Reply to thread

Message

<blockquote data-quote="SeriousHoax" data-source="post: 1112723" data-attributes="member: 78686">I&#039;m quoting harlan but this is directed to everyone. Adding values like, &quot;xx&quot; at the end of the code is obviously going to break the file. The easiest and safe way to do for an average user who are not sure would be to use a program like this:[URL unfurl=&quot;true&quot;]https://github.com/ewwink/MD5-Hash-Changer[/URL]It simply adds an empty string at the end of a file. You can verify by opening the file in a hex editor.Regarding Rising, it doesn&#039;t use Kaspersky engine, I think. What it does is simply copies Virustotal detection of Kaspersky and a couple of other products. Rising is not alone in this. Some other products also do this. Sophos also add things from Virustotal and most of the time initially they are detected as, PUP by their engine. Those are cloud based detection based on Virustotal which they try to hide.Microsoft Defender has mechanism to search for malware IOCs on Twitter/X and these are detected as, &quot;xxxxx....Casdet&quot;, at the end of the detection name. Here Casdet means, &quot;Casandra Detection&quot;. But they don&#039;t just blindly add detection, they have some failsafe methods for that. But it&#039;s still a cheat code like method.</blockquote>

[QUOTE="SeriousHoax, post: 1112723, member: 78686"] I'm quoting harlan but this is directed to everyone. Adding values like, "xx" at the end of the code is obviously going to break the file. The easiest and safe way to do for an average user who are not sure would be to use a program like this: [URL unfurl="true"]https://github.com/ewwink/MD5-Hash-Changer[/URL] It simply adds an empty string at the end of a file. You can verify by opening the file in a hex editor. Regarding Rising, it doesn't use Kaspersky engine, I think. What it does is simply copies Virustotal detection of Kaspersky and a couple of other products. Rising is not alone in this. Some other products also do this. Sophos also add things from Virustotal and most of the time initially they are detected as, PUP by their engine. Those are cloud based detection based on Virustotal which they try to hide. Microsoft Defender has mechanism to search for malware IOCs on Twitter/X and these are detected as, "xxxxx....Casdet", at the end of the detection name. Here Casdet means, "Casandra Detection". But they don't just blindly add detection, they have some failsafe methods for that. But it's still a cheat code like method. [/QUOTE]

Verification