This exploit assembles the Javascript which is obstetrical in an image file which has been scanned through the AV in the way in. because the Javascript is assembled inside the browser there isn't any scanning by the AV. https://www.darkexploits.com/product/extremely-silent-jpg-exploit-new/