SHA256 is a Secure Hash Algorithm that hashes the contents of a file into a 64-bit value. Sometimes, we will request this value to evaluate a file's intention and behavior.
Note: Please note that if you are sending us a quarantined file from your system, that you can locate the SHA256 value from your Dashboard. You can do this by selecting the quarantined file and it will direct you to the file's Threat Detail. Under Threat Information, you will see a sequence of numbers and letters under SHA256.
To get the SHA256 of a file, here are the following steps for the appropriate Operating System (OS):
1. Open your File Explorer and locate the file you wish to get the SHA256 of:
2. Next, you will copy the path of the file location. This can be done by right clicking the path where the file is located and selecting the Copy address as text option:
3. Then at the bottom-left corner of your screen, you will see a search bar. Enter command prompt and select the application associated with that name:
4. You will be presented with a black window and with a file path. You will now need to type the following command:
CertUtil -hashfile <file location> SHA256
Earlier, you were told to copy the file location. After typing CertUtil -hashfile, you can right click next to the unfinished command and it will paste that location for you. However, you are not finished yet with this location. You will also need to add the file you wanted. You will insert a backslash ( \ ) and add the name of the file after the backslash. After that, don’t forget to add SHA256 and hit Enter:
5. You should now have successfully acquired the SHA256 of your file:
6. You can highlight the SHA256 with your cursor and right click to copy it to your clipboard.
If you still have an issue gathering the SHA256 of your file, please email firstname.lastname@example.org.
For Mac OS
1. Open your Terminal. Open Launchpad (rocket icon) by clicking on it:
2. Open the folder titled Other by clicking on it:
3. Click on the application called Terminal (black box icon) and a screen will appear as such:
4. Copy and paste a similar version of this command into Terminal:
shasum -a 256 <file location>
Note: The path to the file location can be obtained by dragging and dropping the file into the Terminal window after the first part of the command (shasum -a 256) has been copied and pasted.
5. When the above command is copied and pasted with the appropriate file location, you will see something similar to:
6. As seen above, the red box identifies the SHA256 value. Double click on the value for it to be highlighted and click copy for it to be copied on your clipboard.
If you have still have an issue gathering the SHA256 of your file, please email email@example.com