2026-09-19 21:13 UTC
Replies (8)
-
@atro_city@fedia.io 2026-09-19 21:17
The title had me very confused for a few seconds. "Are you talking about cows? Why would they need to be executed? And why would they need vets before execution?"
-
@eleijeep@piefed.social 2026-09-19 21:22
VirusTotal also tells you a load of stuff about file read/writes and network access etc. What did it say? And what was the positive result for?
-
@waltersf@bookwyr.me 2026-09-19 21:25
You can also acquire the original executable, and compare the differences in a binary/hex editor. VM runs would be after you have sanitived the EXE.
-
@Souvenir@lemmy.dbzer0.com 2026-09-19 22:22
Stupid question, but why can’t your friend not just run it in sandboxie with internet locked down? No noticeable performance drain, can’t cause too much damage. Or isn’t this enough?
-
@Mordikan@kbin.earth 2026-09-20 01:46
One thing to remember with VirusTotal is that it should only be used as a "tool of consensus". A lot of AV solutions on their list will false flag binaries presumably to instill fear and get people to buy their solutions over more reputable AV providers. You want the AV that works the best which many people would equate to the most flagging (as logically incomplete as that may be). If you are seeing 66 flags and many of those being from reputable vendors, then I would say that what they show is likely accurate. Accuracy and relevance being two different things. 100% accuracy on keygen tools doesn't mean that it is a relevant flag to what you're trying to do. You could try software solutions like LOKI (the IoC scanner) or Azul to test specific binaries, though. I believe LOKI is just doing static analysis, but Azul I know automates the sandboxing.
-
@DrunkAnRoot@sh.itjust.works 2026-09-20 04:40
theres any.run but it needs an account
-
@hexagonwin@lemmy.today 2026-09-20 06:51
what software is this?
-
@onlinepersona@programming.dev 2026-09-20 08:11
VirusTotal is probably the best you can do. Although, I think it belongs to Amazon or some big company now after being bought up.