Is this download genuine?
Penguin Trace checks that a file you downloaded is exactly what its publisher released, and that the publisher hasn't withdrawn it. Fake mirrors and tampered installers can't pass.
How it works
- 1Add your downloaded file
It's checked right here in your browser. Nothing is uploaded.
- 2Add the publisher's signature file
A small .json file the publisher offers next to the download.
- 3Get a clear answer
Genuine, changed, or withdrawn by the publisher — with what to do next.
Compare them to see which one is the real release.
Sign your releases so your users can check them, and withdraw a bad release in one step.
Why can't a fake download pass?
Publishers register their identity and every release on the Monad blockchain, a public record nobody can quietly edit. Even if a download site is hacked, attackers can't change that record, so a swapped file or a forged signature is caught.
One honest limit: "genuine" means it really came from the publisher. It isn't a virus scan.