Online known file h...
 
Notifications
Clear all

Online known file hash database

6 Posts
4 Users
0 Likes
5,097 Views
jhup
 jhup
(@jhup)
Posts: 1442
Noble Member
Topic starter
 

Embarrassing but I cannot seem to remember the URI for the web site that offers single file checks of MD5/SHA1 of known files.

I vaguely recall the interface where a single file can be uploaded and it returns the results if it is in their expanded database. Also checks NIST db. It is also available on a paid basis for more files…

I am trying to pass this site info on to someone…

 
Posted : 27/04/2012 9:28 pm
(@mscotgrove)
Posts: 938
Prominent Member
 

http//www.nsrl.nist.gov/Downloads.htm#isos

 
Posted : 27/04/2012 9:44 pm
jhup
 jhup
(@jhup)
Posts: 1442
Noble Member
Topic starter
 

Nah.

this is a commercial site, that includes the NIST NSRL db, but have a bunch of additional records.
It is not the SANS web site either.

It is 100% online. Although cannot scan multiple files, it does a great job on a single file.

 
Posted : 27/04/2012 11:39 pm
(@bithead)
Posts: 1206
Noble Member
 

And it is not one of the sites on the wiki?
http//www.forensicswiki.org/wiki/Hashing

 
Posted : 27/04/2012 11:51 pm
jhup
 jhup
(@jhup)
Posts: 1442
Noble Member
Topic starter
 

No.

But, thank you all! Found it! It is "The Hash Search Engine".

Do not need to upload the file, just paste the file name or one of the many hashes or other options to locate it.

Here is the info from the bottom of their page

Currently more than 165 Operating System versions & updates
(MD5, SHA1, SHA256, Fuzzy)

Whitehat Computer Forensics, LLC
Kansas City, Missouri USA
Support (@) HashSets.com

USA Toll Free 1.888.908-2791
Worldwide (+001) 816.590.8539
UTC/GMT (-0600)

and

HashSets.com was created in November 2003 by Special Agent (Retired) David Black who spent countless hours performing computer forensic examinations on all forms of computer and network data throughout the latter portion of his professional law enforcement career.

I have no knowledge or have ever had any communications with Mr. Black that I am aware of. I have tested several files using MD5 and a few with SHA1 from various OSes and it has always returned the correct information.

 
Posted : 28/04/2012 12:29 am
(@athulin)
Posts: 1156
Noble Member
 

Embarrassing but I cannot seem to remember the URI for the web site that offers single file checks of MD5/SHA1 of known files.

There are several. In addition to the one already mentioned, there's also fileadvisor . bit9 . com . If you plan to search many hashes, you need to register with them, though.

 
Posted : 28/04/2012 12:20 pm
Share: