Add files via upload

add Python module list

LICENSE.md

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2020-2023 87owo (PYAS Security)
+Copyright (c) 2020-2024 87owo (PYAS Security)
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

Library/PYAS.json

@@ -1,5 +0,0 @@
-{
-    "language": "en_US",
-    "high_sensitivity": 0,
-    "cloud_services": 1
-}

PYAS_Compress.py

@@ -0,0 +1,31 @@
+import json, hashlib
+
+class ListCompressor:
+    def __init__(self):
+        self.model = {}
+
+    def save_model(self, file_name):
+        with open(file_name, 'w') as f:
+            json.dump(self.model, f)
+        print(f"\nModel Is Saved In {file_name}")
+
+    def load_model(self, model_data):
+        if isinstance(model_data, str):
+            with open(model_data, 'r') as f:
+                model_data = json.load(f)
+        self.model = model_data
+
+    def train_model(self, label, data):
+        if label not in self.model:
+            self.model[label] = []
+        for lst in data:
+            self.model[label].append(hashlib.md5(''.join(map(str, lst)).encode()).hexdigest()[:8])
+
+    def predict(self, new_list):
+        for label, items in self.model.items():
+            if label != 'word' and hashlib.md5(''.join(map(str, new_list)).encode()).hexdigest()[:8] in items:
+                return True
+        return False
+
+    def get_label(self):
+        return list(self.model.keys())[0]

PYAS_Extension.py

@@ -0,0 +1,8 @@
+slist = [".exe",".dll",".com",".msi",".scr",
+         ".js",".bat",".cmd",".ps1",".vbs"]
+
+alist = [".ppt",".pptx",".wps",".txt",".rtf",
+         ".pdf",".xls",".xlsx",".doc",".docx",
+         ".jpg",".jpeg",".png",".webp",".gif",
+         ".mp3",".wav",".aac",".ogg",".flac",
+         ".mp4",".avi",".mov",".wmv",".mkv"]

PYAS_Function.vdb

@@ -0,0 +1 @@
+{"2024-02-19 09:09:40": ["f8eaca69", "f0f5732f", "1b02d2da", "9b83055e", "fa39258e", "7e7275ce", "ebad499a", "628691a4", "4cbbe367", "f9f96fde", "2e3086b1", "dc2bd521", "62a39640", "7feb71ad", "724103b9", "8b136daa", "5e47ce27", "21bb3aef", "d2668208", "cb9e21ee", "d1ad686f", "ec90753b", "55e78944", "55634643", "bafe8409", "632f4531", "319e2db4", "ecf51f02", "cf04dfb7", "c8756155", "e4753bc3", "57b1794e", "0513868a", "c069d7d5", "776c99fe", "07483ddf", "62a348cf", "55433105", "86f8c21f", "68b4c29f", "221b87e3", "736a55d1", "5dd1e0c9", "1f53d69f", "b2c4204c", "d1e142b8", "00b0d86d", "f1dc8325", "a51343e5", "0e2d378e", "8b6a35fc", "ac0b27eb", "87074aa5", "2bd013a0", "bee130c7", "d90657b4", "c21af82e", "d2528b9e", "e81da5d7", "0ae06db8", "acf0fbaa", "b16889df", "a072f779", "97be1e02", "94c2d42c", "f074f5b4", "e1240e10", "6c48e028", "ee0a9c21", "2beae172", "c969fd9d", "846a7177", "39ae5ad7", "6a0c7324", "9af5a01e", "bdcb5a86", "596a470f", "191f1163", "f30de2e7", "14688765", "0facf2a6", "94691d9a", "e952305f", "20cb7eec", "18b3bf16", "36888e71", "30739d24", "e91746a4", "1a5cb45a", "23191f29", "e26dfd80", "d8261ac3", "94bff605", "94497ba5", "acf3bb61", "ce095672", "aea0475c", "d4da4030", "b6a46047", "f25e7c70", "010bd7e6", "4e552f39", "4c626e62", "cf88078b", "4d57d439", "35eeb9fc", "f1ae2ce5", "3efc231b", "088b5c3d", "234f232b", "be39b5c7", "6d75bcaa", "0157ab1a", "fdf069cb", "a1895d33", "957e7561", "967929f9", "43d61eab", "aebc3614", "fbe63639", "e3e0254f", "0593e9a2", "fa8ceeae", "11b631fb", "71fa160a", "c838e850", "7fe931dd", "30547b8f", "5dea0cda", "05178537", "f1bde64f", "85a4b8a4", "ef2ac9f8", "af0d6ebb", "f242ebc1", "6be2182a", "39d583d4", "a33c2ab4", "e65f4785", "73b78451", "65284f49", "09082309", "cf215013", "f14e284b", "690b5995", "f0949aca", "3c36ae8e", "6be14646", "13102764", "8d8e66bb", "d4afaff6", "a141f55e", "69134125", "7782a5e0", "07687215", "0077b966", "16eb1d17", "19d85999", "295e94f1", "3cbb09cf", "61099a43", "1fe35f2e", "10c1954f", "833b1998", "18b6668e", "d0c36eb5", "dfea1c9a", "b5f2dd11", "15bbc35a", "1e54fc8c", "522ec9f6", "3d19c3b6", "b81c15eb", "2ba7934b", "30ff5635", "23edb694", "4beef072", "2f7ca0b7", "fcaa2063", "8ac3e370", "72646e9e", "be5348af", "b6ed92dc", "c11f9756", "8f74e253", "29a60790", "26dbaaa7", "9542f014", "44349994", "d8efdadd", "ebaa875f", "5dc456d1", "c90d1128", "cea3f4a5", "7bf6f523", "022ab8d8", "5606be13", "839f31ff", "9fe86003", "f45011dd", "c8ee6a44", "72e25499", "d0008616", "d6d13cfd", "d41f3fb7", "7bf71a77", "302c6754", "3bd56a87", "639a51eb", "3025c6b7", "018b8805", "b233ddd9", "9297a1cb", "8d394492", "6399f135", "f516133b", "b71b7a0d", "897e3a5f", "6cc57095", "184ccf63", "a51484ee", "d786ef37", "57d2bb57", "b6ec2abf", "c10f2cf6", "5064bd10", "0abbe6f4", "a0a8dfd1", "cb25c53f", "3e3a904e", "35ebf1ea", "ec883603", "2f3f077c", "e0b6a475", "817d5bcb", "e7e4805a", "1ed5d4af", "a8ac4be7", "5cfe1ec3", "6c3d2e9a", "cd48542a", "3ae3b681", "781b603d", "99e3aca7", "e4e549d2", "d3cb5549", "a2b9d78f", "b47d2a97", "5a34fc94", "eda8c8fd", "5529b024", "068c506c", "35385307", "8c0d1b23", "7c5e3180", "41858343", "861a909a", "96471e95", "97255487", "506d0366", "e1aee43f", "1f4f4ab1", "99ad8db1", "cffd3e92", "cc431464", "ece85b50", "de6d3489", "9425f525", "c9dfa23f", "a97155f3", "d440e8ed", "002e23f2", "96474097", "08798831", "34962f83", "31f03b48", "979532a1", "5b692416", "5c2a1c1e", "6d642743", "4492b29b", "1e62932b", "fb15345a", "c56d5e02", "86a8a864", "bb94e602", "1bf7af93", "4f85c567", "6104f9a3", "971f7f79", "cebe043f", "f1bede8b", "5458e526", "5354fc59", "86a6529d", "8ace816a", "355885b6", "4211942c", "bd2797bd", "4794d596", "7e5013a9", "333b7df1", "aa818d5e", "14238173", "39bae570", "c8476924", "8c919cb4", "59d0bcc8", "55cd1300", "6fec3fac", "62145122", "29a47420", "54224ade", "8ec73106", "e29225d6", "0b95337c", "7abd0227", "9342c1e3", "20879280", "3cbe70c8", "ce494c91", "d722b746", "ec842bbb", "090a5016", "1176c81f", "327018cc", "f60b523e", "b48f6dcc", "4c1e1a2e", "8e108bc2", "9d8ed7e1", "1c623712", "df5292b9", "1aa3b54f", "98ecee4c", "0ac1e588", "0ab6b9b5", "5ef75e18", "5668ab16", "6043426b", "226217c3", "8da2c149", "1250f47d", "43ca2196", "6ff4ce20", "ccdbc95c", "eabebfd0", "c4ca6358", "5694217b", "a69a2aba", "10f2a2b1", "539bc501", "4c44a17c", "5008e44f", "2fd8a8a8", "a828b92d", "ee6b50e6", "1bc9bab0", "9dbfcd08", "640f2927", "e7e38d5e", "a98e1d1d", "7033ad33", "20fcecfd", "19c928b8", "2038f57b", "d578162e", "051020bf", "79f68a23", "23269a41", "1938493f", "34d7276a", "6aa98b23", "47a32506", "43adb03a", "51fe1954", "6a2eaaab", "5b28a176", "4f5a3b25", "136c1369", "ff778b87", "0016c379", "79d85fa6", "15826bb9", "8f737801", "6357bd68", "086c7679", "d9e4a2da", "1d067fed", "44dde6a5", "f8b69084", "1b146d77", "1488771c", "c0d7b8fb", "ef0a1059", "2fe5822d", "6c1c79f2", "f4eb7828", "c605b02a", "95840477", "9ea12215", "5e570d46", "51453f5f", "4ce7e503", "c9f98890", "de09d16e", "f8984bae", "fbca4af8", "0d8e37d4", "8c43a7fe", "65f145c0", "5f213b95", "e425c385", "a470767a", "19c39Line truncated

PYAS_Language.py

@@ -1,47 +1,54 @@
-translations = {"zh_TW": {"已开启":"已開啟","已关闭":"已關閉","On":"已開啟","Off":"已關閉"},
-                "zh_CN": {"已開啟":"已开启","已關閉":"已关闭","On":"已开启","Off":"已关闭",
-                          "軟體":"软件","檔案":"文件","確定":"确认","設定":"设置","關於":"关于",
-                          "錯誤":"错误","實時":"实时","發現":"发现","關閉":"关闭","裝置":"设备",
-                          "總數":"总数","註冊":"注册","圖標":"图标","路徑":"路径","網路":"网络",
-                          "位元":"字节","增":"增","單":"单","簽":"签","無":"无","關":"关",
-                          "項":"项","掃":"扫","試":"试","黃":"黄","嗎":"吗","防":"保","鑰":"钥",
-                          "當":"当","後":"后","護":"护","導":"导","區":"区","復":"复","攔":"拦",
-                          "請":"请","統":"统","刪":"删","進":"进","個":"个","選":"选","啟":"启",
-                          "監":"监","並":"并","徑":"径","盤":"盘","隱":"隐","動":"动","狀":"状",
-                          "誌":"志","靈":"灵","這":"这","會":"会","題":"题","擇":"择","語":"语",
-                          "顯":"显","變":"变","戶":"户","碼":"码","雲":"云","訂":"订","稱":"称",
-                          "類":"类","輸":"输","執":"执","數":"数","尋":"寻","網":"网","詢":"询",
-                          "製":"制","員":"员","許":"许","條":"条","藍":"蓝","紅":"红","綠":"绿",
-                          "態":"态","務":"务","連":"连","檢":"检","測":"测","強":"强"},
-                "en_US": {"已開啟":"On","已關閉":"Off","已开启":"On","已关闭":"Off","，":", ",
-                          "立即刪除":"Delete Now","安全模式":"Safe Mode","官方網站":"Website",
-                          "許可條款":"License Terms","可疑":"Suspicious ","惡意軟體":"Malware ",
-                          "啟用":"Enable ","禁用":"Disable ","正在初始化中":"Initializing ",
-                          "正在掃描":"Scanning ","正在刪除":"Deleting ","最小化到":"Minimize To ",
-                          "確定要":"Sure Want To ","靈敏度":"Sensitivity ","更新":"Update",
-                          "白色主題":"White","黑色主題":"Black","黃色主題":"Yellow","紅色主題":"Red",
-                          "藍色主題":"Blue","綠色主題":"Green","語言":"Language ","製作":"Make",
-                          "測試人員":"Testers","版本資訊":"Information","無效簽名":"Unsign ",
-                          "註冊表":"Registry ","退出":"Quit ","檔案":"File ","當前":"Currently ",
-                          "狀態":"State ","掃描":"Scan ","工具":"Tools ","防護":"Protect ",
-                          "失敗":"Failed ","請":"Please ","路徑":"Path ","方式":"Method ",
-                          "需要":"Need ","病毒":"Virus ","選擇":"Select ","返回":"Back",
-                          "受到":"Been ","錯誤":"Error","完成":"Complete ","引擎":"Engine ",
-                          "托盤":"Tray ","圖標":"Icon ","不安全":"Unsafe","增強":"Enhanced ",
-                          "系統":"System ","雲端":"Cloud ","重啟":"Reboot ","修復":"Repair ",
-                          "裝置":"Device ","發現":"Found ","成功":"Success ","清理":"Cleanup ",
-                          "確定":"OK","執行":"Execute ","警告":"Warning ","使用":"Use ",
-                          "網路":"Network ","變更":"Change ","總數":"Total","結束":"End ",
-                          "選項":"Options ","監控":"Monitor ","連接":"Connect ","可以":"To ",
-                          "進程":"Process ","攔截":"Block ","引導":"Boot ","刪除":"Delete ",
-                          "分區":"Partition ","設定":"Settings","關於":"About","模式":"Mode ",
-                          "提高":"Improve ","安全":"Security ","顯色":"Color ","主題":"Themes ",
-                          "風險":"Risk ","介面":"GUI ","核心":"Core ","服務":"Services ",
-                          "管理":"Manage","所有":"All ","全盤":"Full ","日誌":"Log",
-                          "垃圾":"Junk ","位元":"byte ","本機":"Computer ","停止":"Stop ",
-                          "增加到":"Add File To ","白名單":"White List ","軟體":"Software ",
-                          "增加":"Add","移除":"Delete","項目":"Items ","生成":"Create ",
-                          "開啟":"Open ","您":"You ","此":"This ","並":"And ","未":"Not ",
-                          "高":"High ","新":"New ","和":"And ","會":"Can ","密鑰":"Key ",
-                          "已":"Has ","立即":"","顯示":"","個":"","的":"","嗎":"","中":"",
-                          "了":"","行":"","稱":"","  ":" "}}
+translate_dict = {
+    "zh_TW": {"已开启":"已開啟","已关闭":"已關閉","On":"已開啟","Off":"已關閉"},
+    "zh_CN": {"已開啟":"已开启","已關閉":"已关闭","On":"已开启","Off":"已关闭",
+              "軟體":"软件","檔案":"文件","確定":"确认","設定":"设置","關於":"关于",
+              "錯誤":"错误","實時":"实时","發現":"发现","關閉":"关闭","裝置":"设备",
+              "總數":"总数","註冊":"注册","圖標":"图标","路徑":"路径","網路":"网络",
+              "位元":"字节","彈窗":"弹窗","靈敏":"敏感","誤報":"误报","複製":"复制",
+              "訊":"讯","項":"项","掃":"扫","試":"试","黃":"黄","嗎":"吗","防":"保",
+              "鑰":"钥","當":"当","後":"后","護":"护","導":"导","區":"区","復":"复",
+              "攔":"拦","請":"请","統":"统","刪":"删","進":"进","個":"个","選":"选",
+              "啟":"启","監":"监","並":"并","徑":"径","盤":"盘","隱":"隐","動":"动",
+              "狀":"状","誌":"志","這":"这","會":"会","題":"题","擇":"择","語":"语",
+              "無":"无","顯":"显","變":"变","戶":"户","碼":"码","雲":"云","介":"界",
+              "稱":"称","類":"类","輸":"输","執":"执","數":"数","尋":"寻","網":"网",
+              "詢":"询","製":"制","員":"员","許":"许","條":"条","藍":"蓝","紅":"红",
+              "綠":"绿","態":"态","務":"务","連":"连","檢":"检","測":"测","關":"关",
+              "強":"强","驅":"驱","為":"为","腳":"脚","增":"增","單":"单","開":"开",
+              "惡":"恶","據":"据","庫":"库","經":"经","敗":"败"},
+    "en_US": {"已開啟":"On","已關閉":"Off","已开启":"On","已关闭":"Off","，":", ",
+              "立即刪除":"Delete Now","安全模式":"Safe Mode","官方網站":"Website",
+              "惡意檔案":"Virus ","惡意軟體":"Malware ","勒索行為":"Ransom ",
+              "惡意腳本":"Script ","惡意行為":"Behavior ","可疑軟體":"Suspicious ",
+              "許可條款":"License Terms","惡意":"Malicious","可疑":"Suspicious",
+              "啟用":"Enable ","禁用":"Disable ","正在初始化中":"Initializing ",
+              "正在掃描":"Scanning ","正在刪除":"Deleting ","最小化到":"Minimize To ",
+              "確定要":"Sure Want To ","靈敏度":"Sensitivity ","更新":"Update ",
+              "白色主題":"White","黃色主題":"Yellow","紅色主題":"Red","語言":"Language ",
+              "藍色主題":"Blue","綠色主題":"Green","自定主題":"Custom","最新":"Latest ",
+              "測試人員":"Testers","版本資訊":"Information","通訊":"Communication ",
+              "註冊表":"Registry ","退出":"Quit ","檔案":"File ","當前":"Currently ",
+              "狀態":"State ","掃描":"Scan ","工具":"Tools ","防護":"Protect ",
+              "失敗":"Failed ","請":"Please ","路徑":"Path ","方式":"Method ",
+              "需要":"Need ","病毒":"Virus ","選擇":"Select ","返回":"Back",
+              "受到":"Been ","錯誤":"Error","完成":"Complete ","引擎":"Engine ",
+              "托盤":"Tray ","圖標":"Icon ","不安全":"Unsafe","增強":"Enhanced ",
+              "系統":"System ","雲端":"Cloud ","重啟":"Reboot ","修復":"Repair ",
+              "裝置":"Device ","發現":"Found ","成功":"Success ","清理":"Cleanup ",
+              "確定":"OK","執行":"Execute ","警告":"Warning ","使用":"Use ",
+              "網路":"Network ","變更":"Change ","總數":"Total","結束":"End ",
+              "選項":"Options ","監控":"Monitor ","連接":"Connect ","可以":"To ",
+              "進程":"Process ","攔截":"Block ","引導":"Boot ","刪除":"Delete ",
+              "分區":"Partition ","設定":"Settings","關於":"About","模式":"Mode ",
+              "提高":"Improve ","安全":"Security ","顯色":"Color ","主題":"Themes ",
+              "風險":"Risk ","介面":"GUI ","核心":"Core ","服務":"Services ",
+              "管理":"Manage","所有":"All ","您":"You ","取消":"Cancel ","未":"Not ",
+              "垃圾":"Junk ","位元":"byte ","本機":"Computer ","停止":"Stop ",
+              "增加到":"Add File To ","白名單":"White List ","軟體":"Software ",
+              "增加":"Add","移除":"Delete","項目":"Items ","生成":"Create ","稱":"",
+              "複製":"Copy ","開啟":"Open ","此":"This ","並":"And ","全盤":"Full ",
+              "已經是":"Already ","數據庫":"Database ","誤報":"False Positive ",
+              "高":"High ","新":"New ","和":"And ","可能會":"Possible ","會":"Can ",
+              "日誌":"Log","已":"Has ","彈窗":"Window ","要":"To ","驅動":"Drive ",
+              "的":"","顯示":"","個":"","嗎":"","中":"","了":"","行":"","立即":"",
+              "密鑰":"Key ","檢測":"Detect ","製作":"Make","  ":" "}}

PYAS_Model.py

@@ -1 +0,0 @@
-function_list = [['_CorExeMain'], ['GetProcessHeap', 'RtlUnwind', 'RaiseException', 'HeapSize', 'TerminateProcess', 'UnhandledExceptionFilter', 'SetUnhandledExceptionFilter', 'IsDebuggerPresent', 'HeapDestroy', 'HeapCreate', 'VirtualFree', 'Sleep', 'GetStdHandle', 'GetTimeZoneInformation', 'GetACP', 'SetHandleCount', 'GetFileType', 'GetStartupInfoA', 'GetCommandLineA', 'GetEnvironmentStrings', 'FreeEnvironmentStringsW', 'GetEnvironmentStringsW', 'QueryPerformanceCounter', 'GetSystemTimeAsFileTime', 'LCMapStringA', 'LCMapStringW', 'GetConsoleCP', 'GetConsoleMode', 'GetStringTypeA', 'GetStringTypeW', 'SetStdHandle', 'WriteConsoleA', 'GetConsoleOutputCP', 'WriteConsoleW', 'GetDateFormatA', 'GetTimeFormatA', 'GetDriveTypeA', 'SetEnvironmentVariableA', 'HeapReAlloc', 'VirtualAlloc', 'SetCurrentDirectoryA', 'HeapAlloc', 'HeapFree', 'GetTickCount', 'GetCurrentDirectoryA', 'LocalFileTimeToFileTime', 'CreateFileA', 'GetShortPathNameA', 'GetVolumeInformationA', 'GetCurrentProcess', 'DuplicateHandle', 'GetFileSize', 'SetEndOfFile', 'UnlockFile', 'LockFile', 'FlushFileBuffers', 'SetFilePointer', 'WriteFile', 'ReadFile', 'DeleteFileA', 'MoveFileA', 'GetOEMCP', 'GetCPInfo', 'InterlockedIncrement', 'SystemTimeToFileTime', 'GetThreadLocale', 'GlobalFlags', 'TlsFree', 'DeleteCriticalSection', 'LocalReAlloc', 'TlsSetValue', 'TlsAlloc', 'InitializeCriticalSection', 'GlobalHandle', 'GlobalReAlloc', 'EnterCriticalSection', 'TlsGetValue', 'LeaveCriticalSection', 'LocalAlloc', 'CloseHandle', 'GetPrivateProfileStringA', 'WritePrivateProfileStringA', 'GetPrivateProfileIntA', 'GetCurrentProcessId', 'GetCurrentThread', 'ConvertDefaultLocale', 'GetModuleFileNameA', 'EnumResourceLanguagesA', 'GetLocaleInfoA', 'lstrcmpA', 'GetDiskFreeSpaceA', 'GetFullPathNameA', 'GetTempFileNameA', 'GetFileTime', 'SetFileTime', 'GetFileAttributesA', 'FreeResource', 'GetCurrentThreadId', 'GlobalGetAtomNameA', 'GlobalAddAtomA', 'GlobalFindAtomA', 'GlobalDeleteAtom', 'lstrcmpW', 'GetVersionExA', 'GlobalFree', 'GlobalAlloc', 'FormatMessageA', 'LocalFree', 'GlobalLock', 'GlobalUnlock', 'MulDiv', 'FindFirstFileA', 'FileTimeToLocalFileTime', 'FileTimeToSystemTime', 'FindNextFileA', 'FindClose', 'FreeLibrary', 'InterlockedDecrement', 'LockResource', 'SizeofResource', 'LoadResource', 'FindResourceA', 'ExitProcess', 'GetVersion', 'CompareStringA', 'GetModuleHandleA', 'LoadLibraryA', 'GetProcAddress', 'lstrcmpiA', 'SetLastError', 'GetLastError', 'InterlockedExchange', 'GetStringTypeExA', 'MultiByteToWideChar', 'CompareStringW', 'WideCharToMultiByte', 'lstrlenA', 'FreeEnvironmentStringsA', 'GetComputerNameA', 'CopyAcceleratorTableA', 'CreateMenu', 'PostThreadMessageA', 'GetTabbedTextExtentA', 'RegisterClipboardFormatA', 'GetSysColorBrush', 'UnregisterClassA', 'LoadCursorA', 'DestroyCursor', 'SetCursorPos', 'SetCapture', 'RedrawWindow', 'InflateRect', 'UnpackDDElParam', 'ReuseDDElParam', 'LoadMenuA', 'DestroyMenu', 'ReleaseCapture', 'LoadAcceleratorsA', 'InsertMenuItemA', 'CreatePopupMenu', 'BringWindowToTop', 'SetMenu', 'TranslateAcceleratorA', 'IsZoomed', 'WindowFromPoint', 'KillTimer', 'SetTimer', 'SetRect', 'SetParent', 'GetSystemMenu', 'DeleteMenu', 'SetRectEmpty', 'IsRectEmpty', 'GetDesktopWindow', 'CreateDialogIndirectParamA', 'GetNextDlgTabItem', 'EndDialog', 'GetMessageA', 'TranslateMessage', 'GetActiveWindow', 'GetCursorPos', 'ValidateRect', 'GetWindowThreadProcessId', 'ShowOwnedPopups', 'SetCursor', 'PostQuitMessage', 'IsWindowEnabled', 'SetWindowTextA', 'IsDialogMessageA', 'SetDlgItemTextA', 'RegisterWindowMessageA', 'LoadIconA', 'SendDlgItemMessageA', 'WinHelpA', 'GetCapture', 'SetWindowsHookExA', 'CallNextHookEx', 'GetClassNameA', 'SetPropA', 'GetPropA', 'RemovePropA', 'SetFocus', 'GetWindowTextLengthA', 'GetWindowTextA', 'GetLastActivePopup', 'SetActiveWindow', 'DispatchMessageA', 'BeginDeferWindowPos', 'EndDeferWindowPos', 'GetDlgItem', 'GetTopWindow', 'DestroyWindow', 'GetMessageTime', 'GetMessagePos', 'PeekMessageA', 'MapWindowPoints', 'ScrollWindow', 'TrackPopupMenu', 'GetKeyState', 'SetScrollRange', 'GetScrollRange', 'SetScrollPos', 'GetScrollPos', 'SetForegroundWindow', 'ShowScrollBar', 'IsWindowVisible', 'GetMenu', 'PostMessageA', 'MessageBoxA', 'CreateWindowExA', 'GetClassInfoExA', 'GetClassInfoA', 'RegisterClassA', 'EqualRect', 'DeferWindowPos', 'GetScrollInfo', 'SetScrollInfo', 'PtInRect', 'DefWindowProcA', 'CallWindowProcA', 'SetWindowPos', 'OffsetRect', 'IntersectRect', 'SystemParametersInfoA', 'GetWindowPlacement', 'GetWindowRect', 'GetSystemMetrics', 'GetWindow', 'GetMenuStringA', 'AppendMenuA', 'GetMenuItemID', 'InsertMenuA', 'GetMenuItemCount', 'GetSubMenu', 'RemoveMenu', 'GetSysColor', 'EndPaint', 'BeginPaint', 'GetWindowDC', 'ClientToScreen', 'ScreenToClient', 'GrayStringA', 'DrawTextExA', 'DrawTextA', 'TabbedTextOutA', 'FillRect', 'SetWindowRgn', 'DrawIcon', 'FindWindowA', 'LockWindowUpdate', 'GetDCEx', 'DestroyIcon', 'GetClassLongA', 'GetMenuItemInfoA', 'GetDlgCtrlID', 'IsChild', 'InvalidateRect', 'IsIconic', 'AdjustWindowRectEx',Line truncated

PYAS_Version.py

@@ -1,10 +1,10 @@
 import pyinstaller_versionfile
 pyinstaller_versionfile.create_versionfile(
 output_file="versionfile.txt",
-version='2.7.3',
+version='3.0.4',
 company_name="PYAS Security",
 file_description="Python Antivirus Software",
 internal_name="PYAS",
-legal_copyright="© PYAS Security",
+legal_copyright="PYAS Security",
 original_filename="PYAS.exe",
 product_name="PYAS")

README.md

@@ -1,20 +1,170 @@
 # PYAS (Python Antivirus Software)
-![PYAS](https://github.com/87owo/PYAS/assets/85057800/e49a0aef-6ef6-4485-8f93-e7a73f9571ea)
+
+![PYAS](https://github.com/87owo/PYAS/assets/85057800/153bcad9-18ab-4c81-bcb6-186434d0ef1b)
+
+## File Information
+
+PYAS.py -> Main PYAS Program (including animation, scanning, protection functions, etc.)
+
+PYAS_Compress.py -> Conversion Database (used to convert database dict and list to and from each other)
+
+PYAS_Extension.py -> File Extension (including scanned file extensions and common file extensions)
+
+PYAS_Function.* -> Virus Database (the virus database must be placed in the same directory)
+
+PYAS_Interface.py -> PyQt5 Interface (designed by QT designer, must be matched with the main program)
+
+PYAS_Resource.py -> PyQt5 Resource (status pictures, icon packages, button icons, etc.)
+
+PYAS_Language.py -> Translate Dict (Traditional Chinese, Simplified Chinese, English)
+
+PYAS_Version.py -> Pyinstaller Info (file information, version information, original name, etc.)
+
+## Requirements
+
+Use pip install requirements to install import module
+
+```
+psutil==5.9.5
+pefile==2023.2.7
+requests==2.31.0
+pyperclip==1.8.2
+pywin32==306
+PyQt5==5.15.9
+```
+
+## Hash Scanning
+
+Use Qihoo 360 cloud service to scan known malicious files
+
+```
+import hashlib, requests
+import xml.etree.ElementTree as xmlet
+
+def hash_scan(file):
+    try:
+        with open(file, "rb") as f:
+            text = str(hashlib.md5(f.read()).hexdigest())
+        strBody = f'-------------------------------7d83e2d7a141e\r\nContent-Disposition: form-data; name="md5s"\r\n\r\n{text}\r\n-------------------------------7d83e2d7a141e\r\nContent-Disposition: form-data; name="format"\r\n\r\nXML\r\n-------------------------------7d83e2d7a141e\r\nContent-Disposition: form-data; name="product"\r\n\r\n360zip\r\n-------------------------------7d83e2d7a141e\r\nContent-Disposition: form-data; name="combo"\r\n\r\n360zip_main\r\n-------------------------------7d83e2d7a141e\r\nContent-Disposition: form-data; name="v"\r\n\r\n2\r\n-------------------------------7d83e2d7a141e\r\nContent-Disposition: form-data; name="osver"\r\n\r\n5.1\r\n-------------------------------7d83e2d7a141e\r\nContent-Disposition: form-data; name="vk"\r\n\r\na03bc211\r\n-------------------------------7d83e2d7a141e\r\nContent-Disposition: form-data; name="mid"\r\n\r\n8a40d9eff408a78fe9ec10a0e7e60f62\r\n-------------------------------7d83e2d7a141e--'
+        response = requests.post('http://qup.f.360.cn/file_health_info.php', data=strBody, timeout=3)
+        if response.status_code == 200:
+            level = float(xmlet.fromstring(response.text).find('.//e_level').text)
+            if level > 50:
+                return "Virus"
+            elif level <= 10:
+                return "Safe"
+            return "Unknown"
+        return f"Error: {response.status_code}"
+    except Exception as e:
+        return f"Error: {e}"
+
+info = hash_scan("path to file")
+print(info)
+```
+
+## Pefile Scanning
+
+Get the pefile file function import table for scanning
+
+```
+import pefile
+
+def pe_scan(file):
+    try:
+        fn = []
+        with pefile.PE(file) as pe:
+            for entry in pe.DIRECTORY_ENTRY_IMPORT:
+                for func in entry.imports:
+                    try:
+                        fn.append(str(func.name, "utf-8"))
+                    except:
+                        pass
+            if fn in known_malicious_list:
+                return "Virus"
+            return "Safe"
+        return "Unknown"
+    except Exception as e:
+        return f"Error: {e}"
+
+info = pe_scan("path to file")
+print(info)
+```
+
+## Process Detect
+
+Show the new process name, file path, cmd line, pid
+
+```
+import psutil, time
+
+def proc_detect():
+    existing_processes = set()
+    for p in psutil.process_iter():
+        if p.pid not in existing_processes:
+            existing_processes.add(p.pid)
+    while True:
+        time.sleep(0.1)
+        for p in psutil.process_iter():
+            try:
+                if p.pid not in existing_processes:
+                    existing_processes.add(p.pid)
+                    name, file, cmd = p.name(), p.exe(), p.cmdline()
+                    print(f"Name: {name}")
+                    print(f"File: {file}")
+                    print(f"Pid: {p.pid}")
+                    print(f"Cmd: {cmd}")
+            except:
+                pass
+
+proc_detect()
+```
+
+## File Detect
+
+Monitor file changes under the specified path
+
+```
+import os, win32file, win32con
+
+def file_detect(path):
+    hDir = win32file.CreateFile(path,win32con.GENERIC_READ,win32con.FILE_SHARE_READ|win32con.FILE_SHARE_WRITE|win32con.FILE_SHARE_DELETE,None,win32con.OPEN_EXISTING,win32con.FILE_FLAG_BACKUP_SEMANTICS,None)
+    while True:
+        for action, file in win32file.ReadDirectoryChangesW(hDir,10485760,True,win32con.FILE_NOTIFY_CHANGE_FILE_NAME|win32con.FILE_NOTIFY_CHANGE_DIR_NAME|win32con.FILE_NOTIFY_CHANGE_ATTRIBUTES|win32con.FILE_NOTIFY_CHANGE_SIZE|win32con.FILE_NOTIFY_CHANGE_LAST_WRITE|win32con.FILE_NOTIFY_CHANGE_SECURITY,None,None):
+            try:
+                fpath = os.path.join(path, file)
+                if action == 1:
+                    print(f"File Create: {fpath}")
+                elif action == 2:
+                    print(f"File Delete: {fpath}")
+                elif action == 3:
+                    print(f"File Modify: {fpath}")
+                elif action == 4:
+                    print(f"File Rename: {fpath}")
+                elif action == 5:
+                    print(f"File Rename: {fpath}")
+            except:
+                pass
+
+file_detect("path")
+```
 
 ## Official Website
-https://pyantivirus.wixsite.com/pyas , 
+
+https://pyantivirus.wixsite.com/pyas
+
 https://github.com/87owo/PYAS
 
-## MIT License
+## MIT license
+
 https://github.com/87owo/PYAS/blob/main/LICENSE.md
 
 ## Support System
+
 Windows 8.1, 10, 11 (64-bit), Ram 1GB, Rom 1GB or higher
 
-## Import Module
-os, sys, time, json, psutil, ctypes, requests, subprocess, win32file, win32api, win32con, elementpath, hashlib, pefile, threading, PyQt5, PYAS_Language, PYAS_Model, PYAS_UI
+Other systems may experience software malfunctions or crash
 
 ## Special Thanks
-360, Wix, VirusShare, mtkiao129, LenStevens
+360, Wix, VirusShare, mtkiao129, AV-T Team of LisectGroup
 
-Copyright© 2020~2023 PYAS Security By 87owo
+Copyright© 2020~2024 PYAS Security By 87owo