Statistics

YARAify produces detailed statistics on files scanned, including associated detections - find the available statistics below.

You can also access Spamhaus's Malware Digest report, based on YARAify data:

File Scans

The chart below shows the number of file scans conducted by YARAify over the past 30 days.

Data Scanned

This chart shows the amount of data scanned in Megabytes over the past 30 days.

API requests

The illustration below documents the number of API requests over the past 30 days.

Most matching YARA rules

YARA rules that matched most on files scanned on YARAify in the past 14 days.

Task countYARA RuleAuthorLast match
146'629vmdetectnex2026-02-07
90'538NETmalware-lu2026-02-07
72'844DebuggerCheck__API2026-02-07
71'914golang_bin_JCorn_CSC846Justin Cornwell2026-02-07
70'439telebot_frameworkvietdx.mb2026-02-07
62'082CP_Script_Inject_DetectorDiegoAnalytics2026-02-07
56'581SEH__vba2026-02-07
49'499FreddyBearDropperDwarozh Hoshiar2026-02-07
46'469Sus_CMD_Powershell_UsageXiAnzheng2026-02-07
44'868ProtectSharewareV11eCompservCMSmalware-lu2026-02-07
44'449win_mofksys_autoFelix Bilstein2026-02-07
44'382Windows_Generic_Threat_2bb7fbe3Elastic Security2026-02-07
41'954classifiedclassified2026-02-07
39'996DetectEncryptedVariantsZinyth2026-02-07
33'197MD5_Constantsphoul (@phoul)2026-02-07

ClamAV Most matching ClamAV signature

ClamAV signature that matched most on files scanned on YARAify in the past 14 days.

Task countClamAV SignatureLast match
63'516Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-02026-02-07
56'256Win.Malware.Swisyn-6911629-02026-02-07
44'944PUA.Win.Packer.ProtectSharewar-22026-02-07
44'944PUA.Win.Packer.ProtectSharewar-32026-02-07
44'885Win.Malware.Swisyn-9942393-02026-02-07
44'566Win.Malware.Swisyn-7610494-02026-02-07
44'519Win.Virus.Sality-6747602-02026-02-07
44'478Win.Virus.Sality-6335700-22026-02-07
44'475Win.Trojan.VBGeneric-6735885-02026-02-07
28'728SecuriteInfo.com.PDF.URI-55.UNOFFICIAL2026-02-07
22'189Pdf.Phishing.Trojan-d2528dad23a95d95-d2528dad23a95d95-10044376-02026-02-07
20'064SecuriteInfo.com.PUA.Telegrambot-7.UNOFFICIAL2026-02-05
11'882Win.Malware.Swisyn-6911403-02026-02-06
6'695SecuriteInfo.com.PUA.Telegrambot-21.UNOFFICIAL2026-02-05
6'423Win.Malware.Genpack-6989317-02026-02-07

Most seen files

Most seen files scanned by YARAify in the past 14 days.

Task countSHA256 hashLast seen
1'4779645d1974020b793786685f8f96603060c5699a75615a4da471ac10fa9db882b2025-11-05
8251e98db5874724feb356581e59b512a065046607d645aaf34b379e687f0453a582026-01-29
806b20050ef0eb1de93b2cf5b4c89cc6f9cfe0e1a1bebbe9f35f9ac33e65075707c2026-01-29
304d66bf17496a71f4c33aabf31524ec39aced2279ee06f2b93ec7f27504f87e5172026-01-29
14342ccba542c4d62e4586f302b18712df549ff3cd0b995899d47c2e6a730552d5e2026-01-29
14023c2d2b0c6cec3e69cb07f942c9e56f2087aeb24015be25823897faafc4708ae2022-02-07
1389865124bb8ca7e222474663a1b9f43bbc10c24cca067332d099e2d0f0d5f5a872022-02-07
137026e68b0272b4a75461b345b63c8a60890644d947708c7be014652739c87dcfe2025-04-23
13739e48a3fc7e67968ff5d6e3cf8e12a7256af93ccabbce4da20d28c79237d95e82022-01-06
137b3986e04464339cec16157cf8c8bffec3a8a8c5eae57997974d45f5369fa16552021-07-07
1361b394490817e9ffc5c83984bc972f5415513dcd686b8322846cd67adb5b3878e2025-10-19
136e0af7f483f4965dca90eb5921ae004a7e41593b39284a63af97a9105b96718e72022-01-06
1361115b6c913a207b9d81f8482613b2a9c2929ca81399861d2d2c47422e244060d2022-02-07
135a7693c06223f7d13a778614a911f813110e892db3fb5146feb845d75771ff21e2022-02-08
13553c22863323c0f5ff94f4ae86df27a51db4eae7232cc38333346ee8be9df5aa62022-02-07

Top dhash icon

Top dhash icon observed on files scanned by YARAify in the past 14 days.

Task countdhash iconLast seen
45'29792e0b496a6cada722026-02-07
4'07000ccc4d0c4fcfc452026-02-07
3'91302c0b0746c60b0182026-02-07
2'769818da080a0a0a0a22026-02-07
2'34500ccc4d0c4fc7c002026-02-07
2'01619f8e0e8e8f0f0f02026-02-07
1'4991003873d31213f102026-02-07
1'374b9696969606c74ec2026-02-07
1'20671f0b28a8cc8e0612026-02-07
1'18869ccd4d49696cc712026-02-07
1'09604ccfee2ece4a4842026-02-07
8793eb2b2b2726a70b02026-02-07
756e0e4a2aaa4b8a8882026-02-07
7055050d270cccc82ae2026-02-07
583f0968ee8aae8e8b22026-02-07

Top imphash

Top imphash observed on files scanned by YARAify in the past 14 days.

Task countimphashLast seen
13'00309d0478591d4f788cb3e5ea416c252372026-02-07
9'804dae02f32a21e03ce65412f6e56942daa2026-02-08
9'506d69928ec3280f815d9648c65ebeede5e2026-02-08
8'452f5f7aa69402972138b71b29916472a7f2026-02-08
7'748f34d5f2d4577ed6d9ceec516c1f5a7442026-02-08
3'94276515d04dff07b5b4a25c41ca10134842026-02-08
2'3425271d5ce8b44dd47bc92563e275854662026-02-08
2'0309445e2cedbd7dbfed0146212daf6af2b2026-02-08
1'733f481ea8169d367d8b0e94d0bf02da2202026-02-08
1'6001639b1e17656fed4f63bac94cbb79cec2026-02-08
1'4101f75ee5de8ac0c77c6e43508555114fe2026-02-08
1'33269928e1032af8287e2ff241b863576352026-02-08
1'03498b62dfdc3e59f86e2d70c4065393d472026-02-07
972a3df475500e5e30f4680b397c2ee13f12026-02-08
88187e83bda436138fd7844ecd76decc70d2026-02-08

Top tlsh

Top tlsh observed on files scanned by YARAify in the past 14 days.

Task counttlshLast seen
139T1B29422AC8B32E0D5CC47A27A7B185F929C5AC5A7040563F5333DA9652F4DEA8601C3BF2025-10-19
139T10016DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
139T1C8E052F688E090AC080023A82BDF2CA5437B03BD00202A0BF20BA04D022DF72E30A3F02021-07-07
139T1EF16DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
137T1DC034D9736E31004BB09BE32E554C38FEF06CF59B976974ED39826C72350A78662E05B2022-02-07
135T1CC03379736E32004BB09BE36C144838FEF46CF59B977974EE39826C72350A78632E4592022-02-08
134T1B43442F5A4ECA2AC8519234057CF3CD7299722312F1A3A93E3292645B11DA3BF2775D32025-04-01
134T10C03289736E31005BB09BE35C544838FEF06CF59B976974EE3982EC72350A78A32E4592022-02-08
134T1E80329973AE31005BB09BE35C154838FEF06CF59B9B6974EF39826C72350A78632E4592022-02-07
134T1BD812B4525A230CAC056C270ED52C158ABD9BC37AF44D3BBF1B90FDD83112451CC1B0B2022-02-07
134T1F9033F8736E31004BB09BE35C754834FEF46CF59B97A9B4ED39826C72370A78629E0592022-02-07
133T1BCE47D21F1C18079E4F5157096FF7A5B246C69A64B2838E3E7987EC928741F27A3C2C72021-07-08
133T1FBE47D21F1C18079E4F5157096FF7A5B246C69A64B2838E3E7987EC928741F27A3C2C72021-07-08
132T176E48D61F185C075E0F116B0A6FE7A5B146C2975471D38E3EB98BEC929740F27A3C28B2021-08-11
132T133E48D51F185C076E0F116B0A6FE7A5B146C2975471D38E3EB98BEC929740F27A3C28B2021-08-11

Top telfhash

Top telfhash observed on files scanned by YARAify in the past 14 days.

Task counttelfhashLast seen
134t1c8817cf04bf630f0a2d7ca51b312f5baaa721827a1e935e46726adc4df01f814d758232026-02-01
89t1cfe0262a07d210c482e519048286b83b1afc290d29173cc103543b0e5f56f90f8ba9372026-02-01
65t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30042026-02-01
55t1d9e06800fd699a1ca9d39670ed5902b6a2022233b61b0b11cfe4cbd0843b004b60de9e2026-02-07
53t1a6c022c8823e81e0ac82ac3e4830ed8181ab880200a49c204a00c084cd0066f6105e9c2026-02-06
43t10dc02bc21f0c079cff1be0080801a70927d621310011013d8f52f0831c20cb2334c02a2026-02-02
41t154e06836a51931b8abd3c25040a6c16e40fe3ef0634936261f959e8fc642d0024220322026-02-01
41t12b017b754b2126229691de48a8edb363122c8a1bab4cbd77e870440d21050fde93bc5f2026-01-26
40t1d1c08c458b20229c7d812dd29e8cf53374e8f563097a109cfe7a9083893c4b3a20c92c2026-02-01
38t1aed02b009d759b1c9cd35bb4dd9907f5d1012216641b0b10cf10d6e4d43f448b20de5d2026-02-07
35t105a231705abc74b1a667c961f3b374b4e63758b563f474b100276c92efe0e481ca682b2026-02-01
30t10241bfb3db605627b961c454cafe57a6261dd21a1754ffb3df15848c102a04fa43bc2f2026-02-07
28t11df0c084fe764f1589e1a574dcac0360ed436126a562ab20ef52cad0883e149d70cd1d2026-02-07
26t17a117b304f90a6125b92de98a4ee6713792cd95b9618fd77d931840c21200fed53bc4f2026-01-25
25t14ff0eb84fe374f1489a2a874dcbc0260e8036122a562ab20ef27cac1883e158d30ce1e2026-01-31

File Scans

The chart below shows the number of file scans conducted by YARAify over the past 12 months.

Data Scanned

This chart shows the amount of data scanned in Megabytes over the past past 12 months.

API requests

The illustration below documents the number of API requests over the past past 12 months.

Most matching YARA rules

YARA rules that matched most on files scanned on YARAify in the past 12 months.

Task countYARA RuleAuthorLast match
53'256'676Sus_Obf_Enc_Spoof_Hide_PEXiAnzheng2025-09-16
12'272'912CP_AllMal_DetectorDiegoAnalytics2025-10-08
5'770'798golang_bin_JCorn_CSC846Justin Cornwell2026-02-07
4'771'687vmdetectnex2026-02-07
4'443'406DebuggerCheck__API2026-02-07
3'836'881NETmalware-lu2026-02-07
2'607'988pe_detect_tls_callbacks2026-02-07
2'380'096SEH__vectored2026-02-07
2'191'989UPXV200V290MarkusOberhumerLaszloMolnarJohnReisermalware-lu2026-02-07
2'150'714SEH__vba2026-02-07
2'008'309MD5_Constantsphoul (@phoul)2026-02-07
1'750'940SHA1_Constantsphoul (@phoul)2026-02-07
1'750'937RIPEMD160_Constantsphoul (@phoul)2026-02-07
1'749'874UPXv20MarkusLaszloReisermalware-lu2026-02-07
1'732'227meth_stackstringsWilli Ballenthin2026-02-07

ClamAV Most matching ClamAV signature

ClamAV signature that matched most on files scanned on YARAify in the past 12 Mmonths.

Task countClamAV SignatureLast match
7'683'086PUA.Win.Packer.Lccwin-22026-02-07
5'132'965Win.Trojan.Obfus-382026-02-06
3'730'081Win.Trojan.Qukart-6874817-02026-02-06
3'729'628Win.Trojan.Padodor-10016488-02026-02-06
3'717'932Win.Malware.Qukart-6838239-02026-02-06
3'177'417Win.Trojan.Padodor-9877164-02026-01-19
2'233'169SecuriteInfo.com.BackDoor.HangUp.43791.UNOFFICIAL2026-02-07
1'269'751SecuriteInfo.com.BackDoor.HangUp.43914.UNOFFICIAL2026-02-07
1'168'351Win.Trojan.Berbew-9994138-02026-02-07
1'108'794Win.Packed.Generickdz-10022900-02026-02-07
980'169Win.Packed.Generickdz-10020556-02026-02-07
934'556Win.Trojan.Packz-10033592-02026-02-07
853'552Win.Trojan.Crypted-292026-02-04
850'607Win.Trojan.Crypted-302026-02-04
831'036Win.Malware.Padodor-10012876-02026-02-07

Most seen files

Most seen files scanned by YARAify in the past 12 months.

Task countSHA256 hashLast seen
4'5795ddfdd55fac3a23673a52fb3a75bed7dee266fb6fc8b10ced3746ab43064aef52025-03-12
3'7435c4d7270bb8923af5e914e087eb04857b5a39b25f20fd169f260fff4a95c25372025-03-05
3'48823c2d2b0c6cec3e69cb07f942c9e56f2087aeb24015be25823897faafc4708ae2022-02-07
3'473b3986e04464339cec16157cf8c8bffec3a8a8c5eae57997974d45f5369fa16552021-07-07
3'46039e48a3fc7e67968ff5d6e3cf8e12a7256af93ccabbce4da20d28c79237d95e82022-01-06
3'456e0af7f483f4965dca90eb5921ae004a7e41593b39284a63af97a9105b96718e72022-01-06
3'45569c88b4d5ea84620d1b762d5119fe9293c34e68268e7006cb503b865e963b2512021-07-09
3'4515ea4d94c695189639e9ab7afe8d76d231030921fbfdd95e1941c7c0a05fb8f032022-02-07
3'4151115b6c913a207b9d81f8482613b2a9c2929ca81399861d2d2c47422e244060d2022-02-07
3'40953c22863323c0f5ff94f4ae86df27a51db4eae7232cc38333346ee8be9df5aa62022-02-07
3'40432996a04eeead4de0813ca803033429fd38e0aa4ab8d603508e1d2c6bd38aba72022-02-08
3'396ebd6320e24d47c0d638749a149f14f4c94b1c98afa228dba1f48eea19a2c72572021-07-09
3'386e9926dc2559ae45dfffbe4628710240c6ad0c56073bd8f8e1a10bed2b29468e92021-07-08
3'3844d3a1915ae5f6353bae216494095c50ea2a67dca5db49bd7004476e1d92bb2ff2021-07-08
3'38187479e089e6852958dab4026e07bc01ed1f31af423b1d26db462ef7493a537f12022-02-08

Top dhash icon

Top dhash icon observed on files scanned by YARAify in the past 12 months.

Task countdhash iconLast seen
441'73200ccc4d0c4fc7c002026-02-08
296'47804ccfee2ece4a4842026-02-08
220'2831003873d31213f102026-02-08
137'018e9f4aa8accc6c6642026-02-08
134'7371003873db9313e102026-02-08
117'46769ccd4d49696cc712026-02-08
87'15902c0b0746c60b0182026-02-08
84'284e0f0e48c8ca4c0e02026-02-08
83'08318b1b1b17068c8802026-02-07
66'127818da080a0a0a0a22026-02-08
63'203399998ecd4d46c0e2026-02-08
62'468b298acbab2ca7a722026-02-08
55'65992e0b496a6cada722026-02-08
54'784526e32661e3a2a102026-01-20
51'027e8b03c727a9ad0e82026-02-07

Top imphash

Top imphash observed on files scanned by YARAify in the past 12 months.

Task countimphashLast seen
3'087'36046f03ef2495b21d7ad3e8d36dc03315d2026-01-19
1'121'3423f8d79e42b0b7cecf379b1ddce4e422a2026-01-23
1'042'5384dcbc0931c6f88874a69f966c86889d92026-02-06
682'506c9246f292a6fdc22d70e6e581898a0262026-01-22
661'91687914047e74de74a89c530e3bb19409e2026-02-08
448'521f34d5f2d4577ed6d9ceec516c1f5a7442026-02-09
422'1706db997463de98ce64bf5b6b8b0f77a452026-01-15
419'5332640d4b5d04a2d6756ecdf3ec765cc1a2025-10-30
276'619dae02f32a21e03ce65412f6e56942daa2026-02-09
258'09391f4b88d25daa33c7443253d9beb1bb32026-02-09
180'8955d6cad172c5535e4b6b6bbd2465716212026-02-08
174'07209d0478591d4f788cb3e5ea416c252372026-02-08
148'4152c2ad1dd2c57d1bd5795167a7236b0452025-12-03
100'2071639b1e17656fed4f63bac94cbb79cec2026-02-09
98'281a3df475500e5e30f4680b397c2ee13f12026-02-09

Top tlsh

Top tlsh observed on files scanned by YARAify in the past 14 months.

Task counttlshLast seen
4'024T190C46C2AA4604176E4F5213121FE7A672CBD2E6443ED24D377A05E8D6DA41F3B2381EF2021-11-18
3'845T165B4223FE8150C66E8CECBB4FF25F80E1386731436C7B5C264720E627769A8DA55229C2025-03-05
3'604T1C5D66B68E683D8F6DC4207754087BAAF22B8A770C779CE27DA046C58DB37E9645373062025-07-20
3'479T1B5033E9736E31000FB09BE35C654834FEF06CF59B97A9B4ED39826C72371A78629E0592022-02-07
3'474T1C8E052F688E090AC080023A82BDF2CA5437B03BD00202A0BF20BA04D022DF72E30A3F02021-07-07
3'466T1EF16DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
3'462T10016DD42A3F94608F6F77F7469B916604E3BBCA6AD79C21C1284505E5EB2E40CDB0B732022-01-06
3'447T160030B9736E31000FB09BE32E554C24FEF06CF59B976974ED39826C72350A78662E45B2022-02-07
3'443T138118CABCBE6ACF1C80C10B4070B8D013674883443E1C3170EA5007E7CA22FCD8B6E022021-07-09
3'417T153819E61842314C4F557CFF0D61BD82AAFA5334684584E1123E0606A4BCF60427041E32022-02-07
3'405T1BD812B4525A230CAC056C270ED52C158ABD9BC37AF44D3BBF1B90FDD83112451CC1B0B2022-02-07
3'400T1FBE47D21F1C18079E4F5157096FF7A5B246C69A64B2838E3E7987EC928741F27A3C2C72021-07-08
3'398T1BCE47D21F1C18079E4F5157096FF7A5B246C69A64B2838E3E7987EC928741F27A3C2C72021-07-08
3'387T13A03389736E31100FB08FE32C554838FEF86CF69B976974AD79826C72350A78621E45E2022-02-08
3'386T1CCE2F87B94C24337C001EFB60B95C9AEBB736D306564C0E32BD42B1F892B9687D5D4692021-07-09

Top telfhash

Top telfhash observed on files scanned by YARAify in the past 12 months.

Task counttelfhashLast seen
5'173t126f09018093456e197116ec8673dff7ad56220ef6a055e378f00fda79b699426e10c0c2025-06-05
1'754t10ab0011070740bb84308e12d5cdcae5679f20cc3fe470c27db6047a159b54434d00d182025-07-15
1'698t186c08c8c0fd401beba7d72a203bef2bf61a072f0be0224920404eb6f074c584028144c2025-07-15
960t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aacd2026-01-02
678t13611d04270b6891d2bb659245cbc42b5165536236381be75bf0ec5c45537002ba79e8b2026-02-05
576t178310071567851269aa1ec64d9ed97b2652ac7171340ff32df26c0cc281a449f62ac0f2026-02-08
456t10751b1fa6dba08ecfbd0a804c75e5bd33669ca7b153025b0406398b532f79954475c3a2026-01-21
435t12e11401a8f942e4eaff4000e869ea21b547075592f2b78538c2a752b93831c2f06dc532026-01-21
430t1564165181e7817b063356c4e159cef3b96a320db7e176c378e51e86aab699835d10c0c2026-01-21
408t1e7e02640ec759e1c68cb6974accc06b09601222260664b00cf10daf4c83f450e30ca4a2026-02-06
404t1e1d0a7d19e681c48e9f4805dc4ef61679340b5d17f1494877df16d029a320c9703110e2026-01-21
401t1f6b00121eb906524a6b1da0a6a533e48b46a31e5b0756164299f6101b61c64526d30042026-02-01
401t17951bbb0399939d8a2fbfb37730be9a45cb50a6015e172d1ceb769e2de417840cb14632026-01-21
397t1d211020260b689282bb259205cbc42f1165526233341be75bf0ec5c4993b002aa78e8b2026-02-05
392t1fe11104270b6891c2bb259245cbc42b0165532232381be74bf0ec5c05937002ba79e8b2026-02-05