Struct Report

pub struct Report {

    pub md5: String,
    pub sha1: String,
    pub sha256: String,
    pub sha384: String,
    pub sha512: String,
    pub lzjd: Option<String>,
    pub tlsh: Option<String>,
    pub ssdeep: Option<String>,
    pub humanhash: Option<String>,
    pub filecommand: Option<String>,
    pub bytes: u32,
    pub size: String,
    pub entropy: f32,
    pub vt: Option<VirusTotalSummary>,
}

All the data for a sample known to MalwareDB

Fields

md5: String

MD5 hash

sha1: String

SHA-1 hash

sha256: String

SHA-256 hash

sha384: String

SHA-384 hash

sha512: String

SHA-512 hash

lzjd: Option<String>

LZJD similarity hash, if available https://github.com/EdwardRaff/LZJD

tlsh: Option<String>

TLSH similarity hash, if available https://github.com/trendmicro/tlsh

ssdeep: Option<String>

SSDeep similarity hash, if available https://ssdeep-project.github.io/ssdeep/index.html

humanhash: Option<String>

Human hash https://github.com/zacharyvoase/humanhash

filecommand: Option<String>

The output from libmagic, aka the file command https://man7.org/linux/man-pages/man3/libmagic.3.html

bytes: u32

Sample size in bytes

size: String

Sample size in human-readable size (2048 becomes 2 kb, for example)

entropy: f32

Entropy of the file, values over 6.5 may indicate compression or encryption

vt: Option<VirusTotalSummary>

VirusTotal summary data, if enabled on the server https://www.virustotal.com

Trait Implementations

impl Clone for Report

fn clone(&self) -> Report

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Report

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Report

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for Report

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for Report

fn eq(&self, other: &Report) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Report

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Report