Malware Analysis Report

2025-01-02 07:54

Sample ID 240509-zn91haeb21
Target revanced.net_revanced_youtube_v19.11.43_cli4.6.0_p4.8.0.14.apk
SHA256 e9221bfe9c4091e2af6bd8179a4b8c477c21a493951308579328c02ddd2428c4
Tags
privateloader discovery evasion execution impact persistence
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

e9221bfe9c4091e2af6bd8179a4b8c477c21a493951308579328c02ddd2428c4

Threat Level: Known bad

The file revanced.net_revanced_youtube_v19.11.43_cli4.6.0_p4.8.0.14.apk was found to be: Known bad.

Malicious Activity Summary

privateloader discovery evasion execution impact persistence

Privateloader family

Loads dropped Dex/Jar

Queries information about running processes on the device

Queries the mobile country code (MCC)

Requests dangerous framework permissions

Acquires the wake lock

Checks if the internet connection is available

Schedules tasks to execute at a specified time

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-09 20:54

Signatures

Privateloader family

privateloader

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker. android.permission.READ_MEDIA_VISUAL_USER_SELECTED N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read image files from external storage. android.permission.READ_MEDIA_IMAGES N/A N/A
Allows an application to read video files from external storage. android.permission.READ_MEDIA_VIDEO N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-09 20:53

Reported

2024-05-09 21:01

Platform

android-33-x64-arm64-20240508.1-en

Max time kernel

150s

Max time network

168s

Command Line

app.revanced.android.youtube

Signatures

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /system_ext/framework/androidx.window.extensions.jar N/A N/A
N/A /system_ext/framework/androidx.window.extensions.jar N/A N/A
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A
N/A /system_ext/framework/androidx.window.sidecar.jar N/A N/A
N/A /data/user/0/app.revanced.android.youtube/cache/1708042440713.jar N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

app.revanced.android.youtube

Network

Country Destination Domain Proto
GB 172.217.16.234:443 udp
GB 142.250.187.196:443 udp
GB 172.217.16.234:443 tcp
BE 173.194.76.188:5228 tcp
GB 216.58.213.4:443 tcp
N/A 224.0.0.251:5353 udp
GB 142.250.187.196:443 udp
US 1.1.1.1:53 gmscompliance-pa.googleapis.com udp
GB 172.217.16.234:443 gmscompliance-pa.googleapis.com tcp
US 1.1.1.1:53 digitalassetlinks.googleapis.com udp
GB 172.217.169.74:443 digitalassetlinks.googleapis.com tcp
GB 172.217.16.227:443 tcp
US 1.1.1.1:53 www.youtube.com udp
GB 142.250.187.196:443 udp
US 162.159.61.3:443 tcp
US 162.159.61.3:443 tcp
US 162.159.61.3:443 udp
GB 172.217.16.227:443 tcp
GB 172.217.16.227:443 udp
GB 142.250.178.4:443 tcp

Files

/system_ext/framework/androidx.window.extensions.jar

MD5 3056e1bdb7d4e19789d0319eff484bd0
SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658

/system_ext/framework/androidx.window.sidecar.jar

MD5 29469324e59dfcc052f24b5af4e7b2c4
SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2

/data/data/app.revanced.android.youtube/files/tiktok/103243289

MD5 c50abd0cadaba0ce009cbcdbd9b3a51c
SHA1 e1e174ee069ccda00ae8e1798341adec5f0b92ce
SHA256 29d131a5cb76c5b00d437d1ed603f8e75030700b032e6abdaea94ba9af18c46e
SHA512 be6ecb5f42c617beb5d8ae923881c8c8487d78c6dd4395a83f669629082cf02b5bc601ad505bc159212881b1cdc6dcd09e0bc15388d63ab28f36e0a7ad7aaea4

/data/data/app.revanced.android.youtube/files/103795117

MD5 ff33aad14d1751928e98ecff47f93135
SHA1 ee30e12b50a407498aac8055160bdd25d4ebc5d0
SHA256 6362233b4a4b2500c9b3d9a2641c64942090e0ff964540b9c9c4a1a66339df92
SHA512 cc911ba9dfde802b9ca2bdc0471f71fdfbe81b2493ac33b363bcaec18cc8c2590aa8b67fc032f5b34ea3889cb081928c7f2b4053ba66b10da53ddf997a63edb0

/data/data/app.revanced.android.youtube/databases/identity.db-journal

MD5 b99dfe1353b6cf8393c4ddc52006cab3
SHA1 1a183c61e2f340abe57a1a668939ca0c83f13f1f
SHA256 b8af339d802e98930665a5ea8969cef6aaefd731a96709c8583f5e6aeefa4d44
SHA512 12edd8a763cd524dca605b341fd984335ca4957a0c72fb541a9aca61aff83d7b74039aca855294a58a674367570e98c96863360c829a5622d1385381d8bb2e47

/data/data/app.revanced.android.youtube/no_backup/androidx.work.workdb-journal

MD5 014b25326eff53c1093d47a492811a78
SHA1 5a0d000e575564578fd4280893f1e11368116fce
SHA256 7731ec4116c9535e5f2ba30deccaee50d426b61b63c564b0add2acbe6a940763
SHA512 5e610911700202b9c24d9a6ca8c3c0e2cfb67b8a22624a3541b60c77e318897ffdb98cd0a0b92a3ad07a79103dd7af45482d7ff2305b84c5484f515c33891c51

/data/data/app.revanced.android.youtube/databases/identity.db

MD5 44cd4a19c374a6bfc620465af482a725
SHA1 6db3a738efc512df44ad4e0f73fb0c2800d701c6
SHA256 683fe3b90e961e76c9769bfa6a7cfaf7e81f3ce88e16d69bf9a7bceefaf909eb
SHA512 a9b695444737072f43415b02db8a7702ce8a1c1dde3cd2b3a7afc5ba5a22e5d2ff844d38b49931c6c3fbe7b0f4dfa3bab14d2af5c15f671fd6bdc17b7d2bd60a

/data/data/app.revanced.android.youtube/no_backup/androidx.work.workdb

MD5 72a99560cfcd061c6e651db49f6d7b75
SHA1 7e7eac63958c39bcdf923adf15c91a9d5c2b5c81
SHA256 039107805c7b2107808f36b4c2635c6c72d2a6f4e0e23ba412112b47983464f4
SHA512 ef76103019fd30956600623831270b9b13290614a547dd1bfcb400ce834c4d55b11731fab15c9b1bb0583a19f92e734890fc5d417c4f8d826997c72f526bb4ec

/data/data/app.revanced.android.youtube/files/net/shared/delayed_event.pb.tmp

MD5 a004f5605a9a75880611e5e713c694cd
SHA1 5072d54b7f4780c9e6a49beb3f852c191091d49c
SHA256 f8bf02b74055ba2b2386a34bca9a3c1e96435781363d7fd461fdb98d201b005f
SHA512 c1fd50d94960a5098a734899770ec5aca63d1c6208032d9046acd14aae7123befdd048366af0cd0f40520e4eabd323e6d1e55f8a8aaa3bccc476239a83effc5f

/data/data/app.revanced.android.youtube/files/media/shared/media.pb.tmp

MD5 cd86b405bbe681ca983587a331df6810
SHA1 22435ce0ab6cc76688f64be801bb4fab84c23353
SHA256 ffd2b38b328fe2e10d03587fb8dad5dd902305255aa5d7ec9e6a56ea6c0bdc62
SHA512 f7170de951bb964cf48525929e971e52e988b78c37c251480ee3d117c921b646167e3f8f2de2e0af363988edd3d62f06a33bca5595608fc67842db6b9cb756e7

/data/data/app.revanced.android.youtube/files/media/shared/media.pb.tmp

MD5 1de963e9316eb2ffce92c97b5a35a754
SHA1 459c2bedcf42b3db0eaacf6f6b485a3340a5b131
SHA256 0c95dda7a8493fccac967455b376bfc56f300ad9fdadf920a9bfddcdfe789e71
SHA512 6e9c480f8def00ae23db8379250a7a366c5cbe80385b19120139aff9271538718bd5525190242073ccae16101ff6a61fe74f228be19a8f0b1f7ade18f92c0181

/data/data/app.revanced.android.youtube/databases/identity.db-journal

MD5 412a8ad187307fc12c60300e2dcbc8df
SHA1 05fbc520566bd2822032bd7b762761b8cf2bf929
SHA256 63fe6984f0c7c201f691f8b0c24519596ff5149178638b5050be0c2144c409e5
SHA512 f44dc73820990e49438ff3774da5e837b752014dac4c61c1900c97841a2ebb8683ae38b663b38a99b631a4662cf7f9e45facda2b432a5e52f508a177b0b54042

/data/data/app.revanced.android.youtube/no_backup/androidx.work.workdb-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/app.revanced.android.youtube/no_backup/androidx.work.workdb-wal

MD5 f0e0446461bbfa9e3cd333ffc0bd3e65
SHA1 e1d7688f8a0d4f98d1fca2f41b34a29e371d6068
SHA256 000fad66b619a378039738892ee3654a8d2e750aea48d6c683f71a9aa9ae3356
SHA512 72f2714980f1d76669e7ca31ed15c5a1535955b9f3b7bd30b0a354d66e30815056b2f8e0d467efb2e88d77d5b180dcb282ecb28bff40d98764cfa259f9a52c7f

/data/data/app.revanced.android.youtube/databases/identity.db-journal

MD5 17bd5dfd349b827a7eba1348bd5b5c85
SHA1 b4571af5461c5c0698ba748c46842660ad0e083e
SHA256 9693e3cdc25db1b6e45ecd4c701f6d36b68ca8b665c1bf4b50341da80ab5d802
SHA512 029aea31b01282582d61911e93e8548fc72bef695583f79f1860b56c2d1c4b1eedacf363fe92aad30a95b527b9ab331beede1912127c4295143d67fb285a020a

/data/data/app.revanced.android.youtube/files/AccountData.pb.tmp

MD5 672ac439e96b2de7415b6f97ab9ff02d
SHA1 242a384b42f6d7ac0871925cc69b5e00e59d5a58
SHA256 3d35849024520f6d966a73d9dc5defbd6528149bbef7d3579eef5d67e351f253
SHA512 148f76371a752c4dee90531f8c3e3c5a72e803bfc05f9cbb81217d178fc141e3c102163a009705f7934b0ab8b445ebfc31dced02d6ec691cebb8bdd13f051ec6

/data/data/app.revanced.android.youtube/files/AccountSyncData.pb.tmp

MD5 167516df1ab4382f20721900512c1d0d
SHA1 e751452205e4a32d85c1b7a9bf1c90aac0bf6692
SHA256 3cdfed87aa4b81ac370190e29fc1bf71fd151f470628582eaa6ed42d10a2bcf4
SHA512 2133b277a376858a7db44f99b25b2b3bd4d5cd986ea3343b5026135a9536e7c251ae5abe4f6063c428d1c0ef941ff3c01ce92698e7aad42544bbd49461261689

/data/data/app.revanced.android.youtube/no_backup/androidx.work.workdb-wal

MD5 72713af2c4c94deef4b7b7f7b4d00ac4
SHA1 47928a6f17cefe32b5a12869e7b3493a11ec0fc4
SHA256 a91e6b02c7b321d5ab104e4b05d29342bae3ed8be7ee13460b2dd56c1225608b
SHA512 69825fd288773c2cbeeab886916fbffdb307d5df0f895be82ef2db9e63599a06a8966a5963476bffccb4b8153ea64aa5d453d00a53dda94aff31b59e516822b8

/data/data/app.revanced.android.youtube/files/AccountSyncData.pb.tmp

MD5 7d63690e79e31cc0cb85a4faa8d0ae13
SHA1 24d322b69bceb96a37804cc98d363da9fc8164a9
SHA256 2c0bd06dd893add1b45816b7ab64a00427f436fb512c18c477c3f339e64c54b3
SHA512 78d6cffc7c9b72589656310e8d07148114214d3d1418105fec8d48a3e759d81e30953a6e453464bed954b05e870eee9412db4079994cd3ea2a534857019b8af6

/data/data/app.revanced.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal

MD5 26e5cb159cf9bef498571eec8c49f72b
SHA1 b0a94a30213655e5fdf97e54b5ef355e4c084ac5
SHA256 c2698c71b5973e8f0843fa60624de7ce3f57c59e93059d6143c3adadef1f5a8d
SHA512 19b73a9402335ead402a6a43d155a42e5cb024c693298271838ec52de092696e065758ca1c9157bbfbdbca5e0d348ba0b2ef2a074d5c64066a7eafe9f9bcea4b

/data/data/app.revanced.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore

MD5 4fe4a39ffe17b7cffa61aa2c122dddf2
SHA1 83c6c99f90a1db22ab87f11b72227fe90697b6b8
SHA256 25e936775f52ea033d510e5a827113df8214f86edcca10a3918579a03b1fa55d
SHA512 c3740fe4b8c51493bdb38332d21b56be7bdbefc7df3588b818cc50e0e8d0195442bc89216ec33ac3af8afd4e042e6769a7b8a7039f82fb50b60dbfd608167089

/data/data/app.revanced.android.youtube/files/AccountData.pb.tmp

MD5 b837c104826bf6a378b7ae8d1eab34fa
SHA1 5b314bfedbb8c3cdcb3659faf989f572c09929c7
SHA256 55ea3eb3c8d84d3be1599c9514f47ba2d1e9b29d97d2337fb7240b1d96322ec3
SHA512 937768d861981acc1c7811adc881e18b61995ae3549bf818c2be924e9c957d6a617f8b6aad0a2b99b02fdc031048a400e33d936e7be3ac9c0f19d87c06824772

/data/data/app.revanced.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal

MD5 5aaec91c4e67ff5050fa3328387bd9bf
SHA1 3b0e8c35706ac478f57f1c424340f4ba4bc817e1
SHA256 36bbe298d66d90bf59b5a2e308aba97599b02548a77daba3e4f97a9c41bf1aeb
SHA512 a396c61d0cac147fe20db98af2446c5bce09016f4b0c74c6338cf5c09bba9fe04320a0a1a8a7e05046bb06a5a6ab4482528ab10b72f2b9f11a651ddea33c939d

/data/data/app.revanced.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal

MD5 7dd7cc65f92e4db3bdabd19004cc2b86
SHA1 e6c41b224d32e5c52a135b2bd43acb7f082c8e23
SHA256 860af10b673a06066433c5de0f4f42b5a472a79ba9ccdbd7df6a5f1e7fdc69b5
SHA512 4d1662b1f3713fe4bb4372439bd346178415c960b0d2ae3cb353deaa7fc62908d74338898f63ea67d2d09a049f4fc8b34fe114fae3742cfd8c64bc4a9671ff77

/data/data/app.revanced.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal

MD5 062775f843369433315d224ed85f85d4
SHA1 db0a63038995817638b3abf07fc73023c3742624
SHA256 718a3148ca3030b3c7c83cd8c544c740b6bbab70612fe3336ca1541bfe9dc0bf
SHA512 30e6fc48ead7876289ee3332bfceace13fe1784200e19ee53db76d80d560055d9c0017127632fdd537af505d6f1a0774aeb61e09b37ffde42ddb8999c54cb13a

/data/data/app.revanced.android.youtube/files/commonui/shared/theme_proto.pb.tmp

MD5 f01a8453ef0d73b7986765b7e30dd1c8
SHA1 61a2619aa7f5cfd96a31c7973c4adc7f116259ab
SHA256 d7b330b8ae0e09f8c190dec7ab256ca4716f635705307f93f79f6d09c8bea1ef
SHA512 b6b27196d86e733eeb53be32584e4c4d367e112d16c08ce791671a9d5ecdc58bb951954e191181316456855828044095980c465b2d9ce38cf31cafea94683cee

/data/data/app.revanced.android.youtube/databases/default.entitystore-journal

MD5 d84e6ceea1bac4f30fc902237b13ab35
SHA1 c4863df541f45241fc5dd72c40a48479cd3d0281
SHA256 27357d38cbdbf89ad4df734e29c01a028138ce261538fe3c51da42feb3928967
SHA512 7762fbb6d5f4a696b40f75970b124446a7304e79ded9121d896bdd22b0fc4ad25e441787a88bec88af0e07c26a8466a52c873243a5e0e084f68f7f766aaa575e

/data/data/app.revanced.android.youtube/databases/default.entitystore

MD5 d315076b16203a17d0e4a10ffb49dcd6
SHA1 5adca6862eebb3ba9d4de033bf0fcf36ede66826
SHA256 96a22f6cae04f602424cd8722eae6ea74fed05b91014a9558752edaef20295a0
SHA512 5cf38c6dc3346e23e676794bc02d0404328245051d2e537bdf54b8a6847378081c8162f103add5e4ddf334774021c8ccfda710bde86caaed2a9146c8c4d27af6

/data/data/app.revanced.android.youtube/cache/1708042440713.jar

MD5 b505176427d7a39e061376ac2386dde1
SHA1 4b18624a8d042c59a9d7bc52c9e5d2c0c5a28784
SHA256 4e983048ec350842cbbbaafd0393d962bd977422549f85c45ed36d908f708643
SHA512 1e723bec59538a838b6721e55a653633fe8c41a5a46be1a4eedc3a85fa405e5ef9a0cf81c2b531231e8f0abcfa3a3f1f5e5fe7ebfed0cacaf9b46ddb7e70e3ca

/data/user/0/app.revanced.android.youtube/cache/1708042440713.jar

MD5 22bbb94b0b30c414511fed19a37c6d50
SHA1 ccf1169191d6a6286933c637373d8c2c2a169e90
SHA256 190194b044a220317f721207ff2804669e6f808f31128fcba5302f60ca9400cc
SHA512 d2ae7f9874ed84413475854dd6544d57c3359ef5e8b65d6ff7fb3b853b3a9361a4d1400e0d3b0ee00b5e0f9bdbf31d97a14fc8856dbf231b714260fc12e1aa55

/data/data/app.revanced.android.youtube/cache/oat/x86_64/1708042440713.vdex

MD5 d99c4528fb45042c757f93275ae0a785
SHA1 d5b0fe33407e39522ed6ff24378d0c00531aff09
SHA256 d6549d8d68284f78816252baf2cd91936b49c7f6fd1fe4b9be9412af91b7575b
SHA512 0b56df19370c6942c58296565e747207d4729a57b000a60413f45c98d42d033993e9584cdd09519ec533d576405259a0218a56dda485ee06fd76d35942c2d004

/data/data/app.revanced.android.youtube/databases/default.entitystore-wal

MD5 81de3326a15642ae21a9d114bd7cc642
SHA1 098e1a67069a8d88be7ff5538fd9d3896e7967e7
SHA256 61f735e6a1e6ccc7a5a3abfb6dfecf54cbe9609fbf74e56518751aee6ea916af
SHA512 5a0f238f403251e3299ffdad7a805a0bca8b51447bf68810d01e7b659419ddc2151dcd30cbe11ab96b0379a68995ec6fa9f67f8a10157ad53d246ffbd7025723

/data/data/app.revanced.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal

MD5 4262d3cb7cfa27545068874f42e42235
SHA1 4b65081fa3e157a2ce6f28eae56db4f8cc9db6a8
SHA256 4f34f519997e52a93c95da7348b7063a1132b3f5087fdf966f594996483eb7ff
SHA512 a7fbcbd0e2f280d9bb72eecea5c0dc74f7f5c2b76dde5797c0b97b252bb87d6bd105320e26e10c4d93a8a1550e73825a87836a2e541ec5728d82ce52065885bf

/data/data/app.revanced.android.youtube/no_backup/androidx.work.workdb-wal

MD5 c4f29cb3f31199ad5422acb8d2e03326
SHA1 ce97edb1304eead3ebcb04c0b16831fdcd03b801
SHA256 14e5fac028c39ae3ad71400944d3daae2360d872d03daa8377380f2f22db86ab
SHA512 b0cf91c1036f07d03d8c4f79f3d9ef834f82b3ccca87098cc9619f96d0b90a9b4e2588d0bda8abfc0d1d8efa53ef321a9e38e5a0eafd45286d52348a7a4e8912

/data/data/app.revanced.android.youtube/files/notification/shared/notification.pb.tmp

MD5 6105622d85317ac08f87319d7de9a9be
SHA1 86316c575ab2d13dc4643e62097424e741c661db
SHA256 402f869978c5ef4ce822369a3fb53d1772080ada0af0724c4119e35257aa2683
SHA512 0f1bc0d3b51b7d72c10ef2f866772d9a7d093d4736f3e24b02f157a377cdf18c29b99e41d6599437958df46640fd9d33a19bece02f800c7722e7e69eab5bbd04

/data/data/app.revanced.android.youtube/files/player/shared/playability_settings.pb.tmp

MD5 f7c57f06a1d3ce117749fc98e2111668
SHA1 4f8190a08041a67360ceea6c64f9be3ffb59b602
SHA256 fb8da7eb5b1b399e7321179dac9e9f65773d7331e1e30554e3911e4325e1ef19
SHA512 2043234b7e657e122399d2c2a4309b9398ff426c6ba2b66be8fb9ad8c6942cb124cc6a327b9d687b0c25db20e996f8b41d6bb389e1ffd7019f82584b19eee24f

/data/data/app.revanced.android.youtube/databases/default.entitystore-wal

MD5 f8784e51790b0b00ade75592e5a80a24
SHA1 9343ba02e94f312c87002ab15e9281794e812b3b
SHA256 89f32090b3bf4b164a8a9423d85dfa41922648ba9c30edc5f50ce096bdefe86e
SHA512 564813fc778d29a71057ed272cf0cd3e12b711d8aef8f3a9cb50a10e951571284bf24ad3c9dd1678eeb0b92c3bb26903192ccf680d294e49e384c214d49c2f1f

/data/data/app.revanced.android.youtube/files/procs/app.revanced.android.youtube/cfg/bootstrap.data

MD5 0e21d8057b49b685396277ab590901a1
SHA1 764e217b48798adbceb0b1627afefec432679bcc
SHA256 50c3631d8ede572a34ed31c33b0b426abe067ffa9eb71f485036655611c3edc7
SHA512 22aa30c81b24c47033fcd985a5a0f16cab66a8f823ebcb1f712f5a791f88c9e5c014d8d22bcb638eac2d4f8bf9c4ac4e7ad51c91cee8d3ddae771864591f0713

/data/data/app.revanced.android.youtube/files/offline/.settings

MD5 61b4833cd5f387d8c92c2c7b382a8bf7
SHA1 3b95527f269c98e05d0d691db1fbe8c2ce4af3d0
SHA256 337b614aa5c734a7438df7a052f1b7ba3d800b29d493d02475c2e69f28a40247
SHA512 9493710177ae685954722fbc892cbf2b7033d8a38604c58d24ae303363299d205fdf8facae9b59ab2807cf5bb0f5527396cbb297cdb0b204bb2c45fef2e32f53

/data/data/app.revanced.android.youtube/files/103795117

MD5 8216d29bbe7106a811b3344a69e30034
SHA1 46e94f8360c953e5d3a665545e20f2ab0cf66cff
SHA256 fec8f1af7056787593104b7d48185b80bc19acac734a7403ade1dc6efae68193
SHA512 ed3abdecd87bfb3abb93fedbc8e2514687d5bba8585b2b276d3d7686270d3570574f26562584ff72857b3b817910aaafbd14551e6615582014cdf5fff67af9f1

/data/data/app.revanced.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal

MD5 cc8f7e36a3ff951da2d4ce6170468f9e
SHA1 105bd58d19e41fb6f57ea125c857e1c7c8a7882a
SHA256 28ab997f93aea5e7a58d74de6c2f235e7d6af1faac6276b8b66285d56b096c6f
SHA512 4badb253f4f53ae78b2a3887f02543f1b88275f300b4eb9efecd53e1c2f2b3bb4b22f1f9bb221ba4a17644e1a455d6971060536d5d1d2db20a01e209ff903d92

/data/data/app.revanced.android.youtube/databases/youtube_upload_service-journal

MD5 261460f7fcf1c6c99f7a405e2bac6d65
SHA1 ab2cfdfebfe0856a311f82e91c11f37b62fd80b6
SHA256 65933a9c98f0f4a8194ad99dee4c8f7394d49186399b70b446563b46b5ea2bd3
SHA512 f7b5fa46e60db7570929f0849cd232c35cc8864527612c093689e65359534b01882577db472ec9cbc62b26a658824a5db850cf20082bd8d339dd87305bb62f5b

/data/data/app.revanced.android.youtube/databases/youtube_upload_service

MD5 82e9f33bbef480e1abb967ab9cc045b0
SHA1 341c9028b790f6de53709a015d28b2df339bdca0
SHA256 468b0dd610fb45daf174070b88d9159bcb3237a5b79c79ee2585f671e2c91005
SHA512 4514c4a08bf906df20d5668542870bcbe3ba738dffe2fa39862f23794fad875a98fcabd65328c08691b795e326183a58c119b45350445ed300c5ac56252c8ab8

/data/data/app.revanced.android.youtube/databases/youtube_upload_service-journal

MD5 38e5fc0493e626f5813c2a9658a1072a
SHA1 a1434fee2ed75ed45269477708d222a4cf4f926f
SHA256 d4c773c58502751ce0d15cf293e64a011a539f8368c312a43e16746eab0b564f
SHA512 dac68bd18a312745232f68021c7b5e02dc08c77dd9469e153f6fb3bb93094e00ed252ddc1636b0d160caa459517af5dd589213dc1b45ba1f66897072274e45c1

/data/data/app.revanced.android.youtube/databases/youtube_upload_service-journal

MD5 b46550f201970a9d634ae17a470152ca
SHA1 64140dbedc17be16e9d35747971046f21a9c7e79
SHA256 ceb3efa6cc7d0dae20e3dbbbe30b4d4771ab0e0810ce9493a3e5c03d048a51d2
SHA512 327116dbbddb00c2c3b79062bcf844944a480572122f69c7c0caad365b8dc4ba65081eb1a9e358f22f4dd30f60bc0538576ea8eed3dae963181d8b3630b92157

/data/data/app.revanced.android.youtube/files/mdd/shared/TaskPeriods.pb.tmp

MD5 672b2d5d990edcd1bc5314d510d906d3
SHA1 5c736499703a3a77d5cec19f3ba07288d962c2a0
SHA256 b96b661cb876335b9b950218574e56acd40046b3a261b32a60a0cb5157e06912
SHA512 d06ca4f4c90c0b133ce0e820722e9f84b5c84cf5b4de7ad7c5656b8224ce95bdc9d23dc8bbf92552825636e79503cce80ed6687987328e3cc5a2a77969108487

/data/data/app.revanced.android.youtube/files/mdd/shared/TaskPeriods.pb.tmp

MD5 93c29d3bdc43931eec42da2d35ffb172
SHA1 32ac1f32a135c37244583eb2df0e7f313719f4b0
SHA256 9163e98335b75a83eeb37ef5d6092830a922a0aede6dd4c7839f6ac0fa0f2262
SHA512 bc1e3f97b90d0cc0159ed0b277b4f7b860a1700392298505de1da9a2eca9ef3b810b39e14978256aaeb40bd6d8f1cd0ee1cc12a04289047fd90a703458637fbe

/data/data/app.revanced.android.youtube/files/mdd/shared/TaskPeriods.pb.tmp

MD5 73fe3bb10feca6a537a028475d312bba
SHA1 efb4aecb6fbd0a7769ddf42bb38fef840a9f03e0
SHA256 c9adec496d1be6fd9754dadf06943fe5d9f0769d8d4ab514a2596cedf0d8fda5
SHA512 433cf8ad543af29ae95a4e0212f7257b21385a89d2910c7b3ffa071497091d888d3d87a26113cffd1b583df6286f45267eb3f1bafec68795c60f5d1a0a07169c

/data/data/app.revanced.android.youtube/files/mdd/shared/TaskPeriods.pb.tmp

MD5 b473082598f965647363cb2da37ddf4f
SHA1 634c0b85a1ca2fc8f7b7a89b66d35979266f15d9
SHA256 0ee3fa24ccbd81301045258e0f861c2e5db07d5204695f65a8ce58fa61ac0ea0
SHA512 cb129387cbab90aed64f5246b6cf3def389417976c59713032b51000b853fb531d15e637a93af51c2551022ea3b82d53593a3ba02be78948f6adf740e3e63ecd

/data/data/app.revanced.android.youtube/files/procs/app.revanced.android.youtube/cfg/bootstrap.data

MD5 92d077814d380a6dec06a509420d3d87
SHA1 13ac496a93d3a854b429a8529b329e2b146836a2
SHA256 86e13ba3a16fcc456e40922560f9805fd5bf792ee13f5696e50cd98a78248c50
SHA512 86632023989f3d433b1dc9fae2304c62474c5fa081aad97eda7676c61c3729d483d31857783cc82add38e3d6660b7512540d53cec5ccbd6dc3aabb1a91cfd6f0

/data/data/app.revanced.android.youtube/files/mdd_pds_config/shared/LoggingState.pb.tmp

MD5 b5d61b28be648100495bb2af9427d3af
SHA1 5892f9b8ff5115c6211a03ef45088332b297c041
SHA256 e54770dd247fe6345b788071996183df3a86517e3781350a45dae5a146bf7cba
SHA512 44c8c866056dd089c28abbe0a4ecd52a569921501b5d734dace7571b48035340cea906175a4c2861e6f6944a63e41d31ed9b7055deba10726c3eeb68f6bc9bbd

/data/data/app.revanced.android.youtube/files/mdd_pds_config/shared/LoggingState.pb.tmp

MD5 68ccf47df2e2375f7e94049ba25490b4
SHA1 0ff9fd131db1e5553aeaa6f521444b6b0f2dfcc5
SHA256 8624057dc2dd150f5527cc3f5b92e53b8abe03b96ee6afb8b3232b9e5a7a4cbb
SHA512 2d03b42ba94dedcab0ea2a63a50af1bc7a3bcdd14c39fa20bc639085983b6fd6d61f4b81a16ab45291b9c0522adf851c98ee1cac1018fc8e13f277c1427c8dc7

/data/data/app.revanced.android.youtube/files/procs/app.revanced.android.youtube/cfg/bootstrap.data

MD5 05a1bbdbf770362f22d95cb1240bc6d0
SHA1 4b662b91cf8f12b55dbcdb19bb32786e159c86bc
SHA256 005c6ac9e8b5c1b9c8dd5926b00616ad999574d186cf31709e7553e6a7a33606
SHA512 d8e463ae1d68a65aa89cb3d5c65723fa042ba91e41372f7d60e8620207afccde8eaaeb8bbc0e9ce3251e2a3bdb4d8ec9b6d610c42a7b867c40578e68f1ae7c8a

/data/data/app.revanced.android.youtube/files/AccountSyncData.pb.tmp

MD5 909631c2edb79f81be6c3bdd3d23dc3b
SHA1 dcec279e1dfd303c1ec7b413da4ae3c937ea8700
SHA256 fcd3a5dcbff047f1b727cb36af022c6afe41c2dd07e2b69d416afe527150e532
SHA512 de83aa7e3f3386d495e9573344a6ce4b01e705f43b1d5167932ecbf0b041c3f174c98be9f3e09cfdd5a5ec60e9ccbb57b5ae7019e0a9bb35f1361706c39c589a

/data/data/app.revanced.android.youtube/files/settings/shared/settings.pb.tmp

MD5 b9845c280775699357b793f9a2705e2f
SHA1 b7aa78a42de99e7f40661266fddd204a67a75d76
SHA256 06d93673413ba3294abc0e3397381a4415ed379ce621fe916baff745983d1b8c
SHA512 c907bb516db7721dd54cb6bef8abf024831865662f806b29b801867c17e9818027e03e00a0d7abae849197178e9e55f2a892678eaa69d272625af8d192e68603

/data/data/app.revanced.android.youtube/files/offline/.settings

MD5 517038299d4ea5b263de75d998229d2c
SHA1 b2ca921d491b084967a24086599cfbf3be711920
SHA256 dbc7e01ef6ab21e43321a0367e57ece1fc2a9007e391266e0ca8875ebb48861f
SHA512 3cd464ed6ee367303d451549ada775f4e9fc3d9e66ca1e51c18748b519f3b5fcc884d0aa206733429c429459f5a1a5d916e1b9809b2e90bc83bcf964df2c1bf4