CFMD Service

Performs hash lookups against Microsoft's CleanFileMetaData database.

NOTE: This service requires you to have access to Microsoft CFMD database. It is not preinstalled during a default installation


This service works by querying Microsoft's CFMD database via direct database access to see whether the submitted file matches one originally compiled by Microsoft.


Because this service only uses the hash to query for information, by installing this service you also enable it as a datasource in the hash_search API (/api/v3/hash_search/<HASH>/)

Access to Microsoft's CFMD Database

Access to Microsoft CFMD is restricted restricted to Microsoft Security Response Center (MSRC) partners.