3 ms·
In practice, you (the program) knew which one is corrupted: usually the malware doesn't replace the header with a syntactically-valid FAT, it's unreadable.
by zinekeller 4y ago
In practice, you (the program) knew which one is corrupted: usually the malware doesn't replace the header with a syntactically-valid FAT, it's unreadable.
- loeg 4y agoThe FAT is just an array of offsets; there’s no syntax structure to validate.