64-bit
nullsoftuser scopemirrors.kodi.tv · publisher domain- File name
- kodi-21.3-Omega-x64.exe
- SHA-256
- 2c46c2bd60b38bb60eb0a5e3468bfd43e9235521eae2910b8c81455e46335c5c
by XBMC Foundation · GPL-2.0-or-later
A free and feature-rich media center for various operating systems, consoles and TVs. With Kodi you can manage and play movies, photos and music.
These URLs are the ones XBMC Foundation declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what XBMC Foundation published. Delete it.
Windows · PowerShell
Get-FileHash "kodi-21.3-Omega-x64.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "kodi-21.3-Omega-x64.exe"Expected output
2c46c2bd60b38bb60eb0a5e3468bfd43e9235521eae2910b8c81455e46335c5c
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 2 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 9 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 11 / 15 |
| Licence declared | GPL-2.0-or-laterA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Yes, in the sense we can actually verify: the installer downloads from kodi.tv, which is a domain we have tied to XBMC Foundation.
Every one of the 2 installers on this page comes with the SHA-256 XBMC Foundation declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 96/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id XBMCFoundation.Kodi --exactUpgrade later
winget upgrade --id XBMCFoundation.KodiWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Kodi, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.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 file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Kodi version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories XBMC Foundation and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Kodi — just other entries, each with its own official URL and published hash.