Thorium detected as threat by Windows Defender

[Masurukat]

System Details

• OS: Windows 11 23H2 22631.2428
• Thorium Version M117.0.5938.157

Problem
Shortly after syncing with Google and then removing a couple of extensions I didn't want Windows Defender quarantined Thorium.

Screenshots

[gz83]

Thorium Browser does not use any malicious code or bundled with any malicious components, please consider it as a false alarm by antivirus software.

@Niverive

[rohitsaha29]

How can we just take your word for it like this? surely there can be a bigger explanation or proof of some sort than just "it does not use any malicious code". it is still a little worrying for some users, I hope you can understand from our POV especially as a long time thorium user.

[ghost]

This happend to me too

[Smgit5]

OS: Windows 10 22H2 19045.3570
Thorium version: M117.0.5938.157

Same thing happened. I still haven't synced, before syncing this warning came all of a sudden.
For now, I have restored it, but it would be better if this could be resolved, or at least a brief explanation for this warning.

Screenshot:

[Masurukat]

I did a full scan afterwards and Windows Defender also removed other stuff.

[biggie0274]

Same here.. Edition Windows 10 Pro
Version 22H2 OS build 19045.3516

[ahommen]

Thorium detected as threat by Norton 360 aswell...

"Suspicious process attempted to modify attributes of a file protected by Data Protector"

Target file was a system temp, json file

[mattgphoto]

My two cents here: I generally throw Microsoft Defender's opinions out the window. It can tell you it's a virus just because it's not signed, which for a indie developer can cost LOTS of money. Virustotal tells me that:

1. Go figure, the app isn't signed
2. Very few vendors (2) have said it's malicious.

Report on the windows installer (thorium_mini_installer) here https://www.virustotal.com/gui/file/6932df0545278add147665edacdf98ee145516ba7ded05b8a42e9c2806e7272e/detection

[CrippleZero]

In this case Windows Defender is acting like every other Anti-Virus ... I get the same thing with BitDefender. Saying "trust me it's fine" is not a way to reassure people. Please determine what in your code is flagging and get it whitelisted.