{"slug":"api-webintel-api-workers-dev-api-security-malbazaar-samples-e250e6","title":"Looks up a file hash (SHA-256, SHA-1 or MD5) in abuse.ch MalwareBazaar","host":"api.webintel-api.workers.dev","method":"GET","resource":"https://api.webintel-api.workers.dev/api/security/malbazaar-samples","category":"code","description":"Looks up a file hash (SHA-256, SHA-1 or MD5) in abuse.ch MalwareBazaar: whether the sample is known, its other hashes, file name, type, size, signature (malware family), first/last seen, reporter, origin country, delivery method, tags, download count and code-signing info. Metadata only; the sample ","price_listed":0.002,"price_asked":0.002,"state":"answering","state_label":"Answering","checks_7d":1,"answered_7d":1,"latency_ms_median":46,"reported_calls_30d":1,"reported_payers_30d":1,"networks":["eip155:5042","eip155:8453","solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","xrpl:0"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"method":"GET","queryParams":{"hash":"343677702458d1e861b68b62073f10c33b5f859dbbd782c63d85547994728c23"},"type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"hash":{"description":"SHA-256 (64 hex), SHA-1 (40 hex) or MD5 (32 hex) of the file (required)","type":"string"},"sha256":{"description":"Same as hash (older name)","type":"string"}},"required":["hash"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[{"day":"2026-10-24","reachable":true,"status":402,"valid_402":true,"asked_usdc":0.002,"price_match":true,"latency_ms":46,"error":null}],"description_full":"Looks up a file hash (SHA-256, SHA-1 or MD5) in abuse.ch MalwareBazaar: whether the sample is known, its other hashes, file name, type, size, signature (malware family), first/last seen, reporter, origin country, delivery method, tags, download count and code-signing info. Metadata only; the sample itself is never downloaded.","last_updated":"2026-10-23T18:42:35.568Z","schemes":["exact"]}