forum.opsi.org

Verfasst: **05 Jul 2017, 15:54**

Hi,

wir haben gerade das Phänomen:
md5sumFromFile("c:\tmp\tesfile") --> funktioniert, sprich MD5 Hash passt.
md5sumFromFile("c:\Windows\System32\ShellExt\testfile") --> funktioniert nicht, sprich MD5 Hash passt nicht.
obwohl es nachweislich das gleiche File ist!

Code: Alles auswählen

[6] [Jul 05 15:48:48:815] If
[5] [Jul 05 15:48:48:822]   md5sumFromFile("C:\tmp\HashCheck.dll") = "ad657e53e5559fd4c5a21b120ec77b83"   <<< result true
[5] [Jul 05 15:48:48:824]   not (md5sumFromFile("C:\tmp\HashCheck.dll") = "ad657e53e5559fd4c5a21b120ec77b83")   <<< result false
[6] [Jul 05 15:48:48:827] Then
[6] [Jul 05 15:48:48:829] EndIf

Code: Alles auswählen

[5] [Jul 05 15:46:32:874]   md5sumFromFile("C:\Windows\System32\ShellExt\HashCheck.dll") = "ad657e53e5559fd4c5a21b120ec77b83"   <<< result false
[5] [Jul 05 15:46:32:877]   not (md5sumFromFile("C:\Windows\System32\ShellExt\HashCheck.dll") = "ad657e53e5559fd4c5a21b120ec77b83")   <<< result true
[6] [Jul 05 15:46:32:881] Then
[3] [Jul 05 15:46:32:885]   Error: 3ceea8d9317097ebd1e5779346d1f3a1
[3] [Jul 05 15:46:32:885]   Error: MD5-Hash did not match!
[2] [Jul 05 15:46:32:890]   Error level set to fatal
[5] [Jul 05 15:46:32:895]   Process aborted

Gruß Tobias

Verfasst: **05 Jul 2017, 18:25**

Are you sure you are testing the file in System32 and not the one in SysWOW64? Or is there only one file and no 64/32-bit version?

Verfasst: **05 Jul 2017, 22:15**

SisterOfMercy hat geschrieben:Are you sure you are testing the file in System32 and not the one in SysWOW64? Or is there only one file and no 64/32-bit version?

You are right, that is the trick. There is a path (and also there are two files ...):

Code: Alles auswählen

C:\Windows\SysWOW64\ShellExt

and from there comes the "wrong" MD5 hash. In my case the correct path is:

Code: Alles auswählen

C:\Windows\Sysnative\ShellExt

or better

Code: Alles auswählen

%Systemroot%\Sysnative\ShellExt

So thank you! (Actually, I should have known that ...)

See: http://www.ghisler.ch/wikide/index.php/ ... rumleitung

Greeting Tobias

forum.opsi.org

[solved] md5sumFromFile liefert unterschiedliche Ergebnisse

[solved] md5sumFromFile liefert unterschiedliche Ergebnisse

Re: md5sumFromFile liefert unterschiedliche Ergebnisse

Re: md5sumFromFile liefert unterschiedliche Ergebnisse