U.S. flag
        An official website of the United States government
          Here’s how you know
        Here’s how you know**Official websites use .gov**
              
              A **.gov** website belongs to an official government organization in the United States.
        **Secure .gov websites use HTTPS**
              
              A **lock** (  A locked padlock
) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites. https://www.nist.gov/itl/ssd/software-quality-group/national-software-reference-library-nsrl/about-nsrl/nsrl-introduction
  Search NIST
    Search
              Menu

      


Close
    Topics
        All Topics
                                                        Advanced communications
                                                        Artificial intelligence
                                                        Bioscience
                                                        Buildings and construction
                                                        Chemistry
                                                        Climate
                                                        Cybersecurity
                                                        Electronics
                                                        EnergyEnvironment
                                                        Fire
                                                        Forensic science
                                                        Health
                                                        Information technology
                                                        Infrastructure
                                                        Manufacturing
                                                        Materials
                                                        Mathematics and statisticsMetrology
                                                        Nanotechnology
                                                        Neutron research
                                                        Performance excellence
                                                        Physics
                                                        Public safety
                                                        Resilience
                                                        Standards
                                                        Transportation
            Publications
            Labs & Major Programs
        Laboratories
                                Communications Technology Laboratory
                                  Engineering Laboratory
                                  Information Technology Laboratory
                                  Material Measurement Laboratory
                                  Physical Measurement LaboratoryUser Facilities
                                NIST Center for Neutron Research
                                  CNST NanoFab
                                                        Research Test Beds
                                                        Research Projects
                                                        Tools & InstrumentsMajor Programs
                                Baldrige Performance Excellence Program
                                  CHIPS for America Initiative
                                  Manufacturing Extension Partnership (MEP)
                                  Office of Advanced Manufacturing
                                  Special Programs Office
                                  Technology Partnerships Office
            Services & Resources
        Standards and Measurements
                                Calibration Services
                                  Laboratory Accreditation (NVLAP)
                                  Quality System
                                  Standard Reference Materials (SRMs)
                                  Standards.gov
                                  Time Services
                                  Office of Weights and MeasuresSoftware
                                                        Data
                                Chemistry WebBook
                                  National Vulnerability Database
                                  Physical Reference Data
                                  Standard Reference Data (SRD)
                                                        Storefront
                                                        License & PatentsComputer Security Resource Center (CSRC)
                                                        NIST Research Library
            News & Events
        News
                                                        Events
                                                        Blogs
                                                        Feature Stories
                                                        AwardsVideo Gallery
                                                        Image Gallery
                                                        Media Contacts
            About NIST
        About Us
                                Leadership
                                  Organization Structure
                                  Budget & Planning
                                                        Contact Us
                                                        Visit
                                                        Careers
                                Student programsWork with NIST
                                                        History
                                NIST Digital Archives
                                  NIST Museum
                                  NIST and the Nobel
                                                        Educational Resources
 
 Information Technology Laboratory /                  Software and Systems Division
      Software Quality Group
    
      
  National Software Reference Library (NSRL)
                            Expand or Collapse
          Curated Kaspersky Hash Set - 2017
                      About the NSRL
                                              Expand or Collapse
                NSRL Introduction
                                  Library Contents
                                  NSRL Frequently Asked Questions
                      NSRL Download
                                              Expand or Collapse
                Current RDS Hash Sets
                                  Non-RDS Hash Sets
                                  RDS Query Tools
                                  NSRL Legacy Tool Downloads
                      NSRL Subprojects
                                              Expand or Collapse
                Diskprints
                                  NSRL Unique File Corpus
                                  NSRL and Voting System Software
                      Technical Information
                                              Expand or Collapse
                Approximate Matching
                                  DFXML Schema
                                  NSRL Presentations
                                  NSRL Technical Papers
                      Subscribe
                                              Expand or Collapse
                NSRL Subscription Information
                                  Redistribution Policy for NIST NSRL RDS
                                  NSRL RDS Distribution Schedule
                      Contact Information
                      NSRL Partner Projects
                      NSRL AcknowledgementsNSRL Introduction

Share
  Facebook
                      Linkedin
                      Twitter
                      Email

This page provides a general overview of the NSRL: what it is; what it's for; and how it's used. If you're new to the NSRL, this is a good place to start.

What is the NSRL?

The NSRL is The National Software Reference Library, based out of the National Institute of Standards and Technology, an agency of the U.S. Department of Commerce. It has three components:

A large collection of software packages.
	A database containing detailed information, or metadata, about the files that make up those software packages.
	A public dataset, the NSRL Reference Data Set (RDS) which contains a subset of the metadata held in the database for each file in the collection. The RDS is published and updated every three months.What's in the NSRL?

The NSRL RDS contains metadata on computer files which can be used to uniquely identify the files and their provenance. For each file in the NSRL collection, the following data are published:

Cryptographic hash values (MD5 and SHA-1) of the file's content. These uniquely identify the file even if, for example, it has been renamed.
	Data about the file's origin, including the software package(s) containing the file and the manufacturer of the package.
	Other data about the file, including its original name and size.The RDS is distributed as a collection of UTF-8 text files on a set of 4 CDs. Each file contains a set of records, one record per line, consisting of comma-separated fields. Details of the record formats can be found here (PDF file).

What is the NSRL used for?

The data published by the NSRL is used to rapidly identify files on computer systems, based solely on the content of the files.

In most cases, NSRL file data is used to eliminate known files, such as operating system and application files, during criminal forensic investigations. This reduces the number of files which must be manually examined and thus increases the efficiency of the investigation.

However, the data can just as easily be used to target files of interest. Such uses include detection of unauthorized software installations (e.g., in corporate or web hosting environments or in intellectual property disputes), and discovery of exculpatory evidence by criminal defense teams.

Who uses the NSRL?

The primary focus of the NSRL is to aid computer forensics examiners in their investigations of computer systems. The majority of NSRL stakeholders are in federal, state and local law enforcement in the United States and internationally. These organizations typically use the NSRL data to aid in criminal investigations, as outlined above. Other stakeholders include businesses and other government agencies which may use the NSRL RDS as part of their routine IT operations.

How is the NSRL used?

Typically the RDS data is imported into one of a number of commercial software packages.

How can I get the NSRL data?

NSRL RDS releases are available as a free download. Data sets are updated quarterly (March, June, September, December), typically on the first Friday of the month.
  Forensic Science, Digital evidence, Information technology and Software research

    
    Contacts
      
        

General Comments or Questions
  nsrl@nist.gov

Created April 19, 2016, Updated January 27, 2022 ‹ About the NSRL
              Library Contents ›
 HEADQUARTERS
            100 Bureau Drive
              Gaithersburg, MD 20899301-975-2000
            Webmaster | Contact Us | Our Other Offices
        Twitter
            
Facebook
            
LinkedIn
            
Instagram
            
YouTube
            
Giphy
            
RSS Feed
            
Mailing List
                              How are we doing? Feedback

  
  Site Privacy
                      Accessibility
                      Privacy Program
                      Copyrights
                      Vulnerability Disclosure
                      No Fear Act Policy
                      FOIA
                      Environmental Policy
                      Scientific Integrity
                      Information Quality Standards
                      Commerce.gov
                      Science.gov
                      USA.gov
                      Vote.gov