Hacknet-Pathfinder icon indicating copy to clipboard operation
Hacknet-Pathfinder copied to clipboard

v5.3.2 triggers Windows Defender

Open fstk5 opened this issue 1 year ago • 3 comments

Only happens with the latest version, none of the others have an issue.

image image

fstk5 avatar Nov 24 '23 21:11 fstk5

It also triggers at thirteen other AVs, with some concerning Mitre flags. Manual dump creation, tampering with Windows Error Reporting, setting a file association for .exe, VM busting, data exfiltration, and more. The source code looks clean though.

https://www.virustotal.com/gui/file/734a6a48383aa792fb03fdc98cba685b0455ec8a4aab0d3d4cc469968d666734

dandykong avatar Jan 20 '24 18:01 dandykong

https://stackoverflow.com/questions/43777106/program-made-with-pyinstaller-now-seen-as-a-trojan-horse-by-avg

Seems like the issue is from Pyinstaller looking suspicious, nothing more.

The building process is handled in Github through build actions, same thing for the packaging of the release. Nothing released here touches our computer. pyinstaller --onefile --noconsole PathfinderInstaller.py is the command used for building, the packages "requests" and "pyinstaller" are required.

Arkhist avatar Jan 20 '24 18:01 Arkhist

Not sure if it got fixed in later versions, but as of right now, Windows Defender isn't detecting anything on the 5.3.4 installer!

Leila-Codes avatar Aug 04 '24 09:08 Leila-Codes