Add files via upload

This commit is contained in:
PYDT authored and GitHub committed 2024-07-15 09:58:25 +08:00
1 parent d6445f17e3
commit 14bde5a790
2 files changed
+10 -6

No files matched your search

+9 -5
View File
@@ -992,6 +992,7 @@ class MainWindow_Controller(QMainWindow):
def start_scan(self, file):
try:
ftype = str(f".{file.split('.')[-1]}").lower()
label, level = self.pe_scan(file)
if label and "Unknown" == label:
if self.rule_scan(file):
@@ -1007,6 +1008,11 @@ class MainWindow_Controller(QMainWindow):
return "Rules"
elif self.exten.bdc_scan(file):
return "Exten"
elif not label and ftype in slist:
if self.rule_scan(file):
return "Rules"
elif self.exten.bdc_scan(file):
return "Exten"
elif self.json["high_sensitive"]:
if self.rule_scan(file):
return "Rules"
@@ -1470,11 +1476,9 @@ class MainWindow_Controller(QMainWindow):
self.kill_process(p, "加載攔截", False)
return True
self.lock_process(p, False)
file = p.exe().replace("\\", "/")
if ":/Windows" not in file and ":/Program" not in file:
time.sleep(0.2)
if self.exten.pe_sieve(p):
self.kill_process(p, "記憶體攔截", True)
time.sleep(0.2)
if self.exten.pe_sieve(p):
self.kill_process(p, "記憶體攔截", True)
return False
except:
return False
+1 -1
View File
@@ -30,7 +30,7 @@ class ExtenRules:
output = p.communicate()[0]
for match in re.finditer(r'(\d+)', output):
line = output[:match.start()].split('\n')[-1].strip().replace(':', '')
if line in ["Implanted shc", "Replaced", "IAT Hooks", "Unreachable files", "Other"]:
if line in ["Implanted shc", "Replaced", "IAT Hooks", "Other"]:
if int(match.group(1)) > 0:
return line
return False