The file could be being detected either during the download, or if it’s an installation-type scenario, something could be running from the temp file and being blocked there.