VirusTotal report

[inv2004]

https://www.virustotal.com/gui/file/a9566eda1bc417a6e862ee07add300eb2d3c44ec24b5c35caf583ce7ff11330c?nocache=1

[cjseaslug]

So a recent build I self-compiled with a few options from the source here is reporting the same....

https://www.virustotal.com/gui/file/e8b490f0180a44e197133988b17aae55ab859c742c33c5710ffcfa524c3cc324?nocache=1

But an older prebuilt version I downloaded from here is not:

https://www.virustotal.com/gui/file/1415abfb15fd53344750f5231f020322f0318ac0d2dcbd08c8a597f138d7689c

Thank you for reporting this, it's definitely got me nervous. Time to poke through the source, WTF is happening here?

[prabirshrestha]

The entire release is automated with GitHub workflows.

https://github.com/prabirshrestha/dwm-win32/blob/master/.github/workflows/ci.yml

I'm wondering if this has to do something with some crashes happening and it then treats the binary as a virus. One of the Windows Defender folks had pinged me at work when I was testing this in a work machine and I mentioned that I implementing a feature and it was crashing and has nothing to do with virus. I wouldn't be surprised if most of the virus scanners are doing the same.

Probably we need to get this sooner. #71 and #75

[pa-0]

If you submit the compiled binary to Microsft for malwayre analysis, once they clear it, they will update Defender virus definitions globally. This should help prevent anymore false positives (on machines using Defender as primary AV at least)