Picking the right file from Releases

Every release carries a row of assets, and the Windows ones have x64, arm64, setup or portable in the name. Almost everyone wants the x64 setup. Unsure which you have? Settings, System, About, then read the System type line. Only an explicit ARM entry sends you to arm64.

  • The setup file is an installer; the portable asset is a folder you unpack and run. Same features, the difference is in uninstalling and keeping versions side by side.
  • A download blocked halfway by the browser or by Defender is a different problem and has nothing to do with architecture.

To confirm nothing was swapped in transit, hash the file yourself and compare against the value on the release page:

Get-FileHash -Algorithm SHA256 .\ClashVergeRev-setup.exe
certutil -hashfile ClashVergeRev-setup.exe SHA256
SponsoredWhere does the subscription link come from?Our partner provider gives you 1 GB of high-speed Hong Kong data at signup — import it in one click.Get high-speed nodes

Where it goes and which boxes to tick

  1. Keep the install path plain ASCII with no spaces. Odd paths occasionally break one component or another, and tracking that down eats an evening.
  2. Do not install into OneDrive or any auto-syncing folder. The client writes config and logs constantly and the sync agent will fight it for file handles.
  3. All users or just you? The all-users option triggers UAC. Service mode will ask for elevation later either way, so the choice matters less than it looks.

Config, subscriptions and logs do not sit next to the executable. They go in a separate folder under your user profile, and that folder is what you back up once you have hand-edited a profile.

Three switches to set on first launch

  1. System proxy. Under Settings, System Setting. It writes 127.0.0.1 plus the mixed port (7890 in most builds) into the Windows proxy config. Check Settings, Network and Internet, Proxy to confirm the entry appeared.
  2. Service mode. It installs the background service TUN mode depends on, with a UAC prompt. People skip this, then wonder why the TUN toggle snaps back off the moment they touch it.
  3. Start with the system. Not the same switch as the one that re-enables the system proxy at startup, so turning on only the first leaves you booting with the proxy off.

On a work-issued machine these options are often greyed out or do nothing when clicked. Group Policy can lock proxy settings and service installation can be blocked outright. Not a broken install.

Confirming traffic really goes through

  • A site that normally fails now loading is only the first signal.
  • Open the Connections page in the client. Live rows should be scrolling with domains, the matched rule and byte counters. Numbers moving is what proves requests pass through the core.
  • The command line is blunter: curl -x http://127.0.0.1:7890 -I https://www.google.com/generate_204. A 204 back means the tunnel is up.
  • If netstat -ano | findstr 7890 shows nothing listening, the core never started. Read the log instead of reinstalling.
The system proxy only reaches programs that read the Windows proxy setting. Games and anything with its own network stack ignore it. One app still connecting directly after a clean install is not an installation error — it is the situation TUN mode exists for.