The checksum field is in FortiMail log messages where type=virus and subtype=fortisandbox.
checksum
type=virus
subtype=fortisandbox
The field indicates the file signature (checksum or hash) of the file that was submitted to FortiSandbox for scanning.