aabffe94addd1c5e3af9b27730eb04041037b3c1b2ce62d2a5c

    SHA512

    daf1f287f107ca814e57a47fb9b10106e43e704610f2310ae7a42f8216207864526bc43fcbc5c98208b78d2cff57ed178dab9d25cbf59f5f39e40515ace8585b

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libarcore_sdk_c.so

    Filesize

    45KB

    MD5

    5940c1d2856a8702ec87f6293f8c79cd

    SHA1

    fca9f187bc7e54a922d4aafa81d1b920164dc95d

    SHA256

    73a44799f1eb0dfd6d0569e630b815d7c1ed9544194a457e98a679354c35c73c

    SHA512

    8c4f9d922432f5888f3df03ede9c8cd4518e70887eb868fb8831ecea203d53a60501f2e4c842b16f1fb52536935c946faffbcd276df5ef24b88f1c150198f757

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libc++_shared.so

    Filesize

    595KB

    MD5

    5609469cc0f3b31f5ceca38827b01a2a

    SHA1

    ab3628eef8db643d910d0c3a88a54b590caa0c50

    SHA256

    f3e5f8a568704079033d05a98c7c7e4f95fe057220953111857ed8d7e4180b34

    SHA512

    4bdcf8c648dfa765a09efbda7cb1df286d9a57c1d3106a93bfeb7adbdc7e8aea03965df8bac804157b2216820c4de7912a626b412811a058969ae4247eb4f938

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libcurve25519.so

    Filesize

    206KB

    MD5

    c6117232e238c2cf627488d90f64d459

    SHA1

    dab62167235f4ee32bc1e9a7b8c2e3b840c5be1b

    SHA256

    e1c8d6527a1fb271e709bb30997f29422aa3774d0433afbf68672a05d752b85c

    SHA512

    d52da5df0c263d608170dffa1baf7f2fc8839f570a54f243ad4f787c7c83eacb27b6a89f02db3860b71504d4c0e17b9023fa3fd26590c7c1e5ffa6c7b44fdbe2

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libfb.so

    Filesize

    210KB

    MD5

    0bcefb3c285a02bfe49dc7aab8c2b7f1

    SHA1

    5f3e056ce9ddf13e1feca34f0b1d56eec4814b53

    SHA256

    790f5c1e7906fd8ca6bdbf54849a3b673a6f335689a2d01cb1d233f437ff2af7

    SHA512

    7222fa58564167d1c6a7ae540a37450a29ea9a6325a75ee5dafd6eb46076ba4651e6d4d71de34c3d93264105c83a226cc733db03170649b7a450c17a600d1ea0

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libfbjni.so

    Filesize

    412KB

    MD5

    c13819a6b4982672ed94b093d0a27fd2

    SHA1

    c73f6459cabbc7934157e7b02ff8267fd11b5ca9

    SHA256

    8390428d26d942bcbb104af218b2da334314789dcb304ec5a0477e371901218e

    SHA512

    0bfc4334eb0cb378ada85740f37da24c7d333f4433f398e0e24d7a06148f7abc00b94e7545ee2cecff5a23a52a49cbe1b3d605c74256751f262e51b7c5756bde

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libfbjni_kt.so

    Filesize

    20KB

    MD5

    e4c9bba8d079006293b9f98590bc1aab

    SHA1

    d2cf3e553f79b0c0c2ba2e7076630398900d5589

    SHA256

    9bf298689ccc3643836466b8afa92280a8d3015f04076b212851101b7d3f199a

    SHA512

    c63f47aad250927ee734258e2ffa1b30b525434299fc8880658329af00d892fe9f12386ef242938520738107a5db7bb2dc07f206f3048be9652172cff64a976f

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libfbsofterror.so

    Filesize

    7KB

    MD5

    b8f80cea0f1958d6259d74041a8bcfe5

    SHA1

    c53d74b3d6b01ca2461fb4f0d86db4e44088f6d8

    SHA256

    86085dae709f3729975878b9cdcfe016cb8eefe4849dc7388b509c5806c97119

    SHA512

    2e7398e2a6007a9d95f7594ae199a9ef3087982d8fa5f4e3b40d0b6662ba5a7e3fa1f7980bf60407ab6a46f69b3cefbfdea490bfe380e8242230a7682a643eb1

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libflexlayout.so

    Filesize

    31KB

    MD5

    b41a5c060787db6a618e1531f75b923d

    SHA1

    72cfddb6bc2b65bb98567088316231ba54ccb9fb

    SHA256

    100fd6ff6f8bab82908c8916d6ec0fd2f4fbd654f5a3258a2bd66ad61a3435eb

    SHA512

    4608a1a7fa28050df775cdce19362f3799fa7e39303a535ac1c09b82d1382edf2f58c3620ce2c91605675536a7f932534b093e878894d6842460bcdb1aae26cb

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libgifimage.so

    Filesize

    26KB

    MD5

    96d82f4bb33bfb97d238dbd65bb53858

    SHA1

    438b86db912c040210a248bd81ea733170822805

    SHA256

    ad1815c67b94387897968f57a73967f147bd457fa6d500203f47cab82a16a2f4

    SHA512

    7b42e272d1f142de869311dc9b3f3988de98808770e5baafb4964091915775effe3ff5353eb54e6683fc491ef8ffe818c1721b09a33c2a9905cfa1b11383e4a9

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libglog.so

    Filesize

    152KB

    MD5

    afa65579ebed1963b2a1df04b606dc02

    SHA1

    afb3c249c4570f96fa09c5e323baab0447f380e2

    SHA256

    5fe4717871966f5dad1d642f9608f15cd40ecff3045d6285ce80b70f21bc870b

    SHA512

    7fcfffe3cb08cc9bc7b07f49c1f7d53e38b41581c0551b93b8d70b2af93ac366d99ae6efe2e22d40cd3b11196aef86b2ba719adcb5dddae7a4ed7cc014aedb9f

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libgraphicsengine-arengineservices-whatsappservicehost-native.so

    Filesize

    2.9MB

    MD5

    3e1fd4d3094753f8b4bc74d82042b827

    SHA1

    7df3b110b9e88bf4d67cf5676f3ed631924b76c1

    SHA256

    d5c69891d0d8d8423f71ad790025771780854dba6926842abaeed2b30326fd83

    SHA512

    23a7e68ffdae2114257637002f69b57b4e187db5f89f82bf518fe58d402ca97dc56d90d2405b84d9ca1fb6385aee34ac78edc5209e8f2350171cc844cc7020b2

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libhiddenapis2.so

    Filesize

    124KB

    MD5

    5b56fa3230b6a49e59250ca5c58721ef

    SHA1

    2252daac0ff803cd48722cdb1b3e8423b6507180

    SHA256

    b4eb977598790a3b2c979761db13b116b398354377fcc3d699ef30e527480631

    SHA512

    a2916e09bbda57d01c6d616522d714be34eb1b25ba9eee1259035efabe85384b15989e199245bd097cd8d547fee143338572a923dc322fa3e2762ef580f44b46

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libminscompiler-jni.so

    Filesize

    43KB

    MD5

    b9fd03656152f304eea920d106a7e0e5

    SHA1

    eae731a95552036275d83bb639b14be8b2669bdf

    SHA256

    85961721ea7eca6f5d8413f4ecd1a3ba80972bacd29b4f96efc7edac12bca3eb

    SHA512

    dd2c83c52094151db999ff8abea5bf3968732a9af8461771b150ed55f0edb3f0bd0bda14af8e12a02dc4665e55f55a7c3132e52b54766a9f50145a43d934c9f4

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo.so

    Filesize

    70KB

    MD5

    d3076f529c7daecb9ce0cd0a349f277a

    SHA1

    9ac8c29468c93b8c9769be5d426338e7e03c00a5

    SHA256

    03787b8cf4aa571cc39039ac738ea60ade4f600a3816d50cae2ee64176d56305

    SHA512

    5445caccbd72b7df0b0b71f80c86994df300d4b20fe04947cc8c029c47eadde212f4d4766a4f013e0b4bccd309388a9931daebce2dd7490fb8678c1ceccd91ee

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo_atrace.so

    Filesize

    20KB

    MD5

    cba14ae588a50a51a71a708d94223430

    SHA1

    94079f9a6a8b7c871fdaf724f1d5a424c8446d54

    SHA256

    21d9e7a1a192c10d89a110e0950b121b931649b7e676d02864eb6eaa99b2f057

    SHA512

    335b2968b3cbd2bb36b61f1234d0f8dfd971f7e5bc386cff5d29ab872aa4da8dd3192717df6ed47390df038fdf24d492cc14d5d8395a56ffc9dcf8b281b87d9c

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo_build.so

    Filesize

    3KB

    MD5

    34ecbfb7f64b1eb828f710a8a0c5f8a4

    SHA1

    e3563bb92409d837537a62f981a5d2866b9d5c84

    SHA256

    fee251137ea0db03b6e7524ed194088c47910e4b05b05897371df4cc5cfded1a

    SHA512

    b6e07549d805eb87f7bfd281d621c430f011438317f93044007a5a4716208f4cbaef660df473a859905c302bfc6ada389d6e7552d4da905fc9e3d375c9a4c6f2

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo_counters.so

    Filesize

    30KB

    MD5

    39c56f27593165b17aed015baa9833c6

    SHA1

    c8e85b0e17bf39e905d3311ddc296429721caff7

    SHA256

    131948869bcb693511cd487ff87dd3e5fcd1cfdb69c3dc8767a9d89a1642c78a

    SHA512

    7512136c1ad282a2d8a87cc5f797758cc4c0008c25f3a26bc07f9eaacfbf90ab5a4dcec690eaa4d891fca512e569fc4b76c7350fdb614a4cfd659a7e8625eac4

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo_fb.so

    Filesize

    3KB

    MD5

    e11367038b25e60796022892729ed18e

    SHA1

    ca3c1dd4c335e20f157f7e098930eee8215b548b

    SHA256

    f5ebe5b7ad257fa47b40bd9fe2c15c36df2a0ef6d566c782ed9b942670bf0d46

    SHA512

    daaeb60ce1b3229e0e089bd2794e2e10b3780660f145bdc8388a330b034a4d717887b634e022540f1baee8e84949127d6867dbbe913f5b0eb17ebb9b399ea612

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo_fmt.so

    Filesize

    2KB

    MD5

    2fe063abcc33f1178e34d5a40086326f

    SHA1

    cfb5a3c1948100dadad247718e809da04eb33993

    SHA256

    ba55d9c0bb946278098a279a1b4827bca80b7bbc9f07d84d98fbf83b8a797ed0

    SHA512

    24255344ce429e8d5f0446a8e9eebc671ca6c434190d5d171f191b6d38574c289cfb941bac23350b734e14884f70bac8ec46afde4290e2d7d8ca996a1932cf14

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo_jmulti_buffer_logger.so

    Filesize

    14KB

    MD5

    dea5fc9ab05864c89c7b9e50410d2664

    SHA1

    7e3568e2acc4b31ad7706fc38008df055769aff9

    SHA256

    87e5ee6c5e3c3f18b612a4bb85ba70a68a2900243b24c4f4f92912ed18d3c9f4

    SHA512

    3fa15be9440a9471a702d9190fb90cd5b70873a3c806b9ae9e0d42c2f2747bec684f82a1f0fc11610ac1a9aea839e88d7e757783bae66911be32d106e9a264e5

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo_linker.so

    Filesize

    15KB

    MD5

    95cd7e221b423d8f5e2e297472c83dc4

    SHA1

    df0b2abd1bab3caa4dfd713a4cb772285032a2c4

    SHA256

    3eb9bae2df1c67c0284d5a0409483e05c7285490e8d4b358439481dd8f303458

    SHA512

    9d12385c24d486934b5072bffa01e262c698dfc0b5fe4f84b3259675ff4028511fd3b73934e796954c00edcf961f61e4e4e80829a8c4daa261bb52ceb57c478a

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo_logger.so

    Filesize

    11KB

    MD5

    e3da014656068088abdcbed9c909edfd

    SHA1

    48e0c270bb89cdef233a171c41b1a2319696b389

    SHA256

    c6f9ebfb0a56d0b4c7a8e902979267e450171908dd6ffd301ab471d5d02abf49

    SHA512

    5df76df9b4caa4d1505f14ba00dafe2a730f0b37992c272e39f5c53b5505f53987e58433e4a6a0def4afc03b31758371841886daa7e33b7a433fce321e204fc6

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo_mmapbuf.so

    Filesize

    19KB

    MD5

    962aa5577822ac7dd0b7f6b774ceaa82

    SHA1

    ff0a10b89cbada2d7eceea406d1d54541437318b

    SHA256

    7488d68d5faedc49e4910c68b61af220e76fc649cf246715946446bc38033623

    SHA512

    eed54c2b31382c8b27048a2e30b4436e7466694062931cadbbaf78427dd4702cf6fa3df698c2746560e4f4ee4254c5b2eff9eefa449847c63329108aa915e7d8

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo_mmapbuf_buffer.so

    Filesize

    8KB

    MD5

    93efa0b57d0a608a99a06c2e487f9e69

    SHA1

    f597cb533c8c2d9564b886586109c7b237dd1e43

    SHA256

    b1d29ff3cf332bd5b33717943985f37b40e62c5f2e756969982eb53ac10c2611

    SHA512

    3ff6fefb85d275022a70d6e29678fc45b6ff99475240ff49132e337f176e98d4edeb15f3bcb470c25554b970f17cabe02623c53aa108d5d1f1ec5f1bdc3cbc94

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo_mmapbuf_buffer_jni.so

    Filesize

    11KB

    MD5

    396899cff1e9ef46dc1ffce853051bf7

    SHA1

    a5e9eea3cf878d8c0d04f01f31338f225f94a797

    SHA256

    782be1a5c070fdd2d5e0171c107dfd1f14e0fe240cc6591c4cdcfd2eff40ac50

    SHA512

    80c02e4565f61f88ec86c12d1e94ecca32d45e48ce18b26a92c7436e0898d69f0562944e7bbe2ad89113d893d8173e2c00bf3520ca2408fac766228f5105d62e

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo_multi_buffer_logger.so

    Filesize

    7KB

    MD5

    e4f82f90d8eea150eec751f9d0cd0a8b

    SHA1

    050b2a2424cac5100bc99968858029ed1427d3f4

    SHA256

    5b365219161471be3ef155fc20f2d0bffcc239225eeb5ff27dc4d6663aa87ae0

    SHA512

    948477443c16c48132e9d08f291a55f7a0d285654f8f3393b915dcfd4b6fedb261ecc43728051c571db68a8ed85d12fe21f4339252eb76f4044177d52223088c

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo_plthooks.so

    Filesize

    18KB

    MD5

    d2793c0167f621b37a599bba572756a3

    SHA1

    be9206bd407ffb9e1a707af1ce46422491c6d681

    SHA256

    4d6ecff951dfc617b16ce11328d0db8d64667f955e15506e5ee953e9a96ad4ec

    SHA512

    11a0c8471169e721f1d2e4cff99198300b75678608c1852f1ae69d0873afc193dae64d1f4a37d08da8b7ce979401cb9b50f05d400bdb401d646dd6370c1e499d

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo_sigmux.so

    Filesize

    5KB

    MD5

    62bced8e7bfbf62b404ff43c8d518c7b

    SHA1

    c5afb8225f2605b3ef2923dd25d2f757c521126b

    SHA256

    f63740874ef8e1ce4f7de0b42c7b28165b50a30361b436d89ad6743e6d90413e

    SHA512

    7a8beca1a1d765176f9d74bdb486f8f8a3a6c4c9df1a4218f5335c6405672fa9cc8f7527174993265a5c237e7270c5751640468ff5edfe468b23c57ac2d12e28

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo_stacktrace.so

    Filesize

    71KB

    MD5

    3fcf26a7b42477841136bfa4bd3ce83e

    SHA1

    9b09292e54fe973e05ee055cc10f917a60854a0e

    SHA256

    a39b9f0de8d314fef9026be37a3f6cc7ad12634c0cdd08e498b0f96661b91927

    SHA512

    7f61f13bc081efa770e0ef76662853d09518be073735d614b0297e374e96afe85f062b70923fac697d51244726f92caae921b96de948a40f547eecdb22266ca0

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo_systemcounters.so

    Filesize

    29KB

    MD5

    fcdefa08b6c8be3221adeefd96938c92

    SHA1

    8e3206466243d06493096716309fb1c88749c640

    SHA256

    b340a464a9be8a543b122edaac190a1e2ee83a0399c6318869eebbc8bc2be2bf

    SHA512

    695774ec0b2c7eb214d47138d406783f5308f81a00fac7597bc767d82300cc4890d1ed58cb6fb1378539dcc27250fcd8281de2e0e2238fc4c67ea4a3aeb0d80d

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo_threadmetadata.so

    Filesize

    9KB

    MD5

    59745c63e1f631148daf982615af9923

    SHA1

    f299dbc36a4f7c1b44b99b05cf97140899f85aea

    SHA256

    a30520646c136aff9d230f1a8d93e072b5d9004fd8ec4053800618827cbedd75

    SHA512

    1f677856805688f0aa077c936705f5e9f26029a76c5e6fe8dbb0fbf03084c375b08b0342f0396818ec4039bf4055910159d69dc71b6a1658565e63706e89bf5b

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofilo_util.so

    Filesize

    18KB

    MD5

    9653071fdb42af2302aed293c1a9b06d

    SHA1

    e8edbaf0791123cb55e39454250e9f6010620eda

    SHA256

    fe5d65434225350317d072d66a6753406f8c89da5fa9c9ee32ea4ddfe9172301

    SHA512

    1a75c6fe772e2a7dcc51eab1bcb6a703f0c1f114b61f7765623f38e7ee2c591110621856ee83cbd850231ac9390845224a5f17cd63d8c57ca9cc0512aa83275f

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libprofiloextapi.so

    Filesize

    2KB

    MD5

    e5c09191ae8a6151a958d0003808801f

    SHA1

    6e49c81ddd45272b6ad69133c08c2253e1c44272

    SHA256

    a5a4436ec4931d758933b2efd07c11e010297639ddefe812e30bdc41d059c265

    SHA512

    400e2040717d9af07a8312563db4fe3816cb22fef0d795090e9a9ad2f7d58571a082fa581fe903930b3e296eefd8d0d55dc4251f007793564065f0133afe3d78

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libpytorch.so

    Filesize

    1.4MB

    MD5

    4feb8c59e5609e2ba46f24ac89c98df7

    SHA1

    5e000a6b92bd10d6e00dbd7ede5f2347948b92c3

    SHA256

    da1182a4724c6bead966b3006061c5987658f690ca00ca7ac20a4aa0ce9be73e

    SHA512

    0d87228f3f522f74f05a9993c54e611159ab61cc08506cb4b34a160456af23631eb0cd628c93d71ec31e00afb7b8a2bf2d5464e4c74fb23973413216bedc335e

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libstatic-webp.so

    Filesize

    316KB

    MD5

    1e409abd91e87af8ac1f1dd92f6c6728

    SHA1

    e377c6475afbad5c9c153cd84a043f19363e261b

    SHA256

    9bd80e789d9530e1de4c9623789b4dbeec0fb2d06d7b042931ee3b0dd321660f

    SHA512

    85858b5808100e0b18143cce48809631fb35b29956962cf7c0d31acfab42d7bcc9daecedaa85edfc4d7a3eb879e391d64089bc1c91b7ce508e447f7a7de463ff

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libtorch-code-gen.so

    Filesize

    2.4MB

    MD5

    7913f187df15593e4742d97ff1bcd17a

    SHA1

    d39efea873b6ee28f1d8958c1462245b361cd6f2

    SHA256

    53a3758e9194ae233fc6f945bb3e1a598539bdcb791d6a8a1ba695076cb39ec6

    SHA512

    59b2656075c2048a1ddb96b1cb833541dfd472a65a14f88693453c69aa0b13aa45d17d9d541f2bf040d2a3b892adfcbc946816b0816307ab277104a66637787a

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libvlc.so

    Filesize

    5KB

    MD5

    5154d0575089f20cafd3a8bc1e58a8db

    SHA1

    ccc4c664dae6cf0aeb4206134e71548774be9e19

    SHA256

    0af2723546e9e51f9aec3f7c05d1f5b4f914e5080dc304cfe569bd94161f05f4

    SHA512

    a07774d745a52a7db6815dd6f5fc51671310a6bf5c4adf452645e319c82afb110482a5f5700fc134cfedb4aa6a7b8defed31453e000a6702c23a2beb73cd04ce

  • /data/data/com.gbwhatsapp3/files/decompressed/libs.spo/libwhatsapp.so

    Filesize

    12.8MB

    MD5

    dd58d5c805a6209677da4880ac965df6

    SHA1

    c0910f2868db59a79b524538daaff5e0fa7992b1

    SHA256

    bc7d2c8995714861d12cfef5720996b7a0469a5f73b4c5d118837fbab6d1a83f

    SHA512

    f6d017c6f242f49274c8822dcdea2a7791bb1d7b69930b7318990a9d9ac29abc61c7b521247640559ad5955c181b0ba0ad731a26147a2ec62d1b75358f6c5ae1

  • /data/data/com.gbwhatsapp3/lib-main/dso_deps

    Filesize

    276B

    MD5

    62b2faa8b68bb100e464dd2723d20264

    SHA1

    956202d95c58dbebc132a90b8da84c88989b45da

    SHA256

    9c1cd51fce7bc0330663d7d37e5078e9b7e847e9d0215fd93194b3d9dcc61221

    SHA512

    f9dc5f49973637f24762006f8b25c17d897ba4b7f38194e52bf978c7c1ba92ea59ba5fea40e13d46f4127d0aa75e4f9882b842cd772cc23af49b92b82673f136

  • /data/data/com.gbwhatsapp3/lib-main/dso_manifest

    Filesize

    5B

    MD5

    c06857e9ea338f3f3a24bb78f8fbdf6f

    SHA1

    c5a0a2529d2deb60fec041b4fbd722a2ebe31702

    SHA256

    957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

    SHA512

    29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

  • /data/data/com.gbwhatsapp3/lib-main/dso_state

    Filesize

    1B

    MD5

    93b885adfe0da089cdf634904fd59f71

    SHA1

    5ba93c9db0cff93f52b521d7420e43f6eda2784f

    SHA256

    6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

    SHA512

    b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

  • /data/data/com.gbwhatsapp3/lib-main/dso_state

    Filesize

    1B

    MD5

    55a54008ad1ba589aa210d2629c1df41

    SHA1

    bf8b4530d8d246dd74ac53a13471bba17941dff7

    SHA256

    4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

    SHA512

    7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339