Get it from the official source
We don't host files. These links take you straight to the genuine, safe installer on the developer's website.
When you double-click a freshly downloaded program and see a blue box saying "Windows protected your PC — Microsoft Defender SmartScreen prevented an unrecognized app from starting," Windows is not telling you the file is malware. It is telling you the file is not yet widely known. SmartScreen checks downloads against Microsoft's reputation database, and anything new, niche, or unsigned trips this caution.
That distinction matters. Plenty of perfectly legitimate open-source and small-developer apps trigger SmartScreen simply because they haven't been downloaded by enough people yet, or because the developer hasn't paid for an expensive code-signing certificate. At the same time, the warning is also exactly what you would see for genuine malware, so you should never click through it blindly.
This guide explains how to tell the difference, how to run a file you have verified as safe, and the safety checks you should always perform first. The golden rule: only bypass SmartScreen for software you obtained directly from the official source and have confirmed is genuine.
Helpful tools
Microsoft Defender
Built-in Windows antivirus and SmartScreen reputation engine
Visit official site ↗
Sigcheck (Sysinternals)
Microsoft tool that shows a file's digital signature and VirusTotal status
Visit official site ↗
Step-by-step fix
-
1
Stop and confirm you downloaded the file from the publisher's official website over HTTPS, not an ad or mirror.
-
2
Right-click the file, choose Properties, and check whether it is digitally signed by the expected publisher.
-
3
Verify the file's checksum against the vendor's published SHA-256 value using Get-FileHash in PowerShell.
-
4
Scan the file with your antivirus, or upload it to VirusTotal for a multi-engine check.
-
5
If everything checks out, click 'More info' in the SmartScreen dialog, confirm the publisher, then click 'Run anyway'.
-
6
Alternatively, tick 'Unblock' under the file's Properties > General tab, click OK, and then run it.
-
7
If you cannot verify the source or signature, do not bypass the warning; delete the file instead.
-
8
Leave SmartScreen enabled in Windows Security so it continues protecting your future downloads.
What SmartScreen Is Actually Checking
Microsoft Defender SmartScreen compares the file's digital signature and hash against a cloud reputation database. Files that millions of people have safely run are trusted instantly. New or rarely seen files have 'no reputation yet,' which produces the unrecognized-app warning rather than an outright block.
So the warning is about familiarity, not a malware verdict. A brand-new release of a trusted open-source tool will often warn on day one and stop warning weeks later once enough installs accumulate.
Verify Before You Bypass
Before you even consider clicking through, confirm the file is genuine. Did you download it from the publisher's official website, not an ad or a mirror? Does its checksum match the value the vendor publishes? Is it digitally signed by a recognisable publisher when you check its Properties?
- Downloaded from the official domain over HTTPS
- Checksum matches the vendor's published SHA-256
- Signature in Properties names a real, expected publisher
- Clean result from an antivirus scan or VirusTotal
If all of those hold, the SmartScreen warning is almost certainly a reputation false positive.
How to Run a Verified App
Once you are confident the file is safe, you can proceed. In the SmartScreen dialog, click More info, confirm the app name and publisher shown, then click Run anyway. Alternatively, right-click the file, choose Properties, and under the General tab tick Unblock if that option appears, then click OK before running.
Both methods are fine for software you have verified. The wording is intentionally cautious to make you stop and think — which is exactly what you should do every time.
When You Should NOT Bypass
Never click 'Run anyway' for files you didn't expect, that arrived by email or chat, or that came from a download button on a page full of ads. Cracked software, keygens, and 'free premium' tools that trip SmartScreen are very often exactly what the warning fears. If you cannot confidently verify the source and signature, treat the warning as a stop sign and delete the file.
Don't Disable SmartScreen Entirely
It is possible to turn SmartScreen off in Windows Security settings, but doing so removes a valuable layer of protection from every download, not just the one you trust. The far better habit is to leave it on and bypass individual files only after verification. SmartScreen has stopped countless real infections precisely because most users leave it enabled.
Frequently asked questions
Questions & answers
No questions yet — be the first to ask!
Ask a question
Please sign in with your email to ask a question.
Comments (0)
No comments yet. Share your experience!
Leave a comment
Please sign in with your email to comment.