Files

[       4096 30-Mar-2025 11:27]    .
├── [         67 30-Mar-2025 11:27]    database_generation_ci.txt
├── [       4589 30-Mar-2025 11:27]    generation_report.html
├── [         29 30-Mar-2025 11:27]    generation_time.html
├── [        721 30-Mar-2025 11:27]    gpg.key
├── [   13478998 30-Mar-2025 11:27]    hypatia-domains-bloom.bin
├── [        119 30-Mar-2025 11:27]    hypatia-domains-bloom.bin.sig
├── [   22764526 30-Mar-2025 11:27]    hypatia-md5-bloom.bin
├── [        119 30-Mar-2025 11:27]    hypatia-md5-bloom.bin.sig
├── [     299542 30-Mar-2025 11:27]    hypatia-sha1-bloom.bin
├── [        119 30-Mar-2025 11:27]    hypatia-sha1-bloom.bin.sig
├── [    6589734 30-Mar-2025 11:27]    hypatia-sha256-bloom.bin
├── [        119 30-Mar-2025 11:27]    hypatia-sha256-bloom.bin.sig
├── [         17 30-Mar-2025 11:27]    sign_key.txt
├── [         29 30-Mar-2025 11:27]    sign_time.html
├── [         27 30-Mar-2025 11:27]    signer.txt
└── [       3802 30-Mar-2025 11:27]    template.html


Signing Key: 5298C0C0C3E73288
Signed by: maintainteam@asandikci.com
Current Databases created with: CI
Signed & Created Report with self-hosted CI

Hypatia Signature Database Stats

Databases and stats generated using Codeberg/GitHub CI
License: AGPL-3.0-or-later
Source Code:


Sources

Filename Author License Source
amnesty.hsb Amnesty International CC BY 2.0 https://github.com/amnestytech/investigations
avast-covid19.sha256 Avast Unknown https://github.com/avast/covid-19-ioc
blocklists-*.txt Various Unknown https://github.com/scafroglia93/blocklists
blog-google.sha256 Google Unknown https://blog.google
blog-kaspersky.hashes Kaspersky Unknown https://securelist.com
blog-mcafee.hashes McAfee Unknown https://www.mcafee.com/blogs
cybercure.md5 Cybercure Unknown https://api.cybercure.ai/feed
cellebrite.hsb @levlesec CC0 https://github.com/mbkore/lockup
daily.h*b & main.h*b ClamAV GPL-2.0 https://www.clamav.net
divestos-revoked-ci-key.sha256 Divested Computing Group CC0 N/A
eset.* ESET BSD 2-Clause https://github.com/eset/malware-ioc
hypatia-gpl-violators.hsb Divested Computing Group CC0 N/A
hypatia-selftest-canary.* Divested Computing Group CC0 N/A
malshare-*.* MalShare Unknown https://malshare.com
malware_bazaar.sha256 abuse.ch CC0 https://bazaar.abuse.ch
malwaresamples.sha256 Virus Samples Unknown https://github.com/MalwareSamples
misc-maldroid.sha256 @maldroid Unknown https://maldroid.github.io/android-malware-samples
sanesecurity-*.h*b Sanesecurity "free of charge in commercial products" https://sanesecurity.com/usage/signatures
signature-base*.loki @Neo23x0 Detection Rule License (DRL) 1.1 https://github.com/Neo23x0/signature-base
stalkerware.hsb Echap CC BY 4.0 https://github.com/AssoEchap/stalkerware-indicators
targetedthreats.h*b @botherder CC BY-SA 4.0 https://github.com/botherder/targetedthreats
threatfox.sha256 abuse.ch CC0 https://threatfox.abuse.ch
threatview.* Threatview.io Unknown https://threatview.io
umair9747.md5 @umair9747 Unknown https://github.com/umair9747/datasets
VirusShare_0*.md5 VirusShare "Sharing is Caring" https://virusshare.com/hashes
zimperium-ioc-*.* Zimperium Unknown https://github.com/Zimperium/IOC

Generation Output: Default



Processing exclusions:
	daily.fp
	main.fp
	Loaded 995 excluded hashes
Processing signatures:
	cybercure.md5
		md5: 100, sha1: 0, sha256: 0
	daily.hdb
		md5: 17, sha1: 0, sha256: 0
	daily.hdu
		md5: 53, sha1: 0, sha256: 0
	daily.hsb
		md5: 1711475, sha1: 24, sha256: 75
	daily.hsu
		md5: 0, sha1: 0, sha256: 1
	eset.md5
		md5: 5498, sha1: 0, sha256: 0
	eset.sha1
		md5: 0, sha1: 5507, sha256: 0
	eset.sha256
		md5: 0, sha1: 0, sha256: 5505
	hypatia-selftest-canary.hsb
		md5: 1, sha1: 1, sha256: 1
	hypatia-selftest-canary.md5
		md5: 1, sha1: 0, sha256: 0
	hypatia-selftest-canary.sha1
		md5: 0, sha1: 1, sha256: 0
	hypatia-selftest-canary.sha256
		md5: 0, sha1: 0, sha256: 1
	hypatia-test-file.sha256
		md5: 0, sha1: 0, sha256: 2
	main.hdb
		Skipping excluded hash: 4a01eb2124846787b081029aa1f378a8
		Skipping excluded hash: 3edcf50443af194bf5131b0f35e3671d
		Skipping excluded hash: dfd4826b5684834bc1d95ac77e24a7b6
		Skipping excluded hash: aed6b11254dbab6a6b057124e40c3e05
		Skipping excluded hash: 24184a61d79781e53b1dd0dc98bed567
		Skipping excluded hash: 1e2abc7fcd3b26825b911505c67a86c5
		Skipping excluded hash: c11d198799966b73f2e5b2e09a3f5213
		Skipping excluded hash: 41b051ded6193cb34056f37294b50705
		Skipping excluded hash: 0ea31126b2c7d445d0c2c9fb4a9936f3
		Skipping excluded hash: 8964148056b3848aa2cb587e9d137890
		Skipping excluded hash: fa94de0a9423be642bf35017f6d0ffe5
		Skipping excluded hash: 6ba0a1e9e362d1df46bf747ba0f942fa
		Skipping excluded hash: f098d6e750554e79d4375a3fa453a0e8
		Skipping excluded hash: 5f872c29385244b73c71a840f4b49b18
		Skipping excluded hash: 7660f01d3b38aca1747e397d21d790af
		Skipping excluded hash: c02b548b8b5497635bdc5a868eb5d454
		Skipping excluded hash: 090d5891041e35e18c77f664581c0bd6
		Skipping excluded hash: ddbfa66301c67a385596362d83cf36f1
		Skipping excluded hash: 78a879480c9c1ed1ebce902fc31f7272
		Skipping excluded hash: 23e155bd22f265f09e3afb533d136b5a
		Skipping excluded hash: f9a6d8dec431ae89572917ffce5bab3d
		Skipping excluded hash: 61bbb422c0c8262b8754145a962775bc
		Skipping excluded hash: df0da299fc8ff1455e09e26075eaf576
		Skipping excluded hash: cb1f6f0944688193e5bc9a76fd442678
		Skipping excluded hash: 863bba85be26f370feb9900547fdf8f1
		Skipping excluded hash: 36a19455163cd9b4f33317db56c94181
		Skipping excluded hash: e8450aa5bee3c192c45a051a1bc62df7
		Skipping excluded hash: 004c9b712623ca810da66eb724e206a1
		Skipping excluded hash: f4504b67c3ef7abb03155c2e00a71f24
		Skipping excluded hash: a50056f4fc4f451c2daa73508523679d
		Skipping excluded hash: 952a27267dfae7fa75fbe2a1bd32ff5f
		Skipping excluded hash: bd94ca52f41990782aa15d4e9f902051
		Skipping excluded hash: 4de2cd3902c0010fa19116f05bd4ff20
		Skipping excluded hash: a7925c63f1198b69f051392722643e07
		md5: 82170, sha1: 0, sha256: 0
	main.hsb
		md5: 2362497, sha1: 18, sha256: 345
	malware_bazaar.sha256
		md5: 0, sha1: 0, sha256: 893105
	sanesecurity-bofhland_malware_attach.hdb
		md5: 1787, sha1: 0, sha256: 0
	sanesecurity-hackingteam.hsb
		md5: 0, sha1: 0, sha256: 431
	sanesecurity-malwarehash.hsb
		md5: 144, sha1: 24, sha256: 694
	sanesecurity-porcupine.hsb
		md5: 164, sha1: 0, sha256: 0
	sanesecurity-rogue.hdb
		md5: 0, sha1: 0, sha256: 358
	sanesecurity-spamattach.hdb
		md5: 0, sha1: 0, sha256: 14
	sanesecurity-spamimg.hdb
		md5: 0, sha1: 0, sha256: 370
	sanesecurity-winnow.attachments.hdb
		md5: 0, sha1: 0, sha256: 0
	sanesecurity-winnow_bad_cw.hdb
		md5: 0, sha1: 0, sha256: 0
	sanesecurity-winnow_extended_malware.hdb
		md5: 0, sha1: 0, sha256: 0
	sanesecurity-winnow_malware.hdb
		md5: 0, sha1: 0, sha256: 0
	signature-base-otx.loki
		md5: 16552, sha1: 5611, sha256: 21137
	signature-base.loki
		md5: 1313, sha1: 777, sha256: 1375
	stalkerware.hsb
		md5: 0, sha1: 0, sha256: 2786
	template.html
		md5: 0, sha1: 0, sha256: 0
	threatfox.sha256
		NOT HEXADECIMAL: entries:
		md5: 0, sha1: 0, sha256: 670942
	threatview.md5
		md5: 129, sha1: 0, sha256: 0
	threatview.sha1
		md5: 0, sha1: 135, sha256: 0
Lines read: valid: 5873338, invalid: 1
Read count: md5: 4193204, sha1: 14550, sha256: 1665584, domains: 0
Added count: md5: 4181901, sha1: 12098, sha256: 1597142, domains: 0
Approximate count: md5: 4182399, sha1: 12100, sha256: 1596794, domains: 0
Max amount: md5: 7600000, sha1: 100000, sha256: 2200000, domains: 4500000
Fill amount: md5: 55.025013%, sha1: 12.098001%, sha256: 72.59736%, domains: 0.0%
App reported count: 5791293
Expected false postive rate: md5: 4.587270474439573E-9, sha1: 3.6143798207568354E-19, sha256: 1.906081088095034E-7, domains: 0.0
Testing exclusions:
	No exclusions found :)