Managing hashes

The Reputations section of the Reputation Overview page shows a list of hashes that are malicious or non-malicious. You can view additional context for each hash, and for certain sources you can also view additional information on the source's website. You can also search for file hashes and add, import, export, or delete reputation data hashes.

View additional hash data

  1. In the Reputations section, click the Malicious tab.
  2. Click Open to expand the Hash line-item to view reputation data for a hash.

Add data hashes

  1. In the Reputations section, click the Hash List tab.
  2. Click Add.
  3. To add hashes that are known to be malicious, select Malicious, enter the hashes, and click Save.
  4. To add hashes that are known to be false detections, select Non-Malicious, enter the hashes, and click Save.

The Hashes field is limited to 1,000 hashes. To add more than 1,000 hashes at one time, use a file import. For more information, see Import hashes.

Import hashes

  1. In the Reputations section, click the Hash List tab.
  2. Click Import.
  3. Click Browse and select the file to import.

    The uploaded file must be a CSV file with hash and list header fields. Hashes can be MD5, SHA1, or SHA256.

  4. Select a Method for the import:
    • To replace the current hashes, select Replace existing list.
    • To append to the current hashes, select Add to existing list.
  5. Click Save.

Reputation automatically handles consolidating duplicate records by learning from service providers when different types of hashes represent the same file.

If you want to manually consolidate hashes, you can export the existing hash list, edit the file to add hashes in the appropriate columns for a specific row, and then import the updated file using the Replace existing list option.

Export hashes

  1. In the Reputations section, click the Hash List tab.
  2. To export specific hashes, select one or more hashes and click Export .
  3. To export all malicious hashes, click the Malicious tab, and then click Download All.

Edit notes

  1. In the Reputations section, click the Hash List tab.
  2. Select a hash and click Edit Notes.
  3. Update the notes for the hash and click Save.

Remove hashes

  1. In the Reputations section, click the Hash List tab.
  2. To delete specific hashes, select one or more hashes and click Remove from Hash List .