This endpoint is available in the Private API only.
VirusTotal runs a distributed setup of Cuckoo sandbox machines that execute the files we receive. Execution is attempted only once, upon first submission to VirusTotal, and only Portable Executables under 10MB in size are ran. The execution of files is a best effort process, hence, there are no guarantees about a report being generated for a given file in our dataset.
If a file did indeed produce a behavioral report, a summary of it can be obtained by using the /file/report endpoint providing the additional parameter
allinfo=true. The summary will appear under the
behaviour-v1 property of the
additional_info field in the JSON report.
This API allows you to retrieve the full JSON report of the file's execution as returned by the Cuckoo JSON report encoder.