Wingetlywingetly
← All apps
Y

YARA-X

by VirusTotalv1.20.0

Last updated

YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor.

Visit homepage

Install with winget

$ winget install --id VirusTotal.YARA-X --exact --version 1.20.0

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

Installers · v1.20.0

ArchitectureTypeScopeInstallDownload
x64ZIP
archive
-Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

3 known CVEs via NVD

  • high8.8Patched in wingetCVE-2023-40857affects v4.3.2Aug 28, 2023

    Buffer Overflow vulnerability in VirusTotal yara v.4.3.2 allows a remote attacker to execute arbtirary code via the yr_execute_cod function in the exe.c component.

    Vendor advisory
  • medium5.5Fix availableCVE-2021-45429affects <=4.1.3Feb 4, 2022

    A Buffer Overflow vulnerablity exists in VirusTotal YARA git commit: 605b2edf07ed8eb9a2c61ba22eb2e7c362f47ba7 via yr_set_configuration in yara/libyara/libyara.c, which could cause a Denial of Service.

  • critical9.1Fix in v4.0.4CVE-2021-3402affects before 4.0.4May 14, 2021

    An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to either cause denial of service or information disclosure via a malicious Mach-O file. Affects all versions before libyara 4.0.4

Source: NVD, updated 6h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr.

Related apps

  • VirusTotal UploaderVirusTotal
    VirusTotal.VirusTotalUploaderv2.2

    It's a simple Microsoft Windows Desktop application that makes the interaction with VirusTotal as easy as a right-click.

  • V
    vt-cliVirusTotal
    VirusTotal.vt-cliv1.3.1

    VirusTotal Command Line Interface

  • Y
    YARAVirusTotal
    VirusTotal.YARAv4.5.5

    The pattern matching swiss knife for malware researchers (and everyone else)

More from VirusTotal.

Frequently asked questions

How do I install YARA-X on Windows?
Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id VirusTotal.YARA-X --exact --version 1.20.0. winget downloads the installer from VirusTotal and runs it. Requires Windows 10 (1809+) or Windows 11.
How do I install YARA-X silently for unattended deployment?
Add --silent and accept the agreements upfront: winget install --id VirusTotal.YARA-X --exact 1.20.0 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.
How do I uninstall YARA-X via winget?
Run: winget uninstall --id VirusTotal.YARA-X --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from YARA-X's Apps & Features entry.
Is YARA-X free?
YARA-X is distributed under BSD-3-Clause. Refer to the publisher (https://github.com/VirusTotal/yara-x) for the full license terms - Wingetly itself does not charge for installation.
Does YARA-X work on Windows 10?
Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls YARA-X directly from the publisher.
How do I keep YARA-X up to date?
Run winget upgrade --id VirusTotal.YARA-X --exact, or winget upgrade --all to update everything winget tracks. We index 10 versions of YARA-X from microsoft/winget-pkgs.

Recent versions

  • 1.20.0latest
  • 1.19.0
  • 1.18.0
  • 1.17.0
  • 1.16.0
  • 1.15.0
  • 1.14.0
  • 1.13.0
  • 1.12.0
  • 1.11.0