InspectedFile

InspectedFile
Information of the inspected file

Basic information about an inspected file. Full details can be obtained from InspectedFileDetails.

JSON Example 
{
    "sha256": "string",
    "file_size": 0,
    "last_inspected": 0,
    "inspection_status": "string",
    "threat_score": 0,
    "verdict": "string",
    "error_message": "string",
    "error_code": "string",
    "is_excluded": {
        "last_inspection_setting": false,
        "current_setting": false
    },
    "malware_family": [
        "string"
    ],
    "malware_class": [
        "string"
    ],
    "is_blocked": false,
    "file_type": "string",
    "inspections_count": 0
}
string
sha256
Optional

SHA256 hash of the inspected file.

integer As int64 As int64
file_size
Optional

Size of the inspected file in bytes.

EpochMsTimestamp
last_inspected
Optional

Timestamp in milliseconds since epoch.

InspectionStatus
inspection_status
Optional

Denotes the current analysis status of the inspection event.

Enumeration: IN_PROGRESS, COMPLETED, ERROR
integer
threat_score
Optional

Threat score in the range of 0 to 100. A score of 100 is considered high potential threat.

Verdict
verdict
Optional

This property describes the behavior of the file at runtime. Following is the meaning of each verdict:

  • BENIGN: File with no malicious code.
  • TRUSTED: Behavioural analysis or prevalence indicates a trusted file.
  • HIGHLY_TRUSTED: File from a highly trusted source. For example, Microsoft published the file.
  • SUSPICIOUS: File contains suspicious code and on execution can turn out to be a malware.
  • MALICIOUS: File is a malicious file containing malware or bad code that can harm the system.
  • UNKNOWN: File behavior is UNKNOWN at this point in time or there is some error in the analysis pipeline and verdict could not be concluded.
  • UNINSPECTED: File is marked as excluded and hence was not inspected by the analysis pipeline.
Enumeration: BENIGN, TRUSTED, HIGHLY_TRUSTED, SUSPICIOUS, MALICIOUS, UNKNOWN, UNINSPECTED
string
error_message
Optional

Error message corresponding to last inspection of this file. This field will be populated only when there is some error in the last inspection.

string
error_code
Optional

Error code corresponding to last inspection of this file. This field will be populated only when there is some error in the last inspection.

FileExclusionSetting
is_excluded
Optional

Conveys user specified file exclusion setting for this file at different time instances.

array of string
malware_family
Optional

Family of the malware.

array of string
malware_class
Optional

Class of the malware.

boolean
is_blocked
Optional

Conveys if the file is blocked by malware prevention service.

string
file_type
Optional

Type of the file.

integer
inspections_count
Optional

Number of times this file is inspected.

Used By