vt-cli

vt file

Get information about files

Synopsis

Get information about one or more files.

This command receives one or more hashes (SHA-256, SHA-1 or MD5) and returns information about the corresponding files. The information for each file appears in the same order as the hashes are passed to the command.

If the command receives a single hypen (-) the hashes are read from the standard input, one per line.

vt file [hash]... [flags]

Examples

  vt file 8739c76e681f900923b900c9df0ef75cf421d39cabb54650c4b9ad19b6a76d85
  vt file 76cdb2bad9582d23c1f6f4d868218d6c
  vt file 76cdb2bad9582d23c1f6f4d868218d6c 44d88612fea8a8f36de82e1278abb02f
  cat list_of_hashes | vt file -

Options

  -x, --exclude strings    exclude fields matching the provided pattern
  -h, --help               help for file
  -I, --identifiers-only   print identifiers only
  -i, --include strings    include fields matching the provided pattern (default [**])
  -t, --threads int        number of threads working in parallel (default 5)

Options inherited from parent commands

  -k, --apikey string   API key
      --proxy string    HTTP proxy
  -v, --verbose         verbose output

SEE ALSO

• vt - A command-line tool for interacting with VirusTotal
• vt file analyses - Analyses for the file.
• vt file behaviours - Behaviour reports for the file.
• vt file bundled_files - Files bundled within the file.
• vt file carbonblack_children - Files derived from the file according to Carbon Black.
• vt file carbonblack_parents - Files from where the file was derived according to Carbon Black.
• vt file clues - Clues for the file.
• vt file code_blocks - Code blocks of the file.
• vt file collections - Returns the collections related to the file.
• vt file comments - Comments for the file.
• vt file compressed_parents - Compressed files that contain the file.
• vt file contacted_domains - Domains contacted by the file.
• vt file contacted_ips - IP addresses contacted by the file.
• vt file contacted_urls - URLs contacted by the file.
• vt file distributors - Software marketplaces distributing the file.
• vt file dropped_files - Files dropped by the file.
• vt file email_attachments - Files attached to the email.
• vt file email_parents - Email files that contained the file.
• vt file email_senders - Email sender’s email addresses.
• vt file embedded_domains - Domain names embedded in the file.
• vt file embedded_ips - IP addresses embedded in the file.
• vt file embedded_urls - URLs embedded in the file.
• vt file execution_parents - Files that executed the file.
• vt file graphs - Graphs that include the file.
• vt file hash_collisions - Files with the same MD5 or SHA1 than the file.
• vt file itw_domains - In the wild domains from where the file has been downloaded.
• vt file itw_ips - In the wild IP addresses from where the file has been downloaded.
• vt file itw_urls - In the wild URLs from where the file has been downloaded.
• vt file memory_pattern_domains - Domain string patterns found in memory during sandbox execution.
• vt file memory_pattern_ips - IP address string patterns found in memory during sandbox execution.
• vt file memory_pattern_urls - URL string patterns found in memory during sandbox execution.
• vt file overlay_children - Files contained by the file as an overlay.
• vt file overlay_parents - Files that contain the file as an overlay.
• vt file pcap_children - PCAP files seen in the file.
• vt file pcap_parents - PCAP files that contain the file.
• vt file pe_resource_children - PE files contained by the file as a resource.
• vt file pe_resource_parents - PE files containing the file as a resource.
• vt file references - Returns the References for the file.
• vt file related_attack_techniques - Returns the Attack Techniques of the Collections containing this File.
• vt file related_references - Returns the References of the Collections containing this File.
• vt file related_threat_actors - Returns the Threat Actors of the Collections containing this File.
• vt file relationships - Get all relationships.
• vt file screenshots - Screenshots obtained from the execution of the file.
• vt file sigma_analysis - Sigma analysis for the file.
• vt file similar_files - Files that are similar to the file.
• vt file submissions - Submissions for the file.
• vt file urls_for_embedded_js - URLs where this (JS) file is embedded.
• vt file user_votes - Item’s votes made by current signed-in user.
• vt file votes - Item’s votes.

This site is open source. Improve this page.