Mac Applications Hash Sets
Release Date: 19 November 2017
Source: Whitehat Computer Forensics, LLC (The Hash Search Engine)
Format: Encase, Forensic ToolKit (FTK), X-Ways, SleuthKit and Raw hash values (MD5/SHA1/SHA256)
Content Description: macOS (OS X) applications (Known Good/Non-Threatening)
Number of Hash Values: 1,547,330
Duplicate Hashes Removed: Yes
NSRL Known: Yes (separate hash files)
NSRL Unknown: Yes (separate hash files)
The attached zip file contains hash values derived from macOS (OS X) applications commonly found within the Mac App Store. Specifically, more than 2,000 common Utilities, Finance, Travel, Graphics & Design, Games, Business and Education apps which were subsequently installed, analyzed and then gathered into MD5, SHA-1 and SHA-256 hash sets.
Duplicate hash values were also removed intentionally from each grouped hash set as an aid in expediting future computer forensic and/or computer security examinations.
These hash values can be utilized to assist in the elimination of non-threatening files during computer forensic and computer security examinations (Computer Compromises, Network Intrusions, eDiscovery, Malware Analysis, etc).