Glasswire's SHA-256 hash doesn't match the one listed on their website

[Trident]

Putting the tracking info into installers is common practice.

Is this what they use to store license information, for example when you download an AV that skips the activation step?

 

[struppigel]

Possibly. In this case it is only browser info.

 

[artek]

Possibly. In this case it is only browser info.

That makes sense but I'm getting different hashes with the same browser, same machine, etc., depending on the day I've downloaded them.

 

[Trident]

That makes sense but I'm getting different hashes with the same browser, same machine, etc., depending on the day I've downloaded them.

The ga_client_id is a variable. They use cookies to assign this value and append the data Struppigel displayed at the end of the installer. If you’ve cleared the cookies or if you are using anti-tracking software, it’s possible that the ga_client_id will change and from there, the whole hash will be different.
In addition, these cookies may only be valid for certain period of time.

I tried clearing my cookies and the variable changed, a totally different client ID was generated.

 

[Freki123]

Struppigel nailed it. They do utm tagging on the frontpage downloads and if you want the installer that matches the checksum get it from the change list page.

Spoiler: GW Forum

Glasswire install file not digitally signed and hash doesn't match

Hi all, The version which is available to download from the main page is patched with utm tags. The original installer is available at the change list page and its hash is equal to the one we publish. Best, Katie

forum.glasswire.com

 

[a090]

Can confirm. The latest installer on the GlassWire Change Log list (not the main download page) is indeed signed, and the SHA-256 hash matches up correctly.

Mystery solved. And boy was it a doozy. Those GW devs really wanted things to look a bit shady. They’re marketing a product to security conscious and IT-literate users, and expect them not to match up the hash?

 

[Trident]

They do utm tagging

Where did you see the UTM tag?

 

[a090]

Where did you see the UTM tag?

From: Glasswire install file not digitally signed and hash doesn't match
Glasswire install file not digitally signed and hash doesn't match

 

[Trident]

View attachment 274450

From: Glasswire install file not digitally signed and hash doesn't match
Glasswire install file not digitally signed and hash doesn't match

I must have missed the UTM part of the tag.

Edit: no, it’s not a UTM tag, just a referrer tag.