Windows Defender other AV reporting malware

[eibrandr]

Hi there,

This might be known -but not finding references to it. Windows defender is reporting the extension as containing malware, notably Win32/Uwamson.A!ml

I suspect it's due to the content of the extension and that the AV heuristics are reporting on that, more than actual malware.

Just thought I'd let you know if you've not heard about it.

[rb-x]

Hello @eibrandr,

Indeed Microsoft Defender and other AV are mainly triggered because of the php webshell, but it is a false positive.
All permissions related to the extension are defined in the manifest and the chrome and mozilla team already reviewed in depth the source code.

Thank you for letting us know

[Drjacky]

the chrome and mozilla team already reviewed in depth the source code.
So, why do they still report it?