Launchpad icon indicating copy to clipboard operation
Launchpad copied to clipboard

Launchpad-9.4.0.exe installer flagged as Program:Win32/Uwamson.A!ml by Windows Security/Defender

Open FlaminSarge opened this issue 3 years ago • 3 comments

Describe the bug The installer's being flagged as potential malware on Win10, unsure if anything's changed but this only started happening recently. In addition, VirusTotal also flags this file: https://www.virustotal.com/gui/file/32021bc83415772b217a5db312fc20df25185a4ab55b5d318af014bba57ec74f

To Reproduce Steps to reproduce the behavior:

  1. Download Launchpad-9.4.0.exe from Github releases page
  2. Scan with Windows Security (right-click context menu option)
  3. File gets flagged as a PUP: Win32/Uwamson.A!ml

Expected behavior This wasn't occurring prior to today.

Screenshots If applicable, add screenshots to help explain your problem.

Required Details

  • Windows 10 64-bit 21H1
  • Launchpad Version 9.4.0

Additional context

FlaminSarge avatar Apr 26 '22 08:04 FlaminSarge

I built the installer myself and I am positive there is no malware in it. I'm not sure offhand if there is some way to prove that it's safe or not, but I've seen these warnings too on multiple Launchpad versions, and I think they are similar to this: https://www.autohotkey.com/boards/viewtopic.php?t=90504

ReplicaObscura avatar Jul 07 '22 22:07 ReplicaObscura

Based on those forum topics, I will see if I can submit the Launchpad installer as a false positive on my end. Anyone else getting these messages, it would be helpful if they could also submit the file to their antivirus provider as a false positive so they can hopefully eventually mark it as safe.

ReplicaObscura avatar Jul 07 '22 22:07 ReplicaObscura

One more thing, the fact that it just started showing up for you when you posted this makes me think that something changed on the Defender side of things to start marking it as malware, since there weren't any significant changes on the Launchpad side.

It seems virus scanners tend to not like AutoHotKey scripts, particularly when they are compiled into an .exe, and even more particularly when they're compressed into an installer.

ReplicaObscura avatar Jul 07 '22 22:07 ReplicaObscura