Adware.Gexin.9330

Technical information

Malicious functions:

Executes code of the following detected threats:

Adware.Gexin.2.origin

Accesses the ITelephony private interface.

Network activity:

Connects to:

UDP(DNS) <Google DNS>
TCP(HTTP/1.1) onl####.map.b####.com:80
TCP(HTTP/1.1) a####.map.b####.com:80
TCP(HTTP/1.1) api.map.b####.com:80
TCP(HTTP/1.1) st####.t####.b####.com:80
TCP(HTTP/1.1) loc.map.b####.com:80
TCP(HTTP/1.1) res####.a####.com:80
TCP(SSL/3.0) zt.sz.c####.cn:8086
TCP(TLS/1.0) zt.sz.c####.cn:8086

DNS requests:

a####.map.b####.com
api####.a####.com
api.map.b####.com
loc.map.b####.com
m.9####.csg.cn
onl####.map.b####.com
onl####.map.b####.com
onl####.map.b####.com
onl####.map.b####.com
onl####.map.b####.com
res####.a####.com
st####.t####.b####.com
zt.sz.c####.cn

HTTP GET requests:

a####.map.b####.com/getmodules?v=####&t=####&mod=####
a####.map.b####.com/images/blank.gif
a####.map.b####.com/images/copyright_logo_s.png
a####.map.b####.com/images/openhand.cur
a####.map.b####.com/images/panorama/close.png
a####.map.b####.com/images/panorama/indoor_exit.png
api.map.b####.com/?qt=####&ak=####&callback=####
api.map.b####.com/?qt=####&b=####&l=####&ie=####&oue=####&fromproduct=##...
api.map.b####.com/api?v=####&ak=####
api.map.b####.com/getscript?v=####&ak=####&services=####&t=####
api.map.b####.com/images/blank.gif?product=####&sub_product=####&v=####&...
onl####.map.b####.com/tile/?qt=####&x=####&y=####&z=####&styles=####&sca...
st####.t####.b####.com/tb/pms/img/st.gif?ts=####&t=####&sid=####&dv=####...
st####.t####.b####.com/tb/pms/img/st.gif?ts=####&t=####&sid=####&ver=###...

HTTP POST requests:

loc.map.b####.com/offline_loc
loc.map.b####.com/sdk.php
res####.a####.com/v3/config/resource?
res####.a####.com/v3/log/init

File system changes:

Creates the following files:

/data/data/####/.jg.ic
/data/data/####/bigbang_sz.xml
/data/data/####/bigbang_sz_download_dcloud.xml
/data/data/####/bigbang_sz_storages.xml
/data/data/####/cc.db
/data/data/####/cc.db-journal
/data/data/####/data_0
/data/data/####/data_1
/data/data/####/data_2
/data/data/####/data_3
/data/data/####/f_000001
/data/data/####/f_000002
/data/data/####/f_000003
/data/data/####/f_000004
/data/data/####/f_000005
/data/data/####/f_000006
/data/data/####/f_000007
/data/data/####/f_000008
/data/data/####/f_000009
/data/data/####/f_00000a
/data/data/####/f_00000b
/data/data/####/firll.dat
/data/data/####/getui_sp.xml
/data/data/####/index
/data/data/####/jg_so_upgrade_setting.xml
/data/data/####/last_known_location.xml
/data/data/####/libjiagu.so
/data/data/####/mobclick_agent_cached_cn.dataenergy.ShenzhenPow...000009
/data/data/####/multidex.version.xml
/data/data/####/ofl.config
/data/data/####/ofl_location.db
/data/data/####/ofl_location.db-journal
/data/data/####/ofl_statistics.db
/data/data/####/ofl_statistics.db-journal
/data/data/####/umeng_general_config.xml
/data/data/####/webview.db-journal
/data/data/####/webviewCookiesChromium.db-journal
/data/data/####/webviewCookiesChromiumPrivate.db-journal
/data/media/####/.cuid
/data/media/####/.nomedia
/data/media/####/78-EUC-H.bcmap
/data/media/####/78-EUC-V.bcmap
/data/media/####/78-H.bcmap
/data/media/####/78-RKSJ-H.bcmap
/data/media/####/78-RKSJ-V.bcmap
/data/media/####/78-V.bcmap
/data/media/####/78ms-RKSJ-H.bcmap
/data/media/####/78ms-RKSJ-V.bcmap
/data/media/####/83pv-RKSJ-H.bcmap
/data/media/####/90ms-RKSJ-H.bcmap
/data/media/####/90ms-RKSJ-V.bcmap
/data/media/####/90msp-RKSJ-H.bcmap
/data/media/####/90msp-RKSJ-V.bcmap
/data/media/####/90pv-RKSJ-H.bcmap
/data/media/####/90pv-RKSJ-V.bcmap
/data/media/####/Add-H.bcmap
/data/media/####/Add-RKSJ-H.bcmap
/data/media/####/Add-RKSJ-V.bcmap
/data/media/####/Add-V.bcmap
/data/media/####/Adobe-CNS1-0.bcmap
/data/media/####/Adobe-CNS1-1.bcmap
/data/media/####/Adobe-CNS1-2.bcmap
/data/media/####/Adobe-CNS1-3.bcmap
/data/media/####/Adobe-CNS1-4.bcmap
/data/media/####/Adobe-CNS1-5.bcmap
/data/media/####/Adobe-CNS1-6.bcmap
/data/media/####/Adobe-CNS1-UCS2.bcmap
/data/media/####/Adobe-GB1-0.bcmap
/data/media/####/Adobe-GB1-1.bcmap
/data/media/####/Adobe-GB1-2.bcmap
/data/media/####/Adobe-GB1-3.bcmap
/data/media/####/Adobe-GB1-4.bcmap
/data/media/####/Adobe-GB1-5.bcmap
/data/media/####/Adobe-GB1-UCS2.bcmap
/data/media/####/Adobe-Japan1-0.bcmap
/data/media/####/Adobe-Japan1-1.bcmap
/data/media/####/Adobe-Japan1-2.bcmap
/data/media/####/Adobe-Japan1-3.bcmap
/data/media/####/Adobe-Japan1-4.bcmap
/data/media/####/Adobe-Japan1-5.bcmap
/data/media/####/Adobe-Japan1-6.bcmap
/data/media/####/Adobe-Japan1-UCS2.bcmap
/data/media/####/Adobe-Korea1-0.bcmap
/data/media/####/Adobe-Korea1-1.bcmap
/data/media/####/Adobe-Korea1-2.bcmap
/data/media/####/Adobe-Korea1-UCS2.bcmap
/data/media/####/B5-H.bcmap
/data/media/####/B5-V.bcmap
/data/media/####/B5pc-H.bcmap
/data/media/####/B5pc-V.bcmap
/data/media/####/BUS_TODO.png
/data/media/####/CHARGING_PILE.png
/data/media/####/CNS-EUC-H.bcmap
/data/media/####/CNS-EUC-V.bcmap
/data/media/####/CNS1-H.bcmap
/data/media/####/CNS1-V.bcmap
/data/media/####/CNS2-H.bcmap
/data/media/####/CNS2-V.bcmap
/data/media/####/CUT_OFF_QUERY.png
/data/media/####/ELEC_ANALYZE.png
/data/media/####/ELEC_NEWS.png
/data/media/####/EMAIL.png
/data/media/####/ETHK-B5-H.bcmap
/data/media/####/ETHK-B5-V.bcmap
/data/media/####/ETen-B5-H.bcmap
/data/media/####/ETen-B5-V.bcmap
/data/media/####/ETenms-B5-H.bcmap
/data/media/####/ETenms-B5-V.bcmap
/data/media/####/EUC-H.bcmap
/data/media/####/EUC-V.bcmap
/data/media/####/Ext-H.bcmap
/data/media/####/Ext-RKSJ-H.bcmap
/data/media/####/Ext-RKSJ-V.bcmap
/data/media/####/Ext-V.bcmap
/data/media/####/GB-EUC-H.bcmap
/data/media/####/GB-EUC-V.bcmap
/data/media/####/GB-H.bcmap
/data/media/####/GB-V.bcmap
/data/media/####/GBK-EUC-H.bcmap
/data/media/####/GBK-EUC-V.bcmap
/data/media/####/GBK2K-H.bcmap
/data/media/####/GBK2K-V.bcmap
/data/media/####/GBKp-EUC-H.bcmap
/data/media/####/GBKp-EUC-V.bcmap
/data/media/####/GBT-EUC-H.bcmap
/data/media/####/GBT-EUC-V.bcmap
/data/media/####/GBT-H.bcmap
/data/media/####/GBT-V.bcmap
/data/media/####/GBTpc-EUC-H.bcmap
/data/media/####/GBTpc-EUC-V.bcmap
/data/media/####/GBpc-EUC-H.bcmap
/data/media/####/GBpc-EUC-V.bcmap
/data/media/####/H.bcmap
/data/media/####/HKdla-B5-H.bcmap
/data/media/####/HKdla-B5-V.bcmap
/data/media/####/HKdlb-B5-H.bcmap
/data/media/####/HKdlb-B5-V.bcmap
/data/media/####/HKgccs-B5-H.bcmap
/data/media/####/HKgccs-B5-V.bcmap
/data/media/####/HKm314-B5-H.bcmap
/data/media/####/HKm314-B5-V.bcmap
/data/media/####/HKm471-B5-H.bcmap
/data/media/####/HKm471-B5-V.bcmap
/data/media/####/HKscs-B5-H.bcmap
/data/media/####/HKscs-B5-V.bcmap
/data/media/####/Hankaku.bcmap
/data/media/####/HeetMap.png
/data/media/####/Hiragana.bcmap
/data/media/####/KSC-EUC-H.bcmap
/data/media/####/KSC-EUC-V.bcmap
/data/media/####/KSC-H.bcmap
/data/media/####/KSC-Johab-H.bcmap
/data/media/####/KSC-Johab-V.bcmap
/data/media/####/KSC-V.bcmap
/data/media/####/KSCms-UHC-H.bcmap
/data/media/####/KSCms-UHC-HW-H.bcmap
/data/media/####/KSCms-UHC-HW-V.bcmap
/data/media/####/KSCms-UHC-V.bcmap
/data/media/####/KSCpc-EUC-H.bcmap
/data/media/####/KSCpc-EUC-V.bcmap
/data/media/####/Katakana.bcmap
/data/media/####/LBS.png
/data/media/####/NWP-H.bcmap
/data/media/####/NWP-V.bcmap
/data/media/####/ONLINE_KF.png
/data/media/####/PageNext@3x.png
/data/media/####/PagePrev@3x.png
/data/media/####/RKSJ-H.bcmap
/data/media/####/RKSJ-V.bcmap
/data/media/####/Roman.bcmap
/data/media/####/SYS_MSG.png
/data/media/####/TROUBLE_DECLARE.png
/data/media/####/TS_RUN_WARN.png
/data/media/####/UniCNS-UCS2-H.bcmap
/data/media/####/UniCNS-UCS2-V.bcmap
/data/media/####/UniCNS-UTF16-H.bcmap
/data/media/####/UniCNS-UTF16-V.bcmap
/data/media/####/UniCNS-UTF32-H.bcmap
/data/media/####/UniCNS-UTF32-V.bcmap
/data/media/####/UniCNS-UTF8-H.bcmap
/data/media/####/UniCNS-UTF8-V.bcmap
/data/media/####/UniGB-UCS2-H.bcmap
/data/media/####/UniGB-UCS2-V.bcmap
/data/media/####/UniGB-UTF16-H.bcmap
/data/media/####/UniGB-UTF16-V.bcmap
/data/media/####/UniGB-UTF32-H.bcmap
/data/media/####/UniGB-UTF32-V.bcmap
/data/media/####/UniGB-UTF8-H.bcmap
/data/media/####/UniGB-UTF8-V.bcmap
/data/media/####/UniJIS-UCS2-H.bcmap
/data/media/####/UniJIS-UCS2-HW-H.bcmap
/data/media/####/UniJIS-UCS2-HW-V.bcmap
/data/media/####/UniJIS-UCS2-V.bcmap
/data/media/####/UniJIS-UTF16-H.bcmap
/data/media/####/UniJIS-UTF16-V.bcmap
/data/media/####/UniJIS-UTF32-H.bcmap
/data/media/####/UniJIS-UTF32-V.bcmap
/data/media/####/UniJIS-UTF8-H.bcmap
/data/media/####/UniJIS-UTF8-V.bcmap
/data/media/####/UniJIS2004-UTF16-H.bcmap
/data/media/####/UniJIS2004-UTF16-V.bcmap
/data/media/####/UniJIS2004-UTF32-H.bcmap
/data/media/####/UniJIS2004-UTF32-V.bcmap
/data/media/####/UniJIS2004-UTF8-H.bcmap
/data/media/####/UniJIS2004-UTF8-V.bcmap
/data/media/####/UniJISPro-UCS2-HW-V.bcmap
/data/media/####/UniJISPro-UCS2-V.bcmap
/data/media/####/UniJISPro-UTF8-V.bcmap
/data/media/####/UniJISX0213-UTF32-H.bcmap
/data/media/####/UniJISX0213-UTF32-V.bcmap
/data/media/####/UniJISX02132004-UTF32-H.bcmap
/data/media/####/UniJISX02132004-UTF32-V.bcmap
/data/media/####/UniKS-UCS2-H.bcmap
/data/media/####/UniKS-UCS2-V.bcmap
/data/media/####/UniKS-UTF16-H.bcmap
/data/media/####/UniKS-UTF16-V.bcmap
/data/media/####/UniKS-UTF32-H.bcmap
/data/media/####/UniKS-UTF32-V.bcmap
/data/media/####/UniKS-UTF8-H.bcmap
/data/media/####/UniKS-UTF8-V.bcmap
/data/media/####/V.bcmap
/data/media/####/WP-Symbol.bcmap
/data/media/####/_8be453.png
/data/media/####/_a2243e.png
/data/media/####/_a2ec6f.png
/data/media/####/_acee75.png
/data/media/####/_b3ee71.png
/data/media/####/_b72d46.png
/data/media/####/_c92e40.png
/data/media/####/_c9e962.png
/data/media/####/_d42c39.png
/data/media/####/_de3731.png
/data/media/####/_e4e646.png
/data/media/####/_ea4e28.png
/data/media/####/_f0e43c.png
/data/media/####/_f26626.png
/data/media/####/_f2e435.png
/data/media/####/_f47224.png
/data/media/####/_f57c22.png
/data/media/####/_f8941b.png
/data/media/####/_f9a515.png
/data/media/####/_f9e41e.png
/data/media/####/_fabc0c.png
/data/media/####/_fad102.png
/data/media/####/_fad600.png
/data/media/####/_fbda00.png
/data/media/####/_ffe100.png
/data/media/####/_ffe303.png
/data/media/####/about.html
/data/media/####/about.html.js
/data/media/####/accoun_psw.png
/data/media/####/account_add.html
/data/media/####/account_add.html.js
/data/media/####/account_apply.png
/data/media/####/account_bind.html
/data/media/####/account_bind.html.js
/data/media/####/account_bind_before.html
/data/media/####/account_bind_before.html.js
/data/media/####/account_choice.html
/data/media/####/account_choice.html.js
/data/media/####/account_cost.html
/data/media/####/account_cost.html.js
/data/media/####/account_detail.html
/data/media/####/account_detail.html.js
/data/media/####/account_form.html
/data/media/####/account_form.html.js
/data/media/####/account_help.png
/data/media/####/account_manage.html
/data/media/####/account_manage.html.js
/data/media/####/account_position.html
/data/media/####/account_position.html.js
/data/media/####/account_ratio.html
/data/media/####/account_ratio.html.js
/data/media/####/account_select.html
/data/media/####/account_select.html.js
/data/media/####/account_setting.png
/data/media/####/account_share.html
/data/media/####/account_share.html.js
/data/media/####/account_tip_090000.png
/data/media/####/add.png
/data/media/####/add_capacity.html
/data/media/####/add_capacity.html.js
/data/media/####/add_equipment_sp1.html
/data/media/####/add_equipment_sp1.html.js
/data/media/####/add_equipment_sp2.html
/data/media/####/add_equipment_sp2.html.js
/data/media/####/address_choice_map.html
/data/media/####/address_choice_map.html.js
/data/media/####/agent_analysis.png
/data/media/####/agent_compare.png
/data/media/####/agent_more.png
/data/media/####/agent_turnover.png
/data/media/####/airCon.png
/data/media/####/ajax_loader.gif
/data/media/####/alarm_detail.html
/data/media/####/alarm_detail.html.js
/data/media/####/all.css
/data/media/####/allNot1.png
/data/media/####/allRank1.png
/data/media/####/allRank2.png
/data/media/####/allRank3.png
/data/media/####/analysis_report.css
/data/media/####/animation.js
/data/media/####/app.js
/data/media/####/app.png
/data/media/####/ar_complete.html
/data/media/####/ar_complete.html.js
/data/media/####/ar_step1.html
/data/media/####/ar_step1.html.js
/data/media/####/ar_step2.html
/data/media/####/ar_step2.html.js
/data/media/####/area_add.html
/data/media/####/area_add.html.js
/data/media/####/area_choice_main.html
/data/media/####/area_choice_main.html.js
/data/media/####/area_choice_sub.html
/data/media/####/area_choice_sub.html.js
/data/media/####/area_power_failure.html
/data/media/####/area_power_failure.html.js
/data/media/####/arrow_down.png
/data/media/####/auth_code.html
/data/media/####/auth_code.html.js
/data/media/####/award_punish.html
/data/media/####/award_punish.html.js
/data/media/####/banner_ex.html
/data/media/####/banner_ex.html.js
/data/media/####/bar.js
/data/media/####/barcode.js
/data/media/####/barcode_scan.html
/data/media/####/barcode_scan.html.js
/data/media/####/batch_pay.html
/data/media/####/batch_pay.html.js
/data/media/####/bill_detail.html
/data/media/####/bill_detail.html.js
/data/media/####/bill_electric.png
/data/media/####/bill_gas.png
/data/media/####/bill_home.html
/data/media/####/bill_home.html.js
/data/media/####/bill_property.png
/data/media/####/bill_tree.png
/data/media/####/bill_water.png
/data/media/####/bind-failed.png
/data/media/####/bind_icon0.png
/data/media/####/bind_icon1.png
/data/media/####/bind_icon2.png
/data/media/####/bind_icon3.png
/data/media/####/bind_icon4.png
/data/media/####/bind_icon5.png
/data/media/####/bind_icon6.png
/data/media/####/bind_icon7.png
/data/media/####/body_main.html
/data/media/####/body_main.html.js
/data/media/####/business_bill_list.html
/data/media/####/business_bill_list.html.js
/data/media/####/business_change_paymentaccount.html
/data/media/####/business_change_paymentaccount.html.js
/data/media/####/business_electricity_change.html
/data/media/####/business_electricity_change.html.js
/data/media/####/business_electricityapply.html
/data/media/####/business_electricityapply.html.js
/data/media/####/business_handling_frame.html
/data/media/####/business_handling_frame.html.js
/data/media/####/business_handling_gd.html
/data/media/####/business_handling_gd.html.js
/data/media/####/business_handling_gx.html
/data/media/####/business_handling_gx.html.js
/data/media/####/business_handling_gz.html
/data/media/####/business_handling_gz.html.js
/data/media/####/business_handling_sz.html
/data/media/####/business_handling_sz.html.js
/data/media/####/business_handling_yn.html
/data/media/####/business_handling_yn.html.js
/data/media/####/business_license_bind.html
/data/media/####/business_license_bind.html.js
/data/media/####/business_map.js
/data/media/####/business_transfer.html
/data/media/####/business_transfer.html.js
/data/media/####/calc-tools.png
/data/media/####/calc_content_1.png
/data/media/####/calc_content_2.png
/data/media/####/calc_content_3.png
/data/media/####/calc_list.html
/data/media/####/calc_list.html.js
/data/media/####/calc_method_result.html
/data/media/####/calc_method_result.html.js
/data/media/####/calc_method_setting.html
/data/media/####/calc_method_setting.html.js
/data/media/####/calc_tips.png
/data/media/####/calc_title.png
/data/media/####/calendar.js
/data/media/####/calendar.png
/data/media/####/cancel_account.html
/data/media/####/cancel_account.html.js
/data/media/####/cardpackage_main.html
/data/media/####/cardpackage_main.html.js
/data/media/####/cardpackage_setting.png
/data/media/####/central_airConditioning.html
/data/media/####/central_airConditioning.html.js
/data/media/####/central_airConditioning_history.html
/data/media/####/central_airConditioning_history.html.js
/data/media/####/central_airConditioning_info.html
/data/media/####/central_airConditioning_info.html.js
/data/media/####/cesuangongju.png
/data/media/####/chajiaodianfei.png
/data/media/####/change_account_name.html
/data/media/####/change_account_name.html.js
/data/media/####/change_class.html
/data/media/####/change_class.html.js
/data/media/####/change_paymentaccount.html
/data/media/####/change_paymentaccount.html.js
/data/media/####/change_pwd.html
/data/media/####/change_pwd.html.js
/data/media/####/chart.js
/data/media/####/chart_frame.html
/data/media/####/chart_frame.html.js
/data/media/####/chart_theme.js
/data/media/####/chat.html
/data/media/####/chat.html.js
/data/media/####/chat.js
/data/media/####/chat_main.html
/data/media/####/chat_main.html.js
/data/media/####/china_city.js
/data/media/####/chongdian.png
/data/media/####/city_choice.html
/data/media/####/city_choice.html.js
/data/media/####/common_chart.html.js
/data/media/####/company.png
/data/media/####/company_detail.html
/data/media/####/company_detail.html.js
/data/media/####/composite.html
/data/media/####/composite.html.js
/data/media/####/config.js
/data/media/####/config.json
/data/media/####/conlts.dat
/data/media/####/constant.js
/data/media/####/contact_info.html
/data/media/####/contact_info.html.js
/data/media/####/contacts.html
/data/media/####/contacts.html.js
/data/media/####/contacts_add.html
/data/media/####/contacts_add.html.js
/data/media/####/contacts_add_success.html
/data/media/####/contacts_add_success.html.js
/data/media/####/contacts_change.html
/data/media/####/contacts_change.html.js
/data/media/####/contacts_list.html
/data/media/####/contacts_list.html.js
/data/media/####/contacts_manage.html
/data/media/####/contacts_manage.html.js
/data/media/####/contacts_manage_detail.html
/data/media/####/contacts_manage_detail.html.js
/data/media/####/contract.png
/data/media/####/csg_city.json
/data/media/####/customer_service.png
/data/media/####/daliy_calendar.js
/data/media/####/dashboard.js
/data/media/####/defeatcircle.js
/data/media/####/demand_response.html
/data/media/####/demand_response.html.js
/data/media/####/demand_response_plan.html
/data/media/####/demand_response_plan.html.js
/data/media/####/dianfeichajiao.png
/data/media/####/dianfeifenxi.png
/data/media/####/dot.png
/data/media/####/echarts.js
/data/media/####/echarts.min.js
/data/media/####/ele-Analysis-icon.png
/data/media/####/ele-cost.png
/data/media/####/ele-measure.png
/data/media/####/ele_calibration.html
/data/media/####/ele_calibration.html.js
/data/media/####/ele_economy.html
/data/media/####/ele_economy.html.js
/data/media/####/ele_quality.html
/data/media/####/ele_quality.html.js
/data/media/####/electric1.png
/data/media/####/electric2.png
/data/media/####/electric3.png
/data/media/####/electric_prices.html
/data/media/####/electric_prices.html.js
/data/media/####/electricity_alarm.html
/data/media/####/electricity_alarm.html.js
/data/media/####/electricity_list.html
/data/media/####/electricity_list.html.js
/data/media/####/electricity_list_frame.html
/data/media/####/electricity_list_frame.html.js
/data/media/####/embed_meter_box_frame.html
/data/media/####/embed_meter_box_frame.html.js
/data/media/####/embed_meter_box_list.html
/data/media/####/embed_meter_box_list.html.js
/data/media/####/energy-service-w.png
/data/media/####/energy-service.png
/data/media/####/energy_account_list.html
/data/media/####/energy_account_list.html.js
/data/media/####/energy_bad.png
/data/media/####/energy_consume.html
/data/media/####/energy_consume.html.js
/data/media/####/energy_consume_detail.html
/data/media/####/energy_consume_detail.html.js
/data/media/####/energy_consume_remind.html
/data/media/####/energy_consume_remind.html.js
/data/media/####/energy_good.png
/data/media/####/energy_great.png
/data/media/####/engineering_company_list.html
/data/media/####/engineering_company_list.html.js
/data/media/####/enter.png
/data/media/####/equ_utilization.html
/data/media/####/equ_utilization.html.js
/data/media/####/equipment_electricity.html
/data/media/####/equipment_electricity.html.js
/data/media/####/equipment_electricity_icon.png
/data/media/####/equipment_electricity_now.html
/data/media/####/equipment_electricity_now.html.js
/data/media/####/equipment_type.html
/data/media/####/equipment_type.html.js
/data/media/####/error.html
/data/media/####/error.html.js
/data/media/####/exchange_setting.png
/data/media/####/extension.html
/data/media/####/extension.html.js
/data/media/####/failures_detail.html
/data/media/####/failures_detail.html.js
/data/media/####/failures_repair.html
/data/media/####/failures_repair.html.js
/data/media/####/failures_repair_account_list.html
/data/media/####/failures_repair_account_list.html.js
/data/media/####/fangz.png
/data/media/####/fault.png
/data/media/####/faultContact-1.png
/data/media/####/faultContact-2.png
/data/media/####/feedback_setting.png
/data/media/####/findbarButton-next-rtl.png
/data/media/####/findbarButton-next-rtl@2x.png
/data/media/####/findbarButton-next.png
/data/media/####/findbarButton-next@2x.png
/data/media/####/findbarButton-previous-rtl.png
/data/media/####/findbarButton-previous-rtl@2x.png
/data/media/####/findbarButton-previous.png
/data/media/####/findbarButton-previous@2x.png
/data/media/####/fitLayout.js
/data/media/####/force_rate.html
/data/media/####/force_rate.html.js
/data/media/####/frame.html
/data/media/####/frame.html.js
/data/media/####/function_list.css
/data/media/####/function_list.html
/data/media/####/function_list.html.js
/data/media/####/gas1.png
/data/media/####/gas2.png
/data/media/####/gas3.png
/data/media/####/gauge.js
/data/media/####/gauge_guigang.js
/data/media/####/gengduo.png
/data/media/####/gold.png
/data/media/####/grab.cur
/data/media/####/grabbing.cur
/data/media/####/h5plugin.js
/data/media/####/handle_data.js
/data/media/####/handle_evaluation.html
/data/media/####/handle_evaluation.html.js
/data/media/####/handle_help.html
/data/media/####/handle_help.html.js
/data/media/####/handle_success.html
/data/media/####/handle_success.html.js
/data/media/####/handling_detail.html
/data/media/####/handling_detail.html.js
/data/media/####/handling_list.html
/data/media/####/handling_list.html.js
/data/media/####/hangyeduibiao.png
/data/media/####/header.css
/data/media/####/header_iOS7.css
/data/media/####/header_iOSX.css
/data/media/####/history_failures_repair.html
/data/media/####/history_failures_repair.html.js
/data/media/####/home.css
/data/media/####/home.html
/data/media/####/home.html.js
/data/media/####/home_bg_default.png
/data/media/####/house.png
/data/media/####/house_re.png
/data/media/####/iconfont-alipay.png
/data/media/####/iconfont-dingwei.png
/data/media/####/iconfont-dingwei2.png
/data/media/####/iconfont-jinggao.png
/data/media/####/iconfont-pay.png
/data/media/####/iconfont-unionpay.png
/data/media/####/iconfont-wxpay.png
/data/media/####/iconfont.css
/data/media/####/iconfont.eot
/data/media/####/iconfont.svg
/data/media/####/iconfont.ttf
/data/media/####/iconfont.woff
/data/media/####/id_card_bind.html
/data/media/####/id_card_bind.html.js
/data/media/####/image_box.js
/data/media/####/image_cacher.js
/data/media/####/imageeditor.js
/data/media/####/imageviewer.js
/data/media/####/industry_analysis.png
/data/media/####/industry_compare.png
/data/media/####/industry_energy.png
/data/media/####/industry_list.html
/data/media/####/industry_list.html.js
/data/media/####/industry_more.png
/data/media/####/industry_tools.png
/data/media/####/industry_turnover.png
/data/media/####/industry_warning.png
/data/media/####/intelligent_equipment.html
/data/media/####/intelligent_equipment.html.js
/data/media/####/interact.js
/data/media/####/introduction.html
/data/media/####/introduction.html.js
/data/media/####/invoice-wait.png
/data/media/####/invoice-warning.png
/data/media/####/invoice.png
/data/media/####/invoice_card_list.html
/data/media/####/invoice_card_list.html.js
/data/media/####/invoice_detail.html
/data/media/####/invoice_detail.html.js
/data/media/####/invoice_list.html
/data/media/####/invoice_list.html.js
/data/media/####/jiankongyujing.png
/data/media/####/jiaofeilishi.png
/data/media/####/join_plan.html
/data/media/####/join_plan.html.js
/data/media/####/journal.tmp
/data/media/####/jquery-2.1.0.js
/data/media/####/knockout-3.3.0.js
/data/media/####/l10n.js
/data/media/####/leave_message.html
/data/media/####/leave_message.html.js
/data/media/####/light.png
/data/media/####/light_energy.html
/data/media/####/light_energy.html.js
/data/media/####/line.js
/data/media/####/ller.dat
/data/media/####/load_correlation.html
/data/media/####/load_correlation.html.js
/data/media/####/load_rate.html
/data/media/####/load_rate.html.js
/data/media/####/loading-icon.gif
/data/media/####/loading-small.png
/data/media/####/loading-small@2x.png
/data/media/####/loading.css
/data/media/####/loading.gif
/data/media/####/loading.png
/data/media/####/locale.properties
/data/media/####/location.html
/data/media/####/location.html.js
/data/media/####/location_4.png
/data/media/####/login-auth_code.png
/data/media/####/login-tel.png
/data/media/####/login.css
/data/media/####/login.html
/data/media/####/login.html.js
/data/media/####/login_bg.png
/data/media/####/login_eye_close.png
/data/media/####/login_eye_open.png
/data/media/####/login_logo.png
/data/media/####/login_password.png
/data/media/####/login_referral.png
/data/media/####/login_user.png
/data/media/####/ls.db
/data/media/####/ls.db-journal
/data/media/####/main.html
/data/media/####/main.html.js
/data/media/####/mall.png
/data/media/####/manifest.json
/data/media/####/map_ground.html
/data/media/####/md5.js
/data/media/####/me.html
/data/media/####/me.html.js
/data/media/####/menu_config.json
/data/media/####/message_list.html
/data/media/####/message_list.html.js
/data/media/####/mete_fee.html
/data/media/####/mete_fee.html.js
/data/media/####/metering_bill_detail.html
/data/media/####/metering_bill_detail.html.js
/data/media/####/moment.min.js
/data/media/####/monitor.html
/data/media/####/monitor.html.js
/data/media/####/move_electricmeter.html
/data/media/####/move_electricmeter.html.js
/data/media/####/msg.config.js
/data/media/####/msg.html
/data/media/####/msg.html.js
/data/media/####/msg_frame.html
/data/media/####/msg_frame.html.js
/data/media/####/msg_setting.html
/data/media/####/msg_setting.html.js
/data/media/####/msg_timeline.css
/data/media/####/msg_timeline.html
/data/media/####/msg_timeline.html.js
/data/media/####/msg_timeline_main.html
/data/media/####/msg_timeline_main.html.js
/data/media/####/mui.css
/data/media/####/mui.indexedlist.css
/data/media/####/mui.indexedlist.js
/data/media/####/mui.js
/data/media/####/mui.lazyload.img.js
/data/media/####/mui.lazyload.js
/data/media/####/mui.min.css
/data/media/####/mui.picker.js
/data/media/####/mui.picker.min.css
/data/media/####/mui.picker.min.js
/data/media/####/mui.picker_self.min.css
/data/media/####/mui.ttf
/data/media/####/mui_extend.js
/data/media/####/my_handling_detail.html
/data/media/####/my_handling_detail.html.js
/data/media/####/my_handling_gd.html
/data/media/####/my_handling_gd.html.js
/data/media/####/my_handling_gx.html
/data/media/####/my_handling_gx.html.js
/data/media/####/my_handling_gz.html
/data/media/####/my_handling_gz.html.js
/data/media/####/my_handling_sz.html
/data/media/####/my_handling_sz.html.js
/data/media/####/my_handling_yn.html
/data/media/####/my_handling_yn.html.js
/data/media/####/nearby.html
/data/media/####/nearby.html.js
/data/media/####/nearby_1.png
/data/media/####/nearby_2.png
/data/media/####/nearby_3.png
/data/media/####/nearby_4.png
/data/media/####/nearby_5.png
/data/media/####/nearby_6.png
/data/media/####/nearby_7.png
/data/media/####/nearby_8.png
/data/media/####/need_apply_result.html
/data/media/####/need_apply_result.html.js
/data/media/####/need_apply_setting.html
/data/media/####/need_apply_setting.html.js
/data/media/####/neighbor-rank.png
/data/media/####/neighborRank.js
/data/media/####/nengxiaofenxi.png
/data/media/####/nodata.png
/data/media/####/nodata_1.png
/data/media/####/nodata_2.png
/data/media/####/nodata_3.png
/data/media/####/nodata_4.png
/data/media/####/non_invasive_analysis.html
/data/media/####/non_invasive_analysis.html.js
/data/media/####/nonbind_account_detail.html
/data/media/####/nonbind_account_detail.html.js
/data/media/####/old_days_electric.html
/data/media/####/old_days_electric.html.js
/data/media/####/onlyElectric1.png
/data/media/####/oss-js-upload.js
/data/media/####/overall_fee.html
/data/media/####/overall_fee.html.js
/data/media/####/particles.jpg
/data/media/####/pay_detail.html
/data/media/####/pay_detail.html.js
/data/media/####/pay_history.html
/data/media/####/pay_history.html.js
/data/media/####/pay_main.html
/data/media/####/pay_main.html.js
/data/media/####/pay_query.html
/data/media/####/pay_query.html.js
/data/media/####/payment.html
/data/media/####/payment.html.js
/data/media/####/payment_result.html
/data/media/####/payment_result.html.js
/data/media/####/pdf.js
/data/media/####/pdf.worker.js
/data/media/####/pdf_extension.html
/data/media/####/pdf_extension.html.js
/data/media/####/pdf_viewer.html
/data/media/####/pdf_viewer.html.js
/data/media/####/person_airer.png
/data/media/####/person_analysis.png
/data/media/####/person_more.png
/data/media/####/person_nearby.png
/data/media/####/person_pay.png
/data/media/####/person_ranking.png
/data/media/####/person_share.png
/data/media/####/person_turnover.png
/data/media/####/phone_bind.html
/data/media/####/phone_bind.html.js
/data/media/####/pie.js
/data/media/####/pinyin.js
/data/media/####/pinyinlite_full.js
/data/media/####/position.png
/data/media/####/powerAnalysis.js
/data/media/####/power_cut_event.html
/data/media/####/power_cut_event.html.js
/data/media/####/power_cut_map.html
/data/media/####/power_cut_map.html.js
/data/media/####/power_cut_user.html
/data/media/####/power_cut_user.html.js
/data/media/####/power_cut_user_event.html
/data/media/####/power_cut_user_event.html.js
/data/media/####/power_factor.html
/data/media/####/power_factor.html.js
/data/media/####/predict.png
/data/media/####/prestore_measure.html
/data/media/####/prestore_measure.html.js
/data/media/####/price_measure.html
/data/media/####/price_measure.html.js
/data/media/####/price_measure_icon.png
/data/media/####/progress_detail.html
/data/media/####/progress_detail.html.js
/data/media/####/protocol.html
/data/media/####/protocol.html.js
/data/media/####/public_page.html
/data/media/####/public_page.html.js
/data/media/####/pull-down.css
/data/media/####/pull_down_menu.js
/data/media/####/pull_down_module.js
/data/media/####/qq.png
/data/media/####/query.css
/data/media/####/query_account_list.html
/data/media/####/query_account_list.html.js
/data/media/####/query_result.html
/data/media/####/query_result.html.js
/data/media/####/rankAirCondition.js
/data/media/####/rank_air_condition.html
/data/media/####/rank_air_condition.html.js
/data/media/####/rank_history.html
/data/media/####/rank_history.html.js
/data/media/####/rank_infomation.png
/data/media/####/rank_month.html
/data/media/####/rank_month.html.js
/data/media/####/recommend.html
/data/media/####/recommend.html.js
/data/media/####/recommend.png
/data/media/####/recommend_setting.png
/data/media/####/recovery_capacity.html
/data/media/####/recovery_capacity.html.js
/data/media/####/recovery_electricity.html
/data/media/####/recovery_electricity.html.js
/data/media/####/reduce_capacity.html
/data/media/####/reduce_capacity.html.js
/data/media/####/refer_account.html
/data/media/####/refer_account.html.js
/data/media/####/referral_code.html
/data/media/####/referral_code.html.js
/data/media/####/register.html
/data/media/####/register.html.js
/data/media/####/repair_complete.html
/data/media/####/repair_complete.html.js
/data/media/####/reserve_balance.html
/data/media/####/reserve_balance.html.js
/data/media/####/resident_bill_list.html
/data/media/####/resident_bill_list.html.js
/data/media/####/resident_bill_list_frame.html
/data/media/####/resident_bill_list_frame.html.js
/data/media/####/resident_electricity_change.html
/data/media/####/resident_electricity_change.html.js
/data/media/####/resident_electricityapply.html
/data/media/####/resident_electricityapply.html.js
/data/media/####/resident_statistics.html
/data/media/####/resident_statistics.html.js
/data/media/####/reusable_gauge.js
/data/media/####/sea-config.js
/data/media/####/sea.js
/data/media/####/secondaryToolbarButton-documentProperties.png
/data/media/####/secondaryToolbarButton-documentProperties@2x.png
/data/media/####/secondaryToolbarButton-firstPage.png
/data/media/####/secondaryToolbarButton-firstPage@2x.png
/data/media/####/secondaryToolbarButton-handTool.png
/data/media/####/secondaryToolbarButton-handTool@2x.png
/data/media/####/secondaryToolbarButton-lastPage.png
/data/media/####/secondaryToolbarButton-lastPage@2x.png
/data/media/####/secondaryToolbarButton-rotateCcw.png
/data/media/####/secondaryToolbarButton-rotateCcw@2x.png
/data/media/####/secondaryToolbarButton-rotateCw.png
/data/media/####/secondaryToolbarButton-rotateCw@2x.png
/data/media/####/set_password.html
/data/media/####/set_password.html.js
/data/media/####/setting.html
/data/media/####/setting.html.js
/data/media/####/setting.png
/data/media/####/sha1.js
/data/media/####/shadow.png
/data/media/####/share.png
/data/media/####/share_list.html
/data/media/####/share_list.html.js
/data/media/####/share_result.html
/data/media/####/share_result.html.js
/data/media/####/share_service.js
/data/media/####/share_service_popover.css
/data/media/####/share_setting.html
/data/media/####/share_setting.html.js
/data/media/####/similar.png
/data/media/####/simple_list_template.html
/data/media/####/simple_list_template.html.js
/data/media/####/single_power_failure.html
/data/media/####/single_power_failure.html.js
/data/media/####/smartElectirc.png
/data/media/####/smartEquipment.js
/data/media/####/smart_electricity.html
/data/media/####/smart_electricity.html.js
/data/media/####/smart_equipment_success.html
/data/media/####/smart_equipment_success.html.js
/data/media/####/specialRank_gas1.png
/data/media/####/specialRank_gasNot1.png
/data/media/####/statistics.html
/data/media/####/statistics.html.js
/data/media/####/success.png
/data/media/####/suspend_electricity.html
/data/media/####/suspend_electricity.html.js
/data/media/####/system_setting.png
/data/media/####/sz.png
/data/media/####/sz_tips.png
/data/media/####/taskmanager.js
/data/media/####/tel_auth.html
/data/media/####/tel_auth.html.js
/data/media/####/template.html
/data/media/####/template.html.js
/data/media/####/temporary_reduce_capacity.html
/data/media/####/temporary_reduce_capacity.html.js
/data/media/####/tendency.html
/data/media/####/tendency.html.js
/data/media/####/test.0
/data/media/####/texture.png
/data/media/####/three_point.png
/data/media/####/tingdianchaxun.png
/data/media/####/tip-arrow.png
/data/media/####/tip-happy.png
/data/media/####/tip-unhappy.png
/data/media/####/toolbarButton-bookmark.png
/data/media/####/toolbarButton-bookmark@2x.png
/data/media/####/toolbarButton-download.png
/data/media/####/toolbarButton-download@2x.png
/data/media/####/toolbarButton-menuArrows.png
/data/media/####/toolbarButton-menuArrows@2x.png
/data/media/####/toolbarButton-openFile.png
/data/media/####/toolbarButton-openFile@2x.png
/data/media/####/toolbarButton-pageDown-rtl.png
/data/media/####/toolbarButton-pageDown-rtl@2x.png
/data/media/####/toolbarButton-pageDown.png
/data/media/####/toolbarButton-pageDown@2x.png
/data/media/####/toolbarButton-pageUp-rtl.png
/data/media/####/toolbarButton-pageUp-rtl@2x.png
/data/media/####/toolbarButton-pageUp.png
/data/media/####/toolbarButton-pageUp@2x.png
/data/media/####/toolbarButton-presentationMode.png
/data/media/####/toolbarButton-presentationMode@2x.png
/data/media/####/toolbarButton-print.png
/data/media/####/toolbarButton-print@2x.png
/data/media/####/toolbarButton-search.png
/data/media/####/toolbarButton-search@2x.png
/data/media/####/toolbarButton-secondaryToolbarToggle-rtl.png
/data/media/####/toolbarButton-secondaryToolbarToggle-rtl@2x.png
/data/media/####/toolbarButton-secondaryToolbarToggle.png
/data/media/####/toolbarButton-secondaryToolbarToggle@2x.png
/data/media/####/toolbarButton-sidebarToggle-rtl.png
/data/media/####/toolbarButton-sidebarToggle-rtl@2x.png
/data/media/####/toolbarButton-sidebarToggle.png
/data/media/####/toolbarButton-sidebarToggle@2x.png
/data/media/####/toolbarButton-viewAttachments.png
/data/media/####/toolbarButton-viewAttachments@2x.png
/data/media/####/toolbarButton-viewOutline-rtl.png
/data/media/####/toolbarButton-viewOutline-rtl@2x.png
/data/media/####/toolbarButton-viewOutline.png
/data/media/####/toolbarButton-viewOutline@2x.png
/data/media/####/toolbarButton-viewThumbnail.png
/data/media/####/toolbarButton-viewThumbnail@2x.png
/data/media/####/toolbarButton-zoomIn.png
/data/media/####/toolbarButton-zoomIn@2x.png
/data/media/####/toolbarButton-zoomOut.png
/data/media/####/toolbarButton-zoomOut@2x.png
/data/media/####/transfer.html
/data/media/####/transfer.html.js
/data/media/####/transformer_result.html
/data/media/####/transformer_result.html.js
/data/media/####/transformer_setting.html
/data/media/####/transformer_setting.html.js
/data/media/####/treeitem-collapsed-rtl.png
/data/media/####/treeitem-collapsed-rtl@2x.png
/data/media/####/treeitem-collapsed.png
/data/media/####/treeitem-collapsed@2x.png
/data/media/####/treeitem-expanded.png
/data/media/####/treeitem-expanded@2x.png
/data/media/####/tween.js
/data/media/####/update_contract_alias.html
/data/media/####/update_contract_alias.html.js
/data/media/####/useEleAnalysis.js
/data/media/####/user.png
/data/media/####/user_agreement.html
/data/media/####/user_agreement.html.js
/data/media/####/user_guide.js
/data/media/####/user_male.png
/data/media/####/util.js
/data/media/####/velocity.min.js
/data/media/####/video-js.min.css
/data/media/####/video.min.js
/data/media/####/viewer.css
/data/media/####/viewer.js
/data/media/####/viewer.properties
/data/media/####/vue.js
/data/media/####/warning-moni-w.png
/data/media/####/warning-moni.png
/data/media/####/water1.png
/data/media/####/water2.png
/data/media/####/water3.png
/data/media/####/weather100.png
/data/media/####/weather1001.png
/data/media/####/weather1002.png
/data/media/####/weather1003.png
/data/media/####/weather1004.png
/data/media/####/weather101.png
/data/media/####/weather103.png
/data/media/####/weather104.png
/data/media/####/weather134.png
/data/media/####/weather203.png
/data/media/####/weather207.png
/data/media/####/weather209.png
/data/media/####/weather300.png
/data/media/####/weather304.png
/data/media/####/weather309.png
/data/media/####/weather312.png
/data/media/####/weather313.png
/data/media/####/weather319.png
/data/media/####/weather326.png
/data/media/####/weather342.png
/data/media/####/weather357.png
/data/media/####/weather400.png
/data/media/####/weather401.png
/data/media/####/weather402.png
/data/media/####/weather403.png
/data/media/####/weather404.png
/data/media/####/weather501.png
/data/media/####/weather502.png
/data/media/####/weather503.png
/data/media/####/weather508.png
/data/media/####/weather900.png
/data/media/####/weather901.png
/data/media/####/wechat_bind_phone.html
/data/media/####/wechat_bind_phone.html.js
/data/media/####/wifi_equipment_electricity.html
/data/media/####/wifi_equipment_electricity.html.js
/data/media/####/wifi_equipment_frame.html
/data/media/####/wifi_equipment_frame.html.js
/data/media/####/wifi_equipment_periodic.html
/data/media/####/wifi_equipment_periodic.html.js
/data/media/####/wifi_equipment_periodic_add.html
/data/media/####/wifi_equipment_periodic_add.html.js
/data/media/####/wifi_equipment_periodic_frame.html
/data/media/####/wifi_equipment_periodic_frame.html.js
/data/media/####/wxcicle.png
/data/media/####/wxfriend.png
/data/media/####/xiaonan_share.png
/data/media/####/yearElectricity.js
/data/media/####/yewubanli.png
/data/media/####/yoh.dat
/data/media/####/yol.dat
/data/media/####/yom.dat
/data/media/####/yongdianzhuanghu.png
/data/media/####/yongdianzhuanghu1.png
/data/media/####/yongdianzixun.png
/data/media/####/zdemail_detail.html
/data/media/####/zdemail_detail.html.js
/data/media/####/zdemail_list.html
/data/media/####/zdemail_list.html.js
/data/media/####/zdemail_list_frame.html
/data/media/####/zdemail_list_frame.html.js
/data/media/####/zdemail_logo.png
/data/media/####/zdemail_setting.html
/data/media/####/zdemail_setting.html.js
/data/media/####/zdemail_setting.png
/data/media/####/zhangdanliushui.png
/data/media/####/zhanghushezhi.png
/data/media/####/zhoubianfuwu.png
/data/media/####/zhuanzuke.png

Miscellaneous:

Executes the following shell scripts:

chmod 755 <Package Folder>/.jiagu/libjiagu.so

Loads the following dynamic libraries:

libjiagu
locSDK6a

Uses the following algorithms to encrypt data:

AES-CBC-PKCS5Padding
AES-ECB-PKCS5Padding
AES-ECB-ZeroBytePadding
DES
RSA-ECB-PKCS1Padding

Uses the following algorithms to decrypt data:

Uses special library to hide executable bytecode.

Gets information about location.

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Displays its own windows over windows of other apps.

Technologies

Terminology

Training and education

Myths

Technical information

Curing recommendations

Free trial