32-bit
zipgithub.com · known platform- SHA-256
- 006c5d3e9fe992ed47a2c34806d7a2262e392e2b64e009ccaf965350a07b8109
by Rclone · MIT
Rclone ("rsync for cloud storage") is a command-line program to sync files and directories to and from different cloud storage providers.
These URLs are the ones Rclone declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
Run this against the file on disk. If the output does not match the hash below, the file is not what Rclone published. Delete it.
Windows · PowerShell
Get-FileHash "rclone-v1.74.4-windows-amd64.zip" -Algorithm SHA256macOS · Linux
shasum -a 256 "rclone-v1.74.4-windows-amd64.zip"Expected output
ef097ef9de37a57feb7d9f9c7afb34148ad3c65be8025f1d8f7f521554a701ea
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 3 of 3 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 3 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 29.8 / 35 |
| Served over HTTPS | 3 of 3 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 1 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | MITA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Every version with a published manifest, newest first. Useful when you need an older build for compatibility.