Extraction & Analysis
Hashes Extractor
Extract hexadecimal digest candidates from logs by character length. Get lowercase matches, repeated occurrences, and an optional total.
This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.
The pattern finds hexadecimal tokens with the selected length. Word boundaries separate each match from surrounding text.
The result lists lowercase candidates, including repeated occurrences. Display Total adds their count.
- Collect digest candidates from an incident report before comparing them with a trusted file checksum.
Choose the hexadecimal token length
- Paste the source text.
- Set Hash character length, or select All hashes for several supported lengths.
- Compare candidates with a separately calculated digest when verification matters.
Extract the SHA-1-shaped token for abc
Input: SHA-1(abc): a9993e364706816aba3e25717850c26c9cd0d89d
Settings: Hash character length 40; All hashes off; Display Total off.
Result: a9993e364706816aba3e25717850c26c9cd0d89d
This published SHA-1 digest is a token in the source. Extraction does not calculate it.
A candidate match does not identify an algorithm
- Length alone does not identify a hash algorithm.
- Adjacent letters, digits, or underscores prevent a separate match.
- All hashes can match ordinary short words. It groups results by increasing length.