Any free tool for h...
 
Notifications
Clear all

Any free tool for hashing a disk (not a file) in Windows?

20 Posts
7 Users
0 Likes
7,497 Views
(@skywalker)
Posts: 152
Reputable Member
Topic starter
 

Hello everybody,

Does anybody know a free tool which can be used to calculate the hash of a disk in Windows (for example, a CD-ROM, a DVD or a pen drive connected in read only mode? The most of the free tools you can find on the net only calculate hashes for single files but not hashes for complete drives.

Thank you in advance!

 
Posted : 10/09/2015 11:39 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

Hello everybody,

Does anybody know a free tool which can be used to calculate the hash of a disk in Windows (for example, a CD-ROM, a DVD or a pen drive connected in read only mode? The most of the free tools you can find on the net only calculate hashes for single files but not hashes for complete drives.

Thank you in advance!

You can use dsfo (DSFOK toolkit) outputting to NUL to get the MD5
http//members.ozemail.com.au/~nulifetv/freezip/freeware/
Like
dsfo \\.\Physicaldriven 0 0 NUL

jaclaz

 
Posted : 11/09/2015 12:12 am
(@skywalker)
Posts: 152
Reputable Member
Topic starter
 

Hello everybody,

Does anybody know a free tool which can be used to calculate the hash of a disk in Windows (for example, a CD-ROM, a DVD or a pen drive connected in read only mode? The most of the free tools you can find on the net only calculate hashes for single files but not hashes for complete drives.

Thank you in advance!

You can use dsfo (DSFOK toolkit) outputting to NUL to get the MD5
http//members.ozemail.com.au/~nulifetv/freezip/freeware/
Like
dsfo \\.\Physicaldriven 0 0 NUL

jaclaz

Thanks jaclaz. I don't understand the command line you wrote. Do you mean I have to open a DOS console in the folder in which dsfo tool is located and execute that line? I have downloaded the tool but it only accepts 4 GB files, is it correct?

Anyway, MD5 has collisions…

Thanks!

 
Posted : 11/09/2015 12:50 am
PaulSanderson
(@paulsanderson)
Posts: 651
Honorable Member
 

Anyway, MD% has collisions…

Thanks!

But are they relevant - what are you trying to achieve?

 
Posted : 11/09/2015 1:37 am
mokosiy
(@mokosiy)
Posts: 54
Trusted Member
 

Does anybody know a free tool which can be used to calculate the hash of a disk in Windows (for example, a CD-ROM, a DVD or a pen drive connected in read only mode?

As far as I know OSForensics from PassMark does that for free http//www.osforensics.com/osforensics.html

 
Posted : 11/09/2015 12:29 pm
Chris_Ed
(@chris_ed)
Posts: 314
Reputable Member
 

Avoiding the Pandora's Box you've opened regarding MD5 for a moment..

EnCase Acquision v6 will allow you to add a local device then hash it "in place", if that's what you want. Just add the device to a case and right-click "Hash..". You can do SHA1 or MD5

FTK Imager v3 also lets you do this - add an evidence item then right-click and choose "Verify". Again, it gives you the SHA1 if MD5 upsets you.

I think they're both free, although you might have to register first.

 
Posted : 11/09/2015 12:37 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

Thanks jaclaz. I don't understand the command line you wrote. Do you mean I have to open a DOS console in the folder in which dsfo tool is located and execute that line?

Yep, or put the executable in a directory belonging to PATH.

I have downloaded the tool but it only accepts 4 GB files, is it correct?

Not that I know of, from where/how did you get this?

Anyway, MD% has collisions…

Sure ) , now be nice and do the math of the probability that a copy/transfer of data can create accidentally a collision.

A hash is not usually a verification of integrity of data, it is a form of verification that no (accidental) copy/transfer error happened
http//www.forensicfocus.com/Forums/viewtopic/t=13328/

@raydenvm
Seemingly the OSforensics creates hashes for files and volumes (not "whole" disks) ?
http//www.osforensics.com/verify-and-match-files.html

jaclaz

 
Posted : 11/09/2015 12:48 pm
(@skywalker)
Posts: 152
Reputable Member
Topic starter
 

Does anybody know a free tool which can be used to calculate the hash of a disk in Windows (for example, a CD-ROM, a DVD or a pen drive connected in read only mode?

As far as I know OSForensics from PassMark does that for free http//www.osforensics.com/osforensics.html

Hello. Thanks for your answer.

I've tried to use OSForensic but it doesn't allow you to calculate the hash of a CD-ROM or DVD, it only calculates the hashes of partitions of the hard drives connected to the motherboard.

 
Posted : 12/09/2015 3:33 am
(@skywalker)
Posts: 152
Reputable Member
Topic starter
 

Thanks jaclaz. I don't understand the command line you wrote. Do you mean I have to open a DOS console in the folder in which dsfo tool is located and execute that line?

Yep, or put the executable in a directory belonging to PATH.

I have downloaded the tool but it only accepts 4 GB files, is it correct?

Not that I know of, from where/how did you get this?

Anyway, MD% has collisions…

Sure ) , now be nice and do the math of the probability that a copy/transfer of data can create accidentally a collision.

A hash is not usually a verification of integrity of data, it is a form of verification that no (accidental) copy/transfer error happened
http//www.forensicfocus.com/Forums/viewtopic/t=13328/

@raydenvm
Seemingly the OSforensics creates hashes for files and volumes (not "whole" disks) ?
http//www.osforensics.com/verify-and-match-files.html

jaclaz

Hello,

I took the tool from the repository you posted.

path dsfok\dsfok\GUI\dsfo.exe

If I open a DOS shell and I execute "dsfo.exe" with your command, it only launches the programm in its windows environment, but doesn't do anything else.

Regards!

 
Posted : 12/09/2015 3:42 am
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

Hello,

I took the tool from the repository you posted.

path dsfok\dsfok\GUI\dsfo.exe

If I open a DOS shell and I execute "dsfo.exe" with your command, it only launches the programm in its windows environment, but doesn't do anything else.

Regards!

Get the command line version, which is in the "root" of the archive, NOT the one in the \GUI\ folder.
(the one in the GUI folder is only a - simplified - GUI interface to the command line one)

As a side note, to be picky (as I am), in Windows NT you are not running a DOS shell when you open a command prompt or console, you are running the NT command interpreter CMD.EXE.

jaclaz

 
Posted : 12/09/2015 1:39 pm
Page 1 / 2
Share: