# Security Notes

Adult Animation Converter is packaged as a folder-style Windows app to reduce antivirus false positives from single-file self-extracting EXEs.

## Why Windows Defender Might Warn

Older releases were built as a single PyInstaller EXE. PyInstaller one-file apps contain an embedded archive and unpack runtime files into a temporary folder when launched. That behavior can look suspicious to antivirus heuristics even when the app code is clean.

Current releases use a one-folder PyInstaller build instead. Keep the `_internal` folder beside `Adult Animation Converter.exe`; the EXE is not meant to be copied out by itself.

## Check The Download

The release ZIP includes `SHA256SUMS.txt` for the EXE, and the upload includes a separate versioned ZIP hash file such as `Adult Animation Converter 5.4.zip.sha256.txt`.

To check the EXE hash in PowerShell:

```powershell
Get-FileHash -Algorithm SHA256 ".\Adult Animation Converter.exe"
```

To check the ZIP hash:

```powershell
Get-FileHash -Algorithm SHA256 ".\Adult Animation Converter 5.4.zip"
```

The hash you calculate should match the published hash exactly.

## If Defender Still Flags It

Do not tell users to disable antivirus globally. If Microsoft Defender reports a detection on a clean release, submit the ZIP or EXE to Microsoft as a false positive:

https://www.microsoft.com/en-us/wdsi/filesubmission

Choose the software developer or home customer path, upload the file, and mark it as incorrectly detected.

## Running From Source

Advanced users who do not trust any EXE can run the source script directly with Python:

```powershell
python .\Osex-to-OStim-Standalone.py
```
