32-bit
exeuser scopeoneclient.sfx.ms · publisher-owned- File name
- OneDriveSetup.exe
- SHA-256
- 0561784467f27a68a5fb46bb879dc4560c695ad5df0bb454ced18b835b2ce53e
- Silent install
- /silent
by Microsoft Corporation · Proprietary
Keep your files and memories protected, up to date, and easily accessible across all your devices.
These URLs are the ones Microsoft Corporation declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what Microsoft Corporation published. Delete it.
Windows · PowerShell
Get-FileHash "OneDriveSetup.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "OneDriveSetup.exe"Expected output
8fa27c88c31666457837794c64237d5b2216ca96c8f03ca154dc8dc2d9979578
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The unattended switch below is the one Microsoft Corporation declares in the installer manifest, not one we guessed by trying flags.
32-bit · user scope · publisher-declared
.\OneDriveSetup.exe /silentRun it from the folder holding the downloaded file, in a terminal opened as administrator when the package installs for all users. Silent means no window and no prompts, so check the exit code rather than waiting for something to appear: 0 is success and 3010 means it worked but wants a reboot.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 3 of 3 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 3 on a domain owned by the publisherThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 3 of 3 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 0 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | ProprietaryA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Yes, in the sense we can actually verify: the installer downloads from sfx.ms, which is a domain we have tied to Microsoft Corporation.
Every one of the 3 installers on this page comes with the SHA-256 Microsoft Corporation declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Microsoft.OneDrive --exactUpgrade later
winget upgrade --id Microsoft.OneDriveWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Microsoft OneDrive, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.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 file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Microsoft OneDrive version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Microsoft Corporation and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Microsoft OneDrive — just other entries, each with its own official URL and published hash.