Hi forum friends,
A new tool can be found on the Internet published by the Internet Storm Center. Via this tool a Hash can be checked against a legit software Whitelist.
Re for this:
http://www.dshield.org/tools/hashsearch.html
The value given in can be searched in the NIST, the National Software Reference Libary where hashes of legit software are kept. The size of this Database now consits of 39.944.023 samples.
After giving in the hash click the Submit button.
At the bottom of the page you later find the text with all the necessary information,
polonus
Hash Whitelist on ISC site!
Hash Whitelist on ISC site!
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/533.1 (KHTML, like Gecko) Chrome/5.0.322.2 Safari/533.1
Re: Hash Whitelist on ISC site!
39 million, huh?
Wonder how many virus definitions an anti-virus programs has?
Sounds like a loosing battle to me.
Wonder how many virus definitions an anti-virus programs has?
Sounds like a loosing battle to me.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.9pre) Gecko/20100216 SeaMonkey/2.0.4pre