Hash Whitelist on ISC site!

Talk about internet security, computer security, personal security, your social security number...
Post Reply
luntrus
Senior Member
Posts: 237
Joined: Sat Mar 21, 2009 6:29 pm

Hash Whitelist on ISC site!

Post by luntrus »

Hi forum friends,

A new tool can be found on the Internet published by the Internet Storm Center. Via this tool a Hash can be checked against a legit software Whitelist.

Re for this:
http://www.dshield.org/tools/hashsearch.html

The value given in can be searched in the NIST, the National Software Reference Libary where hashes of legit software are kept. The size of this Database now consits of 39.944.023 samples.

After giving in the hash click the Submit button.
At the bottom of the page you later find the text with all the necessary information,

polonus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/533.1 (KHTML, like Gecko) Chrome/5.0.322.2 Safari/533.1
User avatar
therube
Ambassador
Posts: 7929
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Hash Whitelist on ISC site!

Post by therube »

39 million, huh?
Wonder how many virus definitions an anti-virus programs has?

Sounds like a loosing battle to me.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.9pre) Gecko/20100216 SeaMonkey/2.0.4pre
Post Reply