32-bit
innomachine scopegithub.com · known platform- File name
- WinMerge-2.16.58-Setup.exe
- SHA-256
- 41e7ca58694f64196691304ca24b96e07598ef205053896d06038ca7f1d5f304
by Thingamahoochie Software · GPL-2.0
WinMerge is an open source differencing and merging tool for Windows.
These URLs are the ones Thingamahoochie Software declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what Thingamahoochie Software published. Delete it.
Windows · PowerShell
Get-FileHash "WinMerge-2.16.58-x64-PerUser-Setup.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "WinMerge-2.16.58-x64-PerUser-Setup.exe"Expected output
7f899b7853af1504bfafcfc7d610851577aeab3198fad0e95528f94af74a73ec
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 4 of 4 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 4 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 29.8 / 35 |
| Served over HTTPS | 4 of 4 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 1 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | GPL-2.0A declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions WinMerge registers itself to handle.
The installer comes from a recognised distribution platform rather than Thingamahoochie Software's own domain. That is normal for this kind of software and not a red flag by itself.
Every one of the 4 installers on this page comes with the SHA-256 Thingamahoochie Software declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 95/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id WinMerge.WinMerge --exactUpgrade later
winget upgrade --id WinMerge.WinMergeWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of WinMerge, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.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 file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every WinMerge version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Thingamahoochie Software and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to WinMerge — just other entries, each with its own official URL and published hash.