Add files via upload

Update PYAS_Language.py

Engine/Model/convert.py

@@ -0,0 +1,73 @@
+from PIL import Image
+import numpy, pefile, os
+
+def file_to_images(file_data, output_dir, file_name, target_size=(224, 224)):#
+    wah = int(numpy.ceil(numpy.sqrt(len(file_data))))
+    file_data = numpy.frombuffer(file_data, dtype=numpy.uint8)
+    image_array = numpy.zeros((wah * wah,), dtype=numpy.uint8)
+    image_array[:len(file_data)] = file_data
+    image = Image.fromarray(image_array.reshape((wah, wah)), 'L')
+    image = image.resize(target_size, Image.Resampling.NEAREST)
+    image.save(os.path.join(output_dir, f"{file_name}.png"))
+
+def check_file_type(file_path):
+    try:
+        shell_section = ["0", "1", "2", "3", "4", "5", "6", "7", "8", "9", 
+        "cry", "tvm", "dec", "enc", "vmp", "upx", "aes", "lzma", "press", 
+        "pack", "enigma", "protect", "secur"]
+
+        unknown_section = ["asmstub", "base", "bss", "clr_uef", "cursors", 
+        "engine", "fio", "fothk", "h~;", "icapsec", "malloc_h", "miniex", 
+        "mssmixer", "ndr64", "nsys_wr", "obr", "wow", "wow64svc", "wpp_sf",
+        "pad", "pgae", "poolmi", "proxy", "qihoo", "res", "retpol", "uedbg",
+        "rwexec", "rygs", "s:@", "sanontcp", "segm", "test", "tracesup",
+        "transit", "trs_age", "wisevec"]
+
+        unimportant_section = ["viahwaes", "orpc", "nep", "ace", "extjmp", 
+        "no_bbt", "data", "page", "hexpthk"]
+
+        shells = shell_section + unimportant_section + unknown_section
+        
+        ftype = str(f".{file_path.split('.')[-1]}").lower()
+
+        if ftype in [".bat", ".cmd", ".ps1", ".vbs", ".wsf", ".js", ".html"]:
+            with open(file_path, 'rb') as f:
+                return [f.read()]
+
+        match_data = []
+        if ftype in [".com", ".exe", ".dll", ".sys", ".scr"]:
+            with pefile.PE(file_path, fast_load=True) as pe:
+                for section in pe.sections:
+                    section_name = section.Name.rstrip(b'\x00').decode('latin1')
+                    #if (section.Characteristics & 0x00000020 and not
+                    #any(shell in section_name.lower() for shell in shells)):
+                    if section.Characteristics & 0x00000020:
+                        match_data.append(section.get_data())
+                return match_data
+        return False
+    except Exception as e:
+        print(e)
+        return False
+
+def batch_file_to_images(input_dir, output_dir):
+    for root, dirs, files in os.walk(input_dir):
+        for file in files:
+            try:
+                file_path = os.path.join(root, file)
+                file_data = check_file_type(file_path)
+                if file_data:
+                    for i, data in enumerate(file_data, 1):
+                        print(i, file_path)
+                        relative_path = os.path.relpath(root, input_dir)
+                        output_path_dir = os.path.join(output_dir, relative_path)
+                        if not os.path.exists(output_path_dir):
+                            os.makedirs(output_path_dir)
+                        file_to_images(data, output_path_dir, f"{i}_{file}")
+            except Exception as e:
+                print(e)
+                pass
+
+input_directory = input('Enter the folder path: ')
+output_directory = "./Image_File"
+batch_file_to_images(input_directory, output_directory)
+input('Conversion Complete')

Engine/Model/train.py

@@ -0,0 +1,111 @@
+import tensorflow as tf
+import os, tf2onnx, numpy, random
+from PIL import Image
+from tensorflow.keras import *
+
+Image.MAX_IMAGE_PIXELS = None
+tf.keras.mixed_precision.set_global_policy('mixed_float16')
+
+def get_file_list(directory):
+    file_paths, labels, class_indices = [], [], {}
+    for i, cls in enumerate(sorted([d for d in os.listdir(directory) if os.path.isdir(os.path.join(directory, d))])):
+        class_indices[cls] = i
+        cls_dir = os.path.join(directory, cls)
+        for root, _, files in os.walk(cls_dir):
+            for file in files:
+                if file.lower().endswith(('.jpg', '.jpeg', '.png', '.bmp', '.gif')):
+                    file_paths.append(os.path.join(root, file))
+                    labels.append(i)
+    return file_paths, labels, class_indices
+
+def load_dataset(train_dir, val_dir, val_split=0.01, batch_size=128, color_mode="grayscale"):
+    channels = 1 if color_mode == "grayscale" else 3
+    if train_dir == val_dir:
+        file_paths, labels, class_indices = get_file_list(train_dir)
+        combined = list(zip(file_paths, labels))
+        random.shuffle(combined)
+        file_paths[:], labels[:] = zip(*combined)
+        num_val = int(val_split * len(file_paths))
+        train_files = file_paths[num_val:]
+        train_labels = labels[num_val:]
+        val_files = file_paths[:num_val]
+        val_labels = labels[:num_val]
+    else:
+        train_files, train_labels, class_indices = get_file_list(train_dir)
+        val_files, val_labels, _ = get_file_list(val_dir)
+    num_classes = len(class_indices)
+
+    def parse_fn(filename, label):
+        img = tf.io.read_file(filename)
+        img = tf.image.decode_image(img, channels=channels, expand_animations=False)
+        img = tf.cast(img, tf.float32) / 255.0
+        label = tf.one_hot(label, depth=num_classes)
+        return img, label
+
+    train_ds = tf.data.Dataset.from_tensor_slices((train_files, train_labels))
+    train_ds = train_ds.map(parse_fn, num_parallel_calls=tf.data.AUTOTUNE)
+    train_ds = train_ds.batch(batch_size).prefetch(tf.data.AUTOTUNE)
+    val_ds = tf.data.Dataset.from_tensor_slices((val_files, val_labels))
+    val_ds = val_ds.map(parse_fn, num_parallel_calls=tf.data.AUTOTUNE)
+    val_ds = val_ds.batch(batch_size).prefetch(tf.data.AUTOTUNE)
+    train_ds.class_indices = class_indices
+    return train_ds, val_ds
+
+def gated_conv(x, strides):
+    c = layers.DepthwiseConv2D(3, strides=strides, padding='same', activation='gelu')(x)
+    g = layers.DepthwiseConv2D(3, strides=strides, padding='same', activation='sigmoid')(x)
+    return layers.Multiply()([c, g])
+
+def multi_conv(x, strides):
+    convs = [layers.DepthwiseConv2D(kernel_size=k, strides=strides, padding='same')(x) for k in [1, 3, 5, 7]]
+    x = layers.Concatenate()(convs)
+    x = layers.BatchNormalization()(x)
+    return layers.Activation('gelu')(x)
+
+def se_block(x, reduction):
+    filters = x.shape[-1]
+    s = layers.Conv2D(filters // reduction, 1, padding='same', activation='gelu')(x)
+    s = layers.BatchNormalization()(s)
+    s = layers.Conv2D(filters, 1, padding='same', activation='sigmoid')(s)
+    s = layers.BatchNormalization()(s)
+    return layers.multiply([x, s])
+
+def build_model(input_shape, num_classes):
+    i = layers.Input(shape=input_shape)
+    x = multi_conv(i, strides=1)
+    x = multi_conv(x, strides=2)
+    x = gated_conv(x, strides=2)
+    x = multi_conv(x, strides=2)
+    x = multi_conv(x, strides=2)
+    x = multi_conv(x, strides=2)
+    x = se_block(x, reduction=2)
+    x = layers.GlobalAveragePooling2D()(x)
+    o = layers.Dense(num_classes, activation='softmax', dtype='float32')(x)
+    return models.Model(i, o)
+
+def lr_scheduler(epoch, lr):
+    return 1e-3 * (0.7 ** epoch)
+
+class CustomModelCheckpoint(callbacks.Callback):
+    def on_epoch_end(self, epoch, logs=False):
+        models.save_model(self.model, f"PYAS_Model_Epoch_{epoch + 1}.h5")
+        spec = (tf.TensorSpec((None,) + train_ds.image_shape, tf.float32),)
+        model_proto, _ = tf2onnx.convert.from_keras(self.model, input_signature=spec, opset=18)
+        with open(f"PYAS_Model_Epoch_{epoch + 1}.onnx", "wb") as f:
+            f.write(model_proto.SerializeToString())
+
+train_ds, val_ds = load_dataset(r'./Image_File', r'./Image_File')
+for imgs, _ in train_ds.take(1):
+    train_ds.image_shape = imgs.shape[1:]
+    break
+strategy = tf.distribute.MirroredStrategy(cross_device_ops=tf.distribute.HierarchicalCopyAllReduce())
+with strategy.scope():
+    try:
+        model = models.load_model('PYAS_Model_Epoch_0.h5')
+        print("Load model from disk")
+    except:
+        print("Creating a new model")
+        model = build_model(train_ds.image_shape, len(train_ds.class_indices))
+    model.compile(optimizer='adam', loss='categorical_crossentropy', metrics=['accuracy'])
+model.fit(train_ds, epochs=30, callbacks=[CustomModelCheckpoint(), callbacks.LearningRateScheduler(lr_scheduler)], validation_data=val_ds)
+input("Training complete.")

LICENSE.md

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2020-2023 87owo (PYAS Security)
+Copyright (c) 2020-2025 87owo (PYAS Security)
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

PYAS_Config.py

@@ -0,0 +1,128 @@
+translate_dict = {
+    "traditional_switch": {"开启":"開啟","关闭":"關閉","On":"開啟","Off":"關閉"},
+
+    "simplified_switch": {"開啟":"开启","關閉":"关闭","On":"开启","Off":"关闭",
+              "錯誤":"错误","發現":"发现","關閉":"关闭","裝置":"设备","記憶體":"内存",
+              "軟體":"软件","檔案":"文件","確定":"确认","設定":"设置","關於":"关于",
+              "總數":"总数","註冊":"注册","圖標":"图标","路徑":"路径","網路":"网络",
+              "位元":"字节","靈敏":"敏感","複製":"复制","開啟":"开启","靜態":"静态",
+              "訊":"讯","項":"项","掃":"扫","試":"试","黃":"黄","嗎":"吗","防":"保",
+              "鑰":"钥","當":"当","後":"后","護":"护","導":"导","區":"区","復":"复",
+              "攔":"拦","請":"请","統":"统","刪":"删","進":"进","個":"个","選":"选",
+              "啟":"启","監":"监","並":"并","徑":"径","盤":"盘","隱":"隐","動":"动",
+              "狀":"状","誌":"志","這":"这","會":"会","題":"题","擇":"择","語":"语",
+              "無":"无","顯":"显","變":"变","戶":"户","碼":"码","雲":"云","介":"界",
+              "稱":"称","類":"类","輸":"输","執":"执","數":"数","尋":"寻","網":"网",
+              "詢":"询","製":"制","員":"员","許":"许","條":"条","藍":"蓝","紅":"红",
+              "綠":"绿","態":"态","務":"务","連":"连","檢":"检","測":"测","關":"关",
+              "強":"强","驅":"驱","為":"为","腳":"脚","單":"单","開":"开","擴":"扩",
+              "惡":"恶","據":"据","庫":"库","經":"经","敗":"败","謝":"谢","別":"别",
+              "載":"载","誤":"误","報":"报","鏈":"链","竄":"窜","蹤":"踪","與":"与",
+              "異":"异","實":"实","時":"时","彈":"弹","窗":"窗","暫":"暂","訂":"订",
+              "資":"资","產":"产","金":"密","離":"离","規":"规","則":"则","來":"来",
+              "殼":"壳","碼":"码","線":"线",},
+
+    "english_switch": {"開啟":"On","關閉":"Off","开启":"On","关闭":"Off","，":", ",
+              "立即刪除":"Delete Now","安全模式":"Safe Mode","官方網站":"Official Website ",
+              "腳本":"Script ","鏈式":"Chain ","記憶體":"Memory ","加載":"Load ",
+              "行為":"Behavior ","可疑":"Suspicious ","勒索":"Ransom ","主要":"Main ",
+              "許可條款":"License Terms ","惡意":"Malicious", "開發":"Developers ",
+              "啟用":"Enable ","禁用":"Disable ","正在初始化中":"Initializing ",
+              "正在掃描":"Scanning ","正在刪除":"Deleting ","正在追蹤":"Tracking ",
+              "最小化到":"Minimize To ","靈敏度":"Sensitivity ","正在檢查":"Checking ",
+              "確定要":"Sure Want To ","引擎靈敏度":"Sensitivity ","更新":"Update ",
+              "白色主題":"White","黃色主題":"Yellow","紅色主題":"Red","語言":"Language ",
+              "藍色主題":"Blue","綠色主題":"Green","自訂主題":"Custom","黑色主題":"Black",
+              "特別感謝":"Contributors ","版本資訊":"Information","通訊":"Connect ",
+              "註冊":"Registry ","退出":"Quit ","檔案":"File ","當前":"Currently ",
+              "狀態":"State ","掃描":"Scan ","工具":"Tools ","防護":"Protect ",
+              "失敗":"Failed ","請":"Please ","路徑":"Path ","方式":"Method ",
+              "需要":"Need ","病毒":"Virus ","選擇":"Select ","返回":"Back",
+              "受到":"Been ","錯誤":"Error","完成":"Complete ","引擎":"Engine ",
+              "托盤":"Tray ","圖標":"Icon ","不安全":"Unsafe","增強":"Enhance ",
+              "系統":"System ","雲端":"Cloud ","重啟":"Reboot ","修復":"Repair ",
+              "裝置":"Device ","發現":"Found ","成功":"Success ","清理":"Cleanup ",
+              "確定":"OK","執行":"Execute ","警告":"Warning ","使用":"Use ",
+              "網路":"Network ","變更":"Change ","總數":"Total","結束":"End ",
+              "選項":"Options ","監控":"Monitor ","連接":"Connect ","可以":"Can ",
+              "進程":"Process ","攔截":"Block ","引導":"Boot ","刪除":"Delete ",
+              "分區":"Partition ","設定":"Setting ","關於":"About","模式":"Mode ",
+              "提高":"Improve ","安全":"Security ","顯色":"Color ","顏色":"Color ",
+              "主題":"Theme ", "回收":"Collect ", "無用":"Useless ","導入":"Import ",
+              "風險":"Risk ","介面":"UI ","核心":"Core ","服務":"Services ",
+              "管理":"Manage","所有":"All ","您":"You ","取消":"Cancel ","未":"Not ",
+              "垃圾":"Junk ","位元":"byte ","本機":"Computer ","停止":"Stop ",
+              "到":"To ","白名單":"White List ","軟體":"Software ","正在":"",
+              "增加":"Add ","移除":"Delete ","項目":"Items ","生成":"Create ","稱":"",
+              "複製":"Copy ","此":"This ","並":"And ","全盤":"Full ","最新":"Latest ",
+              "已存在":"Already ","數據庫":"Database ","誤報":"False Positive ",
+              "高":"High ","新":"New ","和":"And ","可能會":"Possible ","會":"Can ",
+              "日誌":"Log","已":"Has ","彈窗":"Window ","要":"To ","驅動":"Driver ",
+              "的":"","顯示":"","個":"","嗎":"","了":"","行":"","立即":"","規則":"Rule ",
+              "密鑰":"Key ","檢測":"Detect ","製作":"Maker ","運行":"Running",
+              "擴展":"Extension ","套件":"Kit ","自動":"Auto ","上報":"Report ",
+              "分析":"Analysis ","自身":"Self ","其他":"Other ","配置":"Config ",
+              "丟失":"Lost ","網站":"Website ","不兼容":"Not Compatible ","列表":"List ",
+              "竄改":"Tamper ","第三方":"Other ","實時":"Real Time ","查看":"View ",
+              "指定":"Specify ","清空":"Empty ","資源回收桶":"Recycle Bin ", "無法":"Cannot ",
+              "與":"With ","當":"When ","功能":"Function ","異常":"Abnormal ", "來":"To ",
+              "重置":"Reset ","窗口":"Window ","暫存":"Temp ","自訂":"Custom ",
+              "不支持":"Not Support ","共":"Total ","秒":"Seconds ","耗時":"Takes ",
+              "沙箱":"Sandbox ", "虛擬":"Virtual ", "隔離":"Quarantine ", "時":"",
+              "建立":"Create ","環境":"Environment ","沙箱":"Sandbox ","化":"", "表":"",
+              "達":"Reached ", "上限":"Limit ", "區":"", "金鑰":"Key ", "產品":"Product ",
+              "托管":"CLR ","殼碼":"Shellcode ","線程":"Thread ","注入":"Inject ",
+              "前往":"Go ","檢查":"Check ","可用":"Available ","靜態":"Static ", "  ":" "},
+
+    "white_switch": {
+        "_white": "_black",},
+    "red_switch": {
+        "235, 235, 235": "255, 235, 235",
+        "245, 245, 245": "255, 225, 225",
+        "255, 255, 255": "255, 245, 245",
+        "240, 240, 240": "255, 220, 220",
+        "250, 250, 250": "255, 210, 210",
+        "220, 255, 220": "255, 220, 220",
+        "210, 255, 210": "255, 210, 210",
+        "_white": "_black"
+    },
+    "yellow_switch": {
+        "235, 235, 235": "255, 255, 235",
+        "245, 245, 245": "255, 255, 225",
+        "255, 255, 255": "255, 255, 245",
+        "240, 240, 240": "255, 255, 220",
+        "250, 250, 250": "255, 255, 210",
+        "220, 255, 220": "255, 255, 220",
+        "210, 255, 210": "255, 255, 210",
+        "_white": "_black"
+    },
+    "green_switch": {
+        "235, 235, 235": "235, 255, 235",
+        "245, 245, 245": "225, 255, 225",
+        "255, 255, 255": "245, 255, 245",
+        "240, 240, 240": "220, 255, 220",
+        "250, 250, 250": "210, 255, 210",
+        "_white": "_black"
+    },
+    "blue_switch": {
+        "235, 235, 235": "235, 235, 255",
+        "245, 245, 245": "225, 225, 255",
+        "255, 255, 255": "245, 245, 255",
+        "240, 240, 240": "220, 220, 255",
+        "250, 250, 250": "210, 210, 255",
+        "220, 255, 220": "220, 220, 255",
+        "210, 255, 210": "210, 210, 255",
+        "_white": "_black"
+    },
+    "black_switch": {
+        "255, 255, 255": "55, 55, 55", 
+        "245, 245, 245": "75, 75, 75",
+        "235, 235, 235": "65, 65, 65", 
+        "240, 240, 240": "80, 80, 80",
+        "250, 250, 250": "90, 90, 90",
+        "220, 255, 220": "80, 80, 80",
+        "210, 255, 210": "90, 90, 90",
+        "0, 0, 0": "255, 255, 255",
+        "_black": "_white"
+    }
+}

PYAS_Engine.py

@@ -0,0 +1,150 @@
+import os, yara, numpy, locale, pefile, onnxruntime
+from PIL import Image
+
+class rule_scanner:
+    def __init__(self):
+        self.rules = {}
+        self.network = []
+
+    def load_path(self, path):
+        for root, _, files in os.walk(path):
+            for file in files:
+                self.load_file(os.path.join(root, file))
+
+    def load_file(self, file):
+        ext = os.path.splitext(file)[1].lower()
+        try:
+            if ext in ('.yara', '.yar'):
+                self.rules[file] = yara.compile(file)
+            elif ext in ('.yc', '.yrc'):
+                self.rules[file] = yara.load(file)
+            elif ext in ('.ip', '.txt'):
+                with open(file, "r", encoding="utf-8", errors="ignore") as f:
+                    self.network.extend(line.strip() for line in f if line.strip())
+        except Exception:
+            return False
+
+    def yara_scan(self, file_path):
+        try:
+            data = open(file_path, "rb").read() if isinstance(file_path, str) else file_path
+            for rules in self.rules.values():
+                matches = rules.match(data=data)
+                if matches:
+                    rule_name = str(matches[0])
+                    label = rule_name.split("_")[0]
+                    level = rule_name.split("_")[-1]
+                    return f"Rules/{label}", level
+            return False, False
+        except Exception:
+            return False, False
+
+class model_scanner:
+    SHELLS = {
+        "0","1","2","3","4","5","6","7","8","9","cry","tvm","dec","enc","vmp","upx","aes","lzma","press","pack",
+        "enigma","protect","secur","asmstub","base","bss","clr_uef","cursors","transit","trs_age","engine","fio",
+        "fothk","h~;","icapsec","malloc_h","miniex","mssmixer","ndr64","nsys_wr","obr","wow","wow64svc","wpp_sf",
+        "pad","pgae","poolmi","proxy","qihoo","retpol","uedbg","tracesup","rwexec","rygs","s:@","sanontcp","segm",
+        "test","res","wisevec","viahwaes","orpc","nep","ace","extjmp","no_bbt","data","page","hexpthk"}
+
+    def __init__(self):
+        self.models = {}
+        self.suffix = {".com", ".exe", ".dll", ".sys", ".scr", ".bat", ".cmd", ".ps1", ".vbs", ".wsf"}
+        self.labels = ["Pefile/White", "Script/White", "Pefile/General", "Script/General"]
+        self.detect = {"Pefile/General", "Script/General"}
+        self.resize = (224, 224)
+
+    def load_path(self, path):
+        for root, _, files in os.walk(path):
+            for file in files:
+                self.load_file(os.path.join(root, file))
+
+    def load_file(self, file):
+        if file.lower().endswith('.onnx'):
+            try:
+                self.models[file] = onnxruntime.InferenceSession(file)
+            except Exception:
+                return False
+
+    def is_valid_suffix(self, file_path):
+        return os.path.splitext(file_path)[-1].lower() in self.suffix
+
+    def model_scan(self, file_path):
+        try:
+            if not self.models or not self.is_valid_suffix(file_path):
+                return False, False
+
+            model = next(iter(self.models.values()))
+            shape = model.get_inputs()[0].shape
+            channels = shape[-1] if shape[-1] in (1, 3) else (shape[1] if shape[1] in (1, 3) else 1)
+
+            file_sections = self.get_type(file_path)
+            if not file_sections:
+                return False, False
+
+            batch_images = [self.preprocess_image(data, self.resize, channels) for data in file_sections.values()]
+            arr = numpy.stack([numpy.asarray(img).astype('float32') / 255.0 for img in batch_images])
+            if arr.ndim == 3:
+                arr = arr[..., None]
+            if shape[-1] in (1, 3):
+                model_input = arr
+            elif shape[1] in (1, 3):
+                model_input = arr.transpose(0, 3, 1, 2)
+            else:
+                return False, False
+
+            input_name = model.get_inputs()[0].name
+            predictions = model.run(None, {input_name: model_input})[0]
+
+            label_scores = {label: [] for label in self.labels}
+            for pre_answers in predictions:
+                for k, score in enumerate(pre_answers):
+                    label_scores[self.labels[k]].append(score)
+            label_percentage = {label: (sum(scores)/len(scores))*100 for label, scores in label_scores.items() if scores}
+            if not label_percentage:
+                return False, False
+            best_label, best_conf = max(label_percentage.items(), key=lambda x: x[1])
+            if best_label in self.detect:
+                return best_label, int(best_conf)
+            return False, False
+        except Exception:
+            return False, False
+
+    def preprocess_image(self, file_data, size, channels=1):
+        width, height = size
+        wah = int(numpy.ceil(numpy.sqrt(len(file_data) / channels)))
+        arr = numpy.frombuffer(file_data, dtype=numpy.uint8)
+        img = numpy.zeros(wah*wah*channels, dtype=numpy.uint8)
+        img[:len(file_data)] = arr
+        if channels == 1:
+            image = Image.fromarray(img.reshape((wah, wah)), 'L')
+        else:
+            image = Image.fromarray(img.reshape((wah, wah, channels)), 'RGB')
+        return image.resize((width, height), Image.Resampling.NEAREST)
+
+    def is_text_file(self, content, sample_size=1024):
+        raw = content[:sample_size]
+        if not raw:
+            return False
+        text_char = set(range(32, 127)) | {9, 10, 13}
+        nontext = sum(b not in text_char for b in raw)
+        return nontext / len(raw) < 0.15
+
+    def get_type(self, file_path):
+        match_data = {}
+        if not self.is_valid_suffix(file_path):
+            return match_data
+        try:
+            with pefile.PE(file_path, fast_load=True) as pe:
+                sec = pe.OPTIONAL_HEADER.DATA_DIRECTORY[pefile.DIRECTORY_ENTRY['IMAGE_DIRECTORY_ENTRY_SECURITY']]
+                if bool(sec.VirtualAddress and sec.Size):
+                    return {}
+                for section in pe.sections:
+                    name = section.Name.rstrip(b'\x00').decode('latin1').lower()
+                    if (section.Characteristics & 0x00000020) and name not in self.SHELLS:
+                        match_data[name] = section.get_data()
+        except pefile.PEFormatError:
+            with open(file_path, 'rb') as f:
+                file_content = f.read()
+            if self.is_text_file(file_content):
+                match_data[os.path.splitext(file_path)[-1].lower()] = file_content
+        return match_data

PYAS_Language.py

@@ -1,32 +0,0 @@
-translations = {"zh_TW": {"已开启": "已開啟","已关闭": "已關閉","On": "已開啟","Off": "已關閉"},
-                "zh_CN": {"On": "已开启","Off":"已关闭","已開啟":"已开启","已關閉":"已关闭","嗎":"吗","項":"项","掃":"扫","鑰":"钥",
-                          "軟體":"软件","確定":"确认","檔案":"文件","當":"当","權限":"权限","惡意":"恶意","設定":"设置","後":"后",
-                          "關於":"关于","護":"护","引導":"引导","分區":"分区","錯誤":"错误","實時":"实时","復":"复","攔":"拦","請":"请",
-                          "統":"统","刪":"删","發現":"发现","進":"进","個":"个","選":"选","啟":"启","監":"监","並":"并","本機":"电脑",
-                          "資料":"数据","日誌":"日志","靈":"灵","這":"这","會":"会","誤殺":"误杀","題":"题","澤":"泽","語":"语","顯":"显",
-                          "裝":"装","徑":"径","盤":"盘","隱":"隐","開發":"开发","動":"动","關閉":"关闭","資訊":"资讯","總數":"总数",
-                          "訂":"订","稱":"称","類":"类","輸":"输","執":"执","數":"数","尋":"寻","變":"变","戶":"户","碼":"码","雲":"云",
-                          "網":"网","詢":"询","製":"制","測試":"测试","員":"员","許":"许","條":"条","藍":"蓝","紅":"红","綠":"绿",
-                          "態":"态","擇":"择","態":"态","態":"态","態":"态","態":"态","態":"态","務":"务","連":"连","註冊":"注册",},
-                "en_US": {"On":"On","Off":"Off","已開啟":"On","已關閉":"Off","已开启":"On","已关闭":"Off","系統":"System ","雲端":"Cloud ",
-                          "啟用":"Enable ","停用":"Disable ","創建":"Create ","日期":"Date ","重啟":"Reboot ","嗎":"","檔案":"File ",
-                          "存取被拒":"Access denied ","病毒":"Virus ","個":"","選擇":"Select ","的":"","方式":"Method ","需要":"Need ",
-                          "正在掃描":"Scanning ","正在刪除":"Deleting ","正在尋找":"Searching ","失敗":"Failed ","請":"Please ","路徑":"Path ",
-                          "當前":"Currently ","未":"Not ","防護":"Protect ","裝置":"Device ","這部":"This ","發現":"Found ","，":", ",
-                          "找到":"Find ","受到":"Been ","密鑰錯誤":"Key Error","錯誤":"Error ","修復":"Repair ","完成":"Complete ","已":"Has ",
-                          "正在初始化中":"Initializing ","實時":"Real-Time ","到":"For ","您確定":"Are You Sure You ","狀態":"State",
-                          "成功":"Success ","清理":"Cleanup ","執行":"Execute ","警告":"Warning ","輸入了":"Input ","立即刪除":"Delete Now",
-                          "搜尋":"Search ","此":"This ","要":"Want To ","安全模式":"Safe Mode","您":"You ","不安全":"Unsafe","確定":"OK",
-                          "命令":"Command","不是有效":"Is Not A Valid ","修改":"Modify ","用戶":"User ","使用":"Use ","哈希":"Hash","更多":"More",
-                          "重置":"Reset ","網路":"Network ","配置":"Config ","是":"Is ","選項":"Options ","監控":"Monitor ","連接":"Connect ",
-                          "進程":"Process ","可以":"To ","中":"","並":"And ","攔截":"Block ","引導":"Boot ","分區":"Partition ","刪除":"Delete ",
-                          "掃描":"Scan ","設定":"Setting","關於":"About","靈敏度":"Sensitivity ","提高":"Improve ","高":"High ","返回":"Back",
-                          "模式":"Mode ","但":"But ","這也可能會誤殺":"It Can Also Manslaughter ","安全":"Security ","指令":"","會":"Can ",
-                          "白色主題":"White","黑色主題":"Black","黃色主題":"Yellow","藍色主題":"Blue","紅色主題":"Red","綠色主題":"Green",
-                          "顯色":"Color ","主題":"Themes ","語言":"Language ","製作":"Make","介面":"GUI ","核心":"Core ","服務":"Services ",
-                          "測試人員":"Testers","官方網站":"Website","許可條款":"License Terms","全盤":"Full ","隱私":"Privacy ","工具":"Tools",
-                          "開發":"Devs ","更多":"More ","管理":"Manage","垃圾":"File ","啟動":"Enable ","關閉":"Disabled ","輸出":"Output",
-                          "版本資訊":"Information","私密":"Private ","粉碎":"Shredding","自訂":"Customize ","分析":"Analyze ","新":"New ",
-                          "變更":"Change ","位置查詢":"Location Query","總數":"Total","位元":"Bits","函數":"Func","本機":"Computer ",
-                          "加密":"Encrypt ","解密":"Decrypt ","前":"Before","後":"After","文字":"Text","值":"Value ","密碼":"Password ",
-                          "名":"Name","稱":"","類型":"Type","資料":"Data","日誌":"Log","停止":"Stop ","註冊表":"Regedit ","立即":"","  ":" "}}

PYAS_Model.py

@@ -1 +0,0 @@
-function_list = [['_CorExeMain'], ['GetProcessHeap', 'RtlUnwind', 'RaiseException', 'HeapSize', 'TerminateProcess', 'UnhandledExceptionFilter', 'SetUnhandledExceptionFilter', 'IsDebuggerPresent', 'HeapDestroy', 'HeapCreate', 'VirtualFree', 'Sleep', 'GetStdHandle', 'GetTimeZoneInformation', 'GetACP', 'SetHandleCount', 'GetFileType', 'GetStartupInfoA', 'GetCommandLineA', 'GetEnvironmentStrings', 'FreeEnvironmentStringsW', 'GetEnvironmentStringsW', 'QueryPerformanceCounter', 'GetSystemTimeAsFileTime', 'LCMapStringA', 'LCMapStringW', 'GetConsoleCP', 'GetConsoleMode', 'GetStringTypeA', 'GetStringTypeW', 'SetStdHandle', 'WriteConsoleA', 'GetConsoleOutputCP', 'WriteConsoleW', 'GetDateFormatA', 'GetTimeFormatA', 'GetDriveTypeA', 'SetEnvironmentVariableA', 'HeapReAlloc', 'VirtualAlloc', 'SetCurrentDirectoryA', 'HeapAlloc', 'HeapFree', 'GetTickCount', 'GetCurrentDirectoryA', 'LocalFileTimeToFileTime', 'CreateFileA', 'GetShortPathNameA', 'GetVolumeInformationA', 'GetCurrentProcess', 'DuplicateHandle', 'GetFileSize', 'SetEndOfFile', 'UnlockFile', 'LockFile', 'FlushFileBuffers', 'SetFilePointer', 'WriteFile', 'ReadFile', 'DeleteFileA', 'MoveFileA', 'GetOEMCP', 'GetCPInfo', 'InterlockedIncrement', 'SystemTimeToFileTime', 'GetThreadLocale', 'GlobalFlags', 'TlsFree', 'DeleteCriticalSection', 'LocalReAlloc', 'TlsSetValue', 'TlsAlloc', 'InitializeCriticalSection', 'GlobalHandle', 'GlobalReAlloc', 'EnterCriticalSection', 'TlsGetValue', 'LeaveCriticalSection', 'LocalAlloc', 'CloseHandle', 'GetPrivateProfileStringA', 'WritePrivateProfileStringA', 'GetPrivateProfileIntA', 'GetCurrentProcessId', 'GetCurrentThread', 'ConvertDefaultLocale', 'GetModuleFileNameA', 'EnumResourceLanguagesA', 'GetLocaleInfoA', 'lstrcmpA', 'GetDiskFreeSpaceA', 'GetFullPathNameA', 'GetTempFileNameA', 'GetFileTime', 'SetFileTime', 'GetFileAttributesA', 'FreeResource', 'GetCurrentThreadId', 'GlobalGetAtomNameA', 'GlobalAddAtomA', 'GlobalFindAtomA', 'GlobalDeleteAtom', 'lstrcmpW', 'GetVersionExA', 'GlobalFree', 'GlobalAlloc', 'FormatMessageA', 'LocalFree', 'GlobalLock', 'GlobalUnlock', 'MulDiv', 'FindFirstFileA', 'FileTimeToLocalFileTime', 'FileTimeToSystemTime', 'FindNextFileA', 'FindClose', 'FreeLibrary', 'InterlockedDecrement', 'LockResource', 'SizeofResource', 'LoadResource', 'FindResourceA', 'ExitProcess', 'GetVersion', 'CompareStringA', 'GetModuleHandleA', 'LoadLibraryA', 'GetProcAddress', 'lstrcmpiA', 'SetLastError', 'GetLastError', 'InterlockedExchange', 'GetStringTypeExA', 'MultiByteToWideChar', 'CompareStringW', 'WideCharToMultiByte', 'lstrlenA', 'FreeEnvironmentStringsA', 'GetComputerNameA', 'CopyAcceleratorTableA', 'CreateMenu', 'PostThreadMessageA', 'GetTabbedTextExtentA', 'RegisterClipboardFormatA', 'GetSysColorBrush', 'UnregisterClassA', 'LoadCursorA', 'DestroyCursor', 'SetCursorPos', 'SetCapture', 'RedrawWindow', 'InflateRect', 'UnpackDDElParam', 'ReuseDDElParam', 'LoadMenuA', 'DestroyMenu', 'ReleaseCapture', 'LoadAcceleratorsA', 'InsertMenuItemA', 'CreatePopupMenu', 'BringWindowToTop', 'SetMenu', 'TranslateAcceleratorA', 'IsZoomed', 'WindowFromPoint', 'KillTimer', 'SetTimer', 'SetRect', 'SetParent', 'GetSystemMenu', 'DeleteMenu', 'SetRectEmpty', 'IsRectEmpty', 'GetDesktopWindow', 'CreateDialogIndirectParamA', 'GetNextDlgTabItem', 'EndDialog', 'GetMessageA', 'TranslateMessage', 'GetActiveWindow', 'GetCursorPos', 'ValidateRect', 'GetWindowThreadProcessId', 'ShowOwnedPopups', 'SetCursor', 'PostQuitMessage', 'IsWindowEnabled', 'SetWindowTextA', 'IsDialogMessageA', 'SetDlgItemTextA', 'RegisterWindowMessageA', 'LoadIconA', 'SendDlgItemMessageA', 'WinHelpA', 'GetCapture', 'SetWindowsHookExA', 'CallNextHookEx', 'GetClassNameA', 'SetPropA', 'GetPropA', 'RemovePropA', 'SetFocus', 'GetWindowTextLengthA', 'GetWindowTextA', 'GetLastActivePopup', 'SetActiveWindow', 'DispatchMessageA', 'BeginDeferWindowPos', 'EndDeferWindowPos', 'GetDlgItem', 'GetTopWindow', 'DestroyWindow', 'GetMessageTime', 'GetMessagePos', 'PeekMessageA', 'MapWindowPoints', 'ScrollWindow', 'TrackPopupMenu', 'GetKeyState', 'SetScrollRange', 'GetScrollRange', 'SetScrollPos', 'GetScrollPos', 'SetForegroundWindow', 'ShowScrollBar', 'IsWindowVisible', 'GetMenu', 'PostMessageA', 'MessageBoxA', 'CreateWindowExA', 'GetClassInfoExA', 'GetClassInfoA', 'RegisterClassA', 'EqualRect', 'DeferWindowPos', 'GetScrollInfo', 'SetScrollInfo', 'PtInRect', 'DefWindowProcA', 'CallWindowProcA', 'SetWindowPos', 'OffsetRect', 'IntersectRect', 'SystemParametersInfoA', 'GetWindowPlacement', 'GetWindowRect', 'GetSystemMetrics', 'GetWindow', 'GetMenuStringA', 'AppendMenuA', 'GetMenuItemID', 'InsertMenuA', 'GetMenuItemCount', 'GetSubMenu', 'RemoveMenu', 'GetSysColor', 'EndPaint', 'BeginPaint', 'GetWindowDC', 'ClientToScreen', 'ScreenToClient', 'GrayStringA', 'DrawTextExA', 'DrawTextA', 'TabbedTextOutA', 'FillRect', 'SetWindowRgn', 'DrawIcon', 'FindWindowA', 'LockWindowUpdate', 'GetDCEx', 'DestroyIcon', 'GetClassLongA', 'GetMenuItemInfoA', 'GetDlgCtrlID', 'IsChild', 'InvalidateRect', 'IsIconic', 'AdjustWindowRectEx',Line truncated

PYAS_Version.py

@@ -0,0 +1,11 @@
+import pyinstaller_versionfile
+
+pyinstaller_versionfile.create_versionfile(
+output_file="versionfile.txt",
+version='3.3.3',
+company_name="PYAS Security",
+file_description="Python Antivirus Software",
+internal_name="PYAS",
+legal_copyright="PYAS Security",
+original_filename="PYAS.exe",
+product_name="PYAS")

PYAS_Version_File.py

@@ -1,10 +0,0 @@
-import pyinstaller_versionfile
-pyinstaller_versionfile.create_versionfile(
-    output_file="versionfile.txt",
-    version='2.6.6',
-    company_name="PYAS Security",
-    file_description="Python Antivirus Software",
-    internal_name="PYAS",
-    legal_copyright="© PYAS Security",
-    original_filename="PYAS.exe",
-    product_name="PYAS")

README.md

@@ -1,21 +1,72 @@
-# PYAS (Python Antivirus Software)
-![PYAS](https://user-images.githubusercontent.com/85057800/202692146-e55848d5-7e24-405d-b33d-f4fa3883fba6.png)
+# PYAS
 
+Python antivirus software uses deep learning and behavioral monitoring to block threats!
 
-## Official Website 
-https://pyantivirus.wixsite.com/pyas , 
-https://github.com/87owo/PYAS
+![PYAS_UI](https://github.com/user-attachments/assets/68765836-7272-482f-b8cd-d8ba728d88ab)
 
-## MIT License
-https://github.com/87owo/PYAS/blob/main/LICENSE.md
+## Readme Language
+
+English : https://github.com/87owo/PYAS/blob/main/README.md
+
+繁體中文 : https://github.com/87owo/PYAS/blob/main/README_zh_TW.md
+
+简体中文 : https://github.com/87owo/PYAS/blob/main/README_zh_CN.md
+
+## Requirements
+
+Python 3.10 is recommended. Other Python versions may require different pip commands.
+
+```
+pip install numpy==1.26.4
+pip install onnxruntime==1.18.1
+pip install pefile==2023.2.7
+pip install Pillow==11.0.0
+pip install pyperclip==1.9.0
+pip install PySide6==6.9.1
+pip install requests==2.32.4
+pip install yara-python==4.5.4
+```
+
+## File Information
+
+The following lists the storage locations of all relevant code and other related documents.
+
+```
+PYAS/
+├── Engine/
+│   ├── Models/              # Directory for ONNX AI models
+│   └── Rules/               # Directory for YARA and network rules
+│
+├── Plugins/
+│   └── Filter/              # Windows kernel driver for security protection
+│
+├── PYAS.py                  # Main application and GUI interface
+├── PYAS_Config.py           # Configuration handling and global parameters
+├── PYAS_Engine.py           # YARA and ONNX Scanning engine
+├── PYAS_Interface.py        # User interface definitions and widget logic
+├── PYAS_Resource.py         # Static picture resource management
+├── PYAS_Version.py          # Packaging and version info
+└── ...                      # Other supplementary folders and files
+```
+
+## Packaged Releases
+
+Packaged Releases Download: https://github.com/87owo/PYAS/releases
 
 ## Support System
-Windows 8.1, 10, 11 (64-bit), Ram 1GB, Rom 1GB or higher
 
-## Import Module
-os, sys, time, json, psutil, struct, win32api, win32con, requests, socket, platform, cryptocode, subprocess, pefile, hashlib, PYAS_Language, threading, random, PyQt5, PYAS_UI
+| Config    | Permissions   | System version | Available memory | Available storage |
+|-----------|---------------|----------------|------------------|-------------------|
+| Minimum   | Administrator | Windows 10     | 200MB            | 100MB             |
+| Recommend | Administrator | Windows 10     | 300MB            | 200MB             |
+| Optimal   | Administrator | Windows 11     | 500MB            | 200MB             |
 
-## Special Thanks
-Wix, VirusShare, mtkiao129, LenStevens
+## Official Website
 
-Copyright© 2020~2023 PYAS Security By 87owo
+Official Website : https://pyantivirus.wixsite.com/pyas
+
+Open Source Website : https://github.com/87owo/PYAS
+
+## Project License
+
+https://github.com/87owo/PYAS/blob/main/LICENSE.md

README_zh_CN.md

@@ -0,0 +1,72 @@
+# PYAS
+
+以 Python 开发的杀毒软件，结合深度学习与行为监控来阻挡威胁！
+
+![PYAS_UI](https://github.com/user-attachments/assets/68765836-7272-482f-b8cd-d8ba728d88ab)
+
+## 说明语言
+
+English : https://github.com/87owo/PYAS/blob/main/README.md
+
+繁體中文 : https://github.com/87owo/PYAS/blob/main/README_zh_TW.md
+
+简体中文 : https://github.com/87owo/PYAS/blob/main/README_zh_CN.md
+
+## 安装需求
+
+建议使用 Python 3.10。其他版本的 Python 可能需要不同的 pip 指令。
+
+```
+pip install numpy==1.26.4
+pip install onnxruntime==1.18.1
+pip install pefile==2023.2.7
+pip install Pillow==11.0.0
+pip install pyperclip==1.9.0
+pip install PySide6==6.9.1
+pip install requests==2.32.4
+pip install yara-python==4.5.4
+```
+
+## 文件讯息
+
+以下列出所有相关代码与文件的存放位置。
+
+```
+PYAS/
+├── Engine/
+│   ├── Models/              # ONNX 深度学习模型目录
+│   └── Rules/               # YARA 与网络规则目录
+│
+├── Plugins/
+│   └── Filter/              # 用于安全防护的 Windows 核心驱动
+│
+├── PYAS.py                  # 主程式与图形界面 (GUI)
+├── PYAS_Config.py           # 组态处理与全域参数
+├── PYAS_Engine.py           # YARA 与 ONNX 扫描引擎
+├── PYAS_Interface.py        # 使用者介面定义与元件逻辑
+├── PYAS_Resource.py         # 静态图片资源管理
+├── PYAS_Version.py          # 打包与版本资讯
+└── ...                      # 其他补充文件夹与文件
+```
+
+## 安装版本
+
+打包发行版下载：https://github.com/87owo/PYAS/releases
+
+## 系统需求
+
+| 配置需求 | 权限需求    | 系统需求        | 可用內存 | 可用储存空间 |
+| ---- | ------- | ----------- | ----- | ------ |
+| 最低 | 系统管理员 | Windows 10  | 200MB | 100MB  |
+| 建议 | 系统管理员 | Windows 10  | 300MB | 200MB  |
+| 最佳 | 系统管理员 | Windows 11  | 500MB | 200MB  |
+
+## 官方网站
+
+官方网站 : https://pyantivirus.wixsite.com/pyas
+
+开源网站 : https://github.com/87owo/PYAS
+
+## 授权条款
+
+https://github.com/87owo/PYAS/blob/main/LICENSE.md

README_zh_TW.md

@@ -0,0 +1,72 @@
+# PYAS
+
+以 Python 開發的防毒軟體，結合深度學習與行為監控來阻擋威脅！
+
+![PYAS_UI](https://github.com/user-attachments/assets/68765836-7272-482f-b8cd-d8ba728d88ab)
+
+## 說明語言
+
+English : https://github.com/87owo/PYAS/blob/main/README.md
+
+繁體中文 : https://github.com/87owo/PYAS/blob/main/README_zh_TW.md
+
+简体中文 : https://github.com/87owo/PYAS/blob/main/README_zh_CN.md
+
+## 安裝需求
+
+建議使用 Python 3.10。其他版本的 Python 可能需要不同的 pip 指令。
+
+```
+pip install numpy==1.26.4
+pip install onnxruntime==1.18.1
+pip install pefile==2023.2.7
+pip install Pillow==11.0.0
+pip install pyperclip==1.9.0
+pip install PySide6==6.9.1
+pip install requests==2.32.4
+pip install yara-python==4.5.4
+```
+
+## 檔案資訊
+
+以下列出所有相關程式碼與文件的存放位置。
+
+```
+PYAS/
+├── Engine/
+│   ├── Models/              # ONNX 深度學習模型目錄
+│   └── Rules/               # YARA 與網路規則目錄
+│
+├── Plugins/
+│   └── Filter/              # 用於安全防護的 Windows 核心驅動程式
+│
+├── PYAS.py                  # 主程式與圖形介面 (GUI)
+├── PYAS_Config.py           # 組態處理與全域參數
+├── PYAS_Engine.py           # YARA 與 ONNX 掃描引擎
+├── PYAS_Interface.py        # 使用者介面定義與元件邏輯
+├── PYAS_Resource.py         # 靜態圖片資源管理
+├── PYAS_Version.py          # 打包與版本資訊
+└── ...                      # 其他補充資料夾與檔案
+```
+
+## 安裝版本
+
+打包發行版下載：https://github.com/87owo/PYAS/releases
+
+## 系統需求
+
+| 配置需求 | 權限需求    | 系統需求        | 可用記憶體 | 可用儲存空間 |
+| ---- | ------- | ----------- | ----- | ------ |
+| 最低 | 系統管理員 | Windows 10  | 200MB | 100MB  |
+| 建議 | 系統管理員 | Windows 10  | 300MB | 200MB  |
+| 最佳 | 系統管理員 | Windows 11  | 500MB | 200MB  |
+
+## 官方網站
+
+官方網站 : https://pyantivirus.wixsite.com/pyas
+
+開源網站 : https://github.com/87owo/PYAS
+
+## 授權條款
+
+https://github.com/87owo/PYAS/blob/main/LICENSE.md