What would happen if you downloaded new software, and confirmed that the MD5 value does not match the site? What steps would you take to resolve this issue?

Please respond to the following:
When you download software from the Internet, why is it important to verify the MD5 hash value? In a few sentences, describe some first and important steps you would use to verify a MD5 checksum of downloaded software. Are there tools built into the operating system that will check the MD5 sum? Can you recommend a website with MD5 checkers as a potential resource? Share with your classmates, and provide links to any useful resource you find.
(Note: For citing Internet sources in your discussion, please see the Web Sources section of the Strayer Writing Standards guide available in the left-hand menu.)
What would happen if you downloaded new software, and confirmed that the MD5 value does not match the site? What steps would you take to resolve this issue?
After reading a few classmate postings, reply to the ones where you learned something new or have something to add. Get in early to post your initial and keep the discussion going.

Respond to classmate in separate paragraph:

Jonathan Juarez
RE: Week 2 Discussion
Hello,
hash values comes from using cryptography to prove the file’s integrity. Verfying the checksum ensures that the contents of the file have not been altered. The hash is generated by the bits of the file and is unique. Therefore if altered when generating another hash to verify the integrity, the values will not match up. If you are downloading a file and the hash values listed on the site does not match what hash you generated, then the content has been altered. I would reach out the site/support and inform them. It may be a case of updating the file but not updating the hash or some malicious activity going on.
In windows, certutil is a cli command that allows you check the md5 of a file. For checking the md5 you would run certutil [options] -hashfile infile [hashalgorithm]. I know it is not within the discussion question scope. But 7zip also allows you to check the CRC32/CRC-64 and SHA-1/SHA-256. I don’t know if they extended it to check the MD5 hash or not.
One problem that came to mind I am hoping someone can help is, the file is compressed in a zip file first, how can I check the hash value without extracting the contents.

Thanks,
Jonathan
Sources:
https://www.redhat.com/sysadmin/hashing-checksums
https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/certutil#-hashfile
https://www.7-zip.org/7z.html

Last Completed Projects