Creating a file fingerprint list
| Article:HOWTO55451 | | | Created: 2011-06-29 | | | Updated: 2011-12-17 | | | Article URL http://www.symantec.com/docs/HOWTO55451 |
You can use Checksum.exe to create a file fingerprint list. The file fingerprint list names each file and corresponding checksum that resides on the client computer image. This utility is provided with Symantec Endpoint Protection on the client.
See Managing file fingerprint lists
A sample of a Checksum.exe output file that was run on a computer image follows. The format of each line is checksum_of_the_file space full_pathname_of_the_exe_or_DLL.
0bb018fad1b244b6020a40d7c4eb58b7 c:\dell\openmanage\remind.exe 35162d98c2b445199fef95e838feae4b c:\dell\pnp\m\co\HSFCI008.dll 77e4ff0b73bc0aeaaf39bf0c8104231f c:\dell\pnp\m\co\HSFHWBS2.sys f59ed5a43b988a18ef582bb07b2327a7 c:\dell\pnp\m\co\HSF_CNXT.sys 60e1604729a15ef4a3b05f298427b3b1 c:\dell\pnp\m\co\HSF_DP.sys 4f3ef8d2183f927300ac864d63dd1532 c:\dell\pnp\m\co\HXFSetup.exe dcd15d648779f59808b50f1a9cc3698d c:\dell\pnp\m\co\MdmXSdk.dll eeaea6514ba7c9d273b5e87c4e1aab30 c:\dell\pnp\m\co\MDMXSDK.sys 0a7782b5f8bf65d12e50f506cad6d840 c:\dell\pnp\mgmt\drac2wdm.sys 9a6d7bb226861f6e9b151d22b977750d c:\dell\pnp\mgmt\racser.sys d97e4c330e3c940ee42f6a95aec41147 c:\dell\pnp\n\bc\b57xp32.sys
To create a file fingerprint list
Go to the computer that contains the image for which you want to create a file fingerprint list. The computer must have Symantec Endpoint Protection client software installed.
Navigate to the directory that contains the file Checksum.exe. By default, this file is located in the following location:
where outputfile is the name of the text file that contains the checksums for all the executables that are located on the specified drive. The output file is a text file (outputfile.txt).
The following is an example of the syntax you use:
This command creates a file that is called cdrive.txt. It contains the checksums and file paths of all the executables and DLLs found on the C drive of the client computer on which it was run.
|
|
Legacy ID
v9082240_v59371754
Article URL http://www.symantec.com/docs/HOWTO55451
Terms of use for this information are found in Legal Notices
Thank you.