Statistics

Detection coverage and corpus trends per file type

← Back to analyzer

Total files analysed 1,705,197
Distinct file types 9
Computed 2026-07-22T23:14:02.001091+00:00

Recent scans

SHA-256 Type Verdict Score Scanned
2ca20fcc42fa13f421d18596468919b63fff19e08272c8b72f86f490279150da Office (OLE) MALICIOUS 64 2026-07-22T23:36:54.594586+00:00
2a81bd6310bc2edf279d93203d617c682bb25cb13383492f7ae93eb8d64477e1 Office (OLE) MALICIOUS 176 2026-07-22T23:36:46.013450+00:00
1fb485c5530da20530a6369a3858f3d433fc562e215a801de07205c26806292d Office (OLE) MALICIOUS 298 2026-07-22T23:36:45.546711+00:00
2f09a6b690bfd6c4272952f0881fd78fdf34607f008e8d1301e786b7f6bac338 Office (OLE) MALICIOUS 182 2026-07-22T23:36:36.219484+00:00
1b36813146c93262d962c9ce1a5e71fd5083215fcaae0cf773dbffc648f58317 Office (OLE) MALICIOUS 298 2026-07-22T23:36:28.544532+00:00
12093c0c0a8c8bfe5dfe725bc962241668cd480e0bd28947649953ee8605f951 Office (OLE) MALICIOUS 268 2026-07-22T23:35:56.079280+00:00
080dfa3d38ded991bb20683e04b2f279da3426f99f3f7239486b6d15117baac9 Office (OLE) MALICIOUS 64 2026-07-22T23:35:48.333533+00:00
f0cffd3e7d092a054fc221045d2f9091dfff8ab66a4239097c1914cd14a87946 PDF MALICIOUS 106 2026-07-22T23:35:39.736327+00:00
02922627fefff30735fefc5a3e4a54a0fe78d11959628fbc1e9e806f02d309a8 Office (OLE) MALICIOUS 176 2026-07-22T23:35:22.911802+00:00
029105065cc02b7c015008ab11f3198f9ba74d2c5e235a0a63f9e43afef7ac1d Office (OLE) MALICIOUS 64 2026-07-22T23:35:01.480393+00:00
727a295a1d307c0205d7b70d6c2a70128588b68a741b7390c6d2fe6e0011dfd9 Office (OLE) MALICIOUS 62 2026-07-22T23:34:53.443846+00:00
3d6be23603043c6ce6fc90228eaa0af356cca6936ca1be46672291cbd5a12107 Office (OLE) CLEAN 22 2026-07-22T23:34:42.209534+00:00
f0cfea3efdf948eaabe40d11843ddfdb5b64a95d7058eddf10d6cab7c644ad67 PDF MALICIOUS 214 2026-07-22T23:34:21.771739+00:00
f0cfdd0d4d4841b4d04124255c42c822cb2f0e2bae3e65293095001f1cfb8b26 PDF MALICIOUS 284 2026-07-22T23:33:52.218947+00:00
f0cfe24f44fcc1ea8f2e26477894ddbd4c6337c09395abc255c05f0c151c721a PDF MALICIOUS 246 2026-07-22T23:33:50.898750+00:00
f0cfd17b8850c91baf8e8f4cb648a0b8ddfa80c80933b2ab7b66edeb7f4741fe PDF MALICIOUS 136 2026-07-22T23:33:40.256124+00:00
f0cfc982aaac45521dfce46c71121d83bf71d1ee4de3a4a48a55728cbfe2a35b PDF MALICIOUS 156 2026-07-22T23:33:05.630965+00:00
f0cfc5efbdcb73ce132819111256426ebe80a396f2bd9c54bd7a2f83c1425c0c PDF MALICIOUS 220 2026-07-22T23:32:20.291600+00:00
f0cfc488ac11a9815bef7931b747735e2ae2da403ecf7bac6eb74846ca5c7ba5 PDF MALICIOUS 186 2026-07-22T23:31:48.967464+00:00
f0cfc0a596a327c765168a980b6f7a26f277983eb4c8909439ea62c511264210 PDF MALICIOUS 186 2026-07-22T23:31:48.653343+00:00
f0cfa85e94326fe55ca57af574a647146b2caf86071af0df1f9144206561653b PDF MALICIOUS 216 2026-07-22T23:31:37.305895+00:00
f0cfa3f07b7d1fb03aeedbb0293a527c25df5d0a0f8282ea4aa2a532321cf213 PDF MALICIOUS 160 2026-07-22T23:31:04.275197+00:00
f0cf7c3d2bfcbb59f6f0ea133d1d6dbe3d6b5e1449e6c4dca841956ee58f379b PDF MALICIOUS 289 2026-07-22T23:30:49.036404+00:00
f0cf72200e72fd61b84e98db81700551d463082cbe2dd104cf6a9ce4ca3d37de PDF MALICIOUS 136 2026-07-22T23:29:47.212606+00:00
f0cf5b448cd712b0ba0a6298cc0552db7cfdf1767f4bd17ba1106979c9063c39 PDF MALICIOUS 96 2026-07-22T23:29:45.556075+00:00

PDF

1,423,664 files
Clean 13,839
Suspicious 27,924
Malicious 1,381,517
Error 384

Most-triggered heuristics

EMBEDDED_URL: 1,372,017 (18.4%)ML_NYX_PDF_MALICIOUS: 1,367,933 (18.4%)CLAMAV_DETECTION: 1,009,828 (13.6%)PDF_DUPLICATE_OBJ_BODY_INCREMENTAL: 888,329 (11.9%)PDF_URI: 775,242 (10.4%)PDF_SEO_DISPOSABLE_LINK_FARM: 696,311 (9.3%)PDF_COMPROMISED_CMS_UPLOAD_LINK_FARM: 490,639 (6.6%)PDF_MALICIOUS_REDIRECTOR_LINK: 309,924 (4.2%)PDF_SEO_LINK_FARM: 286,803 (3.9%)EXTRACTED_FILE_STATIC_TRIAGE: 251,554 (3.4%)
  • 1,372,017 (18.4%)
  • 1,367,933 (18.4%)
  • 1,009,828 (13.6%)
  • 888,329 (11.9%)
  • 775,242 (10.4%)
  • 696,311 (9.3%)
  • 490,639 (6.6%)
  • 309,924 (4.2%)
  • 286,803 (3.9%)
  • 251,554 (3.4%)

Office (OLE)

169,382 files
Clean 2,270
Suspicious 1,907
Malicious 165,203
Error 2

Most-triggered heuristics

CLAMAV_DETECTION: 117,854 (17.6%)EMBEDDED_URL: 110,577 (16.5%)OLE_VBA_MACROS: 108,374 (16.2%)OLE_VBA_PCODE_AUTOEXEC_EXEC: 58,046 (8.7%)OLE_VBA_CREATEOBJ: 53,912 (8.0%)OLE_XLM_AUTOOPEN: 53,579 (8.0%)OLE_VBA_DOCOPEN: 50,681 (7.6%)OLE_XLM_AUTOOPEN_DEFINEDNAME: 45,088 (6.7%)EXTRACTED_FILE_STATIC_TRIAGE: 38,314 (5.7%)OLE_XLM_DANGEROUS_FN: 34,160 (5.1%)
  • 117,854 (17.6%)
  • 110,577 (16.5%)
  • 108,374 (16.2%)
  • 58,046 (8.7%)
  • 53,912 (8.0%)
  • 53,579 (8.0%)
  • 50,681 (7.6%)
  • 45,088 (6.7%)
  • 38,314 (5.7%)
  • 34,160 (5.1%)

Office (OOXML)

99,317 files
Clean 1,747
Suspicious 1,336
Malicious 96,169
Error 65

Most-triggered heuristics

EMBEDDED_URL: 92,159 (23.0%)OOXML_XLM_MACROSHEET: 73,261 (18.2%)OOXML_XLM_BINARY_WINAPI_STRINGS: 49,669 (12.4%)OOXML_XLM_CELL_ARRAY_URL: 48,982 (12.2%)CLAMAV_DETECTION: 29,921 (7.5%)OOXML_XLM_REASSEMBLED_PAYLOAD: 26,353 (6.6%)OOXML_XLM_DANGEROUS_FN: 22,662 (5.6%)OOXML_XLM_AUTOOPEN_DEFINEDNAME: 21,522 (5.4%)OOXML_VBA: 19,442 (4.8%)OOXML_HIDDEN_SHEET: 17,554 (4.4%)
  • 92,159 (23.0%)
  • 73,261 (18.2%)
  • 49,669 (12.4%)
  • 48,982 (12.2%)
  • 29,921 (7.5%)
  • 26,353 (6.6%)
  • 22,662 (5.6%)
  • 21,522 (5.4%)
  • 19,442 (4.8%)
  • 17,554 (4.4%)

RTF

12,601 files
Clean 458
Suspicious 199
Malicious 11,939
Error 5

Most-triggered heuristics

RTF_OBJDATA: 11,788 (23.1%)RTF_OBJUPDATE: 9,954 (19.5%)RTF_EQUATION_EDITOR: 6,329 (12.4%)RTF_OBJEMB: 5,627 (11.0%)EXTRACTED_FILE_STATIC_TRIAGE: 3,874 (7.6%)EMBEDDED_URL: 3,796 (7.4%)CLAMAV_DETECTION: 3,273 (6.4%)CVE_2017_11882_ACTIVATION_RELATED: 2,548 (5.0%)RTF_OBJAUTLINK: 2,208 (4.3%)SE_ENABLE_LURE: 1,739 (3.4%)
  • 11,788 (23.1%)
  • 9,954 (19.5%)
  • 6,329 (12.4%)
  • 5,627 (11.0%)
  • 3,874 (7.6%)
  • 3,796 (7.4%)
  • 3,273 (6.4%)
  • 2,548 (5.0%)
  • 2,208 (4.3%)
  • 1,739 (3.4%)

Hangul (OLE)

171 files
Clean 46
Suspicious 78
Malicious 47
Error 0

Most-triggered heuristics

HWP_COMPRESSED: 171 (25.8%)HWP_SEMANTIC_FINGERPRINT: 116 (17.5%)HWP_SCRIPTS_STREAM: 110 (16.6%)OLE_SLACK_ANOMALY: 74 (11.1%)EMBEDDED_URL: 49 (7.4%)HWP_BINDATA: 48 (7.2%)EXTRACTED_FILE_STATIC_TRIAGE: 40 (6.0%)HWP_URL: 21 (3.2%)OLE_APPENDED_PAYLOAD: 18 (2.7%)HWP_POSTSCRIPT: 17 (2.6%)
  • 171 (25.8%)
  • 116 (17.5%)
  • 110 (16.6%)
  • 74 (11.1%)
  • 49 (7.4%)
  • 48 (7.2%)
  • 40 (6.0%)
  • 21 (3.2%)
  • 18 (2.7%)
  • 17 (2.6%)

JPEG

48 files
Clean 41
Suspicious 0
Malicious 7
Error 0

Most-triggered heuristics

EMBEDDED_URL: 33 (67.3%)JPEG_CARRIER_EMBEDDED_ENCODED_PE: 7 (14.3%)EXTRACTED_FILE_CLAMAV: 6 (12.2%)EXTRACTED_FILE_STATIC_TRIAGE: 3 (6.1%)
  • 33 (67.3%)
  • 7 (14.3%)
  • 6 (12.2%)
  • 3 (6.1%)

Microsoft Write

8 files
Clean 1
Suspicious 0
Malicious 7
Error 0

Most-triggered heuristics

WRI_OLE_WRAPPED: 7 (12.5%)SC_NOP_SLED: 7 (12.5%)SC_NOP_EQUIV_SLED: 6 (10.7%)SC_XOR_ENCODED: 6 (10.7%)EMBEDDED_OFFICE_CHILD_STATIC_TRIAGE: 6 (10.7%)OLE_SLACK_ANOMALY: 6 (10.7%)EXTRACTED_FILE_STATIC_TRIAGE: 6 (10.7%)OLE_RAW_SHELLCODE_PAYLOAD: 5 (8.9%)SC_PEB_ACCESS: 5 (8.9%)WRI_EMBEDDED_OLE: 2 (3.6%)
  • 7 (12.5%)
  • 7 (12.5%)
  • 6 (10.7%)
  • 6 (10.7%)
  • 6 (10.7%)
  • 6 (10.7%)
  • 6 (10.7%)
  • 5 (8.9%)
  • 5 (8.9%)
  • 2 (3.6%)

Hangul (HWP)

5 files
Clean 0
Suspicious 0
Malicious 5
Error 0

Most-triggered heuristics

HWP_COMPRESSED: 5 (16.1%)EXTRACTED_FILE_STATIC_TRIAGE: 5 (16.1%)HWP_POSTSCRIPT: 4 (12.9%)HWP_PS_FILE: 4 (12.9%)CLAMAV_DETECTION: 4 (12.9%)HWP_PS_EXEC: 3 (9.7%)EXTRACTED_FILE_CLAMAV: 3 (9.7%)HWP_PS_CVX_EXEC: 1 (3.2%)CVE_2017_8291: 1 (3.2%)EMBEDDED_URL: 1 (3.2%)
  • 5 (16.1%)
  • 5 (16.1%)
  • 4 (12.9%)
  • 4 (12.9%)
  • 4 (12.9%)
  • 3 (9.7%)
  • 3 (9.7%)
  • 1 (3.2%)
  • 1 (3.2%)
  • 1 (3.2%)

Photoshop (PSD)

1 files
Clean 1
Suspicious 0
Malicious 0
Error 0

Most-triggered heuristics

  • 1 (100.0%)