Previous change logs
Release: 1.7.3
Date: 10th of February, 2023
Added:
- Trends page added - statistics on global trends and recent activities
- OPSWAT license activation solution added
- MetaDefender Multiscanning
- FSIO Fuzzy hash lookup
Changed:
- Verdict precision
- Fuzzyhash blacklist in OSINT section
Fixed:
- Product installer
- Verdict inaccuracies
Release: 1.7.2
Date: 10th of February, 2023
Added:
- OPSWAT Reputation lookup integration, including performance boost for the verdict
- Configurable retention policy (based on age/verdict)
Changed:
Improvements on:
- Emulation engine performance
- Support for air gapped environments
- FP/FN ratio, especially for PE installers
- Number of threat indicators
Detection of INNO installers
Fixed:
- Fix PDF parser issues
- Text and date format
- File re-scan job
- Various improvements on verdict accuracy
- Scan progress accuracy
Release: 1.7.1
Date: 19th of January, 2023
Added:
- Mime type composition overview for archives
- File upload and time estimate for large file uploads
- Added file extraction for MSI installers
- Added archive verdict based on all child items
Changed:
- Improved MSI installer detection (heuristic)
Fixed:
- Fixed a rare concurrency issue with the refresh token
- Fixed an issue where some child item reports would only appear belated in the overview page
- Various minor fixes
Release: 1.70
Date: 16th of December, 2022
Added:
- Support for VHD(x) file formats
- Added a logo picker that can be used to re-brand the product
- Added the option to disable the T&C accept checkbox (admin backend)
- Added the option to specify the product name (admin backend)
- Added better support for large PE files (>100MB)
- Added new threat indicators covering CPL file anomalies
- Added 'runYaraRulesOnInputFileMaxFileSizeInMb' for better control on when to skip YARA being applied to the input file
- Added media-type based prioritizing of archive files
- Added separately configurable max. processing thresholds for archive submissions
- Added media type to the /submit endpoint response (fsBroker)
- Added composition fields containing counters for all submitted, accepted and rejected files
Changed:
- Updated emulation engine
- Updated documentation (added troubleshooting guide)
- Improved heuristic javascript/vbs/powershell detection for text files without a suffix
- Default max. file size for processing is now 2GB
Fixed:
- Some potential performance issues with statistics related DB queries
Release: 1.63
Date: 28th of November, 2022
Fixed:
- remove "null"-byte padding from Javascript, which was throwing off the emulator
Release: 1.62
Date: 28th of November, 2022
Fixed:
- fsBroker retry attempts would only try one time (verifyAppServersAreAvailableRetryMax) breaking automatic service restarts on slow machines
Release: 1.61
Date: 25th of November, 2022
Added:
- Added support for ASF file parsing (WMV)
- Added support for CAB archives
- Added a capability to restart webservice without rebuilding docker
Changed:
- Updated emulation engine
- Updated documentation
Fixed:
- Fixed a false positive for DOTM files containing URLs
Release: 1.60
Date: 28th of October, 2022
Added:
- Added ability to extract and validate certificate data from OOXML files
- Added sample feed (public/private) with archive downloads
- Added support for CustomXMLParts
- Added support for the Format function
- Added "runWebserviceHealthCheckGracefulExitIfLastSuccessOlderThanXSec" to initiiate a soft restart in a rare deadlock scenario
- Added support for ACE files
- Added support for Microsoft Store apps ("ms-appx" tag and mime-type "application/vns.ms-appx")
- Added ability to specify multiple VirusTotal API keys in fsTransform
- Added ability to disable OSINT cache (see 'enableOSINTCache')
- Added ability to abort additional OSINT lookups if malware found (see 'abortOSINTLookupIfAnyProviderFoundMalware')
- Added a configurable "dark mode" for the webservice UX
- Added a beta-version of "Rapid mode" and individually configurable analysis options on the submission dialogue (admin-only)
Changed:
- Performance improvements for OOXML files with many AX controls
- Improved detection of embedded PE files
- Improved the performance of webservice background jobs
- Improved handling very large (50MB+) PDF and PE files
Fixed:
- Fixed a few minor bugs in the emulation engine
Installation Guide
1) Navigate to “RELEASE” and download "FileScanIO Quick Start Guide”
2) Download "fsBootstrap.zip" and "FileScanIO.zip" (~779 MB)
SHA-256 fsBootstrap: 77f73891e16d3b2aced1c8a0a71f02ed26c95b589fc2ad190bf488bfde72632d
SHA-256 FileScanIO.zip: e2c4edb921c9ef0fcedf22a0172adcaf3e2bac3519bc9c02598c6180e2d33ae5
3) Follow the "FileScanIO Quick Start Guide" and use the fsBootstrap password fsBootstrap 1.7.0 password: CUT9g2fPadWgH0tHM8gM as per guide.
Note: please take note of the system requirements as outlined in the guide. As a general guidance, the better the hardware (CPU/RAM/Disc IOPS), the better the overall system performance.
ARCHIVE
fsBootstrap 1.6.3 password: uLDHMMG4aGNlp6F0aUzI
fsBootstrap 1.6.1 password: JKHh8QE7EuquMFsNihP9
fsBootstrap 1.60RC1 password: k6HDFq5FZN3HnIp8NM7G
