If you are looking for an online, cloud-based archive extractor, please try:
Scopr XRayAs a guest XRay user you are welcome to upload and process as many files as you wish. Guest user processing limits:
- Maximum extraction depth: 3
- Maximum extracted file size: 250,000 bytes
- Maximum items per depth: 50
- Maximum processing time: 10 seconds
For a sampling of the output you can expect from Scopr XRay, please see what some common FTP sites look like after having been processed by Scopr XRay:
Expanded FTP Site ListingsFor the current list of automated FTP site processing contributions provided by Scopr XRay Screen Saver users, please see:
Xpand Account StatisticsCompetitive Analysis
Interesting Files
News
- Scopr XRay 5.0.1309
- Added Bitcoin address extraction support to XAPI.
- Scopr XRay 5.0.1301
- Added XBOW_TYPE_RPMSG, associated Restricted Permission Message (RPMSG) file type identification and extraction engine. Note: Auto-decrypt of the DRMContent stream is not supported.
- Scopr XRay 5.0.1291
- Added XBOW_TYPE_SYLK and associated Microsoft Symbolic Link (SYLK) file type identification.
- Scopr XRay 5.0.1274
- Added ALZip auto-decrypt support.
- Scopr XRay 5.0.1270
- Added XBOW_SUBTYPE_FPX and associated OLESS object subtype identification for the Kodak FlashPix file format.
- Scopr XRay 5.0.1244
- Added Quick Response (QR) code extraction engine.
- Scopr XRay 5.0.1235
- Added MaxExtractTotalSize and MaxTotalItems XAPI configuration options.
- Scopr XRay 5.0.1233
- Added XBOW_TYPE_PYC and Python bytecode file type identification.
- Scopr XRay 5.0.1228
- Added GDPRCompliantMetadata and OLESSParallelDecryptedPackage XAPI options.
- Scopr XRay 5.0.1216
- Added Direct Access Archive (DAA) extraction engine.
- Scopr XRay 5.0.1212
- Added XBOW_TYPE_DAA and Direct Access Archive file type identification.
- Scopr XRay 5.0.1199
- Added decode and extract of JavaScript string arrays via Text Extract Hex option.
- Scopr XRay 5.0.1197
- Added RTF metadata and URL extraction.
- Scopr XRay 5.0.1192
- Fixed reported processing elapsed time.
- Scopr XRay 5.0.1177
- Improved RTF hex data extraction.
- Scopr XRay 5.0.1173
- Added xbowddd.cgi query string parameters documentation page.
- Scopr XRay 5.0.1169
- Added extraction of base64-encoded objects out of window.atob("<base64>") JavaScript code.
- Added extraction of <script> blocks out of HTML.
- Scopr XRay 5.0.1161
- Added normalizedname and datatypeextension to JSON and XML output.
- Scopr XRay 5.0.1159
- Always append the file-type-correct extension to the end of the random filename link. This guarantees that all returned URL links to the extracted data use the file-type-correct extension. Thus applications that use these URLs to download extracted files can depend on the extension in their decision-making.
- Scopr XRay 5.0.1156
- Added per-user enable/disable URL processing option. Can only be changed by an administrator.
- Scopr XRay 5.0.1141
- Added PDF and JPG links to JSON output.
- Scopr XRay 5.0.1135
- Fixed per-user key handling.
- Scopr XRay 5.0.1122
- Added server log display pages - for administrators only.
- Scopr XRay 5.0.1110
- Improved user interface.
- Removed use of HTML frames.
- Scopr XRay 5.0.1106
- Duplicated all local file processing options on URL processing page.
- Scopr XRay 5.0.1103
- Added heuristic detection of malicious sequences of periods before the file extension.
- Scopr XRay 5.0.1073
- Added xbowddd.ini max log size options MaxLogSize and MaxXAPILogSize.
- Scopr XRay 5.0.1068
- Added excludedurllist.txt and onetimeuseurlkeywordslist.txt to server configuration.
- Added EnableVirusTotalURL server configuration option.
- Scopr XRay 5.0.1065
- Added ClamAV scan of all processed objects.
- Scopr XRay 5.0.1050
- Added metadata extraction options for email addresses, IPv4 addresses, phone numbers, credit card numbers, and URLs.
- Scopr XRay 5.0.1039
- Added subsystem to EXE/DLL object details.
- Scopr XRay 5.0.1010
- Decode and extract HTML entities in Microsoft Office online video embeddedHTML objects.
- Scopr XRay 5.0.1007
- Added XBOW_TYPE_AU3 and AutoIt3 file type identification.
- Scopr XRay 5.0.1006
- Removed non-Windows x86 downloads.
- Scopr XRay 5.0.1005
- Added SHA-1 and SHA-256 hashes to Show Activity page.
- Scopr XRay 5.0.1004
- Added per-user option to show/hide unidentified data streams.
- Scopr XRay 5.0.1003
- Added xid -i option to report per-engine information: version, file type, engine name, module name, and license info.
- Auto-decrypt read-only Excel documents using Microsoft Excel's default password "VelvetSweatshop".
- Scopr XRay 5.0.1002
- Added APM, Intel Hex, PPMD, QCOW, VHD, VHDX, FreeARC, BH, PA, ZPAQ and FLV file type identification.
- Added FTP/HTTP URL processing configuration options: MaxHTTPCacheSize, MaxFTPCacheSize, ConnectTimeout, ReceiveTimeout, SendTimeout, DataReceiveTimeout, DataSendTimeout, MaxFTPIndexMemorySize, MaxHTTPIndexMemorySize
- Added Intel Hex and VHD file extraction engines.
- Fixed CPIO binary file extraction.
- Scopr XRay 5.0.1000
- Added support for inline processing extracted URLs.
- Added options to control the maximum number of URLs processed per object and per object chain.
- Added button to clear user's HTTP/FTP cache.
- Added logic to prevent recursive URL processing loops.
- Added extraction of ftp:// and sftp:// URLs.
- Added username and password support for FTP URLs.
- Added link to VirusTotal graph in SHA-256 column.
- Scopr XRay 5.0.998
- Added xid option -m to scan all processed files with AntiMalware Cloud Scan.
- Extract all extractable OLESS streams up to the point where the FAT chain is invalid/broken rather than aborting the entire extraction process.
- Added Depth column to HTML output.
- Added support for cloud scan URL options in xbowddd.ini: AntiMalwareCloudScanURL1 and AntiMalwareCloudScanURL2.
- Added .vba as an allowed extension for XBOW_TYPE_VBSCRIPT.
- Scopr XRay 5.0.997
- Improved extraction of hex objects from RTF files.
- Improved URL extraction.
- Added option to show/hide extracted URLs in HTML view.
- Added PDF details.
- Added extraction of embedded images from PDF files.
- Scopr XRay 5.0.996
- Added URL extraction from TEXT, HTML, MIME bodies, and some XML files.
- Improved how encryption keys are shown in object details.
- Minimum length of automatically discovered encryption keys reduced from 4 to 3 characters.
- Upgraded liblzma and XZUtils to 5.2.3.
- Scopr XRay 5.0.995
- Added Microsoft InternetShortcut .url file type identification with associated target URL extracted as a detail.
- Scopr XRay 5.0.992
- Improved ISO-14496 file type identification.
- Added DDS, INDD, MPP, VCF, VSD, and VSDX file type identification.
- Improved base64 extraction.
- Improved hex extraction.
- Fixed ZIP AES-encrypted+stored file extraction.
- Upgraded 7zip engine to LZMA SDK 18.01.
- Scopr XRay 5.0.990
- DDS, INDD, MOV/QT, OLESS:MPP, VCF, OLESS:VSD, ZIP:VSDX file type identification.
- Scopr XRay 5.0.980
- Added Mach-O, Mach-O Universal Binary, BALZ, EGG, ISZ, LZ4X, PEA, ZPAQ, ZIP:HWP, ZIP:IPA, and ZIP:XPS file type identification.
- Improved UUE and XXE extraction engines.
- Scopr XRay 5.0.950
- Added extraction of VBA scripts from OLESS documents.
- Scopr XRay 5.0.910
- Added "Show Activity" button on "My Account" page. Shows statistics for all files processed by your user account.
- Scopr XRay 5.0.900
- ARM Image Format (.aif), AutoCAD Drawing Exchange Format (.dxf), Audio Interchange File Format (.aiff), Audio Interchange File Format - Compressed (.aifc), Packet Capture (.pcap), and True Type Font (.ttf) file type identification.
- Added Content-Transfer-Encoding to extracted MIME object's details as "encoding".
- Scopr XRay 5.0.800
- Microsoft Icon/Cursor (.ico/.cur) file type identification and extraction engine.
- Scopr XRay 5.0.700
- AxCrypt (.axx), Digital Imaging and Communications in Medicine (.dcm), iCalendar (.ics), vCalendar (.vcs), TIFF (.tif), and AutoCAD Drawing (.dwg) file type identification.
- File sub-type identification for new ZIP-based PowerPoint, Excel, and Word file formats (e.g. .pptx, .xlsx, .docx).
- File sub-type identification for Java Archives (.jar).
- Text engine extracts hex-encoded sequences of 32 bytes or more (e.g. "090AF0FF...").
- Text engine extracts Base64-encoded embedded objects out of HTML.
- Scopr XRay 5.0.610
- Added Nested Container Extensions (NCE) path to object details.
- Added support for displaying UTF-8 object names.
- Added option to show the encryption key/password for encrypted objects.
- Infected objects are highlighted with a red background in the HTML view.
- Upgraded RAR engine to the unrar 5.5.7 source code level.
- Scopr XRay 5.0.540
- Extract base64-encoded pkg:binaryData objects out of XML documents.
- Two new output formats:
- JSON (JavaScript Object Notation)
- HTML Zoomable Bubble Graph
- Scopr XRay 5.0.530
- Lzip and LZMA file extraction engines.
- Scopr XRay 5.0.520
- PHP Archive (PHAR) file extraction engine.
- Scopr XRay 5.0.510
- ActiveMime, Snappy, WARC, XZ, XXE and ACE v2 file extraction engines.
- Password-protected ACE and Microsoft Office document extraction.
- Automatic decryption of password-protected mail attachments if the password is found within the body of the mail message.
- New per-user options:
- Extract text from Microsoft Word documents.
- Extract text from PDF documents.
- Redact sensitive information from MIME message header fields.
- Redact the MIME message body.
- Redact all MIME message attachments.
- Embedded HTML img src base64 object extraction.
- Javascript file type identification
- Javascript, Python, VBScript, and Perl script extraction out of Windows Script File (WSF) XML documents.
- Scopr XRay 5.0.371
- ALZip, LHA, RTF, TNEF, and ISO 9660 CD/DVD image extraction.
- Password-protected 7Zip extraction.