32-bit
exemachine scopejavadl.oracle.com · publisher domain- SHA-256
- 71a39e1af5d63fc2b98992053f07de7c987ebba4ff2c21440945268d8f074a71
- Silent install
- /s REBOOT=0
- Product code
- {77824AE4-039E-4CA4-87B4-2F32180501F0}
by Oracle Corporation · Proprietary
Java allows you to play online games, chat with people around the world, calculate your mortgage interest, and view images in 3D, just to name a few.
These URLs are the ones Oracle Corporation declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
Run this against the file on disk. If the output does not match the hash below, the file is not what Oracle Corporation published. Delete it.
Windows · PowerShell
Get-FileHash "AutoDL" -Algorithm SHA256macOS · Linux
shasum -a 256 "AutoDL"Expected output
d99eb213b11b84fed4d0ffbb7595c77c7b952035a9025ed062c2d9c95ea22a8e
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 2 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 0 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | ProprietaryA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions Java 8 registers itself to handle.
Every version with a published manifest, newest first. Useful when you need an older build for compatibility.