4 ms·
Deleting both the exe and the source code makes a false positive seem rather unlikely to me.
by howaboutnope 5y ago
Deleting both the exe and the source code makes a false positive seem rather unlikely to me.
- jcrawfordor 5y agoThe source code in question appears to have been obfuscated (possibly just for brevity). I'd guess the Defender signature in question was written around the packer/obfuscator.
- eurasiantiger 5y agoWanna bet the signature is the hex key?
- jcrawfordor 5y agoyeah, that'd be my guess. It's going to be in different representations in the source and the executable but if I was writing a signature for it straight up I'd probably add the C escape representation as well for good measure.
- deleted 5y ago[deleted]