On the Graph page you will see Root Node (the item representing the file being analyzed), from here there will be many arrows pointing to the relevant information.
The Root Node example below has 2 URLs that connect to it.
Interface Graph with Root Node is the file being analyzed
You click on each point to open the details of that object. Below are the files downloaded from the Root Note when it connects to a URL.
The files are downloaded from Root Note
And yet, when you double click on the downloaded file, you will see information related to that file. In general, this tool will help analyze malicious files more closely, view all data, files, domains, related countries, URLs .
In addition to using Graph for existing files, users can also create maps and save them. For example, after analyzing a malware sample, you want to add labels to objects, for example.
To add a label, right-click and select Add a Label. Like the image below, the Adware Downloader label is added. Then save it, the map will be attached with a link to access or share with others.
Add labels to objects
It may take time to get familiar with VIrusTotal, but thanks to the information it provides and how it is displayed, this is a useful tool for analyzing malware.
Below is a video tutorial of using this new VirusTotal tool.
See more: