Skip to content

Threadlinee/ZCMLT

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 

Repository files navigation

🛡️ Zero-Click Malware Detection Tool

Zero-Click Malware Detection Tool is a lightweight, standalone Windows application built in C# using WPF (XAML). It scans files for known malware signatures and suspicious patterns — specifically targeting malware that can execute without any user interaction, known as zero-click malware.


🚀 Features

  • 🔍 File Scanning: Upload any file and scan it for malware using SHA-256 hash checking.
  • 🧠 Heuristic Pattern Detection: Detects common malicious keywords and payload markers.
  • 🧾 Clean GUI: Simple and professional user interface built with XAML and C#.
  • Fast Performance: Lightweight, minimal resource usage.
  • 🖥️ Desktop Integration: Easily run on Windows without dependencies or installation.

📸 Preview

image

image


🛠️ How It Works

  1. Select a file using the "Browse File" button.
  2. Click "Scan for Malware".
  3. The tool will:
    • Generate the file's SHA-256 hash.
    • Compare it against a database of known malware hashes.
    • Perform optional heuristic analysis for keywords like payload, trojan, exploit, etc.
  4. It will then show an alert if malware is detected or confirm the file is safe.

🧬 Technology Stack

  • Language: C# (.NET 6 or higher)
  • Framework: WPF (XAML for UI)
  • Hashing: SHA-256 file fingerprinting
  • UI/UX: Clean & Responsive Desktop GUI

📂 File Types Supported

  • .txt, .png, .jpg, .jpeg, .pdf, .docx, .webp, and most common file types.
  • Note: The tool performs content scans only on readable file formats (e.g., .txt, .json) for pattern matching.

🧠 What is Zero-Click Malware?

Zero-click malware is malicious code that exploits software vulnerabilities without requiring the user to click, open, or interact with a file. This tool aims to detect such threats before they are executed.


⚠️ Disclaimer

This tool is provided for educational and research purposes only. It is not a replacement for enterprise-level antivirus or endpoint protection systems.

Always use responsible security practices and do not rely solely on open-source tools for critical infrastructure defense.


✅ Todo / Improvements

  • Expand malware hash database via community submissions
  • Integrate with VirusTotal API (optional)
  • Add quarantine feature
  • Export scan reports (PDF/JSON)

🧑‍💻 Author

Made with ❤️ by Threadlinee
GitHub: https://github.com/Threadlinee

📄 License

MIT License - Feel free to use, modify, and contribute.

☕ Support Me

If you like this project, feel free to buy me a coffee!

Buy Me a Coffee

Releases

No releases published

Packages

No packages published

Languages