ELF Malware Test File

1. Download one of the new malware test files. Select from either direct or API download.
   • Direct Download:
     • If you have SSL decryption enabled on the firewall, use the following URL: https://wildfire.paloaltonetworks.com/publicapi/test/elf
     • If you do not have SSL decryption enabled on the firewall, use the following URL instead: http://wildfire.paloaltonetworks.com/publicapi/test/elf
   • API Download: Make a GET request to the /test resource with the file type you want to retrieve. Use the -JO option to retain the Content-Disposition filename, as shown in the following cURL command example:

     curl -JO 'https://wildfire.paloaltonetworks.com/publicapi/test/elf'

   The response saves the malware test file to your local system. Each time you download the test file, it has a different SHA-256 hash value.
2. On the firewall web interface, select MonitorWildFire Submissions to confirm that the file was forwarded for analysis.
   Please wait at least 5 minutes for analysis results to be displayed for the file on the WildFire Submissions page. The verdict for the test file will always display as malware.
3. (Optional) Verify that the files have been properly forwarded.