Add files via upload

Update PYAS_Language.py

Engine/Model/PYAS_Model.json

@@ -1,12 +1,11 @@
 {
-    "Suffix": [".com", ".exe", ".dll", ".sys", ".scr",
-               ".bat", ".cmd", ".ps1", ".vbs", ".wsf"], 
+    "Suffix": [".com", ".exe", ".dll", ".sys", ".scr", ".bat", ".cmd", ".ps1", ".vbs", ".wsf"], 
 
     "Labels": ["Pefile/White", "Script/White", "Pefile/General", "Script/General"], 
 
     "Detect": ["Pefile/General", "Script/General"],  
 
-    "Pixels": [224, 224], 
+    "Resize": [224, 224, 1, "nearest"], 
 
-    "Values": 90
+    "Values": 95
 }

Engine/Rules/PYAS_Rules_A1.yar

@@ -772,31 +772,26 @@ rule General_28 {
       author = "PYAS Security"
       date = "2024-06-12"
    strings:
-      $s1 = "GNU C11 6.3.0" ascii
-      $s2 = "GCC: (MinGW.org GCC-6.3.0-1) 6.3.0" fullword ascii
-      $s3 = "___mingw_readdir" fullword ascii
-      $s4 = "___mingw_closedir" fullword ascii
-      $s5 = "___mingw_seekdir" fullword ascii
-      $s6 = "%d is not a prime number." fullword ascii
-      $s7 = "___mingw_rewinddir" fullword ascii
-      $s8 = "__mingw32_init_mainargs" fullword ascii
-      $s9 = "___mingw_telldir" fullword ascii
-      $s10 = "Enter an integer: " fullword ascii
-      $s11 = "___mingw_opendir" fullword ascii
-      $s12 = "/home/keith/" ascii
-      $s13 = "../../../src/gcc-6.3.0/libgcc" ascii
-      $s14 = "___mingw_dirname" fullword ascii
-      $s15 = "_isPrime`" fullword ascii
-      $s16 = "%d is a prime number." fullword ascii
-      $s17 = ".weak.__Jv_RegisterClasses.___EH_FRAME_BEGIN__" fullword ascii
-      $s18 = "-mtune=generic" ascii
-      $s19 = "-march=i586" ascii
-      $s20 = "-g -g -g -O2 -O2 -O2" ascii
-      $s21 = "-fbuilding-libgcc" ascii
-      $s22 = "-fno-stack-protector" ascii
+      $x1 = "schemas.microsoft.com" wide
+      $x2 = "Client Worker Thread" ascii
+      $s1 = "A6BFEA43-501F-456F-A845-983D3AD7B8F0" wide
+      $s2 = "upgrader" wide
+      $s3 = "rtvscan.exe" wide
+      $s4 = "Enable-WindowsOptionalFeature -FeatureName" wide
+      $s5 = "remupd.exe" fullword wide
+      $s6 = "Mcshield.exe" fullword wide
+      $s7 = "mssecess.exe" fullword wide
+      $s8 = "RavMonD.exe" fullword wide
+      $s9 = "KvMonXP.exe" fullword wide
+      $s10 = "baiduSafeTray.exe" fullword wide
+      $s11 = "Qavanijeb.exe" fullword wide
+      $s12 = "%s --> Error: %d, EC: %d" fullword ascii
+      $s13 = "wscript.exe //E:vbscript" wide
+      $s14 = "upgrader_64" wide
+      $s15 = "Process Data Error" fullword wide
    condition:
-      uint16(0) == 0x5a4d and filesize < 500KB and
-      8 of them
+      uint16(0) == 0x5a4d and filesize < 1000KB and
+      1 of ($x*) and 6 of them
 }
 
 rule General_29 {
@@ -1442,31 +1437,3 @@ rule General_52 {
       uint16(0) == 0x5a4d and filesize < 2000KB and
       8 of them
 }
-
-rule General_53 {
-   meta:
-      description = "53"
-      author = "PYAS Security"
-      date = "2024-06-12"
-   strings:
-      $x1 = "schemas.microsoft.com" wide
-      $x2 = "Client Worker Thread" ascii
-      $s1 = "A6BFEA43-501F-456F-A845-983D3AD7B8F0" wide
-      $s2 = "upgrader" wide
-      $s3 = "rtvscan.exe" wide
-      $s4 = "Enable-WindowsOptionalFeature -FeatureName" wide
-      $s5 = "remupd.exe" fullword wide
-      $s6 = "Mcshield.exe" fullword wide
-      $s7 = "mssecess.exe" fullword wide
-      $s8 = "RavMonD.exe" fullword wide
-      $s9 = "KvMonXP.exe" fullword wide
-      $s10 = "baiduSafeTray.exe" fullword wide
-      $s11 = "Qavanijeb.exe" fullword wide
-      $s12 = "%s --> Error: %d, EC: %d" fullword ascii
-      $s13 = "wscript.exe //E:vbscript" wide
-      $s14 = "upgrader_64" wide
-      $s15 = "Process Data Error" fullword wide
-   condition:
-      uint16(0) == 0x5a4d and filesize < 1000KB and
-      1 of ($x*) and 6 of them
-}

LICENSE.md

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2020-2024 87owo (PYAS Security)
+Copyright (c) 2020-2025 87owo (PYAS Security)
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

PYAS_Engine.py

@@ -38,6 +38,10 @@ class YRScan:
 class DLScan:
     def __init__(self):
         self.models = {}
+        self.valid_interpolations = {"none": Image.Resampling.NEAREST,
+        "box": Image.Resampling.BOX, "bilinear": Image.Resampling.BILINEAR,
+        "hamming": Image.Resampling.HAMMING, "bicubic": Image.Resampling.BICUBIC,
+        "lanczos": Image.Resampling.LANCZOS, "nearest": Image.Resampling.NEAREST}
         self.shells = ['0', '1', '2', '3', '4', '5', '6', '7', '8', '9', '!o',
         'cry', 'test', 'ace', 'yg', 'obr', 'tvm', 'dec', 'enc', 'b1_', 'base',
         'bss', 'clr_uef', 'cursors', 'trs_age', 'engine', 'enigma', 'protect',
@@ -58,8 +62,8 @@ class DLScan:
                 self.models[file_path] = onnxruntime.InferenceSession(file_path)
             self.labels = self.class_names['Labels']
             self.detect = self.class_names['Detect']
-            self.pixels = self.class_names['Pixels']
             self.values = self.class_names['Values']
+            self.resize = self.class_names['Resize']
             self.suffix = self.class_names['Suffix']
         except Exception as e:
             pass
@@ -67,7 +71,7 @@ class DLScan:
     def dl_scan(self, file_data):
         try:
             label_similarities = {label: [] for label in self.labels}
-            image_data = self.preprocess_image(file_data, tuple(self.pixels))
+            image_data = self.preprocess_image(file_data, tuple(self.resize))
             image_array = numpy.asarray(image_data).astype('float32') / 255.0
             image_expand = numpy.expand_dims(image_array, axis=(0, -1))
             for model_name, model in self.models.items():
@@ -83,12 +87,19 @@ class DLScan:
             return False, False
 
     def preprocess_image(self, file_data, target_size):
+        width, height, channels, interpolation = target_size
         wah = int(numpy.ceil(numpy.sqrt(len(file_data))))
         file_data = numpy.frombuffer(file_data, dtype=numpy.uint8)
         image_array = numpy.zeros((wah * wah,), dtype=numpy.uint8)
         image_array[:len(file_data)] = file_data
-        image = Image.fromarray(image_array.reshape((wah, wah)), 'L')
-        return image.resize(target_size, Image.Resampling.NEAREST)
+        if channels == 1:
+            image = Image.fromarray(image_array.reshape((wah, wah)), 'L')
+        elif channels == 3:
+            image = Image.fromarray(image_array.reshape((wah, wah)), 'RGB')
+        if width == 0 and height == 0:
+            return image
+        interpolations = self.valid_interpolations[interpolation.lower()]
+        return image.resize((width, height), interpolations)
 
     def get_type(self, file_path):
         match_data = {}
@@ -102,8 +113,8 @@ class DLScan:
                         any(shell in section_name.lower() for shell in self.shells)):
                             match_data[section_name] = section.get_data()
             except:
-                if ftype in [".bat", ".cmd", ".ps1", ".vbs", ".wsf", ".html", ".js", 
-                    ".txt", ".htm", ".hta", ".php", ".css", ".xml", ".json", ".wasm"]:
+                if ftype in [".bat", ".cmd", ".ps1", ".vbs", ".wsf", ".html", 
+                ".js", ".txt", ".htm", ".hta", ".php", ".css", ".xml", ".json"]:
                     with open(file_path, 'rb') as file:
                         match_data[ftype] = file.read()
         return match_data

PYAS_Language.py

@@ -1,10 +1,10 @@
 translate_dict = {
     "zh_TW": {"已开启":"已開啟","已关闭":"已關閉","On":"已開啟","Off":"已關閉"},
     "zh_CN": {"已開啟":"已开启","已關閉":"已关闭","On":"已开启","Off":"已关闭",
+              "錯誤":"错误","發現":"发现","關閉":"关闭","裝置":"设备","記憶體":"内存",
               "軟體":"软件","檔案":"文件","確定":"确认","設定":"设置","關於":"关于",
-              "錯誤":"错误","實時":"实时","發現":"发现","關閉":"关闭","裝置":"设备",
               "總數":"总数","註冊":"注册","圖標":"图标","路徑":"路径","網路":"网络",
-              "位元":"字节","彈窗":"弹窗","靈敏":"敏感","複製":"复制","開啟":"开启",
+              "位元":"字节","靈敏":"敏感","複製":"复制","開啟":"开启","資源回收桶":"资源回收桶",
               "訊":"讯","項":"项","掃":"扫","試":"试","黃":"黄","嗎":"吗","防":"保",
               "鑰":"钥","當":"当","後":"后","護":"护","導":"导","區":"区","復":"复",
               "攔":"拦","請":"请","統":"统","刪":"删","進":"进","個":"个","選":"选",
@@ -16,7 +16,8 @@ translate_dict = {
               "綠":"绿","態":"态","務":"务","連":"连","檢":"检","測":"测","關":"关",
               "強":"强","驅":"驱","為":"为","腳":"脚","單":"单","開":"开","擴":"扩",
               "惡":"恶","據":"据","庫":"库","經":"经","敗":"败","謝":"谢","別":"别",
-              "載":"载","誤":"误","報":"报","鏈":"链","竄":"窜","蹤":"踪","記憶體":"内存",},
+              "載":"载","誤":"误","報":"报","鏈":"链","竄":"窜","蹤":"踪","與":"与",
+              "異":"异","實":"实","時":"时","彈":"弹","窗":"窗","暫":"暂","訂":"订",},
     "en_US": {"已開啟":"On","已關閉":"Off","已开启":"On","已关闭":"Off","，":", ",
               "立即刪除":"Delete Now","安全模式":"Safe Mode","官方網站":"Website ",
               "腳本":"Script ","鏈式":"Chain ","記憶體":"Memory ","加載":"Load ",
@@ -27,7 +28,7 @@ translate_dict = {
               "最小化到":"Minimize To ","靈敏度":"Sensitivity ","正在檢查":"Checking ",
               "確定要":"Sure Want To ","引擎靈敏度":"Sensitivity ","更新":"Update ",
               "白色主題":"White","黃色主題":"Yellow","紅色主題":"Red","語言":"Language ",
-              "藍色主題":"Blue","綠色主題":"Green","自定主題":"Custom","最新":"Latest ",
+              "藍色主題":"Blue","綠色主題":"Green","自訂主題":"Custom","最新":"Latest ",
               "特別感謝":"Contributors ","版本資訊":"Information","通訊":"Connect ",
               "註冊表":"Registry ","退出":"Quit ","檔案":"File ","當前":"Currently ",
               "狀態":"State ","掃描":"Scan ","工具":"Tools ","防護":"Protect ",
@@ -41,13 +42,13 @@ translate_dict = {
               "網路":"Network ","變更":"Change ","總數":"Total","結束":"End ",
               "選項":"Options ","監控":"Monitor ","連接":"Connect ","可以":"To ",
               "進程":"Process ","攔截":"Block ","引導":"Boot ","刪除":"Delete ",
-              "分區":"Partition ","設定":"Settings","關於":"About","模式":"Mode ",
+              "分區":"Partition ","設定":"Setting ","關於":"About","模式":"Mode ",
               "提高":"Improve ","安全":"Security ","顯色":"Color ","主題":"Themes ",
               "風險":"Risk ","介面":"GUI ","核心":"Core ","服務":"Services ",
               "管理":"Manage","所有":"All ","您":"You ","取消":"Cancel ","未":"Not ",
               "垃圾":"Junk ","位元":"byte ","本機":"Computer ","停止":"Stop ",
-              "增加到":"Add To ","白名單":"White List ","軟體":"Software ","正在":"",
-              "增加":"Add ","移除":"Delete","項目":"Items ","生成":"Create ","稱":"",
+              "到":"To ","白名單":"White List ","軟體":"Software ","正在":"",
+              "增加":"Add ","移除":"Delete ","項目":"Items ","生成":"Create ","稱":"",
               "複製":"Copy ","開啟":"Open ","此":"This ","並":"And ","全盤":"Full ",
               "已經在":"Already ","數據庫":"Database ","誤報":"False Positive ",
               "高":"High ","新":"New ","和":"And ","可能會":"Possible ","會":"Can ",
@@ -57,4 +58,8 @@ translate_dict = {
               "擴展":"Extension ","套件":"Kit ","自動":"Auto ","上報":"Report ",
               "分析":"Analysis ","自身":"Self ","其他":"Other ","配置":"Config ",
               "丟失":"Lost ","網站":"Website ","不兼容":"Not Compatible ",
-              "竄改":"Tamper ","第三方":"Other ","與":"With ","  ":" "}}
+              "竄改":"Tamper ","第三方":"Other ","實時":"Real Time ","查看":"View ",
+              "指定":"Specify ","清空":"Empty ","資源回收桶":"Recycle Bin ",
+              "與":"With ","當":"When ","功能":"Function ","異常":"Abnormal ",
+              "重置":"Reset ","窗口":"Window ","暫存":"Temp ","自訂":"Custom ",
+              "不支持":"Not Support ","共":"Total ","時":"","  ":" "}}

PYAS_Suffixes.py

@@ -1,12 +1,10 @@
-slist = [".exe",".dll",".sys",".com",".scr",
-         ".bat",".ps1",".vbs",".cmd",".js"]
-
-alist = [".exe",".dll",".sys",".com",".scr",
-         ".zip",".7z",".rar",".tar",".gz",
-         ".js",".bat",".cmd",".ps1",".vbs",
-         ".ppt",".pptx",".wps",".txt",".rtf",
-         ".pdf",".xls",".xlsx",".doc",".docx",
-         ".jpg",".jpeg",".png",".webp",".gif",
-         ".mp3",".wav",".aac",".ogg",".flac",
-         ".mp4",".avi",".mov",".wmv",".mkv",
-         ".aux",".cur",".mui",".ttf",".efi"]
+file_types = [
+    ".exe",".dll",".sys",".com",".scr",
+    ".zip",".7z",".rar",".tar",".gz",
+    ".js",".bat",".cmd",".ps1",".vbs",
+    ".ppt",".pptx",".wps",".txt",".rtf",
+    ".pdf",".xls",".xlsx",".doc",".docx",
+    ".jpg",".jpeg",".png",".webp",".gif",
+    ".mp3",".wav",".aac",".ogg",".flac",
+    ".mp4",".avi",".mov",".wmv",".mkv",
+    ".aux",".cur",".mui",".ttf",".efi"]

PYAS_Version.py

@@ -2,7 +2,7 @@ import pyinstaller_versionfile
 
 pyinstaller_versionfile.create_versionfile(
 output_file="versionfile.txt",
-version='3.2.6',
+version='3.2.9',
 company_name="PYAS Security",
 file_description="Python Antivirus Software",
 internal_name="PYAS",

README.md

@@ -71,4 +71,4 @@ Other systems may experience software malfunctions or crash
 
 Wix, mtkiao129, 0sha0, AV-T Team of LisectGroup
 
-Copyright© 2020~2024 PYAS Security By 87owo
+Copyright© 2020~2025 PYAS Security By 87owo

README_zh_CN.md

@@ -65,4 +65,4 @@ Windows 8.1, 10, 11 (64-bit), 内存 500MB, 存储 200MB 或更高
 
 Wix, mtkiao129, 0sha0, AV-T Team of LisectGroup
 
-Copyright© 2020~2024 PYAS Security By 87owo
+Copyright© 2020~2025 PYAS Security By 87owo

README_zh_TW.md

@@ -65,4 +65,4 @@ Windows 8.1, 10, 11 (64-bit),記憶體 500MB, 磁碟容量 200MB 或更高
 
 Wix, mtkiao129, 0sha0, AV-T Team of LisectGroup
 
-Copyright© 2020~2024 PYAS Security By 87owo
+Copyright© 2020~2025 PYAS Security By 87owo