Excel File Flagged as Malicious by Defender MDE

Question

A macros-enabled Excel file is being flagged as malicious by Defender MDE every time changes are made and the file is saved under a different name, resulting in file corruption. Since the SHA value changes with each modification, submitting the file to Microsoft for review does not resolve the issue. What steps can be taken to prevent this corruption? Is there a way to whitelist a specific file by its name?

Answer 1

Hi @Aishwarya RM

Your issue may be more related to Defender.

I suggest you wait for a reply and advice from Defender support in another similar thread: https://learn.microsoft.com/en-us/answers/questions/2154321/known-file-getting-tagged-as-malicious

From the perspective of Office, it is recommended that you add the path where the workbook is stored as a trusted location.

If your files are stored on OneDrive, you also need to add the https://{your-domain-name}-my.sharepoint.com into Trusted Sites zone. For more, please refer to: Files on OneDrive or SharePoint.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

---