32-bit
exemachine scopejavadl.oracle.com · publisher domain- File name
- AutoDL
- SHA-256
- 71a39e1af5d63fc2b98992053f07de7c987ebba4ff2c21440945268d8f074a71
- Silent install
- /s REBOOT=0
- Product code
- {77824AE4-039E-4CA4-87B4-2F32180501F0}
by Oracle Corporation · Proprietary
Java allows you to play online games, chat with people around the world, calculate your mortgage interest, and view images in 3D, just to name a few.
The Java download page offers a small online installer by default. The offline package is what you want for a machine without internet, and for the very common case of an old application that requires this specific Java version.
The installer here is the full standalone package with its published hash.
Match the architecture to the application, not to the operating system. A 32-bit application needs the 32-bit runtime even on 64-bit Windows, and getting this wrong is the usual cause of "Java not found" errors on a machine that clearly has Java installed.
These URLs are the ones Oracle Corporation declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what Oracle Corporation published. Delete it.
Windows · PowerShell
Get-FileHash "AutoDL" -Algorithm SHA256macOS · Linux
shasum -a 256 "AutoDL"Expected output
d99eb213b11b84fed4d0ffbb7595c77c7b952035a9025ed062c2d9c95ea22a8e
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The unattended switch below is the one Oracle Corporation declares in the installer manifest, not one we guessed by trying flags.
32-bit · machine scope · publisher-declared
.\AutoDL /s REBOOT=0Java 8’s installer takes /s for silent, and the declared command adds REBOOT=0 so an unattended run never restarts the machine on its own.
The settings worth passing are the ones that stop Java changing things behind you: AUTO_UPDATE=0 disables the update check, WEB_JAVA=0 turns off browser integration, and SPONSORS=0 suppresses the bundled offers that made this installer notorious.
Java 8 is old enough that the licence terms for commercial use changed after it shipped. That is a question for whoever owns your licensing, not a technical one, but it is worth asking before deploying it across an organisation.
Run it from the folder holding the downloaded file, in a terminal opened as administrator when the package installs for all users. Silent means no window and no prompts, so check the exit code rather than waiting for something to appear: 0 is success and 3010 means it worked but wants a reboot.
Silent install commands for every program we index · silent uninstall
Every guide on this tells you to hunt for the product code with Get-WmiObject or in the registry. You do not need to: it is published in the installer manifest, and it is printed below.
Product code · 32-bit
{77824AE4-039E-4CA4-87B4-2F32180501F0}
Uninstall, with the usual prompts
msiexec /x {77824AE4-039E-4CA4-87B4-2F32180501F0}Silent, for deployment
msiexec /x {77824AE4-039E-4CA4-87B4-2F32180501F0} /qn /norestartProduct code · 64-bit
{77824AE4-039E-4CA4-87B4-2F64180501F0}
Uninstall, with the usual prompts
msiexec /x {77824AE4-039E-4CA4-87B4-2F64180501F0}Silent, for deployment
msiexec /x {77824AE4-039E-4CA4-87B4-2F64180501F0} /qn /norestartThe codes above belong to Java 8 8.0.5010.8, the version in our index. If you have an older release installed, its code is different and this command will report that the product is not installed. In that case run Get-Package -Name "Java*" in PowerShell to read the code of what you actually have.
This removes the program as the publisher packaged it. Settings and files created after installation, typically under AppData, are deliberately left behind by the uninstaller and have to be deleted by hand if you want them gone.
Reinstalling and hitting error 1638? That is this same product code, and the command above is the fix.
Product codes for every program we index, with the msiexec switches and how to read the code off your own machine.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 2 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 1 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | ProprietaryA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions Java 8 registers itself to handle.
Yes, in the sense we can actually verify: the installer downloads from oracle.com, which is a domain we have tied to Oracle Corporation.
Every one of the 2 installers on this page comes with the SHA-256 Oracle Corporation declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Oracle.JavaRuntimeEnvironment --exactUpgrade later
winget upgrade --id Oracle.JavaRuntimeEnvironmentWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Java 8, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.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 file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Java 8 version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Oracle Corporation and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Java 8 — just other entries, each with its own official URL and published hash.