64-bit
innomachine scopedownload.xnview.com · publisher domain- File name
- XnView_MP-1.11.5-win-x64.exe
- SHA-256
- 4ebdcb6d87f5bfc21ed31e70f88515701fe8e489148555c36c6bd4e4ea2ec5f7
- Product code
- XnView MP (x64)_is1
by Pierre-e Gougelet · Proprietary
Professional Image Viewer & Photo Management
These URLs are the ones Pierre-e Gougelet declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
Run this against the file on disk. If the output does not match the hash below, the file is not what Pierre-e Gougelet published. Delete it.
Windows · PowerShell
Get-FileHash "XnView_MP-1.11.5-win-x64.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "XnView_MP-1.11.5-win-x64.exe"Expected output
4ebdcb6d87f5bfc21ed31e70f88515701fe8e489148555c36c6bd4e4ea2ec5f7
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 2 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Licence declared | ProprietaryA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions XnView MP registers itself to handle.
Yes, in the sense we can actually verify: the installer downloads from xnview.com, which is a domain we have tied to Pierre-e Gougelet.
Every one of the 2 installers on this page comes with the SHA-256 Pierre-e Gougelet declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id XnSoft.XnViewMP --exactUpgrade later
winget upgrade --id XnSoft.XnViewMPWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of XnView MP, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
A3C362DF7D1589D1E1CEE4CDAC052E86479F4152CAFE3E10ACC9D58AAFC00991
D7075F89BC87FB4DA2A3A71AF28DFA9B3A09AF77F059392403CC5AB6D39C3B04
B98DE5AD8B3D02E9D92496420CC290196540970B8A8FEFA1B0394B129A31E594
312D0CD24AC9130B929D71222D884C9ECE33AE2E71A4FE2CDCDB923B0A85BEAE
D8BC7521D00E5C825829AEF5EFBD57103D6267EE0FA792D639DEADCBE2E2914A
AD75D8F7D0EC3CEDF3C990CE6563ABFBCDFE245F886DF3CFA5F3CA8F98194444
AEFE30E67EB63B3C8A2035DD8DC57B03E2E4363976BAF5D2BBDC880EB1D3A5F1
110BE647646D7B81E2F1538CBD47EA27659FEFBA99112962DE2186ABB0E11422
01E20C8890F4A1E9F05998232E41BD2ABB97CCE0C27A3D72280DAD0C1D0303FD
7A435DD206F2520838BEBDBA3C83A36D2C8CDB8D2D284CA69BBED1E1841024F2
055833036771A4DD8C8DA9BC127A3CBE341A87B6769EF245F6664A1F98F23A6E
04F11F54B351F1A7D117FE655E3D94F2DDC68A1427C5FB05A9FF7D4D7923049D
6D7B7B41C17402EB5A29CA920E2A59561580149DB5B2BD4852F71F3BE3060600
C85D12992480BDB87D4CFA67DEBB7DE4E289315A6B337FAADF6F84C67497D361
F64A10A1681F10DF2B6878C10E36FDAE2961029B373DB388B32903560C562616
3AB05C82648B50BF19D569535853AC6467BC065BC9D63EEC7D9B457782983106
388A724C5E7C85FFE9DDE71CF17746ADE420B6F8652950C2FDCB90CCCA91EAEE
F46C40452E1980F4E49BB5AEDB2C86DD5FA799603D2311D868D28D17B1E72551
B1CFF97C5815FC3D63B1A64845CA1ECE4D255A3A8456AC927D555A74820344F7
626A981E21B92CF706E842F87E14ACFBD1647B2C45DF4E1304576A68694255EB
89F33F310779717A6117B321469B5303C0D2AE1E878854F67B2212DC7F022558
0F528E52964305F36D8C4C9D7438E802AC2E9D18859A9E784427BF8988A61C67
E0B2B3A6975E5E1F7E2819AA8BFE2E2CADBE9498C1E68B5947681FF8EC4B42A9
400DF70A512AD1E9AD99411D887ABEBAE94C782B024342508D3FAB93740EDD28
3FCEB2BC0C8A3F4F3D99186AF215067088D191CEACAFE98F794453E3025B8F94
58F5CB12F7EB3F7D86E6D5961703BFB8CE69223B43F8AB64379F839930929FF6
31F8AA19C70954E09100A7D7AAA6E71A96CBA44AED67955D0D982AD5C41BE033
42FA88644A8BE6141FBD6201532A23CD4C9208441C43D7E3F0AA1EA4CEB8D1B9
B487B3CFBC8563D434D4C6F9064CC6C3F10D7725C5D00396020FE49A54D6DBD0
The file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every XnView MP version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Pierre-e Gougelet and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to XnView MP — just other entries, each with its own official URL and published hash.