File Intelligence Service is now Live :)

Its a very good database but can get better

the “First Seen: XX” is strange, it shows the date from where a [filename] was submited or when the [file md5] was submited, i dont understand.
it need to show the date for each file in the colums to be more intuitive

It is date and time when we received it first time. We will think about adding per file received time stamp.

Thanks
-umesh

I think a link to File Intelligence should be included in alerts, especially ones that might be harder to understand for some users. It could help them make a decision.

In future version of CIS, we plan to make detected file and malware names as hyperlinks to take user to this site.

Thanks
-umesh

That’s great news… O0

I searched for F91BB289A5B68B4EC8096644EDA8A427D3350D0E (SHA-1).

The file is Safe Correct (according to CIS white-list)
The file size is 756224 bytes Correct
The MD5 for this file is 94caf72da87f099245466a43b2e9943e Correct
File Version 51.50.0.0 Correct
The file is digitally signed? Yes Not correct! :-\

File is compressed and attached.

[attachment deleted by admin]

Hi JoWa,

You are right, file is not signed.

I will have it checked.

Thanks
-umesh

eac-1.0beta1.exe (SHA-1: A526B3CBE5C7B05568029472C69A7F3461B1631D) is in Comodo’s white-list, but I get

[b]File Error[/b] The file named "eac-1.0beta1.exe" cannot be found in our database.
http://file-intelligence.comodo.com/file-details.php?f=eac-1.0beta1.exe

How long does it take for a white- or black-listed file to appear on the site?

Thanks. :slight_smile:

There is some latency between information available from master database, it is going to be fixed soon.

Thanks
-umesh

How can I link to search result for SHA-1?

Thanks. :slight_smile:

http://file-intelligence.comodo.com/ is not available (today and yesterday). ???

Yes, will be up today.

Searched for SHA-1: 237A17861A252DA5AFE7933D2497F4B2889D19E7

The file is digitally signed? undefined ???

What does that mean? The file is signed by Spotify Ltd, and the signature is OK.

Thanks. :slight_smile:

This bug will be fixed this week together with some other bugs fixes highlighted earlier.

Thanks
-umesh

Thanks. :-TU

Hi Guys,
Site is updated today and following bugs are fixed:
1)

Now in case details are not found in primary server, site looks into master database so in case we have file as safe/malware, information will be available for sure.

We have added a new field description for file name based lookups. We do not have description for all files, but for whatever we have we present short description based on file name; description is typically about safe behavior based files, e.g.

http://file-intelligence.comodo.com/windows-process-virus-malware/exe/alg
it gives brief description about Windows Operating System application alg.exe

Thanks
-umesh

Thanks for the update Umesh. :slight_smile: :-TU

When I search, I get:

Database connection error
Thanks. :)

Looking into it.

Thanks
-umesh

It is fixed now.

Thanks
-umesh