Skip to main content

File reputation

Review the basics of making API calls to File Intel

Use the /reputation endpoint to make an API call and return file hash details of up to 100 files. You can create an API request to retrieve as few or as many details as you need.

API calls containing a single file hash will return a 200 code and the results. When making an API call that includes multiple file hashes, the response will be asynchronous and return a 202 instead of immediately returning the results. You will then need to poll for the results. For more information, visit our Asynchronous API response page.

Look up the reputation score of a file hash​

To retrieve only the file hash score (normalized by Pangea), create your API request using the only two required body parameters: hash and hash_type. Your API Request might look like the example below:

POST/v2/reputation
curl -sSLX POST 'https://file-intel.'"$PANGEA_DOMAIN"'/v2/reputation' \
-H 'Authorization: Bearer '"$PANGEA_INTEL_TOKEN" \
-H 'Content-Type: application/json' \
-d '{"hash_type":"sha256","hashes":["142b638c6a60b60c7f9928da4fb85a5a8e1422a9ffdc9ee49e17e56ccca9cf6e"]}'

Retrieve a detailed intelligence report for a file hash​

To receive a report containing provider data intelligence in your API response (in addition to the file hash details), set raw to true in your API request and make sure you've set a provider as default in the Pangea Console .

note

You can also select a provider and override the default provider by specifying their name in the provider field when making an API request to the /reputation endpoint. This is helpful if your default provider returns a verdict of Unknown and you want a second opinion from another provider.

POST/v2/reputation
curl -sSLX POST 'https://file-intel.'"$PANGEA_DOMAIN"'/v2/reputation' \
-H 'Authorization: Bearer '"$PANGEA_INTEL_TOKEN" \
-H 'Content-Type: application/json' \
-d '{"hash_type":"sha256",
     "hashes":["142b638c6a60b60c7f9928da4fb85a5a8e1422a9ffdc9ee49e17e56ccca9cf6e"],
     "raw":true,
     "provider":{"ProviderName"}'
note

For more information, visit the interactive File Intel API Reference.

Was this article helpful?

Contact us