Warning to the app downloaded in "Microsoft Edge" ... is it okay to execute it?-Youjimono Forest -Window Forest

Yajima no Mori

There are cases where it is OK if you are careful, and you may never do it.

　“Yajima no Mori”では、ニュース・レビューにこだわらない幅広い話題をお伝えします。

ファイル分析

　Downloading the app in "Microsoft Edge" may give you a warning that "you have been blocked because you may cause a problem with your device."I guess there are occasional apps in the application introduced in the news of the window of the window, but can this be installed as it is?

Know "Microsoft Defender SmartScreen"

　Before you know it, let's study a little about Microsoft Defender SmartScreen, which is issued this warning.

　"Microsoft Defender SmartScreen" is a fishing malware warning system provided by Microsoft.Previously, it was called "SmartScreen Filter" when used in a web browser, or "Microsoft SmartScreen" for other use, but now "Microsoft Defender SmartScreen" is the official name.It seems that.The following is simply called "SmartScreen".

　"SmartScreen" has two main features.

　Warnings and block criteria are different, but it seems that the scanning results of the virus engine and reports received from other user environments (reputation check systems) are based.

サイト分析

File analysis warning level

　The message "I have been blocked because there is a possibility of a problem with your device" is related to the latter "file analysis" of the two features mentioned above."File Analysis" is a function that examines the apps that users are trying to download and classify them into the following three.

1. 安全であることがわかっているファイル：通知なしでダウンロードされる
2. 不明なファイル：あまり利用している人がいないため、情報が十分に蓄積されていない。安全であると確信できないため、ダウンロードをブロックしてユーザーに注意を促す
3. 悪意のあることがわかっているファイル：被害が報告されているファイル。ダウンロードをブロックしてユーザーに警告を出す

　The message "I have been blocked because there is a possibility of a problem with your device" is displayed when it is judged to be the second "unknown file".The apps introduced in news articles are often freshly made, so many people download and use this warning are displayed.

　In many cases, download and execute, but to encourage you to do so, you need more steps than usual.

ダウンロードアイテム上にマウスカーソルを移動させ、［…］メニューをクリック。［保存］メニューを選択するポップアップが表示されるので、［詳細表示］をクリックして非表示のコマンドを展開する［保持する］コマンドをクリックして、ダウンロードフォルダーに保存する

　In addition, a blue dialog appears even when starting up, so that it cannot be executed without spending a lot of time.To prevent the malware from entering the system by double -clicking on it.

［詳細情報］をクリックアプリ名と発行元とともに、［実行］ボタンが現れる

　If you are uneasy, right -click the download file and check it out with the built -in "Microsoft Defender" malware scan engine.The full scan of the system is also effective.

ダウンロードファイルを右クリックし、OS内蔵の「Microsoft Defender」マルウェアスキャンエンジンで調べる「Microsoft Defender」でシステム全体をクイックスキャンすることも可能

　It may be a good idea to use the official tools of the malware check service "Virustotal" to contact us.You can know how it is evaluated with security software other than "Microsoft Defender".

関連記事

Send to the malware detection service "Virustotal" easily "Virustotal Uploader"

Free virus check service "Virustotal" official Chrome expansion "VTCHROMIZER"

　By the way, if the file analysis of "SmartScreen" determines that it is "a file that knows it is malicious", the following warning (this is an example where a notification is displayed on the download shelf below the view., Depending on the environment, a notification is displayed on the download tool button at the top of the screen).

絶対に実行を避けるべき「悪意のあることがわかっているファイル」注意しながらであれば、実行しても構わない「不明なファイル」

　Remember that if you use a yellow triangle "!" Icon (but be careful!), In the case of a red circle "x" icon, you should not execute it.

postscript

　If you want to try a warning for "Microsoft Defender SmartScreen", the official demo site is useful.

　I think that it works only with "Edge", but it would be interesting to try out what kind of warnings are actually displayed.

公式の「SmartScreen」デモサイト