A digital fingerprint that speaks to the uniqueness of an individual file’s
contents, regardless of file renaming.
 
It is created using a mathematical algorithm. When an MD5 hash is created, the
algorithm is applied against the contents of the file. If the file is renamed, the
MD5 hash value remains constant. It is this quality that allows for searching for
deliberate renaming of files.
 
Example:
 
Contacts.xls could be changed to Mom.jpg.  If the contents of the file had
remained unchanged, the hash value aids the forensics examiner in finding the
file and the fact that it had been renamed.

- Return to FAQ -