32-bit
nullsoftuser scopegithub.com · known platform- File name
- Motrix-Setup-1.8.19.exe
- SHA-256
- eb8afbda006962da47bf99f5ecc2d73ae2d51f293965ae4ad637acbf55108645
by AGALWOOD · MIT
Motrix is a full-featured download manager that supports downloading HTTP, FTP, BitTorrent, Magnet, etc.
These URLs are the ones AGALWOOD declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
Run this against the file on disk. If the output does not match the hash below, the file is not what AGALWOOD published. Delete it.
Windows · PowerShell
Get-FileHash "Motrix-Setup-1.8.19.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "Motrix-Setup-1.8.19.exe"Expected output
eb8afbda006962da47bf99f5ecc2d73ae2d51f293965ae4ad637acbf55108645
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 1 of 1 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 1 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 29.8 / 35 |
| Served over HTTPS | 1 of 1 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 40 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 3 / 15 |
| Licence declared | MITA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions Motrix registers itself to handle.
The installer comes from a recognised distribution platform rather than AGALWOOD's own domain. That is normal for this kind of software and not a red flag by itself.
The installer on this page comes with the SHA-256 AGALWOOD declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 83/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id agalwood.Motrix --exactUpgrade later
winget upgrade --id agalwood.MotrixWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Motrix, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
DDDFABFA53BF12A0B4CB64D4D59461D14891DAE7E1F97FD9827B6D7EA4FB3B93
CCB8389593C7A8E7C4AF1CF45C42BAC83C7F75541B6FF9A36B7CD40EB5E0D3A3
818D8BF2DAC5B58838DB150BD0EEF02F8CA98D122CA6B4B3810025200E3C792A
171E7E63310FD0EE786F650D69CE6671912CE3A83EF38AD409DB8DAF69869996
9471F093FAA0BE6229D44C65BDC2879CD751C5A656C18F828251A2D916EBC2EE
89626E31EE66769B7E1AEAE11BB4686AD3A7647095213B00DF7104E2934AA7B7
D07050CF2BBBCB23F340AB3CBDAE33D512299A89BF200F9AE93A8C3A8BAD9800
54B5B3D5C7798F39C6EF94F84B3C57E33B0D951DF59828A130D22DFCC29CA402
3983BBA483958A85883C29DAE5B951C0EA1E7FA4E6177E5441B7877DCA005870
85697AC5F851E7D165A111150B2F03C660F4AFD880E4717422DE55947534EE05
EA28B37AD26A5CFF260FC19365B28EBDAAC1179F953D795A6A1AE4326C2AA110
58443B3051224F27C6A82E8ADF9F526376905B0D2A9DBBAB9322244836037CB9
31FA9C6A05C8584A23FC2D63A92E4E021FA2AF6E9148DD0067FDCF66018FF094
11D8984DC17A8C4E424DAA69E84BBA397B033EB5267C3DC728CE49DA447E2336
FA78A33628485DC760840EF648A948327C67B0595951C41C82B0923710210F90
F8EE3D7D1B22E92F11F02E55FEB753715A1DDB6E3B48449D47F08E9425559417
28B4778226F896DA1331A8669C37489B1ABCFD1F1723EA0F953743172B0CBDDC
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Motrix version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories AGALWOOD and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Motrix — just other entries, each with its own official URL and published hash.