Reply to thread

Message

<blockquote data-quote="CyberDevil" data-source="post: 1110251" data-attributes="member: 91290">1. I mean this service is a tool to statically analyze a file, although it can give a verdict that the file is malicious or suspicious, but it is not an antivirus. So it is not an antivirus, but a service for your own analysis. I usually check there what network requests the application makes, if there are unclear url&#039;s in non-European (not USA) domains, then it&#039;s really suspicious.2. I honestly didn&#039;t understand the question in point 2. You can directly upload a file to any of the services mentioned, especially if it&#039;s less than 1 megabyte. Some require registration, but from the list it seems to be only Metadefender and Any.run. I have a free email from tutanota that worked fine for me. I didn&#039;t know it required business mail, if that&#039;s true, anyway, you can also make a free mailbox on tutanota (it&#039;s a German secure private e-mail service).3. My advice is to first look at the verdicts of engines like Eset, Kaspersky, Bitdefender, Malwarebytes, Sophos, Avast and use VirusTotal, Metadefender, Jotti&#039;s malware scan and VirScan.Next is simple logic:- If there is a detection of at least 2 of these 6, then the file is 95% really dangerous. - If the list contains 1-3 detections from little-known companies, it is safe to a higher probability. - If there are more than 5 detections from any companies, it is most likely dangerous.If the file is still very suspicious, recheck it after a day and a couple of days after you have uploaded it to dynamic analysis services (Kaspersky, Sophos, Metadefender, Hybrid Analysis).</blockquote>

[QUOTE="CyberDevil, post: 1110251, member: 91290"] 1. I mean this service is a tool to statically analyze a file, although it can give a verdict that the file is malicious or suspicious, but it is not an antivirus. So it is not an antivirus, but a service for your own analysis. I usually check there what network requests the application makes, if there are unclear url's in non-European (not USA) domains, then it's really suspicious. 2. I honestly didn't understand the question in point 2. You can directly upload a file to any of the services mentioned, especially if it's less than 1 megabyte. Some require registration, but from the list it seems to be only Metadefender and Any.run. I have a free email from tutanota that worked fine for me. I didn't know it required business mail, if that's true, anyway, you can also make a free mailbox on tutanota (it's a German secure private e-mail service). 3. My advice is to first look at the verdicts of engines like Eset, Kaspersky, Bitdefender, Malwarebytes, Sophos, Avast and use VirusTotal, Metadefender, Jotti's malware scan and VirScan. Next is simple logic: - If there is a detection of at least 2 of these 6, then the file is 95% really dangerous. - If the list contains 1-3 detections from little-known companies, it is safe to a higher probability. - If there are more than 5 detections from any companies, it is most likely dangerous. If the file is still very suspicious, recheck it after a day and a couple of days after you have uploaded it to dynamic analysis services (Kaspersky, Sophos, Metadefender, Hybrid Analysis). [/QUOTE]

Verification