get
https://www.virustotal.com/api/v3/analyses//content_strings
This endpoint returns the list of printable strings extracted from the file downloaded during a URL Analysis. It is useful for triaging payloads dropped by a malicious URL (binaries, scripts, archives) without downloading the full file.
The strings are returned as a paginated list where each entry includes the string itself (value) and its encoding format (type), which can be either unicode or ascii:
{
"data": [
{
"value": "<printable string>",
"type": "ascii"
},
{
"value": "<another string>",
"type": "ascii"
}
],
"meta": {
"cursor": "<opaque>"
}
}