Malware Analysis Report

2024-07-28 11:22

Sample ID 240614-bnjljstaqn
Target Click_me_to_install_SnapTube_tube_snaptubear.apk
SHA256 70b1262ef77ee4e3cd229e9f711e8484bdf66d92716b80bf45178d0adb365910
Tags
collection credential_access discovery evasion impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

70b1262ef77ee4e3cd229e9f711e8484bdf66d92716b80bf45178d0adb365910

Threat Level: Likely malicious

The file Click_me_to_install_SnapTube_tube_snaptubear.apk was found to be: Likely malicious.

Malicious Activity Summary

collection credential_access discovery evasion impact persistence

Checks if the Android device is rooted.

Queries information about running processes on the device

Obtains sensitive information copied to the device clipboard

Acquires the wake lock

Queries the mobile country code (MCC)

Requests dangerous framework permissions

Queries information about active data network

Checks the presence of a debugger

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks memory information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-14 01:17

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A
Allows an application to collect component usage statistics. android.permission.PACKAGE_USAGE_STATS N/A N/A
Allows an application a broad access to external storage in scoped storage. android.permission.MANAGE_EXTERNAL_STORAGE N/A N/A
Allows an app to post notifications. android.permission.POST_NOTIFICATIONS N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-14 01:17

Reported

2024-06-14 01:21

Platform

android-x86-arm-20240611.1-en

Max time kernel

9s

Max time network

149s

Command Line

com.snaptube.premium

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A
N/A /system/bin/su N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Checks the presence of a debugger

evasion

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.snaptube.premium

getprop ro.build.version.emui

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 digitalassetlinks.googleapis.com udp
GB 172.217.169.74:443 digitalassetlinks.googleapis.com tcp
US 1.1.1.1:53 config.ad.snaptube.app udp
US 1.1.1.1:53 sensors.snaptube.app udp
GB 143.204.176.13:443 config.ad.snaptube.app tcp
US 18.208.60.9:443 sensors.snaptube.app tcp
US 1.1.1.1:53 firebase-settings.crashlytics.com udp
US 1.1.1.1:53 api.snaptube.app udp
US 35.174.164.224:443 api.snaptube.app tcp
US 1.1.1.1:53 upgrade.thejeu.com udp
US 47.89.134.103:443 upgrade.thejeu.com tcp
US 35.174.164.224:443 api.snaptube.app tcp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 tnc16-useast1a.isnssdk.com udp
GB 2.21.67.51:443 tnc16-useast1a.isnssdk.com tcp
US 1.1.1.1:53 static.xx.fbcdn.net udp
GB 157.240.221.16:443 static.xx.fbcdn.net tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 1.1.1.1:53 update.googleapis.com udp
GB 172.217.16.227:443 update.googleapis.com tcp

Files

/data/data/com.snaptube.premium/files/mmkv/pref.switches

MD5 620f0b67a91f7f74151bc5be745b7110
SHA1 1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d
SHA256 ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7
SHA512 2d23913d3759ef01704a86b4bee3ac8a29002313ecc98a7424425a78170f219577822fd77e4ae96313547696ad7d5949b58e12d5063ef2ee063b595740a3a12d

/data/data/com.snaptube.premium/databases/sensorsdata-journal

MD5 97fabac8065b6d40ec285e74d4919560
SHA1 136ec6a99d09b3146094266180543316cc953d7b
SHA256 8e4facf82a46b6497af6a9eaad7c9620af225b0d511ae6e2fcc050b5372ee98f
SHA512 d1727c0545ce47c42f2488b52c91e26b4cf37d7b45f40c9c2532a0b9f3a77c88eef6a25287509651825f8ee5448f3dfca9ccc9aee98d0bc47f9928782699f89f

/data/data/com.snaptube.premium/files/mmkv/pref.fan

MD5 0dfbe8aa4c20b52e1b8bf3cb6cbdf193
SHA1 67dfd19f3eb3649d6f3f6631e44d0bd36b8d8d19
SHA256 fa43239bcee7b97ca62f007cc68487560a39e19f74f3dde7486db3f98df8e471
SHA512 4ed83e40c9cf32ac2c59125a01170bc97f20550952c8ca20ffe1b2a59d1b1ed9c8426c515f7629d1bb5e4cdc53dd70ffcf67203d59e70a559492e5ff0e712278

/data/data/com.snaptube.premium/databases/sensorsdata

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/storage/emulated/0/.config/.udid

MD5 55653c0ca52b5d709fababbb1b8cc7bc
SHA1 c6bd520475d989045555ac9d9d2e162a13a319bc
SHA256 acc6ed223c3552a8541f1fcc12658c4f4ba49ffeca1f17138e6f7cec46b0640f
SHA512 ee6b5adae135556fc88fc139743d7303b47ec6c32a54f92b6d4347b8d16e7917fccaf38aa3cfbfbcff8c810f8d0d1f263f8a74d02842a2f2998bbd738b4768d8

/data/data/com.snaptube.premium/databases/sensorsdata-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.snaptube.premium/databases/sensorsdata-wal

MD5 839f757ba62d8e334aabfcc96c33ea42
SHA1 39dfd0b2d10d406d55c05313246f6091d91df88b
SHA256 0e2d465dbb5a77a6d90f499c13bbc17867e7204ba396845d57cab0add9bf2a00
SHA512 f964aa320069fe0f564d9b3996508d4a6ea57b9851a0844e4da2bb8b57d91c481a462b2afc76800ad294ee7bd6a2537a9ebe35ccaca74b1b5b16a121f3e06a1b

/data/data/com.snaptube.premium/databases/snaptube.db-journal

MD5 5f6cbe59ac7e89a59f5d9ffacf1d1e29
SHA1 275fe3637048e12923824f76894499b3a60daaf3
SHA256 e28b89cf4763b15ff7108e3a0f6bfa7840a4b0d1cb43f7f244bca3594e37bb05
SHA512 1ef5f6142a352b477a6bc709cbfc262a2463cbb5a05e832c854948c6b7347a2c244373adc8f1cf5c40e1ec82c121e74929bc799e5951e9eb17d1bd5cdd8567ad

/data/data/com.snaptube.premium/files/mmkv/net.pubnative.mediation

MD5 59071590099d21dd439896592338bf95
SHA1 6a521e1d2a632c26e53b83d2cc4b0edecfc1e68c
SHA256 07854d2fef297a06ba81685e660c332de36d5d18d546927d30daad6d7fda1541
SHA512 eedb6cadbceb2c991fc6f68dccb80463b3f660c5358acd7d705398ae2e3df2b4327f0f6c6746486848bd2992b379776483a98063ae96edb45877bb0314874668

/data/data/com.snaptube.premium/databases/snaptube.db-wal

MD5 e43138e3ae68d564fbc69ea9207298de
SHA1 a441ca456677180cd0a70c9e520eb0194510077e
SHA256 bae3b2f028a100b7867991dba67893eae07fd20333d88ead077e73ceb055029d
SHA512 f3b8ace8323898052da3de13e5450d46b35710e06a0c835d2ef3570185a81583dbc396487c3f7360866fcdf4fa584460fe58fa3a18994ccfd8f4f132425fbf6c

/data/data/com.snaptube.premium/databases/com.google.android.datatransport.events-journal

MD5 51c6f906a1627d80d2a216fbb01b6dce
SHA1 ac49cad6b65053bc20ac42b44aead7e12aaadab1
SHA256 8d17a3e320021a0e9c6abd963145e6b14786dbeceaf9d3329542e77f29906049
SHA512 b835028166e172bbb5bf57844404f38f08ed9036f80037739d4b324a164887aa8f615ef991da36775ee4b2e66c65268f3fc20adc684a232cd13a96ca778cbf43

/data/data/com.snaptube.premium/databases/com.google.android.datatransport.events-wal

MD5 0ae895e1a6c2fcf4b8364fc0c6ea94e1
SHA1 ab79f4e4ed670318d97abe23ee8dc6a08f1786c2
SHA256 43cf2a3f0e99ddb58fd604db5e144023d64ec24ac4883a9b11968bab2ce8ac4f
SHA512 c77e3a19c7ebdb749e975cd6e789b9fe32d6131cf986a1ae33dbabe98195f483e4c87086ab4bac8205055dc17ff92c9155b55a3777617703ec892b69678af710

/storage/emulated/0/Android/data/com.snaptube.premium/files/snaptube/.config/.udid_time

MD5 67a6c560dadd826d2d39852d66fab141
SHA1 ed10bdb932b9dcb5554da1ca91368c823deef3e0
SHA256 4ee6f6db72e817d878b255d012449d83b5cc9759d386d11c5ce0b739c98cf1f3
SHA512 9758e497b2dccefdfdc721de15c1031e54ca40f3119720d94a4cac516a765405681a6636d307dcfd5a366f9c7b4825902a8d32f74d985b3ef33ce93d5d1ab198

/data/data/com.snaptube.premium/databases/media.db-journal

MD5 680aa19293abf1c3c3d428a2ff0d5b75
SHA1 28d07c65a77daf7cf33d409542e31ae135e53791
SHA256 08b27579ef7b58f1de79e32a5d0cf9194fe0c208c2a08b1b8c3468b89dd82985
SHA512 d037d7c749a43bfad3ae12fab7132a6bdfbe04a2e1449f2775f9e71643c38dcdbcabdab49b82b713b9bf4a8f5a482f7562085c6d85cb0c7b045eda072bf4cebe

/data/data/com.snaptube.premium/cache/app_okhttp/journal.tmp

MD5 37e8e716e0e2f4a0b05cd9571d95b84d
SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

/data/data/com.snaptube.premium/databases/media.db-wal

MD5 1cf2e054250bf40c3b7f6195c273eb08
SHA1 69feee183e4f1c126b5967517b227ce0e607d9a7
SHA256 0949491b44b2308a191f7afa9a884b61a39c5bf092fc3ad27351e76905555983
SHA512 9de482e0da5fdd4f4aa9492372fe3df47ae07b2cd744283b29b21e4e3d24acada8351899d78f57b55e7b7d574f9f1a739b703c63f570594b9be9fe4c6a691d2f

/data/data/com.snaptube.premium/files/PersistedInstallation1756916679831609067tmp

MD5 6d9c0f170979f028f50a933ce6030bc3
SHA1 8861367052f425cca522a44859c9730fe0a8f8a4
SHA256 70597b722f1da97fb6f610ddb567aeaa7a84ac90a732d235429f2795a5ece0d1
SHA512 acdaa8945232ef01feb459ccf750c721e47b9222fd1967b247995b0420528c6277ff241d6cdc45ff14513843b6f885cf921419b0277091e2aa903538370f7b89

/data/data/com.snaptube.premium/cache/app_okhttp/journal

MD5 017a18daf2b811247e5ee50f57313877
SHA1 a6ca1aa79525d5de865d34a2b4da511e6f841c65
SHA256 f219a569393a8df5bb4001af61354ad4c82f60e82994389e0802f0be2cab9230
SHA512 8c085936572be3dc88a5eaed354deac1feb1416191256248a1b8e7b0ceb3356dcd50e37692d6ea93d8c308e499affee55b4e03bac73224b03721c2cefc1afdc0

/data/data/com.snaptube.premium/cache/app_okhttp/59d4e39c4f8e985745b17440353b24fd.0.tmp

MD5 83a4d9c53ffd23d7fa8153c71945da29
SHA1 efffb27d5b0f9189702aefe65a289dda22fc5a16
SHA256 b8b734bf513cf74b3ea97fd9b8cfca3363016f351d50853581aff650e27e3596
SHA512 d109b6da0effaccd8403f429e65065e137fe677774b6c5b27ec32ad9c7fa94c2206d467e84d59c4d91cb1758afb50c69bf50d5de4943dbf2273b66b174d9f26d

/data/data/com.snaptube.premium/cache/app_okhttp/59d4e39c4f8e985745b17440353b24fd.1.tmp

MD5 b521a565a9a98261ef4acb3829c94ec7
SHA1 e6bc7cb6ebb58e778556a3312211dc8e42123ff2
SHA256 3593bcfd921032e9084ba13536b54676e78b7ede17b63c3a0ea3b79876df9b50
SHA512 c812de45e06f6d88adff9654e841be5a1cbdecb41f49a963ab967b58c0481f52fa88438e1ec3fa63f9df8f73dc3a975725342d82cd38dc24a4e41b0602a5a23a

/data/data/com.snaptube.premium/files/.com.google.firebase.crashlytics.files.v1/com.crashlytics.settings.json

MD5 12015e54a1e46681388b0fcb8a52a43e
SHA1 ee92d35c811ff363f10835170d816eb9aa34cc4b
SHA256 69874ce036a53326c13db399377e3efa13b86481ad7f9644d15fde7e285b6671
SHA512 8f13f8ecc1babd239550c27e64f516952d985df8f9e7d8f821114c015e3d3819f3f95708d557130c0dc388cde51ec283a2277835f115c49b3cba0a23b7faa209

/data/data/com.snaptube.premium/files/.com.google.firebase.crashlytics.files.v1/open-sessions/666B9A500112000111310D0A91F918E0/report

MD5 f4fe059f1be80a07e8e33fed16ea9267
SHA1 c1c77aa183cec69ab6351287874f96ed46d38e4b
SHA256 4492ef301a07e4814c19201c008b43fb1454f1131b13940b24e9d28f54497c18
SHA512 a0529c314a5b0f3c6df9c2741e6c1aa5f744349328fddb796e81069512908ac5eaccc8c397bcede631ec4ccf3d66b6d28ec1c67215207966159abd3b3f3ab0f7

/data/data/com.snaptube.premium/files/PersistedInstallation2404736517075615076tmp

MD5 9c9f4699c963ad02a908636447177715
SHA1 1aa211081d9664ff927d84733e90fb7fdc09ef68
SHA256 4d515663ed4a698e365b25eb767023bab9edbb99ab6316927b6eed7a121c3783
SHA512 0390d9e476ac5ee0f38630b86bfecd7f05388284b7edda3baa8cb00be9df64863bcdb76c3f45e48d769bb4311be4f45cf984b696c070e389dbea4f1597f6c1a8

/data/data/com.snaptube.premium/app_crashrecord/1004

MD5 c877079b1baf9ee4e79854a5e59732c1
SHA1 f2f61c6985e2c0dd82767067a759ac3f370900fd
SHA256 4b447e66e5d2e6181a575bb8424a031aeef40a5adba34f3eceb774e082066b76
SHA512 4e3da10b91ef526c199bbcef9f1a4b26219b50892c78051dbc406c2aa2130d4ff849902069f898740a41f081d3bd82e72c8768be924bdd09d9b9953d0fcc7de0

/data/data/com.snaptube.premium/app_crashrecord/1004

MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

/data/data/com.snaptube.premium/databases/bugly_db_-journal

MD5 251d6e61a5f48bf6a729f8f9be0657d2
SHA1 4389ac196c0c139330a11f743c81340c95486fbb
SHA256 e5c6ad185c7b48169ff2eaf15f135eeb695c42c5d8c7b74c82aa27e89362d0b7
SHA512 de8b22b02fbe9c11c5084b02fcc4b0f20089d47c6f349ce0c0e56adb3d926da56873bc0de59fbbb34bc9955ea4b8d18c7ce12b469a12e30bbed9ca5b3a3cc9e6

/data/data/com.snaptube.premium/databases/bugly_db_-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/com.snaptube.premium/databases/bugly_db_-wal

MD5 73664963513f40019a3b4020b838fd97
SHA1 2cdfe4a1587ebae22aca902f4c016322ae43d1c1
SHA256 7b18536c1dc95e5f0364c7b213fb6377a94edeb27007eafa16ab09afe6c8ba5c
SHA512 88f8887df103ece4e483195a44dd631d8aeb3602ee21fb6d9153d5e424e276d1387091ad1c730fdc2761f37816e619dfe87147babf570b55ce0a5ed96369cd0f

/data/data/com.snaptube.premium/cache/app_okhttp/a309f3696e4becff04b540dcbde67865.0.tmp

MD5 523ec483eb802ed0d5f58a0f4992c1c5
SHA1 81405225d96b9455eb7fa1cca04746e86ed39b3f
SHA256 cbc9d211888724248792095345782b00407ec58ed81395b8093f94b402c08870
SHA512 682441929fec06c9d00e0264422a5ab5584ffab5da1fabab278bef4c776ddab9c881672d1e39d1bda150070ab2c491dfa0177e8259a3e2eacfd05604bac96358

/data/data/com.snaptube.premium/cache/app_okhttp/a309f3696e4becff04b540dcbde67865.1.tmp

MD5 d38a5c920f72f3722c65285d8a59419e
SHA1 f6008e3114bb2747ed6accef562123e3b85cd3ad
SHA256 2db3082106f2687f1fdde71cb56ee75e2cd5e7dd342bc339f1eb8a90a2e5f99b
SHA512 8270162711d59845df44657801e829e4df77b2ff312df5460a66d43520c42252866e5ac402eebb2a085ff9452b9a59d48c9b68f319c4f14b9e0ee73945c2814f

/data/data/com.snaptube.premium/files/sp_global_file

MD5 a9244cdb1243342496f1743d12e1bca6
SHA1 8658f63246ce4e941293e58b8a6bc34c05e88153
SHA256 3e492e2e2c359dd704c5858854541218b3037878d4d15fd7fe7c14cc6af02ade
SHA512 f5f89c2e4c179c05648f9052d3d411ac057bd57beb62f606a4b031ac31c97d8439191279c28ffd7ba1c20a784267b74f5fabab7ae94eb532934d3b9827a915b9

/data/data/com.snaptube.premium/files/log_switcher

MD5 7512171946230488d2b0d3899ca2e45d
SHA1 91dbeb9dcef12acabcece4816d92a923e2aba1f0
SHA256 1f9db4926deed8f752bc3d98b6a4e18c0185bf055c3c750b0951f9e9a20be334
SHA512 01b453501da25f567f3251d741b40d5f6a4bb5a5a6df88d586a4a066ddb5846ed80c1b02f99bbd0900c4d53ad09d9a49000a97e6a761a86d114c12482090ae8d

/data/data/com.snaptube.premium/files/log_switcher

MD5 8afc7bd1059e369dd5210100c4530088
SHA1 5705c274e93fad1521558b2745f99a59d78328d6
SHA256 c9c66fdbe555c33d663c17a1ac3426c131b081fc4736128117ed9a826d1e16a5
SHA512 32b6cd0ea901e2c8b418f2d22570569826bafaec8058c8dec3c75a969716ce848e24ab7e850aa2cdde065f104df0dd9e140843261f6d310c6dba9a1018f266a6

/data/data/com.snaptube.premium/databases/ttopensdk.db-journal

MD5 aefb9e54b4485deae63b82ead7e83a95
SHA1 a55f1f9751554b4b3d2de467227c8e79a95af2eb
SHA256 688fa4e383d7da3702152470c846000f11a2a3fcae2746faf7eddaa9a7e454f9
SHA512 84bf24e1798f067c2b1e2391fe4c23944ea3c26ce94635e006ec977fedc2f849c9b66230a7d7d54a9487509862946621e344d7a3ce18a5488c4f042f7c53c171

/data/data/com.snaptube.premium/files/sp_global_file

MD5 3cd814cd617e7c6040fd58429772b7a4
SHA1 3a2e7861220e15ec4e3808aa5f1808557cd14861
SHA256 3ba83ab91a0d8d293682d9b10728cb4f5e6815dd2715fa35edb0f405853ff8f5
SHA512 aa5d480b468386ee083b9307bc90abb63ad42a69867e04184f2e553e0fc47146a44270d3335173e6783e28c0c290463335176d972648be067e1909f729884e78

/data/data/com.snaptube.premium/databases/ttopensdk.db-wal

MD5 8aecf88e734549967185e6b5d7f03919
SHA1 cb0000ceda62858285e8f87e81d5a9e0c6bad9f1
SHA256 35d31a464808ff6417b39a6760b2e46203f05f25a47eb0ba799cb77deb7de27f
SHA512 39c4725f3fb75768fcad688524d8c340f4fb0363f4b4c6860b4bd1067282bc51b36a5abd462fe2fe826fb89a7f2777073cbb06e12bc4d132823ea0a60dda753f

/data/data/com.snaptube.premium/cache/app_okhttp/078d0bd696b8ce40da2b925f27866543.0.tmp

MD5 834b259028798c4e0d89912d697f90a8
SHA1 ad5742de4af6567830e8a19bd01d5289ba88cf94
SHA256 fa42b45958caebffe77720a9206173137804e0fa675ddf8c2bfb9c1ffa9fc40c
SHA512 cbd3f6c275ad7ce12d641efe1eeb4c2ee535bda7167f1050852784ed9997bcb763aef6babbf6154612ae0359e705270a833d7a74adcfbd42f2f46833b724bef4

/data/data/com.snaptube.premium/cache/app_okhttp/078d0bd696b8ce40da2b925f27866543.1.tmp

MD5 24c10e3881d663dc9842063c466d2240
SHA1 dd80c5b8ae67d346f8ac4e1206f61e24434a6092
SHA256 3b1e8077e9923faccda6a9d796bc2bb37a6dfa2899b0ac99add6464def674e45
SHA512 c043557c865a21987f982b4d69b3ca3c805fc6359f929815b5010d5cf626bb439c941e25a5328ee9c5efba15bd252ccdfba2a610b49649de25465ff259227a53

/data/data/com.snaptube.premium/files/bugly_last_us_up_tm

MD5 46299fc8f2d3f3f86ba94b4db95db790
SHA1 526a3bd29ad39369b4e01875ce4e74ce138102a4
SHA256 768b338f5e43ee9bffe59845879ea8e156775e5a376882a0669a30ed1ab98525
SHA512 8a1632f96d81d400bdfd8fbbe0c7e5a556b085284ebd6ac04b4566def8a8eec21037d888e8f2bc08a060d02e1e237edad33cac1d6c5c5cc70007a3b5075baa3c