Windows Defender flags the build as Trojan. #2421

Closed
opened 2026-11-11 18:19:01 +00:00 by KoHToxiC · 3 comments
KoHToxiC commented 2026-11-11 18:19:01 +00:00 (Migrated from github.com)

Builder version

v2.1.0

How you built

Hookshot Builder app (Windows)

Game files given to it

A .nup

The error

Windows Defender flags the new build as Trojan. Automatically removes the .exe.

Visual Studio or Build Tools version, and Windows SDK version

No response

Operating system and free space on the output drive

Windows 11 Pro 26H2 , 100 GB free on C:

Before you send it

  • I'm on the newest release, or it still fails on it.
  • I searched the open issues for this error.
  • I'm not attaching game files or anything built from them.
### Builder version v2.1.0 ### How you built Hookshot Builder app (Windows) ### Game files given to it A .nup ### The error ```text Windows Defender flags the new build as Trojan. Automatically removes the .exe. ``` ### Visual Studio or Build Tools version, and Windows SDK version _No response_ ### Operating system and free space on the output drive Windows 11 Pro 26H2 , 100 GB free on C: ### Before you send it - [x] I'm on the newest release, or it still fails on it. - [x] I searched the open issues for this error. - [x] I'm not attaching game files or anything built from them.
luigideff commented 2026-11-11 19:20:30 +00:00 (Migrated from github.com)

I think there's not much to be done about it, its a false positive because of the behaviour - downloads and executes python scripts and a bunch of other things. If you see the VirusTotal scan, there's only 2 antivirus that flagged it (at least the last time I scanned it).

But of course important to keep an eye as the project develops, as it gets a lot of contributions from many users.

I've also put ChatGPT to analyse the full behavior report and it said its indeed safe.

I think there's not much to be done about it, its a false positive because of the behaviour - downloads and executes python scripts and a bunch of other things. If you see the VirusTotal scan, there's only 2 antivirus that flagged it (at least the last time I scanned it). But of course important to keep an eye as the project develops, as it gets a lot of contributions from many users. I've also put ChatGPT to analyse the full behavior report and it said its indeed safe.
Baji47 commented 2026-11-11 19:25:47 +00:00 (Migrated from github.com)

Just make an exclusion folder for your main game folder and your builder folder that is not a real issue my bro its a false positive which is windows fault

Just make an exclusion folder for your main game folder and your builder folder that is not a real issue my bro its a false positive which is windows fault
NotRexed commented 2026-11-11 21:30:22 +00:00 (Migrated from github.com)

Thanks for the report. Reports of the same problem are now collected in #1003, which lists this one with your details and links back here, so one fix closes them together and the open list stays readable. Follow #1003 for the fix, and add new details there (or here). If this turns out to be a separate problem it will be reopened.

Thanks for the report. Reports of the same problem are now collected in #1003, which lists this one with your details and links back here, so one fix closes them together and the open list stays readable. Follow #1003 for the fix, and add new details there (or here). If this turns out to be a separate problem it will be reopened.
Commenting is not possible because the repository is archived.
No milestone
No assignees
1 participant
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
MagicBeanDev/Hookshot#2421
No description provided.