64-bit
nullsoftuser scopemirrors.kodi.tv · publisher domain- SHA-256
- 2c46c2bd60b38bb60eb0a5e3468bfd43e9235521eae2910b8c81455e46335c5c
by XBMC Foundation · GPL-2.0-or-later
A free and feature-rich media center for various operating systems, consoles and TVs. With Kodi you can manage and play movies, photos and music.
These URLs are the ones XBMC Foundation declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
Run this against the file on disk. If the output does not match the hash below, the file is not what XBMC Foundation published. Delete it.
Windows · PowerShell
Get-FileHash "kodi-21.3-Omega-x64.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "kodi-21.3-Omega-x64.exe"Expected output
2c46c2bd60b38bb60eb0a5e3468bfd43e9235521eae2910b8c81455e46335c5c
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 2 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 8 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 11 / 15 |
| Licence declared | GPL-2.0-or-laterA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Every version with a published manifest, newest first. Useful when you need an older build for compatibility.