Alternative shasum 0e063fd87d5b0a4f68dbd35da95b2018748f88eb for InstallESD.dmg for OS X 10.10.5

Downloaded with the App Store yesterday (2016-06-17), the result and a discrepancy was noted at http://apple.stackexchange.com/a/246331/8546

Today I trashed that copy, emptied the trash, restarted the Mac, gained a fresh copy and obtained the same result from shasum:

sh-3.2$ date ; uptime ; cd /Applications/Install\ OS\ X\ Yosemite.app/Contents/SharedSupport/
Mon 18 Jul 2016 18:53:47 BST
18:53  up 58 mins, 2 users, load averages: 2.81 3.78 3.65
sh-3.2$ shasum InstallESD.dmg ; sw_vers
0e063fd87d5b0a4f68dbd35da95b2018748f88eb  InstallESD.dmg
ProductName:    Mac OS X
ProductVersion: 10.12
BuildVersion:   16A239m
sh-3.2$ 

The discrepancy

0e063fd87d5b0a4f68dbd35da95b2018748f88eb for downloads today and yesterday differs from ef5cc8851b893dbe4bc9a5cf5c648c10450af6bc at https://github.com/drduh/OS-X-Security-and-Privacy-Guide/blob/master/InstallESD_Hashes.csv

[3ji7ja0jb9c]

I suggest we checksum partition/slice, instead of or in addition to InstallESD.dmg container.

[drduh]

I’m also getting 0e063fd87d5b0a4f68dbd35da95b2018748f88eb / 6a2d563b89d4c2733e8ff087c16db0caaa6594375ac835b3110df4306edb2459 for the latest 10.10.5 InstallESD.dmg.

Interestingly enough, each file on the mounted volume is identical, though.

$ diff <(find /Volumes/OS\ X\ Install\ ESD/ -type f -exec shasum -a 256 {} \+ | sed 's%/Volumes/.*/%%') <(find /Volumes/OS\ X\ Install\ ESD\ 1 -type f -exec shasum -a 256 {} \+ | sed 's%/Volumes/.*/%%') ; echo $?
0

More random poking about:

$ stat -f %z *dmg
5718943631
5718940459

$ hdiutil info | grep block
blockcount      : 11760932
blocksize       : 512
blockcount      : 11760932
blocksize       : 512

$ diff <(tail -c 512 InstallESD-latest.dmg | hexdump -C) <(tail -c 512 InstallESD-current.dmg | hexdump -C)
2c2
< 00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 59 71 97  |.............Yq.|
---
> 00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 59 71 9e  |.............Yq.|
9c9
< 000000d0  00 00 00 00 00 00 00 00  00 00 00 01 54 d7 ef 46  |............T..F|
---
> 000000d0  00 00 00 00 00 00 00 00  00 00 00 01 54 d7 ef 4d  |............T..M|

Here is a mysterious Pastebin from February with MD5 sums of both DMGs: http://pastebin.com/CDrPPjsj

I can’t explain the discrepancy at this time.