Is there a built-in checksum/hash utility on Windows 7?

  • Not my area, but Powershell, the build in scripting language, can probably do it.
    – Phoshi
    Feb 14, 2011 at 19:03
  • 19
    Is this one of those goofy "I'm not allowed to install any 3rd party software" requirements? If so, try googling for "PowerShell SHA1 hash" and you should get some scripts/cmdlets that will run on the built-in PowerShell using MS's Crypto APIs.
    – afrazier
    Feb 14, 2011 at 19:14
  • 10
    There is GetFile-Hash. You need PS 4.0 or community extensions stackoverflow.com/questions/10521061/…
    – rofrol
    Nov 26, 2014 at 11:02
  • 2
    Avast anti virus is blocking downloads from the above site for me, so may be worth approaching with caution.
    – Jules
    Dec 17, 2014 at 16:11
  • 13
    Note, the best answer (for me) is the 2nd answer, which has many more votes than the answer chosen by the asker. To the reader: look below, for the "certutil.exe" option.
    – macetw
    Jan 8, 2016 at 19:09

31 Answers 31


There is a built in utility, as specified in this other answer.

You may, however, wish to use this freeware app called HashTab that integrates neatly with Windows Explorer by registering a... well, a tab in the properties dialog of files. It's pretty sweet.

HashTab screenshot

  • 99
    I prefer HashCheck over HashTab, primarily because it can handle multiple mixed file/folder selections and it can create/verify SFV/MD5/SHA1 files. My writeup over at the Ars Forums goes into more detail.
    – afrazier
    Feb 14, 2011 at 21:51
  • 53
    Be aware HashTab is only free for private use! HashCheck is open source and complete free (BSD license)
    – keiki
    Oct 22, 2012 at 14:08
  • 36
    yes, there is a cmd: CertUtil -hashfile _main.exe MD5 Jul 16, 2015 at 8:53
  • 23
    "There is a built-in utility which does exactly what you need. You may, however, use this other tool which does something which you didn't ask for." Why is this the accepted answer?
    – abaumg
    Jun 27, 2017 at 12:36
  • 11
    > "Thanks. Unfortunately being built-in was an essential requirement for me." Then why did you select a non-built in software, which the question doesn't ask for, as the answer?
    – KalEl
    Sep 10, 2017 at 20:14

CertUtil is a pre-installed Windows utility that can be used to generate hash checksums:

certUtil -hashfile pathToFileToCheck [HashAlgorithm]

HashAlgorithm choices: MD2 MD4 MD5 SHA1 SHA256 SHA384 SHA512

So for example, the following generates an MD5 checksum for the file C:\TEMP\MyDataFile.img:

  CertUtil -hashfile C:\TEMP\MyDataFile.img MD5

To get output similar to *Nix systems you can add some PowerShell magic:

$(CertUtil -hashfile C:\TEMP\MyDataFile.img MD5)[1] -replace " ",""
  • 21
    MD5.bat: @certutil -hashfile %1 MD5|find /v "hash of file"|find /v "CertUtil"
    – pbarney
    Nov 16, 2015 at 15:37
  • 8
    Please note that certutil is not available in Windows PE, so if you are trying to calculate a checksum in a pre-deployment task script in PE, you will have to use an external tool like Microsoft FCIV.
    – Wayfarer
    May 19, 2016 at 8:14
  • 4
    That's incredible, but CertUtil -hashfile C:\TEMP\MyDataFile.img MD5 does not produce the same hash than md5sum /tmp/MyDataFile.img under Linux (I guarranty it is the same file with a mount)
    – lalebarde
    Aug 16, 2016 at 9:22
  • 17
    @lalebarde There is only one standard for MD5. If you are getting different results on the same file, it is because something is making some change to that file and causing the hashes to be different. This is one of the most important functions of MD5 and other hashing standards.
    – Paul
    Oct 19, 2016 at 16:27
  • 5
    @mwfearnley, it looks like SHA1 is the default when the hash algorithm parameter is left unspecified, and that, when specified, the hash algorithm parameter is case-sensitive. So, I first tried certutil -hashfile ... sha1 and it failed. Then I left the ...sha1 off, and it worked. Then I retried with ...SHA1 and that worked. (And I repeated the test for md5/MD5.)
    – JMD
    Jan 22, 2018 at 18:44

I'm using HashCheck (latest version) which integrates itself as a property page for files and includes a context menu to compare against hash check files (SFV).

It is free, and the source is available.


  • 7
    AVG is flagging that the core Windows Utility has been changed - that is the sort of thing that malicious software often does.
    – dunxd
    Nov 20, 2012 at 10:15
  • 12
    Free, open source, integrates with property page and explorer context menu, has an .MD5 checker and supports SHA-1. Not to mention it's just 85kb and runs really fast. This application is absurdly great, thank you! Feb 26, 2014 at 9:59
  • 4
    and you can install it via chocolatey! Jul 7, 2016 at 15:04
  • 4
    @Sossenbinder You must have been looking in the wrong place. SHA-256 has been supported since Dec. '14. The tool was being updated until at least Sep '16 so while it may not be active lately perhaps there's not much to add to it. github.com/gurnec/HashCheck/releases
    – B Layer
    Dec 27, 2017 at 17:10
  • 4
    I know this is really old, but how did you answer the question more than a year before it was asked?
    – Baruch
    Aug 7, 2019 at 11:46

PowerShell version 4 and up includes the Get-FileHash cmdlet.

powershell get-filehash -algorithm md5 <file_to_check>

Use doskey to make a persistent alias that's easier to remember.

doskey sha1sum=powershell get-filehash -algorithm sha1 "$1"
doskey md5sum=powershell get-filehash -algorithm md5 "$1"
  • 1
    By adding Format-List to show the full output if the hash result string is too long powershell Get-FileHash -Algorithm md5 <file_to_check> | Format-List
    – celeron533
    Jul 31, 2017 at 14:25
  • Finally it comes to PowerShell! Jan 24, 2018 at 17:16
  • Brilliant question and answers. Thanks for all of this. I'd recommend another software, but this is pretty complete. Can't thank you contributors enough for this thread. Excuse me... May I ask why PowerShell on Win 8.1 and 10 won't recognize Get-FileHash "C:\foo.exe" -Algorithm MD5,SHA1,SHA256 | Format-List natively to list several hashes in a row? There's no such instruction stored in the console? I tried to reformulate several times with the correct syntax, but it returns me an error and it doesn't seem to work without embedding a script.
    – K0media
    Feb 14, 2018 at 17:08
  • 1
    This needs more attention as this is built-in unlike many of the other options including the accepted answer.
    – flickerfly
    Dec 10, 2019 at 16:09

There is the FCIV utility from Microsoft, the Microsoft File Checksum Integrity Verifier (download link).

The Microsoft File Checksum Integrity Verifier tool is an unsupported command line utility that computes MD5 or SHA1 cryptographic hashes for files.

It doesn't show Windows 7 in system requirements but I've just used it in Windows 8 and it worked.

  • Why are we linking to a unsupported command line utility. This doesn't even intergrate into the shell which I am sure the author wanted.
    – Ramhound
    Sep 5, 2012 at 12:36
  • 31
    That utility was useful for me. I downloaded an iso image from msdn and needed to cheksum it. I didn't want any third party tools. I didn't need the shell integration and the author didn't ask for it. It's from a trusted source Microsoft and while unsupported it still works. I posted a link here because other people like me may find it useful.
    – creator
    Sep 6, 2012 at 4:25
  • 30
    I'm with @creator. It may not be supported software, but at least Microsoft is the author. Checksum programs are potentially really important to maintaining security; I'd rather not get mine from some random third-party.
    – ellisbben
    Sep 18, 2012 at 18:00
  • 3
    While it's an OKish utility for moderate use, it's unstable. I'm using it in a xdelta script to determine if files of same size are different and I'm sorry to say I get about 1 crash every a few hundred files. It's unreliable, so an advice: use something else.
    – JasonXA
    Mar 5, 2017 at 17:58
  • 2
    FCIV hasn't been installed on any Windows system I've wanted to use it on, but certUtil was always there. I wish FCIV wasn't a top search result when I forget the name of the tool to use. I also wish this feature was just built in to the file properties dialog and browser download managers.
    – jla
    Apr 5, 2019 at 16:31

The new version of 7-Zip also gives you the option of checksums just by right clicking (this doesn't include MD5). It has SHA-1, SHA-256, CRC-32, CRC-64, etc.

Enter image description here.

For MD5 you can download HashTab and check by right clicking and then properties.

Enter image description here

  • Which version of 7-zip are you talking about?
    – klaar
    Aug 15, 2017 at 13:06
  • Unfortunately, the 7-zip checksum tool doesn't allow you to copy the checksum! Dec 5, 2017 at 15:59
  • I think selecting the hash text and Ctrl+C works fine.
    – abe312
    Dec 6, 2017 at 16:22
  • In my setup, if you go to properties of the file, you can copy the hash via right click->copy under file hashes tab.
    – abe312
    Dec 23, 2017 at 5:46

Here's one I've used before that integrates nicely with Explorer's "Properties" dialog: Summer Properties. It's open source, and an x64 version is also available.

SummerProperties screen shot

I also like Safer Networking's FileAlyzer, which provides additional features as well. But just for checksums, Summer Properties is lightweight and does the job.

  • 1
    The only problem with this is that it does not support folders or groups of files. It is also out of dvlp Dec 23, 2010 at 12:47
  • 1
    Another problem with it is that you can't paste an hash into it and see if it matches
    – Jonathan
    Mar 23, 2011 at 16:33
  • I know this is really old, but how did you answer the question more than a year before it was asked?
    – Baruch
    Aug 7, 2019 at 11:46
  • @Baruch If you look at the question's edit history you'll see that, in May 2015, another similar question (but older) had its answers merged into this one. I'm not sure why the newer question was the one chosen to survive, but that's why it looks odd. Here's the original older question. Aug 7, 2019 at 21:38

Nirsoft's HashMyFiles is small utility that allows you to calculate the MD5 and SHA1 hashes of one or more files in your system. You can easily copy the MD5/SHA1 hashes list into the clipboard, or save them into text/html/xml file.

HashMyFiles can also be launched from the context menu of Windows Explorer, and display the MD5/SHA1 hashes of the selected file or folder.

alt text

HashMyFiles is freeware and portable.

  • +1, Seems like a new one -- the last time I checked (before moving to a command line md5sum version) was FastSum -- but, it was sort-of trialware and nagged a lot. HashMyFiles is good because it allows drag-and-drop of multiple files and export to CSV (both important features). Don't think I had seen it when I found FastSum a couple of years back.
    – nik
    Dec 30, 2009 at 2:15
  • that's right, HashMyFiles is a fairly recent addition to NirSoft's portfolio, it was first released in 2007.
    – Molly7244
    Dec 30, 2009 at 9:05
  • …that integrates into Windows [Explorer]
    – Synetech
    Dec 19, 2013 at 5:10
  • And very small size!
    – Peter T.
    Feb 8, 2019 at 22:34

I am adding this here only because I didn't see any fully working powershell examples, ready for copy-paste:

C:\> powershell "Get-FileHash %systemroot%\system32\csrss.exe"

Algorithm       Hash
---------       ----
SHA256          CB41E9D0E8107AA9337DBD1C56F22461131AD0952A2472B4477E2649D16E...

C:\> powershell -c "(Get-FileHash -a MD5 '%systemroot%\system32\csrss.exe').Hash"


C:\> CertUtil -hashfile "%systemroot%\system32\csrss.exe" MD5 | findstr -v file
b2 d3 f0 7f 5e 8a 13 af 98 8a 8b 3c 0a 80 08 80


2019 Update:

The certutil output seems to have changed since Windows 8, so my old filter to isolate the hash doesn't work anymore. The extraneous spaces are gone too - one less thing to worry about when scripting. Here is the new copy-paste-able demo:

C:\>CertUtil -hashfile "%systemroot%\system32\csrss.exe" | findstr -v ash

C:\>CertUtil -hashfile  "%systemroot%\system32\csrss.exe" SHA256 | findstr -v :


Microsoft Windows [Version 10.0.16299.1451]


To make this more resilient against breakage from yet another future change in certutil, we should look for lines with non-hex characters to filter out: [^0-9a-zA-Z]. That should also make it safer for other locales and languages.

C:\>CertUtil -hashfile  "C:\windows\fonts\arial.ttf" | findstr -vrc:"[^0123-9aAb-Cd-EfF ]"

Why is that actual anti-hex regex so weird ? See this question to learn how regex ranges in findstr don't work as they should. I included an extra space character for backward-compatibility with older certutil versions, but it is optional.

Note that the powershell Get-FileHash default is SHA256, while certutil still defaults to SHA1. So specify your algorithm explicitly where needed. You can quickly check the available options like this:

C:\>powershell -c "Get-FileHash -?" | findstr gori

    Get-FileHash [-Path] <string[]> [-Algorithm {SHA1 | SHA256 | SHA384 | SHA512 | MACTripleDES | MD5 | RIPEMD160}]
    Get-FileHash -LiteralPath <string[]> [-Algorithm {SHA1 | SHA256 | SHA384 | SHA512 | MACTripleDES | MD5 |
    Get-FileHash -InputStream <Stream> [-Algorithm {SHA1 | SHA256 | SHA384 | SHA512 | MACTripleDES | MD5 | RIPEMD160}]

C:\>certutil -hashfile -v /? | findstr gori

  CertUtil [Options] -hashfile InFile [HashAlgorithm]
Hash algorithms: MD2 MD4 MD5 SHA1 SHA256 SHA384 SHA512

I found this PowerShell script:

param([switch]$csv, [switch]$recurse)

[Reflection.Assembly]::LoadWithPartialName("System.Security") | out-null
$sha1 = new-Object System.Security.Cryptography.SHA1Managed
$pathLength = (get-location).Path.Length + 1

$args | %{
    if ($recurse) {
        $files = get-childitem -recurse -include $_
    else {
        $files = get-childitem -include $_

    if ($files.Count -gt 0) {
        $files | %{
            $filename = $_.FullName
            $filenameDisplay = $filename.Substring($pathLength)

            if ($csv) {
                write-host -NoNewLine ($filenameDisplay + ",")
            } else {
                write-host $filenameDisplay

            $file = [System.IO.File]::Open($filename, "open", "read")
            $sha1.ComputeHash($file) | %{
                write-host -NoNewLine $_.ToString("x2")

            if ($csv -eq $false) {

Source: Calculating SHA1 in PowerShell

It leverages .NET which I assume you have installed

  • 7
    Win 7 comes with .NET 3.5 and PowerShell v2, and PowerShell has always been dependent on .NET, so if you've got PS, you've got .NET. :-)
    – afrazier
    Feb 14, 2011 at 21:47

Microsoft File Checksum Integrity Verifier. It can compute MD5 and SHA-1 hash values.

Download, extract the files, then open a command prompt, go to the extracted path and then type the following command:

fciv -md5 filepath\filename.extension

For example:

fciv -md5 d:\programs\setup.exe
  • This answer and @creator's answer should be combined. They refer to the same tool.
    – leif81
    Jun 11, 2014 at 13:36
  • Question Title : Is there a built-in checksum/hash utility on Windows 7? 'fciv' is not recognized as an internal or external command, operable program or batch file. Microsoft Windows [Version 10.0.14393]
    – Amit Naidu
    Jul 9, 2018 at 19:24

A batch file based on pbarney's comment to the answer with the most upvotes: This copies the MD5 hash of whatever file is dragged onto the batch file to the clipboard:

FOR /f "tokens=*" %%i IN ('@certutil -hashfile %1 MD5 ^| find /v "hash of file" ^| find /v "CertUtil"') DO SET r=%%i
SET r=%r: =%
ECHO %r% | clip

To make it a context menu item instead:

Windows Registry Editor Version 5.00

@="Copy MD5 to Clipboard"

[HKEY_CLASSES_ROOT\*\shell\Get MD5\command]
@="\"C:\\<PATH TO BAT FILE>\\getMD5.bat\" \"%1\""
  • Or if you don't mind the extra output, a one liner batch file certutil -hashfile %1 md5 works as well
    – jrh
    Aug 20, 2018 at 14:21

Unfortunately, not that I'm aware of, but Microsoft's Sysinternals suite includes a nice tool called sigcheck.


Cygwin contains an md5sum.exe utility that should do what you want.

  • 2
    Unfortunately being command line based, it doesn't integrate with the Windows Shell. May 21, 2014 at 19:38
  • Cristian Ciupitu just cause you don't know how to do it it doesn't mean it can't be done. I'm using lots of CLI apps from Windows Shell desktop / folder background and typed apps context menu and they work fine.
    – JasonXA
    Mar 5, 2017 at 18:01
  • 2
    Cygwin is massively overkill. There are many native binaries that do the job, most of them under 200k.
    – sCiphre
    Jul 28, 2017 at 12:48
  • There is nothing "massively overkill" about Cygwin. The setup utility lets you check off and download only just exactly what you need and nothing more. If all you select is md5sum, that's all you get. Jul 29, 2017 at 14:10

QuickHash supports SHA-256 and SHA-512. I needed SHA-256 support to verify the checksum of whitelisted JavaScript libraries for inclusion in a Firefox addon.


MD5 Context Menu does exactly this. It adds an MD5 option to the context menu of files:

Enter image description here

Alt text

MD5 Context Menu is a freeware shell extension for Windows which displays the MD5 hash sum of the selected file.

It says it's compatible with Windows 95, 98, ME, NT, 2000, and XP, although it works for me perfectly fine on Windows 7. It's a tiny download (238 KB) and includes everything you need.

  • 3
    "Because of a serious bug in the last version of our tool for large files with sizes > 2^31 bytes (~2.1GB) we currently do not provide the download anymore." Oct 11, 2013 at 4:35

This is just a cmd shell script which uses tedr2's answer but strips off the extraneous output lines and spaces:

:: hash.cmd : Get a hash of a file
:: p1: file to be hashed
:: p2: Hash algorithm in UPPERCASE
:: p3: Output file

@for /f "tokens=*" %%a in (
'@certutil -hashfile %1 %2 ^|find /v "hash of file" ^|find /v "CertUtil"'
) do @(
  @set str=%%a
@set str=%str: =%
@echo %str%

The output can be re-directed to a file if required:

@echo %str% > %3


sys> \dev\cmd\hash.cmd MyApp.dll SHA1

The correct answer is of course, yes, CertUtil (see tedr2's answer).

But I'll add Penteract's free File Checksum Verifier which, I think, is one of the most user-friendly programs. (Disclaimer: I'm affiliated with Penteract.)

Some of its advantages:

  • Compares the calculated and expected hashes for you.
  • Minimalistic - no item in files' context-menus, no extra tab on files' properties.

To verify this program's integrity (against man-in-the-middle attacks) - it downloads over a secure connection.

Penteract File Checksum Verifier

Plus: free, offline (so you don't have to upload your files), user-friendly (drag a file in and get the result), launches from the start menu (no need to look for the downloaded executable when you want to use it a year from now), and supports MD5, SHA1, SHA256, etc.

  • 1
    Thank you for disclosing your affiliation. However, please avoid making too many posts of this kind, as doing so may be considered spamming. For more information about promotional posts, please see superuser.com/help/promotion.
    – bwDraco
    Aug 31, 2015 at 23:56
  • 1
    This only works on Windows 10 and the op specifically asked about W7.
    – Jool
    Sep 2, 2017 at 12:34
  • Worked fine for me on Windows 10. Thank you.
    – insign
    Dec 24, 2020 at 18:09

1. checksum

I use checksum command-line utility.


checksum [-t=sha1|sha256|sha512|md5] [-c=signature] [-f=]filepath

2. Command-line arguments

  • -?, --help, -h
    Prints out the options.
  • -f, --file=VALUE
  • -t, --type, --hashtype=VALUE
    Hashtype Defaults to md5.
  • -c, --check=VALUE
    Optional: check - the signature you want to check. Not case sensitive.

3. Examples of usage

# Check md5 for "E:\Саша Неотразима\Sasha-Irresistible.exe" file
SashaChernykh@DESKTOP-0G54NVG E:\Саша Неотразима
$ checksum -f "E:\Саша Неотразима\Sasha-Irresistible.exe"
# Check sha256
SashaChernykh@DESKTOP-0G54NVG E:\Саша Неотразима
$ checksum -f "E:\Саша Неотразима\Sasha-Irresistible.exe" -t=sha256
# Correct 41474147414741474147 sha256 hash or not?
SashaChernykh@DESKTOP-0G54NVG E:\Саша Неотразима
$ checksum -f "E:\Саша Неотразима\Sasha-Irresistible.exe" -t=sha256 -c 41474147414741474147
Error - hashes do not match. Actual value was 'F6286F50925C6CBF6CBDC7B9582BFF833D0808C04283DE98062404A359E2ECC4'
# One more attempt
SashaChernykh@DESKTOP-0G54NVG E:\Саша Неотразима
$ checksum -f "E:\Саша Неотразима\Sasha-Irresistible.exe" -t=sha256 -c F6286F50925C6CBF6CBDC7B9582BFF833D0808C04283DE98062404A359E2ECC4
Hashes match..

Something like this: winmd5sum.
This one's also nice: sendtoMD5 - right click, send to ..., and it gets you the result.


HashTab 3.0 is a free shell extension that calculates many checksums, including MD5. It's integrated as a new tab in the File Properties.


You can use MD5sums for Windows, a download of only 28 KB (Cygwin might be overkill if all you want to do is compute MD5 hashes).

The easiest way to use it is to use Explorer to drag and drop files on md5sums.exe to obtain their MD5 hashes.


This is not a built-in utility, but its a very good option


You could compare checksum by file and/or summaries if two folders differ or are identical.


You can try msys2, it is here.

Just type (algorithm)sum. (algorithm) is the hash algorithm you want to use e.g. md5, sha1, sha256 ...

Unlike Cygwin, this tool is portable, you just to download the .zip file and extract in anywhere you want. You can use it by a simple click(msys2.exe).

Hop this tool will help you.


OpenHashTab is open source, integrates with Explorer, and is actively developed.

It's a good alternative to HashCheck, as that one isn't maintained any more (for over 6 years).

OpenHashTab 3.0 file properties tab



If you don't have time to check output from certutil character by character <hash size> number of times, pipe to find utility to see if checksum matches:

certutil -hashfile ekaf_elbatuc.exe sha256 | find "<checksum>" && echo File ok. || echo Some mole or rat waz hia

But then what's the point of getting hash from same server as the file itself?

Tested on Win 10 CMD


This is how I calculate checksums from Explorer using no third-party software.

On Windows 10 (and probably previous versions) follow these steps:

Using explorer, open the "Send To" folder by typing this into the address bar


Create a batch file in this folder called something like Calculate SHA1 and MD5.cmd

and add this text

@echo off
certUtil -hashfile %1 SHA1
certUtil -hashfile %1 MD5

You will now be able to calculate SHA1 and MD5 checksums for any file from Explorer, just by right-clicking a file and choosing send to Calculate SHA1 and MD5.cmd

Off course, you can change the name of the above file and choose to add other checksums, or even create multiple files each with a different type of hash.

I have another batch file called Calculate SHA256.cmd, which I prefer to use independently (you wouldn't want to calculate every type of hash from one batch file as this would take too long for very big files).

enter image description here

Some more notes

Just to make the output a little less cluttered, I prefer to pipe the output through findstr.

certUtil -hashfile %1 SHA256 | findstr ^1

The pause instruction at the end of the batch file is essential, otherwise the window will disappear immediately.


Well, I have made a program to calculate some hashes from a file. I hope it helps you.

What does this do? It calculates the SHA-1 hash, SHA-384 hash, MD5 hash and SHA-256 hash. Well, that's about it :)


There are like 100 third-party tools out there. I use MD5Hash. For downloads with sfv files, just use TeraCopy to verify the hashes.


For a solution that works on Windows or just about any other environment, use Python.

  1. install Python -- a Windows installer is provided on https://www.python.org/downloads/

  2. download a tested cksum implementation, e.g. http://pastebin.com/raw.php?i=cKATyGLb -- save the contents of this to say, c:\cksum.py or wherever you find convenient

Then to perform a checksum:

python c:\cksum.py INPUTFILE

Not as fast as a compiled utility, but compatible with Unix cksum and runs anywhere.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .