I just downloaded PencilProjectPortable_2.0.3_English.paf.exe.
According to https://portableapps.com/apps/graphics_pictures/pencil-project-portable the MD5 should be:
fbed93fc1428f44a12675f56e2af486f
When I run MD5_SHA-1 checksum Utility I get:
3E4E345D21522A020A99A161B3B17074
When I try a few other downloads, the MD5 matches, so I'm posting here instead of with the MD5 utility. 
Please check.....
Visit the Community page
Join our forums
Subscribe to our email newsletter
Subscribe with RSS
Follow us on Facebook
Follow us on LinkedIn
Follow us on Twitter
Follow us on Mastodon
Follow us on BlueSky
Did you also install it (successfully)?
Sourceforge lists the md5 as fbed93fc1428f44a12675f56e2af486f so the webpage is not wrong.
EDIT: And I have two different md5 utilities that hash the download as fbed93fc1428f44a12675f56e2af486f.
That would mean your download is corrupt.