MobSF currently uses the deprecated VirusTotal API v2, which limits file size to 32MiB and is prone to future breakage. The user requests migration to API v3 to support larger files (up to 640MiB) and ensure future compatibility.
I enabled the VirusTotal integration of MobSF today and had to learn that it doesn't support files larger than 32MiB. It seems that MobSF never implemented the upload URL scheme of the VirusTotal API. While I looked into the code, I noticed that MobSF still uses the deprecated v2 of the VirusTotal API instead of the v3 API. Not migrating to v3 API will likely break the integration in the future. I tested the new v3 API and wrote a Bash script that implements support for files up to 640MiB (compared to the limited 32MiB of MobSF's current implementation) as well as report polling. Maybe this helps to rework the VirusTotal integration implemented in MobSF: ```bash #!/usr/bin/env bash ##### CONFIGURATION if [[ -z "${1}" ]]; then echo "File must be set." >&2 exit fi if [[ -z "${MOBSF_VT_API_KEY}" ]]; then echo "MOBSF_VT_API_KEY must be set." >&2 exit fi if [[ -z "${VIRUS_TOTAL_BASE_URL}" ]]; then VIRUS_TOTAL_BASE_URL="https://www.virustotal.com/api/v3/files" fi ##### EXEC