---
id: "imphash"
kind: "datatype"
status: "stable"
is_pii: false
categories: ["software"]
langs: ["common"]
quality: 46
url: "https://registry.apicrafter.io/datatype/imphash"
---

# imphash (`imphash`)

hash based on PE file imports (MD5 hash)

- Parent datatype: `md5hash`
- Personal data (PII): no
- Categories: Software development (software)
- Countries: global
- Languages: Common to most languages (common)
- Classification: identifier

## Examples

- `316cd668ed705c998eae8d3bd7bd168f` — Virus total file Twain_32.dll

## Mappings

- misp: `imphash`

## Metacrafter rules

2 rules: 1 match the field name, 1 match values.

- `imphashbyknown` (field, `common/software.yaml`)
- `imphashbyvalue` (data, `common/software.yaml`)

## Supported by tools

- `metacrafter`

## Sources

- other: <https://developers.virustotal.com/reference/pe_info>

## Quality

Score 46/100. Missing: longer description, regexp, second example, negative example, authoritative source link, translation.

JSON: <https://registry.apicrafter.io/api/v1/datatypes/imphash.json> · Edit: <https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/software/imphash.yaml>