64-bit
innomachine scopedownload.sublimetext.com · publisher domain- File name
- sublime_text_build_4200_x64_setup.exe
- SHA-256
- 3d3c70e51aef08f85d7160bcc70793bed9acec250973090ab67d98987bce7c7e
- Product code
- Sublime Text_is1
by Sublime HQ Pty Ltd · Proprietary
Sublime is a sophisticated cross-platform text editor for code, markup and prose.
These URLs are the ones Sublime HQ Pty Ltd declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
Run this against the file on disk. If the output does not match the hash below, the file is not what Sublime HQ Pty Ltd published. Delete it.
Windows · PowerShell
Get-FileHash "sublime_text_build_4200_x64_setup.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "sublime_text_build_4200_x64_setup.exe"Expected output
3d3c70e51aef08f85d7160bcc70793bed9acec250973090ab67d98987bce7c7e
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 2 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 15 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 7 / 15 |
| Licence declared | ProprietaryA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions Sublime Text 4 registers itself to handle.
Yes, in the sense we can actually verify: the installer downloads from sublimetext.com, which is a domain we have tied to Sublime HQ Pty Ltd.
Every one of the 2 installers on this page comes with the SHA-256 Sublime HQ Pty Ltd declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 92/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id SublimeHQ.SublimeText.4 --exactUpgrade later
winget upgrade --id SublimeHQ.SublimeText.4Why --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Sublime Text 4, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
6B93529556D7EE17A3F8F5E16C242833D04153A3EE01F140331206AD2E677824
99650270AA32E8997AEC2BDE30EBE0F2D79A6A83E629293CE4537C74975DD924
7F8A7557D92ED985E26D9F0BFEFA7D2DEC72EE38E28579ACA86FCB1114E4C267
542BBA3990A71B24E79130F91708FD6ED0847744D447823CBF1F542BAE68FA4F
CB80FC92C7A94AE7D8AD48EEDCF117B7A044EB921AE3B070E56C749081BAB5E3
8326959C5A60C4186CFF5E2D5B5DBA74F0CF424C5421D5836A316E43159447DE
6AA7B5CE3B967FC726ABF69158DAC98A826E1532E3832E3D8E649CBD877B0A6A
846AEBD00CF1EDCD3A8FF0DBA947DCB6904ECAECFDFB56D779150A33E8A4D554
10943C2D71DC97DCBF0DF96A43D1F34FDB90F6D85184424A5EFCFE2D08DAAD2F
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Sublime Text 4 version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Sublime HQ Pty Ltd and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Sublime Text 4 — just other entries, each with its own official URL and published hash.