Generic.Malware/Suspicious, C:\Windows\ is a windows activation tool (well, its not exactly, but its a feature abused to activate windows, look at "Windows/Office tools" in ).Īlso this detection is literally in his C:/Windows, i find it unlikely he would save photoship in this directory.
With the information I gathered above, i would also agree that it seems to be a false posative Looking up what was mentioned in the comments, Skeeyah.A RFN, it seems to be a common false posative The exe also isnt binded with anything, i checked just to be safe. Looking at the setup, it doesnt seem to drop any files when run (ofc it will when installing) nor communicate with any ips
0 kommentar(er)
