MalwareHunter: A Unified Antivirus Scanning Platform

Abstract

This research paper aims to develop a website that allows users to upload files and scan them for malware. The website will use a variety of malware scanning technologies, including signature-based detection to identify any malicious code in the uploaded files. Upload a file for scanning, analysis your file with few antivirus products, dynamic analysis sandboxes and a myriad of other security tools to produce a threat score and relevant context to understand it. Get a file report by hash, given a {md5, sha1, sha256} hash, retrieves the pertinent analysis report including threat reputation and context produced by antivirus products, dynamic analysis sandboxes and a myriad of other security tools, and datasets. In the same manner the URL can also be scanned, analysis of the scanned URL with few antivirus products/blocklists and a myriad of other security tools occurs to produce a threat score and relevant context to understand it. Get an URL analysis report, given an URL, retrieves the pertinent analysis report including threat reputation and context produced by antivirus products/blocklists and a myriad of other security tools and datasets. For domain reports, get a domain report, given a domain, retrieves the pertinent analysis report including threat reputation and context produced by antivirus products/blocklists and a myriad of other security tools and datasets. Get an IP address report, given an IP address, retrieves the pertinent analysis report including threat reputation and context produced by antivirus products/ blocklists and a myriad of other security tools and datasets. Keywords: Upload, Malware, Sandbox, Hash, URLs, Signature-based detection.