Forum Discussion
Inconsistent Defender Search Results When Searching by Hash
I am seeing inconsistent search results in Defender when searching for a file by hash. I saved a file to my desktop and sent it via email. I hashed the file with SHA1, SHA256, and MD5 algorithms. Whe...
Microsoft support has confirmed that MD5 searching is currently not working at all as indicated by the error message. They have also confirmed that searching using SHA256 may produce inconsistent results. For the time being they have suggested only searching using SHA1.
Has there been an update on this issue?
This is quite problematic and it would be nice to see a post resolving the matter??
This is quite problematic and it would be nice to see a post resolving the matter??
Deleted I think this is still the case, the resolution seems to be always use SHA1. At least, the API docs say to always use SHA1, and I have seen the same sort of inconsistent results searching with other hashes.
- Thanks for the update.
Yes, this is a problem... especially given IOC's are usually given as SHA256.
My life just got more complicated.
