Use this resource to download sample files based on
the MD5 or SHA-256 hash value. Palo Alto Networks provides access
to malware samples collected by the WildFire cloud for 10 years,
while grayware sample are available for 14 days. Benign samples
are not available for download.
Resource
/get/sample/
Request Parameters
Use the following form
parameters when requesting a sample:
Parameters
Description
Example
apikey
(Required) API key
Example:
apikey=<API KEY>
agent
(Required for Prisma Access and Prisma
Cloud Compute-based WildFire public API keys) Designates the
API key type
Example:
agent=pcc
Options
include:
pcc—for use with Prisma
Cloud Compute-based WildFire public API keys
prismaaccessapi—for use with Prisma Access-based
WildFire public API keys
hash
(Required) MD5 or SHA-256 hash
value of the sample
Make a POST request to
the /get/sample resource and include the
API key along with the MD5 or SHA-256 hash value of the sample.
Include the -JO option to use the Content-Disposition
filename as provided by the server, similar to the following cURL command:
