{"id":2786,"date":"2019-01-24T16:44:50","date_gmt":"2019-01-24T14:44:50","guid":{"rendered":"http:\/\/blog.atola.com\/?p=2786"},"modified":"2020-04-16T07:58:26","modified_gmt":"2020-04-16T05:58:26","slug":"calculating-dual-hash-existing-e01","status":"publish","type":"post","link":"https:\/\/atola.com\/blog\/calculating-dual-hash-existing-e01\/","title":{"rendered":"Calculating dual hash of an existing E01 file"},"content":{"rendered":"

Some source evidence drives and their images can be involved in a long-running investigation case and wait to be presented in court for months or years on end. Data stored on such drives and their image files may eventually get corrupt. Therefore it may be critical for an investigator to ensure the integrity of data on such devices or image files before resuming to work with them or presenting them in court.<\/p>\n

Over the years, E01 file format has become a popular format for forensic purposes due to its ability to store not both the image of the drive, but also case and evidence details. E01 file can also contain both MD5 and SHA-1 hash values.<\/p>\n

To view the previously calculated hash calculated for an E01 file with Atola TaskForce, open the imaging report in the case management system. It contains the hash values calculated during imaging.<\/p>\n

Alternatively, you can look up the metadata stored in the E01 file itself:<\/p>\n

    \n
  1. Open Devices menu by clicking the Devices<\/em> button in the top bar;<\/li>\n
  2. Click Select file<\/em> box in the File<\/em> category;<\/li>\n
  3. Select the E01 file in the file browser.<\/li>\n<\/ol>\n
    \"\"

    Hash calculated during imaging stored in E01 file’s metadata<\/p><\/div>\n

    To ensure the integrity of the data in the file, you can recalculate its hash.<\/p>\n

      \n
    1. Click Hash in the left-side task menu. This will open the devices to choose the one for which you want to calculate hash.<\/li>\n
    2. Click Select file<\/em> box in the File<\/em> category.<\/li>\n
    3. Select the E01 file in the file browser.<\/li>\n
    4. Make sure to select the same hashing types (MD5, SHA1, etc.)<\/li>\n
    5. Click Start<\/em> button<\/li>\n<\/ol>\n
      \"\"

      Start hash calculation<\/p><\/div>\n

      Adjust hashing settings and start hash calculation by clicking the Start button.<\/p>\n

      When the hash calculation is completed, you can make sure that the two sets of hashes are identical.<\/p>\n

      \"\"

      Compare the calculated hash values to the ones calculated during imaging<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

      Some source evidence drives and their images can be involved in a long-running investigation case and wait to be presented in court for months or years on end. Data stored on such drives and their image files may eventually get corrupt. Therefore it may be critical for an investigator to […]<\/p>\n","protected":false},"author":8,"featured_media":2924,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[45],"tags":[],"yoast_head":"\nCalculating MD5 and SHA1 hash of an existing E01 file<\/title>\n<meta name=\"description\" content=\"To ensure data integrity of an image file involved in a long-running investigation, recalculate hash of the imaged E01 file.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/atola.com\/blog\/calculating-dual-hash-existing-e01\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Calculating MD5 and SHA1 hash of an existing E01 file\" \/>\n<meta property=\"og:description\" content=\"To ensure data integrity of an image file involved in a long-running investigation, recalculate hash of the imaged E01 file.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/AtolaTechnology\" \/>\n<meta property=\"article:published_time\" content=\"2019-01-24T14:44:50+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-04-16T05:58:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blog.atola.com\/wp-content\/uploads\/2018\/12\/5hashing-complete1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"2736\" \/>\n\t<meta property=\"og:image:height\" content=\"1449\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Yulia Samoteykina\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@atola_insight\" \/>\n<meta name=\"twitter:site\" content=\"@atola_insight\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Yulia Samoteykina\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/\"},\"author\":{\"name\":\"Yulia Samoteykina\",\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/person\/f5faf6ed7d19bbc113d3d54fd30b6820\"},\"headline\":\"Calculating dual hash of an existing E01 file\",\"datePublished\":\"2019-01-24T14:44:50+00:00\",\"dateModified\":\"2020-04-16T05:58:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/\"},\"wordCount\":338,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/atola.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2018\/12\/5hashing-complete1.png\",\"articleSection\":[\"Atola TaskForce\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/\",\"url\":\"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/\",\"name\":\"Calculating MD5 and SHA1 hash of an existing E01 file\",\"isPartOf\":{\"@id\":\"https:\/\/atola.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2018\/12\/5hashing-complete1.png\",\"datePublished\":\"2019-01-24T14:44:50+00:00\",\"dateModified\":\"2020-04-16T05:58:26+00:00\",\"description\":\"To ensure data integrity of an image file involved in a long-running investigation, recalculate hash of the imaged E01 file.\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/#primaryimage\",\"url\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2018\/12\/5hashing-complete1.png\",\"contentUrl\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2018\/12\/5hashing-complete1.png\",\"width\":2736,\"height\":1449,\"caption\":\"Compare the calculated hash values to the ones calculated during imaging\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/atola.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Calculating dual hash of an existing E01 file\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/atola.com\/blog\/#website\",\"url\":\"https:\/\/atola.com\/blog\/\",\"name\":\"Atola Blog\",\"description\":\"Atola Blog\",\"publisher\":{\"@id\":\"https:\/\/atola.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/atola.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/atola.com\/blog\/#organization\",\"name\":\"Atola Technology\",\"url\":\"https:\/\/atola.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2026\/04\/Atola_technology1.jpg\",\"contentUrl\":\"https:\/\/atola.com\/blog\/wp-content\/uploads\/2026\/04\/Atola_technology1.jpg\",\"width\":840,\"height\":689,\"caption\":\"Atola Technology\"},\"image\":{\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/AtolaTechnology\",\"https:\/\/x.com\/atola_insight\",\"https:\/\/ua.linkedin.com\/company\/atola-technology\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/person\/f5faf6ed7d19bbc113d3d54fd30b6820\",\"name\":\"Yulia Samoteykina\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/atola.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/ae740994d03c863e03a5172c3c242ddb?s=96&d=identicon&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/ae740994d03c863e03a5172c3c242ddb?s=96&d=identicon&r=g\",\"caption\":\"Yulia Samoteykina\"},\"description\":\"Director of Marketing Yulia believes that with a product that is exceptionally good at solving tasks of forensic experts, marketing is about explaining its capabilities to the users. Yulia regularly represents Atola at DFIR events, holds free workshops and webinars about Atola imagers functionality and advocates on the users' behalf to ensure that Atola keeps on adding value and raising the bar for the industry.\",\"url\":\"https:\/\/atola.com\/blog\/author\/yulia-samoteykinaatola-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Calculating MD5 and SHA1 hash of an existing E01 file","description":"To ensure data integrity of an image file involved in a long-running investigation, recalculate hash of the imaged E01 file.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/atola.com\/blog\/calculating-dual-hash-existing-e01\/","og_locale":"en_US","og_type":"article","og_title":"Calculating MD5 and SHA1 hash of an existing E01 file","og_description":"To ensure data integrity of an image file involved in a long-running investigation, recalculate hash of the imaged E01 file.","og_url":"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/","article_publisher":"https:\/\/www.facebook.com\/AtolaTechnology","article_published_time":"2019-01-24T14:44:50+00:00","article_modified_time":"2020-04-16T05:58:26+00:00","og_image":[{"width":2736,"height":1449,"url":"https:\/\/blog.atola.com\/wp-content\/uploads\/2018\/12\/5hashing-complete1.png","type":"image\/png"}],"author":"Yulia Samoteykina","twitter_card":"summary_large_image","twitter_creator":"@atola_insight","twitter_site":"@atola_insight","twitter_misc":{"Written by":"Yulia Samoteykina","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/#article","isPartOf":{"@id":"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/"},"author":{"name":"Yulia Samoteykina","@id":"https:\/\/atola.com\/blog\/#\/schema\/person\/f5faf6ed7d19bbc113d3d54fd30b6820"},"headline":"Calculating dual hash of an existing E01 file","datePublished":"2019-01-24T14:44:50+00:00","dateModified":"2020-04-16T05:58:26+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/"},"wordCount":338,"commentCount":0,"publisher":{"@id":"https:\/\/atola.com\/blog\/#organization"},"image":{"@id":"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/#primaryimage"},"thumbnailUrl":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2018\/12\/5hashing-complete1.png","articleSection":["Atola TaskForce"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/","url":"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/","name":"Calculating MD5 and SHA1 hash of an existing E01 file","isPartOf":{"@id":"https:\/\/atola.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/#primaryimage"},"image":{"@id":"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/#primaryimage"},"thumbnailUrl":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2018\/12\/5hashing-complete1.png","datePublished":"2019-01-24T14:44:50+00:00","dateModified":"2020-04-16T05:58:26+00:00","description":"To ensure data integrity of an image file involved in a long-running investigation, recalculate hash of the imaged E01 file.","breadcrumb":{"@id":"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/#primaryimage","url":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2018\/12\/5hashing-complete1.png","contentUrl":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2018\/12\/5hashing-complete1.png","width":2736,"height":1449,"caption":"Compare the calculated hash values to the ones calculated during imaging"},{"@type":"BreadcrumbList","@id":"https:\/\/blog.atola.com\/calculating-dual-hash-existing-e01\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/atola.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Calculating dual hash of an existing E01 file"}]},{"@type":"WebSite","@id":"https:\/\/atola.com\/blog\/#website","url":"https:\/\/atola.com\/blog\/","name":"Atola Blog","description":"Atola Blog","publisher":{"@id":"https:\/\/atola.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/atola.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/atola.com\/blog\/#organization","name":"Atola Technology","url":"https:\/\/atola.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/atola.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2026\/04\/Atola_technology1.jpg","contentUrl":"https:\/\/atola.com\/blog\/wp-content\/uploads\/2026\/04\/Atola_technology1.jpg","width":840,"height":689,"caption":"Atola Technology"},"image":{"@id":"https:\/\/atola.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/AtolaTechnology","https:\/\/x.com\/atola_insight","https:\/\/ua.linkedin.com\/company\/atola-technology"]},{"@type":"Person","@id":"https:\/\/atola.com\/blog\/#\/schema\/person\/f5faf6ed7d19bbc113d3d54fd30b6820","name":"Yulia Samoteykina","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/atola.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/ae740994d03c863e03a5172c3c242ddb?s=96&d=identicon&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ae740994d03c863e03a5172c3c242ddb?s=96&d=identicon&r=g","caption":"Yulia Samoteykina"},"description":"Director of Marketing Yulia believes that with a product that is exceptionally good at solving tasks of forensic experts, marketing is about explaining its capabilities to the users. Yulia regularly represents Atola at DFIR events, holds free workshops and webinars about Atola imagers functionality and advocates on the users' behalf to ensure that Atola keeps on adding value and raising the bar for the industry.","url":"https:\/\/atola.com\/blog\/author\/yulia-samoteykinaatola-com\/"}]}},"_links":{"self":[{"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/posts\/2786"}],"collection":[{"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/comments?post=2786"}],"version-history":[{"count":0,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/posts\/2786\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/media\/2924"}],"wp:attachment":[{"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/media?parent=2786"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/categories?post=2786"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/atola.com\/blog\/wp-json\/wp\/v2\/tags?post=2786"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}