Retrieve Scan Results By WebID

Retrieve the scan results by the specified WebID.

Parameters

Parameter	Description
WebID	The ID of the analysis. To obtain the WebID for a specific scan, you can copy the number that appears in the URL path of the Results page after clicking on a specific scan.

Example Output

{
    "webid": "100",
    "analysisid": "4",
    "status": "finished",
    "detection": "malicious",
    "score": 42,
    "classification": "",
    "threatname": "Unknown",
    "comments": "a sample comment",
    "filename": "sample.exe",
    "scriptname": "default.jbs",
    "time": "2017-08-11T16:06:32+02:00",
    "duration": 150,
    "encrypted": false,
    "md5": "0cbc6611f5540bd0809a388dc95a615b",
    "sha1": "640ab2bae07bedc4c163f679a746f7ab7fb5d1fa",
    "sha256": "532eaabd9574880 [...] 299550d7a6e0f345e25",
    "tags": ["internal", "important"],
    "runs": [{
        "detection": "unknown",
        "error": "Unable to run",
        "system": "w7",
        "yara": false,
        "sigma": false,
        "score": 1
    }, {
        "detection": "malicious",
        "error": null,
        "system": "w7x64",
        "yara": false
        "sigma": false,
        "score": 42
    }]
}

Workflow Library Example

Retrieve Scan Results by Webid with Joe Sandbox and Send Results Via Email

Preview this Workflow on desktop