Request	Value
Method	GET
URL	https://api.metadefender.com/v4/hash/:hash/sandbox

Summary

This endpoint retrieves the last dynamic analysis for the file identified by the parameter hash.

Request

URL Parameters

	Description	Example
:hash	MD5, SHA1, or SHA256 of a file	AAA1C1CF2E78F64C0894EBC568B145039BB06DC3

Header Parameters

	Description	Allowed Values	Required
apikey	Identifies and authorizes the user (API Authentication Mechanisms)	apikey	YES

Response

HTTP Status Codes

Please refer to Status Codes for more information.

Body

Example of a successful request:

Error rendering macro 'scroll-html-code' : null

Example of a failed request:

{
    "error": {
        "code": 400064,
        "messages": [
            "The hash value is not valid"
        ]
    }
}

Response description:

sandbox_id	The unique sandbox scan that can be used to retrieve this exact scan version
rescan_available	Whether a rescan request can be submitted
md5	The hash of the file
sha1	The hash of the file
sha256	The hash of the file
request_time	Timestamp when the dynamic analysis was initiated
scan_results.infection_score	A number from 1 to 10: 1: low probability of infection 10: high probability of infections
summary.ttp	MITRE tactic, technique or procedure. See this reference.
summary.network	A summary of the network activity recorded by the sandbox
summary.signatures	A summary of the signatures detected based on the behavior
summary.processes	A summary of the process activity recorded by the sandbox

Errors

Please refer to Errors for more information.

Sample code (Node.js)

var http = require("https");
 
var options = {
  "method": "GET",
  "hostname": [
    "api",
    "metadefender",
    "com"
  ],
  "path": [
    "v4",
    "hash",
    "AAA1C1CF2E78F64C0894EBC568B145039BB06DC3",
    "sandbox"
  ],
  "headers": {
    "apikey": process.env.APIKEY
  }
};
 
var req = http.request(options, function (res) {
  var chunks = [];
 
  res.on("data", function (chunk) {
    chunks.push(chunk);
  });
 
  res.on("end", function () {
    var body = Buffer.concat(chunks);
    console.log(body.toString());
  });
});
 
req.end();

Sample code (cURL)

curl -X GET \
  https://api.metadefender.com/v4/hash/AAA1C1CF2E78F64C0894EBC568B145039BB06DC3/sandbox \
  -H "apikey: ${APIKEY}"

10.3 Hash lookup with sandbox