VirusTotal · Example Payload

Virustotal File Behaviour Object Example

Anti MalwareThreat IntelligenceSecurityFile AnalysisURL AnalysisYARAIOCSandboxMITRE ATT&CKGoogle Cloud

Virustotal File Behaviour Object Example is an example object payload from VirusTotal, with 5 top-level fields. It illustrates the shape of data this provider's APIs accept or return.

Top-level fields

idtypelinksattributesrelationships

Example Payload

{
  "id": "sample",
  "type": "sample",
  "links": {
    "self": "https://www.virustotal.com/gui/file/44d88612"
  },
  "attributes": {
    "sandbox_name": "VirusTotal Jujubox",
    "analysis_date": 1748534400,
    "behash": "sample",
    "tags": [
      "sample"
    ],
    "processes_tree": [
      {}
    ],
    "processes_created": [
      "sample"
    ],
    "processes_injected": [
      "sample"
    ],
    "processes_killed": [
      "sample"
    ],
    "command_executions": [
      "sample"
    ],
    "registry_keys_opened": [
      "sample"
    ],
    "registry_keys_set": [
      {}
    ],
    "files_opened": [
      "sample"
    ],
    "files_written": [
      "sample"
    ],
    "files_deleted": [
      "sample"
    ],
    "files_dropped": [
      {}
    ],
    "modules_loaded": [
      "sample"
    ],
    "mutexes_created": [
      "sample"
    ],
    "mutexes_opened": [
      "sample"
    ],
    "dns_lookups": [
      {}
    ],
    "ip_traffic": [
      {}
    ],
    "http_conversations": [
      {}
    ],
    "tls": [
      {}
    ],
    "mitre_attack_techniques": [
      {}
    ],
    "verdicts": [
      "sample"
    ]
  },
  "relationships": {}
}

Work with this as data

Every example here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for examples

4 MCP tools reach this

find_examplesBrowse and filter every example in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools

Call it yourself

curl for this page

This example

curl "https://apis.io/api/v1/examples/virustotal-file-behaviour-object-example"

All examples

curl "https://apis.io/api/v1/examples?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.