Has anyone seen Microsoft Defender block or quarantine UnrealGameSync (UGS)?

Community Community & Industry Discussion
,
1

Hi all,

Has anyone experienced Microsoft Defender (AV / behavior‑based detection) blocking or quarantining UnrealGameSync binaries during normal use or updates?

In one case, Defender flagged UGS during what appeared to be an auto‑update cycle, where UGS:

  • updated itself in the Latest folder

  • relaunched the executable

  • spawned cmd.exe as part of the workflow

This resulted in a temporary quarantine, even though UGS later ran normally once restored.

The detection was behavior‑based (ML/heuristic), not a known malware signature, and seems tied to the specific runtime behavior at that moment rather than the binary itself. Other machines did not experience the same issue, which suggests per‑device Defender policy or reputation differences may play a role.

I’m curious whether others have seen similar Defender alerts or quarantines related to UGS (especially during self‑update), and if so:

  • Was it a one‑off event or recurring?

  • Did exclusions end up being required, or did it resolve on its own?

Thanks in advance for any shared experiences.