View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0000599 | file | General | public | 2024-12-20 19:05 | 2024-12-20 19:05 |
| Reporter | Ange | Assigned To | |||
| Priority | normal | Severity | minor | Reproducibility | always |
| Status | new | Resolution | open | ||
| Product Version | 5.46 | ||||
| Summary | 0000599: Add support for Internet Archive Metadata (SQLite-based) | ||||
| Description | Internet archives metadata (*_meta.sqlite) are common SQLite-based files, all sharing the same schema. They're available on every download page such as https://archive.org/download/TotalReplay. They're not detected specifically but just as SQLite files. | ||||
| Steps To Reproduce | - scan attached file - a genuine ITW file with its tables cleaned up. - it's just detected as a standard SQLite file. | ||||
| Additional Information | Here's a patch to the sql signature file that was generated over 700+ samples. >0xC70 search/0x9000 CREATE\ TABLE\ s3api_per_key_metadata\n Archive Metadata | ||||
| Tags | No tags attached. | ||||
