← CrossCheck home

Install CrossCheck.

CrossCheck is not certified by Microsoft or Apple. The Windows installer is unsigned. The macOS app is ad-hoc signed and not Apple-notarized. First launch may require an operating-system override.

Before you start

  • Download CrossCheck only from the official Gumroad purchase page.
  • Compare the downloaded file's SHA-256 checksum with the matching file entry below. If no verified checksum is available, stop and contact support.
  • Follow your organization's software-installation policy. A managed computer may prevent security overrides.
  • Do not disable SmartScreen, Gatekeeper, antivirus or other security controls system-wide.

Windows 1.0.1 checksums

These SHA-256 values identify the approved Windows release files. The ZIP hash covers the download; the EXE hash covers the installer after extraction. They are different files. The local release bytes have been verified; the current Gumroad attachment bytes have not been independently re-downloaded for comparison. If your download differs, stop and contact support.

CrossCheck_1.0.1_Windows_x64.zip

127,781,782 bytes
f64a9a87120ba4e0980bf545346efb5bbed2c2141e877f9bd715c1cdfc015584

In PowerShell, from the folder containing that file:
Get-FileHash -Algorithm SHA256 .\CrossCheck_1.0.1_Windows_x64.zip

CrossCheck_Setup_1.0.1_x64.exe

127,773,403 bytes
20c64c45878310446bd18f49a9709db68a7360b9177b038917d97c9401d99989

In PowerShell, from the folder containing that file:
Get-FileHash -Algorithm SHA256 .\CrossCheck_Setup_1.0.1_x64.exe

Mac 1.0.0 universal DMG

CrossCheck_1.0.0_universal.dmg
278,714,857 bytes
866bdd980db850e377f003443f0d3d7bb2ee73338094e3dbd81599099a91ab44

Verified against the seller-downloaded DMG on October 7, 2026 (UTC). This establishes download integrity only; installation, Intel/Apple silicon behavior and the bundled demo location remain unverified. In Terminal, from the download folder: shasum -a 256 CrossCheck_1.0.0_universal.dmg

Windows

The Gumroad download CrossCheck_1.0.1_Windows_x64.zip is a ZIP, not the installer itself. Extract it before running the installer.

  1. Right-click the ZIP, choose Extract All…, then open the extracted folder. It contains CrossCheck_Setup_1.0.1_x64.exe, README-FIRST.md, INSTALL-WINDOWS.md, RELEASE-NOTES.md and SHA256.txt.
  2. Verify the installer's SHA-256 checksum against the installer entry above and SHA256.txt (in PowerShell: Get-FileHash -Algorithm SHA256 .\CrossCheck_Setup_1.0.1_x64.exe).
  3. Double-click CrossCheck_Setup_1.0.1_x64.exe.
  4. If Microsoft Defender SmartScreen appears, select More info. Confirm the app is CrossCheck and the file is the verified official Gumroad download, then select Run anyway.
  5. Complete setup and open CrossCheck from the Start menu or desktop shortcut.

The exact warning can vary with Windows settings. The Windows installer is unsigned. A SmartScreen warning is possible; its appearance on a clean Windows installation has not been verified.

macOS

The Gumroad download CrossCheck_1.0.0_universal.dmg is one universal app for Apple silicon and Intel Macs. Independent validation of the sold DMG on either architecture is not yet documented. The DMG checksum below verifies download integrity only; it does not establish installation or first-run validation. The app is ad-hoc signed and is not Apple-notarized. The Mac download is version 1.0.0; the Windows download is 1.0.1.

  1. Open the DMG, drag CrossCheck to Applications, then eject the DMG. Do not run CrossCheck from inside the DMG window.
  2. In Applications, Control-click or right-click CrossCheck, choose Open, then confirm Open if macOS offers that choice.
  3. If macOS says “Apple cannot check ‘CrossCheck’ for malicious software” and still blocks the app, open System Settings → Privacy & Security.
  4. Scroll to Security and choose Open Anyway for CrossCheck, then confirm Open. Apple notes that Open Anyway is available for about an hour after the blocked launch attempt.

Do not continue if macOS says the app will damage the computer or that the app is damaged. Delete the file and contact admin@spiritbox.ca.

First run

The welcome screen asks you to create or open a project. A CrossCheck project is a folder you choose; CrossCheck keeps its database in a hidden .crosscheck folder inside it.

  1. Windows 1.0.1: choose Create Demo Project, pick a new empty folder, then choose Import included demo in the setup checklist. In Map this file's fields to CrossCheck columns, keep Placemark Name (raw, as-is in the file) as the Crossing ID. The six other fields initially say Ignore this field; set each dropdown manually before continuing:
    • KP → KP
    • Crossing Type → Crossing Type
    • Owner → Owner Name
    • LSD Location → LSD Location
    • One Call Ticket → One-Call Ticket #
    • Field Notes → Field Notes
    Choose Apply Mapping & Review, review the four synthetic records, then apply the import. Do not leave those six fields ignored.
  2. Mac 1.0.0: there is no Create Demo Project button. The 1.0.0 source package includes a demo/CrossCheck Demo Project folder, but its location and usability in the sold DMG have not been verified. Contact support for a verified sample-project copy and instructions before this first-run check; do not use live project information to test installation.
  3. Confirm the crossing table opens and the imported rows appear.
  4. Open Map, select a crossing and use Show in Table.
  5. Open the KML export window without exporting live information.
  6. Click the Create validated backup button (disk icon) and save the backup outside the project folder. Do this before every update and before moving live information into CrossCheck.
  7. To return later, choose Open Existing CrossCheck Project (Windows 1.0.1) or Open Existing Project (Mac 1.0.0) and select the project folder itself, not the .crosscheck folder or the database file.

Get help

Email admin@spiritbox.ca with the operating system, CrossCheck version, exact warning or error message and the steps that led to it. Do not send operational databases, exports or screenshots containing personal or confidential information unless support requests them and you are authorized to share them.