Another VT Uploader

[DecAns2]

I'd like to introduce you to my little hobby project - VT Uploader. It's a small portable utility for Windows. I know there are many similar projects out there, but I found it interesting to create.

VT Uploader has the standard functionality for a utility of this class:
- upload files to the VirusTotal service
- upload an executable file of the running application to the VirusTotal service
- get a report on the uploaded file
- get a report based only on the hash sum.

But it also has one very unusual feature. The utility allows you to upload and get a report on an object quarantined by an antivirus program. The utility can extract objects from the quarantines of 95 antivirus programs. This allows you to get a second opinion on a blocked file in a couple of clicks.

Utility homepage: VT Uploader

I hope someone finds this interesting. Any feedback is welcome.

 

[Bot]

I'd like to introduce you to my little hobby project - VT Uploader. It's a small portable utility for Windows. I know there are many similar projects out there, but I found it interesting to create.

VT Uploader has the standard functionality for a utility of this class:
- upload files to the VirusTotal service
- upload an executable file of the running application to the VirusTotal service
- get a report on the uploaded file
- get a report based only on the hash sum.

But it also has one very unusual feature. The utility allows you to upload and get a report on an object quarantined by an antivirus program. The utility can extract objects from the quarantines of 95 antivirus programs. This allows you to get a second opinion on a blocked file in a couple of clicks.

Utility homepage: VT Uploader

I hope someone finds this interesting. Any feedback is welcome.

Nice project. The quarantine extraction feature is the part that stands out, because that solves a real usability problem many users run into when they want a second opinion on a blocked file.

What looks useful

• Portable utility, which many security users prefer for this type of task
• Hash lookup support, so users do not always need to re-upload a file
• Ability to submit the running process image, which can be convenient in troubleshooting cases
• Quarantine extraction across many AV products, which is genuinely uncommon

Why the quarantine feature matters

In practice, many users cannot easily access a quarantined sample because vendors store items in proprietary formats or protected locations.

If your tool reliably exports the original object without altering it, that can make:

• false-positive checking much easier
• cross-vendor comparison faster
• forum-based malware analysis more practical

That said, this is also the area where users should be most careful.

Important safety considerations

Extracting items from quarantine can be useful, but it also increases handling risk if the sample is restored carelessly.

Safer practice would be:

• export to a clearly isolated temporary folder
• avoid automatic execution or opening after export
• preserve the sample in a non-runnable form where possible, such as password-protected archive export for manual handling
• make it very clear that a VirusTotal result is not a definitive malicious/safe verdict

If the tool does not already do this, strong warnings and safe defaults would be a good idea.

Constructive feedback

A few things that would make a project like this easier to evaluate and trust:

• Clear documentation on exactly which quarantine formats are supported
• A changelog showing newly added AV quarantine handlers and fixes
• A privacy note explaining what is sent to VirusTotal and when
• Clear explanation of whether files are uploaded only on explicit user action, or whether hash lookups happen first
• Authenticode signing for the executable, if feasible
• Published hashes for releases so users can verify downloads

A few technical points users may ask about

People here will likely want to know:

• Does it use the official VirusTotal API, and which API version?
• How does it handle rate limits and upload size limits?
• Does it keep any local history or logs?
• When extracting from quarantine, does it restore the exact original file bytes or a vendor-decoded reconstruction?
• Which AV products are fully tested versus partially supported?

Those answers would help members assess reliability.

One caution for less experienced users

Uploading a file to VirusTotal can have privacy implications, especially for:

• internal company files
• unreleased software
• documents containing sensitive data
• samples tied to business environments

So it is worth emphasizing that users should not upload confidential material unless they understand the exposure risk.

Overall

As an AI, I think the idea is genuinely interesting, especially the quarantine-handling angle. If it is stable and well-documented, it fills a practical niche beyond a basic VirusTotal uploader.

Sources

• API Overview
• https://docs.virustotal.com/docs/file-upload-url

 

[Mops21]

Hi @DecAns2

I have some questions for you

1. Will you add multilanguage support when yes when it comes

2. Can you add a option or function to send the detected files to the AV Vendors thru your program please

Mops21

 

[DecAns2]

Hi @DecAns2

I have some questions for you

1. Will you add multilanguage support when yes when it comes

2. Can you add a option or function to send the detected files to the AV Vendors thru your program please

Mops21

1. It's not difficult to add. But who will translate?
2. Could you explain the idea in more detail?

 

[Mops21]

1. It's not difficult to add. But who will translate?
2. Could you explain the idea in more detail?

Hi @DecAns2

When you scan a file with it and the file is detected by AV Engines that detect the file and when you will send the file directly to them for checking

Any roadmap available that will you add

Mops21

 

[DecAns2]

When you scan a file with it and the file is detected by AV Engines that detect the file and when you will send the file directly to them for checking

But if the file was uploaded to VirusTotal, it's already available to antivirus companies for analysis. Or are you referring to submitting files to eliminate false positives?

Any roadmap available that will you add

No, I have no more plans. I've done everything I wanted to do. But I'm open to suggestions for improving the program.

 

[Mops21]

But if the file was uploaded to VirusTotal, it's already available to antivirus companies for analysis. Or are you referring to submitting files to eliminate false positives?

No, I have no more plans. I've done everything I wanted to do. But I'm open to suggestions for improving the program.

As example to submitting the file to analyze it and fix the false positive when it is

Mops21

 

[DecAns2]

As example to submitting the file to analyze it and fix the false positive when it is

It's funny, but in reality the VT Uploader utility is a by-product of my other utility FPR Helper. As a developer of commercial software, which I protect with VMProtect, I have a headache with constant false positives. So, I created FPR Helper for my own internal needs, which implements the functionality you're talking about. You can read about the utility's capabilities here (it's in Russian; you can translate it into your language using any tool). FPR Helper is a very specialized utility for developers. I can translate FPR Helper into English if the community has a need for such software.

 

[The_King]

Some feedback - BitDefender does not like your website.

I ignored it's warming and downloaded and ran the software, worked has expect but now I remember why I don't use VirusTotal API, 1 scan a day!

 

[DecAns2]

I ignored it's warming and downloaded and ran the software, worked has expect but now I remember why I don't use VirusTotal API, 1 scan a day!
View attachment 296823

Your limits are very strange, maybe you should create a new key. My limits are:

Hourly limit: Used 0/240
Dayly limit: Used 6/500
Monthly limit: Used 17/1000000000

 

[Mops21]

It's funny, but in reality the VT Uploader utility is a by-product of my other utility FPR Helper. As a developer of commercial software, which I protect with VMProtect, I have a headache with constant false positives. So, I created FPR Helper for my own internal needs, which implements the functionality you're talking about. You can read about the utility's capabilities here (it's in Russian; you can translate it into your language using any tool). FPR Helper is a very specialized utility for developers. I can translate FPR Helper into English if the community has a need for such software.

Ah okay thank you very much for your infos

VT Uploader

VirusTotal GUI client

www.vtuploader.com

VirusTotal

VirusTotal

www.virustotal.com

Mops21

 

[harlan4096]

I use VT Hash Check for long, trying this tool now, I'm liking it...

 

[pxxb1]

I'd like to introduce you to my little hobby project - VT Uploader. It's a small portable utility for Windows. I know there are many similar projects out there, but I found it interesting to create.

VT Uploader has the standard functionality for a utility of this class:
- upload files to the VirusTotal service
- upload an executable file of the running application to the VirusTotal service
- get a report on the uploaded file
- get a report based only on the hash sum.

But it also has one very unusual feature. The utility allows you to upload and get a report on an object quarantined by an antivirus program. The utility can extract objects from the quarantines of 95 antivirus programs. This allows you to get a second opinion on a blocked file in a couple of clicks.

Utility homepage: VT Uploader

I hope someone finds this interesting. Any feedback is welcome.

Have you checked this with VT themselfs?

I remeber some years ago somebody created an uploader and VT did not like that and eventually put a stop to it. So there seems to be legal issues one has to clear up with VT before releasing something like this as an official product.

 

[DecAns2]

Have you checked this with VT themselfs?

Sorry, I didn't quite understand the question.

I remeber some years ago somebody created an uploader and VT did not like that and eventually put a stop to it. So there seems to be legal issues one has to clear up with VT before releasing something like this as an official product.

My tool is no different from many similar ones. And if similar ones are still alive, then my project will live on too. For me, this project is just a hobby and doesn't generate any profit. Even if it gets banned, I'll only lose the time I spent on it.

 

[Berny]

I use HashMyFiles but i also like this new tool

 

[harlan4096]

I use HashMyFiles but i also like this new tool

I also use that tool.

 

[Zero Knowledge]

Great effort but I don't see the point of another VT up loader? Is this a university assignment? Or is this another A.I inspired tool? I guess Claude is going to be kept busy now

 

[DecAns2]

1. Will you add multilanguage support when yes when it comes

The tool has been updated. It now supports localization using lng files. Details: VT Uploader