12-13-2016 11:27 AM
When I submit a URL for analysis via Wildfire Public API.
curl -F 'apikey=myapikeyenteredhere' -F 'link=https://www.paloaltonetworks.com/' 'https://wildfire.paloaltonetworks.com/publicapi/submit/link'
I get a http status code of 200 and receive the submit link info (md5 & sha256).
<?xml version="1.0" encoding="UTF-8"?>
<wildfire>
<submit-link-info>
<url>https://www.paloaltonetworks.com/</url>
<sha256>a3c31e89a841df37d77d00f17f3f6a25751c23116f2a141095f93170e8aa37b5</sha256>
<md5>d7192254cc42b490e039ef327de73bda</md5>
</submit-link-info>
</wildfire>
However when i go to get the verdict or the analysis report using the either the md5 or the sha256, i receive a -102 verdict (unknown, or cannot find sample in database) .
<?xml version="1.0" encoding="UTF-8"?>
<wildfire>
<get-verdict-info>
<sha256></sha256>
<verdict>-102</verdict>
<md5>d7192254cc42b490e039ef327de73bda</md5>
</get-verdict-info>
</wildfire>
I also dont see the submission on my wildfire dashboard. I have tried with various URLs, using curl and through scripts; with the same result. Using the wildfire dashboard, the link was able to be submitted successfully.
