Verify Many Tricks’ app downloads

Last change: Sep 23 2021
[Updated: Butler 4.4.4 • Desktop Curtain 3.1.3]

The following table provides a SHA-2 cryptographic hash for each of our apps. Huh? What’s all that gobbledygook mean? Basically, it means you can use these hash values to insure that the app(s) you download from our server match what we uploaded to our server.

How can you check your download? After downloading one of our apps, open Terminal (in Applications > Utilities), type shasum -a 256 and then press the space bar, but don’t press Return. Now drag in the disk image (DMG) you doawnloaded from our site, and press Return. Here’s what you’d see for Butler (version 4.4.4) if you were to do that:

$ shasum -a 256 butler444.dmg 
    84198b4a0fec740d31665817ab0e08f8c5fe3a3c665314828603604b92b8f9a2 butler443.dmg

That big string starting with e1e6231… is the SHA-2 hash, and that’s the value you want to check against the table below. If the string shown in Terminal differs from what’s shown in the table below for the same app, please let us know, and do not install the app!

Main Apps Version SHA-2 Hash
Butler 4.4.4 84198b4a0fec740d31665817ab0e08f8c5fe3a3c665314828603604b92b8f9a2
Desktop Curtain 3.1.3 6e93e1bdaea2facfebf684a172d89918a982bb1d7db7f0ba77cf97caa1294adb
Keymou (Keymo) 1.2.9 784a74b42e08b22e262f4501e8dc0be8ac0e0b1c09d9cde39f7085814562a89c
Leech 3.1.6 7617521fc3e82c92dcd43c89dcf81dcc39b823189a71348ce7ca03aa47f07d74
Menuwhere 2.1 78cd2f9a22cdc98d3121bfbd219e01c7fdea05f335b3f5fdab5c31c27dc1c931
Moom 3.2.23 a78032968be1ce58409f320065b23ccdbb48f621cb4b50e3abe80bcc9491e871
Name Mangler 3.7.3 c6550a1d5663f07f5b20e5dcae982e4070c88db0998263992a45c57d6f175a8c
Resolutionator 2.1 3318c5754f935b3e052ff5c20ef33d90896b14149c367404b89bcd9e26810645
Time Sink 2.2.2 365269b458eec66cc4512e6f8d3889079816b51b8314a56b9f8d9fde844d671a
Usher 1.1.17 304c406d9034d83ab8983cebdaed3994ee13791069e1af9dce2590a14af1c3af
Usher 2 2.1 1879872e73e360bfe5d8e64050782848ad81273eeef7c99bc0f56da89e2a778c
Witch 4.4.3 44bb97aaac272d1d780c7fc8aaaa9492ad5ee51de193208399ed1bb12737680a
Baubleries Version SHA-2 Hash
Crossgrade Assistant 1.1 a8c6bad2d87541a215d8bf266ac98e064dfc864964958f3ebf184a73eaad959c
Displaperture 2.1 dfb31b4b72bb498fc27b9431074ec789c1e712ab60b238360ef472806822d5a7
Key Codes 2.2.1 a25901003045ab9079af9d91d2596602009ebe79750519add766689b4e5c0d54
Menu Bar Tint 2.1 10097a3981eabcef0355d8dc8b222024dbaf403abc4a4d9a859341d18ffef8ad
Open-With Manager 0.9.2 1cedc9a11488f704e67261483f3ac2b52039e701931133d4d0fd431024c00c62
Safari Guardian 1.2.2 cbe6588f8407eae91015378f5d02c8a2ba19cf13c37f888a892c8f39fc268a72
Service Scrubber 1.1.5 4377717775344b7ac99a577813e2ed328e0b7c283d5a43799bbf41f7537b20ea

Note: If you would like to verify an older version of any of our apps, please contact us with the app name and version number, and we’ll send you the SHA-2 hash.

SHA-2 hashes are long and complicated, so comparing them can be a bit of a pain. Here’s a way to make the task simpler. Assuming you’ve already downloaded an app, copy (double-click the hash then press Command-C) that app’s hash value from the above table.

Next, in Terminal, type expr `shasum -a 256 and press the space bar. Drag in the downloaded DMG file, which will add its complete path to what you’ve typed. Press the space bar again, then type (or paste) | cut -d ' ' -f 1` =. Finally, press the space bar once more, then press Command-V to paste your copied value. The final command will look something like this (for Moom 3.2.6):

expr `shasum -a 256 moom326.dmg | cut -d ' ' -f 1` = 482dd69788ac707f13483631eae5aaef7fcc356b688d51e359a3b69fc531a143

When you press Return, the output will either be 0 or 1. If it’s 1, all is fine—the above command compares the two values, and if they’re the same, it returns 1. But if you get a 0 as the returned value, then the hashes disagree. Please do not install the app you downloaded, and contact us immediately.

This table will be updated each time we update any of our apps.

Comments are closed.