Get information about files
Get information about one or more files.
This command receives one or more hashes (SHA-256, SHA-1 or MD5) and returns information about the corresponding files. The information for each file appears in the same order as the hashes are passed to the command.
If the command receives a single hypen (-) the hashes are read from the standard input, one per line.
vt file [hash]... [flags]
vt file 8739c76e681f900923b900c9df0ef75cf421d39cabb54650c4b9ad19b6a76d85
vt file 76cdb2bad9582d23c1f6f4d868218d6c
vt file 76cdb2bad9582d23c1f6f4d868218d6c 44d88612fea8a8f36de82e1278abb02f
cat list_of_hashes | vt file -
-x, --exclude strings exclude fields matching the provided pattern
-h, --help help for file
-I, --identifiers-only print identifiers only
-i, --include strings include fields matching the provided pattern (default [**])
-t, --threads int number of threads working in parallel (default 5)
-k, --apikey string API key
--proxy string HTTP proxy
-v, --verbose verbose output
- vt - A command-line tool for interacting with VirusTotal
- vt file analyses - Analyses for the file.
- vt file behaviours - Behaviour reports for the file.
- vt file bundled_files - Files bundled within the file.
- vt file carbonblack_children - Files derived from the file according to Carbon Black.
- vt file carbonblack_parents - Files from where the file was derived according to Carbon Black.
- vt file clues - Clues for the file.
- vt file code_blocks - Code blocks of the file.
- vt file collections - Returns the collections related to the file.
- vt file comments - Comments for the file.
- vt file compressed_parents - Compressed files that contain the file.
- vt file contacted_domains - Domains contacted by the file.
- vt file contacted_ips - IP addresses contacted by the file.
- vt file contacted_urls - URLs contacted by the file.
- vt file distributors - Software marketplaces distributing the file.
- vt file dropped_files - Files dropped by the file.
- vt file email_attachments - Files attached to the email.
- vt file email_parents - Email files that contained the file.
- vt file email_senders - Email sender's email addresses.
- vt file embedded_domains - Domain names embedded in the file.
- vt file embedded_ips - IP addresses embedded in the file.
- vt file embedded_urls - URLs embedded in the file.
- vt file execution_parents - Files that executed the file.
- vt file graphs - Graphs that include the file.
- vt file hash_collisions - Files with the same MD5 or SHA1 than the file.
- vt file itw_domains - In the wild domains from where the file has been downloaded.
- vt file itw_ips - In the wild IP addresses from where the file has been downloaded.
- vt file itw_urls - In the wild URLs from where the file has been downloaded.
- vt file memory_pattern_domains - Domain string patterns found in memory during sandbox execution.
- vt file memory_pattern_ips - IP address string patterns found in memory during sandbox execution.
- vt file memory_pattern_urls - URL string patterns found in memory during sandbox execution.
- vt file overlay_children - Files contained by the file as an overlay.
- vt file overlay_parents - Files that contain the file as an overlay.
- vt file pcap_children - PCAP files seen in the file.
- vt file pcap_parents - PCAP files that contain the file.
- vt file pe_resource_children - PE files contained by the file as a resource.
- vt file pe_resource_parents - PE files containing the file as a resource.
- vt file references - Returns the References for the file.
- vt file related_attack_techniques - Returns the Attack Techniques of the Collections containing this File.
- vt file related_references - Returns the References of the Collections containing this File.
- vt file related_threat_actors - Returns the Threat Actors of the Collections containing this File.
- vt file relationships - Get all relationships.
- vt file screenshots - Screenshots obtained from the execution of the file.
- vt file sigma_analysis - Sigma analysis for the file.
- vt file similar_files - Files that are similar to the file.
- vt file submissions - Submissions for the file.
- vt file urls_for_embedded_js - URLs where this (JS) file is embedded.
- vt file user_votes - Item's votes made by current signed-in user.
- vt file votes - Item's votes.