Windows Defender: Trojan:Script/Wacatac.B!ml

[TommyTheTerrible]

The mesa3d-24.2.3-release-msvc.7z file is being blocked by Windows Defender, accusing it of harboring Trojan:Script/Wacatac.B!ml.

[pal1000]

Does it say which file? Windows Defender is notorious for FPs in batch scripts with Trojan:Script/Wacatac.B!ml.

[pepoluan]

Hmmm, even though Defender cried wolf in my case, I can extract the .7z file with no problem at all.

Also after latest Defender update, the accusation changed: It now complained it detected Trojan:AndroidOS/ZkarletFlash instead.

So all in all I think it's just an FP.

[TommyTheTerrible]

Confirming Pepoluan's update.

Downloading the file on latest Defender signatures now gives Trojan:AndroidOS/ZkarletFlash on the .part file.

Might be a block hash collision causing a false positive but it won't allow any browser to download.