Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
cxrfcg
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
4 ms
·
1.
▲
by
cxrfcg
4y ago
> These tools scan the executables without executing them, don't they? No, modern AV software executes unknown binaries in an emulated system environment. Defender has an x86-to-safe-x86 JIT compiler built in to make this more perfo
2.
▲
by
cxrfcg
4y ago
Interesting. Presumably this breaks the emulated environment in which Defender is running the executable, and when this fails Defender assumes the executable is safe rather than suspicious?