[ArkPhaze]

I'm going to share with you a little app I coded in vb that will compare two different file's MD5 hash to check whether or not they are the same or different. Useful if you want to check if a file has been modified or not. If you understand what an MD5 hash of a file is, then you'll probably find this a lot more useful.

I use them to compare file virus scan MD5 hash strings. Usually on Virus total or any other site like that... for a virus scan they will give you an MD5 string value. If the file was modified, then that MD5 string will change. So you can compare it with the file that was scanned by the given test, with the file that you downloaded (supposedly supposed to be the one from the virus scan) and see whether or not they have been modified since, or switched with a different file.

I also gave an input for manually typing in or pasting an MD5 to compare with File 1.

Preview Image:


------------------------------------------------------------------

NoVirusThanks scan result:
http://vscan.novirusthanks.org/analysis/...tMC1leGU=/

------------------------------------------------------------------

Virus Total Scan:
http://www.virustotal.com/file-scan/repo...1303372443

Spoiler:

------------------------------------------------------------------
Direct Download Link:
MD5 Hash Check v2.0
------------------------------------------------------------------

[Coder-san]

Nice. You should add a VirusTotal, NoVirusThanks, etc's scan results (if found) too.

[ArkPhaze]

Nice. You should add a VirusTotal, NoVirusThanks, etc's scan results (if found) too.

If-Found?

And I did post a Virus Total scan, look through the post once more. But this was coded by myself so I scanned it through VT myself You wouldn't have found an older scan of it because i'm the first person to scan it through lol

VT Scan here:
http://www.virustotal.com/file-scan/repo...1303372443

[Coder-san]

No I mean by code.
If you are going to compare MD5 hash, you can also search for those hashes in VirusTotal and sites, and display in your app.

[ArkPhaze]

Code:

Antivirus Version Last Update Result AhnLab-V3 2011.04.21.01 2011.04.21 - AntiVir 7.11.6.219 2011.04.21 - Antiy-AVL 2.0.3.7 2011.04.21 - Avast 4.8.1351.0 2011.04.21 - Avast5 5.0.677.0 2011.04.20 - AVG 10.0.0.1190 2011.04.20 - BitDefender 7.2 2011.04.21 - CAT-QuickHeal 11.00 2011.04.21 - ClamAV 0.97.0.0 2011.04.21 - Commtouch 5.3.2.6 2011.04.21 - Comodo 8420 2011.04.21 - DrWeb 5.0.2.03300 2011.04.21 - eSafe 7.0.17.0 2011.04.20 - eTrust-Vet 36.1.8282 2011.04.20 - F-Prot 4.6.2.117 2011.04.21 - F-Secure 9.0.16440.0 2011.04.21 - Fortinet 4.2.257.0 2011.04.21 - GData 22 2011.04.21 - Ikarus T3.1.1.103.0 2011.04.21 - Jiangmin 13.0.900 2011.04.21 - K7AntiVirus 9.97.4439 2011.04.20 - Kaspersky 7.0.0.125 2011.04.21 - McAfee 5.400.0.1158 2011.04.21 - McAfee-GW-Edition 2010.1D 2011.04.20 - Microsoft 1.6802 2011.04.21 - NOD32 6059 2011.04.21 - Norman 6.07.07 2011.04.20 - Panda 10.0.3.5 2011.04.20 - PCTools 7.0.3.5 2011.04.20 - Prevx 3.0 2011.04.21 - Rising 23.54.03.03 2011.04.21 - Sophos 4.64.0 2011.04.21 - SUPERAntiSpyware 4.40.0.1006 2011.04.21 - Symantec 20101.3.2.89 2011.04.21 - TheHacker 6.7.0.1.180 2011.04.21 - TrendMicro 9.200.0.1012 2011.04.21 - TrendMicro-HouseCall 9.200.0.1012 2011.04.21 - VBA32 3.12.16.0 2011.04.20 - VIPRE 9077 2011.04.21 - ViRobot 2011.4.21.4421 2011.04.21 - VirusBuster 13.6.313.2 2011.04.20 - Additional information MD5 : a45d8172e2092e755ab9f09671e2c9ca SHA1 : 337cf8eb1a884d5a830b7caa7ed3f65faf9128f9 SHA256: b8850877cd2e84d319e3045fb39892cf9c9ff10f81249490ed256925ec63301f

Like this? i'm confused... I gave the permalink so that you wouldn't have to search by MD5 hash for the file I scanned though.

Here's a NoVirusThanks scan result:
http://vscan.novirusthanks.org/analysis/...tMC1leGU=/

[Coder-san]

lol no.
Ok, consider expanding your app as a VirusTotal/NVT scan-result display tool.

Using the URL of NVT and VirusTotal:

http //vscan.novirusthanks.org/analysis/a45d8172e2092e755ab9f09671e2c9ca/bWQ1LWhhc2gtY2hlY2stdjItMC1leGU=/

The bold part is MD5 hash, I'm not sure what the next hash in the url is. I'm guessing it's the MD5 hash of the MD5 hash.

[ArkPhaze]

Ohh.... Well now that it's explained to me lol That wouldn't be so hard to do actually, i'm just not sure that I would use it a lot, since that would be an area on my application for just one website with file scan results. I kept all of the functions more "global"/"generalized" , but if you'd like to see it with that function then I guess I could do it that way. I won't keep it on my personal version of my app though, since I don't need it.

Basically just the trim function to cut out all of the string after the fifth index of the forward slash including that slash, and all of the text before the fourth slash (including that slash itself as well).

My app already has drag and drop features to get the directory of the file as a string within the textboxes for file 1 & 2. That makes things a little quicker in my opinion.

for the scans though, the MD5 and SHA-1 hashes are both in the bottom of the scan as extra details, so I dont' have a problem just going and copying that out instead of using the link as a way to compare the hashes. You'll need to open the link anyway to see whether or not it's worth your time downloading (checking to see if it's clean or not).