Analysis

  • max time kernel
    141s
  • max time network
    178s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    03-06-2024 08:15

General

  • Target

    91151ded36a8ff088f7d7f9b4bc1b838_JaffaCakes118.apk

  • Size

    14.7MB

  • MD5

    91151ded36a8ff088f7d7f9b4bc1b838

  • SHA1

    0fe184f898b1fbe325526f86957e8802a079af47

  • SHA256

    81a4c5c54eeaf453527ad0abb52f8217319bec2d3ce54db846dfbe69650bd693

  • SHA512

    34d91a835a2e4eda478844ddc227dda8a7345d6863aad12e8b27b131aeacb66c8b10aa2bce18ff42edf112a8dc20034d7fb3377bc3a18f5e223413d1e20d2a63

  • SSDEEP

    196608:Ej5QC0Vs2P7kOsK2XEo/P0UoUGqdOI8vo4BSw7YMNJKKD6F5unGbiIgAXTfvUTO:E+/G82K2UoGqdOI8vRgQYzZVnDfvN

Malware Config

Signatures

  • Requests cell location 2 TTPs 2 IoCs

    Uses Android APIs to to get current cell location.

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Queries information about running processes on the device 1 TTPs 3 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs
  • Checks if the internet connection is available 1 TTPs 3 IoCs
  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

Processes

  • com.tss.cityexpress
    1⤵
    • Requests cell location
    • Checks CPU information
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4289
  • com.tss.cityexpress:bdservice_v1
    1⤵
    • Queries information about running processes on the device
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:4458
  • com.tss.cityexpress:remote
    1⤵
    • Requests cell location
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4587

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.tss.cityexpress/app_sslcache/api.tuisong.baidu.com.443

    Filesize

    6KB

    MD5

    2aa0ee9606fd6bfd2c13208eabf63c86

    SHA1

    216ca3a9a4da092d16526a0a676015493a1e9075

    SHA256

    d4c5f9cf6e85f6b596c701f77dca9b361a690dbae7028604671d5031eb13ec21

    SHA512

    184e3eb3ba87f6b1b72266e657022f403218f598da30f08a3fa457999e8417851fc57ae0014242164b87d5cec6771db008ef919f4d2b683d7a506d5f167812e1

  • /data/data/com.tss.cityexpress/cache/com.parse/applicationId

    Filesize

    28KB

    MD5

    0d3e99204c6401ea499fe9e6d9855497

    SHA1

    09829f00ca458eab7374d5079393a2cd69a2348a

    SHA256

    63ad014cb50908591939d6a1536f85eece807425af4f4e8a1f9b9eeab13cc5ca

    SHA512

    8d9a50aa9abd17e508ed3ac35a3033e8f9e550d1088baa951f53e6c4697c5ac026d22b90e36e27341d64baa3f0202bd89ca97583e99feb25f8c26b5776c59c68

  • /data/data/com.tss.cityexpress/databases/ParseOfflineStore

    Filesize

    52KB

    MD5

    0bb4e8bb4361acec5eb827508ccd15bf

    SHA1

    35be515d19d6ca3059c046ad9ed4ac5a3ad47c5e

    SHA256

    55b45f2ce6f98ca90b9b1a7226f2acd77f43e238ba42e2258225010ca2ba69a0

    SHA512

    0de5752f98689a0188a68b32cdbfd0f2a5fd9a8e9d646de4a05693560f332c1412dfabf7020468ae19be0f2d71c33a0275a252a5a2d4b69634e35c33e5935783

  • /data/data/com.tss.cityexpress/databases/ParseOfflineStore-journal

    Filesize

    32KB

    MD5

    c33e0532a4d13d6e4975c2ddc76e6e4f

    SHA1

    09ef643ecb4b2a035bb3bb40bd9aeb319c4c8e46

    SHA256

    5a091cbb7b16c0fc7f158f7f73739e4341dada3151c2ab2da3c1793cc9a4ed97

    SHA512

    cace3f4341676885f130fa0a524e808029ef5e28966fb0d14f70eccd21e4dad14b9e02ed495367f14e5151b252591925254ba10ec8305f92cb05c2a0aa72f8f5

  • /data/data/com.tss.cityexpress/databases/ParseOfflineStore-shm

    Filesize

    32KB

    MD5

    340ad20277c1c396c18d1c34e7e15c0b

    SHA1

    86eea9f6437b4b36252946dc728d6092e3a19c14

    SHA256

    77953233fdba334fcfe20c53aa03df901925a4104c1434d9e4b4dd7f1f48e8fb

    SHA512

    a83e1bc3f37bd96c1990ff1a5bd7e06f34e4a1d4cac9242a1560d817e6768f0b22b567686e93420fe0d645660d44218f32e9d6d26d5788607036c799a5caae71

  • /data/data/com.tss.cityexpress/databases/ParseOfflineStore-wal

    Filesize

    44KB

    MD5

    695e4b061e6223b289719a74b1296771

    SHA1

    5f6e013234b78b45b71085e143849702389816b5

    SHA256

    37fe41b154af9ba7fe62e376b51cb4f15b0a570e859e7d1ad7be097235d7c271

    SHA512

    aa980df0cf69f0334e761f2079c68fd32ac8639f5a7f6b9c6c83417b74bf4803f2eaa14d24cc830c076ce97a4a3198878e2ab061b23b520f852841c867c63a97

  • /data/data/com.tss.cityexpress/databases/cc/cc.db

    Filesize

    36KB

    MD5

    d422883e4047fbd3fc0c03fab6719b53

    SHA1

    b43b28d5c2f95374347a1f4923cb342ecf2ce2f7

    SHA256

    b416f5aa42a8aa5ff34bba8ca829b3146be1e5c10f8bc040be3e633ef28bd6ef

    SHA512

    15a6f413433f942c4e8c58ac7aea7ba1a64215c2f75a3d9e0610262d4ddb3ae75e2753321d442bfa177bf63c9b62e3b8a167d36d237e5237c154f669f44376f8

  • /data/data/com.tss.cityexpress/databases/cc/cc.db

    Filesize

    36KB

    MD5

    78a953c8e7c4a4bf4e78ced4b49d5e43

    SHA1

    a3f29f28ca09be29aacd66de9480c1b60ef57081

    SHA256

    30d7b5f17e83964522192a187a4f70f4a288556cfac75c0aac193d44a773ca1d

    SHA512

    37d631b7d55e5ac17deac1b81783432a63de3fc49f71027e2e966135f0497bec178f95ea79ef37c8b93564cf0b73d04a8f76ff169f5084bf1d57da98483a2960

  • /data/data/com.tss.cityexpress/databases/cc/cc.db-journal

    Filesize

    512B

    MD5

    a76c77f31a37a9f7e351a339ccb8a659

    SHA1

    26c9206da3d5c3dd06dee842647b144a83058a8a

    SHA256

    40e3c92b59dc604ac5849b1f810d1d61bdc7fee422e5c4c059595a4e29e22549

    SHA512

    382f44488230d528f291787dfb3b0473d8804030b0edc98213601979ff57157b9ff5888c1a5f5fe0bee6197aa46919687f4a8aa3942291b1833ad3e456c828ef

  • /data/data/com.tss.cityexpress/databases/cc/cc.db-shm

    Filesize

    32KB

    MD5

    1c4274aa7a9a5cac8c6d1df71e4588c6

    SHA1

    abaecd685e01cc68801292e3dc7085654a22feba

    SHA256

    3f6cd5f480ae69859b7841450f3d032c528ba385ebf9f371b9c8fdc6eb4231be

    SHA512

    1adb95935798607bd36cedcd183924d3068f50097d017b278da7caee7771532b61ec3606f6189b6dec8426eb038fe40be75079ce35894b1a8e0d1d815261150c

  • /data/data/com.tss.cityexpress/databases/cc/cc.db-wal

    Filesize

    48KB

    MD5

    0ad2c344e3019e433d9d724ad84f8d11

    SHA1

    30325d17b0d7c464d96718bc01201b4b69f275a5

    SHA256

    28d09d197a5369156e35567f1eb58afbf3aa4f86cf1f8a7f2d2c76acc55d07de

    SHA512

    3cc14dac48092791c93bd8005bf22d3c68cb5634a4f6c34502dbbfb55d69d452fac7a94d92e7d7e85bca45e8049691ee4a4c396374785e58ddc98363b8af2194

  • /data/data/com.tss.cityexpress/databases/cc/cc.db-wal

    Filesize

    16KB

    MD5

    f78841046c9c96e3ac630e2ba0d11432

    SHA1

    efac74ec72ff4e4a0480344e4a20b4841c4e51b1

    SHA256

    c9cccedf74f6bb900d5cbc85fed036870b127bf426ba0d213f8ccb8181bba6e7

    SHA512

    fa6d599c93826bdd3b5788762afb5e8ed80eac659735285466ca265ebf88f3abd8f5eedb0c3e0bf7bc45b1a803ab508b111c8a854c3be345aa1be6288be114c7

  • /data/data/com.tss.cityexpress/databases/pushstat_5.0.0.db

    Filesize

    60KB

    MD5

    f5d06a0d4bc7ebd5eac2c7b1b756ce68

    SHA1

    0e345afc88b132aee3496cfb0f6d3e2b184193c2

    SHA256

    b791e74486d08ccfdc791f01b8d694dc43b436ecdb01736a21f533e00cc9968f

    SHA512

    c1be10798ce6e195ed281320d559abf7df98e2a30cb55aafeef2a15db9b8c3a02e860c9cf2c8d10464faa907331389fa58fa97f2500eb9c1cf4f3901b8839a29

  • /data/data/com.tss.cityexpress/databases/pushstat_5.0.0.db

    Filesize

    44KB

    MD5

    86e52b954ae903160b1cbf0c4235430c

    SHA1

    eaf2c3d82bcf46e9dc7154ae4a96e0019c1a2f99

    SHA256

    4a398f6c35a938a44ab43b29b014c1555e8cfed8b9a0ecbc6f69287dd7f7a33e

    SHA512

    27b88bcc514b6ec6b62e8123a0fa1010a5d3274f44b349a9f91af628316bf0d609e0f7c9ce6c7a8caf4703f9073afec4d88dce6c18fef41329cf4af29fade70e

  • /data/data/com.tss.cityexpress/databases/pushstat_5.0.0.db-journal

    Filesize

    512B

    MD5

    c958fc09e80987fa0f9452722043567d

    SHA1

    fcee13a5b8efdd94c70a66b86221d4698041d17e

    SHA256

    63951db49435c16f8dccf28ffdb1267eccd43db5d307b8d3adf8cf4c5e27e2d2

    SHA512

    e38ba2fc508551f1404b316cc0ae9de08dd26e8c21b015541d6c72821c76cfa748122cb1be2d64ac252f2c0706d1c0ec78ce3137da50314cac350cd55944c275

  • /data/data/com.tss.cityexpress/databases/pushstat_5.0.0.db-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.tss.cityexpress/databases/pushstat_5.0.0.db-wal

    Filesize

    80KB

    MD5

    4d767201d237a987b811852e689dde78

    SHA1

    ccf880efe41d470b97f060b4bf6a3eee619a3280

    SHA256

    b9fca1c9046e1a33987911e02d57104f28b407329803b936ff0dd6bb89e9162e

    SHA512

    86cd0b0464ee24477114088b50d47cd03db579f27efec5e25c5617477597cead3e45c5b59067b6b4658b4f87f53159d0ef3e14022b08db45ba5fe3ea58cbec05

  • /data/data/com.tss.cityexpress/databases/pushstat_5.0.0.db-wal

    Filesize

    12KB

    MD5

    a0675c2a114494f7b8829b691be267dd

    SHA1

    5b5f8e90812f50f058c0a57a342061224fd1a215

    SHA256

    1e62e8be0490f4e0f084c815d146a0bee56329bf09186972af75762514ce9c98

    SHA512

    3a288344b3358252e7c75e9ef1721dfceeea436a0df30ffd204159a0aaab0200e42109e2fd0b65439402e51cee63fb1e4c0e35ec4358608d968a5c7ca62175ed

  • /data/data/com.tss.cityexpress/files/.imprint

    Filesize

    1KB

    MD5

    d7dd94bce3560dcbd8bb050348d68b71

    SHA1

    50b9b038349a20b807ce996b849e78362187c3d7

    SHA256

    53aeacf09e23d0379ce00959ee1ce78c9ac2398596d2624dfc87fa364a09e338

    SHA512

    a861b33cd11416a0d86522ac36ee705a0a52383ca93bcf1bf126402531dfee53951c89a476b30f29451aeec5f6c698feaeeabcf14cc12c4a7ab9c06eddfd23fe

  • /data/data/com.tss.cityexpress/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    6a581739c4fac8bbcc4006bae27c1691

    SHA1

    986a6efd1ac6a065a1c371b5d6de78339863a0df

    SHA256

    36e89ef0391e44c4f9d67b0269f79e44bc4e61889d7ceac9168f5e9abe4ca714

    SHA512

    4075a6dbd9cacab7703fe5676671e82218bbf38d95e6fe95e7a1559e9a9af5a2af2bec5861edf655dcbf8dd3c601dba5041c98816bad79353f463db16c00d806

  • /data/data/com.tss.cityexpress/files/cfg/a/CustomIndex

    Filesize

    3KB

    MD5

    7d8ad27d080edc7a3a4d1efebf18109c

    SHA1

    6713d58662aaa87a248a488c18f161adb419f970

    SHA256

    446878ab4448f06a16af9c23bb48af9ce21f53815924b9af76ca57a556f86ffb

    SHA512

    2e8ce294a87ed4f6da76d2c3abd8f2704fd3de9268f011f160b058eee782f21d157da5c360dbb1e3a776559b182e37cf6f0dd396e48b63ae82e7ebd9fa54ff4a

  • /data/data/com.tss.cityexpress/files/cfg/a/CustomIndex

    Filesize

    3KB

    MD5

    bd67f62f96b2f9a4321410c964299e1e

    SHA1

    566888207a9e271ab279acdd23b33ba89fbfb796

    SHA256

    49972b7d8f0851f8ceaa987aee4e5d8d4da0cf05f8aadce3ee1e33b01d15bd57

    SHA512

    ab7b584dedfff1ce3e09e1c80fdccb07e3afe7cf2e2925aee937296d04ee154c556c067e1afec372e8724d050020e266ed066ef1e9b126ea373f1d9d306d52a8

  • /data/data/com.tss.cityexpress/files/cfg/a/ResPack.rs

    Filesize

    548KB

    MD5

    ff856e8bea094eed62fa71fa35adffc4

    SHA1

    e7e4df134cdf63f1657f4cc6d2d8c9f17bbc682f

    SHA256

    6783ad6236962a9f17a685bc9f3efbb858c707bca9ed0b6575e6ed3067ec93ad

    SHA512

    d95218b37b60c3a269ad0545367d5465cc6b33424845826c4cc9dbd26722e7251a4d7c93dffbc61e0918781bc70508b31b7f12024bf02930b82f16337388792d

  • /data/data/com.tss.cityexpress/files/cfg/a/mapstyle.sty

    Filesize

    444KB

    MD5

    0d0e5cb56bb2bec1b4f455b6a6ae5604

    SHA1

    3cbd9c27d9fe4420d930935c538db22305685227

    SHA256

    3edbba809c33b07612382fe92d102d1936815ac78786fac900d0283b3631672b

    SHA512

    54c92dc8b02ce20b6645a6d55d8a8c45b88424fc69b13ba97d903dba1f08551bc99f9fe0dd1c24dcf1447ec5d415bb8cacf2b122222c0306a308eb342f3fa0fa

  • /data/data/com.tss.cityexpress/files/cfg/a/satellitestyle.sty

    Filesize

    324KB

    MD5

    256d4695ded7acc2e1f8cd37f457d0e2

    SHA1

    e6577b8380098c8b72ebc045d358060431909620

    SHA256

    71174e8a886da0631e586824e2bb3aafd944768427508c548577a156a9bf778f

    SHA512

    5c90ae90d6cf490c87bde3f6384239ee38ddcc2fb572b3acf97d38f35ae68ebd6b3c4a92df34d09346f116944b1dc1694ee3e48bea25c19bbc11e806c5ef8f3c

  • /data/data/com.tss.cityexpress/files/cfg/a/trafficstyle.sty

    Filesize

    7KB

    MD5

    831c0530133dcc6511bf3d9e15d44505

    SHA1

    b608f72729bf14b2397b06a54b933229c454b38a

    SHA256

    15a5813a7868f81ebf58cfd76b93e4f40d139bfa46f93112f247f3ed25deb161

    SHA512

    ec4120830d2737e3f97fdc0e894e3534ccaa84edb2af7709cdb8070439ff63e4130ac000daab3fadfb95cfebe123d5c7a7929a8e5313b67cf7baabff911c5f15

  • /data/data/com.tss.cityexpress/files/cfg/h/DVHotMap.cfg

    Filesize

    10KB

    MD5

    c16f5ca1517683c46e02a6b71aab3c00

    SHA1

    2d09a048d1b8d556d89d4d723947e9e234b5e59b

    SHA256

    13d4fbc0d1cb7c2761641a3632c440f6f1d919dce731b8c32cb35e652b0b39f9

    SHA512

    a692b79382747548fd8be8ed94c06198b143c167be1e96f60d8ea7ee9432a0eb1a0cd73d0704523e487d59443bf7ad13eb36e47b67864e227917d33225e3e62b

  • /data/data/com.tss.cityexpress/files/cfg/h/DVHotcity.cfg

    Filesize

    1KB

    MD5

    11ed43e96f09a823eb14788bf3caa090

    SHA1

    8e29e6ef80cd77c0540b429532c49b24bea8cb9c

    SHA256

    8f871252718e80ce8ce25f36bd390f813cf6798035e18da2a385369a747aa41b

    SHA512

    bc7af1e6da3d69bcf86db46749a99a410d40c7ede77d1fd37c7afc12b067ede9659d89ed356b27ae877cea45ec7b93dfd46d618c358bdf7219d91e55e2364891

  • /data/data/com.tss.cityexpress/files/cfg/h/DVVersion.cfg

    Filesize

    341B

    MD5

    2460985dbbaab6f2d879a8480cef78fb

    SHA1

    4354a107d47974f99797c8a7e1a7ab67a62cb876

    SHA256

    b37020c2a212b314ff2eb779d3a04a9b450dad770c6e60a34a25885da43ecdcd

    SHA512

    986ca7c1f517a001bb0b8ee589ebe4d7356faf01ef552fd4605fe9ab57cafc097eb8d6af430dac673159bd06d92cb3b909ed8d898999c9d6102f097db6edeaaf

  • /data/data/com.tss.cityexpress/files/cfg/l/DVDirectory.cfg

    Filesize

    68KB

    MD5

    1107c2249c958b6d8ea65fb5584fc123

    SHA1

    30b1ac251159756a41ef1c13b0eb48487bb4eb20

    SHA256

    9889f14eec0d798ced2b8c7a1dba11bcf5f12fb04b5b5116775439038b34e4ac

    SHA512

    fd00cfb78c0871fbf4e253ca7133365578b6abebd4edc43a5988f62fa7c5e1725986856dd0638dfdc0d6769c6edded483d147bd19a6f3e81d950c9b16356a421

  • /data/data/com.tss.cityexpress/files/cfg/l/DVHotMap.cfg

    Filesize

    10KB

    MD5

    cc3fad9057e0940ad4d4c7ad27922023

    SHA1

    403cbbcd7b819733b5caf49ed2a58d654441e99d

    SHA256

    f6d90bd8621889ab994374b4f51a1c3f9b028aab1a2129b8b3b0e1d7c5c37864

    SHA512

    ebaf2b8c56bc15826ef38b36e72ae41765fc723470c6dcc40bf9f31118f252777072ad39a535a79f53b6aa29811b4b21cebbc9810c47e34ef9400246d789ab21

  • /data/data/com.tss.cityexpress/files/cfg/l/DVVersion.cfg

    Filesize

    127B

    MD5

    d54b7b380a5ff46c78283013a07d8e0f

    SHA1

    f697c5f7028ba2679a96d6bc5291c38ff96d7982

    SHA256

    c7ad837b097687d92e0d944815fc70adcb0e1cdc82db28f728d13e8a48d7532c

    SHA512

    ade792589c33179c51305f201bfb6db28c05b2ea098d12bfefc1a5cf9bd3014d53830ce2e71f027719ee1b83b2394c7654b5ddf4fdc7f678840869d2a2787ef4

  • /data/data/com.tss.cityexpress/files/config.json

    Filesize

    48KB

    MD5

    0ab516b8968ac64637f72a0caf829ff8

    SHA1

    a57d63946b60317fe220ce5b936272414bfb36e0

    SHA256

    de7f752bbfb6de23dd4ce154ff96229759f09a6a169a9145091cd952ff54975a

    SHA512

    df2c159d73dbe7d66b3f5321b5a0c3941504ffa30af6ff80d929ea62acc43d82aec888ea4a690421dcc9ac56d4e7ea004b7bb2c359109f17ca293951a78ae091

  • /data/data/com.tss.cityexpress/files/libcuid.so

    Filesize

    129B

    MD5

    2f9a876a9310be401751a4581102bfa6

    SHA1

    ad8ff92c5c8a88e2866d4abadb57aece37751990

    SHA256

    e4126c2f26a6ebbcd6d0f25001b7b37ac678fa6990b146453cbad9c2d6642b5d

    SHA512

    978658ec1919f4052875bebc4f3cd81a4059d50fbbe535fcf9cb6204103e0438fb7d1df96ed11b4b482e9c690d645a17dc6ec85f802ac9b02e17e417ac4731ca

  • /data/data/com.tss.cityexpress/files/mobclick_agent_cached_com.tss.cityexpress2006

    Filesize

    4KB

    MD5

    9e1f5479622d6e48458625f28b1a615d

    SHA1

    aa07010162f5ec3cb98da1a53c8ff3d260a8cd25

    SHA256

    60a896793b8bdc1545adf2c01438a00c666c593dff4328e8b9c874a2cd72dc8d

    SHA512

    a9082add9639229eae2b5a2756015a4a6ab69bad62ba0de6a45685f5181ab6d86b8bdde2df33564aa6d0de3f4e5ae052764b190be7cfc8f8f8d3136dfe921cc0

  • /data/data/com.tss.cityexpress/files/ofld/ofl_location.db

    Filesize

    8KB

    MD5

    64e377ef816efcf08adfb5152720d2b0

    SHA1

    83a251613f58055499f95d1398b65be8bd82d905

    SHA256

    35e584c70adf9ab95022cbf8bf5698e0af49abeb0d07f3974a90da4bc2a5de5b

    SHA512

    6790d81cdba3ccef5486f8cd9ce38f0c0166ce3e7a1160ccb08d8c3184b980916e0eb1f2973187f88aaa8174f8839a15d1d691cff9975c553bcd59c26ea27a8b

  • /data/data/com.tss.cityexpress/files/umeng_it.cache

    Filesize

    498B

    MD5

    22f8cd1da36eba3d1ab20023cd0debeb

    SHA1

    b564b682462713aabf98b86d64636fa7ce17d7f5

    SHA256

    fd69c69bd586bae77f52878f18de51dfb656a15d07d808efa2a3c6192cfe57d8

    SHA512

    5ae537e571de4133e374915b9f0f7cefb069a5013ec0bdc069dc363b51c0a2be4e5cb51fc14242828fbdcc7772081556af47e9e9cac79848d77378c48de2e4c1

  • /data/data/com.tss.cityexpress/files/umeng_it.cache

    Filesize

    253B

    MD5

    4d1cd6c7f523122ae1321d1ae0a257a1

    SHA1

    21dbfb19cc27a7624dce57c75377da130a93ae4c

    SHA256

    f9af8fe55a60245aaccd2adf077ab8ca68d994bd06f82d308066132fbf4f0c5c

    SHA512

    aff1d3ff6a6aa1990802b2cb0c53cd676dd1b249d7d3283408bd25a160c613002f380a946b5dfa4c37d3965a27fe7d5394b58714de3ee288f31f723ec3c61673

  • /data/data/com.tss.cityexpress/files/ver.dat

    Filesize

    6B

    MD5

    f302a064db74a0a900b71518595a48ff

    SHA1

    8b84f3fd1ce1031a7a28dd117fe9622f3459538f

    SHA256

    fa60209e3a9bec767668374d985ce8b4626da26b851452fd38e900b94bfaa284

    SHA512

    8286c5b07ab07b239e82f2001faf3a3312f50a2f9b3d7f2734eb3a222323f16aab3a0c3382803c168eed93ff4c023520e201a9ececf215dc22a2e16f4c234270

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    111B

    MD5

    e1918ca3f2493df61ce4fd78115144c9

    SHA1

    c038b24c7548e447724a39949079dacd6923e2d6

    SHA256

    7e907521b14a53daca540f4438a0d5a20a9bda9f668f343dd3951b5d3a9675d8

    SHA512

    82473d11661ab476151dffa7b705cfb033171e3172afc92cb722f5b5421d686a325d2bc7d3e8680578af15b9a2b759fa1803ee6ae282a015dea3e5b0e1175ccd

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    156KB

    MD5

    8c3d530b58edbed748b6ad49baac96f9

    SHA1

    ffadf22253a908add3bac2e5f67571323035903e

    SHA256

    15e983cde499c712fcc58d8b3a5bb0b9af6529fd48206a5c74a79aa0f5cf45c0

    SHA512

    2254dfb7a39b83daaa34f04c0b65c7d037a6a7d0a9c61719ad0813486b78d8e1a925201e3844875d9c91d0f1c55db6ff8a8fc75a73a52dc9ac4ef60848da69b5

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    32KB

    MD5

    09d4e84e204a74e7451ea3fa150c661f

    SHA1

    2038972c5dc2af6b150a41cd70271d1a19046172

    SHA256

    a77c8699dce61006cdb73bf29c5cf089fc766e5bce147e34ad23cf36b008f94d

    SHA512

    360ccc9c4de8aecc9e7b3966fb0da39837d4e5d3513ec9ce224f82fe986d63d2828b5c9e246a8784940e3a02f631477097660bb02c82796c707fe8748a0d76e7

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    167B

    MD5

    11ee11bbf0f71eed287923ea341ee660

    SHA1

    78063d74a970b0ef1f660d3da7cb62f34cb8f11a

    SHA256

    55fa13a77878caee3e94c0bb5717801c725960bbf74ce298c18ccb549e9f3df2

    SHA512

    58d7c0afe1191dd7ba273233d407729a3b66fb242b35d8d3e3a1cbb32ecd6fe74f27272576764a2d5eac592f1091b140c350d853722232a9faf1ad80fbb5f709

  • /storage/emulated/0/Android/data/com.tss.cityexpress/files/BaiduMapSDKNew/cache/tmp/DTTempdat.dat

    Filesize

    2KB

    MD5

    3ea263bd8b7c62446ccdb822ea14321e

    SHA1

    3f8c8c60b1f7f26c12665b4b24a21cbd308caf92

    SHA256

    cc984f684d65c0262704871888bc14233b46b4b0dd9b34c4242b97c1070ca925

    SHA512

    cd8c701e49e36d89bfa06cefea39f068acc67794448b3823c0fbef73eb9734dc1591a448e5684c65de96d4a2ae14f3cc4d22dc9d7330df7bb71d300304c4ba30

  • /storage/emulated/0/Android/data/com.tss.cityexpress/files/BaiduMapSDKNew/cache/tmp/DTTempdat.idx

    Filesize

    164KB

    MD5

    9821fa9bf06a0d5162dcaa8b76421dcc

    SHA1

    921532f0899bceb3d4573c6c1af5c5781f182db4

    SHA256

    d6441b5f22170d11a2cb15c2b58ab912734740ff3c083e6ebfd83914ea2ca6a7

    SHA512

    54f2fd30be645b1ab1b4ef3a4cf052642ccfb6f7ca461f8f97ad7a6d674f609e2fe3e815b00e2cbf421fd2123eda59faad451767d8e8479fa54d7f8d59ca9664

  • /storage/emulated/0/Android/data/com.tss.cityexpress/files/BaiduMapSDKNew/cache/tmp/DTTempdat.idx

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /storage/emulated/0/Android/data/com.tss.cityexpress/files/BaiduMapSDKNew/cache/tmp/HMTempdat.dat

    Filesize

    2KB

    MD5

    eabe6bee6e08fb16c5ebe88cbf201629

    SHA1

    c192bb1ff70c073800f78cdb74629e438345425e

    SHA256

    ce338981ea2ce0f03ab4456273e26d70afdad00b9a5ee930753a34c4d1c4cfd3

    SHA512

    dc287ccc3c52600882a3f699efddea9cc8a8260b4b01091372a526cfc34f8a98bce241080c34b4df2576d83aebb323438a7d637cd132ab38cd9e268ebc53c264

  • /storage/emulated/0/Android/data/com.tss.cityexpress/files/BaiduMapSDKNew/cache/tmp/ITTempdat.dat

    Filesize

    2KB

    MD5

    6e4165d590cb8f5e934ba317c8e07000

    SHA1

    d433b1c0bc77146414ad94fb12fc39cbe6a609eb

    SHA256

    00b865139970e945b1c9390ef93281f8e6c3650da83fd70a7e43aea0f970a05c

    SHA512

    abeb12dba014466d4629973c65dfb2fbff32cba67600068338dd7902466a342fc053aa008321f8b01fe0c33b218bbf8a1240afefc51b23e4d0e58d43e6b89882

  • /storage/emulated/0/Android/data/com.tss.cityexpress/files/baidu/tempdata/yom.dat

    Filesize

    24B

    MD5

    a936690571e9104e1922dda4a0ba5bd1

    SHA1

    65f49c57edde2f96be2a1dbdfc3f7351f1e66554

    SHA256

    f0f5049c51879dd7da0ce4a43349b5b34ce053d072a0ca704f62cf22ba4a8412

    SHA512

    3be1c3693963aebdfc04e86b1c820ee0ec3cf0b200e6a4788ef1141f39fd6c2f77f4227247ae4affa66c0a6c027df8466cc0dcec1e67ebfb953e36bee97de394

  • /storage/emulated/0/Android/data/com.tss.cityexpress/files/baidu/tempdata/yom.dat

    Filesize

    24B

    MD5

    1681ffc6e046c7af98c9e6c232a3fe0a

    SHA1

    d3399b7262fb56cb9ed053d68db9291c410839c4

    SHA256

    9d908ecfb6b256def8b49a7c504e6c889c4b0e41fe6ce3e01863dd7b61a20aa0

    SHA512

    11bb994b5d2eab48b18667c7d8943e82c9011cb1d974304b8f2b6247a7e6b7f55ca2f7c62893644c3728d17dafd74ae3ba46271cf6287bb9e751c779a26fefc5

  • /storage/emulated/0/Android/data/com.tss.cityexpress/yuntong-express#yuntong/core_log/easemob.log

    Filesize

    7KB

    MD5

    49b9fe728b5282f9ef5858a9439cdc15

    SHA1

    cc30ebc523d96d00fd6370d730cb4a39c08b6d73

    SHA256

    698726934b65fa5f7c6ab9a5787f9a2fa9c467a2a3dff4e47e96e0b889114818

    SHA512

    2101a2e0a3dca2f86f5aa53ea50e4b8789463f112293574a8d0a27837d4d660eb9cabb05db33ae8a8f47f6cdbede63062a3dbf47910e8f874f9b876790197262

  • /storage/emulated/0/backups/.SystemConfig/.cuid

    Filesize

    89B

    MD5

    c2414f4d837345eb8789834929660fab

    SHA1

    b4e87f0f38bb8fe118bc69996b2848ce0a60d87c

    SHA256

    a5a2e2d90e56ab4460a458897c4f75c6ee482e5d55463e7408efedb3ac7f8ee1

    SHA512

    c39907d0a8d26a0c91b73851883115c3e2fe5b58161848e3ec9f17b4f2353af8149dc2535680178ef01cdd20307636215868e01e2480cc1dccd4e6d57234fa49

  • /storage/emulated/0/backups/.SystemConfig/.cuid2

    Filesize

    129B

    MD5

    0cb640f41f49b6dcf0021d7419229873

    SHA1

    0ec732e08a1680a50af70f6ced31bc43668cfab3

    SHA256

    98427dffc147b215d2ad41ce0cfa4f2c5711f623950a21c037c713578ae699fd

    SHA512

    cb048fc16bef0221b304db8c15473965c02b5b3e39c4be1d0ae9f0a65c7418395b470023a352d8578ac9bbb99adec8688aa883d06cb8bb2f5b47efbf06d76745

  • /storage/emulated/0/baidu/.cuid

    Filesize

    92B

    MD5

    629b1e3225d53a34c8b17478780254bb

    SHA1

    46cb87c06d891747ec9dcaba1ce1681f66ed5d6f

    SHA256

    0fdf7e4b6e369ea447751ea610f8bfbc8e7a5554e90bd3042adf5a92da1d6901

    SHA512

    1775bc92a68837c52dc7b3f2bce3e55d69636d313b98825353486f6c53b8797c3d5502b0259e029cba731957df400166522d9d34f4a6fd1992471616017780d5

  • /storage/emulated/0/baidu/pushservice/files/msg20240603.log

    Filesize

    235B

    MD5

    39d432b7d9bd622633aff48f8e60532e

    SHA1

    29191bd2d694146fda3f741afabde315a1fc51cd

    SHA256

    056a0702a4a8d3a97c5643929ef1745d6944289a90aa58d8e97ae923e5129183

    SHA512

    7033c50f70312b1f70a9c669d105327440b3bea49253e3a7716082feaf9f8aac3df73532bf689a4a60be12efc5840992f61950b47d64a91e5a7812e9970ab99c

  • /storage/emulated/0/baidu/pushservice/files/msg20240603.log

    Filesize

    156B

    MD5

    1cefd5c18f719cb6b6cb33bec1445b3b

    SHA1

    19e7580f0a16ef0a22643918a9876bc330615bcb

    SHA256

    f2cd75fcd7a6474d6cd9dcc3a4154c75080b60cfd9ac5e5f4d3ddf84d7396300

    SHA512

    85cc5ab65beef6bd5719c68fbc9d021b3d9bd8b081cbe2f5a59462f8e3fcad517e66521897294c218c4a9422cca2d15a76d86689b0d87fff87d08c017b233b58

  • /storage/emulated/0/baidu/pushservice/files/msg20240603.log

    Filesize

    56B

    MD5

    01895fd8de5fef5810c4e9428c2985fc

    SHA1

    314a97d924d3cd94b615e9dddffd77cb0e1959fd

    SHA256

    2908c6e2cdb25c8583a21e83ac404faff1349e5e3587bf82dbc233de29684905

    SHA512

    1978a48f9b33d2abfc8b152701927e71d5d7b19c03869a16e413ce3626114ff394afd7ab925a109bad6de8115435623a68e63dfd3895c94ad4efe06f618087e0

  • /storage/emulated/0/baidu/pushservice/files/msg20240603.log

    Filesize

    87B

    MD5

    fd6854f227d987f839164ece971f44d6

    SHA1

    9be81d3075a568ead48f39b8930edb985ee3dfbe

    SHA256

    efac2c0e5c2ac980119af2aabfb43ad962302008cfe60b1e273d671be287fd5d

    SHA512

    085c6783f44baa9558d5b6a5991ea881ed7cb8fd3bad67eb4e58a6443c693647d342f8d1f8a6eaac7fdf8d9eba798b100e9947265de1e890c974ddac5cb8ee69

  • /storage/emulated/0/baidu/pushservice/files/msg20240603.log

    Filesize

    502B

    MD5

    c04cb7766d7491ee1e91d74327397fbf

    SHA1

    cf25c929018d0d4ab99e5e8a8e9a9fd8c8fd2137

    SHA256

    028e9a3f0e2c961ad4852b219e4a4810f00b50bf5934c1d68a9b8e3765d0494c

    SHA512

    12ae06b7917bb550844d117c3f7f6c341e98cc9375d0a6afc9497ea42e3cbfe74fd1a9a934c66a520d45ea76cbe64d43bf0d8258c259cbef2809ebb084f2c9b2

  • /storage/emulated/0/baidu/pushservice/files/msg20240603.log

    Filesize

    239B

    MD5

    34adfbd3bd3d8a8e2a9d20160842b386

    SHA1

    483e91e1f6a1a40e5ba57dbd7529e532b69b8bd5

    SHA256

    4096b1d56ff2ac0ce6d944189d7cfd7b6f2c166e181e56a026df70c046c0a0dd

    SHA512

    f1334d1da8d0d14c581a992f33d1904653d6b192aff8b3e130b7126d2c67c73c79ec6f7505ca7a472bea95578cb721336863346a4c9813ca2810296986cfcf86