V4.4 update/setup file (MBSetup.exe) hashes

[Steve1982]

Hi there!

Can a Malwarebytes staff member please be so kind as to post the SHA1 or SHA256 hashes of the latest MBSetup.exe file? Looks like it's v4.4.0.220.

I want to verify the file hashes before I accept the UAC prompt and continue updating my v4.3 install to v4.4. Thank you!

[Malwarebytes]

***This is an automated reply***

Hi,

Thanks for posting in the Malwarebytes for Windows Help forum.

If you are having technical issues with our Windows product, please do the following:

Malwarebytes Support Tool - Advanced Options

This feature is designed for the following reasons:

• For use when you are on the forums and need to provide logs for assistance
• For use when you don't need or want to create a ticket with Malwarebytes
• For use when you want to perform local troubleshooting on your own

How to use the Advanced Options:

Spoiler

1. Download Malwarebytes Support Tool
2. Double-click mb-support-X.X.X.XXXX.exe to run the program
   • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
3. Place a checkmark next to Accept License Agreement and click Next
4. Navigate to the Advanced tab
5. The Advanced menu page contains four categories:
   • Gather Logs: Collects troubleshooting information from the computer. As part of this process, Farbar Recovery Scan Tool (FRST) is run to perform a complete diagnosis. The information is saved to a file on the Desktop named mbst-grab-results.zip and can be added as an email attachment or uploaded to a forum post to assist with troubleshooting the issue at hand.
   • Clean: Performs an automated uninstallation of all Malwarebytes products installed to the computer and prompts to install the latest version of Malwarebytes for Windows afterwards. The Premium license key is backed up and reinstated. All user configurations and other data are removed. This process requires a reboot.
   •  Repair System: Includes various system-related repairs in case a Windows service is not functioning correctly that Malwarebytes for Windows is dependent on. It is not recommended to use any Repair System options unless instructed by a Malwarebytes Support agent.
   • Anonymously help the community by providing usage and threat statistics: Unchecking this option will prevent Malwarebytes Support Tool from sending anonymous telemetry data on usage of the program.
6. To provide logs for review click the Gather Logs button
7. Upon completion, click OK
8. A file named mbst-grab-results.zip will be saved to your Desktop
9. Please attach the file in your next reply.
10. To uninstall all Malwarebytes Products, click the Clean button.
11. Click the Yes button to proceed. 
12. Save all your work and click OK when you are ready to reboot.
13. After the reboot, you will have the option to re-install the latest version of Malwarebytes for Windows.
14. Select Yes to install Malwarebytes.
15. Malwarebytes for Windows will open once the installation completes successfully.

Screenshots:

Spoiler

 

 

 

 

Spoiler

 

 

 

 

If you are having licensing issues, please do the following: 

Spoiler

For any of these issues:

• Renewals
• Refunds (including double billing)
• Cancellations
• Update Billing Info
• Multiple Transactions
• Consumer Purchases
• Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/hc/en-us/requests/new to get help

If you need help looking up your license details, please head here: Find my premium license key

 

 

Thanks in advance for your patience.

-The Malwarebytes Forum Team

[Porthos]

40 minutes ago, Steve1982 said:

I want to verify the file hashes before I accept the UAC prompt and continue updating my v4.3 install to v4.4. Thank you!

That version is correct. The built in MB updater will not allow fake upgrades.

[1PW]

Hello @Steve1982:

Welcome back!  Long ago, I too would have liked to read timely published hashes for downloads. Like you, the industry's ongoing concern for the highest achievable download integrity is shared by many professionals and consumers. But Malwarebytes still has obviously committed to the use of digital signing/counter signing supplemented with the X.509 certificate methodologies.

If you would still prefer additional personal assurances and choose to compare with the still viable SHA cryptographic checksums, please reconsider the continued use of VirusTotal.com details report with other standalone hash calculator utilities and thus independently judge your download's integrity:

Reference: https://www.virustotal.com/gui/file/8307ce702f7b0ab96fb1b65b058439b6ef3cdcda6bb71e7072a09fcddae38e71/details

Thank you.

[Steve1982]

Hi @1PW 

Nice chatting to you again and thank you for the link to the VirusTotal scan with the hashes, much appreciated!

I still use VirusTotal to scan files but file hashes published by the vendor help verify chain of custody. Signing certificates are great but basically has the same problem. You still need to verify the details of the certificate (not the somewhat useless CN but the SHA256 fingerprint, etc.) to ensure chain of custody since it's increasingly common for malware to be signed.

BTW, I wrote a PowerShell script (see screenshot) that extracts the signer and counter signer certificates of the new file to a known, verified copy of the previous version and compares them to each other. That's when I noticed that the file was countersigned by a new company that I'm not really familiar with, hence my hesitation and decision to ask on the forum what the file hashes were to put my mind at ease. Better safe than sorry! 😄

[AdvancedSetup]

Interesting, can you share that PowerShell script? @Steve1982