Comparing hash values

Discussion in 'other software & services' started by m00nbl00d, Mar 23, 2011.

Thread Status:
Not open for further replies.
  1. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    I'm wondering if anyone is familiar with an application that calculates hash values, and that allows to compare the results against a list of hash values (say a text file that could be imported to the application), and if it finds any match, to log it?
     
  2. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
    OSForensics has a hash set feature.
     
  3. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    Thanks. I'll check it out. :)
     
  4. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
    You're welcome :).

    ProDiscover apparently has this feature, but I'm not sure if the free version does.
     
  5. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    Thanks. I also came across Access Data Forensic Toolkit (-http://accessdata.com/products/forensic-investigation/ftk)

    Not a simple application, though. :D -http://accessdata.com/ftk32

    But, worth checking it out in a near future... when I get the chance.
     
  6. sfi

    sfi Registered Member

    Joined:
    Sep 21, 2008
    Posts:
    68
    Md5deep is also something you may want to look at. It offers a command line interface to creating and comparing hashes. It also supports a few other hashes like SHA1, SHA256 and whirlpool as well.
     
  7. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    Thanks. :)
     
  8. Dermot7

    Dermot7 Registered Member

    Joined:
    Dec 20, 2009
    Posts:
    3,196
    Location:
    Surrey, England.
  9. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    It might be useful. I was familiar with it, but never really explored all its functionality.

    Thanks for bringing it up! :thumb:
     
  10. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    Due to some other stuff, I've been unable to keep this subject, but it turns out that Microsoft's tool only allows to verify MD5 and SHA1. It's OK if you don't want to verify SHA256, for example.

    I'm going to look at those other alternatives, and proceed with the research and see if I find more tools (just for the kicks lol), and I'll share if I find any other tool.
     
  11. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,775
    Location:
    Texas
  12. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,516
    HashTab ftw.
     
  13. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    Thank you both for sharing those two applications. :thumb:
     
  14. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    By the way, it was mentioned md5deep. For those interested, it's an open source application and you can get it here -http://md5deep.sourceforge.net/

    At the same website, you can also read about hashdeep. -http://md5deep.sourceforge.net/hashdeep.html
     
  15. HAN

    HAN Registered Member

    Joined:
    Feb 24, 2005
    Posts:
    2,080
    Location:
    USA
    I use Nirsoft's HashMyFiles http://www.nirsoft.net/utils/hash_my_files.html It does the basics very well (calculate and display hash comparisons) and more than that too (which I don't make use of.) It is portable if need be but can also be installed and then incorporated into the context menu (which is what I do.) Highly recommended!
     
  16. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    I totally forgot to verify if Nirsoft's website had any hash verification tool. :oops:


    Thank you! :thumb:
     
  17. Pedro

    Pedro Registered Member

    Joined:
    Nov 2, 2006
    Posts:
    3,502
    Pandlouk recommended some open source application, but i don't recall the name.
    I would search for that on this forum, as he usually has good advice.
     
  18. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    Will do! Thank you. :thumb:

    I've found one open source application mentioned by user Pandlouk, FileVerifier++. -http://www.programmingunlimited.net/siteexec/content.cgi?page=fv

    I'll look and see if more were mentioned. This one does seem to be very interesting, judging by its features.
     
    Last edited: Jul 3, 2011
  19. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    I found this one by NoVirusThanks.org.

    Unfortunately, it only checks for MD5. I might send an e-mail to them, so that they also add SHA1 and SHA256... if not more.
     
  20. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    I came across Cobynsoft’s Hash Calculator.

    It allows to verify files and folders (MD5, SHA-1, SHA-256 and SHA-512). You can export results to XLS, XLSX and PDF.

    Apparently, it cannot compare previously computed hashes. I may send some feedback to the developers asking if they could support it. :D

    It's free.

    -http://www.cobynsoft.com/products/freeware/cobynsofts-hash-calculator/

    Screenshot: -http://www.cobynsoft.com/wp-content/uploads/2011/06/Cobynsofts_Hash_Calc_1_1_Screenshot.png
     
  21. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
    I use FileVerifier++ (already mentioned) for periodically auditing my documents - if anything has changed (by hash), been deleted, or added. If anyone's interested, I can tell you how to do that.
     
  22. Ranget

    Ranget Registered Member

    Joined:
    Mar 24, 2011
    Posts:
    846
    Location:
    Not Really Sure :/
    +1 Need to add sha1 to the program

    if you need there are also programs from Nirsoft
     
  23. TheKid7

    TheKid7 Registered Member

    Joined:
    Jul 22, 2006
    Posts:
    3,469
  24. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    They already added them. I sent a PM to novirusthanks at this forum, sometime ago, and the newest version already supports it. :thumb:

    Yes, there are great tools over there... For some unknown reason, I never remember of Nirsoft. :D o_O I got AppCrashView and BlueScreenView on my flash drive, though. :D
     
  25. Ranget

    Ranget Registered Member

    Joined:
    Mar 24, 2011
    Posts:
    846
    Location:
    Not Really Sure :/
    Gr8 to hear that they added that :D

    Nirsoft Programs are awesome Really Lot of other programs Depend on their tools ;)
     
Thread Status:
Not open for further replies.