Get a Sample (WildFire API)

Use this resource to download sample files based on the MD5 or SHA-256 hash value. Malware files are available indefinitely to download, while non-malicious (grayware and benign) samples are available for 14 days.

Resource

/get/sample/

Request Parameters

Use the following form parameters when requesting a sample:
Parameters
Description
Example
apikey
(
Required
) API key
Example:
apikey=<API KEY>
hash
(
Required
) MD5 or SHA-256 hash value of the sample
Example:
hash=afe6b95ad95bc689c356f34 ec8d9094c495e4af57c932ac413b65ef132063acc

Example Request

Make a POST request to the
/get/sample
resource and include the API key along with the MD5 or SHA-256 hash value of the sample. Include the
-JO
option to use the Content-Disposition filename as provided by the server, similar to the following cURL command:
curl -JO -F 'apikey=<API KEY>' -F 'hash=afe6b95ad95bc689c356f34ec8d9094c495e4af57c932ac413b65ef132063acc' 'https://wildfire.paloaltonetworks.com/publicapi/get/sample'
The response saves the packet capture file. Example:
175aee5f236d464b3b825edc8cb71b47828f248356c36759a641d7da0db95323.xls.000

Related Documentation