White Hash Sets

Release Date:  2 October 2023
Source: Whitehat Computer Forensics, LLC
Format:  Encase, Forensic ToolKit (FTK), Autopsy/SleuthKit, X-Ways, Raw hash values (MD5/SHA1/SHA256).
Content Description: All Known-Good/Non-Threatening hash values in one file.
Content Use: File elimination and validation.
Current Release Total Hash Values: 57,959,940
Previous (July 2023): 56,364,904
NEW & Unique Hash Values: 1,595,036

Duplicate Hash Values Removed From Hash Sets:   Yes
NSRL Known:  Yes  (separated hash sets files)
NSRL Unknown:  Yes  (separated hash sets files)

Important: We have 49,224,926 hash values which are not yet known by the US Government’s NSRL ‘Modern’ Dataset (Version 2023.09.1 released September 2023).

The attached zip file(s) represents one VERY large and single file containing all file hash values we have gathered since 2003 which are known to be safe, trusted, known-good and non-threatening.  More specifically, from the following grouped hash sets found within this website:

 – All operating system versions (698) (Details Here)
  All software and web applications
  All hardware drivers
  All MS Windows and Mac app store software
– All simulated “Gold Disks” containing MS Windows operating systems with common software installations (office suites, Internet browsers, etc).
– Duplicate hash values were also removed intentionally from each grouped hash set for purposes of expediting computer forensic examinations, computer security and/or computer file analysis.

These hash values can be utilized to assist in the elimination of non-threatening files during computer forensic and computer security examinations (Computer Compromises, Network Intrusions, eDiscovery, Malware Analysis, etc).


Please note:  We have removed all previously gathered US Government (publicly accessible) website artifacts including image files, multimedia files, office documents, etc, and placed them on our website as an ‘optional’ download feature.  

Note: Please register as a Paid Subscription Member to view download links on this page.