On this page
First, split launch failures into two paths based on the error
This article covers two recent reports of FlClash 0.8.96 failing to launch at all after installation on Windows. In the first, a pop-up says that MSVCP140.dll or VCRUNTIME140.dll is missing; the original report also mentions VCRUNTIME_1.dll, so use the exact filename shown in your own pop-up.
In the second, the interface opens, but the core fails to start and displays DesktopCoreFailure. Both can look like a broken installation, but their troubleshooting paths differ.
Official issue #2370 documents DLL pop-ups after installing v0.8.96 on Windows 11 25H2; issue #2367 documents Smart App Control blocking the core, with Code Integrity events 3077 and 3089.
Neither report had received maintainer confirmation when this article was published. They are used only as evidence of the symptoms; this article does not claim that v0.8.96 has one confirmed installation defect behind both.
If FlClash starts and the only problem is node Timeout, TUN disconnects, or a failed subscription, this article does not apply. Do not install runtimes, disable security features, and reinstall the client all at once when there is no DLL pop-up or Code Integrity evidence.
Choose a path based on the first error
| First visible error | More likely stage | What to do first |
|---|---|---|
| MSVCP140.dll / VCRUNTIME140.dll is missing | The MSVC v14 runtime required by the app is unavailable | Check the architecture and repair the official Microsoft runtime |
| DesktopCoreFailure with events 3077 / 3089 | A Smart App Control Code Integrity decision | Preserve the event evidence; do not add a Defender exclusion first |
| Only a node Timeout or DNS error | The network stage after the core has started | Switch to connection and latency troubleshooting |
| The installer itself will not open | Download, architecture, or a Windows Security block | Recheck the official installer and file source |
Record the version, architecture, and original error first
First close any repeatedly opening FlClash processes; do not keep installing over the existing copy. Record the Windows version, system type, FlClash installer filename, and a screenshot of the first pop-up or DesktopCoreFailure. The official v0.8.96 Release provides both amd64 and arm64 Windows installers and archives, so the filename can confirm which one was actually installed.
If system proxy or TUN was enabled earlier, disable the system proxy in Windows network settings and confirm ordinary webpages work over a direct connection. Leaving a local proxy enabled while the client cannot start mixes a launch failure with a system-wide network outage. Do not delete Profiles, subscriptions, or the app data directory; neither troubleshooting path requires clearing user configuration first.
Save the information needed to roll back
Record the installer filename
Confirm whether it is windows-amd64 or windows-arm64; do not use “64-bit” in place of the exact architecture.
Save the first error
Record the full DLL name; for DesktopCoreFailure, keep the time it appeared so you can find the corresponding event.
Restore direct system connectivity
Turn off FlClash's system proxy or the Windows manual proxy so traffic does not keep going to a local port with nothing listening.
Keep the existing configuration
Do not delete Profiles, overrides, or subscriptions, and do not expose tokens, node addresses, or passwords in support screenshots.
Repair the official Microsoft v14 runtime when a DLL is missing
Use this path only when the pop-up explicitly names MSVCP140.dll, VCRUNTIME140.dll, or a similar v14 runtime file. Microsoft distributes these files with the Visual C++ v14 Redistributable.
Microsoft's official page provides stable download links for x64, x86, and ARM64. Current FlClash Windows Release assets target amd64 and arm64, so first install the x64 or ARM64 runtime that matches the official asset target; consider x86 only if the official guidance or a dependency check explicitly identifies a 32-bit component.
The amd64 installer corresponds to Microsoft's x64 runtime; the arm64 installer can use the ARM64 runtime. Microsoft currently also notes that the x64 installer contains both x64 and ARM64 binaries, but the easiest approach to verify is still to match the FlClash installer architecture with the runtime download.
Install or repair the runtime
Open the v14 download page on Microsoft Learn
Use only the official permanent aka.ms links listed on the page; do not download files from third-party DLL sites.
Select the matching architecture
Use X64 for windows-amd64 and ARM64 for windows-arm64. Check the filename again after downloading.
Run the official installer
Choose Install if the runtime is not installed; if it is already installed, choose Repair first. Follow the Windows prompts and do not copy DLLs manually.
Open FlClash again
Launch it directly after installation; restart Windows only if the installer explicitly asks you to.
Check Code Integrity events first for DesktopCoreFailure
If there is no DLL pop-up but the interface displays DesktopCoreFailure, first open Windows Security and check the Smart App Control status under App & browser control.
An On status alone does not prove a block. You must also match the failure time to events in the Microsoft-Windows-CodeIntegrity/Operational log.
Microsoft documents event 3077 as recording a file actually blocked by an enforced policy, while event 3089 provides signature information. First use 3077 to confirm the blocked file, then use the Correlation ActivityID to find one or more 3089 events associated with the same decision.
Matching only by nearby timestamps can incorrectly pair a signature event from other software. In the #2367 report, both event types point to the FlClash core executable.
If the log has no matching path and ActivityID, do not automatically attribute DesktopCoreFailure to Smart App Control.
Get-WinEvent -FilterHashtable @{
LogName = "Microsoft-Windows-CodeIntegrity/Operational"
Id = 3077, 3089
} -MaxEvents 20 |
Format-List TimeCreated, Id, ActivityId, MessageEvent 3077 points to the FlClash core and its time matches the failure
Then use the same ActivityID to inspect all associated 3089 signature information.
Only old events appear, or the path belongs to other software
This does not match this type of block. Return to the FlClash log and find the first core error.
Smart App Control is Off or in Evaluation mode, and there is no 3077 event
Do not change security settings; inspect the installer, service, and core logs instead.
Defender reports no threats, but event 3077 still exists
This is a separate Code Integrity decision; antivirus results cannot replace event evidence.
Do not make disabling security features your first choice after confirming a block
Microsoft currently states that Smart App Control has no allow switch for individual apps; ordinary Defender exclusions also cannot override a Code Integrity trust decision. After confirming event 3077, do not keep adding directory exclusions or look for a supposedly unlocked core on third-party repackaging sites.
A safer sequence is to preserve redacted evidence from the official installer, event 3077, and event 3089 entries under the same ActivityID, report it to FlClash, and then check whether the project has provided a newer official build with a verifiable signature or clearly established reputation.
While waiting, you can return to an official FlClash version that you have previously confirmed launches on this computer, or temporarily use another maintained client from a verifiable source. If the rollback is still blocked, stop repeatedly downgrading.
Disabling Smart App Control entirely reduces system-level protection, not just protection for FlClash. Microsoft's FAQ has also changed the conditions for re-enabling it in recent years, so this article does not present disabling it as a fixed repair step. If you must consider it, first read the official guidance for the Windows version on your device, understand the device-wide impact, and then make your own decision.
Prefer reversible actions
Preserve event evidence
Record event 3077, the associated ActivityID, every corresponding 3089 event, the file path, and the signature status, removing the username and private directories.
Check official project updates
Accept only later builds from the official FlClash repository or Releases; do not download files re-signed by other people.
Try a known working version
Back up your Profiles first, then use an official version you have already confirmed launches on this computer. Do not treat one successful launch as a permanent security verdict.
Temporarily switch clients if necessary
Choose a maintained alternative client from its official project source, then re-import your backed-up configuration.
Verify whether FlClash launches using the selected path
After completing the DLL path, restart FlClash and confirm that the original pop-up no longer appears and that both the interface and core load normally. After completing the Smart App Control path, confirm both that DesktopCoreFailure is gone and that no new event 3077 near the current launch time points to the FlClash core. Seeing the window open is not enough; the core and configuration must load successfully too.
For the first recovery test, keep TUN off, select a known working node in the original Profile, enable the system proxy, and make one ordinary HTTPS request. This lets you verify “the application can finally launch” separately from “the network configuration still works.”
Launch recovery criteria
- No MSVCP140.dll or VCRUNTIME140-family pop-up appears at launch
- The FlClash interface opens and the core status is no longer DesktopCoreFailure
- No new Code Integrity event 3077 near the current launch time points to the FlClash core
- The original Profile and policy selection remain, without clearing user data first
- With TUN off, the system proxy completes a new HTTPS request
- Direct Windows connectivity returns immediately after exiting FlClash
Reinstall or roll back only if it still will not launch
If the same DLL pop-up remains after repairing the runtime, first check the architecture of Microsoft Visual C++ v14 Redistributable under Installed apps; its display name may change between versions. Then run Repair again.
Then redownload the installer that matches your system from the official FlClash v0.8.96 Release. You can also test the official archive for the same architecture to determine whether the problem occurs only during installation.
If the archive reports the same DLL, continue troubleshooting the runtime instead of repeatedly installing FlClash over itself. If the DLL error disappears but becomes DesktopCoreFailure, you have entered the other path and should inspect Code Integrity events. When a Smart App Control block remains, reinstalling the same file without any change to its trust state usually produces the same result.
How to interpret the result after retrying
| Result | Next step |
|---|---|
| Both the installed and archive versions report the same DLL | Recheck the v14 runtime architecture, Repair result, and Windows installation state |
| The DLL error disappears, but DesktopCoreFailure appears | Inspect events 3077 / 3089 instead; do not keep copying DLLs |
| An older version launches, but the new version still fails | Keep a comparison between the older version and the events, report it to the project, and do not falsely claim an official fix |
| All versions are blocked by event 3077 | Stop reinstalling repeatedly; wait for a trustworthy official build or use an alternative client |
Finish with a seven-item verification checklist
Final checklist
- The error text matches the troubleshooting path, and you did not change several unrelated settings at once
- The FlClash installer architecture and Microsoft v14 runtime architecture have been checked
- No individual DLL was downloaded from a third-party site or registered manually
- DesktopCoreFailure was diagnosed using event 3077, the Correlation ActivityID, and associated 3089 events
- A Defender exclusion was not used as a way to allow the app through Smart App Control
- Profiles, subscriptions, and overrides remain intact, and no sensitive information appears in the report
- The app, core, system proxy, and direct connectivity after exit were all verified with real requests
References
- FlClashReport of FlClash 0.8.96 failing to launch because MSVC runtime DLLs are missing
- FlClashReport of DesktopCoreFailure when Smart App Control blocks the FlClash core executable
- FlClashFlClash v0.8.96 stable release and Windows installers
- Microsoft LearnLatest supported Visual C++ v14 runtime
- Microsoft LearnCorrelate Code Integrity events using ActivityID
- Microsoft SupportSmart App Control FAQ and per-app exception limitations
