Can you confirm you downloaded a file named torbrowser-install-12.5.6_ALL.exe, and not torbrowser-install-win64-12.5.6_ALL.exe? You would be the first one to report an issue with the 32b version, and according to virus total, Windows Defender sees nothing wrong with it either.
can I ask you what is that detection and what causing it ?
Antiviruses are black boxes, I don’t know why one would like something and not like something else.
been using Tor for the last 5 years. never something like this.
This used to be a frequent occurrence in the past, so much so that this support page had to be created.
The usual reason was that some virus would use tor to connect to its c&c server, so antivirus vendors would see that binary (tor.exe) as part of the virus, and therefor flag and delete it. This looks very much like these past occurrences to me, but again AVs are black boxes, short of having a statement from someone at Microsoft, we don’t know why it gets flagged.