Operating Systems - Autopsy/SleuthKit Hash Sets
IMPORTANT: Please check for the latest ‘Rolling Hash Sets‘ when needing to update the below Autopsy/SleuthKit hash sets until our next official ‘Full Hash Sets’ release.
Release Date: 3 April 2026
Source: Whitehat Computer Forensics, LLC
MS Windows operating system distinct hash values: 47,387,144
Note: Not yet known by the US Government’s NSRL Dataset (2026.3.1): 44,510,625
Linux operating system distinct hash values: 17,654,189
Note: Not yet known by the US Government’s NSRL Dataset (2026.3.1): 13,131,762
macOS operating system distinct hash values: 6,846,872
Note: Not yet known by the US Government’s NSRL Dataset (2026.3.1): 6,587,387
BSD operating system distinct hash values: 2,776,063
Note: Not yet known by the US Government’s NSRL Dataset (2026.3.1): 1,991,055
Formatted For: Autopsy/The Sleuth Kit (MD5 hash values only)
Total Operating System Versions: 880+
Duplicate Hashes Removed: Yes
NSRL Known and Unknown: Yes and placed within their own unique files
.
Operating System Hash Sets: MS Windows, Linux, macOS and BSD.