All integrationsSecurity

CIRCL hashlookup

Check whether a file is known with CIRCL hashlookup, the free database of billions of files from NIST's NSRL, Linux distributions, Windows builds and app stores run by Luxembourg's CERT: look up an MD5, SHA-1 or SHA-256 to get the file's name, size, product or package, trust score and malware flag, check up to 1,000 hashes at once, list the packages a file ships in and the files inside a package, and see the most looked-up hashes.

actions
6

Actions

Steps a workflow can run in CIRCL hashlookup.

  • Look up a file hashCheck whether a file is known by looking up its MD5, SHA-1 or SHA-256 hash in CIRCL hashlookup, a free database of billions of files from NIST's NSRL, Linux distributions, Windows builds and app stores. A known file comes back with its name, size, every hash, the product or package it ships with, a trust score and some of the packages it is in; an unknown one comes back with Found set to false instead of failing the step. Being known doesn't make a file safe by itself: check Known malicious and the trust score too.
  • Look up many hashesLook up to 1,000 MD5 and SHA-1 hashes at once, such as every file from a folder or a scan, and get a result for each one plus lists of the known, unknown and malware-listed hashes. Output from md5sum or sha1sum works as it is. Look up a SHA-256 with Look up a file hash instead.
  • List packages containing a fileList the packages, archives and installers known to contain a file, such as the Ubuntu packages and snaps a program ships in, each with its name, version and hashes. Useful for finding where a file on a system came from. Results come a page at a time.
  • List files inside a packageList the files known to be inside a package, archive or installer, each with its name, size and hashes. Use the SHA-1 that List packages containing a file returns, or any hash of the package. Results come a page at a time.
  • List most looked-up hashesList the hashes people look up most in CIRCL hashlookup, from its public statistics: either known files, with their names, or hashes it doesn't know, each with how many times it was looked up.
  • Get database infoGet how many hashes CIRCL hashlookup holds and which release of NIST's NSRL reference data it carries. Useful for noting what a check was made against.

Automate CIRCL hashlookup with Lodol.

Connect CIRCL hashlookup and ask your AI for your first workflow.

Free plan, no credit card