patdale

sha-1 hash is A346D6EDC022C6F667FFED233CB446E42EC2852B

do you mind explaining why in the your piece of software begins deleting files labelled "suspicious" why is it suspicious? is there an actual signature match, behavioral heuristics or are you just yourself because it might be a packed PE?

so how does it actually work? does eset actually apply any heuristics to the page before it is rendered or does it simply use a global blacklist