Endpoint Protection

 View Only

  • 1.  Application Information for use in Application and device Blocking

    Posted Jul 18, 2016 09:51 AM

    Hi All,

              Do any of you know of a good, free resource for obtaining upto date lists of #MD5 or SHA256 references for the different versions of an app that I want to block in ADB e.g. (Hola, qtorrent etc.) I think these are much safer than using wilcards that could potentially block innocent applications on a work machine.

    Cheers

    PaulC



  • 2.  RE: Application Information for use in Application and device Blocking

    Posted Jul 18, 2016 09:56 AM

    I don't know that one exists like this. I think you'd need to manually run a checksum against the app after an upgrade. Less secure of course, but, I've not seen a list like this available.



  • 3.  RE: Application Information for use in Application and device Blocking

    Posted Jul 18, 2016 10:06 AM

    Thanks Brian. I had a feeling that would be the answer. My thought was if Virustotal had a database that could be used. But I think you have to pay for that.

    PaulC



  • 4.  RE: Application Information for use in Application and device Blocking

    Posted Jul 18, 2016 10:09 AM

    They have a public API:

    https://www.virustotal.com/en/documentation/public-api/

    ...but this may require more work than it's worth nor do I see an option to pull hashes.