How to deal with Microsoft Edge's "isn't commonly downloaded" warning

Martin Brinkmann
Jul 2, 2022
Microsoft Edge
|
11

All downloads in the Microsoft Edge web browser are scanned using Microsoft Defender's SmartScreen feature. Designed to weed out malicious files before they land on the user system, SmartScreen is the first line of protection when it comes to file downloads.

microsoft defender smartscreen

One of the problems with SmartScreen is that it is also blocking file downloads for new and uncommon files. If a file is not known at all by SmartScreen, or not commonly downloaded, then it may be blocked automatically. The file itself may be perfectly harmless, but it won't land on the user system unless explicitly allowed.

Some users may deal with the issue by using another browser or program for the download. Others may want to use controls provided by Microsoft Edge to keep the download.

ADVERTISEMENT

While the latter is relatively easy, it may not be obvious immediately how that is done. Edge displays different SmartScreen warnings depending on why it is blocking the download.

edge warning download

In the case of new files, it displays:

FILENAME isn't commonly downloaded. Make sure you trust FILENAME before you open it.

The interface has no options to deal with the issue by default. All icons that are displayed are standard icons that do not help. It is necessary to move with the mouse over the entry of the blocked file to get a list of actions. Even then, it is limited to a trash icon to delete it and a three-dots menu.

edge smartscreen more actions

A click on the three-dots menu displays more options, including "keep". The file is saved to the local system's download folder when you select keep, but not immediately.

Edge displays yet another warning and an explanation for blocking the file download in first place.

edge download warning

It reads:

Make sure you trust FILENAME before you open it.

Microsoft Defender SmartScreen couldn't verify if this file is safe because it isn't commonly downloaded. Make sure you trust the file you're downloading or its source before you open it.

Edge displays the file name below that and the publisher, or unknown, if the publisher is not known.

The entire prompt has no "keep" option by default. There is a big Delete button and a Cancel button. Delete removes the download file, cancel stops the process, but does nothing else.

You need to activate the "show more" link to display additional options.

edge download keep

Once activated, show more reveals new options, including "keep anyway".  Activate the option to -- finally- get the file saved to the local system.

Note that Microsoft Defender may scan the file once it lands on the local system, and that you may have to deal with it interfering with the file as well.

Closing Words

The entire process is designed to discourage Edge users from downloading flagged files. While that would be an understandable approach for malicious files, it is not for files that are blocked just because they are new.

Now You: what is your take on the process? How do you deal with browser's blocking file downloads?

Summary
Microsoft Edge is making it really difficult to download new files
Article Name
Microsoft Edge is making it really difficult to download new files
Description
Microsoft Edge uses Microsoft Defender SmartScreen to scan files during file downloads. New files, with certain file extensions, may be blocked automatically by the browser, even if they are not malicious.
Author
Publisher
Ghacks Technology News
Logo
Advertisement

Previous Post: «
Next Post: «

Comments

  1. ECJ said on July 2, 2022 at 1:32 pm
    Reply

    “…While that would be an understandable approach for malicious files, it is not for files that are blocked just because they are new.”

    In the screenshots you are downloading an unsigned executable file with no reputation history. Those types of files should be treated as highly suspicious, as anyone can create them and upload them somewhere pretending to be legitimate software. That should absolutely set alarm bells ringing and therefore make sure the end user if fully aware what they are about to do and don’t just mindlessly click through and download something that has a high chance of being malicious.

    1. no-tin-foil said on July 2, 2022 at 4:21 pm
      Reply

      I agree that there should be some safeguards, bu for people who dont know any better it is also a way to keep genuine files away and under suspicion.

      Many opensource projects cant afford to get binaries signed and not that signing binaries is any protection anyway, since certificates have been known to be misused to sign malware payloads and not the least Microsoft certificates have been not once but several times caught signing malware payloads that would happily pass this not even security feature and most antivirus.

      So some caution always not just because some moronic tinfoil hat idiot who devs these features says so., sign/not signed new old its all arbitrary decision on what is exactly malware or maybe dangerous.

  2. Tachy said on July 2, 2022 at 4:32 pm
    Reply

    I’m reminded of an old meme.

    “Everything happens for a reason. But sometimes the reason is you’re stupid and make bad decisions.”

    I’ll have to side with M$ on this one. Telling people to “Think before you do this” is a good thing IMO.

    1. no-tin-foil said on July 2, 2022 at 5:19 pm
      Reply

      Telling people to think works? Since when?

      And which company or gov wants people capable of critical thinking?

      Rubbish.

    2. Anonymous said on July 2, 2022 at 5:50 pm
      Reply

      That’s all well and good, but in this specific case, who is doing the “thinking”?
      Certainly not the end-user at first.
      The more dumbed-down society gets, the more dumbed-down it’s treated.
      Race to the bottom.

  3. Anonymous said on July 2, 2022 at 6:02 pm
    Reply

    I am curious about beautysearch.exe now.

    1. Nico said on July 2, 2022 at 7:53 pm
      Reply

      [https://www.majorgeeks.com/files/details/beautysearch.html] ;)

  4. ilev said on July 2, 2022 at 6:23 pm
    Reply

    Microsoft Defender SmartScreen should submit the files in question to virustotal just like Chrome does and block/allow according to results.

  5. Tim said on July 3, 2022 at 6:56 am
    Reply

    No browser should block but may offer a warning and ask if the user wants to continue and/or never ask again for that file or website, etc. Surely there is a smarter way of not imposing more control on everyone because some are dumb enough not to have protection.

    This doesn’t protect the end-user as all the hackers will do is shield it inside of something legit. And scammers already use legit software to take people’s money.

    It is just another means of making life more difficult for most people, give more decision making, control to MS and Chrome.

    Why don’t they do more in education of the people? Because there is no money in it. Like good drugs are banned because Pharma can’t use them to make bigger profits.

  6. The Steve Hostin said on July 3, 2022 at 12:31 pm
    Reply

    I’ve always fully disabled defender smartscreen from running. Don’t need it’s annoyances. Been on the internet since 56k dial-up days. I.e. over 22 years ago. And just by common sense you know what to and not to download or click on.

  7. pHROZEN gHOST said on July 3, 2022 at 3:02 pm
    Reply

    My solution is the simplest. Do not use Edge.

Leave a Reply

Check the box to consent to your data being stored in line with the guidelines set out in our privacy policy

We love comments and welcome thoughtful and civilized discussion. Rudeness and personal attacks will not be tolerated. Please stay on-topic.
Please note that your comment may not appear immediately after you post it.