This directory contains VirusShare-related database archives.
WARNING: After you register VirusShare, you will be exposed to real malware samples. YOU HAVE BEEN WARNED.
This directory does not include malware itself. Use VirusShare to find and download malware samples.
The purpose of these archives is to provide robust way to find and understand malware files. To achieve this, I am making full metadata corpus based on VirusShare malware samples.
Thanks to bit-parallel processing of ssdeep digests, my in-house tool is now about 20 times faster. I can now deliver you cluster lists much faster and I could resume distributing cluster list with threshold value 79 (distributed as version 1.0 but suspended updates on 2014 because of different threshold value in version 1.1 and huge computation resource required).
Also, my in-house tool fast-ssdeep-clus is now open-sourced.
Most of exiftool JSON files in version 5 revision 1 were corrupted because my internal tool has a bug when exiftool encounters an error.
New revision, revision 2 files are now OK to use.
NIST has finally announced FIPS PUB 202 (SHA-3). I confirmed that the final version is unchanged from one in draft (as of May 2014) and you can use draft SHA-3 hashes in my database as final SHA-3 hashes.
I released list of SHA-1 hashes of all VirusShare archive files. I hope this is useful when you are verifying archive files you downloaded. You can use .torrent files to verify the file piece-by-piece. I don't explain details here (and now) but this is possible.
There was a bug which may generate wrong hash values before ssdeep 2.11. As a result of full disk scan, I confirmed no files are affected by this issue.
2014-04 revision of SHA-3 draft had some issues in text explaining algorithm and will not compute correct hashes if we use the program LITERALLY conforms this revision of SHA-3 draft. These issues are fixed in 2014-05 revision of SHA-3 draft.
spongeshaker claimed it conforms 2014-04 revision of SHA-3 draft but actually, it ignores portions of wrong parts of SHA-3 draft (because they were clear as errors). As a result, spongeshaker computes hashes of 2014-05 revision of SHA-3 draft. It means we don't have to fix the SHA-3 draft hashes in version 4 PREVIEW hash lists.
Please note that VirusShare samples may contain copyrighted materials. However, you can use this database (splitted as multiple archives) in any ways. I consider first and last 32-bytes of malwares are not covered by copyright rights because they are mostly uncreative and they don't expose (maybe copyrighted) main contents of samples.
This corpus is created, formatted and managed by Tsukasa OI (who is not a VirusShare administrator) in 2013 through 2022.
For these archives, I may reserve sui generis database right. However, to the extent possible under law, I have dedicated all copyright and related and neighboring rights to these archives to the public domain worldwide. These archives are distributed without any warranty. See <https://creativecommons.org/publicdomain/zero/1.0/> for details of the public domain dedication (the reason I use CC0 is because we cannot waive moral rights in Japan I live).
These hash and file type lists contain archive hashes information. File signature lists are also included as separate files (or archives). They are too big for single file and separated to multiple archives. All files are generated for each VirusShare's BitTorrent download (except individual "corrupted but fixed" samples). For part 0, it may include BitTorrent archives that are no longer available.
Unlike previous versions, version 5 hashes archive does not include file type information. You will need to download file type lists separately (if you need it).
This version contains following columns in `hashes' file (same as version 4):
If you see (FINAL) in the last updated column, the archive is the final version. You won't need to redownload those files unless you don't own corresponding version 5 archives or the archives are revised/discarded.
File name | Size | MD5 | Last Updated | Archived Range | Notes |
---|---|---|---|---|---|
vxshare-hashes-000-v5.tar.xz | 597.3MiB | ca7f9dea58f772ee7142a6a1c9f376bc | 2022-06-13 | Others | Latest archive including hashes from VirusShare_exe_large_20220610.zip |
vxshare-hashes-001-v5.tar.xz | 408.5MiB | 4108a997301f370df115c6ca3d901d74 | 2015-07-24 (FINAL) | 00000 - 00004 | - |
vxshare-hashes-002-v5.tar.xz | 406.3MiB | 9ad3fd8775a42530535968ca5fee1929 | 2015-07-24 (FINAL) | 00005 - 00009 | - |
vxshare-hashes-003-v5.tar.xz | 404.2MiB | 03668adea3b666b3b9e4189372a48200 | 2015-07-24 (FINAL) | 00010 - 00014 | - |
vxshare-hashes-004-v5.tar.xz | 403.8MiB | 350bb2ce9d26c351d22ef99a18e3466b | 2015-07-24 (FINAL) | 00015 - 00019 | - |
vxshare-hashes-005-v5.tar.xz | 408.9MiB | bf1abb7d23599ceb0fcea293613505bb | 2015-07-24 (FINAL) | 00020 - 00024 | - |
vxshare-hashes-006-v5.tar.xz | 407.4MiB | 71a24a94e3b2a0ef3aac6a3326d9eb17 | 2015-07-24 (FINAL) | 00025 - 00029 | - |
vxshare-hashes-007-v5.tar.xz | 409.4MiB | c51b1ab794fb82a3f03f16ca951dc804 | 2015-07-24 (FINAL) | 00030 - 00034 | - |
vxshare-hashes-008-v5.tar.xz | 410.8MiB | 536dad1b25bf5160b53ae5cc1cb20a2d | 2015-07-24 (FINAL) | 00035 - 00039 | - |
vxshare-hashes-009-v5.tar.xz | 411.4MiB | 11afce1490d503b6fedc04b42d32ba65 | 2015-07-24 (FINAL) | 00040 - 00044 | - |
vxshare-hashes-010-v5.tar.xz | 409.5MiB | ed34ab752bff5565658df083c820c944 | 2015-07-24 (FINAL) | 00045 - 00049 | - |
vxshare-hashes-011-v5.tar.xz | 411.4MiB | 142f5eef13797baa99cdbb4d7fd50a33 | 2015-07-24 (FINAL) | 00050 - 00054 | - |
vxshare-hashes-012-v5.tar.xz | 411.9MiB | 523f37ff591095316b089fa1bf9c61fb | 2015-07-24 (FINAL) | 00055 - 00059 | - |
vxshare-hashes-013-v5.tar.xz | 412.6MiB | c5a558fc90b5c798739a79c8a2b95c02 | 2015-07-24 (FINAL) | 00060 - 00064 | - |
vxshare-hashes-014-v5.tar.xz | 410.3MiB | 57c2cd8103f4c0633f9b4de401683ccd | 2015-07-24 (FINAL) | 00065 - 00069 | - |
vxshare-hashes-015-v5.tar.xz | 412.0MiB | 988e155c7b745eb82027e7e553c5af95 | 2015-07-24 (FINAL) | 00070 - 00074 | - |
vxshare-hashes-016-v5.tar.xz | 410.5MiB | 317b3b016f115055f0712c3520e19d32 | 2015-07-24 (FINAL) | 00075 - 00079 | - |
vxshare-hashes-017-v5.tar.xz | 410.8MiB | adea5cbbbd2804467849ca4dd279de88 | 2015-07-24 (FINAL) | 00080 - 00084 | - |
vxshare-hashes-018-v5.tar.xz | 405.6MiB | 523495b884d7ba597f0f8ae47dbe5c4d | 2015-07-24 (FINAL) | 00085 - 00089 | - |
vxshare-hashes-019-v5.tar.xz | 410.5MiB | 9100bb7766ce497f47d5f52bb0925ea0 | 2015-07-24 (FINAL) | 00090 - 00094 | - |
vxshare-hashes-020-v5.tar.xz | 409.5MiB | 88846ad7759706f9fa9f2da1462a18f0 | 2015-07-24 (FINAL) | 00095 - 00099 | - |
vxshare-hashes-021-v5.tar.xz | 408.5MiB | 429664f631f7d3b9c32765568019cc7f | 2015-07-24 (FINAL) | 00100 - 00104 | - |
vxshare-hashes-022-v5.tar.xz | 409.4MiB | 712a90c8892441a108de9a4d9df9458b | 2015-07-24 (FINAL) | 00105 - 00109 | - |
vxshare-hashes-023-v5.tar.xz | 404.9MiB | c8b29629d0f0309db35fcde5e929728e | 2015-07-24 (FINAL) | 00110 - 00114 | - |
vxshare-hashes-024-v5.tar.xz | 405.8MiB | 979af9a523d2005f5a3d368023c18f0f | 2015-07-24 (FINAL) | 00115 - 00119 | - |
vxshare-hashes-025-v5.tar.xz | 407.5MiB | d2daa3e05d1a4adecf30888f2d7cd317 | 2015-07-24 (FINAL) | 00120 - 00124 | - |
vxshare-hashes-026-v5.tar.xz | 404.5MiB | 70876e7c00aac95c97802c4b8642fedf | 2015-07-24 (FINAL) | 00125 - 00129 | - |
vxshare-hashes-027-v5.tar.xz | 403.0MiB | 3f5cf65cecfac33e5e55a20b98854ee0 | 2015-07-24 (FINAL) | 00130 - 00134 | - |
vxshare-hashes-028-v5.tar.xz | 398.2MiB | ae28e92d563a4ba49d50308ce2bb9ff4 | 2015-07-24 (FINAL) | 00135 - 00139 | - |
vxshare-hashes-029-v5.tar.xz | 401.6MiB | 104eef5ae868b61dad6fbf03f16c7351 | 2015-07-24 (FINAL) | 00140 - 00144 | - |
vxshare-hashes-030-v5.tar.xz | 364.5MiB | 304f485989eff3cb3b023aad208af954 | 2015-07-24 (FINAL) | 00145 - 00149 | - |
vxshare-hashes-031-v5.tar.xz | 407.6MiB | 281b693f79dcae8bda35f52d8d96d4e9 | 2015-07-24 (FINAL) | 00150 - 00159 | - |
vxshare-hashes-032-v5.tar.xz | 407.8MiB | a4e803dec6bb4fb269ea1ff92df40c67 | 2015-09-20 (FINAL) | 00160 - 00169 | - |
vxshare-hashes-033-v5.tar.xz | 408.5MiB | 0989143e37f327eb98df81c051f92d20 | 2015-10-08 (FINAL) | 00170 - 00179 | - |
vxshare-hashes-034-v5.tar.xz | 408.1MiB | e9e2a54fef59ec63f2953b131efc98a9 | 2015-10-28 (FINAL) | 00180 - 00189 | - |
vxshare-hashes-035-v5.tar.xz | 405.4MiB | 6f7997014317edbfb348a9f22326a916 | 2015-11-30 (FINAL) | 00190 - 00199 | - |
vxshare-hashes-036-v5.tar.xz | 404.9MiB | 3e91d93e49a3c3ac0eba6990927d466b | 2015-12-28 (FINAL) | 00200 - 00209 | - |
vxshare-hashes-037-v5.tar.xz | 400.9MiB | 24d6bce677204f0168e12d38dfbc7ba9 | 2016-02-13 (FINAL) | 00210 - 00219 | - |
vxshare-hashes-038-v5.tar.xz | 398.5MiB | 8fc0d783001d695e88deeb4f8afa0207 | 2016-05-02 (FINAL) | 00220 - 00229 | - |
vxshare-hashes-039-v5.tar.xz | 402.3MiB | 3f87342962345cb2c4078e0f4b1d4bdc | 2016-05-25 (FINAL) | 00230 - 00239 | - |
vxshare-hashes-040-v5.tar.xz | 405.7MiB | b58a7743b85be36f2bf2d6e452f5d88a | 2016-06-07 (FINAL) | 00240 - 00249 | - |
vxshare-hashes-041-v5.tar.xz | 407.7MiB | e5e1bd87956725f15da966f1d4b0ef86 | 2016-07-09 (FINAL) | 00250 - 00259 | - |
vxshare-hashes-042-v5.tar.xz | 400.0MiB | f72fd03b8bf07994f1130c990989fec7 | 2018-11-20 (FINAL) | 00260 - 00269 | - |
vxshare-hashes-043-v5.tar.xz | 395.2MiB | 76de0d35fc1939d884a7e46493aa83ab | 2017-03-01 (FINAL) | 00270 - 00279 | - |
vxshare-hashes-044-v5.tar.xz | 397.0MiB | f2cc0be5bcfd7d4e41d50d838063cba8 | 2017-05-09 (FINAL) | 00280 - 00289 | - |
vxshare-hashes-045-v5.tar.xz | 395.9MiB | ee597575417d608197de24672ebe2240 | 2017-10-20 (FINAL) | 00290 - 00299 | - |
vxshare-hashes-046-v5.tar.xz | 393.4MiB | 6b33eea63a4e7feef71d525e786796c1 | 2018-03-02 (FINAL) | 00300 - 00309 | - |
vxshare-hashes-047-v5.tar.xz | 394.3MiB | 1f1f5efeee5a049d93f86b5bb30a54f1 | 2018-07-04 (FINAL) | 00310 - 00319 | - |
vxshare-hashes-048-v5.tar.xz | 391.6MiB | 8df97557d301d51f70981ecb3c7a678a | 2018-09-08 (FINAL) | 00320 - 00329 | - |
vxshare-hashes-049-v5.tar.xz | 393.7MiB | 5a6251efb6dd94856c5d53c869456e26 | 2018-11-09 (FINAL) | 00330 - 00339 | - |
vxshare-hashes-050-v5.tar.xz | 395.7MiB | 15f9077b299c97f84945aa57ed2bf4bd | 2019-02-01 (FINAL) | 00340 - 00349 | - |
vxshare-hashes-051-v5.tar.xz | 396.5MiB | e365031294db5da25685226dc64cb347 | 2019-05-19 (FINAL) | 00350 - 00359 | - |
vxshare-hashes-052-v5.tar.xz | 402.9MiB | caeeaed02140349e81ef2fb69472f4b3 | 2019-10-05 (FINAL) | 00360 - 00369 | - |
vxshare-hashes-053-v5.tar.xz | 405.8MiB | 968b5c32e0a974238153b8ca8ce7cff3 | 2020-05-18 (FINAL) | 00370 - 00379 | - |
vxshare-hashes-054-v5.tar.xz | 405.9MiB | cae1281c9d598eee9e75949badb837ab | 2020-09-28 (FINAL) | 00380 - 00389 | - |
vxshare-hashes-055-v5.tar.xz | 404.7MiB | 01116cc5a51ecca4162f04450688d717 | 2020-12-03 (FINAL) | 00390 - 00399 | - |
vxshare-hashes-056-v5.tar.xz | 403.8MiB | 22ebb7f91c17081522d9f9aaa0976120 | 2022-02-25 (FINAL) | 00400 - 00409 | - |
vxshare-hashes-057-v5.tar.xz | 408.1MiB | 4499d0a8f605d0316bc6a60ca1e1b819 | 2022-05-07 (FINAL) | 00410 - 00419 | - |
vxshare-hashes-058-v5.tar.xz | 404.9MiB | 713f89077ddc2283a83819b90e45a8d6 | 2022-07-15 (FINAL) | 00420 - 00429 | Latest archive including hashes from VirusShare_00426.zip through VirusShare_00429.zip |
This archive includes file type information (in JSON format) retrieved by following tools (as of revision 2):
These archives do not include hash information. You will need hashes list (if you need).
If you see (FINAL) in the last updated column, the archive is the final version. You won't need to redownload those files unless you don't own corresponding version 5 revision 2 archives or the archives are revised/discarded.
File name | Size | Rev. | MD5 | Last Updated | Archived Range | Notes |
---|---|---|---|---|---|---|
vxshare-filetypes-000-v5.tar.xz | 38.1MiB | 2 | 32aaddfb4c04e0530fcd0dab65060d5b | 2022-06-13 | Others | Latest archive including file type signatures from VirusShare_exe_large_20220610.zip |
vxshare-filetypes-001-v5.tar.xz | 116.0MiB | 2 | a1a59d2195489a1e224df56d12e03023 | 2015-09-20 (FINAL) | 00000 - 00019 | - |
vxshare-filetypes-002-v5.tar.xz | 116.4MiB | 2 | a8a9d22a7c943cf3312ba0513f509242 | 2015-09-20 (FINAL) | 00020 - 00039 | - |
vxshare-filetypes-003-v5.tar.xz | 121.5MiB | 2 | 071be7806ed390e0e2043dfcc3410178 | 2015-09-20 (FINAL) | 00040 - 00059 | - |
vxshare-filetypes-004-v5.tar.xz | 128.1MiB | 2 | 6332194c5484ce020f1f80e6ccad14dc | 2015-09-20 (FINAL) | 00060 - 00079 | - |
vxshare-filetypes-005-v5.tar.xz | 134.2MiB | 2 | d21b1f82863f0dd754c4e78744986312 | 2015-09-20 (FINAL) | 00080 - 00099 | - |
vxshare-filetypes-006-v5.tar.xz | 124.7MiB | 2 | 60dadd8cb3b725c299f1954e200b805a | 2015-09-20 (FINAL) | 00100 - 00119 | - |
vxshare-filetypes-007-v5.tar.xz | 118.1MiB | 2 | 1cd5d5d885113179754473dda8d06ced | 2015-09-20 (FINAL) | 00120 - 00139 | - |
vxshare-filetypes-008-v5.tar.xz | 94.8MiB | 2 | ff8ec6d6f0fe9ffef876c65503cf91c2 | 2015-09-20 (FINAL) | 00140 - 00159 | - |
vxshare-filetypes-009-v5.tar.xz | 115.5MiB | 2 | 1737aa3550e9e8e4bbbe386de94ca6f9 | 2015-11-30 (FINAL) | 00160 - 00199 | - |
vxshare-filetypes-010-v5.tar.xz | 117.6MiB | 2 | 5162f0bee4fd3dec33ad21f51aa65060 | 2016-05-25 (FINAL) | 00200 - 00239 | - |
vxshare-filetypes-011-v5.tar.xz | 107.8MiB | 2 | 393dd0636499d0ba0ae46b49bfe5e3fa | 2017-03-01 (FINAL) | 00240 - 00279 | - |
vxshare-filetypes-012-v5.tar.xz | 117.8MiB | 2 | bef1e5efcd34d9364e3f44643189bba3 | 2018-07-04 (FINAL) | 00280 - 00319 | - |
vxshare-filetypes-013-v5.tar.xz | 109.3MiB | 2 | 975bf9b48fca36bc10603cc7c568903b | 2019-05-19 (FINAL) | 00320 - 00359 | - |
vxshare-filetypes-014-v5.tar.xz | 151.7MiB | 2 | c2b5079b2624f661505f17643d81a5a8 | 2020-12-03 (FINAL) | 00360 - 00399 | - |
vxshare-filetypes-015-v5.tar.xz | 127.7MiB | 2 | 976d45f25b290b774bb088cd0178e882 | 2022-07-15 | 00400 - 00429 | Latest archive including file type signatures from VirusShare_00426.zip through VirusShare_00429.zip |
This cluster list contains malware clusters based on ssdeep similarity score.
All ssdeep hashes are clustered using parallel ssdeep-compatible in-house tool "fast-ssdeep-clus" which generates the same result as clustering mode on ssdeep 2.13. This will help finding similar files. Available threshold parameters are 49 and 79.
File name | Threshold | Size | MD5 | Last Updated | Notes |
---|---|---|---|---|---|
vxshare-clusters-49.tar.xz | 49 | 449.6MiB | f977d6e464b4b5e5991e6428236a99d9 | 2022-07-15 | Latest archive including ssdeep hashes from VirusShare_00426.zip through VirusShare_00429.zip |
vxshare-clusters-79.tar.xz | 79 | 268.1MiB | 08266dc0a0723c89ee43f8c36f7670af | 2022-07-15 | Latest archive including ssdeep hashes from VirusShare_00426.zip through VirusShare_00429.zip |
When generating version 1.1 cluster lists, following hashes were not clustered correctly:
This issue is fixed on version 1.2.