Hacknet-Pathfinder
Hacknet-Pathfinder copied to clipboard
v5.3.2 triggers Windows Defender
Only happens with the latest version, none of the others have an issue.
It also triggers at thirteen other AVs, with some concerning Mitre flags. Manual dump creation, tampering with Windows Error Reporting, setting a file association for .exe, VM busting, data exfiltration, and more. The source code looks clean though.
https://www.virustotal.com/gui/file/734a6a48383aa792fb03fdc98cba685b0455ec8a4aab0d3d4cc469968d666734
Seems like the issue is from Pyinstaller looking suspicious, nothing more.
The building process is handled in Github through build actions, same thing for the packaging of the release. Nothing released here touches our computer.
pyinstaller --onefile --noconsole PathfinderInstaller.py
is the command used for building, the packages "requests" and "pyinstaller" are required.
Not sure if it got fixed in later versions, but as of right now, Windows Defender isn't detecting anything on the 5.3.4 installer!