Skip to main content

Convert file hash to corresponding hashes

This Playbook is part of the Common Playbooks Pack.#

The playbook enables you to get all of the corresponding file hashes for a file even if there is only one hash type available. For example, if we have only the SHA256 hash, the playbook will get the SHA1 and MD5 hashes as long as the original searched hash is recognized by any our the threat intelligence integrations.


This playbook uses the following sub-playbooks, integrations, and scripts.


This playbook does not use any sub-playbooks.


This playbook does not use any integrations.


  • SearchIndicator


  • enrichIndicators
  • file

Playbook Inputs#

NameDescriptionDefault ValueRequired
SHA256The SHA256 hash on which to search.File.SHA256Optional
SHA1The SHA1 hash on which to search.File.SHA1Optional
MD5The MD5 hash on which to search.File.MD5Optional

Playbook Outputs#

File.SHA256Output for detected SHA256 hash.string
File.SHA1Output for detected SHA1 hash.string
File.MD5Output for detected MD5 hash.string
Indicators.ValueOutput for detected hashes.unknown

Playbook Image#

Convert file hash to corresponding hashes