Support for Archives (RAR / 7zip) and ELF File Types

WildFire® now analyzes RAR / 7zip archives and ELF files. In AutoFocus™, you can now search for archive and ELF samples and view related sessions, statistics, and WildFire analysis reports.
  1. Start an AutoFocus search based on
    File Type
    .
  2. Select any of the following file types to find samples based on the supported file types:
    • RAR Archive
    • 7zip Archive
    • ELF
    archive_elf_file_types.png
  3. View the search results.
    When you view the sample details for an archive file (RAR / 7zip), the archive contents are displayed showing the following:
    • # Files
      —The number of files in the archive file.
    • # Directories
      —The total number of directories in the archive file.
    • Max Directory Depth
      —Displays the number of subdirectories below the root directory.
    • File Information
      —Shows the details of the file, including verdict, size, type, and hashes.
    archive_file_type_details.png
    Archive files that are multi-part or password protected cannot be analyzed.
    • The archive file verdict is determined by the highest severity verdict of the archive contents.
  4. Next steps:

Recommended For You