Not sure when it started happening as we had recently moved from LLBLGen 3.x -> 5.x and also had changed to Windows 10 workstations etc.

Windows Defender complains of the lack of Publisher on "LLBLGenPro-v552-Full-setup.exe" and then a similar warning is thrown by Trend Micro OfficeScan. Both are bypassable, but it might be better if none was required to avoid such messages.

This hasn't been reported before, and I didn't experience it myself before. We'll investigate it and get back to you.

It's odd that this happens as we're using nsis installer and it doesn't happen with that (it does with MSI installers sometimes, I experienced it first hand this week when I downloaded the npgsql installer (msi file) from github and saw exactly the same dialog as you saw with our installer). We can't reproduce it here with a normal Domain user downloading the zip from our website, unpacking it. The installer needs to run as administrator, so when starting it, you'll get a dialog where UAC requests the credentials of an administrator and whether the user wants that.

You did download the zip from our website, unpacked it and then saw this dialog? Or did you put the .exe on a local intranet website and users downloaded it from there? As that's a different situation: the exe is then 'from the internet' and Windows marks it as 'blocked'. (The reason we distribute as a zip, not as an .exe file )

I downloaded the zip from the llblgen site and unpacked the zip file then ran the exe as normal domain user. The prompts came up before any UAC prompt to elevate the user.

Based on your questions though, I copied into my One Drive and was just given the UAC prompt with no scanning. That's strange, but points to being an issue with a setting on our network rather than the exe. Will go pass on to the appropriate support people and get back

No problem Btw, could also be something in Windows 10 triggering the dialog while it was unjustified. (like with the genuine npgsql msi).