Binciken fayil na yanar gizo don ƙwayoyin cuta a Hybrid Analysis

Lokacin da yazo kan yin nazarin layi na fayiloli da kuma haɗuwa zuwa ƙwayoyin cuta, ana tunawa da sabis na VirusTotal sau da yawa, amma akwai wasu analogues masu dacewa, wasu daga cikinsu sun cancanci kulawa. Ɗaya daga cikin waɗannan ayyuka shine Hidima Cutar, wadda ba ta damar ba kawai duba fayil don ƙwayoyin cuta ba, amma kuma yana bayar da ƙarin kayan aiki don nazarin shirye-shiryen mugunta da haɗari.

A cikin wannan bita, za ku ga yadda za a yi amfani da Hybrid Analysis don bincika ƙwayoyin ƙwayoyin cuta a kan layi, bayyanar malware da sauran barazanar, abin da wannan sabis ɗin yake sananne don, da kuma ƙarin bayani wanda zai iya zama da amfani a cikin mahallin batun da ake tambaya. Game da wasu kayan aiki a cikin kayan yadda za a duba kwamfutarka don ƙwayoyin cuta a kan layi.

Amfani da Maganin Bincike

Don bincika fayil ko haɗi don ƙwayoyin cuta, AdWare, Malware da sauran barazanar, yana da yawa isa bi wadannan matakai masu sauki:

  1. Je zuwa shafin yanar gizon yanar gizon yanar gizo //www.hybrid-analysis.com/ (idan ya cancanta a cikin saitunan zaka iya canza harshen yaren yare zuwa Rasha).
  2. Jawo fayil har zuwa 100 MB a girman zuwa taga mai bincike, ko saka hanyar zuwa fayil ɗin, zaka iya saka hanyar haɗi zuwa shirin a kan Intanit (don yin nazari ba tare da saukewa zuwa kwamfutarka) kuma danna maɓallin "Bincike" (ta hanyar, VirusTotal yana ba ka izini don ƙwayoyin cuta ba tare da sauke fayiloli).
  3. A mataki na gaba, za ku buƙatar karɓar kalmomin sabis, danna "Ci gaba" (ci gaba).
  4. Mataki na gaba mai zuwa shi ne zaɓin wane nau'in na'ura mai launi zai gudana wannan fayil ɗin don ƙarin tabbacin ayyukan da ya damu. Bayan zaɓar, danna "Ƙirƙirar rahoton budewa".
  5. A sakamakon haka, za ku sami rahotanni masu zuwa: sakamakon sakamakon bincike na CrowdStrike Falcon, sakamakon sakamakon dubawa a MetaDefender da sakamakon VirusTotal, idan an duba wannan fayil a can.
  6. Bayan wani lokaci (kamar yadda aka saki kayan inji mai mahimmanci, zai ɗauki kimanin minti 10), sakamakon sakamakon gwajin wannan fayil a cikin na'ura mai inganci zai bayyana. Idan mutumin ya fara, za a bayyana sakamakon nan da nan. Dangane da sakamakon, zai iya samun ra'ayi daban-daban: idan akwai wani abu mai dadi, za ku ga "Malicious" a cikin rubutun kai.
  7. Idan kuna so, ta danna kan kowane darajar a cikin "Alamomin" Inda za ku iya duba bayanai kan ayyukan musamman na wannan fayil, da rashin alheri, a halin yanzu kawai a Turanci.

Lura: idan ba kwarewa ba ne, ka tuna cewa mafi yawancin, har ma shirye-tsaren tsabta za su sami ayyuka marasa tsaro (haɗi zuwa sabobin, dabi'u masu karatu da kuma irin su), kada ka zartar da shawarar da aka dogara kawai akan waɗannan bayanai.

A sakamakon haka, Hybrid Analysis wani kayan aiki ne na kyauta don yin nazarin shirye-shirye na kan layi don fuskantar barazanar daban-daban, kuma zan bada shawarar yin amfani da layi a kan mai bincike da kuma amfani da ita kafin in fara sabon shirin da aka sauke a kwamfuta.

A ƙarshe - abu daya: a baya akan shafin da na bayyana mai kyauta mai amfani CrowdInspect don duba tsarin tafiyar da ƙwayoyin cuta.

A lokacin rubuce-rubuce, mai amfani ya yi wani tsari ta hanyar amfani da VirusTotal, yanzu ana amfani da Hybrid Analysis, kuma an nuna sakamakon a cikin "HA" shafi. Idan babu sakamako na dubawa na tsari, za'a iya sauke ta atomatik zuwa uwar garken (saboda haka kana buƙatar kunna zaɓi "Shigar da fayiloli ba a sani ba" a cikin zaɓin shirin).