SaferiSearchMatchingHashRules function

Gets the level of a hash identification rule that matches the specified hash.

This function has no associated import library and is not declared in a public header. You must define a function pointer with the signature of this function, and you must use the LoadLibrary and GetProcAddress functions to dynamically link to Advapi32.dll.

We recommend using the SaferIdentifyLevel function to evaluate software restriction policies.


BOOL WINAPI SaferiSearchMatchingHashRules(
  _In_opt_ ALG_ID HashAlgorithm,
  _In_     PBYTE  pHashBytes,
  _In_     DWORD  dwHashSize,
  _In_opt_ DWORD  dwOriginalImageSize,
  _Out_    PDWORD pdwFoundLevel,
           PDWORD pdwSaferFlags


HashAlgorithm [in, optional]

The identifier of the algorithm used to create the hash.

pHashBytes [in]

A pointer to an array of bytes that contains the hash.

dwHashSize [in]

The size, in bytes, of the pHashBytes array.

dwOriginalImageSize [in, optional]

The size, in bytes, of the original image from which the hash was computed.

pdwFoundLevel [out]

A pointer to the level identifier for the matching hash identification rule.


Reserved. Set this value to zero.

Return value

TRUE if the function is successful; otherwise, FALSE.


Minimum supported client
Windows XP [desktop apps only]
Minimum supported server
Windows Server 2003 [desktop apps only]