You have a mystery computer file. First, you look at its hidden parts without running it. Then, you run it in a safe, fake computer to see what it actually does. What are these two ways to check the file called, and what special kind of secret clue can you only get from each way to know what the file wants to do?
The first way to check a mystery computer file without running it is called static analysis. In static analysis, you examine the file's structure and code without executing it. This is like looking at a recipe book to understand the ingredients and steps of a dish without actually cooking it. The special kind of secret clue you can get from static analysis is information about the file's disassembly. Disassembly is the process of converting the machine code, which is what the computer directly understands, back into a more human-readable assembly language. This assembly code reveals the instruction....
Community Answers
Sign in to open profiles and full community answers.
Elvin Shirazov
“The two methods used to analyze a suspicious computer file are static analysis and dynamic analysis. Static analysis examines the file without running it by studying its structure and code; the special clue obtained from this method is the disassembly (assembly code), which reveals the instructions the file is programmed to execute, such as opening network connections, modifying system settings, or creating files. Dynamic analysis consists of running the file in a safe, isolated environment, such as a sandbox or virtiual machine, to observe its real behaviour; the special clue obtained from this method is the observed runtime behaviour and system interactions, including process creation, file modifications, registry changes, and netwrok communications. Together, these two methods help security analysts understand both what a file is designed to do and what it actually does when executed.”
100.0%
Oleksandr Musiienko
“The two methods are called static and dynamic analysis. Static analysis examines the file without running ut. The analyst studies its structure, metadata, embedded strings, imported functions, machine code and disassembly. The special clue obtained from this method is the file's disassembled code, which shows the instructions the program is designed to execute. For example, it may reval code for opening network connections, downloading additional files, changing system settings, or creating persistence. However, these are only potential actions because the file has not actually been exacuted. Dynamic analysis involves running the file in an isolated and controlled environment, such as a sandbox or virtual machine. The special clue obtained from this method is its observed behavior and system interactions. The analyst can see wheter the file creates or deleted files, modified the regustry, launches process, connects to suspicious servers, downloads malware, or attempts to steal information”
100.0%
Ghofrane Horchani
“The two lethod used to analyze a suspicious computer file are static analysis and dynamic analysis. static analysis examines the files without running it by studing its structure and code; the special clue obtained from this method is the disassembly (assembly code), which reveals the instructions the file is programmed to execute, such as opening network connections, modifying system setting, or creating files. Dynamic analysis consists of running the file in a safe isolated environment, such as sandbos or virtual machine, to observe its real behaviour ; the special clue obtained form this method is the observed runtime behavior and sustem interactions, including process creation, file modifications, registry changes, and network commmunications. Together, these two methods help security analysts understand both what a file is designed to do and what it actually does when excuted.”
100.0%
Mohamed Malek Toumi
“The two methods used to analyze a suspicious file are static analysis and dynamic analysis. Static analysis examines the file without executing it by analyzing its structure and code. The unique information obtained from static analysis is disassembly, which converts machine code into a human-readable assembly language and reveals the instructions the file is programmed to perform, such as creating files, modifying settings, or making network connections. Dynamic analysis involves running the file inside a safe and isolated environment, such as a sandbox, to observe its real behavior and system interactions, such as changes it makes to files, processes it creates, or connections it attempts. Together, these methods provide a complete understanding of the file's purpose and potential malicious activity.”
99.0%
GĂĽven Ada
“1. Static Analysis: This is the process of examining the file without executing it. It involves inspecting the file's code, structure, and contents to understand its potential behaviour. The unique clue obtained from static analysis is disassembly, which converts machine code into human-readable assembly language and reveals the instructions the program is designed to perform. 2. Dynamic Analysis: This is the process of running the file in a safe, isolated environment such as a sandbox or virtual machine to observe its behaviour during execution. The unique clue obtained from dynamic analysis is the file's observed runtime behaviour and system interactions, such as file creation, registry modifications, process execution, and network connections, which reveal what the program actually does when it runs.”
99.0%
Layba Hamid Khan
“1. Static Analysis: This is the process of examining the file without executing it. It involves inspecting the file's code, structure, and contents to understand its potential behaviour. The unique clue obtained from static analysis is disassembly, which converts machine code into human-readable assembly language and reveals the instructions the program is designed to perform. 2. Dynamic Analysis: This is the process of running the file in a safe, isolated environment such as a sandbox or virtual machine to observe its behaviour during execution. The unique clue obtained from dynamic analysis is the file's observed runtime behaviour and system interactions, such as file creation, registry modifications, process execution, and network connections, which reveal what the program actually does when it runs.”
99.0%
Bakht Sanan Khan
“static analysis is the process of examining the file without executing it . it invloves inspecting the file code, metadata, strings, imports, and other internal components to understand its purpose. a unique clue obtained through static analysis is the presence of embeded artifacts such as hardcoded urls, ips, api, etc which can indicate file behavior. dynamic analysis is the process of executing the file in a controlled environment , such as sandbox or VM to observe it actual behavior. a unique clue obtained through dynamic analaysis is its runtime activity, including network communication, file and registry modifications, process creation, and decrypted code in memory. these action reveals the file actual behaviour what it actually does when it runs.”
93.0%
Ahmed Nabeel Alobaidi
“static analysis: this is the first method, where you look at the files (hidden parts) withous running it secret clues: you can identify clues like file signatures, metadata, strings. (readable tesxt like URLs or IP addresses embeded in the code) and the structure of the file this help you understand the files composition and potential capabilites without risking infection dynamic analysys: this is the secon method where you can run the file in a safe isolated or fake environment (often called a sandbox) to observe its behavior. secred clues: you get clues about the files actual actions such as what registry keys it tries to modify files it creates or deletes , network connection attemots to make, and how it interacts with the operating system in realtime”
93.0%
Umamaheswara Rao K
“1.Two ways to check a file: -static analysis: you examine the file's code, embedded strings and structure without running it. -dynamic analysis: you run the file in a safe, fake computer environment to watch what it actually does. 2. special secrets from each way: -static analysis: unique clues: Hidden commands, suspicious function calls, URLs, IP addresses, malware signatures. example: A virus is found to contain a hardcoded IP address for a command and control server when you look at the code without executing it. Tools used: strings, IDA pro. -Dynamic analysis: unique clues: real behavior like files created, registry changes, network connections made, data being stolen. example: after executing a suspicious program in a sandbox , you see it tries to connect a foriegn s”
89.0%
Isabelle Chen
“The first way to check a mystery computer file without running it is called static analysis. In static analysis, you examine the file's structure and code without executing it. This is like looking at a recipe book to understand the ingredients and steps of a dish without actually cooking it. The special kind of secret clue you can get from static analysis is information about the file's disassembly. Disassembly is the process of converting the machine code, which is what the computer directly understands, back into a more human-readable assembly language. This assembly code reveals the instructions the file is programmed to perform, such as opening network connections, modifying system settings, or creating new files, but it doesn't show these actions happening in real-time. For example, you might see assembly instructions that suggest the file attempts to download more code from the internet, which is a string indicator of malicious intent. The second way to check the file is by runnning it in a safe, fake, computer environment, which is called dynamic analysis. Dynamic analysis is secret clue you can only get from dynamic analysis is observed behavior and system interactions. This means you see exactly what the file does when it runs. For instance, dynamic analysis would reveal if the file actually creates a new, suspicious document on the desktop, tries to connect to a known malicious website, or delete other files. This observed behavior is crucial because some malicious files only reveal their true purpose under specific conditions or after a delay, which static analysis alone might miss. Together, static and dynamic analysis provide a comprehensive understanding of a file's purpose, with static analysis revealing its potential actions through its code, and dynamic analysis confirming those actions through observation.”
89.0%
Rohan Adhikari
“The first way to check a mystery computer file without running it is called static analysis. In ststic analysis, you examine the file's structure and code without executing it. This is like looking at a recipe book to understand the ingredients and steps of a dish without actually cooking it. The special kind of secret clue you can get from static analysis is information about the file's disassembly. Disassembly is the process of converting the machine code, which is what the computer directly understands, back into a more human-readable assembly language. This assembly code reveals the instructions the file is programmed to perform, such as opening network coonections, modifying system settings, or creating new files, but it doesn't show these actions happening in real-time. For example, you might see assembly instructions that suggest the file attempts to download more code from the internet, which is a strong indicator of malicious intent. The second way to check the file is by running it in a safe, fake computer environment, which is called dynamic analysis. Dynamic analysis is like actually cooking the dish from the recipe to see how it turns out, but in a controlled kitchen where any mess can be cleaned up easily. The special kind of secret clue you can only get from dynamic analysis is observed behavior and system interactions. This means you see exactly what the file does when it runs. For instance, dynamic analysis would reveal if the file actually creates a new, suspicious document on the desktop, tries to connect to a known malicious website, or deletes other files. This observed behavior is crucial because some malicious files only reveal their true purpose under specific conditions or after a delay, which static analysis alone might miss. Together, static and dynamic analysis provide a comprehensive understanding of a file's purpose, with static analysis revealing its potential actions through its code, and dynamic analysis confirming those actions through observations.”
88.0%
Mostafa Mahmoud Khatab Tarad
“The two method are static analysis and dynamic analysis static analysis examines the suspicious file without executing it .A key clue obtained from static analysis is its disassembly ,which reveals the program machine instructions in assembly language and shows what the file is designed or capable of doing Dynamic analysis executes the file in a controlled sandbox or virtual enviroment its key clue is the file observed runtime behavior and system interactions such as creating files ,modifying the registry ,lauching processes or making network connections in short static analysis reveals the file potential behaviour through disassembly while dynamic analysis reveals its actual behavior during execution”
87.0%
Lahiru
“The methods used to examine a mystery compuetr file are " static analysis" and "dynamic analysis" Static analysis examines the file without running it by looking at its code, stucture and other hidden details. The special clue gained from static analysis is the files's disassebly, whihc shows the instruction the program is desigh to perform. Dynamic analysis involves running the safe isolated environment such as a sandox to observe its actual behaviour. The special clue gained from dynamic static analysis helps predict what a file may do, while dynamic analysis shows what it actually does when executed. Using both methods together provides a more complete undestanding of whetehr a file is safe or malicious”
85.0%
Celia Aitseddik
“2 techniques are static and dynamic analysis , the static analysis examines a suspicious file without executing it allowing analysts to extract artifacts such as strings embedded urls and ip addresses and IOC that reveal potential malicious intents , Dynamic analysis executes the file in a controlled isoltated environement such as sandbox or malware analysis vm enabling analysts to observe runtime behaviour that cannot reliably be determined from the file alone including process creation file and registry modifications network connection C2 communications and other behavioral IOCs used together these techniques provide complementayr visibility into both di”
81.0%
Dimas Agung Prakasa
“the two methods are called static analysis and dynamic analysis. statis analysis examines the file without running it and provides clues from it disassembly or code structure. revealing the actions it is programmed to perform, such as opening network connections or modifying files. dynamic analysis runs the file in a safe, isolated the environtments and provides clues from its observed behavior and system interactions, showing what the file actually does when executed, such as creating files, contacting website, or changing system setting. together, static analysis reveals the file potential actions, while dynamic analysis confirms its actual behavior”
81.0%
Malikejder
“The two methods are static analysis and dynamic analysis. Static analysis examines the file without executing it, allowing the analyst to inspect its structure, strings, imports, and disassembled assembly code to identify potential malicious capabilities and intended behavior. Dynamic analysis execute the file in a controlled sandbox environment, revealing its real-time behavior, such as process creation, file and registry modifications, network communications, persistence mechanisms, and other system interactions. Static analysis provides insight into what the malware is progammed to do, while dynamic analysis confirms what it actually does during execution.”
81.0%
Siddhi Mishra
“static analysis : examining the file without running it . it can reveal hidden clues such as strings , metadata , file headers, imported functions, embedded urls/ip addresses, suspicious code patterns . these cluse helps determine wht the file may be designed to do dynamic analysis : running the file in a safe isolated environment such as a sandbox or vm it reveals the files actual behavioue, including process it creates , files or registry keys it modifies,networks connections it makes , and other actions performend during execution”
66.0%
Ismail Mahbuub
“the two way to check the file are static analys and dynamic analysis. the secrec clue you can only get from static Analysis is disassembly (human-readale assembly code), wich reveals the hidden instructions progrmmed into the code without excuting it. the secret clue you can only get from dynamic analysis is observed behaviour and system interactions, wich reveals what the file actually does in real-time excuted in a controlled envirnment ( such as creating suspicious files, connecting to malicious websites, or delating data).”
62.0%
Zwe Wai Yan Bhone Myint
“The two methods are static analysis and dynamic analysis static analysis examines the file without executing it allowing analyst to inspect hideen components such as the file header strings metadata imported libraies (APIs) hashes and embeded code, These artifacts help identify suspisious behavior and possible malware without risiking infection Dynamic alaysis run the file in a cntrolled enviroment such as a sandbox pr vm to observe its real behavior this revelas runtuke indicators”
44.0%
Eeshan Garg
“Will start a Static analysis to get the knowledge of the file after that run the file in a sandbox or in an isolated enviroment and analyse the behavior and working of the file, from static analise give use the hash of file that helps to identify is the file marked as suspicious by diffrent hunters we can get some strings, headers and by running the file in i”
43.0%
Flávio Andrade
“The two methods are Static Analysis and Dynamic Analysis. Static Analysis provides clues such as hashes, strings, metadata, and imports without reunning the file. Dynamic Analysis provides behavioral clues such as network activity, process creation, file changes, and other actions observed while the file is running in a sandbox.”
40.0%
Gayatri Sudhakar Hire
“static analysis:- the files instuctions in assembly language. This shows what file could do, but not wheather it actually does it. Dynamic anlalysis:- observed behaviour and system instructions. this shows what the file really does when executed.”
36.0%
Pavan Kumar Tule
“looking at a file without running it is called static analysis which is reveals secret clues like hardcoded ip while running it in safe environment called dynamic analysisi which is reveals clues like real time network traffic and file modifications”
30.0%
Kaustubh
“static analysis: Looking at the file without running it (headers,strings,imports,structure,code).the special the secrete clue you can only get here is its built-in intent dynamic analysis: Running the file in a safe,fake computer(sandbox/VM) and watching what it actually does the special secret clue you can only get here is its real-world behavior”
30.0%
Mr. Vatsal U. Choksi
“static analysis what it is examining the file structure code and hidden blueprint without actually turning it on dynamic analysis running the file inside an isolated monitored environments like a sandbox to watch it live”
26.0%
Naga Pratyusha Vandrangi
“Static Analysis and Dynamic Analysis. Secret clue to Static Analysis is information about file's disassembly and dynamic analysis is observed behaviour abd system interactions.”
21.0%
E Yaswanth Naik
“static analysis reveals what the file is capable of without execution risk.Dynamic analysis revials what the file actually does by safely executing it in an isolated sandbox”
20.0%
Muhammad Aamir Riaz
“static analysis and dynamic analysis static analysis analysis provide a comprehensive understanding of a file's purpose dynamic analysis confirming those actions through observation”
20.0%
Arunank
“Static analysis and Dynamic analysis. Static analysis provides static IOC's, while Dynamic analysis provides behavioral IOC's”
13.0%
Muhammad Mudassar
“the two methods described for analyzing a mystery computer files are static analysis and dynamic analysis”
11.0%
Anirban Ghosh
“Static Analysis, Dynamic Analysis , IOCs”
4.0%
Samuel Kalu
“static analysis + dynamic analysis”
4.0%
Md Yousuf Ali
“Static analysis, Dynamic analysis”
4.0%
Suat Aliu
“STATIC ANALISYS and DYNAMIC ANALYSIS”
4.0%
Godknows Mangokwani
“Static analysis Dynamic analysis”
3.0%
Victor Samuel Da Paixao
“Static Analysis and Dynamic Analysis.”
3.0%
Akeem Suraju
“static analysis and dynamic analysis”
3.0%
Harsh Bhaskar
“Static Analysis and Dynamic Analysis”
3.0%
Names
“static analysys”
1.0%
Kabo Sekoto
“STATIC ANALYSIS”
1.0%
Abdullah Saman
“static analysis”
1.0%
Idrisa Haruni Kigaile
“None”
0.0%
Imran Sheikh
“None”
0.0%
Alok Verma
“None”
0.0%