Analysis

  • max time kernel
    25s
  • max time network
    36s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    29-09-2024 20:55

General

  • Target

    MBWhatsApp_1.4.1_by_stefanoYG.apk

  • Size

    84.5MB

  • MD5

    55bdfa0ec855faa3a9fed582465c4388

  • SHA1

    3b7fcd78cc8a1c9e06057d6534f218c320da04a2

  • SHA256

    7445259625fbd39caa72958eb6750d2b4f658b4cdac4dbef56bcfe0b05a07af7

  • SHA512

    d6bca86140dde35b189a62056153087927b0af6c562f9eaf334f918bc0c5030ea6924b506677829144452e0d34bc62ee26ddcf44858f1da2593a5e45e6b6ef65

  • SSDEEP

    1572864:strEdbcmfQc20Q3ZDI24ehVGHfbq4znXc/B46PuK27NftACK:CEdomocQ3ZDI24dHfbq4znXURPuK2zg

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.mbwhatsapp
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4272

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.mbwhatsapp/databases/BTOR.DB

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.mbwhatsapp/databases/BTOR.DB-journal

    Filesize

    512B

    MD5

    15101781e57eb1939545388c548e0331

    SHA1

    8ecf663f5a94d5ad49517b324ca840c9a0bda7f0

    SHA256

    18bb621d2ed408ece5dc857be92e97e022538841bb3d52bc30ea542022da9e27

    SHA512

    592c1ae840411594557d6f6682bff458b78dd8fcd56b0c6ac7e2076c6e435331d7da80d1b7aeea4dafb02ddd4c5f18ce2c0e4bcba9186ae7c3afabd2f307d72d

  • /data/data/com.mbwhatsapp/databases/BTOR.DB-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.mbwhatsapp/databases/BTOR.DB-wal

    Filesize

    32KB

    MD5

    eb8586ad512f12839c4f4e5c4aa56556

    SHA1

    7382a0a4d9c1afd090b3be35c8a5f0ccfd318432

    SHA256

    553fbee8168e104d8dc6078a0a93b29dfe0b829f4bde2943e3ab6e9893ef61fa

    SHA512

    dc95fafe46aaf976b3ef227ec4761a4953e278feb393ca995420480ebde739b61a19547916d82d2ab59a3b14cd5e5597629ace7bf1502d61d1ab08eb3580b4c5

  • /data/data/com.mbwhatsapp/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    53fa60c02898021dba33a6320366c188

    SHA1

    678d4bcb7b89f90771bfdcd5c5078b5a07b8a6f9

    SHA256

    39ebd38d31ae66d56805fdfd91d582b043446e3f002e2cb407f54c2d0090b660

    SHA512

    ed666f22b3210041d38d6f1f08f6e12082bef5e293b0ad2d95c0a7d847f3594088a2eaf00d53026d4afc54bc83691649601145ecd14fc642c68551a586b9cfb3

  • /data/data/com.mbwhatsapp/databases/com.google.android.datatransport.events-wal

    Filesize

    68KB

    MD5

    e4650c048c4f8fc699eda52fe4052245

    SHA1

    db133c3577d4986d0c0191717e0592e91be0ee39

    SHA256

    4127d43aa93332a0b42ecc705d395ddf0188e46193b857696c864e5c3042ac47

    SHA512

    89397f8d40750a7e1879916c87784e14d445cf19065b1e2096cb3ef2a2116f5419e8833fdf97d0a1eef81e3588481ffd2d412561aa9a232f19a549838bebd434

  • /data/data/com.mbwhatsapp/databases/sync.db-journal

    Filesize

    512B

    MD5

    25628a423c5384a3657f04c21da3a69a

    SHA1

    bc984758773b70553ca93b7f2bc5c511b2947963

    SHA256

    639608babd8767b6f3d4feeb68f6a17d593a6ec3c883946d93065c1b3ef49ea5

    SHA512

    9d5c5de2c20e31862b8aa334b2b36cb499011d9a22537ecc046057bb4a057d2762b91a4d97f0bc92a4f2a719bcb15cae4785b471a12e5071bcc3b5c6862fcf95

  • /data/data/com.mbwhatsapp/databases/sync.db-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.mbwhatsapp/databases/sync.db-wal

    Filesize

    16KB

    MD5

    2b8d68d4460c37b4265981ffeb365831

    SHA1

    5247063f782509f418a42963455ff7f73673f9b7

    SHA256

    c2921d01a1c13838019610f1551b75d7fe54eab1da8d6dec5488e8b910988991

    SHA512

    0fd75db94e53379a8db6e1dc69518eed022707b738096c9aaef44b42ea5154dce2329b6dd69f17cd9ad3ee14f8a9c6f24af4a0036359753b74d5994df054e759

  • /data/data/com.mbwhatsapp/databases/sync.db-wal

    Filesize

    128KB

    MD5

    3a1a1c705431d36735e9bd1f2213e01b

    SHA1

    39d2f5d34dde32d9a2463f89694c464e3c1c410e

    SHA256

    7606f0d8ad88920628ccc46f10548a4533ef0fa8de68a39f184d77441a853e54

    SHA512

    295f9283257c85b10316d994181acba669c1bbe77597997514b59fe37db97196ee2d5de1da6a61078cd72ec91379f9d2ab1be4ee465a9b6e6d1221d4975e90fa

  • /data/data/com.mbwhatsapp/databases/wa.db

    Filesize

    412KB

    MD5

    f4f822a0596489b6a647a84f4090de1b

    SHA1

    759d8fc7848e58f0571fc36b3d5f861fcbe24732

    SHA256

    262748f1e87c20d7813ab656dc253e82f8b311468295c90adb850334822f0b53

    SHA512

    43ff814be602b88ef1b297a0a76d5d95b0519a70b314732ff76db4d63876d06b316c75f5f6ae88b004027d5967e0c797476b47a0b4343fe5dc328cf4963fd983

  • /data/data/com.mbwhatsapp/databases/wa.db-journal

    Filesize

    512B

    MD5

    d43017062d9f78b0fbd2c4fdf8693ffc

    SHA1

    b7692c40f4093767685f3de795b1451d3e0c581c

    SHA256

    a743707c7c6de9f5abd2bd7a9f387cd9342a7865e18c7f9b1d149152859a90e1

    SHA512

    229f9affcf99424e37c806a7e952a5f768caf3ca0f76d8f107ef97943669da27c29f95521f76251af13a55b94c56109c2c8761a433b5d275842d4149f75aa8ff

  • /data/data/com.mbwhatsapp/databases/wa.db-wal

    Filesize

    16KB

    MD5

    7232f3c209a03830dc50137d1f5ad5f6

    SHA1

    cc95f55cd39f257e96cd84545ef8dc5b3e128d01

    SHA256

    ac36907689add920c7849b4a2d1870c3f586c0007d1dacaee99180d091167157

    SHA512

    7fc70017679c326f74b329973c56c76bbe82cec4b69937f262a23a4c83eb4d39ba9a982db76bd4926720adf340e8e91f86efa6186d8141a22a56a14e22bb1356

  • /data/data/com.mbwhatsapp/databases/wa.db-wal

    Filesize

    426KB

    MD5

    746b4c984b4a5e8a807ed1a9adf8ff3c

    SHA1

    691a70d4b422367f2bb73b544778faa57cb6238e

    SHA256

    aba30b6eeb6c0751c4326d4e9a24634166976c3053ab3dde90636700994d8b05

    SHA512

    e2b62b42a2ab91d88659b330e95f447b4dfb5fe8578d8cfd6f6a2b62531bdf0e4ca3ed0aff3308bf83cf3fc41b59a0db3a13f36420333f7abfc1e2f7cfa89882

  • /data/data/com.mbwhatsapp/files/Logs/whatsapp.log

    Filesize

    13KB

    MD5

    1ee6f6cfa6cb58f0753efd66018be9a9

    SHA1

    33d6dd02779dfc0d037f25561266d3b85c2af865

    SHA256

    7d367c1e6ae5d7b7d8e177c78a55b2d786628085e1a29ce53eae1521de738f3f

    SHA512

    d75cd825ef36e5aea65f008a0b8481b5c6d655a29dd13b08e5a786ef74eb74af84fcf8be5df434d8fca1ae3a847ff05f6e9f0ee114459ab8e033b1c4bed1fb46

  • /data/data/com.mbwhatsapp/files/PersistedInstallation2019975423749870763tmp

    Filesize

    114B

    MD5

    3eda095be255741e4b3795d1f8b7452d

    SHA1

    b629fa3ecf0ef2654b492e4277f8d87e97fb788f

    SHA256

    46a7d9cbea8c3fbbfe98897258f72dbad92eba3066855d98c65f9adf79b31f28

    SHA512

    8678514f73b8ab59a7b722c1c9da4e57d6d42d5882b8cd2507f4ed25a6f92fc01a26691e80ad28198751cec430332f56b53e5a538279c052211ac1cdade65183

  • /data/data/com.mbwhatsapp/files/PersistedInstallation7977605570849641579tmp

    Filesize

    90B

    MD5

    5966de5899104b6c64a1de00f72ecc17

    SHA1

    a4093b3608a731cc186f60b4de3b7fdf6903d36d

    SHA256

    4c802c25b4561a1947df0ec8abb4cc5379ea2992d3a04f1ed4f28ad6d52af9bd

    SHA512

    fa610442426ea1570c5a0e8564ffc31d817d3974b61a4f5c94ebcada525b6505a0378a0fe25f6c8dbd3dbbfcb447d1ea10d4247d69d3c89688c4f21673fe8ca5

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/.superpack_version

    Filesize

    33B

    MD5

    8442f3d6ad11f7bb55d6681c2ac13c50

    SHA1

    e11df1843e75e9cf4a0978584707c15fdaa1e1c2

    SHA256

    3a3da534181cab2781da02910eaffb5eee8f7f33e96c29c7fff2ef4daf4917ed

    SHA512

    fab78fd55891336dbe68f32fc4169b1220efc3d4f38487c352f20f10d37b75af3c469d7b6d1f15664de2a6f266770237e3c180b22bac34aa021a69c90a4964bb

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libaom.so

    Filesize

    1.6MB

    MD5

    d9fff2670223df20f0f398578b562a46

    SHA1

    b92f9212db1cd6fccd856bced6edbe8db0e83bd1

    SHA256

    473ca56553ccfb1c4ece4c30d79561df0c40b9a6a41610c2e56424b84fa119bd

    SHA512

    b4bab034605bf985fbbcfc942d6e969acfdb47b9a8a4deacef961ef75a9ca5dcf7ae54cedd55ea8d4b691f05c0ba1650316912bcb5fbad8d88d329425cc0cddf

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libar-bundle1.so

    Filesize

    64KB

    MD5

    7f9d90334ab46243db280ca7e5fcb2e8

    SHA1

    295f7ee89e05b7f639dae7875d1e248dc0a3a149

    SHA256

    d2ae8c6a36864f8258cbcf8de5aaa8bd76fbf7a60c6604843a2e1b00bf726839

    SHA512

    280063f9f1ed3e775005e98afae337d3f13b287104f99b746d4f49fde0833e560df458e26d7d2c853a22792d18c810125ebe41b6e3d8c99629f5e9ba41a9e260

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libar-bundle2.so

    Filesize

    1.9MB

    MD5

    ec08e0b0bfbec66ce3e93953819ddc73

    SHA1

    be44591229f7a4d59fcd4c78cfa76b9ac5e2ca9c

    SHA256

    b9062f1fb22b01fd44e3b5c68576e91eccc030226df0f0968b51143c6c67fe0a

    SHA512

    8b10243180c3c89dc85106e0ea668a9786ced146d3033ff1eb6f9007489e693d234ab01bfeaea6739409dbc7f42917e278523b24093ff372278744d20d7ef139

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libar-bundle3.so

    Filesize

    1.4MB

    MD5

    7505f1ad3473c4dd45b325b411548481

    SHA1

    6991b67f0ec1777669a58e0da2234237fbe6cac4

    SHA256

    39b2b415d00b30adfbcab2e92704c908681ef57d7fae0d34771565e9515db6c6

    SHA512

    9cd9f2595271fba084ff8ca160e83f6bf774b0b10821e3834a98fa2d083816b93ed157355fbed6c7ff7b16312f0c6c0835036595c6937e2315f192b9407715e3

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libar-bundle4.so

    Filesize

    3.5MB

    MD5

    7f0362e37c310adb63beff7a4d32208c

    SHA1

    6fafe23f8bfd8eef0ffef3bbe4c2311938480d30

    SHA256

    80f28c99cc6d18b0370b71488a7638349b287a7c511a28240d5452e40c840a57

    SHA512

    a970e0bc248ce58a89d80fcaaea293d5756d2e89dcd00ab9f7f2d2f377cae46b67e9ef506cb1201eabeabdc9c638b572298e6f96fb97bc12f805393b4e01bc3b

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libar-bundle5.so

    Filesize

    10.0MB

    MD5

    6749ccfd7acc413377355e4e5a9ceb2b

    SHA1

    eb388379bb07a0e65fb2b993396078519721c981

    SHA256

    fd4eecbdd6836aabffe94addd1c5e3af9b27730eb04041037b3c1b2ce62d2a5c

    SHA512

    daf1f287f107ca814e57a47fb9b10106e43e704610f2310ae7a42f8216207864526bc43fcbc5c98208b78d2cff57ed178dab9d25cbf59f5f39e40515ace8585b

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libarcore_sdk_c.so

    Filesize

    45KB

    MD5

    5940c1d2856a8702ec87f6293f8c79cd

    SHA1

    fca9f187bc7e54a922d4aafa81d1b920164dc95d

    SHA256

    73a44799f1eb0dfd6d0569e630b815d7c1ed9544194a457e98a679354c35c73c

    SHA512

    8c4f9d922432f5888f3df03ede9c8cd4518e70887eb868fb8831ecea203d53a60501f2e4c842b16f1fb52536935c946faffbcd276df5ef24b88f1c150198f757

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libc++_shared.so

    Filesize

    595KB

    MD5

    5609469cc0f3b31f5ceca38827b01a2a

    SHA1

    ab3628eef8db643d910d0c3a88a54b590caa0c50

    SHA256

    f3e5f8a568704079033d05a98c7c7e4f95fe057220953111857ed8d7e4180b34

    SHA512

    4bdcf8c648dfa765a09efbda7cb1df286d9a57c1d3106a93bfeb7adbdc7e8aea03965df8bac804157b2216820c4de7912a626b412811a058969ae4247eb4f938

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libcurve25519.so

    Filesize

    206KB

    MD5

    c6117232e238c2cf627488d90f64d459

    SHA1

    dab62167235f4ee32bc1e9a7b8c2e3b840c5be1b

    SHA256

    e1c8d6527a1fb271e709bb30997f29422aa3774d0433afbf68672a05d752b85c

    SHA512

    d52da5df0c263d608170dffa1baf7f2fc8839f570a54f243ad4f787c7c83eacb27b6a89f02db3860b71504d4c0e17b9023fa3fd26590c7c1e5ffa6c7b44fdbe2

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libfb.so

    Filesize

    210KB

    MD5

    0bcefb3c285a02bfe49dc7aab8c2b7f1

    SHA1

    5f3e056ce9ddf13e1feca34f0b1d56eec4814b53

    SHA256

    790f5c1e7906fd8ca6bdbf54849a3b673a6f335689a2d01cb1d233f437ff2af7

    SHA512

    7222fa58564167d1c6a7ae540a37450a29ea9a6325a75ee5dafd6eb46076ba4651e6d4d71de34c3d93264105c83a226cc733db03170649b7a450c17a600d1ea0

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libfbjni.so

    Filesize

    412KB

    MD5

    c13819a6b4982672ed94b093d0a27fd2

    SHA1

    c73f6459cabbc7934157e7b02ff8267fd11b5ca9

    SHA256

    8390428d26d942bcbb104af218b2da334314789dcb304ec5a0477e371901218e

    SHA512

    0bfc4334eb0cb378ada85740f37da24c7d333f4433f398e0e24d7a06148f7abc00b94e7545ee2cecff5a23a52a49cbe1b3d605c74256751f262e51b7c5756bde

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libfbjni_kt.so

    Filesize

    20KB

    MD5

    e4c9bba8d079006293b9f98590bc1aab

    SHA1

    d2cf3e553f79b0c0c2ba2e7076630398900d5589

    SHA256

    9bf298689ccc3643836466b8afa92280a8d3015f04076b212851101b7d3f199a

    SHA512

    c63f47aad250927ee734258e2ffa1b30b525434299fc8880658329af00d892fe9f12386ef242938520738107a5db7bb2dc07f206f3048be9652172cff64a976f

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libfbsofterror.so

    Filesize

    7KB

    MD5

    b8f80cea0f1958d6259d74041a8bcfe5

    SHA1

    c53d74b3d6b01ca2461fb4f0d86db4e44088f6d8

    SHA256

    86085dae709f3729975878b9cdcfe016cb8eefe4849dc7388b509c5806c97119

    SHA512

    2e7398e2a6007a9d95f7594ae199a9ef3087982d8fa5f4e3b40d0b6662ba5a7e3fa1f7980bf60407ab6a46f69b3cefbfdea490bfe380e8242230a7682a643eb1

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libflexlayout.so

    Filesize

    31KB

    MD5

    b41a5c060787db6a618e1531f75b923d

    SHA1

    72cfddb6bc2b65bb98567088316231ba54ccb9fb

    SHA256

    100fd6ff6f8bab82908c8916d6ec0fd2f4fbd654f5a3258a2bd66ad61a3435eb

    SHA512

    4608a1a7fa28050df775cdce19362f3799fa7e39303a535ac1c09b82d1382edf2f58c3620ce2c91605675536a7f932534b093e878894d6842460bcdb1aae26cb

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libgifimage.so

    Filesize

    26KB

    MD5

    96d82f4bb33bfb97d238dbd65bb53858

    SHA1

    438b86db912c040210a248bd81ea733170822805

    SHA256

    ad1815c67b94387897968f57a73967f147bd457fa6d500203f47cab82a16a2f4

    SHA512

    7b42e272d1f142de869311dc9b3f3988de98808770e5baafb4964091915775effe3ff5353eb54e6683fc491ef8ffe818c1721b09a33c2a9905cfa1b11383e4a9

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libglog.so

    Filesize

    152KB

    MD5

    afa65579ebed1963b2a1df04b606dc02

    SHA1

    afb3c249c4570f96fa09c5e323baab0447f380e2

    SHA256

    5fe4717871966f5dad1d642f9608f15cd40ecff3045d6285ce80b70f21bc870b

    SHA512

    7fcfffe3cb08cc9bc7b07f49c1f7d53e38b41581c0551b93b8d70b2af93ac366d99ae6efe2e22d40cd3b11196aef86b2ba719adcb5dddae7a4ed7cc014aedb9f

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libgraphicsengine-arengineservices-whatsappservicehost-native.so

    Filesize

    2.9MB

    MD5

    3e1fd4d3094753f8b4bc74d82042b827

    SHA1

    7df3b110b9e88bf4d67cf5676f3ed631924b76c1

    SHA256

    d5c69891d0d8d8423f71ad790025771780854dba6926842abaeed2b30326fd83

    SHA512

    23a7e68ffdae2114257637002f69b57b4e187db5f89f82bf518fe58d402ca97dc56d90d2405b84d9ca1fb6385aee34ac78edc5209e8f2350171cc844cc7020b2

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libhiddenapis2.so

    Filesize

    124KB

    MD5

    5b56fa3230b6a49e59250ca5c58721ef

    SHA1

    2252daac0ff803cd48722cdb1b3e8423b6507180

    SHA256

    b4eb977598790a3b2c979761db13b116b398354377fcc3d699ef30e527480631

    SHA512

    a2916e09bbda57d01c6d616522d714be34eb1b25ba9eee1259035efabe85384b15989e199245bd097cd8d547fee143338572a923dc322fa3e2762ef580f44b46

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libminscompiler-jni.so

    Filesize

    43KB

    MD5

    b9fd03656152f304eea920d106a7e0e5

    SHA1

    eae731a95552036275d83bb639b14be8b2669bdf

    SHA256

    85961721ea7eca6f5d8413f4ecd1a3ba80972bacd29b4f96efc7edac12bca3eb

    SHA512

    dd2c83c52094151db999ff8abea5bf3968732a9af8461771b150ed55f0edb3f0bd0bda14af8e12a02dc4665e55f55a7c3132e52b54766a9f50145a43d934c9f4

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo.so

    Filesize

    70KB

    MD5

    d3076f529c7daecb9ce0cd0a349f277a

    SHA1

    9ac8c29468c93b8c9769be5d426338e7e03c00a5

    SHA256

    03787b8cf4aa571cc39039ac738ea60ade4f600a3816d50cae2ee64176d56305

    SHA512

    5445caccbd72b7df0b0b71f80c86994df300d4b20fe04947cc8c029c47eadde212f4d4766a4f013e0b4bccd309388a9931daebce2dd7490fb8678c1ceccd91ee

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_atrace.so

    Filesize

    20KB

    MD5

    cba14ae588a50a51a71a708d94223430

    SHA1

    94079f9a6a8b7c871fdaf724f1d5a424c8446d54

    SHA256

    21d9e7a1a192c10d89a110e0950b121b931649b7e676d02864eb6eaa99b2f057

    SHA512

    335b2968b3cbd2bb36b61f1234d0f8dfd971f7e5bc386cff5d29ab872aa4da8dd3192717df6ed47390df038fdf24d492cc14d5d8395a56ffc9dcf8b281b87d9c

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_build.so

    Filesize

    3KB

    MD5

    34ecbfb7f64b1eb828f710a8a0c5f8a4

    SHA1

    e3563bb92409d837537a62f981a5d2866b9d5c84

    SHA256

    fee251137ea0db03b6e7524ed194088c47910e4b05b05897371df4cc5cfded1a

    SHA512

    b6e07549d805eb87f7bfd281d621c430f011438317f93044007a5a4716208f4cbaef660df473a859905c302bfc6ada389d6e7552d4da905fc9e3d375c9a4c6f2

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_counters.so

    Filesize

    30KB

    MD5

    39c56f27593165b17aed015baa9833c6

    SHA1

    c8e85b0e17bf39e905d3311ddc296429721caff7

    SHA256

    131948869bcb693511cd487ff87dd3e5fcd1cfdb69c3dc8767a9d89a1642c78a

    SHA512

    7512136c1ad282a2d8a87cc5f797758cc4c0008c25f3a26bc07f9eaacfbf90ab5a4dcec690eaa4d891fca512e569fc4b76c7350fdb614a4cfd659a7e8625eac4

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_fb.so

    Filesize

    3KB

    MD5

    e11367038b25e60796022892729ed18e

    SHA1

    ca3c1dd4c335e20f157f7e098930eee8215b548b

    SHA256

    f5ebe5b7ad257fa47b40bd9fe2c15c36df2a0ef6d566c782ed9b942670bf0d46

    SHA512

    daaeb60ce1b3229e0e089bd2794e2e10b3780660f145bdc8388a330b034a4d717887b634e022540f1baee8e84949127d6867dbbe913f5b0eb17ebb9b399ea612

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_fmt.so

    Filesize

    2KB

    MD5

    2fe063abcc33f1178e34d5a40086326f

    SHA1

    cfb5a3c1948100dadad247718e809da04eb33993

    SHA256

    ba55d9c0bb946278098a279a1b4827bca80b7bbc9f07d84d98fbf83b8a797ed0

    SHA512

    24255344ce429e8d5f0446a8e9eebc671ca6c434190d5d171f191b6d38574c289cfb941bac23350b734e14884f70bac8ec46afde4290e2d7d8ca996a1932cf14

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_jmulti_buffer_logger.so

    Filesize

    14KB

    MD5

    dea5fc9ab05864c89c7b9e50410d2664

    SHA1

    7e3568e2acc4b31ad7706fc38008df055769aff9

    SHA256

    87e5ee6c5e3c3f18b612a4bb85ba70a68a2900243b24c4f4f92912ed18d3c9f4

    SHA512

    3fa15be9440a9471a702d9190fb90cd5b70873a3c806b9ae9e0d42c2f2747bec684f82a1f0fc11610ac1a9aea839e88d7e757783bae66911be32d106e9a264e5

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_linker.so

    Filesize

    15KB

    MD5

    95cd7e221b423d8f5e2e297472c83dc4

    SHA1

    df0b2abd1bab3caa4dfd713a4cb772285032a2c4

    SHA256

    3eb9bae2df1c67c0284d5a0409483e05c7285490e8d4b358439481dd8f303458

    SHA512

    9d12385c24d486934b5072bffa01e262c698dfc0b5fe4f84b3259675ff4028511fd3b73934e796954c00edcf961f61e4e4e80829a8c4daa261bb52ceb57c478a

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_logger.so

    Filesize

    11KB

    MD5

    e3da014656068088abdcbed9c909edfd

    SHA1

    48e0c270bb89cdef233a171c41b1a2319696b389

    SHA256

    c6f9ebfb0a56d0b4c7a8e902979267e450171908dd6ffd301ab471d5d02abf49

    SHA512

    5df76df9b4caa4d1505f14ba00dafe2a730f0b37992c272e39f5c53b5505f53987e58433e4a6a0def4afc03b31758371841886daa7e33b7a433fce321e204fc6

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_mmapbuf.so

    Filesize

    19KB

    MD5

    962aa5577822ac7dd0b7f6b774ceaa82

    SHA1

    ff0a10b89cbada2d7eceea406d1d54541437318b

    SHA256

    7488d68d5faedc49e4910c68b61af220e76fc649cf246715946446bc38033623

    SHA512

    eed54c2b31382c8b27048a2e30b4436e7466694062931cadbbaf78427dd4702cf6fa3df698c2746560e4f4ee4254c5b2eff9eefa449847c63329108aa915e7d8

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_mmapbuf_buffer.so

    Filesize

    8KB

    MD5

    93efa0b57d0a608a99a06c2e487f9e69

    SHA1

    f597cb533c8c2d9564b886586109c7b237dd1e43

    SHA256

    b1d29ff3cf332bd5b33717943985f37b40e62c5f2e756969982eb53ac10c2611

    SHA512

    3ff6fefb85d275022a70d6e29678fc45b6ff99475240ff49132e337f176e98d4edeb15f3bcb470c25554b970f17cabe02623c53aa108d5d1f1ec5f1bdc3cbc94

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_mmapbuf_buffer_jni.so

    Filesize

    11KB

    MD5

    396899cff1e9ef46dc1ffce853051bf7

    SHA1

    a5e9eea3cf878d8c0d04f01f31338f225f94a797

    SHA256

    782be1a5c070fdd2d5e0171c107dfd1f14e0fe240cc6591c4cdcfd2eff40ac50

    SHA512

    80c02e4565f61f88ec86c12d1e94ecca32d45e48ce18b26a92c7436e0898d69f0562944e7bbe2ad89113d893d8173e2c00bf3520ca2408fac766228f5105d62e

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_multi_buffer_logger.so

    Filesize

    7KB

    MD5

    e4f82f90d8eea150eec751f9d0cd0a8b

    SHA1

    050b2a2424cac5100bc99968858029ed1427d3f4

    SHA256

    5b365219161471be3ef155fc20f2d0bffcc239225eeb5ff27dc4d6663aa87ae0

    SHA512

    948477443c16c48132e9d08f291a55f7a0d285654f8f3393b915dcfd4b6fedb261ecc43728051c571db68a8ed85d12fe21f4339252eb76f4044177d52223088c

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_plthooks.so

    Filesize

    18KB

    MD5

    d2793c0167f621b37a599bba572756a3

    SHA1

    be9206bd407ffb9e1a707af1ce46422491c6d681

    SHA256

    4d6ecff951dfc617b16ce11328d0db8d64667f955e15506e5ee953e9a96ad4ec

    SHA512

    11a0c8471169e721f1d2e4cff99198300b75678608c1852f1ae69d0873afc193dae64d1f4a37d08da8b7ce979401cb9b50f05d400bdb401d646dd6370c1e499d

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_sigmux.so

    Filesize

    5KB

    MD5

    62bced8e7bfbf62b404ff43c8d518c7b

    SHA1

    c5afb8225f2605b3ef2923dd25d2f757c521126b

    SHA256

    f63740874ef8e1ce4f7de0b42c7b28165b50a30361b436d89ad6743e6d90413e

    SHA512

    7a8beca1a1d765176f9d74bdb486f8f8a3a6c4c9df1a4218f5335c6405672fa9cc8f7527174993265a5c237e7270c5751640468ff5edfe468b23c57ac2d12e28

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_stacktrace.so

    Filesize

    71KB

    MD5

    3fcf26a7b42477841136bfa4bd3ce83e

    SHA1

    9b09292e54fe973e05ee055cc10f917a60854a0e

    SHA256

    a39b9f0de8d314fef9026be37a3f6cc7ad12634c0cdd08e498b0f96661b91927

    SHA512

    7f61f13bc081efa770e0ef76662853d09518be073735d614b0297e374e96afe85f062b70923fac697d51244726f92caae921b96de948a40f547eecdb22266ca0

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_systemcounters.so

    Filesize

    29KB

    MD5

    fcdefa08b6c8be3221adeefd96938c92

    SHA1

    8e3206466243d06493096716309fb1c88749c640

    SHA256

    b340a464a9be8a543b122edaac190a1e2ee83a0399c6318869eebbc8bc2be2bf

    SHA512

    695774ec0b2c7eb214d47138d406783f5308f81a00fac7597bc767d82300cc4890d1ed58cb6fb1378539dcc27250fcd8281de2e0e2238fc4c67ea4a3aeb0d80d

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_threadmetadata.so

    Filesize

    9KB

    MD5

    59745c63e1f631148daf982615af9923

    SHA1

    f299dbc36a4f7c1b44b99b05cf97140899f85aea

    SHA256

    a30520646c136aff9d230f1a8d93e072b5d9004fd8ec4053800618827cbedd75

    SHA512

    1f677856805688f0aa077c936705f5e9f26029a76c5e6fe8dbb0fbf03084c375b08b0342f0396818ec4039bf4055910159d69dc71b6a1658565e63706e89bf5b

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofilo_util.so

    Filesize

    18KB

    MD5

    9653071fdb42af2302aed293c1a9b06d

    SHA1

    e8edbaf0791123cb55e39454250e9f6010620eda

    SHA256

    fe5d65434225350317d072d66a6753406f8c89da5fa9c9ee32ea4ddfe9172301

    SHA512

    1a75c6fe772e2a7dcc51eab1bcb6a703f0c1f114b61f7765623f38e7ee2c591110621856ee83cbd850231ac9390845224a5f17cd63d8c57ca9cc0512aa83275f

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libprofiloextapi.so

    Filesize

    2KB

    MD5

    e5c09191ae8a6151a958d0003808801f

    SHA1

    6e49c81ddd45272b6ad69133c08c2253e1c44272

    SHA256

    a5a4436ec4931d758933b2efd07c11e010297639ddefe812e30bdc41d059c265

    SHA512

    400e2040717d9af07a8312563db4fe3816cb22fef0d795090e9a9ad2f7d58571a082fa581fe903930b3e296eefd8d0d55dc4251f007793564065f0133afe3d78

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libpytorch.so

    Filesize

    1.4MB

    MD5

    4feb8c59e5609e2ba46f24ac89c98df7

    SHA1

    5e000a6b92bd10d6e00dbd7ede5f2347948b92c3

    SHA256

    da1182a4724c6bead966b3006061c5987658f690ca00ca7ac20a4aa0ce9be73e

    SHA512

    0d87228f3f522f74f05a9993c54e611159ab61cc08506cb4b34a160456af23631eb0cd628c93d71ec31e00afb7b8a2bf2d5464e4c74fb23973413216bedc335e

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libstatic-webp.so

    Filesize

    316KB

    MD5

    1e409abd91e87af8ac1f1dd92f6c6728

    SHA1

    e377c6475afbad5c9c153cd84a043f19363e261b

    SHA256

    9bd80e789d9530e1de4c9623789b4dbeec0fb2d06d7b042931ee3b0dd321660f

    SHA512

    85858b5808100e0b18143cce48809631fb35b29956962cf7c0d31acfab42d7bcc9daecedaa85edfc4d7a3eb879e391d64089bc1c91b7ce508e447f7a7de463ff

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libtorch-code-gen.so

    Filesize

    2.4MB

    MD5

    7913f187df15593e4742d97ff1bcd17a

    SHA1

    d39efea873b6ee28f1d8958c1462245b361cd6f2

    SHA256

    53a3758e9194ae233fc6f945bb3e1a598539bdcb791d6a8a1ba695076cb39ec6

    SHA512

    59b2656075c2048a1ddb96b1cb833541dfd472a65a14f88693453c69aa0b13aa45d17d9d541f2bf040d2a3b892adfcbc946816b0816307ab277104a66637787a

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libvlc.so

    Filesize

    5KB

    MD5

    5154d0575089f20cafd3a8bc1e58a8db

    SHA1

    ccc4c664dae6cf0aeb4206134e71548774be9e19

    SHA256

    0af2723546e9e51f9aec3f7c05d1f5b4f914e5080dc304cfe569bd94161f05f4

    SHA512

    a07774d745a52a7db6815dd6f5fc51671310a6bf5c4adf452645e319c82afb110482a5f5700fc134cfedb4aa6a7b8defed31453e000a6702c23a2beb73cd04ce

  • /data/data/com.mbwhatsapp/files/decompressed/libs.spo/libwhatsapp.so

    Filesize

    12.8MB

    MD5

    dd58d5c805a6209677da4880ac965df6

    SHA1

    c0910f2868db59a79b524538daaff5e0fa7992b1

    SHA256

    bc7d2c8995714861d12cfef5720996b7a0469a5f73b4c5d118837fbab6d1a83f

    SHA512

    f6d017c6f242f49274c8822dcdea2a7791bb1d7b69930b7318990a9d9ac29abc61c7b521247640559ad5955c181b0ba0ad731a26147a2ec62d1b75358f6c5ae1

  • /data/data/com.mbwhatsapp/files/extracted_pack_file.pack.tmp

    Filesize

    213KB

    MD5

    79a7b896132e3425306c22ee9245b1b3

    SHA1

    c2644a692a75b291253d84eac34186e627325fbb

    SHA256

    1dffc9205463e064a73076f5cc8ed4f688250c06709ac3d23324aa29dd70e81d

    SHA512

    6cefeea15c0a4086e13c3c6d09e646c473a301bcf25dbc2f8c091d2988d6fdc50d069ecb3c3cfa9908773c77ae6a8280581ccc8887c224f1c729e974097d411f

  • /data/data/com.mbwhatsapp/lib-main/dso_deps

    Filesize

    272B

    MD5

    a462f01825708fd150d913a3811e22ef

    SHA1

    574206fe08579cc982a656518d8debeb5ec40c73

    SHA256

    4b715d2371d2df44a2518a080697511c679230709fe73e299bcfab883a96593c

    SHA512

    1c0f25da142dec55eca5dd0671a56f265fbb5d8168c6147e6bfea386b1fa8a4c942a026d3b9a7636173d2864f3c84b3aba7ebe9948a72e83f7f49ba678388887

  • /data/data/com.mbwhatsapp/lib-main/dso_manifest

    Filesize

    5B

    MD5

    c06857e9ea338f3f3a24bb78f8fbdf6f

    SHA1

    c5a0a2529d2deb60fec041b4fbd722a2ebe31702

    SHA256

    957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

    SHA512

    29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

  • /data/data/com.mbwhatsapp/lib-main/dso_state

    Filesize

    1B

    MD5

    93b885adfe0da089cdf634904fd59f71

    SHA1

    5ba93c9db0cff93f52b521d7420e43f6eda2784f

    SHA256

    6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

    SHA512

    b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

  • /data/data/com.mbwhatsapp/lib-main/dso_state

    Filesize

    1B

    MD5

    55a54008ad1ba589aa210d2629c1df41

    SHA1

    bf8b4530d8d246dd74ac53a13471bba17941dff7

    SHA256

    4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

    SHA512

    7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339