Views:
You can view the detailed detection information of child files in a submitted sample for ICAP Pre-scan.

Procedure

  1. Go to Virtual Analyzer → Submissions.
  2. Click the ICAP Pre-scan tab.
  3. Click the number in the Child Files column.
    The Child File Detections screen appears.
    The following table describes the information on the screen.

    Field
    Description
    File Name
    Name of the child file
    File Type
    File type of the child file
    Threat
    Name of threat as detected by Trend Micro pattern files and other components
    SHA-1
    SHA-1 value of the child file
    SHA-256
    SHA-256 value of the child file
    YARA Rule Name
    Name of the YARA rule that was matched
    YARA Rule File
    Name of the YARA rule file that contains the matched YARA rule
    VirusTotal
    Click to open VirusTotal in a new browser tab with a query for the child file.