The context is that the program I analyzed is the official WhatsApp installer, unmodified, downloaded from https://www.whatsapp.com/download?lang=es . Which means the WhatsApp supply chain is infected. Or WhatsApp was hacked.