Analysis

  • max time kernel
    143s
  • max time network
    183s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    03-06-2024 08:15

General

  • Target

    91151ded36a8ff088f7d7f9b4bc1b838_JaffaCakes118.apk

  • Size

    14.7MB

  • MD5

    91151ded36a8ff088f7d7f9b4bc1b838

  • SHA1

    0fe184f898b1fbe325526f86957e8802a079af47

  • SHA256

    81a4c5c54eeaf453527ad0abb52f8217319bec2d3ce54db846dfbe69650bd693

  • SHA512

    34d91a835a2e4eda478844ddc227dda8a7345d6863aad12e8b27b131aeacb66c8b10aa2bce18ff42edf112a8dc20034d7fb3377bc3a18f5e223413d1e20d2a63

  • SSDEEP

    196608:Ej5QC0Vs2P7kOsK2XEo/P0UoUGqdOI8vo4BSw7YMNJKKD6F5unGbiIgAXTfvUTO:E+/G82K2UoGqdOI8vRgQYzZVnDfvN

Malware Config

Signatures

  • Requests cell location 1 TTPs 2 IoCs

    Uses Android APIs to to get current cell information.

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Queries information about running processes on the device 1 TTPs 3 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Checks if the internet connection is available 1 TTPs 3 IoCs
  • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

Processes

  • com.tss.cityexpress
    1⤵
    • Requests cell location
    • Checks CPU information
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4538
  • com.tss.cityexpress:bdservice_v1
    1⤵
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    PID:4642
  • com.tss.cityexpress:remote
    1⤵
    • Requests cell location
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Checks if the internet connection is available
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4712

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.tss.cityexpress/databases/cc/cc.db

    Filesize

    36KB

    MD5

    86752a4be6564d8370f2f0e403995003

    SHA1

    29f7d50675f6e59f3b808eb6dcc8619384412115

    SHA256

    50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c

    SHA512

    79c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec

  • /data/data/com.tss.cityexpress/databases/cc/cc.db

    Filesize

    36KB

    MD5

    c71e6522a30d079ed725b55811204124

    SHA1

    5224ad86361eb2d77f39e85098845f743021c4ef

    SHA256

    823018ad296642290b56d0aaa76345148c57fd9d4bba425eb1f899715681715b

    SHA512

    66857ce4c21b2639a2d23b31f9e38aebd566b251b56e0f7d578006d4412f9cfc5eeb5e01c5ed99f3c23c65e15f68ce84f7e7e547294701f28ac9882c39a57039

  • /data/data/com.tss.cityexpress/databases/cc/cc.db

    Filesize

    36KB

    MD5

    28a5a82891b71423dda0469f00070cf2

    SHA1

    986a091ee16f1ee4e49c5582dd550c1ef86dedcf

    SHA256

    2f98a57c24645ca6aac499c232e96ebc5249f09d428271012d2385ccad6074b0

    SHA512

    0362598c673409c01a974c6d56747d92dd597996f7136835055f325d2aaa08a70da60f452398610384c750b2b23c594bf411de4e65ad7e271516d8606fde3804

  • /data/data/com.tss.cityexpress/databases/cc/cc.db-journal

    Filesize

    28KB

    MD5

    0f1d016b72965660817257279fe6db8a

    SHA1

    c6df5e5df595298450460b93783f47d41de93da6

    SHA256

    28c646a98fca3b32bb3bff6b16e1804300bd374395fb345c4d3135f827143ebd

    SHA512

    c6200160aa333f7383ef48b3a8f0b94ec2e7fbb08ae8fa6df872a6e29b95457efae0ff9a0624e336369c69ecb91d0266ecdef94fb8d037ce94f99ba362a13773

  • /data/data/com.tss.cityexpress/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    dc79f5fb344da7d1218bd3b6d02f615d

    SHA1

    c503f1c1aa4ee2110b5c6b350b19e87adb371753

    SHA256

    bc32b4623d16a6105883b9dd47c4b966758ab2de1209502c82a752420a619267

    SHA512

    0ab427ca8e08560bd2d7875c71762ba3956f26d45db698a44b8d1cf49f6c8b8df2258cb9f48486fdbf8d1dd183f3529e234b2a8aa32cd710c2296ff4df8aeb3e

  • /data/data/com.tss.cityexpress/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    a4724a17d685fcbb8ceed2d462704a78

    SHA1

    881777f9dcf3dd72975ec8fed02cee682a65573d

    SHA256

    7fd08f4b54dab49cd7fa3fe5b04b6b80a2a2c621ced017dc663d4e207cfc5c6d

    SHA512

    f47d7df70e20edc054a7f854d07a0f8c6fb0975c2cc1dae329143e6208e5f3f3bbddc5555c0bb21ceece3ba6bd2a4a86bdeb5dcaefdfd97754bf21578db64299

  • /data/data/com.tss.cityexpress/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    8f611f476b2effba4b3bd5fbb3aec64a

    SHA1

    2bfb3f95f706b206f1e893d365a563a54f3b65ab

    SHA256

    94ab1ef0e5dfe1814100c5354f4a4604c4bd60c75ee8bce5cb24e167d3291470

    SHA512

    64601ae3126b57d6b44277d8d8e2bdf52c06496f293d5ee2e698a84c27b8bc4a1bb591a8403d25e3163d0a5b69b89f7531a4bb376a7c63cf3c677af827899f83

  • /data/data/com.tss.cityexpress/databases/cc/cc.db-journal

    Filesize

    12KB

    MD5

    c31e446a5c8dc2a65099c8c7482a8d58

    SHA1

    d097ff6a173a8e5d8670f09ae3f12545a8fda1e9

    SHA256

    79eab29c1c55b1e0f154e063a06a341c47828bbe8ba73a6b14293597eca52c02

    SHA512

    4909683268121aa11928edea6eb111639e227e3a8b963148728257ff1dc2746c9e91235f3a03e26637bef28ae6a051f9117f4d35a14bd25ef4bd944d41e964dc

  • /data/data/com.tss.cityexpress/databases/cc/cc.db-journal

    Filesize

    512B

    MD5

    785db7f82e9b09bb0a1ae84009f7d083

    SHA1

    4665d555bb8c2625bc0ce5fd1d3fc887df42f052

    SHA256

    a8ca7331bfb35ef80e01b1ff7d86dfa72c83e095b32e5cde37d9f5425f6d923d

    SHA512

    2cacef74d71ce16d1f9963693c804301876df78abe5696c880bfa82b5b6c3fe6b08003ec95737e0e5fd90922236193de44b649205093b47e84d15ee1722fa99b

  • /data/user/0/com.tss.cityexpress/app_sslcache/api.tuisong.baidu.com.443

    Filesize

    6KB

    MD5

    899bde7ca99b2074754e66527891e2cf

    SHA1

    9867173605ebf7d7080c4ad59cca74a548b58143

    SHA256

    62185e7dd2baa623d3d1ad7a6d1533153cdb9e1e09a69b4014f0449bf8de3753

    SHA512

    1d6fea0b313003ed58c72b85f16368209e10cef4fb9caab446f464aeadc44bc77a7db9c289142b8f48c95d1776a69063e2d4c6ae571dfc11a643e841fea6ba94

  • /data/user/0/com.tss.cityexpress/cache/com.parse/applicationId

    Filesize

    92B

    MD5

    1419f9e2349f167ab0ebde7467bd9e76

    SHA1

    2aa63dec022581021f29d4f6a92c3881d23fe3a6

    SHA256

    81546749fc12349a70682f38f027bfb4d31ed105cdb73c73b340114861765d30

    SHA512

    f70a696d42b08f443b4edd8f97a9c010fcd975411948bccca30180706cc70186bad208f5508ae9a6e0971258fa6646282c666a5e666f8f0188b5e13090ccbb59

  • /data/user/0/com.tss.cityexpress/databases/ParseOfflineStore

    Filesize

    32KB

    MD5

    fd16c876cf7be2137f69f13b2677551a

    SHA1

    bbb3c66f04503fb14409d8d203259531d3b963a8

    SHA256

    5ebf6c87519462af27fa0ec9eea3a31723a1a84a8378a08e422a2aaa9b1908ab

    SHA512

    03c318d4456bb48c96bda0e9262b07fce839e3f717633ed1fc6438d044092f5e6e285c522ded46d4cdbaa853067dffc4401b97999adc0af19a9f5f6f14cb0c99

  • /data/user/0/com.tss.cityexpress/databases/ParseOfflineStore-journal

    Filesize

    28KB

    MD5

    e2c58b77c8409b969743565ec4a39d38

    SHA1

    cf67fd7fe48b4c0d371c7038953d96ae66cee0a4

    SHA256

    56574ed9d8db3a39aa60baaafa9f8b1c55353a494718918eceebb096ef1f773c

    SHA512

    768db6a41301f9b0d6e36911e2635bd5d4f69e7b5ca755787b7d53669e2ce740669b8a5d2d0c5e49c765195af9098f6c61a87c12be7cfe435d4f19e26597813b

  • /data/user/0/com.tss.cityexpress/databases/ParseOfflineStore-journal

    Filesize

    8KB

    MD5

    c97ec64c9cbc88cf5035a4dc7cf71a59

    SHA1

    2569325f6b0ca6d703b701f9d0f7cf4908014c8a

    SHA256

    f84f6310851f81425ff2b4c4629dcb54674284a885c4106850951a002d61b5cb

    SHA512

    712dd593fad4e12d4239e46eb864b1be343448fea1d30df827a97accfebe771e6f89cd239c92c108c949f3761e3106c950d090bfb0a4513374dcd1b2a479ee8c

  • /data/user/0/com.tss.cityexpress/databases/ParseOfflineStore-journal

    Filesize

    8KB

    MD5

    3beac65eb875cfe015fd986ae3b4e12f

    SHA1

    417ce4d36f74153dbd23346ca81442b3d85d3bb3

    SHA256

    b4b86674e4545338422673ff23a7abc16d88f398092aa43b55c09efe4a99c2af

    SHA512

    bbd58ac77b598ae4e9c0d7735df9549635436e6b1d1e94dcd5faaaa058c3f5e6a0080eef962eec1f46994d84963ed0a860086a530827799d51368a6e9d07a1d2

  • /data/user/0/com.tss.cityexpress/databases/pushstat_5.0.0.db

    Filesize

    60KB

    MD5

    5dda5f492bf65e4b9a869d9e63c54c5e

    SHA1

    b1a44841c36ba4244908c51d5325c387ca73cdec

    SHA256

    71adcd2433f48ed08d48643373f7a8f23b98e710f11510d1abd7938374743c50

    SHA512

    0a5ed94181d17e47a2f5e5e74d18bd969d39c0d649bf6536e0cb4574d0005322853d0895049f12653edf274b663c9e9fac7e690a96462ac5debbc6e075e74735

  • /data/user/0/com.tss.cityexpress/databases/pushstat_5.0.0.db

    Filesize

    44KB

    MD5

    fd8f6fe70c059346cd27b6742b2f204c

    SHA1

    af9b67e435c4f13386d0f92a639b4ca10469f051

    SHA256

    2c485a416290e7e395cad710d5033c2bc858bd14fdddbef851cfefe2d16ac702

    SHA512

    77306eb10df69df88ae7b3588e616343afb8a54f08b2e342e4dc3e10fbc831db3db3d9183c25bb35db670c354d2ca4648cc4a6ea7e69eaf00793f9323b3032b9

  • /data/user/0/com.tss.cityexpress/databases/pushstat_5.0.0.db-journal

    Filesize

    512B

    MD5

    7e00b9c32eeda6864891d7a43a0b5f87

    SHA1

    c5b73be724e1024aca32662914afbe1f31db1dbe

    SHA256

    0ffb7d3ab7950fcd110c117d5f1c25eadf99ace4943028da23e684ac32228e42

    SHA512

    888d7132bbeda4edaa6e3ed5c4766f0b64d171f2220ab8ca04a760e9448724aaea87cddc7f32b8e4def1ecefac51b7f708015b4e7af6204d20aa18e35884d919

  • /data/user/0/com.tss.cityexpress/databases/pushstat_5.0.0.db-journal

    Filesize

    8KB

    MD5

    729ac19b33405889eea4384af563736d

    SHA1

    7539e54d84fbbe08583971fb387a8a9063626e86

    SHA256

    e90f9330bdca1c387b4e29840be00ff5c423a431682c6ed5d66722493c980e69

    SHA512

    d2af9d855114e621fee0bff2f536b2b8b418c683e8a31a2def6c9c54f34a03da6eeb0cfeb91c985bf3d2dfe4e2616721f1eccdaf757ade773924ada2157d7c14

  • /data/user/0/com.tss.cityexpress/databases/pushstat_5.0.0.db-journal

    Filesize

    8KB

    MD5

    e7dd0fae46b37095c78171fec880ab19

    SHA1

    6de745837d8bd88df9d4d316436685e95f4f0e84

    SHA256

    3ba9c037bf8ec485eb444b1129879535a992edd492899cb1d93da59be29ba8a0

    SHA512

    e34e926d14d68a5c500653720f0412e9a1d9271249e2b460cee381c71ef65fe03daca56668655e6cdfdced1c940ba9315e4890d7526771aeca12a65d797f78f8

  • /data/user/0/com.tss.cityexpress/databases/pushstat_5.0.0.db-journal

    Filesize

    12KB

    MD5

    5ce7e6b7a3db9ea50d89f1b620ba65e1

    SHA1

    9cb226f5fa5c897690d112a9845d25e81d964569

    SHA256

    57b759dac9dfdc79fd7be5a35a79e13dd0827fb536d68c45917fb94dc5cbc024

    SHA512

    3fbe97c8a0183fcb09ee2545f887472f77d496a2ee58ac32207161a93f2576f4ac4436fb107224f1a9a204497e6c45eced0249694278e071e847d485fa3b617d

  • /data/user/0/com.tss.cityexpress/databases/pushstat_5.0.0.db-journal

    Filesize

    16KB

    MD5

    90d39b7c49186c307a8575593dc57656

    SHA1

    bac7d3f324817f7a5221098558201a39ebbb9788

    SHA256

    f26eaf4206e2124541f651135e7756c9d2ae0facd7729e8c42a5bbb66ee82848

    SHA512

    95718700d6ee659f49b3d148da411e79c5e3496439b2fa376c00416ef80cc7924868cd77d1d3b49eaf3cb3d2c9d67d7ecc362e8d0cd271bfaa6620f255029e14

  • /data/user/0/com.tss.cityexpress/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    17feb6473652b8fda9b2c6f08931c412

    SHA1

    9c51d19a9bf0bd84433f91a439bce69d96d8b795

    SHA256

    9bf622a949b6cb1bcadfe4ccb1040f7bb0163ec9588a2597a9e755e9b2a808bf

    SHA512

    a8fc55232a39adf3f2d3c0c20a8c3b504f05a5b16e081a3523a01a3b62271f746df7248cbab608a6bdc590e971571dae73b98eed326ae20d54bf2a93f470e785

  • /data/user/0/com.tss.cityexpress/files/cfg/a/CustomIndex

    Filesize

    3KB

    MD5

    bcb5c2ce67f97602aa8bf6d796fb8dc9

    SHA1

    9ff1df44c05ff5602c75fb178be2a07cd8085fd6

    SHA256

    6b1f56ff21aa70c5f60eaaf0a51b289eb020fa28309368c4da821a53b7358194

    SHA512

    0b1399d8523cf38f6df8e7b0f7f6df56410bc51c757f6e72757b784083d9e73023b1ed9b636082c90fe406f9d1d8a91d80971aab35ae9b678e2310f14c5f0c79

  • /data/user/0/com.tss.cityexpress/files/cfg/a/CustomIndex

    Filesize

    3KB

    MD5

    bd67f62f96b2f9a4321410c964299e1e

    SHA1

    566888207a9e271ab279acdd23b33ba89fbfb796

    SHA256

    49972b7d8f0851f8ceaa987aee4e5d8d4da0cf05f8aadce3ee1e33b01d15bd57

    SHA512

    ab7b584dedfff1ce3e09e1c80fdccb07e3afe7cf2e2925aee937296d04ee154c556c067e1afec372e8724d050020e266ed066ef1e9b126ea373f1d9d306d52a8

  • /data/user/0/com.tss.cityexpress/files/cfg/a/ResPack.rs

    Filesize

    548KB

    MD5

    486e5106aa2801b1cf7d2d811032d991

    SHA1

    dd4db9dd7e63a84ad394b00633322c58ccada368

    SHA256

    dad4ee83567b58ef6dc70d10a2950d490456d50378d65af3c88a693166431170

    SHA512

    5c0f7fa50dc937bf67a2e017635709bcd0667a8a19f70093b9c8d639cb4bf51269e75bd64a19367d0dcdd3b52360cef02a0f49956a2f4c0e716038eeb46e1307

  • /data/user/0/com.tss.cityexpress/files/cfg/a/mapstyle.sty

    Filesize

    444KB

    MD5

    0d0e5cb56bb2bec1b4f455b6a6ae5604

    SHA1

    3cbd9c27d9fe4420d930935c538db22305685227

    SHA256

    3edbba809c33b07612382fe92d102d1936815ac78786fac900d0283b3631672b

    SHA512

    54c92dc8b02ce20b6645a6d55d8a8c45b88424fc69b13ba97d903dba1f08551bc99f9fe0dd1c24dcf1447ec5d415bb8cacf2b122222c0306a308eb342f3fa0fa

  • /data/user/0/com.tss.cityexpress/files/cfg/a/satellitestyle.sty

    Filesize

    324KB

    MD5

    256d4695ded7acc2e1f8cd37f457d0e2

    SHA1

    e6577b8380098c8b72ebc045d358060431909620

    SHA256

    71174e8a886da0631e586824e2bb3aafd944768427508c548577a156a9bf778f

    SHA512

    5c90ae90d6cf490c87bde3f6384239ee38ddcc2fb572b3acf97d38f35ae68ebd6b3c4a92df34d09346f116944b1dc1694ee3e48bea25c19bbc11e806c5ef8f3c

  • /data/user/0/com.tss.cityexpress/files/cfg/a/trafficstyle.sty

    Filesize

    7KB

    MD5

    831c0530133dcc6511bf3d9e15d44505

    SHA1

    b608f72729bf14b2397b06a54b933229c454b38a

    SHA256

    15a5813a7868f81ebf58cfd76b93e4f40d139bfa46f93112f247f3ed25deb161

    SHA512

    ec4120830d2737e3f97fdc0e894e3534ccaa84edb2af7709cdb8070439ff63e4130ac000daab3fadfb95cfebe123d5c7a7929a8e5313b67cf7baabff911c5f15

  • /data/user/0/com.tss.cityexpress/files/cfg/h/DVHotMap.cfg

    Filesize

    10KB

    MD5

    0994d3e9eae65e7f6f483e34dbf0aa60

    SHA1

    45be886bd35743fa0f79ebab8502df2dde412e85

    SHA256

    1918ce881b260c6086bf6f347e702b72ada55a0248df59042c548e846a4d951e

    SHA512

    b6bf7cabb306ac97aaca0bbc0c3b552af1655fce44cfbf43144015d60774123453f3167dd58a940139159793b43e18fe0eaea7ff3ac3b73380da337a5f1f7627

  • /data/user/0/com.tss.cityexpress/files/cfg/h/DVHotcity.cfg

    Filesize

    1KB

    MD5

    c48b8a3018f1886792cb487bc232c159

    SHA1

    7281a61ab24d416057dca5c4ccba27f08de0a64f

    SHA256

    f6672bc8e132ba5903971a9a39846a06ca918203d80c948cd46ec39719655ef4

    SHA512

    68694fb8331dc724e3715c4e4952c60dfa2a9620d1d440557db7cfe6553b514f88ab11d28c455d75688c558e015208446a0e0ad415dd2cf19ae1ed859a4d38d7

  • /data/user/0/com.tss.cityexpress/files/cfg/h/DVVersion.cfg

    Filesize

    341B

    MD5

    2460985dbbaab6f2d879a8480cef78fb

    SHA1

    4354a107d47974f99797c8a7e1a7ab67a62cb876

    SHA256

    b37020c2a212b314ff2eb779d3a04a9b450dad770c6e60a34a25885da43ecdcd

    SHA512

    986ca7c1f517a001bb0b8ee589ebe4d7356faf01ef552fd4605fe9ab57cafc097eb8d6af430dac673159bd06d92cb3b909ed8d898999c9d6102f097db6edeaaf

  • /data/user/0/com.tss.cityexpress/files/cfg/l/DVDirectory.cfg

    Filesize

    68KB

    MD5

    1107c2249c958b6d8ea65fb5584fc123

    SHA1

    30b1ac251159756a41ef1c13b0eb48487bb4eb20

    SHA256

    9889f14eec0d798ced2b8c7a1dba11bcf5f12fb04b5b5116775439038b34e4ac

    SHA512

    fd00cfb78c0871fbf4e253ca7133365578b6abebd4edc43a5988f62fa7c5e1725986856dd0638dfdc0d6769c6edded483d147bd19a6f3e81d950c9b16356a421

  • /data/user/0/com.tss.cityexpress/files/cfg/l/DVHotMap.cfg

    Filesize

    10KB

    MD5

    3f44ca873593ee15b867334e0fae3c9c

    SHA1

    5571e2f35ec8204cbe35d975d9f611533380a99b

    SHA256

    43415b419e6349c5ce4f4f35bc884ccb2548c0a33ecfbb73d62b5d9149cf0e95

    SHA512

    9e7f6bbc907e79e636074652cb353dfec9c9fd981e5813b6d586d8a5fbbf88d5182cb0cef37eb93428ad3a7748a7d0679e879e8db81bdc2c39afc9e752cfc937

  • /data/user/0/com.tss.cityexpress/files/cfg/l/DVHotcity.cfg

    Filesize

    1KB

    MD5

    11ed43e96f09a823eb14788bf3caa090

    SHA1

    8e29e6ef80cd77c0540b429532c49b24bea8cb9c

    SHA256

    8f871252718e80ce8ce25f36bd390f813cf6798035e18da2a385369a747aa41b

    SHA512

    bc7af1e6da3d69bcf86db46749a99a410d40c7ede77d1fd37c7afc12b067ede9659d89ed356b27ae877cea45ec7b93dfd46d618c358bdf7219d91e55e2364891

  • /data/user/0/com.tss.cityexpress/files/cfg/l/DVOperation.cfg_seg

    Filesize

    6KB

    MD5

    2607f6aee3282d74326dc6c558a45f49

    SHA1

    9226fa427fd56118fda48dce006321f0e3bec548

    SHA256

    e872b7fe6f9c425e45a5f9d3fb9709b30c9241816a4f3699efa25de963e3eaf9

    SHA512

    c7e71bffd3e57e02b91ca04b143449fd5ae8812f3321995429c2d021f8aacde9afd2444eba8d3e62491d2229d5d1f7950ffaded51beb76fe3fd90cd82ef7de47

  • /data/user/0/com.tss.cityexpress/files/cfg/l/DVVersion.cfg

    Filesize

    127B

    MD5

    d54b7b380a5ff46c78283013a07d8e0f

    SHA1

    f697c5f7028ba2679a96d6bc5291c38ff96d7982

    SHA256

    c7ad837b097687d92e0d944815fc70adcb0e1cdc82db28f728d13e8a48d7532c

    SHA512

    ade792589c33179c51305f201bfb6db28c05b2ea098d12bfefc1a5cf9bd3014d53830ce2e71f027719ee1b83b2394c7654b5ddf4fdc7f678840869d2a2787ef4

  • /data/user/0/com.tss.cityexpress/files/config.json

    Filesize

    24KB

    MD5

    7c8dddb13f7e4b530728e6dffe7ddf14

    SHA1

    f02e2f5ca8a3820aa54d0aa58b7b248128b6ca4c

    SHA256

    36ed89a13b7eb85fe0f87d7c0bf2e60b105a5ce1c5574a184784ed5f444a91c9

    SHA512

    deea0d532da7a7adaef4777e9bfe37dc6f6b7dbf0be70c692bf23d6b1b2c42e618699e2b4417c86f8c97ea833ea3bbc15f3850d6a491b20fe428f1f16dce3482

  • /data/user/0/com.tss.cityexpress/files/libcuid.so

    Filesize

    109B

    MD5

    09f364576b8780001f64affdf2cb3ec9

    SHA1

    f2c32fe65ebe5c59363c3d034af6bfe83ddf7ae1

    SHA256

    245e392a1e2aebd6ff477e63e24004582fbfc74b62a73f5d4af3184448114d56

    SHA512

    d246e0a83dbd569383edaf77c699b127c163b78dc6c02e5cdcbd80bc2fff989a4d553740d20e4b1ac0d76002c7fbdc2a123876cfc7473fb5cdaff9d6e7d87f46

  • /data/user/0/com.tss.cityexpress/files/ofld/ofl.config

    Filesize

    235B

    MD5

    e2854b7628f7a27b86650a9b20a838e0

    SHA1

    9c5268782ee77dfbb3226aa8adf7a9907402a9de

    SHA256

    b06330116403a84cfce0b0db3b59ceba5f1a3ec444a1cec2acbc00c370b4c2c8

    SHA512

    35b07a1cd5fb5fb36d701d04c532cd4df367f7003243ad1d7c15015178a8adc9225eed764101c4b1611f56b3c4e6014f3b337df1414f8d126d35774d914823dc

  • /data/user/0/com.tss.cityexpress/files/umeng_it.cache

    Filesize

    433B

    MD5

    7adf6179aa4833bbf08d552cf1b2d8dd

    SHA1

    f13007b1563b7e8eff5cc13120ec6aead5a19568

    SHA256

    b61855c9c2298614ed29c37b0bb27f3db3613429f2494b7a019f505d9e9afb42

    SHA512

    d2b1377fe3618de7a0e39df5336b45a42d7c4a687f9462d5ec8c15acf121ba80355ee0fda7b8fd06042146d3f77011e0248d9a9b5a9fb14db6a85f7a75919b34

  • /data/user/0/com.tss.cityexpress/files/ver.dat

    Filesize

    156B

    MD5

    fc44091a86dffa0149cef0b8a0a63764

    SHA1

    6c0b3272e6bf772eb7319c01fe5e4f64c847083e

    SHA256

    c079001f8461b9533606745b289fe76a1ef629bb212ffa0415ac699a93eed38d

    SHA512

    b6603be0e3dd175fa49e54ebf7ccd8e3423db3ad3e0db75662eb0efb1f98751a1c2a4949cfb9973207ac8d346b8ecdba0fe800da1640bbb3befa9f3604842f4e

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    512B

    MD5

    68b6e64fb9ae7947ccff0150e5f41d9c

    SHA1

    21590b15bdc69fbda74eac300d0afac4c7923210

    SHA256

    0aaae8464086275e18ca93d7de227cd0ab108fb18b3a67b40b3e17dbd963393b

    SHA512

    cf04b0f74f937ed38af262421bd87195423bfb235d8d67fd60240e9c4e31a8681e0cbab10fa561589b3e5662cffdfa6c3279ca52b11f9de54044a3ee20b3839e

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    8KB

    MD5

    be0dac5e47a3d960390d9806b497ba77

    SHA1

    1f389c9cd5ba87b95723450e9481a46c82d7a51e

    SHA256

    48348f1d94836ad6b79a4f47bfd1fa59868087a64eb5eb3f7916a080eda5e06f

    SHA512

    41c003e16fdf874e6994dd142f1e62acf46ac1a9cb9953b820190cdaf93f91c3623328b9745b62b57fcce6465db84bb314f8f512d3a58bf09131cd65f37df30a

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    8KB

    MD5

    7b71d1d86aa41696021a90d55e064d8d

    SHA1

    14750edf8bbac511875018783e9882c1c66adc05

    SHA256

    855796effae348bbe91d5494df37ce2864c0ee786645e45b1e18621cfabbcbd2

    SHA512

    0b41f3bbce608b13b6cc46038e1f15bde7b0e858fd53ef2a9a00486d6e1d9fb3ff9f27294e238b9386d326204b4a3c654a4a2d7f04194e2987b8e26e9d550b6d

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    80KB

    MD5

    81a416795ad85900b4f6aaa10976fd8d

    SHA1

    01bfab1088f1b17a617cbde4aa68fbc71d513eff

    SHA256

    b6415756ec91cd098832b08baffbef01a9294312027318e92c765ffd13f0ab76

    SHA512

    0ada7b344840c4c3c98b063bd3d03570f14af7724301cb0abdff3a59ddea2bcb3a2e28f385a877857259c1acff34d063ff5947668588fa80d93b66897271a340

  • /storage/emulated/0/Android/data/com.tss.cityexpress/files/BaiduMapSDKNew/cache/tmp/DTTempdat.dat (deleted)

    Filesize

    2KB

    MD5

    ce4aff7e3387698102a44e6fe50ca06a

    SHA1

    2e899e6a83f64d9fc871b60524ce43006c2c08f0

    SHA256

    708f1e85a600e14ec36e9152e38d86728680e6f8e396018d95a190b662498a27

    SHA512

    37d4883182c1abd7236bb9d6861029618431364e34d7eb2067d9f652deb5b7bed0d3155081f27bd94508a3998f42bc00577e169ba52447203e69500966791edf

  • /storage/emulated/0/Android/data/com.tss.cityexpress/files/BaiduMapSDKNew/cache/tmp/DTTempdat.idx (deleted)

    Filesize

    164KB

    MD5

    9821fa9bf06a0d5162dcaa8b76421dcc

    SHA1

    921532f0899bceb3d4573c6c1af5c5781f182db4

    SHA256

    d6441b5f22170d11a2cb15c2b58ab912734740ff3c083e6ebfd83914ea2ca6a7

    SHA512

    54f2fd30be645b1ab1b4ef3a4cf052642ccfb6f7ca461f8f97ad7a6d674f609e2fe3e815b00e2cbf421fd2123eda59faad451767d8e8479fa54d7f8d59ca9664

  • /storage/emulated/0/Android/data/com.tss.cityexpress/files/BaiduMapSDKNew/cache/tmp/HMTempdat.dat (deleted)

    Filesize

    2KB

    MD5

    a135d8083cc8986e59fd0c33db069059

    SHA1

    f950d4aafa0863cad2490923f5840a193772b139

    SHA256

    f153b34b526593ee49744f8528b9b49e95bd8857ea123222e6b5907e213e5d5a

    SHA512

    135c5ca7c8ccbb0c08af0554c9063fbc9161a042ba4717f0f83ba4bc9794520a3eeec64efe3e94397378cb0bf7170dcea4990c0b5a3da07c3535e3281ca277b1

  • /storage/emulated/0/Android/data/com.tss.cityexpress/files/BaiduMapSDKNew/cache/tmp/ITTempdat.dat (deleted)

    Filesize

    2KB

    MD5

    6e4165d590cb8f5e934ba317c8e07000

    SHA1

    d433b1c0bc77146414ad94fb12fc39cbe6a609eb

    SHA256

    00b865139970e945b1c9390ef93281f8e6c3650da83fd70a7e43aea0f970a05c

    SHA512

    abeb12dba014466d4629973c65dfb2fbff32cba67600068338dd7902466a342fc053aa008321f8b01fe0c33b218bbf8a1240afefc51b23e4d0e58d43e6b89882

  • /storage/emulated/0/Android/data/com.tss.cityexpress/files/baidu/tempdata/conlts.dat

    Filesize

    12B

    MD5

    8d80bc8ea90e9cac010d3ddf97bda5f5

    SHA1

    f063bc0d356e6ba9ab1eb9a851131ffbefd8fa07

    SHA256

    f52db31332534833414abd5e870f78c810b8ebbe5b134bbf599506beecfd1b93

    SHA512

    9ea732dd572a9a4ba91b70891972230a09576687ca1bc19e62d5a98b5b84e0f2ae11985108008bc9fbccf357219b8bd3dbf146bb70752f618f70dc5d0c46a7c7

  • /storage/emulated/0/Android/data/com.tss.cityexpress/files/baidu/tempdata/llg.dat

    Filesize

    482B

    MD5

    dc99cf74d8649707d487fb185147d666

    SHA1

    1b91a4eeee127057a94b6f92698c2a3d6c222210

    SHA256

    9d2c78e3200e396fc438ab93702114bd78dd263dc5be7113d5f7348e3633d036

    SHA512

    549666006a58c28bae8e5c6c4dda3d266dd6541f897ac69105ebb29a1cb112ab0661811e8a18685715640f2c09e8af1534d5916ddc403a03f72e9f4a654cb02c

  • /storage/emulated/0/Android/data/com.tss.cityexpress/files/baidu/tempdata/yoh.dat

    Filesize

    24B

    MD5

    1681ffc6e046c7af98c9e6c232a3fe0a

    SHA1

    d3399b7262fb56cb9ed053d68db9291c410839c4

    SHA256

    9d908ecfb6b256def8b49a7c504e6c889c4b0e41fe6ce3e01863dd7b61a20aa0

    SHA512

    11bb994b5d2eab48b18667c7d8943e82c9011cb1d974304b8f2b6247a7e6b7f55ca2f7c62893644c3728d17dafd74ae3ba46271cf6287bb9e751c779a26fefc5

  • /storage/emulated/0/Android/data/com.tss.cityexpress/files/baidu/tempdata/yom.dat

    Filesize

    24B

    MD5

    a936690571e9104e1922dda4a0ba5bd1

    SHA1

    65f49c57edde2f96be2a1dbdfc3f7351f1e66554

    SHA256

    f0f5049c51879dd7da0ce4a43349b5b34ce053d072a0ca704f62cf22ba4a8412

    SHA512

    3be1c3693963aebdfc04e86b1c820ee0ec3cf0b200e6a4788ef1141f39fd6c2f77f4227247ae4affa66c0a6c027df8466cc0dcec1e67ebfb953e36bee97de394

  • /storage/emulated/0/backups/.SystemConfig/.cuid2

    Filesize

    109B

    MD5

    c13e5dbd6259fea2d6d609a8deda6000

    SHA1

    c70f020cdbd2c4ade77a6824740c705af21f9d8f

    SHA256

    c4888673c68a9acbbad16d92e83049931bba248d4f5e8af74265c9ef045a23e9

    SHA512

    26a372a9be2c78f9d3a9349f0a390bc558b9d0ea34d81747186c42e326806c877d2d590ec3eaf0395aef3a4911a8f7114a02b9a80110ac9c0ef897f80d4f5676

  • /storage/emulated/0/baidu/pushservice/files/msg20240603.log

    Filesize

    8KB

    MD5

    c7b9eb8fc0b3dfccfad13a421925a4dc

    SHA1

    024cd7dc1d8110ae3138c00ebdd17d984b9610ea

    SHA256

    e2e2a01f22631d5b4ec23eb07d746d090021a1bb9f7457791102fa4aa5069153

    SHA512

    942554b44b40aaf4f221ee350659ceff14b140a8f308545da98efae581f95ef2db8aefee2733a772862fa9e2500e5556583f69618c2c11fd0355cc3e7f9e723c

  • /storage/emulated/0/baidu/pushservice/files/msg20240603.log

    Filesize

    8KB

    MD5

    f5cc3fef538573495a95a0f0341a7a0c

    SHA1

    5eb74dc70de4d9313ea3ae1a2e6f47f4133d4bc5

    SHA256

    9b41756e7eaa1fdb7e3998905bc10b70ced2dfdd27867cb22c242a0e85194584

    SHA512

    df852a4e13bd3f91d116302f38ed431ef45aa2c8d009a7790e893f94eff38a05cc8b826f250915b22a4e112e5101b541d15d820a134e88a4099cdf39ce4a1981

  • /storage/emulated/0/baidu/pushservice/files/msg20240603.log

    Filesize

    8KB

    MD5

    93a655d1d15229fd777feb2608c641cb

    SHA1

    04dad9565984bc05a88d6c83d2f40c7f2884c930

    SHA256

    9bb2907a5160e9559e13289cf736d46ac2f9acc0b5fa145220d9288d86fa63f7

    SHA512

    6a6ea698a31ce081c181230e751b6ed87836384e3e9408812083202b66cb533e7d132927fdb372c7012660af5429be0be128428df5d8cd3805bcf40c5b3cacd0

  • /storage/emulated/0/baidu/pushservice/files/msg20240603.log

    Filesize

    8KB

    MD5

    da7e17026995275a4d2cc8c4f691434d

    SHA1

    596db1d5e74e59dddfbd6d1090cb8d9e4c1ee8ee

    SHA256

    62e50059335b7ae1dfb4ce3513687a9a586fd1c5f77c531d76d285339e6af38f

    SHA512

    f6ba8cfa8f5eddc01411e30560e21b7873a3eb6b5e60662e38c04aa7feb58824c9ed14021bb2033d90753c554501e97e12b2120e48b64497b0e940bc34e9a895

  • /storage/emulated/0/baidu/pushservice/files/msg20240603.log

    Filesize

    8KB

    MD5

    698a97f16b4aba06b7764aebacfb2cad

    SHA1

    f04857900cc74a78bd86bcf65982acae54c8747a

    SHA256

    c115e0808254cbfa615a39df87ea549dadc360b4f7a55365d31496f6ec9a937a

    SHA512

    2f2f7bd5fe09c41da3b7dd939ff382d93b38cda289da98b2678f9ba15d240b789ca3ea5067b18eb4050b933668a57a93cfd0023b0ac08917d5f69ae426826cc6

  • /storage/emulated/0/baidu/pushservice/files/msg20240603.log

    Filesize

    241B

    MD5

    80e7afdbf5739a8dbe4615cb26efe758

    SHA1

    eff1bbf533954789711985f7bb1a937efdfecf3c

    SHA256

    6a4ff8867436f6ed6bbce9e8f215f02b00aa59998c7738bd4aadccfb25a84845

    SHA512

    7fd0e1547493115b6405b3c38a587a9857d500d9ea7bf690b9b37bbcccfd82b14184d9ea818ede9b535a82bca1190d753025fa69a9482bca13bd8f57b2fb7335

  • /storage/emulated/0/baidu/tempdata/ls.db-journal

    Filesize

    8KB

    MD5

    d696d7906d2fd59a9e3ed344d47b116d

    SHA1

    7af78d489e2f633f10f77bc3bfd4906d06b3c63f

    SHA256

    a4f53e195dcee3471b2123d3345f132583511af0dec3d5eda106cb2808bc295e

    SHA512

    7dc2e210bc31aadbfe4c84bcd4627dcddcf795f057c37916aa9ead509f7360d733b417519e221440d74754d356ed4a9cde6f850fceac6014747154622b61dd60