Behaviour reports for the private file
The behaviours relationship returns the list of all behaviour reports for a given private file.
This relationship can be retrieved using the relationships API endpoint. The response contains a list of private file behaviour objects.
{
"data": [
<FILE_BEHAVIOUR_OBJECT>,
<FILE_BEHAVIOUR_OBJECT>,
...
],
"links": {
"next": "<string>",
"self": "<string>"
},
"meta": {
"count": <int>,
"cursor": "<string>"
}
}
{
"data": [
{
"attributes": {
"behash": "34650b9e56550c5815451152e5a5d505",
"files_opened": [
"C:\\Windows\\syswow64\\en-US\\USER32.dll.mui"
],
"has_html_report": true,
"has_pcap": true,
"modules_loaded": [
"C:\\Users\\<USER>\\Downloads\\myfile.ENU",
"C:\\Users\\<USER>\\Downloads\\myfile.EN"
],
"registry_keys_opened": [
"HKCU\\Software\\Borland\\Locales",
"HKCU\\Software\\Borland\\Delphi\\Locales"
],
"sandbox_name": "VirusTotal Jujubox",
"tags": [
"RUNTIME_MODULES"
],
"text_highlighted": [
"C:\\Windows\\system32\\cmd.exe"
]
},
"id": "30d1125d95914b55119a55b4105027b592065853e95eb7d5adb5e6b523548891_VirusTotal Jujubox-12345",
"links": {
"self": "https://www.virustotal.com/api/v3/private/file_behaviours/30d1125d95914b55119a55b4105027b592065853e95eb7d5adb5e6b523548891_VirusTotal Jujubox-12345"
},
"type": "file_behaviour"
}
],
"links": {
"self": "https://www.virustotal.com/api/v3/private/files/30d1125d95914b55119a55b4105027b592065853e95eb7d5adb5e6b523548891/behaviours?limit=10"
},
"meta": {
"count": 1
}
}