64-bit
wixgithub.com · known platform- File name
- wsl.2.7.11.0.x64.msi
- SHA-256
- a611ddacee689d2fb1fb5319e58af7f3998864d86cdce632eadd8e61614a0f9d
- Product code
- {497CB23D-8747-4047-A079-DD98E0EDFC18}
by Microsoft Corp. · MIT
A feature of Windows that allows you to run a Linux environment on your Windows machine, without the need for a separate virtual machine or dual booting.
These URLs are the ones Microsoft Corp. declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what Microsoft Corp. published. Delete it.
Windows · PowerShell
Get-FileHash "wsl.2.7.11.0.x64.msi" -Algorithm SHA256macOS · Linux
shasum -a 256 "wsl.2.7.11.0.x64.msi"Expected output
a611ddacee689d2fb1fb5319e58af7f3998864d86cdce632eadd8e61614a0f9d
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
This installer is an MSI package, so it takes the standard Windows Installer switches. That is a property of MSI itself rather than something the publisher declared.
64-bit · MSI convention
msiexec /i "wsl.2.7.11.0.x64.msi" /qn /norestartARM64 · MSI convention
msiexec /i "wsl.2.7.11.0.arm64.msi" /qn /norestartRun it from the folder holding the downloaded file, in a terminal opened as administrator when the package installs for all users. Silent means no window and no prompts, so check the exit code rather than waiting for something to appear: 0 is success and 3010 means it worked but wants a reboot.
Silent install commands for every program we index · silent uninstall
Every guide on this tells you to hunt for the product code with Get-WmiObject or in the registry. You do not need to: it is published in the installer manifest, and it is printed below.
Product code · 64-bit
{497CB23D-8747-4047-A079-DD98E0EDFC18}
Uninstall, with the usual prompts
msiexec /x {497CB23D-8747-4047-A079-DD98E0EDFC18}Silent, for deployment
msiexec /x {497CB23D-8747-4047-A079-DD98E0EDFC18} /qn /norestartProduct code · ARM64
{D80E1B63-5D63-4430-AF7E-7478ABDE3425}
Uninstall, with the usual prompts
msiexec /x {D80E1B63-5D63-4430-AF7E-7478ABDE3425}Silent, for deployment
msiexec /x {D80E1B63-5D63-4430-AF7E-7478ABDE3425} /qn /norestartThe codes above belong to Windows Subsystem for Linux 2.7.11, the version in our index. If you have an older release installed, its code is different and this command will report that the product is not installed. In that case run Get-Package -Name "Windows*" in PowerShell to read the code of what you actually have.
This removes the program as the publisher packaged it. Settings and files created after installation, typically under AppData, are deliberately left behind by the uninstaller and have to be deleted by hand if you want them gone.
Reinstalling and hitting error 1638? That is this same product code, and the command above is the fix.
Product codes for every program we index, with the msiexec switches and how to read the code off your own machine.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 4 of 4 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 4 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 29.8 / 35 |
| Served over HTTPS | 4 of 4 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 1 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | MITA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
The installer comes from a recognised distribution platform rather than Microsoft Corp's own domain. That is normal for this kind of software and not a red flag by itself.
Every one of the 4 installers on this page comes with the SHA-256 Microsoft Corp declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 95/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Microsoft.WSL --exactUpgrade later
winget upgrade --id Microsoft.WSLWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Windows Subsystem for Linux, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.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 take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Windows Subsystem for Linux version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Microsoft Corp. and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Windows Subsystem for Linux — just other entries, each with its own official URL and published hash.