Saw this on hackernews some time ago about Golang devs facing false anti-virus flags: <https://gopacker.dev/docs/>
Seems like a similar approach could work for Nim Windows devs. I haven't looked but I'd bet there are obfuscates for C/C++ which would achieve similar results. I don't ship stuff on windows myself, but maybe it could help others.