[DFIR TOOLS] Hasher, what is it & how to use!

Following on from the previous [DFIR TOOLS] posts.

Hasher is a software application developed by Eric Zimmerman that is used to calculate and compare the hash values of files. A hash value is a unique code that is generated based on the contents of a file. By comparing the hash values of two files, it is possible to determine if they are identical or not.

I am not going to lie, I had NEVER used Hasher until doing it to write this BUT I think it is about to become a mainstay, it is so easy to use by either drag and drop or File > Select File.

One of the main uses of Hasher is for file verification. By calculating the hash value of a file, and then comparing it to a known good value, users can confirm that the file has not been tampered with or corrupted. This can be particularly useful for verifying the integrity of important files, such as software updates or financial documents.

Hasher also allows users to calculate the hash values of multiple files at once. By selecting a folder, the program will generate hash values for all the files within that folder. This can be useful for verifying the integrity of a large number of files at once.

The program also allows users to compare the hash values of two files to confirm that they are identical. This can be done by clicking on the “Compare” button in the program’s main window and selecting the two files to be compared. If the hash values match, the files are identical, and if they do not match, the files are different.

Hasher supports multiple types of hash algorithms, including MD5, SHA1, SHA256, and SHA512. Users can select the desired algorithm from the drop-down menu in the program’s main window. Each algorithm has its own unique hash value, so it’s important to make sure that you are using the correct one for your needs.

Additionally, Hasher can also integrate with popular file managers like Windows explorer, which allows users to calculate the hash value of a file without opening the program.

Overall, Hasher is a powerful and useful tool for verifying the integrity of files. By calculating and comparing the hash values of files, users can confirm that the files have not been tampered with or corrupted. The program’s ability to process multiple files at once and integration with file managers make it a valuable tool for anyone who needs to verify the integrity of large numbers of files on a regular basis.

Like other Zimmerman tools it has some great skin options too.

Regards

Alex

Share this:

Leave a ReplyCancel reply