How to Fix Windows Defender False Positives in Google Chrome Cache
Question details
The user needs to know how to handle and report repeated Windows Defender malware detections that appear to be false positives originating from Google Chrome's cache.

- Product
- Windows Defender, Google Chrome
- Device & OS
- Windows
- Scenario
- Visiting legitimate websites like Twitch using the Google Chrome browser.
- Observed behavior
- Windows Defender repeatedly flags dynamically changing Google Chrome cache files as malicious threats, such as Win32/Trojan.Malgent, causing disruptive security alerts.
Before proceeding, ensure your Windows Defender virus definitions are fully up to date and verify that you have not recently downloaded or executed any suspicious files outside of standard web browsing.
Submit the Suspected Cache File for Microsoft Analysis
Report the suspected false positive to Microsoft Security Intelligence so they can analyze the cache file and update their threat definitions to prevent future false alarms.
Windows Defender relies on signature databases that can sometimes match benign website scripts stored in your browser cache. Submitting the file helps Microsoft correct these inaccuracies globally.
Open Windows Security, navigate to 'Virus & threat protection', click on 'Protection history', and find the exact file path of the flagged Chrome cache item.
Open a web browser and go to the Microsoft Security Intelligence file submission page at https://www.microsoft.com/en-us/wdsi/filesubmission.
Sign in with your Microsoft account, select your customer type (e.g., Home Customer), upload the suspected cache file, add a brief description of the issue, and submit it for analysis.

Clear Google Chrome Cache and Browsing Data
Clearing your browser's cached files will remove the specific data triggering the Windows Defender alert and stop the immediate warnings.
Maintain Your Productivity with WPS Office
While resolving system security alerts and browser issues, ensure your daily document tasks remain uninterrupted. WPS Office is a lightweight, highly compatible alternative to Microsoft Office that minimizes system resource usage while offering robust data protection for your files.
- 1. Download the Installer: Visit the official WPS website and download the free, lightweight installer package.
- 2. Install and Set Up: Run the installer and follow the quick setup wizard to customize your default document settings.
- 3. Open Your Files Seamlessly: Double-click any existing Microsoft Office document to open it in WPS Office without losing your original formatting.

Frequently Asked Questions
Why does Windows Defender suddenly flag Chrome cache files?
Websites often load background scripts for tracking, streaming, or advertising. Occasionally, these safe scripts contain code patterns that closely match the signatures of known malware, causing Windows Defender to mistakenly flag them as a threat.
Is my computer actually infected if I see a Win32/Trojan.Malgent alert in my browser cache?
If the alert strictly specifies a file path within the Google Chrome cache (e.g., AppData\Local\Google\Chrome\User Data\Default\Cache) and occurs only when visiting safe sites like Twitch, it is highly likely a false positive. However, you should still run a full system scan to be absolutely certain.
How long does it take for Microsoft to resolve a submitted false positive?
After submitting a file through the Microsoft Security Intelligence portal, it typically takes a few hours to a couple of days for security analysts to review the submission and push a definition update to Windows Defender.
Can I add the Chrome cache folder to Windows Defender exclusions?
While it is possible to add the cache folder to your exclusion list to stop the alerts, it is not recommended for security reasons. Doing so could allow actual malicious scripts downloaded by the browser to go undetected.




