What's new Search

Recent content by rickyzhang2008

R
[SOLVED] the same file but different hash, why? ["C:\Windows\System32\browser.dll"]

OK. Thanks, I got it.
- rickyzhang2008
- Post #9
- Jun 9, 2023
- Forum: Programming
R
[SOLVED] the same file but different hash, why? ["C:\Windows\System32\browser.dll"]

Solved. change to "x64", and compile & run. when running the 32 bit program, it checks the "C:\Windows\SysWOW64\browser.dll" actually, not the "“C:\Windows\System32\browser.dll”. so the sha256 value never change with many calculating and different methods(x64,x86) get different result...
- rickyzhang2008
- Post #7
- Jun 9, 2023
- Forum: Programming
R
[SOLVED] the same file but different hash, why? ["C:\Windows\System32\browser.dll"]

Thanks for replying, I will try.
- rickyzhang2008
- Post #6
- Jun 9, 2023
- Forum: Programming
R
[SOLVED] the same file but different hash, why? ["C:\Windows\System32\browser.dll"]

Thanks very much. But I use several methods to calculate the file "c:\windows\system32\browser.dll",and don't copy it to another directory, and the result is that as follows: 1. hash tab's sha256 is same as the scanning result of windows tool sfc. means it is right. 2.using the python code...
- rickyzhang2008
- Post #4
- Jun 9, 2023
- Forum: Programming
R
[SOLVED] the same file but different hash, why? ["C:\Windows\System32\browser.dll"]

Correct: important thing: "browser.dll" in second full path was copied from the first full path "C:\Windows\System32\browser.dll", but their base64(sha256) value are different totally. the base64(sha256) value of "C:\Windows\System32\browser.dll" ...
- rickyzhang2008
- Post #2
- Jun 8, 2023
- Forum: Programming
R
[SOLVED] the same file but different hash, why? ["C:\Windows\System32\browser.dll"]

When using the C# code below to compute SHA256 for the same file named "browser.dll" in two different path, but the sha256 value are different, why? the same file: "browser.dll", first full path: "C:\Windows\System32\browser.dll", second full path: "E:\xiufu\browser.dll". important thing...
- rickyzhang2008
- Thread
- Jun 8, 2023
- Replies: 9
- Forum: Programming
R
[SOLVED] how to calculate hash of system protected file,for example dll files?

Thanks,I have solved the problem. The key is that when using BASE64 the result of SHA256, I should select "hex", not "string".
- rickyzhang2008
- Post #8
- Jun 6, 2023
- Forum: Programming
R
[SOLVED] how to calculate hash of system protected file,for example dll files?

Thanks for reply again,and another question occur: SHA-256 BASE64 is first SHA-256, then BASE64 the result of SHA-256? I just did like that, but the result is not same as what Hash Tab shows in file property.I don't know what the problem is?
- rickyzhang2008
- Post #5
- Jun 6, 2023
- Forum: Programming
R
[SOLVED] how to calculate hash of system protected file,for example dll files?

Thanks so much, solve my big problem, thanks again.
- rickyzhang2008
- Post #3
- Jun 6, 2023
- Forum: Programming
R
[SOLVED] how to calculate hash of system protected file,for example dll files?

In cbs.log,many file description like : 2023-06-06 16:48:54, Info CSI 0000128b [SR] Could not reproject corrupted file [ml:48{24},l:46{23}]"\??\C:\windows\SysWOW64"\[l:22{11}]"browcli.dll"; source file in store is also corrupted 2023-06-06 16:48:54, Info CSI...
- rickyzhang2008
- Thread
- Jun 6, 2023
- Replies: 8
- Forum: Programming

rickyzhang2008