Browse Source

Version 4.0.4

master XvirusCLI_4.0.4
Dani Santos 2 years ago
commit
2c4cbc4f6e
  1. 98
      README.md
  2. BIN
      bin/Microsoft.ML.Core.dll
  3. BIN
      bin/Microsoft.ML.CpuMath.dll
  4. BIN
      bin/Microsoft.ML.Data.dll
  5. BIN
      bin/Microsoft.ML.DataView.dll
  6. BIN
      bin/Microsoft.ML.FastTree.dll
  7. BIN
      bin/Microsoft.ML.KMeansClustering.dll
  8. BIN
      bin/Microsoft.ML.PCA.dll
  9. BIN
      bin/Microsoft.ML.StandardTrainers.dll
  10. BIN
      bin/Microsoft.ML.Transforms.dll
  11. BIN
      bin/Microsoft.ML.dll
  12. BIN
      bin/Newtonsoft.Json.dll
  13. BIN
      bin/PeNet.Asn1.dll
  14. BIN
      bin/PeNet.dll
  15. BIN
      bin/System.CodeDom.dll
  16. BIN
      bin/System.Security.Cryptography.Pkcs.dll
  17. BIN
      bin/Validation.dll
  18. 1748
      bin/XescSDK.deps.json
  19. BIN
      bin/XescSDK.dll
  20. BIN
      bin/XescSDK.exe
  21. 12
      bin/XescSDK.runtimeconfig.json
  22. BIN
      bin/Xunit.SkippableFact.dll
  23. 0
      bin/errorlog.txt
  24. BIN
      bin/runtimes/linux-arm/native/libLdaNative.so
  25. BIN
      bin/runtimes/linux-arm64/native/libLdaNative.so
  26. BIN
      bin/runtimes/linux-x64/native/libFastTreeNative.so
  27. BIN
      bin/runtimes/linux-x64/native/libLdaNative.so
  28. BIN
      bin/runtimes/osx-arm64/native/libLdaNative.dylib
  29. BIN
      bin/runtimes/osx-x64/native/libFastTreeNative.dylib
  30. BIN
      bin/runtimes/osx-x64/native/libLdaNative.dylib
  31. BIN
      bin/runtimes/win-x64/native/FastTreeNative.dll
  32. BIN
      bin/runtimes/win-x64/native/LdaNative.dll
  33. BIN
      bin/runtimes/win-x86/native/FastTreeNative.dll
  34. BIN
      bin/runtimes/win-x86/native/LdaNative.dll
  35. BIN
      bin/runtimes/win/lib/netcoreapp3.0/System.Security.Cryptography.Pkcs.dll
  36. 15
      bin/settings.json
  37. BIN
      bin/xunit.abstractions.dll
  38. BIN
      bin/xunit.core.dll
  39. BIN
      bin/xunit.execution.dotnet.dll

98
README.md

@ -0,0 +1,98 @@
# Xvirus CLI 4.0.4
Xvirus CLI 4.0.4.
## Table of Contents
- [Xvirus CLI 4.0.4](#xvirus-cli-40)
- [Table of Contents](#table-of-contents)
- [Minimum Requirements](#minimum-requirements)
- [Changelog](#changelog)
- [Known Issues](#known-issues)
- [Get Started](#get-started)
- [Avaiable Commands](#avaiable-commands)
- [Settings](#settings)
## Minimum Requirements
To run Xvirus CLI you need:
- .NET 5 Runtime - [download](https://dotnet.microsoft.com/download/dotnet/thank-you/runtime-5.0.11-windows-x64-installer)
## Changelog
- Completely redone in .NET 5
- Now supports Linux (CLI and C# bindings only)
- Added XvirusAI scan engine (BETA)
- Scan speed is up to 2x faster
- Fixed memory usage spike when scanning large files
- Removed file size limit for scanned files by default
- The checkUpdate function can now check for SDK updates
- Added 3 new settings "EnableAIScan", "MaxScanLength" and "DatabaseVersion"
## Known Issues
- XvirusAI engine is still in BETA. It is not recomended to use in production yet.
- The checkUpdate function can now check for SDK updates but can't update it
## Get Started
You can run it by opening executable file in the bin folder with a command as the execution argument. For example: `XescSDK.exe interactive`.
## Avaiable Commands
You have the following commands available:
- **Interactive** - Starts Xvirus CLI in interactive mode. When in this mode you can write commands and the executable will keep running until you call the `quit` command.
- **Quit** - Stop Xvirus CLI execution.
- **Load** 'force' - Loads Xvirus Scan Engine into memory, if set `force`=true it will reload the scan engine, even if it is already loaded.
- **Unload** - Unloads Xvirus Scan Engine from memory.
- **Scan** 'filepath' - Scans the file located at `filepath`. It will print one of the following messages:
- "**Safe**" - If no malware is detected.
- "**Malware**" - If malware is detected but the name isn't known.
- **_Malware Name_** - If it is malware from a known family (example: "Trojan.Downloader").
- "**AI.{aiScore}**" - Score of the file using XvirusAI from 0 to 100, the higher the score the more probable it is malicious (example: "AI.99").
- "**File not found!**" - If no file is found in the submited path.
- "**File too big!**" - If the file size is bigger than the set limit.
- "**Could not get file hash!**" - There was an error calculating the hash of the file.
- **Update** 'checkSDKUpdates' 'loadDBAfterUpdate' - Checks and updates the databases and AI engine to the most recent versions. If `checkSDKUpdates`=true then it will also check for SDK updates. If `loadDBAfterUpdate`=true then it will reload the Xvirus Scan Engine after the update is done. It can print the following messages:
- "**There is a new SDK version available!**"
- "**Database was updated!**"
- "**Database is up-to-date!**"
- **Settings** - prints the `settings.json` file.
- **Version** - prints the version of the SDK/CLI.
## Settings
Settings are located in the "`settings.json`" file in the root folder of the SDK. There are 4 avaiable options:
- **EnableHeuristics** - Enables heuristics scanning of files. Default: _true_
- **EnableAIScan** - Enables XvirusAI scan engine. This feature is still in BETA. Default: _false_
- **MaxScanLength** - Maximum file size to be scanned in bytes. If set "null" then there is no limit. Default: _null_
- **DatabaseVersion** - KeyValue list of database files version. This is updated automatically when using the "checkUpdate()" function.
Example of a `settings.json` file:
```JSON
{
"EnableHeuristics": true,
"EnableAIScan": false,
"MaxScanLength": null,
"DatabaseVersion": {
"AIModel": 0,
"MainDB": 0,
"DailyDB": 0,
"WhiteDB": 0,
"DailywlDB": 0,
"HeurDB": 0,
"HeurDB2": 0,
"MalvendorDB": 0
}
}
```
## Exceptions
If any of the functions fail it may return an exception. Exception will stop the execution of the CLI.
All exceptions are logged in the `errorlog.txt` file.

BIN
bin/Microsoft.ML.Core.dll

Binary file not shown.

BIN
bin/Microsoft.ML.CpuMath.dll

Binary file not shown.

BIN
bin/Microsoft.ML.Data.dll

Binary file not shown.

BIN
bin/Microsoft.ML.DataView.dll

Binary file not shown.

BIN
bin/Microsoft.ML.FastTree.dll

Binary file not shown.

BIN
bin/Microsoft.ML.KMeansClustering.dll

Binary file not shown.

BIN
bin/Microsoft.ML.PCA.dll

Binary file not shown.

BIN
bin/Microsoft.ML.StandardTrainers.dll

Binary file not shown.

BIN
bin/Microsoft.ML.Transforms.dll

Binary file not shown.

BIN
bin/Microsoft.ML.dll

Binary file not shown.

BIN
bin/Newtonsoft.Json.dll

Binary file not shown.

BIN
bin/PeNet.Asn1.dll

Binary file not shown.

BIN
bin/PeNet.dll

Binary file not shown.

BIN
bin/System.CodeDom.dll

Binary file not shown.

BIN
bin/System.Security.Cryptography.Pkcs.dll

Binary file not shown.

BIN
bin/Validation.dll

Binary file not shown.

1748
bin/XescSDK.deps.json

File diff suppressed because it is too large

BIN
bin/XescSDK.dll

Binary file not shown.

BIN
bin/XescSDK.exe

Binary file not shown.

12
bin/XescSDK.runtimeconfig.json

@ -0,0 +1,12 @@
{
"runtimeOptions": {
"tfm": "net5.0",
"framework": {
"name": "Microsoft.NETCore.App",
"version": "5.0.0"
},
"configProperties": {
"System.Reflection.Metadata.MetadataUpdater.IsSupported": false
}
}
}

BIN
bin/Xunit.SkippableFact.dll

Binary file not shown.

0
bin/errorlog.txt

BIN
bin/runtimes/linux-arm/native/libLdaNative.so

Binary file not shown.

BIN
bin/runtimes/linux-arm64/native/libLdaNative.so

Binary file not shown.

BIN
bin/runtimes/linux-x64/native/libFastTreeNative.so

Binary file not shown.

BIN
bin/runtimes/linux-x64/native/libLdaNative.so

Binary file not shown.

BIN
bin/runtimes/osx-arm64/native/libLdaNative.dylib

Binary file not shown.

BIN
bin/runtimes/osx-x64/native/libFastTreeNative.dylib

Binary file not shown.

BIN
bin/runtimes/osx-x64/native/libLdaNative.dylib

Binary file not shown.

BIN
bin/runtimes/win-x64/native/FastTreeNative.dll

Binary file not shown.

BIN
bin/runtimes/win-x64/native/LdaNative.dll

Binary file not shown.

BIN
bin/runtimes/win-x86/native/FastTreeNative.dll

Binary file not shown.

BIN
bin/runtimes/win-x86/native/LdaNative.dll

Binary file not shown.

BIN
bin/runtimes/win/lib/netcoreapp3.0/System.Security.Cryptography.Pkcs.dll

Binary file not shown.

15
bin/settings.json

@ -0,0 +1,15 @@
{
"EnableHeuristics": true,
"EnableAIScan": false,
"MaxScanLength": null,
"DatabaseVersion": {
"AIModel": 0,
"MainDB": 0,
"DailyDB": 0,
"WhiteDB": 0,
"DailywlDB": 0,
"HeurDB": 0,
"HeurDB2": 0,
"MalvendorDB": 0
}
}

BIN
bin/xunit.abstractions.dll

Binary file not shown.

BIN
bin/xunit.core.dll

Binary file not shown.

BIN
bin/xunit.execution.dotnet.dll

Binary file not shown.
Loading…
Cancel
Save