Scopr Logo
The Home of XBow Technology.

Home of XBow Data Mining and Tracking Technology

If you are looking for an online, cloud-based archive extractor, please try:

Scopr XRay

As a guest XRay user you are welcome to upload and process as many files as you wish. Guest user processing limits:

  • Maximum extraction depth: 3
  • Maximum extracted file size: 250,000 bytes
  • Maximum items per depth: 50
  • Maximum processing time: 10 seconds

For a sampling of the output you can expect from Scopr XRay, please see what some common FTP sites look like after having been processed by Scopr XRay:

Expanded FTP Site Listings

For the current list of automated FTP site processing contributions provided by Scopr XRay Screen Saver users, please see:

Xpand Account Statistics

Competitive Analysis
Interesting Files

Facebook scoprllc Twitter scoprxbow

News

  • Scopr XRay 5.0.1309
    • Added Bitcoin address extraction support to XAPI.
  • Scopr XRay 5.0.1301
    • Added XBOW_TYPE_RPMSG, associated Restricted Permission Message (RPMSG) file type identification and extraction engine. Note: Auto-decrypt of the DRMContent stream is not supported.
  • Scopr XRay 5.0.1291
    • Added XBOW_TYPE_SYLK and associated Microsoft Symbolic Link (SYLK) file type identification.
  • Scopr XRay 5.0.1274
    • Added ALZip auto-decrypt support.
  • Scopr XRay 5.0.1270
    • Added XBOW_SUBTYPE_FPX and associated OLESS object subtype identification for the Kodak FlashPix file format.
  • Scopr XRay 5.0.1244
    • Added Quick Response (QR) code extraction engine.
  • Scopr XRay 5.0.1235
    • Added MaxExtractTotalSize and MaxTotalItems XAPI configuration options.
  • Scopr XRay 5.0.1233
    • Added XBOW_TYPE_PYC and Python bytecode file type identification.
  • Scopr XRay 5.0.1228
    • Added GDPRCompliantMetadata and OLESSParallelDecryptedPackage XAPI options.
  • Scopr XRay 5.0.1216
    • Added Direct Access Archive (DAA) extraction engine.
  • Scopr XRay 5.0.1212
    • Added XBOW_TYPE_DAA and Direct Access Archive file type identification.
  • Scopr XRay 5.0.1199
    • Added decode and extract of JavaScript string arrays via Text Extract Hex option.
  • Scopr XRay 5.0.1197
    • Added RTF metadata and URL extraction.
  • Scopr XRay 5.0.1192
    • Fixed reported processing elapsed time.
  • Scopr XRay 5.0.1177
    • Improved RTF hex data extraction.
  • Scopr XRay 5.0.1173
    • Added xbowddd.cgi query string parameters documentation page.
  • Scopr XRay 5.0.1169
    • Added extraction of base64-encoded objects out of window.atob("<base64>") JavaScript code.
    • Added extraction of <script> blocks out of HTML.
  • Scopr XRay 5.0.1161
    • Added normalizedname and datatypeextension to JSON and XML output.
  • Scopr XRay 5.0.1159
    • Always append the file-type-correct extension to the end of the random filename link. This guarantees that all returned URL links to the extracted data use the file-type-correct extension. Thus applications that use these URLs to download extracted files can depend on the extension in their decision-making.
  • Scopr XRay 5.0.1156
    • Added per-user enable/disable URL processing option. Can only be changed by an administrator.
  • Scopr XRay 5.0.1141
    • Added PDF and JPG links to JSON output.
  • Scopr XRay 5.0.1135
    • Fixed per-user key handling.
  • Scopr XRay 5.0.1122
    • Added server log display pages - for administrators only.
  • Scopr XRay 5.0.1110
    • Improved user interface.
    • Removed use of HTML frames.
  • Scopr XRay 5.0.1106
    • Duplicated all local file processing options on URL processing page.
  • Scopr XRay 5.0.1103
    • Added heuristic detection of malicious sequences of periods before the file extension.
  • Scopr XRay 5.0.1073
    • Added xbowddd.ini max log size options MaxLogSize and MaxXAPILogSize.
  • Scopr XRay 5.0.1068
    • Added excludedurllist.txt and onetimeuseurlkeywordslist.txt to server configuration.
    • Added EnableVirusTotalURL server configuration option.
  • Scopr XRay 5.0.1065
    • Added ClamAV scan of all processed objects.
  • Scopr XRay 5.0.1050
    • Added metadata extraction options for email addresses, IPv4 addresses, phone numbers, credit card numbers, and URLs.
  • Scopr XRay 5.0.1039
    • Added subsystem to EXE/DLL object details.
  • Scopr XRay 5.0.1010
    • Decode and extract HTML entities in Microsoft Office online video embeddedHTML objects.
  • Scopr XRay 5.0.1007
    • Added XBOW_TYPE_AU3 and AutoIt3 file type identification.
  • Scopr XRay 5.0.1006
    • Removed non-Windows x86 downloads.
  • Scopr XRay 5.0.1005
    • Added SHA-1 and SHA-256 hashes to Show Activity page.
  • Scopr XRay 5.0.1004
    • Added per-user option to show/hide unidentified data streams.
  • Scopr XRay 5.0.1003
    • Added xid -i option to report per-engine information: version, file type, engine name, module name, and license info.
    • Auto-decrypt read-only Excel documents using Microsoft Excel's default password "VelvetSweatshop".
  • Scopr XRay 5.0.1002
    • Added APM, Intel Hex, PPMD, QCOW, VHD, VHDX, FreeARC, BH, PA, ZPAQ and FLV file type identification.
    • Added FTP/HTTP URL processing configuration options: MaxHTTPCacheSize, MaxFTPCacheSize, ConnectTimeout, ReceiveTimeout, SendTimeout, DataReceiveTimeout, DataSendTimeout, MaxFTPIndexMemorySize, MaxHTTPIndexMemorySize
    • Added Intel Hex and VHD file extraction engines.
    • Fixed CPIO binary file extraction.
  • Scopr XRay 5.0.1000
    • Added support for inline processing extracted URLs.
    • Added options to control the maximum number of URLs processed per object and per object chain.
    • Added button to clear user's HTTP/FTP cache.
    • Added logic to prevent recursive URL processing loops.
    • Added extraction of ftp:// and sftp:// URLs.
    • Added username and password support for FTP URLs.
    • Added link to VirusTotal graph in SHA-256 column.
  • Scopr XRay 5.0.998
    • Added xid option -m to scan all processed files with AntiMalware Cloud Scan.
    • Extract all extractable OLESS streams up to the point where the FAT chain is invalid/broken rather than aborting the entire extraction process.
    • Added Depth column to HTML output.
    • Added support for cloud scan URL options in xbowddd.ini: AntiMalwareCloudScanURL1 and AntiMalwareCloudScanURL2.
    • Added .vba as an allowed extension for XBOW_TYPE_VBSCRIPT.
  • Scopr XRay 5.0.997
    • Improved extraction of hex objects from RTF files.
    • Improved URL extraction.
    • Added option to show/hide extracted URLs in HTML view.
    • Added PDF details.
    • Added extraction of embedded images from PDF files.
  • Scopr XRay 5.0.996
    • Added URL extraction from TEXT, HTML, MIME bodies, and some XML files.
    • Improved how encryption keys are shown in object details.
    • Minimum length of automatically discovered encryption keys reduced from 4 to 3 characters.
    • Upgraded liblzma and XZUtils to 5.2.3.
  • Scopr XRay 5.0.995
    • Added Microsoft InternetShortcut .url file type identification with associated target URL extracted as a detail.
  • Scopr XRay 5.0.992
    • Improved ISO-14496 file type identification.
    • Added DDS, INDD, MPP, VCF, VSD, and VSDX file type identification.
    • Improved base64 extraction.
    • Improved hex extraction.
    • Fixed ZIP AES-encrypted+stored file extraction.
    • Upgraded 7zip engine to LZMA SDK 18.01.
  • Scopr XRay 5.0.990
    • DDS, INDD, MOV/QT, OLESS:MPP, VCF, OLESS:VSD, ZIP:VSDX file type identification.
  • Scopr XRay 5.0.980
    • Added Mach-O, Mach-O Universal Binary, BALZ, EGG, ISZ, LZ4X, PEA, ZPAQ, ZIP:HWP, ZIP:IPA, and ZIP:XPS file type identification.
    • Improved UUE and XXE extraction engines.
  • Scopr XRay 5.0.950
    • Added extraction of VBA scripts from OLESS documents.
  • Scopr XRay 5.0.910
    • Added "Show Activity" button on "My Account" page. Shows statistics for all files processed by your user account.
  • Scopr XRay 5.0.900
    • ARM Image Format (.aif), AutoCAD Drawing Exchange Format (.dxf), Audio Interchange File Format (.aiff), Audio Interchange File Format - Compressed (.aifc), Packet Capture (.pcap), and True Type Font (.ttf) file type identification.
    • Added Content-Transfer-Encoding to extracted MIME object's details as "encoding".
  • Scopr XRay 5.0.800
    • Microsoft Icon/Cursor (.ico/.cur) file type identification and extraction engine.
  • Scopr XRay 5.0.700
    • AxCrypt (.axx), Digital Imaging and Communications in Medicine (.dcm), iCalendar (.ics), vCalendar (.vcs), TIFF (.tif), and AutoCAD Drawing (.dwg) file type identification.
    • File sub-type identification for new ZIP-based PowerPoint, Excel, and Word file formats (e.g. .pptx, .xlsx, .docx).
    • File sub-type identification for Java Archives (.jar).
    • Text engine extracts hex-encoded sequences of 32 bytes or more (e.g. "090AF0FF...").
    • Text engine extracts Base64-encoded embedded objects out of HTML.
  • Scopr XRay 5.0.610
    • Added Nested Container Extensions (NCE) path to object details.
    • Added support for displaying UTF-8 object names.
    • Added option to show the encryption key/password for encrypted objects.
    • Infected objects are highlighted with a red background in the HTML view.
    • Upgraded RAR engine to the unrar 5.5.7 source code level.
  • Scopr XRay 5.0.540
    • Extract base64-encoded pkg:binaryData objects out of XML documents.
    • Two new output formats:
      1. JSON (JavaScript Object Notation)
      2. HTML Zoomable Bubble Graph
  • Scopr XRay 5.0.530
    • Lzip and LZMA file extraction engines.
  • Scopr XRay 5.0.520
    • PHP Archive (PHAR) file extraction engine.
  • Scopr XRay 5.0.510
    • ActiveMime, Snappy, WARC, XZ, XXE and ACE v2 file extraction engines.
    • Password-protected ACE and Microsoft Office document extraction.
    • Automatic decryption of password-protected mail attachments if the password is found within the body of the mail message.
    • New per-user options:
      • Extract text from Microsoft Word documents.
      • Extract text from PDF documents.
      • Redact sensitive information from MIME message header fields.
      • Redact the MIME message body.
      • Redact all MIME message attachments.
    • Embedded HTML img src base64 object extraction.
    • Javascript file type identification
    • Javascript, Python, VBScript, and Perl script extraction out of Windows Script File (WSF) XML documents.
  • Scopr XRay 5.0.371
    • ALZip, LHA, RTF, TNEF, and ISO 9660 CD/DVD image extraction.
    • Password-protected 7Zip extraction.