VirusTotal: Tip for Developers

VirusTotal is an online service which allows files and URLs to be submitted for analysis by dozens of anti-malware engines.

For developers there is an API service which returns JSON data containing all the results of a scan.

Although this is very reliable, we noticed an interesting result for the file SkypeBridge.exe. The API returns some case-insensitive duplicate keys so it makes parsing the data more complex:

"external_modules": [
    "user32.dll",
    "User32.dll",
    "rstrtmgr.dll",
    "kernel32.dll"
],

Therefore this is a good file to test against your use of the API, along with other binaries which return easier-to-parse results.