After that, the executables are analyzed by the 86 commercial antiviruses linked to VirusTotal. Initially, the executable malwares are sent to the server belonging to the VirusTotal platform. The second API, in turn, makes commercial antivirus diagnostics available for files submitted to the platform by the first API. The first one is responsible for sending the investigated files to the platform server. The proposed paper employs two of the APIs made available by VirusTotal. VirusTotal has Application Programming Interface (APIs) that allow programmers to query the platform in an automated way and without the use of the graphical web interface. Regarding suspicious web servers, VirusTotal uses the database responsible for sensing virtual addresses with malicious practices. When it comes to suspicious files, VirusTotal issues the diagnostics provided by the world's leading commercial antivirus products. The VirusTotal platform issues the diagnoses regarding malignant characteristics related to files and web servers.

Technically, the modus operandi for the identification of malicious files and servers refers to consult in named blacklist databases. Retrieval Internet of Thing for ARM Malware Analysis Commercial Antivirus Limitation

Combat arms classic malware