Ghidra: Hash mismatch

[danzek]

The main Ghidra website shows the following SHA-256 hash for the zip file:

3b65d29024b9decdbb1148b12fe87bcb7f3a6a56ff38475f5dc9dd1cfc7fd6b2  ghidra_9.0_PUBLIC_20190228.zip

However, the actual SHA256 sum is:

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  ghidra_9.0_PUBLIC_20190228.zip

Has the file download been compromised in some way, or is the hash just wrong?

[cwgreene]

I just downloaded the package and it yielded 3b65d29024b9decdbb1148b12fe87bcb7f3a6a56ff38475f5dc9dd1cfc7fd6b2. I also ran sha256sum on a copy I ran yesterday. Can you put your version somewhere?

$ sha256sum ghidra_9.0_PUBLIC_20190228.zip 
3b65d29024b9decdbb1148b12fe87bcb7f3a6a56ff38475f5dc9dd1cfc7fd6b2  ghidra_9.0_PUBLIC_20190228.zip

[jdillard]

I just downloaded it and got the same as what the website says:

shasum -a 256 ghidra_9.0_PUBLIC_20190228.zip
3b65d29024b9decdbb1148b12fe87bcb7f3a6a56ff38475f5dc9dd1cfc7fd6b2  ghidra_9.0_PUBLIC_20190228.zip

[cwgreene]

Well that's exciting; hold onto your magic zip. :)

[ctubbsii]

The download matches the checksum on the website for me. Perhaps your copy got corrupted somehow. Have you tried downloading with a different browser?

[danzek]

I re-downloaded and got the right one, weird. Confirmed I cannot even unzip what was downloaded. Must've been a fluke/corrupt download.

[danzek]

@ctubbsii yeah I used a different browser (Safari instead of Firefox loaded with plugins that block a bunch of things). So I'd consider this closed. Was just a corrupt download, file size not even correct and was a corrupt zip file.