adamgreenhill / virusshare-search Goto Github PK

You have to set up an account ond log in to search on Virus Share.

Hi. The latest VirusShare hash repo is now 371. Thanks!

All the hashes should be in a single file for simplicity. There is a project called VirusShare Hashes which does this. It provides a comprehensive and automatically updating list of hashes from VirusShare so you could just download from there.

I am not sure if I can use it to search and download only ransomware malware. does it support that? I don't have the hashes so I think it will be great if it searches by family name.

Repository now has 389 MD5 hashes

Hi,

I dowloaded conficker worm and other files from virus share.

However no one is executing in my windows 7 VM 64 bit

Error: not a valid win 32 application
please help.

Hi!
I saw your last code update, lets update it!
I suggest such thing (Bold text):

def main():
#Get Last VirusShare file
import urllib.request
from re import search
fp = urllib.request.urlopen("https://virusshare.com/hashes.4n6")
mybytes = fp.read()
mystr = mybytes.decode("utf8")
fp.close()
finBaseStr = mystr[mystr.rfind("hashes/VirusShare"):]
finBaseNum = str(search('>(.*)<', finBaseStr).group(1))
finBaseNumHelp = "sets latest VirusShare file released (default: " + finBaseNum + ")"
parser = argparse.ArgumentParser(description='tool to download VirusShare hash files and search them for specified hashes')
parser.add_argument('-s','--search', help='hash to search for in local repository (hint: specify any number of hashes)', nargs="+")
parser.add_argument('-u','--update', help='updates local hash containing files (--update all/missing/10,11,12/0-20)')
parser.add_argument('-l','--latest', help=finBaseNumHelp, default=finBaseNum)

What do you thing?