Managing hashes

The Reputations section of the Reputation Overview page shows a list of hashes that are malicious or non-malicious. You can also search for file hashes and add, import, export, or delete reputation data hashes.

Add data hashes

  1. In the Reputations section, click Hash List.
  2. Click Add.
  3. To add hashes that are known to be malicious, select Malicious, enter the hash, and click Save.
  4. To add hashes that are known to be false detections, select Non-Malicious, enter the hash, and click Save.

The Hashes field is limited to 1,000 hashes. To add more than 1,000 hashes at one time, use a file import. For more information, see Import hashes.

Import hashes

  1. In the Reputations section, click Hash List.
  2. Click Import.
  3. Click Browse and select the file to import.

    The uploaded file must be a CSV file with hash and list header fields. Hashes can be MD5, SHA1, or SHA256.

  4. Select a Method for the import:
    • To replace the current hashes, select Replace existing list.
    • To append to the current hashes, select Add to existing list.
  5. Click Save.

Reputation automatically handles consolidating duplicate records by learning from service providers when different types of hashes represent the same file.

If you want to manually consolidate hashes, you can export the existing hash list, edit the file to add hashes in the appropriate columns for a specific row, and then import the updated file using the Replace existing list option.

Export hashes

  1. In the Reputations section, click Hash List.
  2. To export specific hashes, select one or more hashes and click Export .
  3. To export all malicious hashes, click the Malicious tab, and then click Download All.

Edit notes

  1. In the Reputations section, click Hash List.
  2. Select a hash and click Edit Notes.
  3. Update the notes for the hash and click Save.

Remove hashes

  1. In the Reputations section, click Hash List.
  2. To delete specific hashes, select one or more hashes and click Remove from Hash List .