get https://www.virustotal.com/api/v3/intelligence/search/snippets/
This request returns file content snippets that matched a query in the /search endpoint. The response is a list of strings containing both content hexdump and plain text. Matched content is found between * characters, more file content is returned to provide additional context about the match.
