Submitting Objects

Procedure

1. Go to Virtual Analyzer → Submissions.
2. Click Submit Objects.
   The Submit objects window appears.
3. To submit a single file, select File.
   1. Browse and select a sample to upload.
   2. (Optional) For Portable Executable samples, specify command line parameters if required.
   3. (Optional) Select Prioritize to put submitted objects at the top of the queue.
   4. (Optional) To allow VNC access to Virtual Analyzer for the sample analysis, select Enable interactive mode for this sample analysis and configure the following settings:
      1. Select an image.
      2. Select a timeout period.

         Note Deep Discovery Analyzer starts the countdown timer for the timeout when a sample is submitted successfully. When the timeout period is reached, Deep Discovery Analyzer terminates VNC access, even when an analysis is still in progress. For example, when you configure a timeout period of 30 minutes for a sample submission and start a VNC session after 5 minutes, the remaining time for the session is 25 minutes.

      3. Select the Automatic analysis method to have Virtual Analyzer start the analysis automatically when you access the image using a VNC client; otherwise, select Manual to manually start the analysis after you have started the VNC session.

      Note Interactive mode is not available for URL list submissions or when more than one sample is selected for submission. Deep Discovery Analyzer administrators can configure advanced interactive mode settings (such as port range and security password for VNC access). For more information, see Interactive Mode Tab.

   5. Click Submit.

   Note After submitting a sample, you can view the VNC access information and analysis status on the Processing tab. Use the VNC access information to start a VNC session to a running Virtual Analyzer image. For archives, Virtual Analyzer merges analysis results for files inside archives into one report.

4. To submit a single URL, select URL.
   1. Specify a single URL.
   2. (Optional) Select Send to URL pre-filter to send submitted URLs to the URL pre-filter. URLs found safe by the URL pre-filter are not sent to Virtual Analyzer for scanning and analysis.
   3. (Optional) Select Prioritize to put submitted objects at the top of the queue.
   4. Click Submit.

      Note Before submission, Deep Discovery Analyzer normalizes all occurrences of the following: Punycode for URL domains URL encoding for URL paths and query strings

5. To submit multiple URLs, select URL list.
   1. Browse and select a URL list file.

      Note A URL list is a CSV or TXT file containing a maximum of 1,000 URLs. For CSV files, specify URLs in the first column. The URL list file must specify each URL in own line, and use UTF-8 encoding. Before submission, Deep Discovery Analyzer normalizes all occurrences of the following: Punycode for URL domains URL encoding for URL paths and query strings Analysis of 1,000 URLs may take several hours.

   2. (Optional) Select Send to URL pre-filter to send submitted URLs to the URL pre-filter. URLs found safe by the URL pre-filter are not sent to Virtual Analyzer for scanning and analysis.
   3. (Optional) Select Prioritize to put submitted objects at the top of the queue.
   4. Click Submit.
6. To upload applications which require certain files to be located in specific paths, select Bundle file.
   1. Browse and select an archive file.

      Note For archives, Virtual Analyzer merges analysis results for files inside archives into one report.

   2. Specify which file inside the archive to run.
   3. (Optional) For Portable Executable samples, specify command line parameters if required.
   4. (Optional) Select Prioritize to put submitted objects at the top of the queue.
   5. Specify where the files should be extracted.
      • To extract all files in the archive to a single folder, specify the complete path in the Extraction Path text box.
      • To extract specific files in the archive to another path, specify the File name and the complete Path for each file in the section below.
        • Click to specify a new file.
        • Click to remove an entry.
   6. Specify the character encoding used in file names.
   7. Click Submit.