Windows Defender reports the release executable as malicious

[jroessel]

Detected: Trojan:Win32/Fuerboos.B!cl
Status: Removed
A threat or app was removed from the device.

Details: This program is dangerous and executes commands from an attacker.

Affected items:

file: C:\Users\me\Downloads\textnote_windows_amd64.exe

webfile: C:\Users\me\Downloads\textnote_windows_amd64.exe|https://github-releases.githubusercontent.com/319649088/f6846080-6c31-11eb-9984-d3b16f6fee14?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20210215%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20210215T101455Z&X-Amz-Expires=300&X-Amz-Signature=b51b7f4070fd42b78fc24e5192a25a13e0c92d7b5660607d72c3607ee7b16c9a&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=319649088&response-content-disposition=attachment%3B%20filename%3Dtextnote_windows_amd64.exe&response-content-type=application%2Foctet-stream|pid:18472,ProcessStart:132578577092384615

[jroessel]

Seems to happen with a few more AV solutions as well:

[dkaslovsky]

Thanks, @jroessel, for sharing this. This will take some research to figure out. Unfortunately, I am not very knowledgeable about Windows executables and the associated AV implications.

[jroessel]

In this case, waiting it out seems to work. Usually one needs to submit the false positive to the AV vendor for analysis. However, Virustotal does that automatically, anyway, and sometimes they fix such things in a few hours anyway. So in this case, at least Windows Defender is happy (SmartScreen is not, but that comes with time and gets better with a code signing certificate). On the other hand »Currently, Vim is the only supported text editor.« may make it not that suitable for use on Windows for now, anyway ;)