Submission for malware analysis

Question

We are developing a desktop application and signing it with a Microsoft certificate. However, Microsoft Defender SmartScreen displays a message that the application may be malicious and prevents it from running. We sent the application to malware analysis and it successfully passed it. However, we are constantly releasing updates, and new versions of the application cause malware notifications from Microsoft Defender SmartScreen. How can We avoid these messages appearing for new versions of our application? Is this even possible, or are we forced to check every version of the application by sending it to malware analysis? How long does the certificate's reputation take to establish?

Answer 1

-Hi, my name is Claudeir, I'm happy to help you!

-I want to apologize that this is just a forum for common consumers with domestic issues, because the scope of your question is more focused on a corporate or advanced environment, I suggest you post your question on the appropriate Microsoft Q&A site, where there are several IT technicians ready to help you:

https://docs.microsoft.com/en-us/answers/products/

I also want to inform you that we are not Microsoft employees and we do not have contact with developers, so we do not have this type of information or access, if you want, see the means of contacting Microsoft directly:

https://support.microsoft.com/en-US/contactus

https://support.microsoft.com/en-us/topic/globa...

-Feel free to leave your opinion, marking as answered if the answer helped, or leaving more details so that we can continue the service, this is very important to us.

Graciously,

Claudeir

Answer 2

We are developing a desktop application and signing it with a Microsoft certificate. However, Microsoft Defender SmartScreen displays a message that the application may be malicious and prevents it from running. We sent the application to malware analysis and it successfully passed it. However, we are constantly releasing updates, and new versions of the application cause malware notifications from Microsoft Defender SmartScreen. How can We avoid these messages appearing for new versions of our application? Is this even possible, or are we forced to check every version of the application by sending it to malware analysis? How long does the certificate's reputation take to establish?

Ivan,

Though your question is a bit technical, there are plenty of people here who understand the operation of SmartScreen and why the problems you are having continue to occur.

I recently had a discussion here with another small developer with a similar problem and provided my recommendation that he switch to an Extended Validation Certificate for exactly the same sort of issues you're experiencing. Rather then re-write the entire explanation again, here's the URL to that other thread where we both discuss using additional references to threads on developer sites that cover this well known issue in depth.

Who to contact to get our software filed as safe instead - Windows - Microsoft Community

Rob