64-bit
zipgithub.com · publisher domain- File name
- cemu-2.6-windows-x64.zip
- SHA-256
- a6bcc2bc42a362d10213819948f3152fae7d47f70067f25939b51d3ddcfb0896
by Cemu · MPL-2.0
Nintendo Wii U Emulator
These URLs are the ones Cemu declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
Run this against the file on disk. If the output does not match the hash below, the file is not what Cemu published. Delete it.
Windows · PowerShell
Get-FileHash "cemu-2.6-windows-x64.zip" -Algorithm SHA256macOS · Linux
shasum -a 256 "cemu-2.6-windows-x64.zip"Expected output
a6bcc2bc42a362d10213819948f3152fae7d47f70067f25939b51d3ddcfb0896
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 1 of 1 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 1 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 1 of 1 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 19 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 7 / 15 |
| Licence declared | MPL-2.0A declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Yes, in the sense we can actually verify: the installer downloads from github.com, which is a domain we have tied to Cemu.
The installer on this page comes with the SHA-256 Cemu declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 92/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Cemu.Cemu --exactUpgrade later
winget upgrade --id Cemu.CemuWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Cemu, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
73221D437176903AF317F5D67B16374D3E4485ED6AE5B3A976D26BE69E3F15AB
6B688E6896F83E0A95BAA36C87B31CBAA0F2BB962929A0DA86E9D50DFBAC6C5D
5F5D1CC74ECFC0977B79ACE46DA7A007E0D45C2CE4EE7B52A34CBEFB4E191161
1714873D2CEE992075F006AAA8372CD5532632385AEF4920973DE6E22F5D8EE1
25EFF2E6F410BE792A5EFBB554BBEF565C8BE2C4344C6DC028BC8F6FE357AE0A
660A5461333C9EECAD3065C4C3E891E6C362F6DF05C5E18FC4C36E3D806B6CA4
B0E3ABF5048F78E352B42C3E1660A2C6E85D6905CD9F60D06CA2F2318FA3152C
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Cemu version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Cemu and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Cemu — just other entries, each with its own official URL and published hash.