The FLARE Obfuscated String Solver (FLOSS, formerly FireEye Labs Obfuscated String Solver) uses advanced static analysis techniques to automatically extract and deobfuscate all strings from malware binaries. You can use it just like strings.exe to enhance the basic static analysis of unknown binaries.
Publisher’s description
What is FLOSS?
FLOSS is an open-source antivirus & anti-malware program for Windows from Mandiant. It ranks 6th by popularity among antivirus & anti-malware in this catalogue. It is written in Python.
Installation and requirements
Official installers exist for 64-bit as Portable. It runs without installation (portable).
Popularity and file types
The Chocolatey package has been downloaded 2,982 times. The source code on GitHub (mandiant/flare-floss) has 4,198 stars. Similar programs include ClamAV, YARA and Malwarebytes.
Project description on GitHub: “FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Portable: runs without installation
Cons
- No native ARM64 build
- No update for more than a year
In short: FLOSS is an open-source antivirus & anti-malware tool for 64-bit PCs. Updates have slowed down.
Is FLOSS safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
6C71089B8C629C69424B042769F1565F71ADC6CD24B2F8D3713C96FA7FDAC2FB· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Recent versions
All 1 versions ›| Version | Date | Size | Files |
|---|---|---|---|
| 3.1.1Latest | September 26, 2024 | — | 64-bit ZIP |
Install from the command line
Silent install ›winget install --id Mandiant.FLOSS -echoco install floss -yRelated guide: How to use winget: install and update apps
Information
- Publisher
- Mandiant
- Category
- Antivirus & anti-malware
- Licence
- Apache-2.0
- Price
- Free
- Source code
- github.com/mandiant/flare-floss
- Written in
- Python
- Requires
- Windows 11 / 10
- Architecture
- 64-bit
- Installer
- Portable
- Version
- 3.1.1
- Released
- September 26, 2024
- Added to the catalogue
- January 8, 2025
- Versions listed
- 1
- Chocolatey downloads
- 2,982
- GitHub stars
- 4,198
- GitHub forks
- 544
- Website
- github.com
- winget ID
- Mandiant.FLOSS
- Chocolatey package
- floss
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to FLOSS
See all ›-
ClamAV1.5.4ClamAV® is an open-source antivirus engine for detecting trojans, viruses, malware & other malicious threats.Open source30K ↓ -
Open source101.1K ↓ -
Proprietary10.6M ↓ -
Proprietary229.8K ↓ -
ESET Endpoint Antivirus13.1.2036.0ESET Endpoint Antivirus is a complete security solution produced from our long-term effort to combine maximum protection and a minimal system footprint.Proprietary168.7K ↓ -
Free198.7K ↓ -
Velociraptor0.65.3Velociraptor is a tool for collecting host based state information using The Velociraptor Query Language (VQL) queries.Open source★ 4.4K -
Free★ 1.6K
Frequently asked questions
Is FLOSS free?
Yes. FLOSS is open-source software under the Apache-2.0 licence.
Is FLOSS safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install FLOSS with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Does FLOSS run on ARM (Windows on Arm)?
There is no ARM64 build; Windows 11 on Arm can run the 64-bit version through emulation.
Can I use FLOSS without administrator rights?
Yes, it is portable: unpack and run it.
What are alternatives to FLOSS?
ClamAV, YARA, Malwarebytes, SUPERAntiSpyware and ESET Endpoint Antivirus. The alternatives page compares them.
