by Microsoft Corporation · MIT
.NET is a free, cross-platform, open-source developer platform for building many different types of applications.
These URLs are the ones Microsoft Corporation declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what Microsoft Corporation published. Delete it.
Windows · PowerShell
Get-FileHash "dotnet-sdk-9.0.317-win-x64.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "dotnet-sdk-9.0.317-win-x64.exe"Expected output
e7a0b06c4c65870eb5ddfd7f58a03332ea9d59894d1d75e2568d37b6445b24d7
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The unattended switch below is the one Microsoft Corporation declares in the installer manifest, not one we guessed by trying flags.
64-bit · machine scope · publisher-declared
.\dotnet-sdk-9.0.317-win-x64.exe /quietARM64 · machine scope · publisher-declared
.\dotnet-sdk-9.0.317-win-arm64.exe /quiet32-bit · machine scope · publisher-declared
.\dotnet-sdk-9.0.317-win-x86.exe /quietRun it from the folder holding the downloaded file, in a terminal opened as administrator when the package installs for all users. Silent means no window and no prompts, so check the exit code rather than waiting for something to appear: 0 is success and 3010 means it worked but wants a reboot.
Silent install commands for every program we index · silent uninstall
Every guide on this tells you to hunt for the product code with Get-WmiObject or in the registry. You do not need to: it is published in the installer manifest, and it is printed below.
Product code · 64-bit
{793d9822-1613-449e-a2cf-528432d6d978}
Uninstall, with the usual prompts
msiexec /x {793d9822-1613-449e-a2cf-528432d6d978}Silent, for deployment
msiexec /x {793d9822-1613-449e-a2cf-528432d6d978} /qn /norestartProduct code · ARM64
{ac1621fa-d329-4e75-b56e-6e2b14a0e3f7}
Uninstall, with the usual prompts
msiexec /x {ac1621fa-d329-4e75-b56e-6e2b14a0e3f7}Silent, for deployment
msiexec /x {ac1621fa-d329-4e75-b56e-6e2b14a0e3f7} /qn /norestartProduct code · 32-bit
{df41c8f8-eb12-4710-b8c8-bd9d674873f1}
Uninstall, with the usual prompts
msiexec /x {df41c8f8-eb12-4710-b8c8-bd9d674873f1}Silent, for deployment
msiexec /x {df41c8f8-eb12-4710-b8c8-bd9d674873f1} /qn /norestartThe codes above belong to Microsoft .NET SDK 9.0 9.0.317, the version in our index. If you have an older release installed, its code is different and this command will report that the product is not installed. In that case run Get-Package -Name "Microsoft*" in PowerShell to read the code of what you actually have.
This removes the program as the publisher packaged it. Settings and files created after installation, typically under AppData, are deliberately left behind by the uninstaller and have to be deleted by hand if you want them gone.
Reinstalling and hitting error 1638? That is this same product code, and the command above is the fix.
Product codes for every program we index, with the msiexec switches and how to read the code off your own machine.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 3 of 3 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 3 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 3 of 3 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Licence declared | MITA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Yes, in the sense we can actually verify: the installer downloads from microsoft.com, which is a domain we have tied to Microsoft Corporation.
Every one of the 3 installers on this page comes with the SHA-256 Microsoft Corporation declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Microsoft.DotNet.SDK.9 --exactUpgrade later
winget upgrade --id Microsoft.DotNet.SDK.9Why --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Microsoft .NET SDK 9.0, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.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 file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Microsoft .NET SDK 9.0 version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Microsoft Corporation and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Microsoft .NET SDK 9.0 — just other entries, each with its own official URL and published hash.