Skip to content

Exphash from sha256 to md5 to match imphash#377

Merged
erocarrera merged 1 commit intoerocarrera:masterfrom
N0fix:master
Jan 11, 2024
Merged

Exphash from sha256 to md5 to match imphash#377
erocarrera merged 1 commit intoerocarrera:masterfrom
N0fix:master

Conversation

@N0fix
Copy link
Copy Markdown
Contributor

@N0fix N0fix commented Jul 7, 2023

PR #354 added exphash using the sha256 function instead of md5, which creates two issues:

This PR proposes using md5 instead of sha256 for exphash to maintain consistency.

Note: I believe this confusion stems from a discrepancy between the original blog post about exphash, which mentions the usage of sha256, and its integration into public community projects.

@erocarrera
Copy link
Copy Markdown
Owner

I'm a bit torn in this case: I see the rationale in staying consistent with imphash, even more in the case that yara is also using md5.
Ideally all these methods would be using sha256, but one can't update imphash without causing major issues, I'd say it's not worth the pain.
Hence I'm leaning towards merging and using md5 and hoping not many people have started relying on the sha256 results.

@erocarrera erocarrera merged commit b20afc5 into erocarrera:master Jan 11, 2024
@j-t-1 j-t-1 mentioned this pull request Dec 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants