results

Retrieve the results of an asynchronous file check

Retrieve the results of an asynchronous file check.

get/getAsyncResults

Request

Query parameters

idinteger required

Sample ID returned for an asynchronous scan request

Example:12345

Sample ID

Response

Returns a JSON with the current status and, if applicable, the results

statusstring required

Current status of the scan

resultThorFinding[]

THOR Report containing findings

Example response

{
  "result": [
    {
      "type": "THOR finding",
      "meta": {
        "time": "2026-01-19T16:08:27.809483955+01:00",
        "level": "Warning",
        "module": "HTTPServer",
        "scan_id": "S-qiVIo7fm2Yk-4",
        "hostname": "127.0.0.1"
      },
      "message": "Suspicious file found",
      "subject": {
        "type": "file",
        "path": "6700758b14fe8ac1bbcbbf3d652613d8",
        "exists": "yes",
        "extension": "",
        "magic_header": "UNKNOWN",
        "hashes": {
          "md5": "ffc74d5afc22d1f1c785f98154cc7bae",
          "sha1": "9603a4806528578686dc5f02b805c64414b3c91b",
          "sha256": "da1d2378fbacf84d09d18a94def83cd3bfc06e89e7429ba3de57cd96a0e04a87"
        },
        "first_bytes": {
          "hex": "2f2a0ae8aeade8aeb0200a5b726577726974655f",
          "ascii": "/* [rewrite_"
        },
        "size": 5369,
        "permissions": null,
        "content": {
          "type": "sparse data",
          "elements": [
            {
              "offset": 273,
              "data": "var _0x"
            }
          ],
          "length": 5369
        }
      },
      "score": 79,
      "reasons": [
        {
          "type": "reason",
          "summary": "YARA rule OBFUSC",
          "signature": {
            "score": 65,
            "origin": "internal",
            "kind": "YARA Rule",
            "date": "2025-03-29",
            "tags": [
              "OBFUS"
            ],
            "rule_name": "OBFUSC",
            "description": "Detects obfuscated JavaScript code"
          },
          "matched": [
            {
              "data": "']=!![];}",
              "offset": 3865,
              "field": "/content"
            }
          ]
        }
      ],
      "reason_count": 1,
      "context": null,
      "log_version": "v3.0.0"
    }
  ],
  "status": "Sample analysis complete"
}

Changes

No recorded changes to this operation across all 3 revisions of this API.