Thank you, While I appreciate you marking my reply as 'Correctly Answered', Could you kindly (Unmark) it. Due to the fact it has yet to be answered Perhaps marking it as (Helpful) would be more appropiate, until someone comes along and adds to the discussion.
All the very best
Or possible to block non executable file by HIPS using only HASH?
No, this is not possible in HIPS.
- HIPS can only block executable files by MD5 hash (as well as other criteria; see KB below).
- Non-executables files can be blocked by path/filename only.
KB71329 - How to blacklist applications using a Host Intrusion Prevention 8.0 custom signature