Skip to content

v2.0.1 — Defender false-positive hotfix

Choose a tag to compare

View all tags
@Delido Delido released this 13 Jun 12:24
· 28 commits to main since this release
v2.0.1
5f61d9f

Why this release exists

Windows Defender's heuristic ML model started flagging
SignalRGBBridge.exe as Trojan:Win32/Wacatac.B!ml on some
systems after the v2.0.0 release. The new behaviour delta that
pushed the score over the threshold was the in-app Wallpaper
Pack downloader — combining urllib.request.urlopen +
hashlib.sha256 + zipfile.extractall on an unsigned binary that
already binds a UDP port + websocket + writes an autostart
registry entry matched Defender's textbook Stage-2-loader
heuristic. False positive, but a real user-facing problem.

What changed

  • In-app pack downloader removed. Bridge no longer reaches out
    to GitHub for pack manifests, downloads ZIPs, or extracts them
    into the library directory. The matching <details> block in
    the Library tab now points at the same GitHub release where the
    pack ZIPs live; users grab them and extract by hand.
  • Library tab keeps the per-source filter chip row + section
    headers — manually-extracted packs still light those up.
  • library-packs-v1 release still carries all 13 themed pack
    ZIPs + the 52 preview thumbs. Public URL pattern unchanged.

How to add the optional themed packs (manual flow)

  1. Open the
    library-packs-v1
    release.
  2. Download the pack ZIP(s) you want (aurora-pack-v1.zip,
    cyberpunk-pack-v1.zip, …).
  3. Extract the contents of each ZIP directly into
    %LOCALAPPDATA%\SignalRGBWallpaper\library\. No subfolder —
    the WebPs sit alongside your existing library content.
  4. Open the Configurator's Library tab. The bridge rebuilds the
    catalogue on the next render and the new tiles appear.

Coming back later

We're evaluating
Azure Trusted Signing
(~$10/month, no hardware token) + a separate small downloader
binary so the in-app flow can come back without re-tripping
Defender. Track progress on the repo Issues.

If Defender still flags SignalRGBBridge.exe after this update,
please
submit the binary as a false positive
— that's the only path that clears it for all users at once.

Install

winget install Delido.SignalRGBWallpaper

Or grab SignalRGBWallpaperSetup-2.0.1.exe from the assets below.

Assets 3
Loading