Errors

Reason
binary.Read: invalid type [2]uint16

General

  • Target

    YouTube.Vanced+.v18.28.33_DEBUGTEST.apk

  • Size

    150.6MB

  • MD5

    d000a06f3dd483da22ab0400e0b6191d

  • SHA1

    c70ea133558e8c67db6b33a3f8ff15bea5c1c9bb

  • SHA256

    cfb7880bee604a8b4edcf112add4f4b0c4c2aae213c0db8dbfa71075fc323cb2

  • SHA512

    d35a8d6046d7f8025f2faac91679142c7f988e14820ca675b953fc047b5e1911f768f38ed9be56d123f790208bb3142316e0cf2a83ad5ae5e278e116ae0f50e8

  • SSDEEP

    3145728:mhpSWkwdACOZDDvMAr/4B/O+00p7khyfIfFZ8yMdZZFy:apSEdNK7VUd9pDf+rfMPy

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 11 IoCs

Files

  • YouTube.Vanced+.v18.28.33_DEBUGTEST.apk
    .apk android arch:arm arch:x86 arch:x64 arch:arm64

    com.cuynu.android.youtube

    com.google.android.apps.youtube.app.application.Shell_SettingsActivity


  • 42_js_module_config.dat
    .js
  • CarroisGothicSC-Regular.ttf
  • ComingSoon-Regular.ttf
  • DancingScript-Regular.ttf
  • MonoSerif-Regular.ttf
  • YTSans-Medium.otf
  • account_link_button.eml_474e1bf816b1b9a
  • account_link_button_vm.eml_478c922f3ee5c181
  • ad_badge.eml_4b3966702053aa4e
  • adjustment_effect.binarypb
  • advanced_quality_sheet_content.eml-js_6e49502191a9a590
  • advanced_quality_sheet_content_controller_826907ce456133ad
    .js
  • android_builtin_effects_settings.binarypb
  • android_shorts_timeline_builtin_effects_settings.binarypb
  • animated_button_border.eml_74738dddb5c1c3a2
  • animated_checkbox.eml_c2e8dc306329e4dd
  • animated_like_icon.eml_304df680dc70f06c
  • animated_subscribe_button.eml_33b2131e34ac6ab7
  • audio_denoising_seanet_640ms_16khz_2022_06_27.f16.tflite.enc
  • audio_track_sheet_content.eml-js_d86c59040d24f8be
  • audio_track_sheet_content_controller_1f6789591190c87a
    .js
  • avatar.eml_65341d353753cd4b
  • avatar_with_ring.eml_46a23a7f658c8bf9
  • badge.eml_8731430172b34019
  • baseline.prof
  • baseline.profm
  • bell_inline_menu.eml_f5961bf9e73c78f7
  • bell_inline_menu_item.eml_4f0d01fa14cec4d1
  • bottom_sheet_header.eml_d054150d18f21cfb
  • bottom_sheet_list_option.eml_df19ad72130b7fca
  • button.eml_d58dc95c2ec4305f
  • caption_tracks.eml-js_2c6b18edc3fedbbc
  • caption_tracks_controller_88f4a7459ba9cd1e
    .js
  • captions_sheet_content.eml-js_6e1d8379fbb9ec10
  • captions_sheet_content_controller_3e370b1f54a4159e
    .js
  • cast_error_mapper_prod_container_manifest
    .js
  • channel_purchase_button.eml_b7a95f4595773448
  • clip_button.eml_1dfe4d61a543e1dd
  • com_google_android_gms_device_performance_package_metadata.binarypb
  • com_google_android_libraries_consentverifier_package_metadata.binarypb
  • com_google_android_libraries_mdi_sync_package_metadata.binarypb
  • com_google_android_libraries_notifications_package_metadata.binarypb
  • com_google_android_libraries_notifications_platform_package_metadata.binarypb
  • com_google_android_libraries_onegoogle_package_metadata.binarypb
  • com_google_android_libraries_performance_primes_package_metadata.binarypb
  • com_google_android_libraries_user_profile_photopicker_package_metadata.binarypb
  • com_youtube_mainapp_android_package_metadata.binarypb
  • comments_entry_point_button.eml_24fd6ee784cf6378
  • compact_channel_bar.eml_9493e83250cb36b4
  • compact_channel_bar_header.eml_1e5f60e5268f1769
  • compact_sponsor_button.eml_f56660455c248f24
  • compact_subscribe_button.eml_f9d0529bd52b7707
  • compact_video.eml_1435aef2da55426b
  • datapush_release_version.binarypb
  • decorated_avatar.eml_40d3639fd5e39e33
  • denoise_seanet_16khz_effect.binarypb
  • dislike_button.eml_b29c79eb18daea19
  • divider.eml_4ed211b67d4e7a61
  • download_button.eml_975bcce000632bac
  • download_icon.eml_7c7e49844a9527b2
  • download_icon_with_partial_playability.eml_a0b81527851a849
  • downloads_page_banner.eml_e4126b4c614e96ce
  • downloads_page_expand_button.eml_f99b8467348cdab2
  • downloads_page_smart_downloads_zero_state.eml_37da52ffe23642e8
  • downloads_thumbnail_overlay.eml_68e9c30f4cb546ca
  • drag_and_drop_shadow.eml_5978a3735c7c5975
  • dream_plasma_overlay_alpha.png
    .png
  • dream_time_blur_weights.png
    .png
  • embedded_filegroups_embedded_datapush_proto.dat
  • fragment_shader_compositor_es2.glsl
  • fragment_shader_hsl_es2.glsl
  • fragment_shader_lut_es2.glsl
  • fragment_shader_oetf_es3.glsl
  • fragment_shader_transformation_es2.glsl
  • fragment_shader_transformation_external_yuv_es3.glsl
  • fragment_shader_transformation_hdr_internal_es3.glsl
  • fragment_shader_transformation_sdr_external_es2.glsl
  • fragment_shader_transformation_sdr_internal_es2.glsl
  • fragment_shader_transformation_sdr_oetf_es2.glsl
  • frame_blurred.png
    .png
  • fullscreen_video_action_button.eml_5717b5cbf0540069
  • image_preview_supergraph.binarypb
  • info_card_teaser_overlay.eml-js_c32bc66945fa3c07
  • info_card_teaser_overlay_controller_cb5139a1eb2a9625
    .js
  • like_button.eml_af88841d0243dd15
  • listen_first_suggested_action_controller_9c719c21ee81fbdb
    .js
  • listen_first_suggested_action_v2.eml-js_54b3e4e982b9079e
  • live_ring.eml_5088dd5dbace52e6
  • lut_BEAM.png
    .png
  • lut_BEAM_2.png
    .png
  • lut_BLUSH.png
    .png
  • lut_CRUSH.png
    .png
  • lut_DAWN.png
    .png
  • lut_DOCUMENTARY.png
    .png
  • lut_GLAMOUR.png
    .png
  • lut_GLOW.png
    .png
  • lut_NOIR.png
    .png
  • lut_POP.png
    .png
  • lut_SILVERSCREEN.png
    .png
  • lut_SLATE.png
    .png
  • lut_SUPER8.png
    .png
  • mainapp_filegroup_datapush_manifest.dat
  • media_engine_audio_container_manifest
  • metadata.eml_8828b0a3677d4844
  • metadata_content.eml_71a7eb14f22aedce
  • modern_type_metadata_content.eml_23d456a91863ca02
  • notification_bell.eml_e916d6d8ebe2bd39
  • notification_dot.eml_f6061226d78da84
  • offline_status_indicator.eml_e12b1982ddcbb4dc
  • overflow_button.eml_3fecbb8841903bea
  • paid_content_overlay_controller_e606801cb8143dba
    .js
  • paid_content_overlay_v2.eml-js_332ca2917fbb1bc2
  • playback_quality_list.eml_1eb541820602e4e7
  • playback_quality_picker.eml_1875401430af86f4
  • playback_quality_picker_preview.eml_e46f4d81db892c59
  • playback_speed_sheet_content.eml-js_b52aad3ad395f3a6
  • playback_speed_sheet_content_controller_98b17d579530092c
    .js
  • player_disclosure.eml_a7c106703e1d7492
  • playlist_add_to_option.eml-js_31d5245076274d11
  • playlist_add_to_option_controller_26b544e6995b6771
    .js
  • playlist_add_to_option_wrapper.eml-js_bcd5c38efa181ab4
  • qos_container_manifest
  • quality_sheet_footer.eml_4fcba2be862bbb77
  • quality_sheet_header.eml-js_42bedda0656c1c11
  • quality_sheet_header_controller_8e879af8c26e1cc9
    .js
  • query_engine_container_manifest
  • query_engine_container_manifest.dat
  • quick_quality_sheet_content.eml-js_a3cb1c030f3ae62e
  • quick_quality_sheet_content_controller_6a4deaafd01171d8
    .js
  • radio_button.eml_12a2d2cd0e729a36
  • radio_picker.eml_33017ca16ecd379b
  • radio_picker_option.eml_75549fe98d9dbc39
  • root_1b0000ce6c026a55
    .js
  • save_to_playlist_button.eml_a7efe2fa236163c7
  • save_to_playlist_button_vm.eml_c05fcbcd822753b
  • segmented_like_dislike_button.eml_c5458e1e16d58ffe
  • segmented_like_dislike_button_vm.eml_4acbcd1bb01d9cda
  • selfiesegmentation-full.tflite
  • selfiesegmentation-lite.tflite
  • silver_screen_grain.png
    .png
  • skia_sticker_effect.binarypb
  • snackbar.eml_5b83d28ff34c4a6e
  • status_dot.eml_ee2a0ee00cd12e25
  • stories_ring.eml_4d5b2f48c01808bf
  • subscribe_button.eml_30d8402b7f9283a8
  • subscribe_menu_button.eml_8c94b5ab306ec293
  • subscribe_menu_notifications.eml_2ece2c68f2052d2f
  • subscribed_icon.eml_74c56cd29f2d69f9
  • suggested_action.eml_5ac64c48227702b
  • super8_frame.png
    .png
  • super8_grain.png
    .png
  • switch_button.eml_cdd8f78a85f99852
  • sy0_1b0000ce6c026a55
    .js
  • sy1_1b0000ce6c026a55
  • sy2_1b0000ce6c026a55
  • sy3_1b0000ce6c026a55
    .js
  • sy4_1b0000ce6c026a55
    .js
  • sy5_1b0000ce6c026a55
    .js
  • sy6_1b0000ce6c026a55
    .js
  • sy7_1b0000ce6c026a55
    .js
  • sy8_1b0000ce6c026a55
    .js
  • sy9_1b0000ce6c026a55
    .js
  • sya_1b0000ce6c026a55
  • syb_1b0000ce6c026a55
    .js
  • syc_1b0000ce6c026a55
  • syd_1b0000ce6c026a55
  • sye_1b0000ce6c026a55
  • syf_1b0000ce6c026a55
    .js
  • syg_1b0000ce6c026a55
    .js
  • syh_1b0000ce6c026a55
    .js
  • syi_1b0000ce6c026a55
  • syj_1b0000ce6c026a55
  • thumbnail.eml_cc8fb16c22d404bf
  • timely_action.eml-js_bb11887fb65c936e
  • timely_action_controller_70f424a0b32c6f65
    .js
  • timely_action_delegate_64348aa36ccbd083
  • timely_actions_overlay.eml-js_59d80b3948ceefeb
  • timely_actions_overlay_controller_d62d941682053711
    .js
  • toggle_button.eml_99f75376531a0bc
  • toggle_button_inner.eml_832bc85aa42ad7aa
  • triptych_thumbnail.eml_a2f990fa1bf5699
  • verified_badge.eml_20900a61e1491362
  • vertex_shader_transformation_es2.glsl
  • vertex_shader_transformation_es3.glsl
  • video_action_bar.eml_7019e5842c5ec868
  • video_action_button.eml_a5b662b6dd3366fd
  • video_action_button_pill.eml_482e6e6fbdea104a
  • video_action_toggle_button.eml_46d69c94febf0cf5
  • video_badge.eml_63bfaf6989a40f98
  • video_metadata.eml_2c5903ad8bac0171
  • video_subtitle.eml_11a913a357dbf38d
  • vignette.png
    .png
  • xeno_text_sticker.binarypb
  • youtube_activity_container_manifest.dat
  • youtube_mobile_master_cert_2020_public_key
  • youtube_mobile_master_cert_2021_public_key
  • youtube_mobile_master_cert_2022_public_key
  • youtube_mobile_master_cert_2023_public_key
  • youtube_prod_container_manifest.dat
  • youtube_sans.xml
    .xml
  • youtube_sans_black.xml
    .xml
  • youtube_sans_bold.xml
    .xml
  • youtube_sans_bold_font.ttf
  • youtube_sans_extrabold.xml
    .xml
  • youtube_sans_light.xml
    .xml
  • youtube_sans_medium.xml
    .xml
  • youtube_sans_semibold.xml
    .xml
  • youtube_singleton_account_container_manifest.dat

Android Permissions

YouTube.Vanced+.v18.28.33_DEBUGTEST.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MANAGE_DOCUMENTS

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

com.cuynu.android.youtube_com.google.android.providers.gsf.permission.READ_GSERVICES

com.cuynu.android.youtube_com.google.android.c2dm.permission.RECEIVE

android.permission.WAKE_LOCK

android.permission.NFC

android.permission.CAMERA

android.permission.VIBRATE

com.cuynu.android.youtube_com.google.android.gms.permission.AD_ID_NOTIFICATION

com.cuynu.android.youtube_com.google.android.gms.permission.AD_ID

com.cuynu.android.youtube.permission.C2D_MESSAGE

android.permission.GET_PACKAGE_SIZE

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.RUN_USER_INITIATED_JOBS

android.permission.USE_FINGERPRINT

android.permission.USE_BIOMETRIC

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_CONTACTS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.HIGH_SAMPLING_RATE_SENSORS

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

com.cuynu.android.youtube.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION