Softservice in rutracker had listed the hash of some commonly known fakes, I believe it is good reference 7922: EE472D7E8D1AFC476D76D613789A503239EE5D94 7955*: 40861A02CB14B0D2D7930910DB6CC6E4 7968*: 81E93DC19C2E6333454105AD9FF65852CDB97E10 7971: 43585554e3f765aba3a7acf78c048b49621196de7ef0 7971: 6DACBCF04193DF58C32BB48E367830B9B1F4DBAD 7982: 6EF4F2AA27C8DA91217BCC02DFA3A78BB72EDF5E 7996: a2ed6ee42893cd3e8d2dc6faef08f6538d73e9b2 8005: c3ae46d6d9e9472122bb647cbfb4c02134f57c0e 8005: 3c6e3aeb65a45347e93bc8ed877cf37df81cfc8e 8011: 6b07e4573547fc4fcd1f94d7d9dcf24fbc48d896 Actually you don't have to compare the whole string, if the first 5 digits match, you can junk your "find".