Analysis

  • max time kernel
    11s
  • max time network
    110s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    30-10-2024 12:00

General

  • Target

    KB4WhatsApp_V37.apk

  • Size

    87.1MB

  • MD5

    a9594201e781c680930903e318496813

  • SHA1

    a4ef13a1180325bbf5c3a672530b27fdf824902a

  • SHA256

    e1843b41cbb9b8b86b9c4e02aeec7e14dae18d56ca51458e1ffd3073f143246e

  • SHA512

    7888501b6695f73650f691ef4612693aae91a6ed9705aab29626a34a0033f9e2ccfb679dbb593566016297af569f3e6ebfd9594d145bba21b1850ade501d34db

  • SSDEEP

    1572864:DegBSwAtm9SffSs6ILx6S9BE22s08xGPm7d1dDR5K4oRjxxuKsr2:PcpcWLxfEJs08xhB/DRgxxuKh

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.kb4whatsapp
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks memory information
    PID:4283

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.kb4whatsapp/databases/BTOR.DB-journal

    Filesize

    512B

    MD5

    38563c3d53e93d2bd3886931d5514396

    SHA1

    b68ac705dfff6d2a324bb0736116532609822521

    SHA256

    90650ed69e988a5d779dc89db0338759aac4d84dfef7c189a7b1828f21947cf7

    SHA512

    c4235cdf7e334a575dae56e412e9fd4f58c39414fc4f31b545001749e9c31db17b2770f3515f2cb29f2705741a141a26b15ff0a31e40f5eb77eede7333fbadd5

  • /data/data/com.kb4whatsapp/databases/BTOR.DB-wal

    Filesize

    32KB

    MD5

    ebbcd98c42935e66ce75175a8b1f4e71

    SHA1

    569ceebf9b604cb3ac90baa2a7167e787963a71b

    SHA256

    94c5526c32904928d2c12041d5d3a5adba6972fd0ff9c7039aa7d2ca1dd33a3a

    SHA512

    ab4a02f87755410eec2494ec875ef1acbb1794c378ef2368fc6fe32b6775f800a22c59a4fc9d8a9120065a2d24b225d2341816c6ad87c6a2d8835b26ba5ecfab

  • /data/data/com.kb4whatsapp/databases/EHS.DB-journal

    Filesize

    512B

    MD5

    0e352f6b5d078834abd7841ccab8fda5

    SHA1

    e95313323f14df30973f3eff69b68b47e3bbbb1c

    SHA256

    30134dd3d40a397b9624508e034bb9d239bb2dfe254b5336ae945be55f6fe057

    SHA512

    e076a17c51a0ffeeed9f965123779ac008ed117d3bd15a8467ddbe29c6b6936fec8df1b44d78a6f6e16908311d7b5baf132dd95a2a106c4134588159856751d4

  • /data/data/com.kb4whatsapp/databases/EHS.DB-wal

    Filesize

    32KB

    MD5

    5423840b7bf58c4c4ba613f589a5c2e6

    SHA1

    784e648f18475ab11e13d6d963f687b4018ec4ba

    SHA256

    ddcea6b3f8cb430fa26f30d855e60707aacfd19c631e2ec0c2e9f4fefef504b9

    SHA512

    8365730d7a3cead6d1b57f834750010d7c7c2454033cc5311b5399ba7ddca154fe281f1c087913b887ef7dd71ef875f1189db9e12455e90c0717ff6be3efc6f8

  • /data/data/com.kb4whatsapp/databases/com.google.android.datatransport.events

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.kb4whatsapp/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    3a21a9e3a6a37e00c1d9bbb86ea0e857

    SHA1

    5a66f8294fbc69b5c890d84bfcb460c37cde0450

    SHA256

    2d92b5ea2a2b56b7b8a7a1607a0706b4d74e528dbcdfd6e39b93b274802f2f8c

    SHA512

    2b130cd1ef15aa270518ba03925b7e6f3edd2b438b614ce24ee143db276eb187690923cac17d7166209e6720c6cf83a58627b21ba6d1eae2c9488e0296138a2d

  • /data/data/com.kb4whatsapp/databases/com.google.android.datatransport.events-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.kb4whatsapp/databases/com.google.android.datatransport.events-wal

    Filesize

    68KB

    MD5

    51e438fe5d7b58cd8c8986d97c7c708d

    SHA1

    5ff618b5e6bc3f60fe4019319cc26a96061bff5b

    SHA256

    5af8a310ce183865b56abd9201202053865f26f9e305ba170e3397a82264885e

    SHA512

    c2d4346c30778f2b8d2a381936cd325da2b743eb9204edfbed5a9de66311be39bbe8f72a52914907b2c41000e2390dabe2be5f8f102aafc9160d3b4c1a0f46aa

  • /data/data/com.kb4whatsapp/databases/wa.db-journal

    Filesize

    512B

    MD5

    fffa9fb9dcb92696a3026f59e17b95a5

    SHA1

    254eaae2a0c92971880f526ca2f616221c444e08

    SHA256

    f3ec11cc1fb780e0af1ff6053cfb1b03a9efa81c8dc0ac9f11f44c3c7e816077

    SHA512

    1c9af1a72fd33d6c06db660f9fb292100564c5b64a27d870c935c63696ef7e63d3dad4a360bbda2b623ec29a5fa419fd83a954aef90e02884432fb78ad177980

  • /data/data/com.kb4whatsapp/databases/wa.db-wal

    Filesize

    16KB

    MD5

    12b4004ea9de06a91ead2e34b570b6c0

    SHA1

    24c3f77159dabb0a1b262a478846e2731155f20e

    SHA256

    caa726aa4e3a5752405c13f0f34ef0df6b7a84e2405840331d3cbfafcfe7839b

    SHA512

    32af3b57e04aea11e9dcfd3dc114f0f3e654ebcfc04466675e5dcace72372d24b7d536ed3430be88ff300e4c05c6574c3873795781e6c38daf6a42c26ee2caa4

  • /data/data/com.kb4whatsapp/files/Logs/whatsapp.log

    Filesize

    5KB

    MD5

    55d03e6b7a7b5cd2a87637fe7c04de0f

    SHA1

    8aa73b1ecff2c5936182172625a1e13a3e153826

    SHA256

    f90d5fb98405f4ee65c65604fdbfcc20fe0cbfd5c930df41e75b8ee67f88d4c9

    SHA512

    a3569747f742477b3087f900e05928709b6892e4762613c61fd336d5ed2942b990749731fdac872b95339aaf95cb8e584b190a4751f557bbc8a1ceb8b9245f9d

  • /data/data/com.kb4whatsapp/files/PersistedInstallation3450623556558528736tmp

    Filesize

    114B

    MD5

    6c6d2fd0c9bdcab75080636c6c837c0b

    SHA1

    76c21cc586f3ced1e4a9da9ec0edbd72fb3018cc

    SHA256

    2f4b12d97a3bb342de9b4af8b30e1315d712f31466e78934cd025705b2062462

    SHA512

    787050730006a7bdb5fd968b23aee726d05d0bb86fc6d348f99016fc3ae8bc21c68b866f6698842e635e997e7df77cc7dd390c45df515940095c278331a91280

  • /data/data/com.kb4whatsapp/files/PersistedInstallation7549998202187206582tmp

    Filesize

    90B

    MD5

    b8e547b33bf46ad67d2525c5b75f48ce

    SHA1

    b5660ca9381f31f572c3b25729455237fefc571c

    SHA256

    ea633fa4da8b93eb6298dccf6e8d3898cd0244eda55ee42a71e415bacd1c1628

    SHA512

    5a19817c142ee5d8cd1e879472e5de4620e890372e20d00a83a3bfecca9283e3f601e093777c38805db017a2b59212e08cedfc4ec9dd0c7d2b27dea36d5419e0

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/.superpack_version

    Filesize

    33B

    MD5

    10a6eccfcb1dc3f9ca4a0ceb8ef5f997

    SHA1

    8db1b7e5ec46f01ed21e36fed674dc69fb05562e

    SHA256

    00f7bc0cd0e558953b30dce7550617f1592734faebf68c31f633e2c679edc63b

    SHA512

    7202fcba9d7d644ec1f1f8e0fbedc91f6fd69b2059f65b4f1191b0f2d4b480d790a0dee370d7e50f582cf760deb31e8705c3cc0868deec972503903d443a33a0

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libaom.so

    Filesize

    1.6MB

    MD5

    98ec99895119aeb57e7b87ade272a83b

    SHA1

    b16af82eaad1f9b2a57d79cd56fcb9c4a5aa4f0d

    SHA256

    ce403ecd783906f52e24030425b7a07103bdbb72ec4674009010961c9833d42d

    SHA512

    d834401c1bb8743c4f557f7e8c9ef4f1c9f8835e5abc2dc9ec95780772705d3000c92ac3ee8e7702ea0ce28d888892695e1c9575017be7fa7397e6d0b3dc59c7

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libar-bundle1.so

    Filesize

    64KB

    MD5

    b40c0b098023c8bd01b1942cfce99383

    SHA1

    a7de984f209f7f81b7de372a8a5c8fc90fe1ebf1

    SHA256

    c13b5c55979376cae36eb6d32a02780385db046ea89975728366acf150514211

    SHA512

    a7f29fa29e7bb58de27242839e805a8532e91549ed5158bfea6336320952eb8e65718265034df01c9a455c8452690dfbbbc5e0b5f0e2c43d640c98b612e81552

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libar-bundle2.so

    Filesize

    1.9MB

    MD5

    5f952b4b094fbaab0110291ba1d60190

    SHA1

    5536cf8279506a063d0b442cb65afadb1c0b4cb5

    SHA256

    d7a34a8b7e2d234d8496d7594323d40615c582f660d1af4c1ce7d348d8e81bfe

    SHA512

    29d072c803686ad215945b6a85d56858cc27a0f2240921de340fcd59a96a25afa5a40db094538d1f3175339dedd0a9ce99ee1400eac70d2c18fa6440da47f85d

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libar-bundle3.so

    Filesize

    1.2MB

    MD5

    30bdd1afcbd5724f99f3f737724b574b

    SHA1

    d957b6160f237164e4164e563adeacc57620d364

    SHA256

    df25274c0cf31b41f335bcd1c4ff56fbcd370e5e1c96e44c5f53e0340015ccce

    SHA512

    ad6908aab5bffd019330b424cfe33822e49c87eb3855ce3581fc9b3f8a818ef458705946601effa00f5b56c644a7d5946f531e5056a1a16d777abfc63b4dc9a4

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libar-bundle4.so

    Filesize

    3.4MB

    MD5

    87bffbfddfa60b972835c2b128471421

    SHA1

    be05cc699fc6b7c9f1b52c0fc2f4dfaac85b9921

    SHA256

    30d061d5e6ec2ae3fa053fdb77d7ca5b9d4639e252e2831b412ac4f29f762be5

    SHA512

    0f91ef468be13ea8eb46e7ab73ffe30e2481af2def3c2fbb7dd5e1773b9343a89c74db1b84acd4a084ace891ce1a99577c32e004a412710a2d9942382f50b727

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libar-bundle5.so

    Filesize

    9.7MB

    MD5

    1b11b0ab99c411dbfa5a282dbbbc80d3

    SHA1

    692fea62f2942173f9d0e4447958bfefa39a4b83

    SHA256

    1937e6e63f1503bdb7a2f1e84df24033a00a4da5b906faf46809b56307575613

    SHA512

    52647137d8e7d34d95312fa88d5d6c872c5bb4ec6687266e9755126217601cdf573cd0443a36051d450e0e7868e2b81d95eaf4813244c4899b3831a2571a5383

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libarcore_sdk_c.so

    Filesize

    45KB

    MD5

    5940c1d2856a8702ec87f6293f8c79cd

    SHA1

    fca9f187bc7e54a922d4aafa81d1b920164dc95d

    SHA256

    73a44799f1eb0dfd6d0569e630b815d7c1ed9544194a457e98a679354c35c73c

    SHA512

    8c4f9d922432f5888f3df03ede9c8cd4518e70887eb868fb8831ecea203d53a60501f2e4c842b16f1fb52536935c946faffbcd276df5ef24b88f1c150198f757

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libc++_shared.so

    Filesize

    595KB

    MD5

    5609469cc0f3b31f5ceca38827b01a2a

    SHA1

    ab3628eef8db643d910d0c3a88a54b590caa0c50

    SHA256

    f3e5f8a568704079033d05a98c7c7e4f95fe057220953111857ed8d7e4180b34

    SHA512

    4bdcf8c648dfa765a09efbda7cb1df286d9a57c1d3106a93bfeb7adbdc7e8aea03965df8bac804157b2216820c4de7912a626b412811a058969ae4247eb4f938

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libcurve25519.so

    Filesize

    206KB

    MD5

    c6117232e238c2cf627488d90f64d459

    SHA1

    dab62167235f4ee32bc1e9a7b8c2e3b840c5be1b

    SHA256

    e1c8d6527a1fb271e709bb30997f29422aa3774d0433afbf68672a05d752b85c

    SHA512

    d52da5df0c263d608170dffa1baf7f2fc8839f570a54f243ad4f787c7c83eacb27b6a89f02db3860b71504d4c0e17b9023fa3fd26590c7c1e5ffa6c7b44fdbe2

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libfb.so

    Filesize

    210KB

    MD5

    c807fcddee5d3b96876af26fb23f5867

    SHA1

    27e2677981256920ae749d7af5909cc52325922d

    SHA256

    ac6ab71d7b6b0ad057790cfb261f16f1f296fcc431397bacb76a6b4592324872

    SHA512

    62c2e414e767dec1f7e855013a73ab9ad964873a107d99a30b118d28e4e4415428976df2c0542e1b962dfb2b5656fb230c8ee5f07f2e9af8edd9903da81be372

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libfbjni.so

    Filesize

    412KB

    MD5

    c13819a6b4982672ed94b093d0a27fd2

    SHA1

    c73f6459cabbc7934157e7b02ff8267fd11b5ca9

    SHA256

    8390428d26d942bcbb104af218b2da334314789dcb304ec5a0477e371901218e

    SHA512

    0bfc4334eb0cb378ada85740f37da24c7d333f4433f398e0e24d7a06148f7abc00b94e7545ee2cecff5a23a52a49cbe1b3d605c74256751f262e51b7c5756bde

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libfbjni_kt.so

    Filesize

    20KB

    MD5

    7d046dad648d42c4e14c763dfe4129f1

    SHA1

    550aad574b519482e24e48e7636a06edb9357d3a

    SHA256

    eecb5c6d1c367f3682e6efc374007d36b26bba267dff12a31a2517cb7c71ba04

    SHA512

    dc2f44bffc7458ef6a5e8b1728d66d44e8b652a2e46ff81b529f1b1fd5934fd2f6e5adfbc198ac0c134ec1b12d7bb8789bb4c720d5b0f49ab22aacbe7c831073

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libfbsofterror.so

    Filesize

    7KB

    MD5

    673f1e66315b1b277c2db4c040679a38

    SHA1

    a7ffd2bfd0ac0f1278d3e3643bb9085a37d978ba

    SHA256

    78e6b272d432796dc3636122265c6433cc09aec8ee1d1f35392e13517002afc8

    SHA512

    721367bba6942391978613ff7f53c89c8324912b3883cf083039f7cf0b8630d3f5ee66fff72d468508853a526f16e2fe746b766b6836f499c04b2bd0a9791359

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libflexlayout.so

    Filesize

    31KB

    MD5

    ca024dd6437342d1fc76f2f32a715515

    SHA1

    5339dd26f56b7414aaec9c26ae3f923123463c42

    SHA256

    02f8d17fdd42c8e38047317122829545632840cd67faa38d4fbf073e6f3a494b

    SHA512

    56cd0e4374c0390d59266aee38f6168b8dab13421e1959f67375ee94eb4ae8a295b681dde348f711861c9bf6964d3cf96966517679ba4767fd4806f2d98603c5

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libgifimage.so

    Filesize

    26KB

    MD5

    96d82f4bb33bfb97d238dbd65bb53858

    SHA1

    438b86db912c040210a248bd81ea733170822805

    SHA256

    ad1815c67b94387897968f57a73967f147bd457fa6d500203f47cab82a16a2f4

    SHA512

    7b42e272d1f142de869311dc9b3f3988de98808770e5baafb4964091915775effe3ff5353eb54e6683fc491ef8ffe818c1721b09a33c2a9905cfa1b11383e4a9

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libglog.so

    Filesize

    152KB

    MD5

    afa65579ebed1963b2a1df04b606dc02

    SHA1

    afb3c249c4570f96fa09c5e323baab0447f380e2

    SHA256

    5fe4717871966f5dad1d642f9608f15cd40ecff3045d6285ce80b70f21bc870b

    SHA512

    7fcfffe3cb08cc9bc7b07f49c1f7d53e38b41581c0551b93b8d70b2af93ac366d99ae6efe2e22d40cd3b11196aef86b2ba719adcb5dddae7a4ed7cc014aedb9f

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libgraphicsengine-arengineservices-whatsappservicehost-native.so

    Filesize

    2.7MB

    MD5

    4e6390829ef0acfadfe7d1ad42b6a1c8

    SHA1

    df3ea718d77a715b076ef631ead5dd844c725e74

    SHA256

    135a28fca9e0faf0827fddd823decd431cd4f6b4d7e2ff7c90d5e41fa6a3f5ba

    SHA512

    3ae68201523861affc0a32d608ef8eb411b4f0e9d94e94dcde654bf34058f2c2ddbb54d742e799976b9ab3ade7dd3fe0005ad00186716d18d9f270bafd2ca06a

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libhiddenapis2.so

    Filesize

    124KB

    MD5

    5b56fa3230b6a49e59250ca5c58721ef

    SHA1

    2252daac0ff803cd48722cdb1b3e8423b6507180

    SHA256

    b4eb977598790a3b2c979761db13b116b398354377fcc3d699ef30e527480631

    SHA512

    a2916e09bbda57d01c6d616522d714be34eb1b25ba9eee1259035efabe85384b15989e199245bd097cd8d547fee143338572a923dc322fa3e2762ef580f44b46

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libminscompiler-jni.so

    Filesize

    43KB

    MD5

    4d6bbbe7942a150e577911a3d6075709

    SHA1

    5995c63bf59f37eae28d32aa5bc46b7e60f7085a

    SHA256

    1106c15dfb37b9af9d6ad238d7f6dd174dfc29d0cc98092448f1f03105112a0a

    SHA512

    e069e3224107fb509b96b85eb6fb7039980884923faf28976ea412a8ac5b03ad0d8e6aa579501c8b1b92a32cde46fd731f505741a8aff0f44331e2b0ad5c481f

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo.so

    Filesize

    70KB

    MD5

    d3076f529c7daecb9ce0cd0a349f277a

    SHA1

    9ac8c29468c93b8c9769be5d426338e7e03c00a5

    SHA256

    03787b8cf4aa571cc39039ac738ea60ade4f600a3816d50cae2ee64176d56305

    SHA512

    5445caccbd72b7df0b0b71f80c86994df300d4b20fe04947cc8c029c47eadde212f4d4766a4f013e0b4bccd309388a9931daebce2dd7490fb8678c1ceccd91ee

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo_atrace.so

    Filesize

    20KB

    MD5

    cba14ae588a50a51a71a708d94223430

    SHA1

    94079f9a6a8b7c871fdaf724f1d5a424c8446d54

    SHA256

    21d9e7a1a192c10d89a110e0950b121b931649b7e676d02864eb6eaa99b2f057

    SHA512

    335b2968b3cbd2bb36b61f1234d0f8dfd971f7e5bc386cff5d29ab872aa4da8dd3192717df6ed47390df038fdf24d492cc14d5d8395a56ffc9dcf8b281b87d9c

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo_build.so

    Filesize

    3KB

    MD5

    34ecbfb7f64b1eb828f710a8a0c5f8a4

    SHA1

    e3563bb92409d837537a62f981a5d2866b9d5c84

    SHA256

    fee251137ea0db03b6e7524ed194088c47910e4b05b05897371df4cc5cfded1a

    SHA512

    b6e07549d805eb87f7bfd281d621c430f011438317f93044007a5a4716208f4cbaef660df473a859905c302bfc6ada389d6e7552d4da905fc9e3d375c9a4c6f2

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo_counters.so

    Filesize

    30KB

    MD5

    39c56f27593165b17aed015baa9833c6

    SHA1

    c8e85b0e17bf39e905d3311ddc296429721caff7

    SHA256

    131948869bcb693511cd487ff87dd3e5fcd1cfdb69c3dc8767a9d89a1642c78a

    SHA512

    7512136c1ad282a2d8a87cc5f797758cc4c0008c25f3a26bc07f9eaacfbf90ab5a4dcec690eaa4d891fca512e569fc4b76c7350fdb614a4cfd659a7e8625eac4

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo_fb.so

    Filesize

    3KB

    MD5

    e11367038b25e60796022892729ed18e

    SHA1

    ca3c1dd4c335e20f157f7e098930eee8215b548b

    SHA256

    f5ebe5b7ad257fa47b40bd9fe2c15c36df2a0ef6d566c782ed9b942670bf0d46

    SHA512

    daaeb60ce1b3229e0e089bd2794e2e10b3780660f145bdc8388a330b034a4d717887b634e022540f1baee8e84949127d6867dbbe913f5b0eb17ebb9b399ea612

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo_fmt.so

    Filesize

    2KB

    MD5

    2fe063abcc33f1178e34d5a40086326f

    SHA1

    cfb5a3c1948100dadad247718e809da04eb33993

    SHA256

    ba55d9c0bb946278098a279a1b4827bca80b7bbc9f07d84d98fbf83b8a797ed0

    SHA512

    24255344ce429e8d5f0446a8e9eebc671ca6c434190d5d171f191b6d38574c289cfb941bac23350b734e14884f70bac8ec46afde4290e2d7d8ca996a1932cf14

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo_jmulti_buffer_logger.so

    Filesize

    14KB

    MD5

    dea5fc9ab05864c89c7b9e50410d2664

    SHA1

    7e3568e2acc4b31ad7706fc38008df055769aff9

    SHA256

    87e5ee6c5e3c3f18b612a4bb85ba70a68a2900243b24c4f4f92912ed18d3c9f4

    SHA512

    3fa15be9440a9471a702d9190fb90cd5b70873a3c806b9ae9e0d42c2f2747bec684f82a1f0fc11610ac1a9aea839e88d7e757783bae66911be32d106e9a264e5

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo_linker.so

    Filesize

    15KB

    MD5

    95cd7e221b423d8f5e2e297472c83dc4

    SHA1

    df0b2abd1bab3caa4dfd713a4cb772285032a2c4

    SHA256

    3eb9bae2df1c67c0284d5a0409483e05c7285490e8d4b358439481dd8f303458

    SHA512

    9d12385c24d486934b5072bffa01e262c698dfc0b5fe4f84b3259675ff4028511fd3b73934e796954c00edcf961f61e4e4e80829a8c4daa261bb52ceb57c478a

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo_logger.so

    Filesize

    11KB

    MD5

    e3da014656068088abdcbed9c909edfd

    SHA1

    48e0c270bb89cdef233a171c41b1a2319696b389

    SHA256

    c6f9ebfb0a56d0b4c7a8e902979267e450171908dd6ffd301ab471d5d02abf49

    SHA512

    5df76df9b4caa4d1505f14ba00dafe2a730f0b37992c272e39f5c53b5505f53987e58433e4a6a0def4afc03b31758371841886daa7e33b7a433fce321e204fc6

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo_mmapbuf.so

    Filesize

    19KB

    MD5

    962aa5577822ac7dd0b7f6b774ceaa82

    SHA1

    ff0a10b89cbada2d7eceea406d1d54541437318b

    SHA256

    7488d68d5faedc49e4910c68b61af220e76fc649cf246715946446bc38033623

    SHA512

    eed54c2b31382c8b27048a2e30b4436e7466694062931cadbbaf78427dd4702cf6fa3df698c2746560e4f4ee4254c5b2eff9eefa449847c63329108aa915e7d8

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo_mmapbuf_buffer.so

    Filesize

    8KB

    MD5

    93efa0b57d0a608a99a06c2e487f9e69

    SHA1

    f597cb533c8c2d9564b886586109c7b237dd1e43

    SHA256

    b1d29ff3cf332bd5b33717943985f37b40e62c5f2e756969982eb53ac10c2611

    SHA512

    3ff6fefb85d275022a70d6e29678fc45b6ff99475240ff49132e337f176e98d4edeb15f3bcb470c25554b970f17cabe02623c53aa108d5d1f1ec5f1bdc3cbc94

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo_mmapbuf_buffer_jni.so

    Filesize

    11KB

    MD5

    396899cff1e9ef46dc1ffce853051bf7

    SHA1

    a5e9eea3cf878d8c0d04f01f31338f225f94a797

    SHA256

    782be1a5c070fdd2d5e0171c107dfd1f14e0fe240cc6591c4cdcfd2eff40ac50

    SHA512

    80c02e4565f61f88ec86c12d1e94ecca32d45e48ce18b26a92c7436e0898d69f0562944e7bbe2ad89113d893d8173e2c00bf3520ca2408fac766228f5105d62e

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo_multi_buffer_logger.so

    Filesize

    7KB

    MD5

    e4f82f90d8eea150eec751f9d0cd0a8b

    SHA1

    050b2a2424cac5100bc99968858029ed1427d3f4

    SHA256

    5b365219161471be3ef155fc20f2d0bffcc239225eeb5ff27dc4d6663aa87ae0

    SHA512

    948477443c16c48132e9d08f291a55f7a0d285654f8f3393b915dcfd4b6fedb261ecc43728051c571db68a8ed85d12fe21f4339252eb76f4044177d52223088c

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo_plthooks.so

    Filesize

    18KB

    MD5

    d2793c0167f621b37a599bba572756a3

    SHA1

    be9206bd407ffb9e1a707af1ce46422491c6d681

    SHA256

    4d6ecff951dfc617b16ce11328d0db8d64667f955e15506e5ee953e9a96ad4ec

    SHA512

    11a0c8471169e721f1d2e4cff99198300b75678608c1852f1ae69d0873afc193dae64d1f4a37d08da8b7ce979401cb9b50f05d400bdb401d646dd6370c1e499d

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo_sigmux.so

    Filesize

    5KB

    MD5

    62bced8e7bfbf62b404ff43c8d518c7b

    SHA1

    c5afb8225f2605b3ef2923dd25d2f757c521126b

    SHA256

    f63740874ef8e1ce4f7de0b42c7b28165b50a30361b436d89ad6743e6d90413e

    SHA512

    7a8beca1a1d765176f9d74bdb486f8f8a3a6c4c9df1a4218f5335c6405672fa9cc8f7527174993265a5c237e7270c5751640468ff5edfe468b23c57ac2d12e28

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo_stacktrace.so

    Filesize

    71KB

    MD5

    3fcf26a7b42477841136bfa4bd3ce83e

    SHA1

    9b09292e54fe973e05ee055cc10f917a60854a0e

    SHA256

    a39b9f0de8d314fef9026be37a3f6cc7ad12634c0cdd08e498b0f96661b91927

    SHA512

    7f61f13bc081efa770e0ef76662853d09518be073735d614b0297e374e96afe85f062b70923fac697d51244726f92caae921b96de948a40f547eecdb22266ca0

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo_systemcounters.so

    Filesize

    29KB

    MD5

    fcdefa08b6c8be3221adeefd96938c92

    SHA1

    8e3206466243d06493096716309fb1c88749c640

    SHA256

    b340a464a9be8a543b122edaac190a1e2ee83a0399c6318869eebbc8bc2be2bf

    SHA512

    695774ec0b2c7eb214d47138d406783f5308f81a00fac7597bc767d82300cc4890d1ed58cb6fb1378539dcc27250fcd8281de2e0e2238fc4c67ea4a3aeb0d80d

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo_threadmetadata.so

    Filesize

    9KB

    MD5

    59745c63e1f631148daf982615af9923

    SHA1

    f299dbc36a4f7c1b44b99b05cf97140899f85aea

    SHA256

    a30520646c136aff9d230f1a8d93e072b5d9004fd8ec4053800618827cbedd75

    SHA512

    1f677856805688f0aa077c936705f5e9f26029a76c5e6fe8dbb0fbf03084c375b08b0342f0396818ec4039bf4055910159d69dc71b6a1658565e63706e89bf5b

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofilo_util.so

    Filesize

    18KB

    MD5

    9653071fdb42af2302aed293c1a9b06d

    SHA1

    e8edbaf0791123cb55e39454250e9f6010620eda

    SHA256

    fe5d65434225350317d072d66a6753406f8c89da5fa9c9ee32ea4ddfe9172301

    SHA512

    1a75c6fe772e2a7dcc51eab1bcb6a703f0c1f114b61f7765623f38e7ee2c591110621856ee83cbd850231ac9390845224a5f17cd63d8c57ca9cc0512aa83275f

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libprofiloextapi.so

    Filesize

    2KB

    MD5

    e5c09191ae8a6151a958d0003808801f

    SHA1

    6e49c81ddd45272b6ad69133c08c2253e1c44272

    SHA256

    a5a4436ec4931d758933b2efd07c11e010297639ddefe812e30bdc41d059c265

    SHA512

    400e2040717d9af07a8312563db4fe3816cb22fef0d795090e9a9ad2f7d58571a082fa581fe903930b3e296eefd8d0d55dc4251f007793564065f0133afe3d78

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libpytorch.so

    Filesize

    1.4MB

    MD5

    944970c2fbb1efc1df1bbf2fcdd03d66

    SHA1

    fbacb29f62633424ff3e9146d20b236a3ede0403

    SHA256

    a613d671593f973173db598c384846a978d3bb28818485edf0448e4bd0fffff8

    SHA512

    09eeb313c5ab98b4477afb1aab4b10268b06dd9a726ad91101cc9dadc28e85ccc23d951decea0ffe63999b813a9f8432d5d921f4be58ae00dc68ef961b469bcb

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libstatic-webp.so

    Filesize

    316KB

    MD5

    1e409abd91e87af8ac1f1dd92f6c6728

    SHA1

    e377c6475afbad5c9c153cd84a043f19363e261b

    SHA256

    9bd80e789d9530e1de4c9623789b4dbeec0fb2d06d7b042931ee3b0dd321660f

    SHA512

    85858b5808100e0b18143cce48809631fb35b29956962cf7c0d31acfab42d7bcc9daecedaa85edfc4d7a3eb879e391d64089bc1c91b7ce508e447f7a7de463ff

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libtorch-code-gen.so

    Filesize

    2.4MB

    MD5

    2591df23cd61058934cab4b6f4d917d3

    SHA1

    3fde76c4e855a4bbd6e52afcb46e5045b1f0a4a9

    SHA256

    0c9c4d59f2dd55d9097889f691d3a18ce63a8e0e2b1715572981aa9b7c7e4260

    SHA512

    2393620b57807783465aa5f11961c23b32c0b779190dcfb420d592426f2dbfa3c250696af7371b7908a2156e64570dfaf1f4032c88d6b4c52b380b11a4172f61

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libvlc.so

    Filesize

    5KB

    MD5

    5154d0575089f20cafd3a8bc1e58a8db

    SHA1

    ccc4c664dae6cf0aeb4206134e71548774be9e19

    SHA256

    0af2723546e9e51f9aec3f7c05d1f5b4f914e5080dc304cfe569bd94161f05f4

    SHA512

    a07774d745a52a7db6815dd6f5fc51671310a6bf5c4adf452645e319c82afb110482a5f5700fc134cfedb4aa6a7b8defed31453e000a6702c23a2beb73cd04ce

  • /data/data/com.kb4whatsapp/files/decompressed/libs.spo/libwhatsapp.so

    Filesize

    12.7MB

    MD5

    facb0d944dc5f597778f0f14ef1d96c7

    SHA1

    b086de5c59695cc8067e0850b5a7ca2d9a13d049

    SHA256

    33d55f91ec067bb5fa727d79622baa52d86085088a90d7134e283df716078344

    SHA512

    e41889d43e764c702de09ca2d21570a5f437591918c45da7282dbf5b4c67ab7974b068a4d969fcf93b91ba40b7b5e8af4a95fe4387b516009895714cf7363228

  • /data/data/com.kb4whatsapp/lib-main/dso_deps

    Filesize

    276B

    MD5

    c704bdf422cbf3040e2747160ab54d20

    SHA1

    b9e0dcdbe8e69d846eaf0a443193158100667108

    SHA256

    4b9471fadcb1ea30b822ce343bf127dea4639d532eee43b6b3978b2442dda0c4

    SHA512

    7cd2d39ef17f9a376e3f5b8c2d2b3378bca1ca25189d74ee53abf17095bbc5a0749f08539c0c9c76ad975d97d52b6fd08e5fb20fb8c9e43f64f9499620ca437f

  • /data/data/com.kb4whatsapp/lib-main/dso_manifest

    Filesize

    5B

    MD5

    c06857e9ea338f3f3a24bb78f8fbdf6f

    SHA1

    c5a0a2529d2deb60fec041b4fbd722a2ebe31702

    SHA256

    957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

    SHA512

    29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

  • /data/data/com.kb4whatsapp/lib-main/dso_state

    Filesize

    1B

    MD5

    93b885adfe0da089cdf634904fd59f71

    SHA1

    5ba93c9db0cff93f52b521d7420e43f6eda2784f

    SHA256

    6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

    SHA512

    b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

  • /data/data/com.kb4whatsapp/lib-main/dso_state

    Filesize

    1B

    MD5

    55a54008ad1ba589aa210d2629c1df41

    SHA1

    bf8b4530d8d246dd74ac53a13471bba17941dff7

    SHA256

    4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

    SHA512

    7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339