Skip to content

Zalo Patch v0.4.151 (vC155)

Choose a tag to compare

@amarinne amarinne released this 15 Aug 23:18

Initial public release of Zalo Patch.

Requirements

  • Rooted Android device
  • LSPosed with Zalo selected in the module scope
  • Zalo 26.08.01 (versionCode 260801903)

Highlights

  • Navigation, inbox, chat, and Me-screen cleanup
  • Promotional notification filtering and local notification history
  • Analytics and advertising-service suppression
  • One-to-one call audio recording
  • Signed exact-artifact compatibility catalog with bundled offline fallback
  • English and Vietnamese settings UI

Verification

  • Unit-tested with the deterministic JVM suite
  • Static-verified against the signed release APK
  • Instrumented with 50 release-certificate-signed Android tests
  • Device-smoke-tested on Xiaomi 23127PN0CG, Android 16, Zalo 26.08.01
  • Device-verified for exact installed APK bytes and certificate, settings preservation, catalog/schema health, and 42 expected self-check rows with no failed or stale state

Known Limitations

  • Compatibility is exact-version only. Other Zalo builds fail soft until a matching signed catalog entry or bundled map exists.
  • The full visible-behavior matrix is incomplete. Call recording variants, reaction-row removal, Me cleanup, promo cancellation, ads/Zinstant behavior, backup/restore, diagnostic reporting, and remote-only hook activation do not all have current named device proof.
  • Remote catalog fetch, signature validation, cache write, and bundled shadow selection are device-verified; remote-only hooks inside Zalo are not device-verified.
  • Independent backup/restore proof for the release signing key was not completed before this release. Loss of that key would prevent updates over this APK.

Privacy

  • Diagnostic reports upload only after explicit user review and action.
  • Notification history stays in local app storage until exported or cleared.
  • Call recordings are stored on the device.

Integrity

  • APK SHA-256: bc41a8394e8bd4b33b0579033f1ce57ffc97c940267730eb5b96e66e3cc8fd70
  • Signing certificate SHA-256: 96a4240fa44a63a4a71738b2851064b97a2f500e07d42a26a190a783bbad65a9
  • Release build source: 15a3a5e74eba44d5743c64e2f54bff94a0c02825
  • Test-only follow-up: 906488c5b32b4ef5cdf9a917dbe287637e5e5a15