Description
When a user downloads and attempts to install the Mergin Maps Windows application, Microsoft Defender SmartScreen displays a security warning stating that the application is from an "Unknown publisher" and that running it may put the PC at risk. This warning appears every time the installer is launched and may prevent users from installing the application, as less technical users are likely to click "Don't run" instead of "Run anyway."
Steps to Reproduce
- Download the Mergin Maps Windows installer
- Open the downloaded .exe file.
- Observe the Windows Defender SmartScreen dialog.
Actual Result
Microsoft Defender SmartScreen displays a warning dialog with the message: "Microsoft Defender SmartScreen prevented an unrecognised app from starting. Running this app might put your PC at risk." The Publisher is listed as Unknown publisher. The user must click "Run anyway" to proceed with the installation.
Expected Result
The Windows installer is signed with a valid, trusted code signing certificate. Microsoft Defender SmartScreen does not display a security warning and the application launches directly after the user confirms the installation via the standard UAC prompt.
Attachments
Screenshot of the SmartScreen warning dialog.
Description
When a user downloads and attempts to install the Mergin Maps Windows application, Microsoft Defender SmartScreen displays a security warning stating that the application is from an "Unknown publisher" and that running it may put the PC at risk. This warning appears every time the installer is launched and may prevent users from installing the application, as less technical users are likely to click "Don't run" instead of "Run anyway."
Steps to Reproduce
Actual Result
Microsoft Defender SmartScreen displays a warning dialog with the message: "Microsoft Defender SmartScreen prevented an unrecognised app from starting. Running this app might put your PC at risk." The Publisher is listed as Unknown publisher. The user must click "Run anyway" to proceed with the installation.
Expected Result
The Windows installer is signed with a valid, trusted code signing certificate. Microsoft Defender SmartScreen does not display a security warning and the application launches directly after the user confirms the installation via the standard UAC prompt.
Attachments
Screenshot of the SmartScreen warning dialog.