malware-intel
VirusTotal
The canonical file-by-hash lookup: it aggregates antivirus verdicts and sandbox analyses for billions of files, URLs and domains. Paste a hash or URL into the website for a consolidated report, or use its JSON API with a free key for automated lookups. Archives researchers reach for it to identify a mystery file or check whether a hash matches known malware before handling it.
Why it’s useful & how it works
Canonical file-by-hash lookup. Free key (~500/day, 4/min). Reachable both ways; add key. Clean JSON.
What’s inside
Billions of analyzed files/URLs.
API access
https://www.virustotal.com/api/v3/files/ <sha256> (header x-apikey)
An API key is required — usually free; see the endpoints above for where to get one.
Access
Programmatic API access (a key may be required — see the API tag).