Operating Systems - Forensic ToolKit (FTK) Hash Sets
IMPORTANT: Please check for the latest ‘Rolling Hash Sets‘ when needing to update the below Forensic ToolKit (FTK) hash sets until our next ‘Full Hash Sets’ release.
Release Date: 3 April 2026
Source: Whitehat Computer Forensics, LLC
Total Operating System Versions: 880+
MS Windows operating system distinct hash values: 47,387,144
Note: Not yet known by the US Government’s NSRL Dataset (2026.3.1): 44,510,625
Linux operating system distinct hash values: 17,654,189
Note: Not yet known by the US Government’s NSRL Dataset (2026.3.1): 13,131,762
macOS operating system distinct hash values: 6,846,872
Note: Not yet known by the US Government’s NSRL Dataset (2026.3.1): 6,587,387
BSD operating system distinct hash values: 2,776,063
Note: Not yet known by the US Government’s NSRL Dataset (2026.3.1): 1,991,055
Formatted For: Exterro Forensic ToolKit (FTK) (importable MD5 and SHA1 tab delimited text files with FTK header).
Duplicate Hashes Removed: Yes
NSRL Known and Unknown: Yes and placed within their own unique files
.
Operating System Hash Sets: MS Windows, Linux, macOS and BSD.
More Details (Changelog)