gauge-java plugin v1.0.2 is being removed by Windows Defender

[swpickle]

Describe the bug
Windows Defender is flagging gauge-java plugin v1.0.2 with Trojan:Win32/Bearfoos.A!ml

We use several Azure Windows VMs to run automation. After updating to the latest plugin versions, the automation started failing with the message

[Gauge]
Failed to start gauge API: Failed to find the implementation for: java.
C:\Users<username>\AppData\Roaming\gauge\plugins\java\1.0.2\java.json does not exist.

Your Environment Information -----------
windows, 1.6.28, a120821
html-report (4.4.6), java (1.0.2), json-report (1.0.2), screenshot (1.0.2), spectacle (0.2.4), xml-report (1.0.1)

---

Digging into the Windows Defender logs found that the the files were removed due to finding
Trojan:Win32/Bearfoos.A!ml

gauge -v

Gauge version: 1.6.28
Commit Hash: a120821

Plugins

html-report (4.4.6)
java (1.0.2)
json-report (1.0.2)
screenshot (1.0.2)
spectacle (0.2.4)
xml-report (1.0.1)

[chadlwilson]

Unfortunately Windows Defender's "machine learning" detection (!ml) is full of false positives so this is likely noise. Probably made worse by gauge binaries not being signed by $$$ certs that are part of Windows' trust initiative.

it's clear on virustotal as one would expect: https://www.virustotal.com/gui/file/29749b72a972a36992c5a44b3dd232182d4115f3fbea0d8f78dbf98b0eb0b0e9?nocache=1

Tried releasing another 1.0.3 bump to see if that one is clear.