Skip to main content


This Script is part of the Common Scripts Pack.#

Supported versions

Supported Cortex XSOAR versions: 5.5.0 and later.

This script finds similar files that can be related to each other by fuzzy hash (SSDeep).

Script Data#

Script Typepython3
Cortex XSOAR Version5.5.0


Argument NameDescription
ssdeep_hashThe SSDeep hash to check for similarity against.
ssdeep_hashes_to_compareA list of SSDeep hashes to check for similarity to the ssdeep_hash input.
output_keyThe context key to which the list of SSDeep hashes will be outputted.
In case used, the default outputs will not contain the results.
In order to get results, replace the SSDeepSimilarity in default outputs with the output_key provided.


SSDeepSimilarity.compared_hashes.similarityValueThe difference calculation score between the ssdeep_hash and the compared hash.number
SSDeepSimilarity.compared_hashes.hashThe hash compared to the ssdeep_hash.string

Please note the outputs are changed to use output_key instead of 'SSDeepSimilarity' if provided.