Files signed by WhatsApp, Inc

WhatsApp, Inc

WhatsApp, Inc is a digital signature publisher name observed in ThreatInfo records. This page groups 30 signed files and shows whether those files are currently classified as clean, undefined, or detected.

A digital signature can help identify a publisher, but it does not always prove that a file is safe. Certificates may be abused, stolen, expired, or attached to modified installers, so the file hash and detection status should be checked together.

Detection signal

Detected files use this signature name

At least one file signed as WhatsApp, Inc is detected by GridinSoft. Review the hashes below and scan the device if one of these files is present.

Download GridinSoft scanner
update.exe 84dfe03da1815b5c44ff8529c85c2fdc Spy.Agent
update.exe 7898256df0072d9ac22d5d11495ce4b3 Possible Threat
WhatsApp.exe 1c2a788d0f07352e9e3ff1410e147fa7 Spy.Agent
wavoip.node e1f83d6f4c63b946070923a519e3c160 Under review
focus-assist.node 31efa47c068d685b5bbeeae52cdb93c7 Under review
ql-win32.node 64fb7067e6841252b7bbe406c95cad19 Under review
libEGL.dll 923acc540390b4913ad53e6b4339d409 Under review
binding.node b8df1e8f36d59bae08829e691403cc1c Under review
windows-quiet-hours.node 1f18a697f3b09e2cb2e37940ad9fe05a Under review
notificationstate.node fdceebb36a12f5fa8f286479606b1765 Under review
binding.node 246f88fc49573544a02c9387ecbd9b72 Under review
libGLESv2.dll bba673350541975db51a162226df76bd Under review
node-shared-mem.node 001067a221c4e12d69ace7c647197dad Under review
windows-focus-assist.node 0734404ae646e7f2f1b82837572264fb Under review
wavoip.node 558393baae10dee36d574994755f5a3e Under review
node-quarantine.node e71c76feeea89ba2f99e2d67c68d2a03 Under review
windows-notification-state.nod 42143aa8f95bcd672a2db55e14c74921 Under review
libEGL.dll 7c63798a367c840120e1efb1a6cbf38c Under review
notificationstate.node a53912402990af53d675b56de1a34545 Under review
ql-win32.node ab22ef59f52e3cecf4bf290674c31332 Under review
node_shared_mem.node ea0a809412d9a9b2f2a2ffa0d8d74bd1 Under review
NativeExtension.node 61346e36aeae54f5ece2563ac17269cc Under review
quiethours.node 3ad103f06846603a2c25a5d2a2fcff55 Under review
squirrel.exe 244268303bba819381f312f982e6a26b Spy.Agent
quiethours.node e7febda6b849b0de5523ca569cdad75d Under review
NativeExtension.node 29e509395b9c79508947d41f7edf837b Under review
keytar.node 7a35891aab111273c80700b7eb09f1ea Under review
binding.node 405cb0af5b0f3765d5f5ccab787fc712 Under review
focus-assist.node 4cc24867771362d41bb0adcd15abad06 Under review
ffmpeg.dll 638d83be053f8456b34dfe52ebab1a06 Under review

Certificate review summary

Do not trust this signature name by itself

ThreatInfo found detected files associated with WhatsApp, Inc. A matching signature name should be checked together with the file hash, detection verdict, and source path.

Recommended checks

  • Open any matching file report and compare the MD5 hash.
  • Confirm the file path and download source before trusting the binary.
  • Run a GridinSoft scan if a detected file from this list is present.