Download Latest Version VirusShare_0-475_MR4n6_Hash_Sets_Autopsy_2023_Q2.zip (876.8 MB)
Email in envelope

Get an email when there's a new version of MantaRay Forensics

Name Modified Size InfoDownloads / Week
Parent folder
README-EnCase.txt 2023-07-30 1.5 kB
VirusShare_0-475_MR4n6_Hash_Sets_EnCase_2023_Q2.zip 2023-07-30 751.0 MB
Totals: 2 Items   751.0 MB 1
This refined VirusShare hash set needs to be imported into an EnCase hash database (EnPack; below).  Utilize the standard import option.  This import file has the required headings: Name, Logical Size, MD5-Hash, SHA-1 Hash.  

EnPack Download:
https://security.opentext.com/appDetails/Hash-List-Importer

All EnScripts:
https://security.opentext.com/app

Beginning with Hash List Importer v5.0, if the NSRL import option is chosen, the script will expect the import-file to be a minimal RDSv3 hash-set having a *.db file extension.  This option will not import this VirusShare set.  This is designed for NSRL RDSv3:

https://www.nist.gov/itl/ssd/software-quality-group/national-software-reference-library-nsrl/nsrl-download/current-rds  

Do you need to create an EnCase hash-library of the @VXShare malware repository with an EnScript from original source files?  Simon Key has a project to support this effort for OpenText.  If proceeding with this option please note, this process does not remove known hash values from the VirusShare set (resulting in a large amount of false positives).  

Find it here:

VirusShare Hash Library Creator
https://security.opentext.com/appDetails/VirusShare-Hash-Library-Creator

Cheers to Simon Key for his continued work to maintain these projects and the useful YouTube video he has provided (below).

YouTube Instructions:
https://www.youtube.com/watch?v=Z7JiIXRR7-g

(Last Update: 22 June 2023)
Source: README-EnCase.txt, updated 2023-07-30