Malware Analysis Report

2025-01-19 08:02

Sample ID 240616-sbbhva1hjq
Target YouTube v19.15.35 (Premium).apk
SHA256 a22e65546ddadf3749d88e7a5755cda560681cd1921b539adce4e8b6da5fbd1c
Tags
discovery execution impact persistence
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

a22e65546ddadf3749d88e7a5755cda560681cd1921b539adce4e8b6da5fbd1c

Threat Level: Shows suspicious behavior

The file YouTube v19.15.35 (Premium).apk was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery execution impact persistence

Queries information about running processes on the device

Acquires the wake lock

Queries information about active data network

Requests dangerous framework permissions

Queries the mobile country code (MCC)

Registers a broadcast receiver at runtime (usually for listening for system events)

Schedules tasks to execute at a specified time

Uses Crypto APIs (Might try to encrypt user data)

Checks CPU information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-16 14:57

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker. android.permission.READ_MEDIA_VISUAL_USER_SELECTED N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read image files from external storage. android.permission.READ_MEDIA_IMAGES N/A N/A
Allows an application to read video files from external storage. android.permission.READ_MEDIA_VIDEO N/A N/A
Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION N/A N/A
Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-16 14:56

Reported

2024-06-16 15:05

Platform

android-x86-arm-20240611.1-en

Max time kernel

27s

Max time network

437s

Command Line

app.rvx.android.youtube

Signatures

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Processes

app.rvx.android.youtube

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 digitalassetlinks.googleapis.com udp
GB 216.58.212.234:443 digitalassetlinks.googleapis.com tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 www.youtube.com udp
GB 142.250.180.14:443 www.youtube.com udp
GB 142.250.180.14:443 www.youtube.com tcp
GB 142.250.180.14:443 www.youtube.com tcp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 liteapks.com udp
US 1.1.1.1:53 liteapks.com udp
US 1.1.1.1:53 liteapks.com udp
US 104.26.15.148:443 liteapks.com tcp
US 104.26.15.148:443 liteapks.com tcp
US 1.1.1.1:53 yandex.ru udp
US 1.1.1.1:53 static.cloudflareinsights.com udp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 1.1.1.1:53 yandex.ru udp
RU 5.255.255.77:443 yandex.ru tcp
US 1.1.1.1:53 update.googleapis.com udp
GB 142.250.178.3:443 update.googleapis.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
US 1.1.1.1:53 clients1.google.com udp
GB 142.250.200.14:443 clients1.google.com tcp
GB 142.250.200.14:443 clients1.google.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 142.250.200.34:443 googleads.g.doubleclick.net tcp
US 1.1.1.1:53 yastatic.net udp
US 1.1.1.1:53 avatars.mds.yandex.net udp
US 1.1.1.1:53 mc.yandex.ru udp
RU 178.154.131.215:443 yastatic.net tcp
US 1.1.1.1:53 ads.adfox.ru udp
RU 178.154.131.215:443 yastatic.net tcp
RU 87.250.247.181:443 avatars.mds.yandex.net tcp
RU 93.158.134.119:443 mc.yandex.ru tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 178.154.131.215:443 yastatic.net tcp
RU 77.88.21.179:443 ads.adfox.ru tcp
GB 142.250.200.34:443 googleads.g.doubleclick.net tcp
RU 87.250.247.181:443 avatars.mds.yandex.net tcp
RU 77.88.21.179:443 ads.adfox.ru tcp
US 1.1.1.1:53 fundingchoicesmessages.google.com udp
GB 142.250.200.46:443 fundingchoicesmessages.google.com tcp
US 1.1.1.1:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
GB 142.250.200.46:443 fundingchoicesmessages.google.com tcp
US 1.1.1.1:53 lh3.googleusercontent.com udp
GB 216.58.201.97:443 lh3.googleusercontent.com tcp
GB 142.250.200.46:443 fundingchoicesmessages.google.com tcp
GB 142.250.200.46:443 fundingchoicesmessages.google.com tcp
GB 142.250.200.34:443 googleads.g.doubleclick.net tcp
GB 142.250.200.34:443 googleads.g.doubleclick.net tcp
GB 142.250.200.34:443 googleads.g.doubleclick.net tcp
US 1.1.1.1:53 tpc.googlesyndication.com udp
GB 142.250.200.33:443 tpc.googlesyndication.com tcp
GB 142.250.200.33:443 tpc.googlesyndication.com tcp
GB 142.250.200.33:443 tpc.googlesyndication.com tcp
GB 142.250.200.33:443 tpc.googlesyndication.com tcp
US 1.1.1.1:53 www.google.com udp
GB 216.58.213.4:443 www.google.com tcp
GB 142.250.200.34:443 googleads.g.doubleclick.net tcp
US 1.1.1.1:53 liteapks.com udp
US 1.1.1.1:53 fundingchoicesmessages.google.com udp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
US 1.1.1.1:53 hu.garonzenith.com udp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
US 1.1.1.1:53 fundingchoicesmessages.google.com udp
US 1.1.1.1:53 hu.garonzenith.com udp
NL 23.109.170.34:443 hu.garonzenith.com tcp
US 1.1.1.1:53 fundingchoicesmessages.google.com udp
GB 142.250.180.14:443 www.youtube.com udp
GB 142.250.180.14:443 www.youtube.com tcp
GB 142.250.180.14:443 www.youtube.com tcp
US 1.1.1.1:53 statics.liteapks.com udp
US 1.1.1.1:53 statics.liteapks.com udp
GB 142.250.200.14:443 clients1.google.com tcp
GB 142.250.178.2:443 tcp
US 1.1.1.1:53 update.liteapks.com udp
US 172.67.73.174:443 update.liteapks.com tcp
US 1.1.1.1:53 gstatic.com udp
GB 142.250.179.227:443 gstatic.com tcp
US 172.67.73.174:443 update.liteapks.com tcp
US 1.1.1.1:53 notifications-pa.googleapis.com udp
US 1.1.1.1:53 suggestqueries.google.com udp
US 1.1.1.1:53 yt3.ggpht.com udp
US 1.1.1.1:53 i.ytimg.com udp
GB 142.250.187.225:443 yt3.ggpht.com udp
GB 216.58.212.246:443 i.ytimg.com udp
US 1.1.1.1:53 returnyoutubedislikeapi.com udp
US 1.1.1.1:53 rr4---sn-aigl6nzk.googlevideo.com udp
US 1.1.1.1:53 deviceintegritytokens-pa.googleapis.com udp
US 104.21.47.95:443 returnyoutubedislikeapi.com tcp
US 1.1.1.1:53 s.youtube.com udp
BE 74.125.206.139:443 s.youtube.com udp
US 1.1.1.1:53 sponsor.ajay.app udp
US 104.21.44.169:443 sponsor.ajay.app tcp
US 1.1.1.1:53 rr4---sn-aigl6nzk.googlevideo.com udp
US 1.1.1.1:53 rr4---sn-aigl6nzk.googlevideo.com udp
US 1.1.1.1:53 rr4---sn-aigl6nzk.googlevideo.com udp
US 1.1.1.1:53 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com tcp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com tcp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com tcp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 172.217.16.226:443 googleads.g.doubleclick.net udp
GB 142.250.187.225:443 yt3.ggpht.com udp
US 104.21.44.169:443 sponsor.ajay.app tcp
GB 142.250.179.227:80 gstatic.com tcp
GB 142.250.200.36:443 tcp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 172.217.169.10:443 deviceintegritytokens-pa.googleapis.com tcp
GB 172.217.169.10:443 deviceintegritytokens-pa.googleapis.com tcp
GB 172.217.169.10:443 deviceintegritytokens-pa.googleapis.com tcp
GB 216.58.201.99:443 tcp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 216.58.201.99:443 tcp
GB 216.58.201.99:443 tcp
GB 216.58.201.99:443 tcp
GB 172.217.169.10:443 deviceintegritytokens-pa.googleapis.com tcp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 216.58.212.246:443 i.ytimg.com udp
GB 142.250.187.225:443 yt3.ggpht.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
US 1.1.1.1:53 update.googleapis.com udp
US 1.1.1.1:53 update.googleapis.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
US 1.1.1.1:53 update.googleapis.com udp
GB 172.217.16.227:443 update.googleapis.com tcp
US 1.1.1.1:53 digitalassetlinks.googleapis.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
US 1.1.1.1:53 digitalassetlinks.googleapis.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp
GB 74.125.175.105:443 rr4---sn-aigl6nzk.googlevideo.com udp

Files

/data/data/app.rvx.android.youtube/files/tiktok/103243289

MD5 ef42689935e1a97154cdb17a0da69422
SHA1 1ec1eaae8842a19ee264b256fc8fcab196c8df51
SHA256 2312575c1cfc76a1232389cf6ac3dcdc5c23272c5251ca536bfddb6321cebf04
SHA512 d7e33e2ad82a5c6ef3bfc2f567f54daa27ca8401ce8dce36b048db4ebef8aeb4e9903253f6bd2d0ff419701f037b6d55676e1278e4e9fdf3da1db2e0b0da8e36

/data/data/app.rvx.android.youtube/cache/1708042440713.jar

MD5 b505176427d7a39e061376ac2386dde1
SHA1 4b18624a8d042c59a9d7bc52c9e5d2c0c5a28784
SHA256 4e983048ec350842cbbbaafd0393d962bd977422549f85c45ed36d908f708643
SHA512 1e723bec59538a838b6721e55a653633fe8c41a5a46be1a4eedc3a85fa405e5ef9a0cf81c2b531231e8f0abcfa3a3f1f5e5fe7ebfed0cacaf9b46ddb7e70e3ca

/data/data/app.rvx.android.youtube/databases/identity.db-journal

MD5 35f468fd213f090c98046d312abe5875
SHA1 7ae24ad7287b5c8dd557044c1da9390cc03b66f5
SHA256 04f374f296a6b039afaa0489a8498f0e71a92c1c9f9bc4c5e51a9e24201709e2
SHA512 38c223e44daab14b023bcf29424a116b753a9e584886745ad0a103de5cb0d337e47cdb60fc0361d16bf715ad04b6efbfc038b488790e4928856d2b83124a13a3

/data/data/app.rvx.android.youtube/databases/identity.db

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/app.rvx.android.youtube/files/103795117

MD5 7cdf1bfaed973f5ed490afb9e95cbe71
SHA1 a2bb0cbffb5cdf28f4a287d372e036ba6880f4f5
SHA256 c511e4999a320fcbe037be1311d6499ad7656eb9bdf6b53cab0048c6ce60211d
SHA512 edad8770d11c472cdf8e2789881d21ce530e4195360a3c8e20b37f5b0ce11fd5a02bdca95e66aa2fa3c69ae21c3606bc25892be37672a28d97a784e0c8fd12dd

/data/data/app.rvx.android.youtube/databases/identity.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/app.rvx.android.youtube/databases/identity.db-wal

MD5 6b0ca18dc4eed45bd72c9bd1f7639e5e
SHA1 e9c7220411ad5a5d628cd410efd30c819c052dc8
SHA256 85ea851f46a578f06c384710913ea9e6f2baa2996ad1b8ec4e259d027ab7912b
SHA512 79c9128c9c3e2fe0407a01c59269b3a1159a18852422b77139ee9773ed81e171ad8aa0c6f6ae0a321a085042b1471eb75784637ad9a3f7dfafa97041f836e597

/data/data/app.rvx.android.youtube/files/media/shared/media.pb.tmp

MD5 cd86b405bbe681ca983587a331df6810
SHA1 22435ce0ab6cc76688f64be801bb4fab84c23353
SHA256 ffd2b38b328fe2e10d03587fb8dad5dd902305255aa5d7ec9e6a56ea6c0bdc62
SHA512 f7170de951bb964cf48525929e971e52e988b78c37c251480ee3d117c921b646167e3f8f2de2e0af363988edd3d62f06a33bca5595608fc67842db6b9cb756e7

/data/data/app.rvx.android.youtube/files/net/shared/delayed_event.pb.tmp

MD5 a004f5605a9a75880611e5e713c694cd
SHA1 5072d54b7f4780c9e6a49beb3f852c191091d49c
SHA256 f8bf02b74055ba2b2386a34bca9a3c1e96435781363d7fd461fdb98d201b005f
SHA512 c1fd50d94960a5098a734899770ec5aca63d1c6208032d9046acd14aae7123befdd048366af0cd0f40520e4eabd323e6d1e55f8a8aaa3bccc476239a83effc5f

/data/data/app.rvx.android.youtube/no_backup/androidx.work.workdb-journal

MD5 a73f43fa08dba60266e6724dcec99d48
SHA1 3563df38aee65293131ed9e3f2e09f642bdad8cc
SHA256 436f1958ade2c8f091622e75f3b415fc35324d1789ba046532a2e43b10e515e4
SHA512 128160cdfcaf6cfc7441caf405f5de030a9a74f703e0c006b741480e1382cb6465308af52798490cedc69d9cd934f751413d3f592b667bce94d822d2c3dad833

/data/data/app.rvx.android.youtube/no_backup/androidx.work.workdb

MD5 e61fd1a79da5e0e9b34c9a59597be4fe
SHA1 cec96e041df627dd648523b94d5f014062559115
SHA256 e59a0c8b1cc2cd2d1b9d68da7653019d97f523398ff7bf435a8a05cae1b673e8
SHA512 468a49e4ebc7aafc7ecc40ee45cb85a3fc505b71bebbcb0b1aa0f062968bf909187f64c93c8a7fc0a4dac19701180da5e18cb2b04f5afb032160eee9c912a4ab

/data/data/app.rvx.android.youtube/files/media/shared/media.pb.tmp

MD5 0c3c9c5f1bff356583139f0dff436e9d
SHA1 c34dc99b7770baa6a296f890b1e8efbec537a40e
SHA256 82b89f89fec2eb1f3223c620b7fb432b220aac3b6c9efc800ab0da681bd0ad66
SHA512 3bf4a93424b2082b355142e247074e9cac043ce545cba74647c96db3114b9310c7947160d31b3c508a6ea523bdfd2563a278570125f2098940e58f34cfe46107

/data/data/app.rvx.android.youtube/no_backup/androidx.work.workdb-wal

MD5 48bb5ec288f1bc500545f89d5bc61d82
SHA1 799e8f19234bbee6ce11a34313a5d47ee9f0c0cd
SHA256 fb5eff4b42639d7054fd321b6136986e7f15d97b778d9a9cb7bac67568ab2daa
SHA512 d3ec83e73f5fc3c876e55f95daab1660836ac8a1c313063549b5b14c9faf91c685e751f88c9cb9fd1d2a7d3c61d86adbc0b3050873e34adf6b5110a0014420f2

/data/data/app.rvx.android.youtube/files/AccountData.pb.tmp

MD5 672ac439e96b2de7415b6f97ab9ff02d
SHA1 242a384b42f6d7ac0871925cc69b5e00e59d5a58
SHA256 3d35849024520f6d966a73d9dc5defbd6528149bbef7d3579eef5d67e351f253
SHA512 148f76371a752c4dee90531f8c3e3c5a72e803bfc05f9cbb81217d178fc141e3c102163a009705f7934b0ab8b445ebfc31dced02d6ec691cebb8bdd13f051ec6

/data/data/app.rvx.android.youtube/no_backup/androidx.work.workdb-wal

MD5 62f25b18b3ac8500ef668efb690bcdbd
SHA1 bc902b8ea3bab2ddfab15c5150778697cf7fba4e
SHA256 9ed3c8f4c0f206db35ad4b60f4eebdb735395ddc548a4541812022d0ab65960e
SHA512 84341d7cabac66944148d42e056ebca812fdab67828d551dd681e5443f235f6ba90a4bdc261a7279587b78fe1fa715b48ca3f194d1942d1043af2f242011142e

/data/data/app.rvx.android.youtube/files/AccountSyncData.pb.tmp

MD5 666a0c0057b159a5feba08764c8dee04
SHA1 ca4a00593266edaeecb34a88b11a7a19bea2a438
SHA256 98b7095d981bad967545c85f9eb1f8d2cac42a1d49f675cfb3125787fc9a5814
SHA512 f1d8d08a426256c0fae7ff89461f4a9dc87ffa1e3bff1a7c6fe747add6eb31bf1268a50de358a2d014d10061c6336194f8d1a54c69fd286bb0ed89b76b89c2d6

/data/data/app.rvx.android.youtube/files/AccountSyncData.pb.tmp

MD5 1a8ad3d815c11ce2e3c3202c293442d6
SHA1 9c83297ef3728e0440acca068b3e59e561654e9a
SHA256 bc26cecfabf9d0b5a3e9031b84502a1a60c0e416a74fc940f34270095c033527
SHA512 fba20d3f740bbb7799aef721384f3585e73292d674289ae04193bfc3e9888d90822520eafc65c9a310a453325ca8bb4f8770b4f343664e490394bccd96444eaa

/data/data/app.rvx.android.youtube/files/AccountData.pb.tmp

MD5 b837c104826bf6a378b7ae8d1eab34fa
SHA1 5b314bfedbb8c3cdcb3659faf989f572c09929c7
SHA256 55ea3eb3c8d84d3be1599c9514f47ba2d1e9b29d97d2337fb7240b1d96322ec3
SHA512 937768d861981acc1c7811adc881e18b61995ae3549bf818c2be924e9c957d6a617f8b6aad0a2b99b02fdc031048a400e33d936e7be3ac9c0f19d87c06824772

/data/data/app.rvx.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-journal

MD5 e53e8f04a1a47b255d317c4fb7a72a95
SHA1 6e8030f1ce395b3cafc5c415e3e2784551da75cd
SHA256 8fe7ed13f8d2ab9358ffa70c2471cc8766fc4169c4ae8583a230dc370c161030
SHA512 38375b32ebf933403076368a73df098922840e9571677d16b225e60107986015fbb1904ede767a06586c877b11386a8779db37842b9dcab798caa24a0527f884

/data/data/app.rvx.android.youtube/databases/com.google.android.libraries.youtube.net.delayedevents.DelayedEventStore-wal

MD5 831975dc1dae0c1e2d67bb0222f6f2c8
SHA1 7ec36115e4c957c0b019c5215dccb93c6a30bde9
SHA256 32acc7d915bbebca63062646c18b0b1e77263a73a8494af55358be943e43dc0a
SHA512 140585075a6f1aaf59adaf99c5cb1de66fc882febfd360f4b2f32e882f488dfb3130171b8a42961cb487bf821e10c6d7cf266108933e3d7e67ea534da63ecbd6

/data/data/app.rvx.android.youtube/no_backup/androidx.work.workdb-wal

MD5 2874b57a5d095a2d4ae1b8a4a4e6f1f7
SHA1 698d96714ca3175ebe21859a4acaff55643f678c
SHA256 5ceaa2643bed3f01006d6bb73a19dbcfbd0e9ffa259839db3b33d8517ce9eb93
SHA512 5091e0f6b3b6e8e8a9180cce86bd7b5ff37bb45f389a1d68b806e58a81d2ea58944d816cd7e8bacdd97a5052eb310fc76841214239eff5728770d9396942925c

/data/data/app.rvx.android.youtube/files/player/shared/playability_settings.pb.tmp

MD5 f7c57f06a1d3ce117749fc98e2111668
SHA1 4f8190a08041a67360ceea6c64f9be3ffb59b602
SHA256 fb8da7eb5b1b399e7321179dac9e9f65773d7331e1e30554e3911e4325e1ef19
SHA512 2043234b7e657e122399d2c2a4309b9398ff426c6ba2b66be8fb9ad8c6942cb124cc6a327b9d687b0c25db20e996f8b41d6bb389e1ffd7019f82584b19eee24f

/data/data/app.rvx.android.youtube/databases/default.entitystore-journal

MD5 602dab545df380ed67440c845d0b140f
SHA1 f9f32fa261fd16e5f7dd628897e207bd739add8c
SHA256 f9fd7a95fb9fd147b2f3f192061e7a4ae2db24c8a31fc7bacd01996feddb46ce
SHA512 bfab6256fedda9bdaa46552100de6fbd68b269b5b113e682bd6dedbb7348cd91b096a57445e27bdfb278d385ba90b53db45aff552c578025c8a71e47a20994e2

/data/data/app.rvx.android.youtube/databases/default.entitystore

MD5 84439aea141edbe69204e17b6e1ee2e5
SHA1 1defccf3b6014188619759382572aa3ab2e85f0c
SHA256 5b90be0fb11891095d6d9b552655665a6f6a61c0cc6af233a88e81671ac83dca
SHA512 23bd4381c10bb224209c21d44f92c079e9b762da943a28a05999d1809b96856155525afcf8b652f243d892e4007b35ed8c17fcf1454689c1ec0ae79c16090124

/data/data/app.rvx.android.youtube/files/notification/shared/notification.pb.tmp

MD5 6105622d85317ac08f87319d7de9a9be
SHA1 86316c575ab2d13dc4643e62097424e741c661db
SHA256 402f869978c5ef4ce822369a3fb53d1772080ada0af0724c4119e35257aa2683
SHA512 0f1bc0d3b51b7d72c10ef2f866772d9a7d093d4736f3e24b02f157a377cdf18c29b99e41d6599437958df46640fd9d33a19bece02f800c7722e7e69eab5bbd04

/data/data/app.rvx.android.youtube/databases/default.entitystore-wal

MD5 00894371901331420607318a6f5def94
SHA1 f9ad9b17a56c5e615263998e4550640d16b43da5
SHA256 f6302d7497e691f2c465188e87637fec386e7e6772c22ba75623a5964dc839c9
SHA512 fda41981e2f4f212caa1464097cdb789c146e3e39709a0ce7b2df394bdca5849cb3911c4dcea4abeab9dbd9def983223e5d76fb0dcf7c82a58dd48a121af0e0b

/data/data/app.rvx.android.youtube/files/procs/app.rvx.android.youtube/cfg/bootstrap.data

MD5 2f26415d9cded27994d1cf7ff34941ea
SHA1 f43b7b2acf5f2a9ddee252e453726503110841e3
SHA256 a089f67fc4495e702f37619608ac8fc7f0c7f9d66c7a4839c1df8872ce8cc080
SHA512 d701a64fc82e5eb9154649b7063c279de1f0bbf3b485f0ef9314997985536602bea8613ff446ce3500f0d929c9b8280c4a52af3a6bff612e6bb610c4a7f1df80

/data/data/app.rvx.android.youtube/databases/default.entitystore-wal

MD5 7b4e452c2dcf86034c41efc6e98b58ee
SHA1 7599cdea149e0c7f61a48f3cb3fd748bdd042fc0
SHA256 b66ae916a2430fe8d2b62f5ec0d6f59b55eb34bd705a44afa5e7755ba341acf0
SHA512 57f1ec5c71ace6e2788ccfcb52aef208a97ea0c571a16e06b3b95eb77d51faaa9cf135bbc968fdd138f2790689279aad66e02386d2ba98035c77a532ef55d304

/data/data/app.rvx.android.youtube/files/103795117

MD5 ff9bf3aca185fdfdf7b4708ebe0f62fd
SHA1 683dfcd0ff47643108bffe7ed52ec3db443e60a0
SHA256 92a22bc793678a6daf0a88b544ba8e2129f6c4471dd8b0f1e64858fcbf3d9096
SHA512 0987e474c46bde91e366beafcf4c941ba630aff9899128add21adf5ce47e8bc230a7b6a32a17225335df49130f4db81162a07ae5c73e8dcb66f0cfe359c5a738

/data/data/app.rvx.android.youtube/files/AccountSyncData.pb.tmp

MD5 4e48115f210d672b77796505a2cc5302
SHA1 c4d698b63a15820bbab2142fc755afdc2e736ef7
SHA256 ea259d332242ba274bc82dcd69d286d2ad6b60a0d0edb0f1c6eb26d154e45f49
SHA512 99bb9d094dccc1c4a2cde172b2970da86d1bc7f1f1aacf0ee5512545f541fe8bc5032523d8ec2db89c256499bd88da29bbc8915990cc4972c608857c0a59af61