swagger: '2.0' info: version: v1 title: virusapi Scan API description: The Cloudmersive Virus Scan API lets you scan files and content for viruses and identify security issues with content. host: localhost schemes: - https tags: - name: Scan paths: /virus/scan/file: post: tags: - Scan summary: Scan a file for viruses description: Scan files and content for viruses. Leverage continuously updated signatures for millions of threats, and advanced high-performance scanning capabilities. Over 17 million virus and malware signatures. Continuous cloud-based updates. Wide file format support including Office, PDF, HTML, Flash. Zip support including .Zip, .Rar, .DMG, .Tar, and other archive formats. Multi-threat scanning across viruses, malware, trojans, ransomware, and spyware. High-speed in-memory scanning delivers subsecond typical response time. operationId: Scan_File consumes: - multipart/form-data produces: - application/json - text/json - application/xml - text/xml parameters: - name: inputFile in: formData description: Input file to perform the operation on. required: true type: file responses: '200': description: OK schema: $ref: '#/definitions/VirusScanResult' security: - Apikey: [] /virus/scan/file/advanced: post: tags: - Scan summary: Advanced Scan a file for viruses description: Advanced Scan files with 360-degree Content Protection across Viruses and Malware, executables, invalid files, scripts, and even restrictions on accepted file types with complete content verification. Customize threat rules to your needs. Leverage continuously updated signatures for millions of threats, and advanced high-performance scanning capabilities. Over 17 million virus and malware signatures. Continuous cloud-based updates. Block threats beyond viruses including executables, scripts, invalid files, and more. Optionally limit input files to a specific set of file types (e.g. PDF and Word Documents only). Wide file format support including Office, PDF, HTML, Flash, MSG, and a wide range of image file formats. Zip support including .Zip, .Rar, .DMG, .Tar, and other archive formats. Multi-threat scanning across viruses, malware, trojans, ransomware, and spyware. High-speed in-memory scanning delivers subsecond typical response time. operationId: Scan_FileAdvanced consumes: - multipart/form-data produces: - application/json - text/json - application/xml - text/xml parameters: - name: inputFile in: formData description: Input file to perform the operation on. required: true type: file - name: fileName in: header description: 'Optional: specify the original file name of the file being scanned. By default the file name is taken from inputFile parameter, but if this is not provided, or you wish to override it, you can specify the original file name using this parameter.' required: false type: string - name: allowExecutables in: header description: Set to false to block executable files (program code) from being allowed in the input file. Default is false (recommended). required: false type: boolean - name: allowInvalidFiles in: header description: Set to false to block invalid files, such as a PDF file that is not really a valid PDF file, or a Word Document that is not a valid Word Document. Default is false (recommended). required: false type: boolean - name: allowScripts in: header description: Set to false to block script files, such as a PHP files, Python scripts, BAT scripts, JS scripts, and other malicious content or security threats that can be embedded in the file. Set to true to allow these file types. Default is false (recommended). required: false type: boolean - name: allowPasswordProtectedFiles in: header description: Set to false to block password protected and encrypted files, such as encrypted zip and rar files, and other files that seek to circumvent scanning through passwords. Set to true to allow these file types. Default is false (recommended). required: false type: boolean - name: allowMacros in: header description: Set to false to block macros and other threats embedded in document files, such as Word, Excel and PowerPoint embedded Macros (including support for .DOCX, .XLSX, .PPTX, .DOC and .XLS), and other files that contain embedded content threats. Set to true to allow these file types. Default is false (recommended). required: false type: boolean - name: allowXmlExternalEntities in: header description: Set to false to block XML External Entities and other threats embedded in XML files, and other files that contain embedded content threats. Set to true to allow these file types. Default is false (recommended). required: false type: boolean - name: allowInsecureDeserialization in: header description: Set to false to block Insecure Deserialization and other threats embedded in JSON and other object serialization files, and other files that contain embedded content threats. Set to true to allow these file types. Default is false (recommended). required: false type: boolean - name: allowHtml in: header description: Set to false to block HTML input in the top level file; HTML can contain XSS, scripts, local file accesses and other threats. Set to true to allow these file types. Default is false (recommended) [for API keys created prior to the release of this feature default is true for backward compatability]. If set to true, HTML files containing script tags will be allowed, but ContainsScript will be set to true if script tags are present. required: false type: boolean - name: allowUnsafeArchives in: header description: Set to false to block unsafe archives such as Zip Bombs, and other archives that can cause unsafe extraction outcomes. Default is false (recommended). If set to true, unsafe archives will be allowed. required: false type: boolean - name: allowOleEmbeddedObject in: header description: Set to false to block OLE embedded objects, which can contain vulnerabilities and executable code. Default is false (recommended). If set to true, OLE embedded objects will be allowed. required: false type: boolean - name: allowUnwantedAction in: header description: Set to false to block unwanted or undesired actions, which can contain execute or open links or content when the file is viewed. Default is false (recommended). If set to true, unwanted actions will be allowed. required: false type: boolean - name: options in: header description: Comma separated set of configuration operations. Include permitJavascriptAndHtmlInPDFs to allow JavaScript and HTML in PDF files. Include permitJavascriptInHtml to allow JavaScript in HTML files. Include blockOfficeXmlOleEmbeddedFile to block embedded OLE files in Office Documents using the modern file format. Include blockInvalidUris to block invalid URIs in Office documents. Include permitAuthenticodeSignedExecutables to allow executables if they have a valid Authenticode signature. Include scanMultipartFile to scan multi-part files such as split zip files. Include ignoreRestrictFileTypesForAttachments to ignore restrictFileTypes setting for file attachments. Default is no options. required: false type: string - name: restrictFileTypes in: header description: Specify a restricted set of file formats to allow as clean as a comma-separated list of file formats, such as .pdf,.docx,.png would allow only PDF, PNG and Word document files. All files must pass content verification against this list of file formats, if they do not, then the result will be returned as CleanResult=false. Set restrictFileTypes parameter to null or empty string to disable; default is disabled. required: false type: string responses: '200': description: OK schema: $ref: '#/definitions/VirusScanAdvancedResult' security: - Apikey: [] /virus/scan/website: post: tags: - Scan summary: Scan a website for malicious content and threats description: Operation includes scanning the content of the URL for various types of malicious content and threats, including viruses and threats (including Phishing). operationId: Scan_Website consumes: - application/json - text/json - application/xml - text/xml - application/x-www-form-urlencoded produces: - application/json - text/json - application/xml - text/xml parameters: - name: input in: body required: true schema: $ref: '#/definitions/WebsiteScanRequest' responses: '200': description: OK schema: $ref: '#/definitions/WebsiteScanResult' security: - Apikey: [] definitions: VirusFound: description: Virus positively identified type: object properties: FileName: description: Name of the file containing the virus type: string VirusName: description: Name of the virus that was found type: string VirusScanAdvancedResult: description: Result of running an advanced virus scan type: object properties: CleanResult: description: True if the scan contained no viruses, false otherwise type: boolean ContainsExecutable: description: True if the scan contained an executable (application code), which can be a significant risk factor type: boolean ContainsInvalidFile: description: True if the scan contained an invalid file (such as a PDF that is not a valid PDF, Word Document that is not a valid Word Document, etc.), which can be a significant risk factor type: boolean ContainsScript: description: True if the scan contained a script (such as a PHP script, Python script, etc.) which can be a significant risk factor type: boolean ContainsPasswordProtectedFile: description: True if the scan contained a password protected or encrypted file, which can be a significant risk factor type: boolean ContainsRestrictedFileFormat: description: True if the uploaded file is of a type that is not allowed based on the optional restrictFileTypes parameter, false otherwise; if restrictFileTypes is not set, this will always be false type: boolean ContainsMacros: description: True if the uploaded file contains embedded Macros of other embedded threats within the document, which can be a significant risk factor type: boolean ContainsXmlExternalEntities: description: True if the uploaded file contains embedded XML External Entity threats of other embedded threats within the document, which can be a significant risk factor type: boolean ContainsInsecureDeserialization: description: True if the uploaded file contains embedded Insecure Deserialization threats of other embedded threats within the document, which can be a significant risk factor type: boolean ContainsHtml: description: True if the uploaded file contains HTML, which can be a significant risk factor type: boolean ContainsUnsafeArchive: description: True if the uploaded file contains unsafe archive (e.g. zip) content, such as a Zip Bomb, or other configurations of a zip file that could lead to an unsafe extraction type: boolean ContainsOleEmbeddedObject: description: True if the uploaded file contains an OLE embedded object, which can be a significant risk factor type: boolean ContainsUnwantedAction: description: True if the uploaded file contains an unwanted automatic action, which can be a significant risk factor type: boolean VerifiedFileFormat: description: For file format verification-supported file formats, the contents-verified file format of the file. Null indicates that the file format is not supported for contents verification. If a Virus or Malware is found, this field will always be set to Null. type: string FoundViruses: description: Array of viruses found, if any type: array items: $ref: '#/definitions/VirusFound' ContentInformation: $ref: '#/definitions/AdditionalAdvancedScanInformation' description: Contains additional non-threat content verification information VirusScanResult: description: Result of running a virus scan type: object properties: CleanResult: description: True if the scan contained no viruses, false otherwise type: boolean FoundViruses: description: Array of viruses found, if any type: array items: $ref: '#/definitions/VirusFound' WebsiteScanRequest: description: Request to scan a website for malicious content type: object properties: Url: description: URL of the website to scan; should begin with http:// or https:// type: string WebsiteScanResult: description: Result of running a website scan type: object properties: CleanResult: description: True if the scan contained no threats, false otherwise type: boolean WebsiteThreatType: description: Type of threat returned; can be None, Malware, ForcedDownload or Phishing enum: - None - Malware - Phishing - ForcedDownload - UnableToConnect type: string FoundViruses: description: Array of viruses found, if any type: array items: $ref: '#/definitions/VirusFound' WebsiteHttpResponseCode: format: int32 description: The remote server URL HTTP reasponse code; useful for debugging issues with scanning; typically if the remote server returns a 200 or 300-series code this means a successful response, while a 400 or 500 series code would represent an error returned from the remote server for the provided URL. type: integer AdditionalAdvancedScanInformation: description: Additional non-threat content verification information type: object properties: ContainsJSON: description: True if the input file contains JSON data, false otherwise; this is not a threat signal type: boolean ContainsXML: description: True if the input file contains XML data, false otherwise; this is not a threat signal type: boolean ContainsImage: description: True if the input file contains an image type: boolean Hash_SHA1: description: SHA1 hash of input file type: string RelevantSubfileName: description: Relevant subfile name in an archive format for identified threats, if any type: string RelevantSubfileHash_SHA1: description: SHA1 hash of relevant subfile name in an archive format for identified threats, if any type: string IsAuthenticodeSigned: description: True if there is a valid Authenticode signature, False otherwise type: boolean securityDefinitions: Apikey: type: apiKey description: API Key Authentication name: Apikey in: header