I am not sure the strategy used but are any of these tools capable of finding hashes by looking for entropy? Unlike machine code and normal data, only things like hashes and maybe GUIDs would seem to be random streams of bytes. Of course things like packed or encrypted files would likely throw such a detection method off but AFAIK it would throw all methods off.
|