This is a systemd service started automatically on boot. It executes /init/abtproxy/abtproxy, which in turn executes proxy_server (and restarts it on failure). In /init/abtproxy there are 4 JSON configuration files (config.json denylist.json keys.json labels.json), a logs folder, and a SQLite 3 database proxyDB.db.

The database contains a single table OfflineTransactions, which contains a single column TRANSACTION_DATA (of type TEXT). There is a single row inside this table, which contains a JSON string like the following (partially redacted, as I'm not sure how much of this information is identifying):

{
   "data" : {
      "barcode_data" : {
         "barcode_payload" : "http://weixin.qq.com/r/[REDACTED]",
         "barcode_timestamp" : ""
      },
      "device_identifier" : "[REDACTED]",
      "device_type" : "OBV",
      "media_identifier" : "[REDACTED]",
      "media_scheme" : "BYTEMARK",
      "media_type" : "ENCRYPTED_PAYLOAD",
      "result" : "valid",
      "timestamp" : "2024-11-16T20:54:00.708Z",
      "transit_data" : {
         "block_id" : "[REDACTED]",
         "location" : "",
         "operator_id" : "",
         "route" : "[REDACTED]",
         "vehicle_identifier" : "[REDACTED]"
      }
   }
}