I didn't do anything with the file. Everything happened within 1-2 minutes. The
server log says Windows Defender update. I was told that it was the latest version that started deleting files from Program:Win32/Wacapew.C!ml (before that it only warned)