The behaviours relationship returns the list of all behaviour reports for a given private file.

This relationship can be retrieved using the relationships API endpoint. The response contains a list of private file behaviour objects.

{
  "data": [
    <FILE_BEHAVIOUR_OBJECT>,
    <FILE_BEHAVIOUR_OBJECT>,
    ...
  ],
  "links": {
    "next": "<string>",
    "self": "<string>"
  },
  "meta": {
    "count": <int>,
    "cursor": "<string>"
  }
}

{
	"data": [
		{
			"attributes": {
				"behash": "34650b9e56550c5815451152e5a5d505",
				"files_opened": [
					"C:\\Windows\\syswow64\\en-US\\USER32.dll.mui"
				],
				"has_html_report": true,
				"has_pcap": true,
				"modules_loaded": [
					"C:\\Users\\<USER>\\Downloads\\myfile.ENU",
					"C:\\Users\\<USER>\\Downloads\\myfile.EN"
				],
				"registry_keys_opened": [
					"HKCU\\Software\\Borland\\Locales",
					"HKCU\\Software\\Borland\\Delphi\\Locales"
				],
				"sandbox_name": "VirusTotal Jujubox",
				"tags": [
					"RUNTIME_MODULES"
				],
				"text_highlighted": [
					"C:\\Windows\\system32\\cmd.exe"
				]
			},
			"id": "30d1125d95914b55119a55b4105027b592065853e95eb7d5adb5e6b523548891_VirusTotal Jujubox-12345",
			"links": {
				"self": "https://www.virustotal.com/api/v3/private/file_behaviours/30d1125d95914b55119a55b4105027b592065853e95eb7d5adb5e6b523548891_VirusTotal Jujubox-12345"
			},
			"type": "file_behaviour"
		}
	],
	"links": {
		"self": "https://www.virustotal.com/api/v3/private/files/30d1125d95914b55119a55b4105027b592065853e95eb7d5adb5e6b523548891/behaviours?limit=10"
	},
	"meta": {
		"count": 1
	}
}