Malware Analysis Report

2024-11-13 17:15

Sample ID 241109-vsz9ms1nhq
Target YOWA10.10F.apk
SHA256 038bd064c590dc1a474084dca7e9d01f1c06d9a3f8cd1e0774194a13a9436bd4
Tags
upx triada discovery persistence
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

038bd064c590dc1a474084dca7e9d01f1c06d9a3f8cd1e0774194a13a9436bd4

Threat Level: Known bad

The file YOWA10.10F.apk was found to be: Known bad.

Malicious Activity Summary

upx triada discovery persistence

Android Triada payload

Triada family

Patched UPX-packed file

Acquires the wake lock

Queries information about active data network

Requests dangerous framework permissions

Declares services with permission to bind to the system

UPX packed file

Registers a broadcast receiver at runtime (usually for listening for system events)

Checks memory information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-09 17:16

Signatures

Android Triada payload

Description Indicator Process Target
N/A N/A N/A N/A

Triada family

triada

Patched UPX-packed file

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Declares services with permission to bind to the system

Description Indicator Process Target
Required by remote views services to bind with the system. Allows apps to share and display views across different processes. android.permission.BIND_REMOTEVIEWS N/A N/A
Required by chooser target services to bind with the system. Allows apps to modify targets that handle user actions. android.permission.BIND_CHOOSER_TARGET_SERVICE N/A N/A
Required by telecom connection services to bind with the system. Allows apps to manage phone call aspects such as call setup and notifications. android.permission.BIND_TELECOM_CONNECTION_SERVICE N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an application to access any geographic locations persisted in the user's shared collection. android.permission.ACCESS_MEDIA_LOCATION N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows read access to the device's phone number(s). android.permission.READ_PHONE_NUMBERS N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application a broad access to external storage in scoped storage. android.permission.MANAGE_EXTERNAL_STORAGE N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows applications to use exact alarm APIs. android.permission.SCHEDULE_EXACT_ALARM N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an application to read audio files from external storage. android.permission.READ_MEDIA_AUDIO N/A N/A
Allows an application to read image files from external storage. android.permission.READ_MEDIA_IMAGES N/A N/A
Allows an application to read video files from external storage. android.permission.READ_MEDIA_VIDEO N/A N/A
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker. android.permission.READ_MEDIA_VISUAL_USER_SELECTED N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Required to be able to connect to paired Bluetooth devices. android.permission.BLUETOOTH_CONNECT N/A N/A
Required to be able to advertise and connect to nearby devices via Wi-Fi. android.permission.NEARBY_WIFI_DEVICES N/A N/A
Required to be able to discover and pair nearby Bluetooth devices. android.permission.BLUETOOTH_SCAN N/A N/A
Required to be able to advertise to nearby Bluetooth devices. android.permission.BLUETOOTH_ADVERTISE N/A N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-09 17:15

Reported

2024-11-09 17:19

Platform

android-x86-arm-20240624-en

Max time kernel

7s

Max time network

132s

Command Line

com.yowhatsapp

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.yowhatsapp

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 digitalassetlinks.googleapis.com udp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
GB 216.58.204.78:443 android.apis.google.com tcp
US 1.1.1.1:53 static.whatsapp.net udp
GB 157.240.214.60:443 static.whatsapp.net tcp
GB 157.240.214.60:443 static.whatsapp.net tcp
GB 157.240.214.60:443 static.whatsapp.net tcp
GB 157.240.214.60:443 static.whatsapp.net tcp
GB 157.240.214.60:443 static.whatsapp.net tcp

Files

/data/data/com.yowhatsapp/files/Logs/whatsapp.log

MD5 339f2b68ba72cfe2a4adc3ab163c2e2b
SHA1 600d20780060597be41effa1716b3cb610561353
SHA256 2e97e3277c12b6a16753b56fedb43061ed5f26043d459ccd005c1711275e2531
SHA512 daa6ace7eae468c2f0b4f7addd2c2b9168353c269bbb8e12538521a7301f062cd912b7a272f47ca4a8e864f6e0622db5e08da5431d6c2d9143f1980cd6db455e

/data/data/com.yowhatsapp/databases/BTOR.DB-journal

MD5 abb18cb86285bdfb7f70b43452bc2f3e
SHA1 fa1a34d904f53af70e212378e493d53b19712bf4
SHA256 c1f29e30ab77944dca09368398a8262f1756a3cbb007bde9fc6b6ecd542ce7c6
SHA512 8e6e6674e557f420368d10c83c3e68dda51342ea29f23b255387db83a4bee59839286258c9e6060f23f0bfed94041fdf77f206b5923fdd2dcbbe87a48cc74681

/data/data/com.yowhatsapp/databases/BTOR.DB

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.yowhatsapp/databases/BTOR.DB-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.yowhatsapp/databases/BTOR.DB-wal

MD5 4ecc71a7e0a3f2a5375d3bbb13ea9c7e
SHA1 a455ee367d7c8a5109c4ac9c1dfee62f2f038ddb
SHA256 8b693dbf15447c1fcf5130734feccc89639904c419fe3e7a883e1ba0ed83ea2e
SHA512 386488b774310bcd353aab15252c4f4ca792e8e35757292c9a490a1a0e2e46a919e8afbb4ee156d0da9550aa37faea92f4be335ce0c5a5456bfb05ef9bed9b5a

/data/data/com.yowhatsapp/no_backup/com.google.InstanceId.properties

MD5 d2db352b37d4c79a069441aeab90f844
SHA1 c5e2e4130cabce6d7dcfb34e95e2daf5034912a1
SHA256 b358afee2704d4e5e4ae3fce4adefa0b347e70e31266ea860c89d8edd7611600
SHA512 0ea0c28355324747d5fb14cbfe13bb92b04a7d57910b692c35a16f5f9e1c937f0a87c193359013bdd36109531b99e84df6ebc15b409b24e10ea23ec97a94c6e7

/data/data/com.yowhatsapp/databases/EHS.DB-journal

MD5 819c076885de8cc8d65e23c77618c172
SHA1 235d346102674118cd1e4f5b87bb013c43575f06
SHA256 5be8863b567ce4ee28881168cfa946e5b1543f8c733c89104c7f8578c51d281e
SHA512 bc9541566acae2ab318795b28bf4159386b5211859cebeff1c8bcb172488ca09f80ad997119f6610ddd98d0d1eee0b0fc9a269295381a5c915e39d181a631602

/data/data/com.yowhatsapp/databases/EHS.DB-wal

MD5 ce4895f22242cf92fbddf0ea99f27a3f
SHA1 f662f5f1537c6b2fb4e5d1bfcd5b40db5b753e3b
SHA256 3888c5850f6ebbc0eb5ff3aa9fc526c81be3cc22cfac0e182c707d7a3673ff90
SHA512 1247ee4a6f1f9ea6a55cbdbade4297aa11c27efad00a26d66d7b774bacc00a23673c8914aaed218d34d7bf129d751b62c33ea8d6540b8d4378e13257fe00ca95

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libvlc.so

MD5 789cdb3d7dbe2c1a27e055ea0827c6dd
SHA1 218d13e585227275fe6ebce80df3300733cd146d
SHA256 8c9139c15a3b52863f797e8e941ffdf9da460dd539cb6c6e1d64f68bba6abfc2
SHA512 85bb1d34cf127fc6eb7ce010166bdf9b8fb72f81722f6334c8a38bc9778edc407ef82230d9f6ffd5c9bb141689da4605133b1575013a4afec32a8f27c60835a1

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libwhatsapp.so

MD5 1e6c3cf5c46198b922402f2de88effcd
SHA1 59af757d95c7337bcbb61c451f5c1fca49aec24f
SHA256 88d7e139e790783f3aecd7f03740841f238372d36ca0bf3929689cc2a98122e0
SHA512 25885affd691bbb0dcd0ea653c9b68d89b9a4c273dd0abb198811e5492f909f17612a03636e86c95990a305a74423760744770649b8b919004cd957b81b15712

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libcurve25519.so

MD5 2b8e8800859a19977ed3f5745ca187b5
SHA1 a847a54219b50fd3a85b050c2e1e17a6e1ba0077
SHA256 cd4465d9e00b8870d63764e2ef34f00dcd9887dcd183acddb886859511a8aaca
SHA512 13e4dd72341d00667f46bda48acce760df7b6852fed8db4befad5fcf662b2da828887829ecb52249b0f2aa30cd3fe7b085398af7af7b813cd256f7ed70bd21d0

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libaom.so

MD5 1430f21999211a58c1838f99b5134fb1
SHA1 ee7a937340fbaafb5eb243c47c3b4557d4ca789f
SHA256 58faa368ffcb2b6e511811f125d32242fda08c3d16d0c5d1c4155f8c4d1de581
SHA512 9de403a41489f5cce8790c297196b60b22795e94e7a41f4e0c1a220fc803042fd90736651e56db13b8181e34f2d31e8d2bbd26e2bc64a2e394d08bd282c72027

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libgifimage.so

MD5 96d82f4bb33bfb97d238dbd65bb53858
SHA1 438b86db912c040210a248bd81ea733170822805
SHA256 ad1815c67b94387897968f57a73967f147bd457fa6d500203f47cab82a16a2f4
SHA512 7b42e272d1f142de869311dc9b3f3988de98808770e5baafb4964091915775effe3ff5353eb54e6683fc491ef8ffe818c1721b09a33c2a9905cfa1b11383e4a9

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libstatic-webp.so

MD5 1e409abd91e87af8ac1f1dd92f6c6728
SHA1 e377c6475afbad5c9c153cd84a043f19363e261b
SHA256 9bd80e789d9530e1de4c9623789b4dbeec0fb2d06d7b042931ee3b0dd321660f
SHA512 85858b5808100e0b18143cce48809631fb35b29956962cf7c0d31acfab42d7bcc9daecedaa85edfc4d7a3eb879e391d64089bc1c91b7ce508e447f7a7de463ff

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libc++_shared.so

MD5 8060fa3cd601636d5d4a0cc0507b1cbf
SHA1 1b9e793e6e306b85d06ef7ab4b53e64736561bdb
SHA256 b216ebebe5303bbd9787bc7b771b67ed56beaf337b783b65b19eb36041f99571
SHA512 803de486b71e43c6e03820e0cd486114631743a03b74bde9497caa5499604d62e2dca6774c8c54a2f0ad60073b449eed1feef7b01f1f35cb0b0f86cc1076f40e

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libfb.so

MD5 c816fa5a6fb494142b1e0de26de7f987
SHA1 023018670e23972301a83b104d6fc485daabbbce
SHA256 69e757c3f9529202cd83df719ed964d3b33f3d12b0f72bdca71f38bdfd9520bb
SHA512 16fb0c7e48a7764d48e00d120f0c2d8a5bf6417a1bdc2828e218b1868666170714828ee4c05460d6ead9f82ba07c2655ab6f698e7550ae0fb694a94115320e92

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libfbjni.so

MD5 c4ef9c147d59e2976ac95e1ff84e9b23
SHA1 698bc74ea5f8ecc3726d5c5234fc8f4943767083
SHA256 fb392056c53bc44dce6c6f637132b742874b0a6770d575e11234dc95892ec893
SHA512 5761c949334ba611598c9d772fb31c235b58694fe080ff99e274d77d5453340d0d18c3db385b2b78b1028221b15c68bb2699e947488a60aeb0a7a2202da6cc94

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libflexlayout.so

MD5 968af0c148b64e5364b67c591f3726c2
SHA1 3fb2c6a2ce0296c646fd47ba9758e68d44ea230e
SHA256 204c8c410bc9b0ced358ad6fdfec94b03c0ba4ff3e1e10b0300bda3005d5be42
SHA512 57f8f55015fcbb0801803a058ef0be051db3696ff5f0d376f87fecca6e1ec38f6197fb8c1bdbb6434af5e23767754a15b8974dba30e7037696f6d0b32ef73b5b

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo.so

MD5 d3076f529c7daecb9ce0cd0a349f277a
SHA1 9ac8c29468c93b8c9769be5d426338e7e03c00a5
SHA256 03787b8cf4aa571cc39039ac738ea60ade4f600a3816d50cae2ee64176d56305
SHA512 5445caccbd72b7df0b0b71f80c86994df300d4b20fe04947cc8c029c47eadde212f4d4766a4f013e0b4bccd309388a9931daebce2dd7490fb8678c1ceccd91ee

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo_atrace.so

MD5 cba14ae588a50a51a71a708d94223430
SHA1 94079f9a6a8b7c871fdaf724f1d5a424c8446d54
SHA256 21d9e7a1a192c10d89a110e0950b121b931649b7e676d02864eb6eaa99b2f057
SHA512 335b2968b3cbd2bb36b61f1234d0f8dfd971f7e5bc386cff5d29ab872aa4da8dd3192717df6ed47390df038fdf24d492cc14d5d8395a56ffc9dcf8b281b87d9c

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo_build.so

MD5 34ecbfb7f64b1eb828f710a8a0c5f8a4
SHA1 e3563bb92409d837537a62f981a5d2866b9d5c84
SHA256 fee251137ea0db03b6e7524ed194088c47910e4b05b05897371df4cc5cfded1a
SHA512 b6e07549d805eb87f7bfd281d621c430f011438317f93044007a5a4716208f4cbaef660df473a859905c302bfc6ada389d6e7552d4da905fc9e3d375c9a4c6f2

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo_fb.so

MD5 e11367038b25e60796022892729ed18e
SHA1 ca3c1dd4c335e20f157f7e098930eee8215b548b
SHA256 f5ebe5b7ad257fa47b40bd9fe2c15c36df2a0ef6d566c782ed9b942670bf0d46
SHA512 daaeb60ce1b3229e0e089bd2794e2e10b3780660f145bdc8388a330b034a4d717887b634e022540f1baee8e84949127d6867dbbe913f5b0eb17ebb9b399ea612

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo_util.so

MD5 9653071fdb42af2302aed293c1a9b06d
SHA1 e8edbaf0791123cb55e39454250e9f6010620eda
SHA256 fe5d65434225350317d072d66a6753406f8c89da5fa9c9ee32ea4ddfe9172301
SHA512 1a75c6fe772e2a7dcc51eab1bcb6a703f0c1f114b61f7765623f38e7ee2c591110621856ee83cbd850231ac9390845224a5f17cd63d8c57ca9cc0512aa83275f

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo_sigmux.so

MD5 62bced8e7bfbf62b404ff43c8d518c7b
SHA1 c5afb8225f2605b3ef2923dd25d2f757c521126b
SHA256 f63740874ef8e1ce4f7de0b42c7b28165b50a30361b436d89ad6743e6d90413e
SHA512 7a8beca1a1d765176f9d74bdb486f8f8a3a6c4c9df1a4218f5335c6405672fa9cc8f7527174993265a5c237e7270c5751640468ff5edfe468b23c57ac2d12e28

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo_mmapbuf.so

MD5 962aa5577822ac7dd0b7f6b774ceaa82
SHA1 ff0a10b89cbada2d7eceea406d1d54541437318b
SHA256 7488d68d5faedc49e4910c68b61af220e76fc649cf246715946446bc38033623
SHA512 eed54c2b31382c8b27048a2e30b4436e7466694062931cadbbaf78427dd4702cf6fa3df698c2746560e4f4ee4254c5b2eff9eefa449847c63329108aa915e7d8

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo_fmt.so

MD5 2fe063abcc33f1178e34d5a40086326f
SHA1 cfb5a3c1948100dadad247718e809da04eb33993
SHA256 ba55d9c0bb946278098a279a1b4827bca80b7bbc9f07d84d98fbf83b8a797ed0
SHA512 24255344ce429e8d5f0446a8e9eebc671ca6c434190d5d171f191b6d38574c289cfb941bac23350b734e14884f70bac8ec46afde4290e2d7d8ca996a1932cf14

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo_plthooks.so

MD5 d2793c0167f621b37a599bba572756a3
SHA1 be9206bd407ffb9e1a707af1ce46422491c6d681
SHA256 4d6ecff951dfc617b16ce11328d0db8d64667f955e15506e5ee953e9a96ad4ec
SHA512 11a0c8471169e721f1d2e4cff99198300b75678608c1852f1ae69d0873afc193dae64d1f4a37d08da8b7ce979401cb9b50f05d400bdb401d646dd6370c1e499d

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo_linker.so

MD5 95cd7e221b423d8f5e2e297472c83dc4
SHA1 df0b2abd1bab3caa4dfd713a4cb772285032a2c4
SHA256 3eb9bae2df1c67c0284d5a0409483e05c7285490e8d4b358439481dd8f303458
SHA512 9d12385c24d486934b5072bffa01e262c698dfc0b5fe4f84b3259675ff4028511fd3b73934e796954c00edcf961f61e4e4e80829a8c4daa261bb52ceb57c478a

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo_systemcounters.so

MD5 fcdefa08b6c8be3221adeefd96938c92
SHA1 8e3206466243d06493096716309fb1c88749c640
SHA256 b340a464a9be8a543b122edaac190a1e2ee83a0399c6318869eebbc8bc2be2bf
SHA512 695774ec0b2c7eb214d47138d406783f5308f81a00fac7597bc767d82300cc4890d1ed58cb6fb1378539dcc27250fcd8281de2e0e2238fc4c67ea4a3aeb0d80d

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo_stacktrace.so

MD5 3fcf26a7b42477841136bfa4bd3ce83e
SHA1 9b09292e54fe973e05ee055cc10f917a60854a0e
SHA256 a39b9f0de8d314fef9026be37a3f6cc7ad12634c0cdd08e498b0f96661b91927
SHA512 7f61f13bc081efa770e0ef76662853d09518be073735d614b0297e374e96afe85f062b70923fac697d51244726f92caae921b96de948a40f547eecdb22266ca0

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo_threadmetadata.so

MD5 59745c63e1f631148daf982615af9923
SHA1 f299dbc36a4f7c1b44b99b05cf97140899f85aea
SHA256 a30520646c136aff9d230f1a8d93e072b5d9004fd8ec4053800618827cbedd75
SHA512 1f677856805688f0aa077c936705f5e9f26029a76c5e6fe8dbb0fbf03084c375b08b0342f0396818ec4039bf4055910159d69dc71b6a1658565e63706e89bf5b

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo_multi_buffer_logger.so

MD5 e4f82f90d8eea150eec751f9d0cd0a8b
SHA1 050b2a2424cac5100bc99968858029ed1427d3f4
SHA256 5b365219161471be3ef155fc20f2d0bffcc239225eeb5ff27dc4d6663aa87ae0
SHA512 948477443c16c48132e9d08f291a55f7a0d285654f8f3393b915dcfd4b6fedb261ecc43728051c571db68a8ed85d12fe21f4339252eb76f4044177d52223088c

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo_counters.so

MD5 39c56f27593165b17aed015baa9833c6
SHA1 c8e85b0e17bf39e905d3311ddc296429721caff7
SHA256 131948869bcb693511cd487ff87dd3e5fcd1cfdb69c3dc8767a9d89a1642c78a
SHA512 7512136c1ad282a2d8a87cc5f797758cc4c0008c25f3a26bc07f9eaacfbf90ab5a4dcec690eaa4d891fca512e569fc4b76c7350fdb614a4cfd659a7e8625eac4

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo_mmapbuf_buffer.so

MD5 93efa0b57d0a608a99a06c2e487f9e69
SHA1 f597cb533c8c2d9564b886586109c7b237dd1e43
SHA256 b1d29ff3cf332bd5b33717943985f37b40e62c5f2e756969982eb53ac10c2611
SHA512 3ff6fefb85d275022a70d6e29678fc45b6ff99475240ff49132e337f176e98d4edeb15f3bcb470c25554b970f17cabe02623c53aa108d5d1f1ec5f1bdc3cbc94

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo_mmapbuf_buffer_jni.so

MD5 396899cff1e9ef46dc1ffce853051bf7
SHA1 a5e9eea3cf878d8c0d04f01f31338f225f94a797
SHA256 782be1a5c070fdd2d5e0171c107dfd1f14e0fe240cc6591c4cdcfd2eff40ac50
SHA512 80c02e4565f61f88ec86c12d1e94ecca32d45e48ce18b26a92c7436e0898d69f0562944e7bbe2ad89113d893d8173e2c00bf3520ca2408fac766228f5105d62e

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo_jmulti_buffer_logger.so

MD5 dea5fc9ab05864c89c7b9e50410d2664
SHA1 7e3568e2acc4b31ad7706fc38008df055769aff9
SHA256 87e5ee6c5e3c3f18b612a4bb85ba70a68a2900243b24c4f4f92912ed18d3c9f4
SHA512 3fa15be9440a9471a702d9190fb90cd5b70873a3c806b9ae9e0d42c2f2747bec684f82a1f0fc11610ac1a9aea839e88d7e757783bae66911be32d106e9a264e5

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofilo_logger.so

MD5 e3da014656068088abdcbed9c909edfd
SHA1 48e0c270bb89cdef233a171c41b1a2319696b389
SHA256 c6f9ebfb0a56d0b4c7a8e902979267e450171908dd6ffd301ab471d5d02abf49
SHA512 5df76df9b4caa4d1505f14ba00dafe2a730f0b37992c272e39f5c53b5505f53987e58433e4a6a0def4afc03b31758371841886daa7e33b7a433fce321e204fc6

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libprofiloextapi.so

MD5 e5c09191ae8a6151a958d0003808801f
SHA1 6e49c81ddd45272b6ad69133c08c2253e1c44272
SHA256 a5a4436ec4931d758933b2efd07c11e010297639ddefe812e30bdc41d059c265
SHA512 400e2040717d9af07a8312563db4fe3816cb22fef0d795090e9a9ad2f7d58571a082fa581fe903930b3e296eefd8d0d55dc4251f007793564065f0133afe3d78

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libminscompiler-jni.so

MD5 65a9be7943d9168fde02a194493fd871
SHA1 320e9c4c9249c039e4f597e36dfdbccbdc3b352e
SHA256 04d2f48988ae0199f14e34f64309849ff9e5cf06eb533c1337b3a7940abaece9
SHA512 7930a7970a33523d3ecc463af51bc524c6e2b7a9c5c0628736c2ffe7f154096031ed344397c21059b9813ebb39e45111c7f0c8704da4f38da246a7eab7b3163b

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libglog.so

MD5 b0014b1faa696ee2e438bade6c1438a9
SHA1 e16854bd1ed4d3ebb199294791a7e6de47b94536
SHA256 242270fa61881a3008d00334bc527040e8948457419a10b1ddd6594a29e10ec5
SHA512 209096736246c3adde0d47830ff68e911ff8672ccaf6f3e5fdfeb216792498035f9b8082467416e198e27bf35791affbd905d01c63ad6dcb9924a5f3764bd89f

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libhiddenapis2.so

MD5 e93aead2b8cd9a7d78676cf132f4fb9e
SHA1 d42f07b15b3dc5d1a12e57aa61f065eb9460159f
SHA256 41f0445b09fe0d3c628417ab676f0ff4fcd5e7530709aeb2e858254e9f5af053
SHA512 a83e47f1f7710f5fc48ed4fd10ca917e65a2559d08968c13c283904ad5459b5040f596df8a90a06b14b2d30d463979ce2acb4557e24f2e0a44e120dddec191a6

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libar-bundle1.so

MD5 f5c42640bedbcaa58f457f687fd37453
SHA1 b8c14a7096e35b0010875cafbf7db66c21fadb39
SHA256 751f5408bac5582886c4f4013eeaf44f94896a58c32f68c3fcf799ea2ce54f7b
SHA512 742b4b500bdbe6c0bf05f0bfb50e4b53abcf217187b7e0c05b076eb6ab773752d7f290fe02fc74086148c73e43437d114b3d30d4ace7be61484f48ebd043a7f6

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libar-bundle2.so

MD5 8697116c07d33b2f9cc47b2bdf93dc05
SHA1 3275c0667841aee09e931e3aaba076c1a5f882c0
SHA256 6c2754936fe7c138bc2d5c6c30b2fa80af2355af2a0a3500d7f63d472ec58b16
SHA512 d839604ccdb4e67c9f60b5a4089c6c21a2ac4cc6e02c5e3d20f648430ce3e27fca669722c34391508ea36beb940decf2b2bb13074b3e4753ff9e5bc8ccaea67c

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libar-bundle3.so

MD5 63e584e87056b7001611f9886d4076ac
SHA1 5ef54f69eb73974f2966bfdcb2710641fb4fe42e
SHA256 214d30ef0d2514dfd655503e8bfafadbd3c9e9b258ab8c0105d645a6ab340af3
SHA512 6054bf9e0e7a96d9c1dbcfdf0364bb3d455656cfe96477fcd43869bb4e040deae79644e72adbfb02629765ab90a25beee1be4dd9f55cdd3b4cf0059b29bc776b

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libar-bundle4.so

MD5 4a6e12d6c18d393f3a2d8340e4ff0088
SHA1 a5b06df7364b56df969ec0790cff1614c485b33c
SHA256 2e8948f20947ce5e90e5f7a7b66cade0311fdfbd4e7e6ecbf767ffae5d47facc
SHA512 450e881d4c7cc0729d29d56df64d90ac2f0ce790ed0bc189186c8cca61873f767d60b06ff33b574e4f18ee6c68bd3ceaeef3705b9a583a0e519b71138038bee2

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libar-bundle5.so

MD5 4314a36a933bfa164dddcfebc9fd928f
SHA1 bb5cf7d05869600b16fa287465ce37b656b31668
SHA256 10daa430536ab45d2ec3a25e88b25add58779c99f242e369eb26e85c216b1098
SHA512 4ef1040a80dbafb719012a5f30a0699e9713db26dc7f1d95319d85a4c1fbd3495670a9587d610bb96c451ecc1634994ffe8fd1d6744683642560b911aacfdb94

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libfbjni_kt.so

MD5 5bf97c49dc6938dd7556bb9fe03751d6
SHA1 078c5c56bc38142feb411d97c25a790d63ab3856
SHA256 3d70348c87403718a48c9dc40a317445e934b2c473bfc744689436f32ee15f32
SHA512 1b525bff39538c82fb60e108ec58fd62de5497071ff83f6d2a4e51cee92eab9f518a1c470399d0f43b726fc03279eb62b7115ce2f725fe1c0bbafe23e43339a3

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libfbsofterror.so

MD5 d9556e763b7faaec753a514024875006
SHA1 15da69b4a22cda18157b4522fff2426e565751d1
SHA256 643fa06a7170a4f8eed92d67b56d4f1716d13380eb55f9444d15c22a2c6427ab
SHA512 a70c7653e269dfb2fe6062faeceba8b2a7385aaa83ee2e1c7f34e1201c1358af54b422b5534bd5b50b4582e53c709998426bb7c0032e717b4ad44900034508ab

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libgraphicsengine-arengineservices-whatsappservicehost-native.so

MD5 252d50e7b1c6d97d39e1ae8332dd69a4
SHA1 37125ecd606d35fb586c82b6d3092acbf2553ddb
SHA256 cc48876f2c1e3f2ddb00ba4e5ad4f40ad594d3a7897ca077f30d7f502019f84f
SHA512 082d1343e1dbb2f0e9f667483ef0fffc93aec40f6f1cf3a37d70d9139f820083bffbc04c60ac9055bb108ba29a05b89f0d0da91efb9674678248b46e5565c4d9

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libpytorch.so

MD5 73cc78df78ee3954ba649c228e8c1f8f
SHA1 a1b8b2a768d2137eda147a50e3fd4d95543380d2
SHA256 2686c3d7c14173c93764775b3498ab8949f873f157d136476bcba62cafda3b81
SHA512 7071de8de143b458d1ed74c9ad17888f17426908de99687d00ce089f2fa4283b1be400f0820d0ee9a89aa6690ade6b019e2d079603099d95638f8c0dfc9d31ca

/data/data/com.yowhatsapp/files/decompressed/libs.spo/libtorch-code-gen.so

MD5 3baa0274b451175113972bc25524cb22
SHA1 2579589a9e09b55d53f2dbddd1d0e39d7009bd4e
SHA256 9471c7c9d84b477371ff73ef166d279efb69cdb5b3dc539c5c116cf8ff188156
SHA512 f1c05e92ae5480b36ed0e2bb8f20df7421149ea739ff282189bd5a0e468eacf026c5fa5bba75adbb6792e9c89a7a1e81c94a6fbbb6ab8f210195c02fdd2af7cd

/data/data/com.yowhatsapp/lib-main/dso_state

MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

/data/data/com.yowhatsapp/files/decompressed/libs.spo/.superpack_version

MD5 fd65845e4d00d23fa63e7327409d308e
SHA1 2363ee94dc34033ca399a1f54fda4740354544dd
SHA256 5e8c6ed42e2741438d69efbf36671c80c05a88a0250181727a350e30bade6bfe
SHA512 fdeff9a9ecc9fe4bba13d1c897b918bf63ac97025b2d2392f6e5fc18b0175cc8b201b2be646ef6aa1dbd30077537c355cfab08f6d88685adef6e3397ddfa2913

/data/data/com.yowhatsapp/lib-main/dso_deps

MD5 4f0873aa7a1555e004ef9a8163b03f67
SHA1 5edc7883f6a382cbb510b1d690357a2ed6f444e5
SHA256 67705f9674047dd6aa52ff539a6294c1e72601d343c8ba3f8a4ac4a20ee9f190
SHA512 103539f18cfea4ebb163176e62a478e1ef866b409c291b736d8eb0b41b65c3d23ca56ada6364c37586ce08378473f6a4f4f74b5169ac41bf0218e69341fb572e

/data/data/com.yowhatsapp/lib-main/dso_manifest

MD5 c06857e9ea338f3f3a24bb78f8fbdf6f
SHA1 c5a0a2529d2deb60fec041b4fbd722a2ebe31702
SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
SHA512 29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

/data/data/com.yowhatsapp/lib-main/dso_state

MD5 55a54008ad1ba589aa210d2629c1df41
SHA1 bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA512 7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339