Get a Sample (WildFire API)

Use this resource to download sample files based on the MD5 or SHA-256 hash value. Malware files are available indefinitely to download, while grayware and benign samples are available for 14 days.

Resource

/get/sample/
Code copied to clipboard
Unable to copy due to lack of browser support.

Request Parameters

Use the following form parameters when requesting a sample:
Parameters
Description
Example
apikey
Code copied to clipboard
Unable to copy due to lack of browser support.
(Required) API key
Example:
apikey=b0e0e395614d46170ee7498452967c71
Code copied to clipboard
Unable to copy due to lack of browser support.
hash
Code copied to clipboard
Unable to copy due to lack of browser support.
(Required) MD5 or SHA-256 hash value of the sample
Example:
hash=afe6b95ad95bc689c356f34
	ec8d9094c495e4af57c932ac413b65ef132063acc
Code copied to clipboard
Unable to copy due to lack of browser support.

Example Request

Make a POST request to the /get/sample resource and include the API key along with the MD5 or SHA-256 hash value of the sample. Include the -JO option to use the Content-Disposition filename as provided by the server, similar to the following cURL command:
curl -JO -F 'apikey=b0e0e395615d46120ee7498452967c72'
-F 'hash=afe6b95ad95bc689c356f34ec8d9094c495e4af57c932ac413b65ef132063acc' 'https://wildfire.paloaltonetworks.com/publicapi/get/sample'
Code copied to clipboard
Unable to copy due to lack of browser support.
The response saves the packet capture file. Example:
175aee5f236d464b3b825edc8cb71b47828f248356c36759a641d7da0db95323.xls.000
Code copied to clipboard
Unable to copy due to lack of browser support.

Related Documentation