Windows Standalone ...
 
Notifications
Clear all

Windows Standalone SHA or MD5 Full Disk Hashing

10 Posts
4 Users
0 Likes
1,247 Views
SleepParalysis
(@sleepparalysis)
Posts: 42
Eminent Member
Topic starter
 

I'm wondering if anyone knows of any MD5 or SHA hashing software for Windows which will hash an entire physical disk.

I've not come across any small and stand-alone Windows software (like md5sum for Windows) which will actually allow you to hash an entire drive.

 
Posted : 17/04/2008 12:05 am
(@kovar)
Posts: 805
Prominent Member
 

Greetings,

This supposedly will

http//www.littlelite.net/iside/

I've not checked it out yet to be certain, it's on my To Do list.

-David

 
Posted : 17/04/2008 1:38 am
SleepParalysis
(@sleepparalysis)
Posts: 42
Eminent Member
Topic starter
 

Greetings,

This supposedly will

http//www.littlelite.net/iside/

I've not checked it out yet to be certain, it's on my To Do list.

-David

Hmm, doesn't seem to. Unless I'm just not seeing the function. It is a nice little hashing and file comparison tool but I probably would never pay for it.

Hey, thanks for taking the time to look though.

 
Posted : 17/04/2008 10:38 pm
(@kovar)
Posts: 805
Prominent Member
 

Greetings,

#5 is probably the best solution. I don't have an XP environment with me at the moment to confirm it, though.

Ok, a couple of options

1) Install cygwin and running something from inside that?

2) How about FCIV

http//support.microsoft.com/kb/841290

It'll work on files, not sure about entire disks.

3) And

http//corz.org/windows/software/checksum/

It'll do recursion but, again, not sure about pointing it at entire disk.

4) Now you've got me curious. At the moment, I'd just mount the disk on Linux or OS X and use tools there….

5) Or use X-Ways? That's not light, but I think the free version will compute the checksum for an entire disk. I know the paid version does. The Winhex manual says that it'll compute the hash for an entire disk.

-David

 
Posted : 17/04/2008 11:01 pm
cfprof
(@cfprof)
Posts: 80
Trusted Member
 

FTK Imager…..which is (or used to be) free will hash an entire disk. Just connect it with a write blocker, open it in Imager and hash away!!

 
Posted : 17/04/2008 11:10 pm
(@kovar)
Posts: 805
Prominent Member
 

Greetings,

That's what I thought, but "Verify Drive/Image" is grayed out in the version I just downloaded to a system here. I know it's an option available when I have the dongle installed. I was going to check on this when I got back to the lab.

It is still free and can be found under Support -> Downloads

-David

 
Posted : 17/04/2008 11:20 pm
cfprof
(@cfprof)
Posts: 80
Trusted Member
 

Hey David,

Were you trying to run it on the OS drive? I don't know if it can do that.

If it is a second disk, physically connected, it should do that. I don't think you need the dongle.

Looks like even if you add the OS disk it will hash it. I didn't wait for it to finish, but it was running…..

Just open the physical disk, then right click and choose verify…..

 
Posted : 17/04/2008 11:31 pm
(@kovar)
Posts: 805
Prominent Member
 

Greetings,

Unfortunately, I was just playing with it while working on another project and didn't have the resources available to test it properly. Thank you for putting things in order!

So, Winhex and FTK Imager seem to be good options…..

-David

 
Posted : 17/04/2008 11:33 pm
SleepParalysis
(@sleepparalysis)
Posts: 42
Eminent Member
Topic starter
 

Greetings,

#5 is probably the best solution. I don't have an XP environment with me at the moment to confirm it, though.

Ok, a couple of options

1) Install cygwin and running something from inside that?

2) How about FCIV

http//support.microsoft.com/kb/841290

It'll work on files, not sure about entire disks.

3) And

http//corz.org/windows/software/checksum/

It'll do recursion but, again, not sure about pointing it at entire disk.

4) Now you've got me curious. At the moment, I'd just mount the disk on Linux or OS X and use tools there….

5) Or use X-Ways? That's not light, but I think the free version will compute the checksum for an entire disk. I know the paid version does. The Winhex manual says that it'll compute the hash for an entire disk.

-David

It does look like FTK Imager is probably the smallest of the freeware software for physical disk hashing. I tested it on a thumb drive and it does produce a SHA1 and MD5 of a physical device using the Verify feature.

Cygwin is another good option I'll probably try, just to see if the linux based apps will work that way. This whole process was sort of just a way to look and see what is available out there for Windows.

Thanks again, kovar and cfprof.

 
Posted : 18/04/2008 12:40 am
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

Cannot say if you want this, but dsfo (part of the DSFOK toolkit) here
http//members.ozemail.com.au/~nulifetv/freezip/freeware/

Will make a "dd-like" image of a PhysicalDrive or Partition and produce the MD5.

You can redirect the output (image) to nul device instead of a file if you do not want the image to be saved.

For a USB stick or similar device, it is OK, but maybe it is too slow for doing it to a "BIG" drive.

I have no idea if it's possible to modify an existing one to check the drive instead of file and if it would be quicker, but here is a thread with several "file" MD5 hash makers, last one also has source code
http//www.boot-land.net/forums/?showtopic=2532

jaclaz

 
Posted : 18/04/2008 7:08 pm
Share: