I tested the software out in a Virtual Machine with some malware samples, it flagged all of them as malicious and quarantined them which was great to see! I noticed it can be quite aggressive with clean software as well (e.g. quarantined idaq.exe -> from IDA) but the utility is pretty good IMO
I noticed it can't scan *.dll or *.sys files yet?
You might want to check the bytes for MZ and other characteristics though instead of depending on the file extension because attackers can use fake extensions for a Portable Executable and have it still executed in memory!!
Thanks for your hard work on this, looking forward to the future updates