Skip to main content

Image-based Windows malware scanner using ONNX Runtime

Project description

malvizv1

malvizv1 is an image-based Windows malware scanner prototype using ONNX Runtime.

It converts a file into a grayscale byte image, runs a ResNet18 ONNX model, and predicts either:

  • Benign
  • a Malimg malware family
  • uncertain if confidence is below the threshold

Installation locally

From this package folder:

pip install -e .

Usage

malvizv1 C:\Windows\System32\calc.exe
malvizv1 C:\Windows\System32\cmd.exe --threshold 0.90

You can also use the shortcut:

malviz C:\Windows\System32\calc.exe

Important note

This is a student/research prototype, not a replacement for a real antivirus.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

malvizv1-0.1.0.tar.gz (41.6 MB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

malvizv1-0.1.0-py3-none-any.whl (41.6 MB view details)

Uploaded Python 3

File details

Details for the file malvizv1-0.1.0.tar.gz.

File metadata

  • Download URL: malvizv1-0.1.0.tar.gz
  • Upload date:
  • Size: 41.6 MB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.10

File hashes

Hashes for malvizv1-0.1.0.tar.gz
Algorithm Hash digest
SHA256 5b0e44fcdcd3c0839512221c1866bb88d95b3fd034ea8f1d18504e8d081ad721
MD5 f90bccc47a7db1147d0b1be97c88e0ba
BLAKE2b-256 1c349c2536f1cf8b9208503b76e608428516dc20d5404129ee68e219938f2df1

See more details on using hashes here.

File details

Details for the file malvizv1-0.1.0-py3-none-any.whl.

File metadata

  • Download URL: malvizv1-0.1.0-py3-none-any.whl
  • Upload date:
  • Size: 41.6 MB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.10

File hashes

Hashes for malvizv1-0.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 1d7b8b3c3ec0adbca288be6f2fa888830d98fa9e99c68d1af409e2d230276814
MD5 5a7180690b66d9c98c8c44ce269859bb
BLAKE2b-256 5be5cd276d12b66d3ece6ed991e5c08419ff28a5549c0cadd2d2f0dd6bc641cb

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page