Jump to content

Submit samples with Gmail


Recommended Posts

Quote

File types blocked by Gmail are:

.ade, .adp, .apk, .appx, .appxbundle, .bat, .cab, .chm, .cmd, .com, .cpl, .dll, .dmg, .ex, .ex_, .exe, .hta, .ins, .isp, .iso, .jar, .js, .jse, .lib, .lnk, .mde, .msc, .msi, .msix, .msixbundle, .msp, .mst, .nsh, .pif, .ps1, .scr, .sct, .shb, .sys, .vb, .vbe, .vbs, .vxd, .wsc, .wsf, .wsh

image.png.5fdea9725f0716bd5072f26a98be6554.png

Basically, I always append ".vir" extension to every sample, but my submissions are easily ignored by them.

Any suggestions for submitting samples using Gmail?

 

Thanks

Link to comment
Share on other sites

Posted (edited)
1 hour ago, itman said:

It doesn't work. Gmail doesn't let you attach any type of zip file if the file contains file types of the above-mentioned formats. If you encrypt file names of the zip, then it doesn't accept that either. This is a big problem. ESET really needs a dedicated website for submitting samples like almost all other vendors have. I don't understand how come they don't have any. 

Edited by SeriousHoax
Link to comment
Share on other sites

Posted (edited)
1 hour ago, SeriousHoax said:

It doesn't work. Gmail doesn't let you attach any type of zip file if the file contains file types of the above-mentioned formats.

Then submit via the Eset GUI:

Quote

If you prefer not to send an email, use the sample submission form in your ESET product:

  1. Open the main program window of your ESET Windows product.

  2. Click Tools More tools and click Submit sample for analysis.

  3. Follow the in-product wizard to complete your submission.

 

Edited by itman
Link to comment
Share on other sites

2 hours ago, itman said:

Then submit via the Eset GUI:

 

Submissions via the ESET GUI do not receive high priority and can take days or months to be processed by lab experts (in many cases, they won't be processed by lab experts). 

Last time, I submitted a suspicious Android sample via ESET GUI and got a reply after three months. 🤣 

Edited by AnthonyQ
Link to comment
Share on other sites

If gmail doesn't work for you.. just use different email provider (what about outlook.com ?)

Link to comment
Share on other sites

3 hours ago, Veremo said:

If gmail doesn't work for you.. just use different email provider (what about outlook.com ?)

Outlook works, but still not a proper solution since many people just use Gmail. The best thing to do is to have a dedicated website for malware submission. 

Here's one example: https://submit.norton.com/ 

Link to comment
Share on other sites

  • Most Valued Members
On 7/10/2022 at 3:02 AM, AnthonyQ said:

Submissions via the ESET GUI do not receive high priority and can take days or months to be processed by lab experts (in many cases, they won't be processed by lab experts). 

Last time, I submitted a suspicious Android sample via ESET GUI and got a reply after three months. 🤣 

Yeah this does not sound good. I rarely email eset but have seen sometimes their emails can take a bit to get replies which for a security company is not great. Malware developers don't wait.

I think an upload service by eset could also help but unsure if it could be costly?

Link to comment
Share on other sites

1 hour ago, peteyt said:

Yeah this does not sound good. I rarely email eset but have seen sometimes their emails can take a bit to get replies which for a security company is not great. Malware developers don't wait.

I think an upload service by eset could also help but unsure if it could be costly?

I think an automated submission system can reduce labor costs, because this system can help merge duplicate sample submissions and automatically sort and process the samples that have been analyzed by an expert or are known to be harmless. And most importantly, it can improve the submission experience by enabling submitter to track the status of submission.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...