5f78d58 Update build.yml to rename PyInstaller to TgWsProxy
📊 Changes
1 file changed (+26 additions, -17 deletions)
View changed files
📝.github/workflows/build.yml (+26 -17)
📄 Description
Rebuilding the PyInstaller bootloader from source in GitHub Actions and replacing default signatures (PyInstaller strings) with custom ones.
This should help bypass heuristic false positives (like Wacatac.B!ml). I'm not entirely sure how effective this will be in the long run (Defender's ML might just need more time to analyze the new file), but here is the current VirusTotal result.
I haven't changed the _MEI temp folder prefix, as it might break the unpacking logic. However, it's definitely an option we can explore
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/Flowseal/tg-ws-proxy/pull/209
**Author:** [@InfernumVII](https://github.com/InfernumVII)
**Created:** 3/17/2026
**Status:** ✅ Merged
**Merged:** 3/17/2026
**Merged by:** [@Flowseal](https://github.com/Flowseal)
**Base:** `main` ← **Head:** `main`
---
### 📝 Commits (4)
- [`4595380`](https://github.com/Flowseal/tg-ws-proxy/commit/4595380e732a77873834af287744783c6c6cc2ff) Update build.yml
- [`e3f1d04`](https://github.com/Flowseal/tg-ws-proxy/commit/e3f1d0414765ea4d407ab9138eb69f340721c26e) Update build.yml
- [`99e8ad1`](https://github.com/Flowseal/tg-ws-proxy/commit/99e8ad1268d3d4f286448f9588dae0a1fdbe370d) Update build.yml
- [`5f78d58`](https://github.com/Flowseal/tg-ws-proxy/commit/5f78d586397e5b0be4c8f8dddff3825efa6bc045) Update build.yml to rename PyInstaller to TgWsProxy
### 📊 Changes
**1 file changed** (+26 additions, -17 deletions)
<details>
<summary>View changed files</summary>
📝 `.github/workflows/build.yml` (+26 -17)
</details>
### 📄 Description
Rebuilding the PyInstaller bootloader from source in GitHub Actions and replacing default signatures (`PyInstaller` strings) with custom ones.
This should help bypass heuristic false positives (like `Wacatac.B!ml`). I'm not entirely sure how effective this will be in the long run (Defender's ML might just need more time to analyze the new file), but here is the current [VirusTotal result](https://www.virustotal.com/gui/file/de946acea4634caea31dde4071635c345aece5f18f75a0b07d480691409ad92a/detection).
I haven't changed the _MEI temp folder prefix, as it might break the unpacking logic. However, it's definitely an option we can explore
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
mirror-bot
changed title from [PR #209] [MERGED] Fix Windows Defender false positive to [PR #209] Fix Windows Defender false positive2026-07-20 04:08:33 +03:00
mirror-bot
changed title from [PR #209] Fix Windows Defender false positive to [PR #209] [MERGED] Fix Windows Defender false positive2026-07-20 22:54:30 +03:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/Flowseal/tg-ws-proxy/pull/209
Author: @InfernumVII
Created: 3/17/2026
Status: ✅ Merged
Merged: 3/17/2026
Merged by: @Flowseal
Base:
main← Head:main📝 Commits (4)
4595380Update build.ymle3f1d04Update build.yml99e8ad1Update build.yml5f78d58Update build.yml to rename PyInstaller to TgWsProxy📊 Changes
1 file changed (+26 additions, -17 deletions)
View changed files
📝
.github/workflows/build.yml(+26 -17)📄 Description
Rebuilding the PyInstaller bootloader from source in GitHub Actions and replacing default signatures (
PyInstallerstrings) with custom ones.This should help bypass heuristic false positives (like
Wacatac.B!ml). I'm not entirely sure how effective this will be in the long run (Defender's ML might just need more time to analyze the new file), but here is the current VirusTotal result.I haven't changed the _MEI temp folder prefix, as it might break the unpacking logic. However, it's definitely an option we can explore
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
[PR #209] [MERGED] Fix Windows Defender false positiveto [PR #209] Fix Windows Defender false positive[PR #209] Fix Windows Defender false positiveto [PR #209] [MERGED] Fix Windows Defender false positive