Browser Extension

The Stairwell browser extension brings hash lookups directly into your browsing workflow. It scans any webpage for file hashes and lets you pivot into Stairwell for full analysis with a single right-click.

What the Extension Does

The extension automatically detects and highlights MD5, SHA-1, and SHA-256 hashes on any webpage you visit. Highlighted hashes become interactive -- right-clicking a hash opens the corresponding object detail page in Stairwell, where you can view file metadata, detection results, and related threat intelligence.

Key capabilities:

• Automatic hash detection -- MD5, SHA-1, and SHA-256 hashes are identified and highlighted in real time as pages load.
• Right-click lookup -- Right-click any highlighted hash to jump directly to its analysis page in Stairwell.
• Chromium compatibility -- Works with Google Chrome, Microsoft Edge, and all other Chromium-based browsers.

This is especially useful when reviewing threat reports, blog posts, incident tickets, or any web-based content that references file hashes.

Install the Extension

Google Chrome

1. Open the Stairwell Extension page in Chrome.
2. Click Add to Chrome and confirm the installation.
3. The Stairwell extension icon will appear in your browser toolbar. The extension is now active.

Microsoft Edge

1. Open Edge and navigate to edge://extensions/.
2. Enable Allow extensions from other stores at the bottom left of the page.
3. Open the Stairwell Extension page in Edge.
4. Click Add to Chrome (the Chrome Web Store button works for Edge) and confirm the installation.
5. The extension icon will appear in your browser toolbar. The extension is now active.

Other Chromium Browsers

Any Chromium-based browser that supports Chrome Web Store extensions can install the Stairwell extension using the same Chrome Web Store link above. If your browser does not support the Chrome Web Store, check your browser's documentation for sideloading Chromium extensions.

Using the Extension

1. Navigate to any webpage that contains file hashes (threat reports, SIEM dashboards, incident tickets, etc.).
2. The extension automatically scans the page and highlights any MD5, SHA-1, or SHA-256 hashes it finds.
3. Right-click on a highlighted hash.
4. Select the Stairwell option from the context menu to open the object detail page in the Stairwell app.
5. Review the file analysis, detections, and related intelligence within Stairwell.

No additional configuration is required. The extension works immediately after installation and does not require you to be logged into Stairwell for hash detection -- though you will need an active session to view results in the app.