hash

Filesystem hash data.

Platform support

Please be aware that some queries can only be run against certain platforms. Below is a list of the supported platforms that this query supports. Zercurity will automatically pause queries from running if errors are detected. Running a query against an unsupported platform will result in the following error: no such table: hash

  • Windows
  • Linux
  • Mac OSX
  • Free BSD

Table schema

Name Type Description
path TEXT Must provide a path or directory
directory TEXT Must provide a path or directory
md5 TEXT MD5 hash of provided filesystem data
sha1 TEXT SHA1 hash of provided filesystem data
sha256 TEXT SHA256 hash of provided filesystem data
ssdeep TEXT ssdeep hash of provided filesystem data

Query examples

select * from hash where path = '/etc/passwd'
select * from hash where directory = '/etc/'