SHA256 Hashes of known affected versions are:
Added hashes of the known affected version to first post. Hashes can be found below as well:
»www.bleepingcomputer.com ··· 431.html
(Now we need an SHA256 to MD5 converter
So presumably what I had gotten earlier, 1 day prior, is OK.
(It came from Softpedia, though I notified them of this issue so don't know if they're still hosting or not?)