64-bit
exemachine scopedl.google.com · publisher domain- File name
- setup.exe
- SHA-256
- e3cf3a5dda289d8eef5fe22c920db59ff936968d9b7b7ffafceba90bf9cb8464
- Silent install
- --silent --skip_launch_new --gsuite_shortcuts=false
by Google LLC · Proprietary
Safely store your files and access them from any device.
These URLs are the ones Google LLC declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
Run this against the file on disk. If the output does not match the hash below, the file is not what Google LLC published. Delete it.
Windows · PowerShell
Get-FileHash "setup.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "setup.exe"Expected output
e3cf3a5dda289d8eef5fe22c920db59ff936968d9b7b7ffafceba90bf9cb8464
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The unattended switch below is the one Google LLC declares in the installer manifest, not one we guessed by trying flags.
64-bit · machine scope · publisher-declared
.\setup.exe --silent --skip_launch_new --gsuite_shortcuts=falseRun it from the folder holding the downloaded file, in a terminal opened as administrator when the package installs for all users. Silent means no window and no prompts, so check the exit code rather than waiting for something to appear: 0 is success and 3010 means it worked but wants a reboot.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 1 of 1 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 1 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 1 of 1 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 1 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | ProprietaryA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Yes, in the sense we can actually verify: the installer downloads from google.com, which is a domain we have tied to Google LLC.
The installer on this page comes with the SHA-256 Google LLC declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Google.GoogleDrive --exactUpgrade later
winget upgrade --id Google.GoogleDriveWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Google Drive, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
5C91B43D1D6F64A98F034FBEFD4A7656C4C76EF6A1F4DDB23BB5E5A5E9EC53B0
215CDF6F01D1DDC1DA64210E4CBAC71515D33E88C7C45742FEF5B230E180B94D
A3C045AB377BD70DA0D9EED15614D50635467D2B30E3333FB32A5919D9300AE2
B8FFFC8035F4A6ABF8D7650DA0CF9F73ED474C161F3B577464D8DD87A86482A6
C770D2DD4A81182E41E0E134162C5393663F359C638A7DF5E247CF5D1FD72AD7
97B68598375724779C966A3C13223819C1EE40309CD1973D0CFEA7744796C1A7
B88052DD0D83664EE8F4002A16D3D8DB8228E82C92B7BB5DD6E764A77883D4FB
BC38221B1DF73624F877EA640D702285B08389259E73CA1862B88412D396AFEF
1799229D3A335DFF0E8CDE1775286BE4CF1B5C45BAE6B4589ACB87955E9BC012
832E9098819EA31CCFD33A5B5F6AD7E8827EACDECCA827F56126E5CB0467F2CC
E1BA0786B96C4EFA2DA2226C5D5E12ED650A8618B07C35473B0C05C97C1F96C6
BCC48DE9E2FFCD4DE1AE0E18C926100C81EF5F4B279DE00595C1C0A16B99C95B
5741E2D046554906B923257B8922D7109E5AC879C9FB6C376C988A5126AE90AE
2605948B6782CD2EA4A6927C28DEBBDD5AA56591B442381F2A66EC1439EA5CD5
46E9C74670DA4D70F66A60C5A6E00B3EE8F6698FF9431CD725D4695AE47D7E27
A7E063A85B476364DD21F2E731F440367640BC796D779EAA3C39E6C48132654A
51D92EA4ECCDAD19EC8E4BE31A342A4D6646111FF7732EF60EA7595E3EFCF919
09C5742741E21153172C68B146ADD6C8373054C9675D17C617132861A57B7B44
088F7D055FCEBBAB4CDAD8AF5BD65E3D9FA626C068F000544DAF70C091216F50
AFD3DF6A691DDFB715311B51A51589E4535F35080AABF0F6AFA52F6E576821E9
The file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Google Drive version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Google LLC and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Google Drive — just other entries, each with its own official URL and published hash.