64-bit
innouser scopegithub.com · known platform- File name
- Git-2.55.0.3-64-bit.exe
- SHA-256
- af12577d0fdff74243a5988197aa49b957d5044edc17004f6ddf0768996f1dca
- Silent install
- /SP- /VERYSILENT /SUPPRESSMSGBOXES /NORESTART
by The Git Development Community · GPL-2.0
A free and open source distributed version control system
The file people search for by name is the 64-bit standalone installer, and its filename carries the version, which is why searches like git-2.55.0.3-64-bit.exe land here. There is also a portable build that needs no installation at all.
The standalone installer is the normal choice: it sets up Git, Git Bash and the credential helper, and registers everything for you. The portable archive runs from a folder and touches nothing, which is what you want on a machine you do not administer.
Every release is published on GitHub with its hash, so verifying the download is straightforward and worth doing for a tool that will hold your credentials.
The installer asks how to handle line endings and the default, checkout as CRLF and commit as LF, is right for most Windows users working with cross-platform repositories. Picking "as-is" instead is how you end up with a diff where every line changed and nobody can review it.
The default is Vim, which is a genuinely bad surprise mid-commit if you have never used it. Change it during setup to whatever you actually use, or you will be looking up how to quit an editor at the worst moment.
These URLs are the ones The Git Development Community declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what The Git Development Community published. Delete it.
Windows · PowerShell
Get-FileHash "Git-2.55.0.3-64-bit.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "Git-2.55.0.3-64-bit.exe"Expected output
af12577d0fdff74243a5988197aa49b957d5044edc17004f6ddf0768996f1dca
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The unattended switch below is the one The Git Development Community declares in the installer manifest, not one we guessed by trying flags.
64-bit · user scope · publisher-declared
.\Git-2.55.0.3-64-bit.exe /SP- /VERYSILENT /SUPPRESSMSGBOXES /NORESTARTARM64 · user scope · publisher-declared
.\Git-2.55.0.3-arm64.exe /SP- /VERYSILENT /SUPPRESSMSGBOXES /NORESTARTRun it from the folder holding the downloaded file, in a terminal opened as administrator when the package installs for all users. Silent means no window and no prompts, so check the exit code rather than waiting for something to appear: 0 is success and 3010 means it worked but wants a reboot.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 2 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 29.8 / 35 |
| Served over HTTPS | 2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 1 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | GPL-2.0A declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions Git registers itself to handle.
The installer comes from a recognised distribution platform rather than The Git Development Community's own domain. That is normal for this kind of software and not a red flag by itself.
Every one of the 2 installers on this page comes with the SHA-256 The Git Development Community declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 95/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Git.Git --exactUpgrade later
winget upgrade --id Git.GitWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Git, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.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 file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Git version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories The Git Development Community and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Git — just other entries, each with its own official URL and published hash.