64-bit
innouser scopevscode.download.prss.microsoft.com · publisher domain- File name
- VSCodeUserSetup-x64-1.132.0.exe
- SHA-256
- 9ac3e1278961fdddee3a1c186277ef9b4055f90c0f0083cb34a6420f58e8ad53
by Microsoft Corporation · Microsoft Software License
Microsoft Visual Studio Code is a code editor redefined and optimized for building and debugging modern web and cloud applications. Microsoft Visual Studio Code is free and available on your favorite platform - Linux, macOS, and Windows.
These URLs are the ones Microsoft Corporation declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what Microsoft Corporation published. Delete it.
Windows · PowerShell
Get-FileHash "VSCodeUserSetup-x64-1.132.0.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "VSCodeUserSetup-x64-1.132.0.exe"Expected output
9ac3e1278961fdddee3a1c186277ef9b4055f90c0f0083cb34a6420f58e8ad53
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 4 of 4 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 4 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 4 of 4 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 0 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | Microsoft Software LicenseA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Yes, in the sense we can actually verify: the installer downloads from microsoft.com, which is a domain we have tied to Microsoft Corporation.
Every one of the 4 installers on this page comes with the SHA-256 Microsoft Corporation declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Microsoft.VisualStudioCode --exactUpgrade later
winget upgrade --id Microsoft.VisualStudioCodeWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Microsoft Visual Studio Code, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
D107363D5E2C3764B49C125ECC12DF4A6FD031A46E077281671F15572DB27E1E
B94CFC31B07F9F3395079AF38E64853182FDBB1B2F6566F383931705E5B88325
7310EE584734B4EF7E450804DFAC567D5CFF5A7B3C472CB14AD7BF5281C2BA06
17658A1E714CD70E1BD7B3928938D9135B237A9C3456E7341D08EFBCFE7FC0AA
D63739645356B844730072BDF1C27AF52488AED2ABDBCC40EAE0B668C3FE3F04
344BE2A8E772173530A7DBED2C5EFCC5A2282EC7A5264BAC0BB752EE44EB5169
92928C03031740352816C0C7FEEEAFA0B065A59D70BA07A7793B5E9C28BEFFCF
46B5A269597DDFFA1A349212074B4EF12C9EDBAD6A69C193C10B1794A1A53582
1BD1D86767FA70F381A27CF8100EB7B45FEE5073D71776EB2B56A02DA4048E9D
41E44EC65FC0BC1072D130A7709A4F130DEC363923163C7AACB1842DD44440DA
28EAB4540EFFEBB773266F231FD13E0D1B8A26BB296F44AE97054A98602B17D8
1E883039671841218EF4BE1FC308F79D0512ED7BC3213578F4931A2581A7DE37
66CB9B8432ACB73EF5D546099E3C228AF8124A45A52BCB9F6F3B89224020B727
7A6D022B96762170AF9D54F39E8F5BA2E86984A23E51A31C8C78339D84407B2B
1B632D50A4B8ED99E308EF0D9C2003DD8D102F1BA079D7CE2FEBF563C9046EF3
D2B086B0E03491FB2AAC47102E0E167A27F1ACAC500E2F093C5BC4692D14686E
164F04F5DCB916177B1B5F5487432B9D5F13AC45440DC87176A3A9E337BC5029
A526BFECE3DF046DDD98DF6B9487B178D6F41263749BD4022E819F4A1C2A7D5A
642A1DCA6F9E0D83B55C6588F759BEFEB373424F5CD0DEE03C6CE441E6DCBA4C
F3F82CF479E346A4CD2E373C2E326773590D7E459B5287A644EA5CDE02D98E1C
F92B6428FD2559B6AB8F34E86BA91A89F8E05C2A4D3CE4B0AFED59CFCCA750BB
6A1EAB9D836783B5F871E6837842BF4B8A02B3F322C2551DEE53BE740975713C
6B5D48B2CF12681CBEC13662981141FC88BC76BF254D4A28454367398E36CA1A
3C57C743BC8B4571CF2E25674532B4F21E156990C345928AADC3671D309C3B07
03832BC81AA6CF9EED670E035BEB7F6BF85FB21F12959109119C975FB7D93AD0
1ECBCFB02FE4356C7CDCED340900BFB90FA913CBB5D6DD04BA7C8D4DD049091A
95671569DFEA60289AE1A8653FD0E892680C9505145DFD8CDCA6BAA930C277CC
529C873FE7B4A7E00D1B6B2C155074ED958063087FDA8A5DC18D3BBE4C1931DF
D420EE62F5293ABE84871B251E505C3243E6A5971827E0F35463331B9E614532
92311BDE612CA8B02866FD5AE5D17AC0CDF9A2447B880D753B5358821632F154
1B7319A8B9F1120DFE9D39E621D53D2764A2B66553652B862CA2AEE32CDC28EF
56F619992B7400D8D6A40B9A592C0C2B1D19A0460BFF5DB176098AE9661B9418
AC83073F45110526AE4E97FD589C788828EBA2CC25654E967FA62FAD385A39AA
6F5CBCA0BD861E2E610CF077C32842E7048A67586C36A4F7C6E78A8A5261F03F
5A347D37B6A3015302B241C1CF69EB7E1BF5E8FF0D5DB1548E308A13D7092F68
4F54130D76C4D1786430B25A077F577B7AB0E16768A006E15E797B69EB72687F
8E599E2D764A20397C247D1C09423B7E25FA80B2C8DAA6C0CC7BDBFA7310ECA2
83F2CA35E8AF9F0DF7ECEF47F5C8BE42E75B7D21B81148362E83D6EDB86D87C1
7D08422F0D793280236460B05016831C6285EE2EC0257797DFA99981180B4BC7
4AC383D0BD7A950A8CB828FA9FB0FB9DE444904D5CDB14BDB8EFBDE57262BB57
88F21C82134875C3DBB1FD99F5AE538E80A25E8109EFF918E35F4BA594921C06
FECF4C32D3CE6C9C2A05DF123BEF1468E898669286E507668C0DB14E3E83E6F8
0508A23A33F25EC0B3BDB0EFBF270147D6A860635BD9216EDB80963059C3816B
90E66400580978037A721B4BEE586C3C99B8BE3C276AFD553D9A99FBE48CDA02
F3B0B6D589FE6BF8BD1DC60BE01A432E8A627E4CAE5AF101F264B427F6EBFA24
2700D0062ABA55BC76C4EC7869C52D7A8F3A2B0281ED7C45134BE3C470EDECDF
F391138C48EF740735112C0A9914DF2644F9A5DDEDE7A347C41E0756254949A7
FACF506E7C167452055992306D3326E2BD8294FB1BE968E357A83D34822AB99E
7FEA6574EBCE9D537DE537542FCFDFFCF36A466AEF6DE9D69185F8AF30EA48BE
80AEE9F10059459C185FBF2300A9547E85A2EF7F6687B675EF506005F7220E99
6A8E538085D5FCC5E1B5BEFB97F55A129D353C37246231CD61CFB0707AD19D09
5751CBF2552C8DDA452DF5720E3228627B3234862D0EB7346F9E57F20386561F
3CBD563798CE8F1113C0C8744AAE3B087F390B616BEF52397CB23B7452A20934
8CD57C0C4D46C9A81D6463EB1E5571E2652A3696F6F415EF58037F0BF6BD94D6
49A40B030D4F4DE4E514E3AF09D51440FB5A43D947DAAE02156121886240B593
4882A29EBF88B366B748C13F9C3B0E65DD89C6BD0174673E2C0C5B9D3330598E
CB5CAD4EF5C302F614DC25CE61C2361C81FFF8BD40396C1A222115ABBD3744AB
F243916A7CC023117A6429DC746C6C955B19CFA34ED9EE88872479C84DBBE624
2FCB5444B2D03E19FE6898EACB066FF0A91BD610CF3D7DD461EDE16ACAD47125
8C3CF83D67F27A24ECB95812163F928F7404279A87681EC6FDB594095CC8271D
DB62E09FCDE98EC54865DDC6DCBF3FCDEB1B832C021E5AE483AF45D9938CCC66
3E9073C9829C1AC2F61AC90FBD81F57E830C8D19E90D1DECBEDE10C1627578C0
8545456274259C527BE143D7FD8CB8C8F965B8933B49AFBC373FB7F687DA0448
6E7E786CECEC0E9DE275FC58BB25CA608DA637945E8BD249FD103ED8E9DC2050
FBC10329C66F578B8C9D1EB19B7EEDB93A416273EE1E24906C0E5DA9CA68C2E3
AED285063BD452E651E6909BFD67477FE3D5045DD2F55F55A06B3FB11D7C414B
22E8526781F959B4A28F2C971044F056FD95F9EFBD9BEBB51CF7C5E826838353
FABFAE0560ED4EDD507C3F6FECA59AF730C5076B6E928DCC60A9DDC3AB79BFB4
5BB5A78F010DBE705BF3415875CFB08B5A73950300A65CF8D1D0748E0DE53FB9
342893E696415116FF4EB86381B5067CCD7893517BEB0487F0ED7F709F07061C
AFE07724A9CD206EDFDD8CDB7A47D84A06907648F81FCF76B89E914BF88A4AEC
9F3061D1B1B17B8240D435ED948E555C729537876AA7495D03D6102721665157
EC1464ACE839BE4FA930172F849CED2F4A0A9DEEAD2D784C15BADEAF80B8A909
6079C77E9377DBA5DC2B03F8DFE6E5CEB5D7E21CC05CDE409E70C72B2B895431
4AC00EF2635C0AD9A23A8171F52DDB126EC046D85DE19F413A8B4194BCE3FDC4
5A8E776BB419AC6C39CB47FB34B4A2F1FF2ADD78F8784D44C1DEB1055AFD5F29
225D2559A36E31C2DB755F0296205845E896A9BEF565B6554511EAA851CFC7E1
89627E6BD3DA21BE8F2054E17F30064FECA5FAE7B1552C51FE41E2D09FC0258C
0C8CA311CA9EB0180F97C4CABCFDD5BE67EA4531AE6F85DDAC62F1475DF53662
A76E88B38379C286EC30832062EEE42FEA3B0A5E44D52708F9713BFB5059D012
The file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Microsoft Visual Studio Code version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Microsoft Corporation and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Microsoft Visual Studio Code — just other entries, each with its own official URL and published hash.