YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 90fff4e260313724485d326c18d793633af9ba58b01ecf91c8fed32c3ef777e1.

SHA256 hash:	90fff4e260313724485d326c18d793633af9ba58b01ecf91c8fed32c3ef777e1
File size:	1'330'688 bytes
File download:	Original
MIME type:	application/vnd.ms-excel
MD5 hash:	995ca09e1991165fc43c174ba6be5aef
SHA1 hash:	317b4552c191fb0a1a2445ba11e9467824ab52d5
SHA3-384 hash:	8d17f21ca501a63c3d5d192b07c186b68370d797d42f6d554003f07d613da5bfb46b4ad19d5beb4ef5a0fc646c7008e9
First seen:	2026-10-10 06:37:32 UTC
Last seen:	Never
Sightings:	1
imphash :	n/a
ssdeep :	12288:Puaghmc78r158GhcdDjMb9fyHrOcIZ0/u0OnmG4LfjzkEoWQaznuQ6PY4sSke:PuaghAk463N+
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	informational_win_ole_protected Create hunting rule
Author:	Jeff White (karttoon@gmail.com) @noottrak
Description:	Identify OLE Project protection within documents.
TLP:	TLP:WHITE
Repository:	karttoon

Rule name:	MULTI_Malware_Unknown_ForgeAuto_4f67e0b3_Extrait Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (archive, etat extrait)
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	MULTI_Malware_Unknown_ForgeAuto_57b77e4a_Extrait Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (archive, etat extrait)
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	MULTI_Malware_Unknown_ForgeAuto_e38c53ae_Extrait Create hunting rule
Author:	Marjoriefort
Description:	Detects Unknown (archive, etat extrait)
TLP:	TLP:WHITE
Repository:	YARAify

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-10-10 06:37:32 UTC Static: 4 Unpacker: 0 ClamAV: 0