Triggers Windows Defender when unzipped

[Rylsa]

Hello, thanks for the awesome software. It saved me several months ago when I wanted to go back to 2.x version :)
I downloaded the binary for windows today, and after unzipping it, Windows Defender gave me a notification that a threat was found. It's really weird because in Windows Defender main page, it would change to "no threat" in a matter of seconds without me doing anything. Every time the folder is unzipped, the notification pops again, only for the threat to disappear again.

• The message I get is:
  "Threats found. Start the recommended actions.
  Trojan:Win32/Wacatc.B!ml
  1/8/2024 2:31PM (Active) Severe
  Start actions"
• Windows 11

+after unzipping several times, it stopped giving me threat notification
+now the threat doesn't go away automatically

[Eeems]

There isn't much we can do about this, especially if windows defender changes its mind after analyzing the file longer. It's probably just not happy about seeing an application designed to download files from the internet. My understanding is that Trojan:Win32/Wacatc.B!ml is a machine learning based detection, and often has false positives on executables created by python code (pyinstaller/pyinstaller#5848, although we aren't using pyinstaller, and instead nuitka, but it's a similar issue).

If you'd like, you could go through the work of building the code locally on your machine, or auditing the existing build process: https://github.com/Jayy001/codexctl/blob/main/.github/workflows/main.yml

The executable is built automatically using GitHub actions, and automatically attached to the release. You can compare the build artifacts created by the GitHub action that created the release with the artifacts on the release to confirm that they haven't been tampered with: https://github.com/Jayy001/codexctl/actions/workflows/main.yml?query=branch%3Amain

[Rylsa]

Thank you very much. Sadly I don't know anything about coding, so I can't contribute or audit codes... But I'm relieved to hear it's false positive. I thought it must be but it still gave me a little scare,