White Hash Sets
Release Date: 1 December 2018
Source: Whitehat Computer Forensics, LLC
Format: Encase, Forensic ToolKit (FTK), SleuthKit, X-Ways, Raw hash values (MD5/SHA1/SHA256).
Content Description: All Known-Good/Non-Threatening hash values in one file.
Content Use: File elimination and validation.
Current Release Hash Values: 35,946,773
Previous Release Hash Values: 34,241,307
Recently Added: 1,705,466
Duplicate Hash Values Removed From Hash Sets: Yes
NSRL Known: Yes (separate hash sets)
NSRL Unknown: Yes (separate hash sets)
Note: Hash values not yet known by the US Government’s NSRL Datasets: 30,411,044
The attached zip file(s) represents one VERY large and single file containing all file hash values we have gathered since 2003 which are known to be safe, trusted, known-good and non-threatening. More specifically, from the following grouped hash sets found within this website:
– All operating system versions (396+)
– All software and web applications
– All hardware drivers
– All MS Windows and Mac app store software
– All simulated “Gold Disks” containing MS Windows and MacOS operating systems with common software installations (office suites, Internet browsers, etc).
– All previously gathered US Government (publicly accessible) website artifacts including image files, multimedia files, office documents, etc.
– Duplicate hash values were also removed intentionally from each grouped hash set for purposes of expediting computer forensic examinations, computer security and/or computer file analysis.
These provided hash values can be utilized to assist in the elimination of non-threatening files during computer forensic and computer security examinations (Computer Compromises, Network Intrusions, eDiscovery, Malware Analysis, etc).