# SMTP Entities MD5 Hash Defaults **URL:** \ **Category:** Development\ **Tags:** development\ **Created:** [July 20, 2012, 3:16pm UTC](https://community.zeek.org/t/smtp-entities-md5-hash-defaults/2363 "2012-07-20T15:16:42Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Vlad\_Grigorescu2](https://avatars.discourse-cdn.com/v4/letter/v/c4cdca/32.png) [@Vlad\_Grigorescu2](https://community.zeek.org/u/Vlad_Grigorescu2)\ **Post date:** [July 20, 2012, 3:16pm UTC](https://community.zeek.org/t/smtp-entities-md5-hash-defaults/2363/1 "2012-07-20T15:16:42Z")
Hi all, Currently, SMTP entities will calculate MD5 hashes for the following filetypes by default: application/x-dosexec, application/x-executable. I was a little surprised that common e-mail attack vectors like zip and PDF files don't have this hash calculated by default. I propose extending the default to also include application/zip and application/pdf. I think this is good default functionality, that won't cause a noticeable performance hit. Thoughts? Any other filetypes that would be useful to add there, while we're at it?   --Vlad ---
**Author:** ![Seth\_Hall3](https://avatars.discourse-cdn.com/v4/letter/s/d6d6ee/32.png) [@Seth\_Hall3](https://community.zeek.org/u/Seth_Hall3)\ **Post date:** [July 20, 2012, 7:22pm UTC](https://community.zeek.org/t/smtp-entities-md5-hash-defaults/2363/2 "2012-07-20T19:22:51Z")
Would you be up for just writing a script that does it for now? Maybe also a script that checks SMTP hashes with the malware hash registry like we're doing for HTTP? I'm not crazy about doing much work on the pre-2.2 because once the file analysis framework is integrated everything will be different and much better anyway.   .Seth ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:40pm UTC](https://community.zeek.org/t/smtp-entities-md5-hash-defaults/2363/3 "2022-05-06T15:40:26Z")