Parameters

ParameterDescription
WebIDThe ID of the analysis. To obtain the WebID for a specific scan, you can copy the number that appears in the URL path of the Results page after clicking on a specific scan.

Example Output

{    "webid": "100",    "analysisid": "4",    "status": "finished",    "detection": "malicious",    "score": 42,    "classification": "",    "threatname": "Unknown",    "comments": "a sample comment",    "filename": "sample.exe",    "scriptname": "default.jbs",    "time": "2017-08-11T16:06:32+02:00",    "duration": 150,    "encrypted": false,    "md5": "0cbc6611f5540bd0809a388dc95a615b",    "sha1": "640ab2bae07bedc4c163f679a746f7ab7fb5d1fa",    "sha256": "532eaabd9574880 [...] 299550d7a6e0f345e25",    "tags": ["internal", "important"],    "runs": [{        "detection": "unknown",        "error": "Unable to run",        "system": "w7",        "yara": false,        "sigma": false,        "score": 1    }, {        "detection": "malicious",        "error": null,        "system": "w7x64",        "yara": false        "sigma": false,        "score": 42    }]}

Workflow Library Example

Retrieve Scan Results by Webid with Joe Sandbox and Send Results Via Email

Preview this Workflow on desktop