Files

[       4096 01-Sep-2026 06:01]    .
├── [         68 01-Sep-2026 06:01]    database_generation_ci.txt
├── [       3824 01-Sep-2026 06:01]    generation_report.html
├── [         29 01-Sep-2026 06:01]    generation_time.html
├── [        721 01-Sep-2026 06:01]    gpg.key
├── [   13478998 01-Sep-2026 06:01]    hypatia-domains-bloom.bin
├── [        119 01-Sep-2026 06:01]    hypatia-domains-bloom.bin.sig
├── [   22764526 01-Sep-2026 06:01]    hypatia-md5-bloom.bin
├── [        119 01-Sep-2026 06:01]    hypatia-md5-bloom.bin.sig
├── [     299542 01-Sep-2026 06:01]    hypatia-sha1-bloom.bin
├── [        119 01-Sep-2026 06:01]    hypatia-sha1-bloom.bin.sig
├── [    6589734 01-Sep-2026 06:01]    hypatia-sha256-bloom.bin
├── [        119 01-Sep-2026 06:01]    hypatia-sha256-bloom.bin.sig
├── [         17 01-Sep-2026 06:01]    sign_key.txt
├── [         29 01-Sep-2026 06:01]    sign_time.html
├── [         27 01-Sep-2026 06:01]    signer.txt
└── [       3802 01-Sep-2026 06:01]    template.html


Signing Key: 5298C0C0C3E73288
Signed by: maintainteam@asandikci.com
Current Databases created with: CI
Signed & Created Report with self-hosted CI

Hypatia Signature Database Stats

Databases and stats generated using Codeberg/GitHub CI
License: AGPL-3.0-or-later
Source Code:


Sources

Filename Author License Source
amnesty.hsb Amnesty International CC BY 2.0 https://github.com/amnestytech/investigations
avast-covid19.sha256 Avast Unknown https://github.com/avast/covid-19-ioc
blocklists-*.txt Various Unknown https://github.com/scafroglia93/blocklists
blog-google.sha256 Google Unknown https://blog.google
blog-kaspersky.hashes Kaspersky Unknown https://securelist.com
blog-mcafee.hashes McAfee Unknown https://www.mcafee.com/blogs
cybercure.md5 Cybercure Unknown https://api.cybercure.ai/feed
cellebrite.hsb @levlesec CC0 https://github.com/mbkore/lockup
daily.h*b & main.h*b ClamAV GPL-2.0 https://www.clamav.net
divestos-revoked-ci-key.sha256 Divested Computing Group CC0 N/A
eset.* ESET BSD 2-Clause https://github.com/eset/malware-ioc
hypatia-gpl-violators.hsb Divested Computing Group CC0 N/A
hypatia-selftest-canary.* Divested Computing Group CC0 N/A
malshare-*.* MalShare Unknown https://malshare.com
malware_bazaar.sha256 abuse.ch CC0 https://bazaar.abuse.ch
malwaresamples.sha256 Virus Samples Unknown https://github.com/MalwareSamples
misc-maldroid.sha256 @maldroid Unknown https://maldroid.github.io/android-malware-samples
sanesecurity-*.h*b Sanesecurity "free of charge in commercial products" https://sanesecurity.com/usage/signatures
signature-base*.loki @Neo23x0 Detection Rule License (DRL) 1.1 https://github.com/Neo23x0/signature-base
stalkerware.hsb Echap CC BY 4.0 https://github.com/AssoEchap/stalkerware-indicators
targetedthreats.h*b @botherder CC BY-SA 4.0 https://github.com/botherder/targetedthreats
threatfox.sha256 abuse.ch CC0 https://threatfox.abuse.ch
threatview.* Threatview.io Unknown https://threatview.io
umair9747.md5 @umair9747 Unknown https://github.com/umair9747/datasets
VirusShare_0*.md5 VirusShare "Sharing is Caring" https://virusshare.com/hashes
zimperium-ioc-*.* Zimperium Unknown https://github.com/Zimperium/IOC

Generation Output: Default



Processing exclusions:
	daily.fp
	main.fp
	Loaded 995 excluded hashes
Processing domains:
	Loaded 2002386 domains
Processing signatures:
	daily.hdb
		md5: 22, sha1: 0, sha256: 0
	daily.hdu
		md5: 38, sha1: 0, sha256: 0
	daily.hsb
		md5: 54582, sha1: 2, sha256: 77
	daily.hsu
		md5: 0, sha1: 0, sha256: 0
	eset.md5
		md5: 6089, sha1: 0, sha256: 0
	eset.sha1
		md5: 0, sha1: 6100, sha256: 0
	eset.sha256
		md5: 0, sha1: 0, sha256: 6098
	hypatia-selftest-canary.hsb
		md5: 1, sha1: 1, sha256: 1
	hypatia-selftest-canary.md5
		md5: 1, sha1: 0, sha256: 0
	hypatia-selftest-canary.sha1
		md5: 0, sha1: 1, sha256: 0
	hypatia-selftest-canary.sha256
		md5: 0, sha1: 0, sha256: 1
	hypatia-test-file.sha256
		md5: 0, sha1: 0, sha256: 2
	main.hdb
		Skipping excluded hash: 4a01eb2124846787b081029aa1f378a8
		Skipping excluded hash: 3edcf50443af194bf5131b0f35e3671d
		Skipping excluded hash: aed6b11254dbab6a6b057124e40c3e05
		Skipping excluded hash: 1e2abc7fcd3b26825b911505c67a86c5
		Skipping excluded hash: 41b051ded6193cb34056f37294b50705
		Skipping excluded hash: 8964148056b3848aa2cb587e9d137890
		Skipping excluded hash: 6ba0a1e9e362d1df46bf747ba0f942fa
		Skipping excluded hash: f098d6e750554e79d4375a3fa453a0e8
		Skipping excluded hash: 5f872c29385244b73c71a840f4b49b18
		Skipping excluded hash: 7660f01d3b38aca1747e397d21d790af
		Skipping excluded hash: 090d5891041e35e18c77f664581c0bd6
		Skipping excluded hash: 78a879480c9c1ed1ebce902fc31f7272
		Skipping excluded hash: df0da299fc8ff1455e09e26075eaf576
		Skipping excluded hash: cb1f6f0944688193e5bc9a76fd442678
		Skipping excluded hash: 863bba85be26f370feb9900547fdf8f1
		Skipping excluded hash: e8450aa5bee3c192c45a051a1bc62df7
		Skipping excluded hash: 004c9b712623ca810da66eb724e206a1
		Skipping excluded hash: f4504b67c3ef7abb03155c2e00a71f24
		Skipping excluded hash: a50056f4fc4f451c2daa73508523679d
		Skipping excluded hash: a7925c63f1198b69f051392722643e07
		md5: 20402, sha1: 0, sha256: 0
	main.hsb
		md5: 464994, sha1: 1, sha256: 109
	malware_bazaar.sha256
		md5: 0, sha1: 0, sha256: 1128553
	sanesecurity-bofhland_malware_attach.hdb
		md5: 1796, sha1: 0, sha256: 0
	sanesecurity-hackingteam.hsb
		md5: 0, sha1: 0, sha256: 430
	sanesecurity-malwarehash.hsb
		md5: 144, sha1: 24, sha256: 692
	sanesecurity-porcupine.hsb
		md5: 54, sha1: 0, sha256: 0
	sanesecurity-rogue.hdb
		md5: 0, sha1: 0, sha256: 629
	sanesecurity-spamattach.hdb
		md5: 0, sha1: 0, sha256: 14
	sanesecurity-spamimg.hdb
		md5: 0, sha1: 0, sha256: 836
	sanesecurity-winnow.attachments.hdb
		md5: 0, sha1: 0, sha256: 0
	sanesecurity-winnow_bad_cw.hdb
		md5: 0, sha1: 0, sha256: 0
	sanesecurity-winnow_extended_malware.hdb
		md5: 0, sha1: 0, sha256: 0
	sanesecurity-winnow_malware.hdb
		md5: 0, sha1: 0, sha256: 0
	signature-base.loki
		md5: 944, sha1: 579, sha256: 996
	stalkerware.hsb
		md5: 0, sha1: 0, sha256: 3031
	targetedthreats.hdb
		md5: 228, sha1: 0, sha256: 0
	targetedthreats.hsb
		md5: 0, sha1: 0, sha256: 281
	template.html
		md5: 0, sha1: 0, sha256: 0
	threatfox.sha256
		NOT HEXADECIMAL: entries:
		md5: 0, sha1: 0, sha256: 2717
	threatview.md5
		md5: 838, sha1: 0, sha256: 0
	threatview.sha1
		md5: 0, sha1: 618, sha256: 0
Lines read: valid: 1709194, invalid: 1
Read count: md5: 552071, sha1: 7790, sha256: 1149333, domains: 2002502
Added count: md5: 550133, sha1: 7326, sha256: 1144467, domains: 2002412
Approximate count: md5: 550154, sha1: 7326, sha256: 1144271, domains: 2002386
Max amount: md5: 7600000, sha1: 100000, sha256: 2200000, domains: 4500000
Fill amount: md5: 7.238592%, sha1: 7.326%, sha256: 52.021225%, domains: 44.498043%
App reported count: 1701751
Expected false postive rate: md5: 7.783561786279432E-23, sha1: 9.496143512320782E-23, sha256: 2.084679301804648E-9, domains: 2.2517930115258008E-10
Testing exclusions:
	No exclusions found :)