How do I know this file is safe?
You don't have to trust us; you can check all of this yourself.
1. File fingerprint (SHA-256)
The fingerprint of the file you downloaded must match exactly. Change one byte and it is completely different. Check it in PowerShell:
Get-FileHash "$env:USERPROFILE\Downloads\DpsMeter_Kurulum_1.5.0.exe" -Algorithm SHA256
a5436c298f2e1a8d901e5bbfbed1eceacf887f30888b7bef668bdf37c3bb2e6c
d64cef10b7e04f3042ca6ceb9e0db2424f8c8090591c4298e5877770a70bd87a
2. Scanned by 70+ antivirus engines
Every release is uploaded to VirusTotal before publishing. See the result yourself:
DpsMeter 1.5.0: No scan link for this release; you can search the fingerprint on virustotal.com.
AleBoost 1.0.2: No scan link for this release; you can search the fingerprint on virustotal.com.
3. Digital signature
Releases are signed with a key (Ed25519) that only exists on the developer's computer. The program checks this signature when it updates itself; even if the server were compromised, a fake file could not be installed.
1fa1c61eed26e07faa12112367054abddc86af0c7c88b845e5637c4ab892e23f
4. Open source
The source code is open under GPL-3.0; anyone can read what it does.
If Windows says "Windows protected your PC"
This warning does not mean a virus; it means the file is new or has no paid code-signing certificate. "More info" → "Run anyway". Check the fingerprint above first.