Export the md5 hashes from a hash set

Autopsy Help
1

This is potentially one of those “stupid” questions, but I have not been able to figure it out.

I am trying to export the hash values from a hash set that I made. It does not seem there is a way of doing this from the UI. I tried querying the sqlite database where these are stored but the values are garbled.

Any ideas / guidance would be appreciated.

Thanks in advance for any assistance.

2

Solved.

Query the sqlite database:

SELECT lower(hex(md5)) as md5sum FROM hashes;

1 Like