DynamoRIO / DynamoRIO/drmemory

2.6.0 Windows Installer ist detected as PUA:Win32/Packunwan by Windows Defender

Open
#2,517 4 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
2.7k
Forks
290
PR merge metrics
No merged PRs in 30d

Description

**Describe the bug**
Windows Defender identifies the severe PUA:Win32/Packunwan threat for DrMemory-Windows-2.6.0.msi.

**To Reproduce**
Steps to reproduce the behavior:
1. Download https://github.com/DynamoRIO/drmemory/releases/download/release_2.6.0/DrMemory-Windows-2.6.0.msi

**Expected behavior**
The installer should not raise red flags with Windows Defender.

**Screenshots or Pasted Text**
![image](https://github.com/user-attachments/assets/67e50f9c-bf84-4bb7-802f-0d635492d919)

**Versions**
- What version of Dr. Memory are you using? 2.6.0
- Does the latest build from
https://drmemory.org/page_download.html#sec_latest_build solve the problem? For some reason 2.6.0 gets flagged everytime, but the latest build less often.
- What operating system version are you running on? 10.0.22631 Build 22631
- Is your application 32-bit or 64-bit? irrelevant as I don't get that far

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.