What input does SSDEEP hashes Comparator accept?

SSDEEP hashes Comparator accepts text. Compares two SSDEEP fuzzy hashes to determine the similarity between them on a scale of 0 to 100.

Which settings does SSDEEP hashes Comparator provide?

SSDEEP hashes Comparator provides controls for Delimiter.

What does SSDEEP hashes Comparator return?

SSDEEP hashes Comparator returns Number.

SSDEEP hashes Comparator

Tool workspace

Your input stays in this browser.

Needs input

You can run the tool again after any change.

Input

First input

Second input

Options

Delimiter

Your result appears here

Compare SSDEEP hashes and show the differences. Enter the data, choose the digest options, then copy the calculated value.

This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.

SSDEEP hashes Comparator uses fuzzy-hash comparison for the supplied input. It calls ssdeep.js similarity and returns a number from 0 to 100 for the supplied fuzzy hashes.

It calls ssdeep.js similarity and returns a number from 0 to 100 for the supplied fuzzy hashes. This result runs in the browser for this catalog category. Processing runs in the browser.

Fuzzy-hash comparison estimates similarity; it does not provide collision-resistant identity or authenticity.

Instructions

Provide text or data for this tool.
Keep each SSDEEP block-size prefix and both hash portions intact. This applies to SSDEEP hashes Comparator.
Compare the result alongside file size and content, not as a malware verdict. This applies to SSDEEP hashes Comparator.

Example

Input: Generate two public files with SSDEEP, then paste the hash values on separate lines.

Settings: SSDEEP hashes Comparator: Set Delimiter to the separator between the two SSDEEP strings. Paste hash values only; do not include a CSV filename column.

Result: It calls ssdeep.js similarity and returns a number from 0 to 100 for the supplied fuzzy hashes.

Limits

SSDEEP hashes Comparator: The comparator does not hash input files for you.
SSDEEP hashes Comparator: A fuzzy score does not prove identical bytes or classify a file as safe.