32-bit
nullsoftmachine scopewww.foobar2000.org · publisher-owned- File name
- foobar2000_v2.25.10.exe
- SHA-256
- 2a9cd51e0b5309c95db578257904ee4a6c59a61167074e9f56e43658c74984d9
- Product code
- foobar2000
by Peter Pawlowski · Freeware
foobar2000 is an advanced freeware audio player for the Windows platform.
These URLs are the ones Peter Pawlowski declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what Peter Pawlowski published. Delete it.
Windows · PowerShell
Get-FileHash "foobar2000-x64_v2.25.10.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "foobar2000-x64_v2.25.10.exe"Expected output
530e6c9db829874bc250af038c1d07f8b42fef61c5dd99f7edcde6393a93ee23
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 3 of 3 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 3 on a domain owned by the publisherThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 3 of 3 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 2 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | FreewareA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions foobar2000 registers itself to handle.
Yes, in the sense we can actually verify: the installer downloads from foobar2000.org, which is a domain we have tied to Peter Pawlowski.
Every one of the 3 installers on this page comes with the SHA-256 Peter Pawlowski declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id PeterPawlowski.foobar2000 --exactUpgrade later
winget upgrade --id PeterPawlowski.foobar2000Why --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of foobar2000, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
28A69EE37C25A3366C5EF5FE499E44A3F02954FACF0FEC151157A6E3F3CD4746
70D365A747BDA8C3B7309FF7BB91A93F40BAB0C19763C8D869031154B37E281B
DECECBD32AC1169D25C6FC8920670473D602E24D5FCD578AE75754A214EB4270
2C43DB069F4E5781036D665B25C86552B7752F488E8B7AC18F6CD650CB0A9B20
E7BA9B6C7D6B080551D239F4A428154F3F2C107FA8576B2AB48DC4B258ED1F9B
6C0902B020C25E682D32969A3193C7C229F66B1DEB9C290EC448A95A908D5A21
8B35EB72D0FBC5F160C5B104CC05B18ECFB9ACEB5DEDF367B8AFF661C8E6A237
AA1EE7808981F26FE48DE4970EAAC063FC22F9D601D725C50DB4E1F7AE3C1E9B
195A10DF3AFFA54558C34B3932D39FE94635A2F16EC31790395FEF182A976D7A
92EDE0CD69D3143200451DF585A44653E760BBB5E7071E5A1AE965CCE1EB8F8B
6DED9549A37DEBD82D91F2784676C2A6AE4F58B923981D14FFFC4367C249D767
5C9BEF59E96D0808CF886E31B9145C65AE6DD0DDB4402E36DF914517B811E032
D66ECAEA79FE2926936D3996759F608B23ECCEE36DD952C1EC5DE3DADA9C85C8
09BB55BFF689F1D5F35128F1F1ED52EE54E5A04B489B8EA73CCC380DD84E80D3
17A298FC56C26D560D0AC043621616E4C54B5392B36E444286D015E2559D2C0F
A5E9B31F067AE04FE745EFC3D1FA15321F56175377FC22C0B7E28728EA94C468
F548A4D2FC772029C7F9BFE972847889B10B2EF941EAF41C7BEC98816C66FDFA
E6BBCD7FD36601599EFB000400D447327156CA1C70156B1EC74289D8B40A0E89
159BF7CB4AB25946C6C538259FD53A7A9E45DE68F18584EAE6E12070A9836BBC
E072C272B315C717283AFF972552EA33D91E68FCFA3CA24DF54962A8A6919B71
2B1863A038D386CE9D81EC7EFE9C0ACB80652435DB56C9598BC1D88E16C1D6F4
8A7DD9172FC2788F914718F8A8E31ABA7D77FCEAFAC15C84D30806A74D964F28
0879B3FA9B15C615C12BEC7B84BD68D79148765C6C5CAB07CAFD60845DE37B03
20541FEB76DD1B715A17037CA69EAE76A54CA25CDD8B70EFC40D07B9341BB6F6
ABC81A54531C2003BEE86BB54022B46A70C6DECB2653D3762C471A6B0193CB14
EBC02734985317DAB5FCC09E46C33CAA2EEDD3ECFEBB940061E1197D3D9C6FAF
82B552A396545CB63F2924F31E272A02C087459DC796F4FBE85077D6312E0238
D6AC280498A4ACA078F20E639AF53B12152077D547696520B65DABAB08B77EB1
17E530AE99564C6C9236B3E6F3531B8CB0FF2FC4FC81F9A0EFA9BE0D64E0701E
17995D11803A6AB1603B8CC22A55134905A631F8A7D98537203485093256D995
C8B4471642A087313FA597BE78038E44A986FFB4B4F2BF31E76C673A64862F7F
658AB5C5798AAA36E848BFBF3E6059861992F81BAD76623366659F79D18F47B9
8BF05B283528E94107FBE4FF42857CF62A394B05CFEB84310F2A2931B3E78815
2FE16444D33B5D6285EE0A3E8D6A8BDDEFAABFAD1F582DB6573B2977DD63362D
C54ACF1E96DAB80CDD274416BFE389B7E62965B69CA5DD69BECD60F618767BDD
CBBE74F24789274085CD460BD4A61C35CD3A0976E91049F7C07B0F8FBDCF7C9C
A168DDE7B10FE840979D0FBE522219047FC86C3689AFC1546C7A6113DF3D9A1C
2D6B35DE509CDC0125B8B515D8108FEB7885751F13A43A01BDAA250BED516F9B
2159301CA75B221FB9B9532871DB106CB4B245A158E28F5C58368840B6876EF4
7A8ED66C0AB2E9ACC16644C8B69638D6A8522AB7B84624BEE86D89B7B5EDB9E3
35C5465221C77D469DDE411C6A5BC1B52509960B554FBF6BA76824A6D5554BD9
2C3CBF745BBD120D5F201D9ED91E9876880E26E2924770E76234855D1C8B2782
046F329DBEA12B4E378A90ED15BDA2D836F4698D158A9A8A9CF315D1CF262C05
139B9932575E8A366BDBFCFA50D0F58D1CD4D6C3931718095CA80AD21FB5AFFD
6FDEF47DD10BEA286BC3C95F2E6D87DC527382D12831ACDDDB0A450F6B35C0C6
7D136CF2502DC557326350B36650FBCE865674638BA506969EDAB3BC6DF8488B
7F804232CF7E053EAF8343FAAD89AE25074BEF238000724477F98823E1A9F13C
EC7A1ADC0CE0BCAB465549CDC5BB593A65CD20E5B56F5CF2E302FFFFB7480B87
8E49C5596BAC73508532970068069BC6B8729DB5BAA1617682134DA824933966
CF4A67C8D5731A2328EB4A81DE40EAD108F9DEC585D5278DF98563CD3653254D
B8C6EDE3B39057170C6252DC660CF5180B06321B64B9774089F205BD3E813F90
216400378526FA927C35F08B8279F847CB3DF5154E7EDAD5B64332D44F4AF6A4
3B4A1F5A99F7040FF235A6A61045FB1877B2E646A6A21A9CEB472A5E606DBD55
FCE2539AFDD7AA96DFFADC27E9CE613C9A0A344C6BDB6E05E0519D23DB1C79A8
DA0E52A15D724C5AA24DA231F440DB8319C85BFE3B06FD1AB1BC4789F8C0AAAD
9BE23DA2B8505180A1F94520DAB6E6A741DBE961520BF4AE1EB6A0E68D1F811D
F948A6A49FF607493D366BB3F334269BC857DD1F5A5E881138A7DE10C2B7171D
E121264116F34072E0DC4B02554774B9CD3BAFBE1E9CFC85FC9C471F9E220888
The file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every foobar2000 version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Peter Pawlowski and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to foobar2000 — just other entries, each with its own official URL and published hash.