1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.
Safety rating: |
Behavior list |
Basic Information |
---|
MD5:3e64e91fb3a1a2c15245ea758d156390 |
Package names:com.mbwasi.lightning |
Minimum operating environment:Android 1.5 |
copyright: |
Key behavior | |
---|---|
Behavior description: | 写权限映射文件 |
details: | CiceroSharedMemDefaultS-* |
MSCTF.MarshalInterface.FileMap.MFF..ALHGH | |
MSCTF.MarshalInterface.FileMap.MFF.B.ALHGH | |
MSCTF.MarshalInterface.FileMap.MFF.C.ALHGH | |
MSCTF.MarshalInterface.FileMap.MFF.D.ALHGH | |
MSCTF.MarshalInterface.FileMap.MFF.E.AMHGH | |
MSCTF.MarshalInterface.FileMap.MFF.F.AMHGH | |
MSCTF.MarshalInterface.FileMap.MFF.G.AMHGH | |
MSCTF.Shared.SFM.MFF | |
Behavior description: | 隐藏指定窗口 |
details: | [Window,Class] = [,_EL_Timer] |
[Window,Class] = [,_EL_ClientSock] |
Process behavior | |
---|---|
Behavior description: | 枚举进程 |
details: | N/A |
File behavior | |
---|---|
Behavior description: | 写权限映射文件 |
details: | CiceroSharedMemDefaultS-* |
MSCTF.MarshalInterface.FileMap.MFF..ALHGH | |
MSCTF.MarshalInterface.FileMap.MFF.B.ALHGH | |
MSCTF.MarshalInterface.FileMap.MFF.C.ALHGH | |
MSCTF.MarshalInterface.FileMap.MFF.D.ALHGH | |
MSCTF.MarshalInterface.FileMap.MFF.E.AMHGH | |
MSCTF.MarshalInterface.FileMap.MFF.F.AMHGH | |
MSCTF.MarshalInterface.FileMap.MFF.G.AMHGH | |
MSCTF.Shared.SFM.MFF |
Network behavior | |
---|---|
Behavior description: | 建立到一个指定的套接字连接 |
details: | 127.0.0.1:20010 |
Other behavior | |
---|---|
Behavior description: | 创建互斥体 |
details: | CTF.LBES.MutexDefaultS-* |
CTF.Compart.MutexDefaultS-* | |
CTF.Asm.MutexDefaultS-* | |
CTF.Layouts.MutexDefaultS-* | |
CTF.TMD.MutexDefaultS-* | |
CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-* | |
MSCTF.Shared.MUTEX.ELH | |
MSCTF.Shared.MUTEX.MFF | |
Behavior description: | 查找指定窗口 |
details: | NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,] |
NtUserFindWindowEx: [Class,Window] = [CicLoaderWndClass,] | |
Behavior description: | 隐藏指定窗口 |
details: | [Window,Class] = [,_EL_Timer] |
[Window,Class] = [,_EL_ClientSock] | |
Behavior description: | 窗口信息 |
details: | Pid = 1476, Hwnd=0x302bc, Text = 正在检查版本更新..., ClassName = Afx:400000:b:10011:1900015:0. |
Pid = 1476, Hwnd=0x202cc, Text = 广告剩余 5 秒, ClassName = Afx:400000:b:10011:1900015:0. | |
Behavior description: | 打开图片文件 |
details: | \DOCUME~1\ADMINI~1\LOCALS~1\%temp%\img\ck1.bmp |
Dynamic list behavior | |
---|---|
Behavior description: | 窗口信息 |
details: | {"text": "Lightning Meter", "class": "android.widget.TextView"} |
{"text": "Current Approx. Temperature:", "class": "android.widget.TextView"} | |
{"text": "25ºC, 77ºF", "class": "android.widget.TextView"} | |
{"text": "Lightning", "class": "android.widget.Button"} | |
{"text": "Thunder", "class": "android.widget.Button"} | |
{"text": "Time between Lightning and Thunder:", "class": "android.widget.TextView"} | |
{"text": "....", "class": "android.widget.TextView"} | |
{"text": "Your Distance from the Lightning Strike.", "class": "android.widget.TextView"} | |
{"text": "Meters", "class": "android.widget.TextView"} | |
{"text": "Feet", "class": "android.widget.TextView"} | |
{"text": "Kilometers", "class": "android.widget.TextView"} | |
{"text": "Miles", "class": "android.widget.TextView"} | |
Behavior description: | 添加View |
details: | [u'com.android.internal.policy.impl.PhoneWindow$DecorView@414b5b70', u'WM.LayoutParams{(0,0)(fillxfill) sim=#100 ty=1 fl=#8010100 pfl=0x8 wanim=0x1030001}', u'android.view.CompatibilityInfoHolder@414af8d8'] |
Activities | |
---|---|
Activity name | Types of |
.Main | android.intent.action.MAIN |
.Main | android.intent.category.LAUNCHER |
Permission list | |
---|---|
License name | information |
android.permission.VIBRATE | 允许设备震动 |
File List | |
---|---|
file name | Check code |
res/drawable/icon.png | 0x385783f0 |
res/layout/about.xml | 0x2a70c72a |
res/layout/main.xml | 0xcd36c460 |
res/layout/safety.xml | 0xccab2d56 |
AndroidManifest.xml | 0x3e547d8b |
resources.arsc | 0xcd619114 |
classes.dex | 0x5e6f3ea9 |
META-INF/MANIFEST.MF | 0x9209d79b |
META-INF/CERT.SF | 0x857d16ce |
META-INF/CERT.RSA | 0x44b92e7b |
Run screenshot |
---|
![]() |