Windows Defender is detecting and deleting successful cloud build win64-bit ZIP download as maleware

Unity Services
1

I’m trying out Cloud Build for the first time and after successfully making a build thought the service I attempted to “Download .ZIP file” upon which Windows Defender detects and delete the file being detected as Trojan:Win32/Manrele.G!cl

Info:
https://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?name=Trojan%3AWin32%2FManrele.G!cl&threatid=2147710341&enterprise=0

My build is a very simple project with a build target setup as Platform: Windows desktop 64-bit; Target Label: Default Windows desktop 64-bit; Unity Version: Use Latest 5.5

This is concerning given the severity warning. I’ve tried downloading other zip files from the Unity website to confirm there was not some strange issue on my system.

Note: I tried changing the build target to Windows desktop 32-bit and the ZIP downloaded fine! Something seems to be up with the 64-bit build.

2

Hello,

I’m looking at your project dashboard, and I don’t see any Windows 64-bit builds on there. Could you send me the link to your project via PM so I can make sure I’m looking at the right thing?

  • Sophia
3

A quick update: this appears to be related to an issue that’s being discussed in the Windows platform sub-forum now, wherein Windows Defender is (at least sometimes) currently triggering on part of the Unity player executable. People here at Unity are talking with the Microsoft team about that now, and updates will likely be posted in that forum.

4

Thank you both for looking into this. Sophia I had converted that 64 built to 32 as a test so that is what you didn’t find it, I don’t think I need to to look into it any further as it was probably related to what Phil has pointed out. As of a Windows Defender definition update today to Ver 1.235.1209.0 has resolved the issue itself.

2 Likes