Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Creating SHA1 hash lists from a set of *.exe, *.com, *.scr, and *.bin files in Endpoint Application Control (EAC)

    • Updated:
    • 21 Jul 2016
    • Product/Version:
    • Endpoint Application Control 1.0
    • Endpoint Application Control 2.0
    • Platform:
    • Windows 2003 Server R2
    • Windows 2003 Standard
    • Windows 2008 Server R2
    • Windows 2008 Standard
    • Windows 2012 Enterprise
    • Windows 7 32-bit
    • Windows 7 64-bit
    • Windows 8 32-bit
    • Windows 8 64-bit
    • Windows 8.1 32-bit
    • Windows 8.1 64-bit
    • Windows Vista 32-bit
    • Windows Vista 64-bit
    • Windows XP SP3 32-bit
Summary
Learn how to make an SHA1 hash list from a set of *.exe, *.com, *scr, *bin files in EAC using the Hash List Import Tool.
Details
Public
The Hash List Import Tool creates a list of SHA1 hashes from a set of *.exe *.com *.cmd *.scr *.bin files and stores it locally below [HashList]. The actual import (upload) to the rule is performed in a second step. The command "perform" executes both steps at once.
The Hash List Import Tool uses the command:
HashListImporter.bat command1 ... "Option=Value" .../div> <
CommandDescription
ListCreates a SHA1 hash list from the files below the specified source path that match the given file extension filter.
ImportImport the specified hash list into the specified rule, creating it if required. Existing rules are changed to method the "File signatures ^(SHA1^)" and any existing content is cleared before the import.
PerformWorks the same as "HashListImporter.bat List Import".
OptionDescription
SourcePathThe path containing the files to include in the SHA1 list.
RecursiveToggles whether SourcePath is traversed recursively.
Default "true"
ExtensionsThe file extension of the files to include in the SHA1 list.
Default "*.exe *.com *.cmd *.scr *.bin"
HashListThe hash list (in sha1sum format) to upload.
Default "C:\Users\alpd\Desktop\1187-tools\1187-tools\hashlist-importer\\sha1-list.txt"
RuleSpecifies the name or UUID of the rule to update.
CreateSpecifies whether the importer creates the rule if missing.
Default "false"
CreateTypeSpecifies the rule type of a created rule.
One of "Allow|Block|LockDown"; Default "Allow"
DryRunToggles that the import module only simulates but does not actually import hash lists.
Default "false"
ServerHostname or IP-address of the TMEAC server.
Default "localhost"
PortPort number of the backend process of the TMEAC server.
Default "8085"
UserName of an admin user that is declared within the web console.
Default "root"
PasswordThe password of the admin user.
Default "root"
Examples:
To replace the list of SHA1 hashes in the rule named "My Software Library" with the SHA1 hashes of all "*.exe, *.com, *.cmd, *.scr, *.bin" files below "C:\my-software":
HashListImporter.bat Perform "Server=my-host" "Password=changeit" "SourcePath=C:\my-software" "Rule=My Software Library"
To do the same action given in the first example, but create the rule "My Software Library" if missing:
HashListImporter.bat Perform "Server=my-host" "Password=changeit" "SourcePath=C:\my-software" "Rule=My Software Library" "Create=true"
To create a hash list but not import it:
HashListImporter.bat List "SourcePath=C:\my-software"
To import a previously created hash list into the specified rule:
HashListImporter.bat Import "Server=my-host" "Password=changeit" "Rule=My Software Library"
Premium
Internal
Rating:
Category:
Configure; Deploy
Solution Id:
1102651
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.