FCIV tool -> Is there a reference database available from an online official MS secured web site from which we could ask if a MD5 / SHA-1 hash is safe ?

Question

Hello, 

In other words...

1. Here is the FCIV tool I am talking about

http://support.microsoft.com/kb/841290

2. I would like to know if there is a way to address the MD5/SHA-1 computed hash and check if the value found is inline with an official software developped by Microsoft...

For example: if I run FCIV tool with "c:\program files\windows media player\wmpnetwk.exe", I get MD5 and SHA-1 following values...

//

// File Checksum Integrity Verifier version 2.05.

//

                MD5                             SHA-1

---

a9f3bfc9345f49614d5859ec95b9e994 64638c3ff08eecd62e2b24708cf5b5f111c05e3d c:\program files\windows media player\wmpnetwk.exe

Is there an online service available from MS which helps me compare at least a pair of "MD5/Path" or "SHA-1/Path" and then get a result of positive or negative test related to this request.

By positive I mean, that I can probably trust that this is a real MS software and not a MALWARE software...

Looking forward to hear feedbacks about this topic ...

Warm Regards.

Answer 1

Hi,

The readme file contains more examples of how to use fciv.exe, including using different algorithms and generating hash values for entire tree folders.

In the link your provided to the tools it states: "Warning The Microsoft File Checksum Integrity Verifier (FCIV) utility is an unsupported command-line utility that computes MD5 or SHA1 cryptographic hashes for files. Microsoft does not provide support for this utility. Use this utility at your own risk. Microsoft Product Support Services (PSS) cannot answer questions about the File Checksum Integrity Verifier utility."

Try reposting your question(s) to TechNet Forumfor IT Professional assistance.

How to Use Article on the utility

http://www.computerweekly.com/tip/How-to-use-the-Microsoft-FCIV-command-line-checksum-tool

Good Luck!

Answer 2

Hi, I finally found the answer in https://www.virustotal.com/

Answer 3

Thanks for letting us know.