32-bit
msixuser scopegithub.com · known platform- File name
- Microsoft.WindowsTerminal_1.24.11911.0_8wekyb3d8bbwe.msixbundle
- SHA-256
- 54ef0c69a912de511475df02e57e5193e69193a4cf95a19d508d2705fd602e42
by Microsoft Corporation · MIT
The new Windows Terminal, a tabbed command line experience for Windows.
These URLs are the ones Microsoft Corporation declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what Microsoft Corporation published. Delete it.
Windows · PowerShell
Get-FileHash "Microsoft.WindowsTerminal_1.24.11911.0_8wekyb3d8bbwe.msixbundle" -Algorithm SHA256macOS · Linux
shasum -a 256 "Microsoft.WindowsTerminal_1.24.11911.0_8wekyb3d8bbwe.msixbundle"Expected output
54ef0c69a912de511475df02e57e5193e69193a4cf95a19d508d2705fd602e42
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 3 of 3 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 3 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 29.8 / 35 |
| Served over HTTPS | 3 of 3 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 1 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | MITA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
The installer comes from a recognised distribution platform rather than Microsoft Corporation's own domain. That is normal for this kind of software and not a red flag by itself.
Every one of the 3 installers on this page comes with the SHA-256 Microsoft Corporation declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 95/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Microsoft.WindowsTerminal --exactUpgrade later
winget upgrade --id Microsoft.WindowsTerminalWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Windows Terminal, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
8C162040B3E96C6DBD558FB991E79BC2ADFF7281EF431ED694554AC6FBE50887
AC602407A7853E4AD4AAFA220FA480E74CCD3F08A5D403735C632C8EC5063552
0D9CBADF6866A2EBD85BC1E0A2C5BEA4C6AAC066BEF0F637FB6691F8E74FC777
A5B4B6BD5375227945396529D0023167942B5ED0B9E9516004B30E3648C21E52
11C4F64907AC16FDA90C9BCAE9B8E7584866F4CAB0A64C163C5236365BE34E72
4D9C831600A16F4F85C08098DC20B927716F78B01ADA01A5B0B1A9E7560F09CF
AB1FD95A01A3B9236EB7088FFA8B843159E7FA825B255D0E0E031F8183F02CBE
394AA631EC9B0EA1C5B24399B37408C2F0B3459CE029410A5B76A4E2DF791355
A95C7018EDA467AB8747B4F1AABE789A0270332FE5802BB548D65879D333B006
DCEE05C52D5732D0459614EAA449AA054A3EA9D9D148863E7DA3F0A02CCC8022
81F1E3EBFEA991875C6515173590CAC64B40EB628DBFA4EA8B969010AA7646C0
B2A5D96AFED0E2F187AB46C71F10006E462FA71D75E43D87DC87C7C6552E236B
FA08F1E5C41F7003BBE659444C6FE5E3F59F77730AB482DB44DEA8087C999225
986063A7C54CD08286E59114C7EA2C0BD46B082013429EC42681C836BC977A7F
C80BC461B22A17650A58BC5CAD743E1AD97E0A4EA92CCDCB514EE7D7AA134243
345F31DCE7FE9912C7A980CA70D16BEFBF08B50A53243F0272D9084526D03DB8
ED7538F84002AE0C9C2B8D201FE4DE0CD6C3BAC56BF4D6CA9301B75DC4450A0F
19CBE2E77CC814A5AB68E346B0D3D928F44F1EC5A78FB9B53A793D46B1CE3D27
5EF95B5D0E6BD530A985E7C59E8E9CE12195D9E18C1657D2FA0BD58C102FA419
D71A4AA3751CC636EBD2283B2ED90E7A92160F5780BDD0B0EEEF3F5E4A4A6C04
The file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Windows Terminal version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Microsoft Corporation and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Windows Terminal — just other entries, each with its own official URL and published hash.