xucRun for Windows
Installation files, checksums, and release notes are provided through GitHub Releases.
Download
Download the installer only from the official GitHub Release and compare its SHA-256 checksum with the value published there before starting it. The installer is not signed by a publicly trusted publisher; Windows may therefore report an unknown publisher.
Windows 10 and Windows 11 on x64 systems are supported. The latest Microsoft Visual C++ v14 Redistributable for x64 is also required. If it is missing, the installer offers the verified Microsoft download or selection of an existing vc_redist.x64.exe.
Optional add-on
The optional xucRun Tray is also open source. It adds a status and control interface in the Windows notification area and requires an installed xucRun version with the exact same four-part version number.
01
The signed xucRun-Installer-<Version>-x64.exe contains xucRun, the broker, the approval helper, and both languages. <Version> represents the version number shown in the selected release. A separately copied xucRun.exe is not sufficient for launches using stored credentials.
02
Compare the SHA-256 checksum published with the release before installation:
Get-FileHash .\xucRun-Installer-<Version>-x64.exe -Algorithm SHA256
03
The installer and its included files are currently digitally signed with a self-signed certificate. This makes subsequent file modifications detectable, but Windows cannot automatically verify the publisher through a public certificate authority.
The certificate does not establish public Microsoft SmartScreen reputation. Windows and SmartScreen may therefore display an unknown-publisher or unknown-app warning despite an unchanged signature.
04
After successful verification, the Core installer automatically creates a non-exportable certificate on the target computer or reuses the existing valid xucRun standard certificate. There is no option to install the developer certificate.
Local signing limits permanent trust to the individual computer: a later compromise of the developer certificate does not automatically make files signed with it trusted there.
The separate Tray installer uses the same existing Core certificate. Both installers accept only matching files with the intended common signer. The private developer key is never distributed.
Installation
xucRun-Installer-<Version>-x64.exe from the official GitHub release..\xucRun-Installer-<Version>-x64.exe
The local-signing guide explains the machine-local trust model. The optional xucRun Tray is then installed with the same four-part version number as the installed Core.
Before downloading and using the software, please read the information about intended use, security limitations, and potential risks.
Version history
Artifacts, checksums, and release notes are available with the GitHub releases. The changelog is maintained in the repository.