32-bit
zipmachine scopegithub.com · known platform- SHA-256
- a1d190140f231981c843704f7376fe7108de5f3f33ba379d42e5e257cf821e4a
- Product code
- {903D098F-DD50-4342-AD23-DA868FCA3126}_is1
by MPC-BE Team · GPL-3.0
Media Player Classic - BE is a free and open source audio and video player for Windows.
These URLs are the ones MPC-BE Team declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
Run this against the file on disk. If the output does not match the hash below, the file is not what MPC-BE Team published. Delete it.
Windows · PowerShell
Get-FileHash "MPC-BE.1.9.0.x64-installer.zip" -Algorithm SHA256macOS · Linux
shasum -a 256 "MPC-BE.1.9.0.x64-installer.zip"Expected output
57ed059f3602c281fae2092349f7dc5bda40bdbba287cd05365fad851a7d7db0
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 2 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 29.8 / 35 |
| Served over HTTPS | 2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 1 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | GPL-3.0A declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions MPC-BE registers itself to handle.
Every version with a published manifest, newest first. Useful when you need an older build for compatibility.