32-bit
wixmachine scopegithub.com · known platform- File name
- WinDirStat-x86.msi
- SHA-256
- 107420f704fefefdd5b1e6ad44037057a70db24dbbaf792182f7e8d751a7706f
- Product code
- {C0339490-D58E-414C-9195-81A5327E885E}
by The WinDirStat Team · GPL-2.0
WinDirStat is a disk usage statistics viewer and cleanup tool for various versions of Microsoft Windows.
These URLs are the ones The WinDirStat Team declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what The WinDirStat Team published. Delete it.
Windows · PowerShell
Get-FileHash "WinDirStat-x64.msi" -Algorithm SHA256macOS · Linux
shasum -a 256 "WinDirStat-x64.msi"Expected output
c40a6ec73497b18eb4ce2cbe071983b4f637cd04644bfca73c176d624794f79a
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
This installer is an MSI package, so it takes the standard Windows Installer switches. That is a property of MSI itself rather than something the publisher declared.
32-bit · machine scope · MSI convention
msiexec /i "WinDirStat-x86.msi" /qn /norestart64-bit · machine scope · MSI convention
msiexec /i "WinDirStat-x64.msi" /qn /norestartARM64 · machine scope · MSI convention
msiexec /i "WinDirStat-arm64.msi" /qn /norestartRun it from the folder holding the downloaded file, in a terminal opened as administrator when the package installs for all users. Silent means no window and no prompts, so check the exit code rather than waiting for something to appear: 0 is success and 3010 means it worked but wants a reboot.
Silent install commands for every program we index · silent uninstall
Every guide on this tells you to hunt for the product code with Get-WmiObject or in the registry. You do not need to: it is published in the installer manifest, and it is printed below.
Product code · 32-bit
{C0339490-D58E-414C-9195-81A5327E885E}
Uninstall, with the usual prompts
msiexec /x {C0339490-D58E-414C-9195-81A5327E885E}Silent, for deployment
msiexec /x {C0339490-D58E-414C-9195-81A5327E885E} /qn /norestartProduct code · 64-bit
{E68B1B83-517E-47FD-96DD-33FBCAB6693E}
Uninstall, with the usual prompts
msiexec /x {E68B1B83-517E-47FD-96DD-33FBCAB6693E}Silent, for deployment
msiexec /x {E68B1B83-517E-47FD-96DD-33FBCAB6693E} /qn /norestartProduct code · ARM64
{7434B5C6-753E-48AC-B2FA-54E6B5463C12}
Uninstall, with the usual prompts
msiexec /x {7434B5C6-753E-48AC-B2FA-54E6B5463C12}Silent, for deployment
msiexec /x {7434B5C6-753E-48AC-B2FA-54E6B5463C12} /qn /norestartThe codes above belong to WinDirStat 2.8.0, the version in our index. If you have an older release installed, its code is different and this command will report that the product is not installed. In that case run Get-Package -Name "WinDirStat*" in PowerShell to read the code of what you actually have.
This removes the program as the publisher packaged it. Settings and files created after installation, typically under AppData, are deliberately left behind by the uninstaller and have to be deleted by hand if you want them gone.
Reinstalling and hitting error 1638? That is this same product code, and the command above is the fix.
Product codes for every program we index, with the msiexec switches and how to read the code off your own machine.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 3 of 3 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 3 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 29.8 / 35 |
| Served over HTTPS | 3 of 3 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 1 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | GPL-2.0A declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
The installer comes from a recognised distribution platform rather than The WinDirStat Team's own domain. That is normal for this kind of software and not a red flag by itself.
Every one of the 3 installers on this page comes with the SHA-256 The WinDirStat Team declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 95/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id WinDirStat.WinDirStat --exactUpgrade later
winget upgrade --id WinDirStat.WinDirStatWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of WinDirStat, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
0C746291ADE58E1CA176000FEDB56D66548115CDF258A6CDC999C2BA252EB6DB
66643671D6B4E09EAFFBE28E0D89CC9BCA06D94495225A20020822B40536CCC4
20DC7DF4BE9BA4AAC8C85F3D679D6C4A7B51974BD08AB28FACD67CC25021E32C
BC9855E1C126D5E0901ED290D96798268CED52217BC40E25A5E04F9BD4635016
CDE821CDDDD143F60AA0C3C953894A31B3B13EDF3BA9D61315EAB553D411AEE3
BF8B8BB625EE177B23730886B06067CF9B3A5219FF415F2CA62FEFD3A482FB46
0221AA136A4C4A5491A8DC7C9AE4589D5DFECA95E6DED939202FEA4E7577A005
73FB2C9894559148CC2C8EB51975DBF5C6E16E12B2EBC4DA2A98E94FD762D15A
A4D165CECAF85E8D268A404758C9DCCA843108B200CA5AA50BDFA793AC8955C5
04684BAB6A03CDDBA5D7ACFB2329C4932CEAC0DE976F17062ACB809E4E55B11D
6A311B5AADEA65DF014A98EFE1C719101FAA5B6813948368AA23BA5236A81991
1A94886238C65D550536CC395929444E2B495EA4C9F156B4A8D174683D735F7D
F536CBBD72D07A214396F3AAE0274B919069EF9BE7A1029B67EBB69DC5825D6F
2FFE69DB116CF914E7408832DBD041BB4D52FB7A6C42EA6241B43DED2AA283D2
94107D3F6577C86A2DB4FF3BA41023BD175FB06CD368504CFA38C835B0CE8006
6DDC832CC094BFC25BE5D643ABDE57D408D2AADE226E0AA20551F590DE432156
029CC7158D5E2D475243B36AE207921D8205C1296E24C2CAB13F142AEFBA473D
21FB7EDB163C489A3CCD47B9C660E232AD98E902EEF7611BA07672D88E339AC9
78100EA0E828DB1C7234AD407D6FFF3CAC40FE48C6DE43126E841F498A7FB854
38C2C19A265E08891195DDB79B352AC81E29F03AC42F3605C65BB2BFDE76AB70
A3AB0CDC1708358B41A8F8D2D7A63942C447D14BC7C4AAC87D4B8DBB51DC1542
2366A9F18F06A9D5106392BA460BACE1CB5559DBB272912AAF791C6A7959B65D
A0A234A0936CC65DC43B13E2D5A0DC8468F556A41F0A3C44C9F3AEC390B61692
3872CF9E0F750A1BE6CA1427B01565F1DB6FF898EE1B34CE757A39BBF6294E6C
95020AD73627C39B798DF70080E7C375612987910327A27A95E325077CA18AC0
83E78C74E51BADABB46D0BFADF654F206CB5A412D6D0B1F8DBA2CE9BEBBE3022
5A68FF3D4697DCE22C999E81AFDFFB4C4C80DC322710FCB64F31D19193CFF2B1
9C8A8C55AD40DAA7389FF255650E36D7ABE0F054EC183C8914F02A696644E1A1
EF11B9F1AC15CB15B8D7ECB634120583D326789B4F7E567E3A7A2209F7BD7F64
B950C212ABD131431F2A91C51E241D0AF9E99768B091CA2DCEA868DCC6120342
C6EF97C5B8EFF6380CCA32D436BEF2BA1B9B859DB3173EE3E2235CC689FA54DC
B7C790ED0426A9EEF1EABCAF549CB3FC35B68AB01EDADD914DD6FCA099E5BFC4
B5B014409ABD0FA41DFB04E9AFF0A3402B707C8F873B29D31E46E909D6BB2AF6
C833A64543CEDDD9049645AE9B5E2DAC1F2088EFC4F56BCED4DCC1D3FB2244C4
1E759EECD6326E84C215AC7249F3CA48AE30A8D601C8DC63E7A05919054044B8
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every WinDirStat version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories The WinDirStat Team and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to WinDirStat — just other entries, each with its own official URL and published hash.