Greenshot

Name: Greenshot
Author: Greenshot

by Greenshot · GPL-3.0

A light-weight screenshot software tool for Windows.

Record

These URLs are the ones Greenshot declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.

innouser scopegithub.com · known platform

innomachine scopegithub.com · known platform

Run this against the file on disk. If the output does not match the hash below, the file is not what Greenshot published. Delete it.

Windows · PowerShell

Get-FileHash "Greenshot-INSTALLER-1.3.315-RELEASE.exe" -Algorithm SHA256

macOS · Linux

shasum -a 256 "Greenshot-INSTALLER-1.3.315-RELEASE.exe"

Expected output

9bb4971e729a2ad1612e8aa2fa490b69c33af7f42515f9b642c7d0f80f8c0fd3

Signal	Finding	Points
SHA-256 hash published	2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built.	30 / 30
Binary provenance	2 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for.	29.8 / 35
Served over HTTPS	2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit.	15 / 15
Release recency	last release about 4 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities.	15 / 15
Licence declared	GPL-3.0A declared licence tells you what you are actually allowed to do with the software.	5 / 5

Extensions Greenshot registers itself to handle.

Every version with a published manifest, newest first. Useful when you need an older build for compatibility.

Windows manifest: github.com/microsoft/winget-pkgs/tree/master/manifests/g/Greenshot/Greenshot/1.3.315