If the download source is verified, users can typically bypass the warning by clicking "More Info" and "Run anyway" in the Windows SmartScreen prompt.
The consensus among the Godot development team is that these are false positives . This often happens with open-source software when a new release hasn't yet established a "reputation" with Microsoft's automated scanning algorithms. 110612
This topic centers on reports from users who encountered "Trojan" or malware warnings when attempting to download or run the Godot v4.5 Stable binary for Windows. Technical Review & Findings If the download source is verified, users can
Users are encouraged to upload the binary to the Microsoft Security Intelligence file submission portal to report it as a false positive. This helps the engine's binaries gain trusted status more quickly. If the download source is verified