Windows Defender flags latest release 3.4.1.35 as Trojan

[0xA16]

Hello
I wanted to bring to your attention that Windows Defender is flagging the latest release 3.4.1.35 as a Trojan. This was detected after downloading the package from the official GitHub release page.

Threat name: Trojan:Script/Wacatac.H!ml
Release version: 3.4.1.35
Download source: PingCastle_3.4.1.35.zip
Detection timestamp: July 15, 2025

[gerritlansing]

Hi @0xA16, Gerrit from the Netwrix product security team here. We're taking a look into this. PingCastle has been previously flagged for benign behavior and we expect the same sort of issue.

[RichardGardener]

Having the same problem.

[Cool34000]

Hi,

Bitdefender is also detecting latest version (3.4.1.38 as of writing) as a PUA (Potentially Unwanted Application)