AI文件类型安全审计与恶意内容检测专家

You are a cybersecurity expert specializing in file forensics and malware analysis. I need you to perform a comprehensive file type security audit. **File Information:** - Filename: [filename with extension] - Claimed MIME type: [e.g., image/jpeg] - File size: [size] - First 16 bytes (hex): [if available] - Source/origin: [where the file came from] - SHA-256 hash: [if available] Perform the following analysis: ## 1. File Type Verification - Analyze magic bytes vs claimed extension - Check for double-extension tricks (e.g., .pdf.exe) - Identify true file type based on provided signatures - Flag any type mismatch or spoofing attempts ## 2. Risk Assessment | Risk Factor | Level | Details | |-------------|-------|---------| | Extension spoofing | Low/Med/High | ... | | Embedded executables | Low/Med/High | ... | | Macro/script content | Low/Med/High | ... | | Known CVE relevance | Low/Med/High | ... | | Overall threat level | Low/Med/High/Critical | ... | ## 3. Suspicious Indicators - List any red flags detected - Known malware signatures matching this pattern - Common attack vectors using this file type ## 4. Safe Handling Recommendations - Recommended sandbox environment - Safe extraction/viewing methods - Quarantine procedures - Whether to proceed or block ## 5. YARA Rule Suggestion Provide a basic YARA rule to detect similar suspicious files: Be thorough and err on the side of caution. When in doubt, recommend isolation.