"Windows protected your PC" when installing AppGrabbit
What the notice means, how to verify the file, and how to continue.
Updated: September 2026 · 3 min read
The blue "Windows protected your PC" window is Microsoft SmartScreen. It appears because the AppGrabbit installer is not code-signed and is still new to Microsoft's reputation list, not because it found anything harmful. Click More info, then Run anyway. If you want proof first, compare the file's SHA-256 with the one published on GitHub (steps below).
What the notice actually means
SmartScreen keeps a reputation list of installers. A file gets on that list in two ways: the publisher pays for a code-signing certificate that has already earned reputation, or enough people have downloaded and run the file without incident. A new installer from a small publisher has neither, so SmartScreen shows the warning to everyone by default. It is a statement about reputation, not about the contents of the file. Windows Defender still scans the installer before it runs.
Why we have not bought the certificate yet
An OV or EV code-signing certificate costs several hundred dollars a year, and a freshly bought certificate still triggers the notice until it builds its own reputation. AppGrabbit is made by one person in Mexico and the app has not yet paid for that. The trade we chose: keep the source public, publish the hash of every installer, and explain the notice next to every download button. When the app earns it, the installer will be signed.
How to continue: two clicks
- 1Click More info — it is a small link under the text of the blue window. The window then shows the file name (AppGrabbitSetup.exe) and "Publisher: Unknown publisher".
- 2Click Run anyway — the button appears at the bottom. The normal installer opens: choose the folder, click Install, and AppGrabbit starts in about a minute.
How to verify the file yourself (optional)
Every release on GitHub ships a SHA256SUMS.txt. To check that the file you downloaded is the one we published:
- Open PowerShell (Start, type PowerShell, Enter).
- Run:
Get-FileHash "$env:USERPROFILE\Downloads\AppGrabbitSetup.exe" - Compare the long hash it prints with the line for
AppGrabbitSetup.exeinSHA256SUMS.txtof the same release. If they match, the file is byte-for-byte ours.
You can also upload the installer to VirusTotal; a couple of heuristic engines may flag any unsigned installer that bundles FFmpeg and yt-dlp, which is what AppGrabbit does.
After the first install, no more notices
AppGrabbit updates itself: it checks for a new version, downloads it in the background, verifies its SHA-256 and applies it without windows or questions. SmartScreen only looks at the installer you ran by hand, so you see the notice once.
Frequently asked questions
No. The notice is not a virus detection. It is Microsoft SmartScreen saying the installer has no paid code-signing certificate and is not yet common enough to be on its reputation list. Windows Defender scans the file anyway and lets it run.
A code-signing certificate for a small publisher costs several hundred dollars a year and, on its own, does not remove the notice until the certificate builds reputation. We will sign the installer when the app pays for it.
Yes. Compare the SHA-256 of the downloaded file with the one in SHA256SUMS.txt on the release page, as shown above.
No. Updates are downloaded and applied by the app itself with a SHA-256 check. You only see SmartScreen the first time.
On some company-managed PCs SmartScreen is set to block without the link. Ask your administrator, or use a personal PC.
Related guides
Install AppGrabbit
Windows 10/11 · 106 MB · Free to start · Your files never leave your PC