Home / Guides

Verify your Windows Autoclicker download

Every release is built by GitHub Actions from the public repository. Two checks confirm that the file you have is that build.

1. The checksum

Each release has a WindowsAutoclicker.exe.sha256 file next to the exe. In PowerShell, in the folder with the download:

Get-FileHash .\WindowsAutoclicker.exe

The hash it prints must match the one in the .sha256 file (ignore upper or lower case). In Command Prompt, certutil -hashfile WindowsAutoclicker.exe SHA256 does the same.

2. The build provenance

With the GitHub CLI (version 2.60 or newer):

gh attestation verify WindowsAutoclicker.exe --repo TMHSDigital/autoclicker

This proves the file was built by this repository's workflow from a specific commit, so it can't have been swapped after the build.

3. Optional: other scanners

Search the hash on VirusTotal to see what other antivirus engines say. A few may flag it anyway; see SmartScreen and antivirus warnings.

More: all guides · the full README · ask a question