4 ms·
This sounds fun. How did you handle the case where on a bisect both halves didn't trigger the AV on their own?
by maweki 9y ago
This sounds fun. How did you handle the case where on a bisect both halves didn't trigger the AV on their own?
- namuol 9y agoThis was pretty rare for the most popular AVs, but if it didn't work I would try manually zeroing different sections until I found something. I was surprised how easy it was to make a virus undetected, and that they didn't routinely change their fingerprint algorithm as a defense against this attack.