Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

MD5 Malware Database Check

By right clicking a file this EnScript compares the selected file to the VirusTotal and/or ThreatExpert databases and determines if it is malware. Results can be bookmarked. An internet connection is required.

An instruction manual pdf is included in the download.

Note: This EnScript is no longer supported and updates, bug fixes or support portal help should not be expected.



Version: 1
Tested with:
EnCase Forensic 7.08
Developer: Guidance Software
Category: Incident Response

609 DOWNLOADS

YOU MAY ALSO LIKE

Incident Response

MemoryAnalysis

Process Windows, Linux, and OS X memory images and find running processes, parents, create dates, and more.
By Casimer Szyper
6744 Downloads
App
Incident Response

Hacker Offender

This App is designed to discover files that are hidden by rootkits. It will place all detected files into a LEF for further analysis. This may include the malware and additional files deemed important by the attacker.
By James Habben
4734 Downloads
App
Incident Response

Volatility Reporting Plugin

Volatility 2.4 Standalone executable integration with EnCase for centralized reporting of memory forensic results through the use of bookmarks.
By John Lukach
4552 Downloads
App
Incident Response

Team Cymru Malware Hash Registry Search

Review evidence files to assist in learning if any might correspond to malware.
By Jeffrey Savoy
4514 Downloads
App