Filescan.io by OPSWAT is a cloud-based malware analysis platform for zero-day detection and adaptive threat analysis, integrated as MetaDefender Aether and MetaDefender Sandbox. The system utilizes CPU-level emulation, machine learning, and threat intelligence to analyze files and URLs for evasive malware. By avoiding the use of traditional virtual machines, the platform facilitates high-speed processing to expose loader chains, script logic, and hidden artifacts.
The platform employs multiple analysis layers, including threat reputation lookups, dynamic analysis, threat scoring, and machine learning-based similarity search. It evaluates contextual behaviors and extracts hidden configurations from memory, providing behavioral mapping across the MITRE ATT&CK framework. The analysis results in the generation of actionable indicators of compromise. The service is accessible via single sign-on through the My OPSWAT Portal.
