Finds all those files that have some sigcheck/codesign (PE signature, Apple code signing) field containing the literal(s) provided.
Finds all those files that have some (indexed) Exif field containing the literal(s) provided, not only limited to Exif, certain other tools apply, such as taggant packer information, office metadata, etc.Executable files (for example: pexe, dmg, apks) whose dynamic behavioral report contains the literal provided.Example: "Trojan.Isbar" to search for malware with this family name. Malware family name exclusively on the antivirus results (no matter which particular engine produced the output).Maximum file size. The size can be specified in bytes, kilobytes(default) or megabytes.The size can be specified in bytes, kilobytes(default) or megabytes. Number of antivirus vendors that detected it upon scanning with VirusTotal.Select a file type from the dropdown list of most common file types.To get a form where you can use some of these modifiers: You can directly type these modifiers on the search box: These terms can be used more than once in the same query, for example positives:20+ positives:31- will return any file detected by a number of engines in the range 20-30. Specifying the number without any trailing plus or minus sign you will retrieve those detected exactly by the given number of engines, i.e. If you want to get those detected by ten engines or less you can use positives:11. For example, you can take advantage of the term positives:5+ to get files detected by five antivirus solutions or more. There are a set of special terms that you can use to refine your search results.
0 kommentar(er)
