Carbon Black flagging WWise Launcher dropping Bitcoin miner PUP from AkSoundEngine.dll

Question

We are seeing these Alerts from a small number of Mac and Windows machines.

Carbon Black support has provided the following information:

Event: 

The file /private/var/folders/qn/yxvx6dps6bd94xql6kyrwf3c0000gp/T/WwiseLauncher/decompress_unityintegration.2021_1_4_2232/Wwise/API/Runtime/Plugins/Windows/x86_64/Profile/AkSoundEngine.dll was first detected on a local disk. The device was off the corporate network using the public address xxx.xxx.10.66 (located in xxx). The file is not signed. The file was created by the application /Applications/Wwise Launcher.app/Contents/MacOS/Wwise Launcher.

Target name:  AkSoundEngine.dll
Target reputation: PUP
SHA-256: b27c916b9ed8f8548bd7f4b626cc799a8348e2d713141fc7a85082bbbde9392b

Cause: 

The file AkSoundEngine.dll was detected on the system during the Background scan and since it had a malicious reputation it was generated as an alert on the console. The file was not blocked as it was not found to be running but was just detected on background scan. 

Comments

Hi there,

Same problem for me, with Avira, detecting the AkSoundEngine.dll as a PUA/BitCoinMiner (and removing it from my Unity game when I launch it).
Fun fact is that the file is added to quarantine list...but If I restore the file and make an Avira Scan on it, no threat is detected

In any case, this i a blocking problem, as I need to send the game as a compressed file, and as soon as uncompressed, the .dll is removed and placed to the quarantine (making the game broken and unplayable)

Wwise team, any idea of where the problem come from and how to solve it?