HashLoad / HashLoad/boss

Virus warning from Windows Defender on ARM64 version

Open
#278 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
626
Forks
103
Avg merge
7d 2h
Merged PRs (30d)
5

Description

Hi

I am getting a virus warning when I download the WinArm64 version. The warning is from Windows Defender and is up to date.

I'am getting: https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?name=Trojan%3AScript%2FWacatac.B!ml&threatid=2147735503

The other ones seems not infected.

Could be false positive but I never get these warning.

Sincerely, Edward

ps thanks for this amazing tool!

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the Windows Defender warning for the downloaded WinArm64 version and compare that artifact with the other versions, using the linked Microsoft threat report as context. Done means the WinArm64 download has been verified and the warning is resolved or its false-positive status is clearly documented.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
release, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.