I have downloaded the OSX 10.11.2 El Capitan app from App Store, and I found it downloaded it from local China server even though my apple ID wasn't for China store, and I am living in China, the download IP of storedownloadd indicated :


I am concerned about the genuine of the copy, so is anyone know what the SHA1 of InstallESD.dmg? I really appreciate it. Just to make sure its genuine copy, and you know, the GhostXcode malware came out from China mainland.


Here it is,


Which is downloaded from Apple Store and server located in North America.

  • Nice answer. Would you consider editing in the method you use to determine the hash? That will help many more people than just listing the result. – bmike Dec 15 '15 at 22:50
  • Check out github.com/drduh/OS-X-Security-and-Privacy-Guide/blob/master/… – user79406 Dec 30 '15 at 17:03
  • @uwotm8 Really good, I have been looking for that long time, and if I have found that early, I won't have this question! – Tom Jan 1 '16 at 5:32

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .