Check Scan Status

Check the scan status of the Hybrid Analysis sandbox.

Parameters

Parameter	Description
Scan ID	The ID of the scan that was analyzed.The ID can be the job_id or the sha256 fields from the Scan URL or Scan File actions.

Example Output

{
    "classification_tags": [],
    "tags": [],
    "submissions": [
        {
            "submission_id": "63de7d8d49a6d52ea854e3e6",
            "filename": "file",
            "url": null,
            "created_at": "2023-02-04T15:45:17+00:00"
        }
    ],
    "machine_learning_models": [],
    "crowdstrike_ai": null,
    "job_id": "63de7d8c49a6d52ea854e3e5",
    "environment_id": 100,
    "environment_description": "Windows 7 32 bit",
    "size": 6,
    "type": "ASCII text, with no line terminators",
    "type_short": [
        "text"
    ],
    "target_url": null,
    "state": "ERROR",
    "error_type": "UNKNOWN_ERROR",
    "error_origin": "SERVER",
    "submit_name": "file",
    "md5": "89defae676abd3e3a42b41df17c40096",
    "sha1": "c7a9f84bb5ac28e434238294999c298637e77cce",
    "sha256": "2ed46d7bedc17aba18343eac71e21648b1af50fff732af7e338075cd0ed1567a",
    "sha512": "0fa9644263e365c4d264888825f22b7d7b104f5455861641e619b225aae8f23bcf6586be45d2090ccc9aa649a23ff55340f6bf4ebff733cfcea971a1b5d4b3d2",
    "ssdeep": null,
    "imphash": null,
    "entrypoint": null,
    "entrypoint_section": null,
    "image_base": null,
    "subsystem": null,
    "image_file_characteristics": [],
    "dll_characteristics": [],
    "major_os_version": null,
    "minor_os_version": null,
    "av_detect": null,
    "vx_family": null,
    "url_analysis": false,
    "analysis_start_time": "2023-02-04T15:45:17+00:00",
    "threat_score": null,
    "interesting": false,
    "threat_level": null,
    "verdict": null,
    "certificates": [],
    "domains": [],
    "compromised_hosts": [],
    "hosts": [],
    "total_network_connections": 0,
    "total_processes": 0,
    "total_signatures": 0,
    "extracted_files": [],
    "file_metadata": null,
    "processes": [],
    "mitre_attcks": [],
    "network_mode": "default",
    "signatures": []
}

Workflow Library Example

Check Scan Status with Hybrid Analysis and Send Results Via Email

Preview this Workflow on desktop