From ee77b930cfc0fc7c2c681786f56c95fcd5d0377f Mon Sep 17 00:00:00 2001
From: APriestman <apriestman@basistech.com>
Date: Fri, 13 Mar 2015 09:21:52 -0400
Subject: [PATCH] Convert MD5 hash to lowercase before database query.
---
Core/src/org/sleuthkit/autopsy/modules/stix/EvalFileObj.java | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/Core/src/org/sleuthkit/autopsy/modules/stix/EvalFileObj.java b/Core/src/org/sleuthkit/autopsy/modules/stix/EvalFileObj.java
index 3d465c6e2b..384d40a899 100644
--- a/Core/src/org/sleuthkit/autopsy/modules/stix/EvalFileObj.java
+++ b/Core/src/org/sleuthkit/autopsy/modules/stix/EvalFileObj.java
@@ -171,7 +171,7 @@ public synchronized ObservableResult evaluate() {
for (HashType h : obj.getHashes().getHashes()) {
if (h.getSimpleHashValue() != null) {
if (h.getType().getValue().equals("MD5")) { //NON-NLS
- String newClause = "md5=\'" + h.getSimpleHashValue().getValue() + "\'"; //NON-NLS
+ String newClause = "md5=\'" + h.getSimpleHashValue().getValue().toString().toLowerCase() + "\'"; //NON-NLS
whereClause = addClause(whereClause, newClause);
} else {
addWarning("Could not process hash type " + h.getType().getValue().toString()); //NON-NLS
--
GitLab