Skip to content

Threadlinee/ZCMLT

Folders and files

NameName
Last commit message
Last commit date

Latest commit

Β 

History

4 Commits
Β 
Β 
Β 
Β 

Repository files navigation

πŸ›‘οΈ Zero-Click Malware Detection Tool

Zero-Click Malware Detection Tool is a lightweight, standalone Windows application built in C# using WPF (XAML). It scans files for known malware signatures and suspicious patterns β€” specifically targeting malware that can execute without any user interaction, known as zero-click malware.


πŸš€ Features

  • πŸ” File Scanning: Upload any file and scan it for malware using SHA-256 hash checking.
  • 🧠 Heuristic Pattern Detection: Detects common malicious keywords and payload markers.
  • 🧾 Clean GUI: Simple and professional user interface built with XAML and C#.
  • ⚑ Fast Performance: Lightweight, minimal resource usage.
  • πŸ–₯️ Desktop Integration: Easily run on Windows without dependencies or installation.

πŸ“Έ Preview

image

image


πŸ› οΈ How It Works

  1. Select a file using the "Browse File" button.
  2. Click "Scan for Malware".
  3. The tool will:
    • Generate the file's SHA-256 hash.
    • Compare it against a database of known malware hashes.
    • Perform optional heuristic analysis for keywords like payload, trojan, exploit, etc.
  4. It will then show an alert if malware is detected or confirm the file is safe.

🧬 Technology Stack

  • Language: C# (.NET 6 or higher)
  • Framework: WPF (XAML for UI)
  • Hashing: SHA-256 file fingerprinting
  • UI/UX: Clean & Responsive Desktop GUI

πŸ“‚ File Types Supported

  • .txt, .png, .jpg, .jpeg, .pdf, .docx, .webp, and most common file types.
  • Note: The tool performs content scans only on readable file formats (e.g., .txt, .json) for pattern matching.

🧠 What is Zero-Click Malware?

Zero-click malware is malicious code that exploits software vulnerabilities without requiring the user to click, open, or interact with a file. This tool aims to detect such threats before they are executed.


⚠️ Disclaimer

This tool is provided for educational and research purposes only. It is not a replacement for enterprise-level antivirus or endpoint protection systems.

Always use responsible security practices and do not rely solely on open-source tools for critical infrastructure defense.


βœ… Todo / Improvements

  • Expand malware hash database via community submissions
  • Integrate with VirusTotal API (optional)
  • Add quarantine feature
  • Export scan reports (PDF/JSON)

πŸ§‘β€πŸ’» Author

Made with ❀️ by Threadlinee
GitHub: https://github.com/Threadlinee

πŸ“„ License

MIT License - Feel free to use, modify, and contribute.

β˜• Support Me

If you like this project, feel free to buy me a coffee!

Buy Me a Coffee

Releases

No releases published

Packages

No packages published

Languages