MARKS:

COURSE: Forensic & Investigation

ASSESSMENT: Lab
CODE: ITEC 3350 DURATION: 2 Hours
11

Comparing Checksum Between Two Files

Background Information

 What is a file checksum? o A checksum or hash sum is used to check the

integrity of the data inside of a file. This file can be a regular text
file, image, executable, or etc.
o If the checksum published with a download file or by a person matches the
checksum performed on the file of concern, then there is a good changed the
data was not altered.  What is Marxio File Checksum? o This program calculates
and verify checksums of files downloaded received in email, upload from
server, and downloaded from the internet. It supports major checksum types:
CRC32, MD4, MD5, SHA1, SHA-256, SHA-384, SHA-512, RIPEMD-128, RIPEMD-160,
HAVAL 256, TIGER 192.
 Resources o Unfortunately, development was discontinued on
this tool.

Prerequisite: You Must Complete the QuickStego Lab

1. *** Lab Prerequisite *** o NOTE: Do not continue if you have not
completed the QuickStego lab.
2. On Your Instructor VM
o Navigate your Windows Explorer to C:\tools\Stego\ o If you have not completed
the QuickStego Lab, Click Here Before you Continue. o Remember that image
file horse.bmp does NOT contain embedded text, and horse2.bmp DOES contain
embedded text.
o Notice: These files are the same byte size (835 KB).
o
 Download Marxio-FCV

1. Login to your Instructor VM, as username administrator o For those of you that
do not have access to my class, Instructor VM is a Windows XP Operating
System. 2. On the Instructor VM, o Pull up Internet Exploder or Firefox
 Go To http://download.cnet.com/3001-18514_410913355.html?
spi=748bb18d406b8dd4e6a5f35d19eb5aa8.
Note: If this link it dead then go to
http://www.computersecuritystudent.com/download_tools/CheckSum/Marxio-
FCV.ex

3. Click on Save (See Below).

o
4. Save to C: \ tools \ CheckSum

Section 1: Run Marxio-FCV.exe

1. Using Windows Explorer Navigator to C:\tools\CheckSum o

Double Click on Marxio-FCV.exe
o

2. Click on Run

3. Click on Accept License Agreement

o
4. Click on OK
 o

5. Click On NO

6. Click OK

Section 2: Comparing CheckSums with Marxio

1. Click on the Folder in the red rectangle (See Below).

 o
2. Select horse.bmp o Click on Open

3. Viewing the CheckSum o After opening the file, the checksum will
automatically be calculated.

4. Highlight the checksum, and click copy.

 o
5. Paste the Checksum you just copied into the "Compare with:" textbox.

6. Now we will open up horse2.bmp to compare its' checksum with horse1.bmp.

o Click on the folder within the red rectangle.

o
7. Select horse2.bmp o Click Open.
 o

8. Notice the Red X, indicates the file checksums

do not match.