I attempted to update my server artifacts to version 6500 this morning, and I came across a rather interesting issue. Windows Defender immediately flagged imgui.dll as Trojan:Script/Wacatac.B!ml malware.
As it came from the official artifacts page I’d normally attribute it to a false positive, however with the rather extensive outage I wanted to err on the side of caution and confirm that it’s indeed a false positive and not something more sinister at hand that is causing wider issues.
This detection in Windows Defender is almost always a false positive, the ‘!ml’ also indicates it’s from machine learning (AI misguessing) so probably yet another case of the usual ‘someone has to submit it to the Microsoft false positive portal’.
(for context, the machine used to build the server had been updated to the latest Visual Studio yesterday so that’s why this didn’t happen prior)