Known file getting tagged as malicious

Aishwarya RM 20 Reputation points
2025-02-04T14:22:31.1366667+00:00

I have a single macros enabled excel file, every time I make changes and save it with different name Defender MDE flags it as malicious and file gets corrupted. Every time I make changes, SHA value changes and hence submitting it to Microsoft as clean file is not helping. How do I stop this from getting corrupted? Is there a way I can whitelist any file by its name?

Excel
Excel
A family of Microsoft spreadsheet software with tools for analyzing, charting, and communicating data.
2,149 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,486 questions
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint Training
Microsoft Defender for Endpoint: A Microsoft unified security platform for preventative protection, postbreach detection, and automated investigation and response. Previously known as Microsoft Defender Advanced Threat Protection.Training: Instruction to develop new skills.
17 questions
0 comments No comments
{count} votes

Accepted answer
  1. Akhilesh Vallamkonda 11,680 Reputation points Microsoft Vendor
    2025-02-05T21:32:48.2533333+00:00

    Hi @Aishwarya RM

    Thank you for posting Microsoft Q&A Forum!

    If you have a file that was either wrongly detected as malicious or was missed, you can Submit a file for analysis.
    If you determine that the macros are safe, you can add your file to the Microsoft Defender for Endpoint exclusions list. This will prevent the file from being scanned and flagged as malicious in the future.
    The other side kindly check your Macros and protect against macro malware.

    Reference: https://learn.microsoft.com/en-us/defender-endpoint/navigate-defender-endpoint-antivirus-exclusions

    Hope this helps. Do let us know if you any further queries by responding in the comments section.

    Thanks,

    Akhilesh V.


    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.