VirusTotal MCP Server

get_file_report

Get a comprehensive file analysis report using its hash (MD5/SHA-1/SHA-256). Includes detection results, file properties, and key relationships (behaviors, dropped files, network connections, embedded content, threat actors). Returns both the basic analysis and automatically fetched relationship data.

Input Schema

NameRequiredDescriptionDefault
hashYesMD5, SHA-1 or SHA-256 hash of the file

Input Schema (JSON Schema)

{ "$schema": "http://json-schema.org/draft-07/schema#", "additionalProperties": false, "properties": { "hash": { "description": "MD5, SHA-1 or SHA-256 hash of the file", "pattern": "^[a-fA-F0-9]{32,64}$", "type": "string" } }, "required": [ "hash" ], "type": "object" }