64-bit
zipgithub.com · known platform- File name
- ffmpeg-9.0-full_build.zip
- SHA-256
- f42f0c4b04eae3ac918707ff66e3e0ff0cee527bfa6d322624d4bc1160d5055e
by Gyan · GPL-3.0
A complete, cross-platform solution to record, convert and stream audio and video.
These URLs are the ones Gyan declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
Run this against the file on disk. If the output does not match the hash below, the file is not what Gyan published. Delete it.
Windows · PowerShell
Get-FileHash "ffmpeg-9.0-full_build.zip" -Algorithm SHA256macOS · Linux
shasum -a 256 "ffmpeg-9.0-full_build.zip"Expected output
f42f0c4b04eae3ac918707ff66e3e0ff0cee527bfa6d322624d4bc1160d5055e
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 1 of 1 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 1 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 29.8 / 35 |
| Served over HTTPS | 1 of 1 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 0 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | GPL-3.0A declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
The installer comes from a recognised distribution platform rather than Gyan's own domain. That is normal for this kind of software and not a red flag by itself.
The installer on this page comes with the SHA-256 Gyan declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 95/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Gyan.FFmpeg --exactUpgrade later
winget upgrade --id Gyan.FFmpegWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of FFmpeg, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
B8CDEFAB5F50590A076C27C2B56B0294A0E6154FADED28BA1BA05EBC4F801F57
49B28C5F16ADDD40239A66949973458769B7056FB7752C30AC0D53389D09A552
587B1C37DE29C5003D01CF65DA10001BAC43A58B88E61AF0FC77C61DAFF04761
467CDE100A47ED4B03A897988AEB4A296890C1E2B2D2864204657D002BC5FB90
48CA5E824D2660A94F89FD55287B7C35129B55BBE680C4330EFEED5269C4820F
D760E1B3574402ED18B4865851F87D87E73965A982E6453212DF8621FED1C508
FA074A46B7BB862E37AA27CCD0522D22A1FE90AEC3A950C8E0C0C8622E0A03D1
0AA623FEEC95066839DB4125679CD04D4A8FC1039ED8877ACCA9826113E42768
A69AD4E55E7608DB31F265C334EBD16D6DF013F094777E5814F1AC3C223B0A90
A162D801BC2A7859E64BDA8146D336BE33243556B43BACFBE84749CD06A31417
3537631E7E6261987BA01053D52198AEB020F29619F7D8E3E453048B7146B442
B39C5A040AECB343E079E6E33AB0360832B9F0C8369C82DC4B7C825E558DFE24
F5DF7A970919AA0DF2A4F6DF4EF0BBE85E6B7C41D343556E7210837A63B3133C
1F4056C147694228FDDAEB925083338E35D952E4B65E3BD3C5A0A2C13C7800D6
316C70A5314B106FB33B6A9C8FFDFCF08C890CC037CDAFF2F1207E36F9E21057
711CBA3F68D3DE4138A487B5E6AB6313081C1BB1F3FD0AA0709E5BAE30099B00
7FC64FBEB56766F67B4A26F54ED47661A9433DBA0D0BB6CD35B2DF7EDDC34378
BC9E176F3D66075B5F8B4735100F5B1E5389B82E058ADC449D02A1D33065FA08
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every FFmpeg version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Gyan and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to FFmpeg — just other entries, each with its own official URL and published hash.