Bug(Probably): 2 Trojans, why?

[SummerPain]

Installer has two trojans (1 and 2)

Release.zip has one (1)

So i basically should force my AV to not do machine-learning-detection of these 2 - it is not good i think.

I saw somewhere problem with wacatac trojan with !ml on some python framework, but this one is completely different so i wonder what is the deal.

Screenshots:
(1):
(2):

[Sewer56]

!ml are machine learning detections, yeah.

I unfortunately have to deal with them every other month. Sometimes every other week. The only alternative is I buy a expensive code signing certificate, thus participating in the extortion cycle that is code signing on Windows.

When I make releases, I often boot into Windows (I don't use Windows on a daily basis) and scan the binaries with Defender, so I can then submit them as false positives when they get flagged. I'm not sure why there's a flag, I actually did one of these test scans yesterday.