64-bit
innouser scopegithub.com · known platform- File name
- shotcut-win64-26.8.1.exe
- SHA-256
- 98cb37879c178c2eca8218fad94f09c3c4f0c2cfbefc6c920c334cad64d77426
by Meltytech · GPL-3.0
A free, open source, cross-platform video editor.
These URLs are the ones Meltytech declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what Meltytech published. Delete it.
Windows · PowerShell
Get-FileHash "shotcut-win64-26.8.1.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "shotcut-win64-26.8.1.exe"Expected output
98cb37879c178c2eca8218fad94f09c3c4f0c2cfbefc6c920c334cad64d77426
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 2 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 29.8 / 35 |
| Served over HTTPS | 2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 1 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | GPL-3.0A declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions Shotcut registers itself to handle.
The installer comes from a recognised distribution platform rather than Meltytech's own domain. That is normal for this kind of software and not a red flag by itself.
Every one of the 2 installers on this page comes with the SHA-256 Meltytech declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 95/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Meltytech.Shotcut --exactUpgrade later
winget upgrade --id Meltytech.ShotcutWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Shotcut, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
94DAAD5FFCA5D54CDB62B320C19E8FEC05E5E5F7572ED287340135C6416843F3
E680CCBE7E89C920954ED92BC1C52FC2CF31F2733E787015FA794BE92C4AFF03
7A710C3E7AC14BBAB91BC2C96C54B5F906E2183F5264F4CBD65411A1A7943B22
AC3DDD5F5ECB33F7240337660546EB573462AA49C4A67A8F1745362D9C883C04
89A4718748DA6781F27DACD2106B16FAEA19DA7CAA73EC85463630154AF374FF
13C01476EA2183748A4D1EBE773CB897A2F908C4BDDF32374739302780E117CB
CFF8C26FDED1DE97BF2C780547E89926E00CC0EC548180CE007FB178BD54B925
EB19E82AC9E00F61A0BE81EE1F8A0584CA1038036B282ADB375D3BD02C5295E2
69D3DFC93C5A226F539A7FA90D8EC74B8D4230657F7D4F97E15830BE57F951C3
D6DC0177E35809C17FF4282285D25D3562F2EE739CBD2B54F351942CD28F8356
ABEFD24BF3652FDF01CC211128A04A2F702656FB39D58D713C6071C0E17D36DB
75CA827D193DD14EB0C97C8E83438249C7E048F22E208FFCAE5A5F0244CE5847
EFF7FEE65179FD982E0340567FB2E0C28668C8DE6E9D02D927478060E17EC7F1
23C0B1BAF4A4536D2B9973F3DDED9D714AEEAFF5910AD99E00566ECD305FEB54
F59A037ECB9F0FFB65C8F5D4C34611FA9E35016E53118E79E1C4380FF9EF3659
20F50E3E5DEF3111CC597720BFF8F76A509E982A912E121764160AC70C5AA498
D6AC620B04088600541A2EC88FDE2F19E9244C05075936C8F749B1AEB94AA5D5
EAA44221C80D0F27B3E737DECC51EB53CE7AD5E2662FA2247E8FD669971BFA4E
B1B0133B891EECAD466EB10DA91F8BA903096A895EC97EA24E8ECF3497DA3759
6BDA224365874E4E7ED7C75D2141438691E548F6403F8B6E798394DE7F2AC8C8
F3BA46059EEC069834D1DE24A9B720A21A4FCB12E0F30FFA435B2D8593B40584
7DB6040C8E90E86F89EB2F5F506ACE650F098619DD49A2A25CBEDBB16E3F8A13
C5486D2793E1C996EE106EB10202DA3F961B0C53C973E6740FC144244EE84A9C
5B2C3952800885D2EE67D171FB17E70B2B66DBB12BCD2E96FB74194EE84E03F7
82C58EBAA79BC02287098B53C2A52CFBE382C13A6E10C56E31A5356587520D2C
61BF068C6EF4F1AD4A79251FF3A334058B1ED5117ADC4CD5818D8C376836F8C3
CA7893E3B01F72D7AE78F9DFAE12DD407A7B81E2AC4743F2CD6C50D101F39D02
33E77908E10C48B4DEC20DE2869AACA5DAE0E45B0A36072F94A73EB6A2BAE0CA
873797AF5E5C437B372D287EBBA5E299A85437D33D004C89911CE2CB26B3F6E5
E134FCA6D3FED7AF5204010C97AAF113786327D1F0392DBDBE8DC5F1F144F23C
EC88D29FFF824291A80DB253DD3E628B236B301B77C985442981EBCFA50FCADE
6F57E6E7D56E553444E8EA3CA42D1AEBFCCCFDAE04B4E48E5FA9C20BCAB1CFD7
9DCDE3AFB346297735BFABE5DAE8E569FD73A5B2C8DA96ADCA534835230B98AF
90DE5EB9A657AD9C47A93BAEFA46488301CBC3D3526EC9822141DCF5920C52C8
599BDD616F406394F56F6F5607D0EF392EDF807290D1DEEF3B07C8195AEA1E27
The file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Shotcut version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Meltytech and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Shotcut — just other entries, each with its own official URL and published hash.