url

Web address from which you want to download a file.

Required parameter.

file_name

Object name. Required parameter.

Specify a file name, which Kaspersky Threat Intelligence Portal must use during execution in Kaspersky Sandbox. The specified file name will be assigned to the downloaded file or the file contained in the downloaded archive.

For correct processing of the file, do not specify its extension in the file_name parameter: Kaspersky Threat Intelligence Portal automatically determines the file type, and processes the file accordingly.

The value must not exceed 240 characters.

file_ext

File extension for the object that is to be executed.

This parameter is obsolete and left for backward compatibility with previous API versions only. Please use the file_name parameter to specify the object extension.

processing_type

Object execution type.

This parameter is obsolete and left for backward compatibility with previous API versions only. The only value to be accepted is unzip-and-exec (object is unpacked before execution).

reset_similarity_thresholds

Specifies whether similarity thresholds for compared samples must be ignored. Available values:

true—Similarity thresholds are ignored.

false—Similarity thresholds are not ignored.

unpack

Specifies whether the contents of the executed file must be unpacked for analysis. Available values:

true—File will be unpacked.

false—File will not be unpacked.

Request example:

To download and execute file:

curl -u <user name> --cert <full path to the certificate on your computer> -X POST --header 'Content-Length: 0' 'https://tip.kaspersky.com/api/attribution/tasks/file_from_url?url=heritagemfg.com/aaa/sales-reports/images/certificate_3807.exe&file_name=1'