03 September 2010 | 8,223 views

Malware Hash Checking Tool – Online & Offline Support

Cybertroopers storming your ship?

This program intends to detect a malicious file in two ways; online and offline. It calculates the md5 hash of a specified file and searches it in its current hash set (offline) or on VirusTotal site (online) and shows the result. It has http proxy support and update (for hash set) feature.

Malware Hash Checking Tool

It’s a simple python script so you can check out the source code, screenshots and a readme are included in the zip file. To add proxy support simply edit the .py script and add in the relevant proxy details.

You can download the Malware Check Tool here:


Or read more here.


Recent in Countermeasures:
- WAF-FLE – Graphical ModSecurity Console Dashboard
- LOKI – Indicators Of Compromise Scanner
- Integrit – File Verification System

Related Posts:
- HashTag – Password Hash Type Identification (Identify Hashes)
- CrowdRE – Crowdsourced Reverse Engineering Service From CrowdStrike
- Malware Analyser v3.0 – A Static & Dynamic Malware Analysis Tool

Most Read in Countermeasures:
- AJAX: Is your application secure enough? - 119,813 views
- Password Hasher Firefox Extension - 117,564 views
- NDR or Backscatter Spam – How Non Delivery Reports Become a Nuisance - 57,653 views

Low-cost VPS Hosting

One Response to “Malware Hash Checking Tool – Online & Offline Support”

  1. Mert SARICA 5 September 2010 at 9:32 am Permalink

    Im the author the program. I released the first version of the program on March 25 and notified several information security related sites and Darknet was one of them. At that time Darknet did not make any news but suddenly in last week, they changed their decision and made a news about a 6 months old software. It was old and got broken (due to changes in Virustotal’s site) in 6 months and I did not have chance to fix bugs in a time. But today I have released v1.2 which includes bug fixes.

    Download url is same and I highly recommend you to download the latest version for a working one.