Windows Defender flags 12 filenames in a test DLL; a JSON repack clears scans

bytebot · x · 2026-10-04

A debugging anecdote: the author gave the same hard problem to two models — GPT-6.1 Sol (medium) solved it while GPT-6 Astra (medium) didn't.

The problem: Microsoft Defender blocked a Windows beta build by flagging a compiled list of twelve artifact filenames, even inside an inert test DLL. Moving the unchanged list into a readable packaged JSON cleared local scans without losing detection coverage.

Takeaways: picking the right model saves tokens, and on Windows you should scan what the installer actually deploys — a clean wrapper doesn't guarantee a clean payload.

Original post →

More from coding & agent

coding & agent channel →