What happens if some file hashes match but others don't?

newbie12

Distinguished
Mar 24, 2011
25
0
18,580
0
Is the file still good or not? Here's an example of a file I recently discovered that I had hashed way back:

MD5 : 7cc59e1e6919f19e219b4df8c8ecebb2
SHA1 : a73a320dc52f656a4ac96cf4209871a11de6873c
CRC32 : cda5ebc7
SHA-256 : 41fdb625d913a70db4d958f4bc9dd711a6b10fb9190cf4e021144fac69bd4c60
SHA-512 : ec904aada498d46d152f8287ac25ac1e92ba98969bdf852207d4d8a007777f19e63327e786b0ca29fbb80dafdb1f41c4860081d9657d5228f1011ce19451e666
SHA-384 : ce4686d435aaf9871e198423187f51a384d586fe430fa9c8287a01addbb936ced4d353a95c8fe8da3e9cefeb89d38b25

MD5 : 7cc59e1e6919f19e219b4df8c8ecebb2
SHA1 : a73a320dc52f656a4ac96cf4209871a11de6873c
CRC32 : cda5ebc7
SHA-256 : 41fdb625d913a70db4d958f4bc9dd711a6b10fb9190cf4e021144fac69bd4c60
SHA-512 : b935dfc203114318ee5ad2f9915ae352d2a98e5c962bbcc19f26e6f030f0218e36eb51aa03b6d37c04ac4f03b1824652b1a2c92e1d74848bd7e62eefa45aa525
SHA-384 : 87b95a901fe478fa832b11cbb002beb373030915961576b90bf63901e96e934298220827d3c17c4479162d722dc08e02

The MD5, SHA1, CRC32 and SHA256 match up, but the latter hashes do not, SHA512 and SHA384. Does that mean the file is now different to what it was before when I original hashed it or still the same file, just so happens that latter hashes are no longer the same? Or is the file now to be assumed altered in some way, whether that be from transferring or kept in storage and is now lost its integrity?
 

newbie12

Distinguished
Mar 24, 2011
25
0
18,580
0


*gasps* a reply?!

Well isn't virustotal limited to 128MB? This file is 2GB big....
 

rgd1101

Titan
Moderator
When/how did you use create those hash? if the other one match, I wouldn't worry about it.
https://blogs.msdn.microsoft.com/shawnfa/2007/01/31/please-do-not-use-the-net-2-0-hmacsha512-and-hmacsha384-classes/
 

newbie12

Distinguished
Mar 24, 2011
25
0
18,580
0


...well since half of it doesn't match what does that say to you...?



I hashed it a few weeks ago and how, I used a hashing program of course...hah...it's not like I randomly gave it numbers and letters and said this is your hash....lol:lol:
 

umbraemsisoft

Prominent
Sep 19, 2017
18
0
570
4


modified. btw what is the file?

Higher the hash algorithm, stricter the comparison to avoid obfuscation.
to be sure redownload the said file and recompare it.

also google if you can find the original hash or at least the one share by people owning the same file.
 

rgd1101

Titan
Moderator


If you read the link MS have implementation error on earlier version that was later fixed. could happen on the app that your use for the hash too.
 

newbie12

Distinguished
Mar 24, 2011
25
0
18,580
0
Sorry, I never got a notification email about new posts....
:/



The file is a zip archive of a folder....that I made...

So that means the the file has been compromised to some extent?

Since I made the zip archive file myself, I can't exactly redownload it from somewhere.....and I didn't make a backup/copy of said zip archive file......though that was my intention but I wanted to make sure all hashes matched up before I put it into archival storage.....which they didn't and hence this thread topic...

The only reference to online from google of any of these hashes is from the overclockers forums website I reposted because I didn't get any answers here at the time....


Hmmm, yes you might be right - I used Hashmyfiles from Nirsoft if you've guys ever heard of them before.... I'm not sure what kind of algorithm they use to generate these hashes but they work and I'm happy with that....the only thing that's missing is being able to compare hashes from say a text file of hashes rather than needing to open both files(Of which may take a while especially like 100GB files.....) just to compare if they're exactly identical or not....
 

ASK THE COMMUNITY