Online known file h...
 
Notifications
Clear all

Online known file hash database  

  RSS
jhup
 jhup
(@jhup)
Community Legend

Embarrassing but I cannot seem to remember the URI for the web site that offers single file checks of MD5/SHA1 of known files.

I vaguely recall the interface where a single file can be uploaded and it returns the results if it is in their expanded database. Also checks NIST db. It is also available on a paid basis for more files…

I am trying to pass this site info on to someone…

Quote
Posted : 27/04/2012 10:28 pm
mscotgrove
(@mscotgrove)
Senior Member

http//www.nsrl.nist.gov/Downloads.htm#isos

ReplyQuote
Posted : 27/04/2012 10:44 pm
jhup
 jhup
(@jhup)
Community Legend

Nah.

this is a commercial site, that includes the NIST NSRL db, but have a bunch of additional records.
It is not the SANS web site either.

It is 100% online. Although cannot scan multiple files, it does a great job on a single file.

ReplyQuote
Posted : 28/04/2012 12:39 am
BitHead
(@bithead)
Community Legend

And it is not one of the sites on the wiki?
http//www.forensicswiki.org/wiki/Hashing

ReplyQuote
Posted : 28/04/2012 12:51 am
jhup
 jhup
(@jhup)
Community Legend

No.

But, thank you all! Found it! It is "The Hash Search Engine".

Do not need to upload the file, just paste the file name or one of the many hashes or other options to locate it.

Here is the info from the bottom of their page

Currently more than 165 Operating System versions & updates
(MD5, SHA1, SHA256, Fuzzy)

Whitehat Computer Forensics, LLC
Kansas City, Missouri USA
Support (@) HashSets.com

USA Toll Free 1.888.908-2791
Worldwide (+001) 816.590.8539
UTC/GMT (-0600)

and

HashSets.com was created in November 2003 by Special Agent (Retired) David Black who spent countless hours performing computer forensic examinations on all forms of computer and network data throughout the latter portion of his professional law enforcement career.

I have no knowledge or have ever had any communications with Mr. Black that I am aware of. I have tested several files using MD5 and a few with SHA1 from various OSes and it has always returned the correct information.

ReplyQuote
Posted : 28/04/2012 1:29 am
athulin
(@athulin)
Community Legend

Embarrassing but I cannot seem to remember the URI for the web site that offers single file checks of MD5/SHA1 of known files.

There are several. In addition to the one already mentioned, there's also fileadvisor . bit9 . com . If you plan to search many hashes, you need to register with them, though.

ReplyQuote
Posted : 28/04/2012 1:20 pm
Share: