CLUSTER MALWARE-DESKTOP-EXECUTABLE · 9 ENTRIES · EARLIEST ENTRY 2026-08-13
Static malware analysis tools
This cluster comprises desktop and web tools that statically analyze executable files—covering PE inspection, YARA rules, packer identification, suspicious API detection, security mitigations, hex views, and disassembly—without executing samples. The dated history is too thin to read a shape from, as only one pre-index entry exists, so the cluster predates the index or most members are undated. Traction leaders by activity signal are Malware-analysis-AsphDex (6 stars), followed by WinVault and binary-sentinel (2 stars each).
Entry timeline
ENTRY TIMELINE
Each bar is the month a member carries, which is a creation date where the source published one and a crawl date otherwise. Nothing in the index was found before 11 August 2026, and coverage broadened sharply on 14–15 August, so a bar from then on reports how much we found that month, not how much was built; an earlier bar reports how far back a member's own source dated it — not how long we have been watching.
Members by activity
Activity signals, not revenue.
Build origin · 2 hand-coded · 7 unlabelled
Operator · 5 hobby · 2 indie · 1 open source · 1 unlabelled
Two labels per entry, never collapsed into one: how it was built, and who stands behind it. Counted over the 9 listed below. Unlabelled means nothing has decided yet — not that the answer is small.
- 01Malware-analysis-AsphDex6★25 days—hobbyDesktop application that performs static analysis of executable files, including PE inspection and YARA-based threat detection, for malware researchers.
- 02WinVault2★16 days—hobbyDesktop application that captures Windows security snapshots and identifies forensic evidence of meaningful system changes.
- 03binary-sentinel2★1 daylivehobbyWeb-based malware triage tool that statically analyzes executable files for packers, suspicious APIs, and security mitigations without running samples.
- 04PELens1★2 dayslivehand-codedhobbyDesktop app for static malware triage of Windows executables with threat indicators, signature scanning, hex view, and disassembly.
- 05jast1★26 days—Desktop static application security testing app that uses an AI model to analyze code regions without rule libraries.
- 06xtobe-final-guardian0★22 days—indieDesktop security app that scans local files, analyzes threats with YARA and heuristics, and gives offline verdicts for Windows users.
- 07BYXRA1★1 molivehobbyDesktop application for static and live-behavior analysis of Windows executable files, supporting Arabic and English interfaces.
- 08MAIR-SUITE-DFIR-Threat-Analysis0★1 mo—hand-codedindieAutomated malware analysis and incident response suite with static/dynamic analysis, YARA scanning, memory forensics, and MITRE ATT&CK reporting.
- 09Detect It Easy0★5 moliveopen sourceDesktop file analyzer that detects compilers, linkers, signatures, and packing methods across common executable file formats.
Ranked by traction, highest first, and paged 20 at a time — this is a window on the cluster, never the whole of it. Ties are broken by a stable id so a product cannot appear on two pages or fall between them. Browse every cluster.