Microsoft Corporation · microsoft.com

Microsoft security researchers analyze suspicious files to determine if they are threats, unwanted applications, or normal files. Submit files you think are malware or files that you believe have been incorrectly classified as malware. For more information, read the submission guidelines.

Submit file as a

Internal AV submission portal

Submit a file internally

Submit files so our analysts can check them for malicious characteristics. Provide the specific files that need to be analyzed and as much background information as possible.

SUBMIT A FILE

Escalate to WD Response

WD Response serves as the primary contact point to our malware analysts. Submit your files through regular channels before contacting WD Response for special requests or submission follow-ups.

CONTACT WD RESPONSE

Attack Surface Reduction

Report issues with undetected suspicious activities or activities that have been incorrectly detected (false positives).

ATTACK SURFACE REDUCTION

Network Protection

Report issues with the detection and blocking of URLs and IP addresses.

NETWORK PROTECTION

Submit a driver file for exploit analysis

Submit drivers for our analysts to check for malicious intent and vulnerabilities. Provide the specific files that need to be analyzed and as much background information as possible.

SUBMIT A DRIVER

View your submissions

Track the results of your submissions. You can view detailed detection information of all the files you have submitted as well as the determination provided by our analysts.

SUBMISSION HISTORY

Search file hash

Enter a file hash Sha1, Sha256 or Md5 format to view the file details including scan results.

Specify the file and provide information that will help us to efficiently handle your case.
Required fields are marked with an asterisk (*).

Give additional users access to the submission

Specify the email addresses of users with permission to open the submission details page; separate each address with a semicolon (;)

Select the Microsoft security product used to scan the file *

Company Name *

Affected organization*

Customer contact (recommended)

Note: The customer will receive email about this submission, including the confirmation message and the analysis result.

Select the file *

Detection name *

Learn how to see the list of detected threats on Microsoft Defender Antivirus.

Definition version (recommended)

Learn how to check the definition version on Microsoft Defender Antivirus.

Additional information *

Review your submission

Company name

Was this file found in the Microsoft corporate network?

Affected organization

Customer email address

Number of affected devices

Product

Submission priority

Software Assurance ID

File

Removal date

What do you believe this file is?

Detection name

Definition version

Additional information

Verify you are a human

Read the original on microsoft.com ↗