Do you know if a web exists where I can verify the MD5 hash of common drivers?

Comodo Internet Security - CIS Defense+ / Sandbox Help - CIS
#1

This evening, I calculated the MD5 hash of my downloaded 310.90-desktop-win8-win7-winvista-64bit-international-whql.exe driver and the result was 68bdb838784cf5b46665e417e40e7c58 . I googled it and obtained 2 results. Googling the file name I also obtained an alternative MD5: 92a40d49199019e7be21d55417c1c2d8 . This hash is much more common and appears in 12 results. I think I may have downloaded the driver from a fake web (DNS spoofing). Another possibility is that one of these hashes is from a beta version.

Could anyone confirm me which version of the driver is correct?. Also, I wanted to ask if any of you know if a web page exists where I could verify the MD5 hash of common drivers and programs.

Also, if any of you could confirm me that the hash of the file “KillerSetup_6.1.0.440_Win8_64bit.exe” (www.killergaming.com) is dd34af9de074de206a28f4457706919b I would appreciate it so much. I’m a little concerned because DNS Lookup of www.killergaming.com gave me the IP address 184.168.101.203 (GoDaddy.com). It’s that correct?

#2

The drivers directly downloaded from Nvidia - 310.90-desktop-win8-win7-winvista-64bit-international-whql.exe - have 68BDB838784CF5B46665E417E40E7C58. As far as I know that’s the most recent ad includes a patch for the GTX 690.

Could anyone confirm me which version of the driver is correct?. Also, I wanted to ask if any of you know if a web page exists where I could verify the MD5 hash of common drivers and programs.

Also, if any of you could confirm me that the hash of the file "KillerSetup_6.1.0.440_Win8_64bit.exe" (www.killergaming.com) is dd34af9de074de206a28f4457706919b I would appreciate it so much. I'm a little concerned because DNS Lookup of www.killergaming.com gave me the IP address 184.168.101.203 (GoDaddy.com). It's that correct?

The DNS looks fine:

$ dig type=ns www.killergaming.com

; <<>> DiG 9.9.2-P1 <<>> type=ns www.killergaming.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29685
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;type=ns.                       IN      A

;; AUTHORITY SECTION:
.                       10800   IN      SOA     a.root-servers.net. nstld.verisign-grs.com. 2013012901 1800 900 604800 86400

;; Query time: 41 msec
;; SERVER: 192.168.1.1#53(192.168.1.1)
;; WHEN: Wed Jan 30 11:22:41 2013
;; MSG SIZE  rcvd: 111

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8529
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.killergaming.com.          IN      A

;; ANSWER SECTION:
www.killergaming.com.   7153    IN      CNAME   killergaming.com.
killergaming.com.       7153    IN      A       184.168.101.203

;; Query time: 5 msec
;; SERVER: 192.168.1.1#53(192.168.1.1)
;; WHEN: Wed Jan 30 11:22:41 2013
;; MSG SIZE  rcvd: 84
#3

Ok, thank you very much.

I used whois to search directly for the IP Address of www.killergaming.com (184.168.101.203) and the result Whois Lookup Captcha is:

NetRange:       184.168.0.0 - 184.168.255.255
CIDR:           184.168.0.0/16
OriginAS:       AS26496
NetName:        GO-DADDY-COM-LLC
NetHandle:      NET-184-168-0-0-1
Parent:         NET-184-0-0-0-0
NetType:        Direct Allocation
Comment:        Please send abuse complaints to 
RegDate:        2010-09-21
Updated:        2012-02-24
Ref:            http://whois.arin.net/rest/net/NET-184-168-0-0-1

OrgName:        GoDaddy.com, LLC
OrgId:          GODAD
Address:        14455 N Hayden Road
Address:        Suite 226
City:           Scottsdale
StateProv:      AZ
PostalCode:     85260
Country:        US
RegDate:        2007-06-01
Updated:        2012-03-15
Comment:        Please send abuse complaints to 
Ref:            http://whois.arin.net/rest/org/GODAD

OrgNOCHandle: NOC124-ARIN
OrgNOCName:   Network Operations Center
OrgNOCPhone:  +1-480-505-8809 
OrgNOCEmail:  
OrgNOCRef:    http://whois.arin.net/rest/poc/NOC124-ARIN

OrgTechHandle: NOC124-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-480-505-8809 
OrgTechEmail:  
OrgTechRef:    http://whois.arin.net/rest/poc/NOC124-ARIN

OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName:   Abuse Department
OrgAbusePhone:  +1-480-624-2505 
OrgAbuseEmail:  
OrgAbuseRef:    http://whois.arin.net/rest/poc/ABUSE51-ARIN

It seems Killergaming has rented an IP Address from GoDaddy.com to host their web. GoDaddy name suggested me parental control web hosting and that’s why I was concerned. I’ve googled it now and it’s one of the biggest domain registrars (I had no idea). Well, at least its name isn’t BigBrother.com :smiley: .