32-bit
nullsoftmachine scopewww.foobar2000.org · publisher-owned- SHA-256
- 2a9cd51e0b5309c95db578257904ee4a6c59a61167074e9f56e43658c74984d9
- Product code
- foobar2000
by Peter Pawlowski · Freeware
foobar2000 is an advanced freeware audio player for the Windows platform.
These URLs are the ones Peter Pawlowski declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
Run this against the file on disk. If the output does not match the hash below, the file is not what Peter Pawlowski published. Delete it.
Windows · PowerShell
Get-FileHash "foobar2000-x64_v2.25.10.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "foobar2000-x64_v2.25.10.exe"Expected output
530e6c9db829874bc250af038c1d07f8b42fef61c5dd99f7edcde6393a93ee23
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 3 of 3 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 3 on a domain owned by the publisherThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 3 of 3 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 1 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | FreewareA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions foobar2000 registers itself to handle.
Every version with a published manifest, newest first. Useful when you need an older build for compatibility.