There are a lot of things to comment about version 1.46.
Added a feature to include information from reports into a SQL database
With this feature it´s possible to store in a SQL (sqlite 3) database the information from report files and optionally, from analysis reports.
All the information from reports (REPORT.TXT) and optionally from analysis (ANALYSIS.TXT) will be added to database.
It´s mandatory to enable the reporting of SHA256 in order to get this feature working.
Added a custom manager for BSA´s SQL Database
I included a feature to manage the created database in an easy but powerful way.
It has a SQL expression generator with the tables in database, the fields in each table, and five options. (is, is not, is null, is not null and contains)
For people that know SQL, I also included a custom SQL command feature. With this feature you can use your sentences in SQL.
I added a feature to remove entries from database, a predefined query to database and a function to update a record from a report file.
Right-clicking in the table you will get some additional features.
Added a feature to load and save settings from file on demand
With this feature it´s possible to have several different BSA configurations stored in disk and easily switch between them.
Added a feature to set a number of retries if connection to VirusTotal fails
You can configure to don´t make retries if VirusTotal does not respond or choose from 1 to 5 retries.
Added a feature to launch automatically Explorer.exe in automatic mode
Recently I processed a malware that didn´t show the behaviour I expected. First I thought it was due a bug in Sandboxie. The bug existed and tzuk fixed it, but at the end it was not related with the issue.
Ronen analyzed the piece of malware and discovered that the malware was injecting code to explorer.exe. Due the process was not being sandboxed, the malware could not inject the code. When explorer.exe is sandboxed, the malware will behave as it should.
As some trojans may inject code in explorer.exe I decided to include this feature. When enabled BSA will sandbox explorer.exe before the analysis begins.
Added a feature to skip already processed files in automatic mode
When enabled, BSA will check at SQL database if the file was analyzed previously.
Fixed several bugs
As usual, several bugs fixed and other new introduced. :lol:
