https://live.paloaltonetworks.com/t5/advanced-threat-prevention/agcinvokerutility-exe-pa-picking-it-up-as-virus/m-p/577692#M2099 <P>Due to the False Positive, the signature (ID: 624280308) was disabled on Feb 09.</P> Tue, 20 Feb 2024 00:06:39 GMT ymiyashita 2024-02-20T00:06:39Z https://live.paloaltonetworks.com/t5/advanced-threat-prevention/agcinvokerutility-exe-pa-picking-it-up-as-virus/m-p/576655#M2098 <P>Hi Everyone,</P> <P>&nbsp;</P> <P>Our Palo Alto Anti-Virus Profile is picking up&nbsp;AGCInvokerUtility.exe as&nbsp;Virus/Win32.Wgeneric.Eedlvy(624280308). I did a quick search on Threat Vault and found the associated hash:&nbsp;<SPAN>b807502f1a0804543488c5b85a386452d6f9848bf611db01728f3d8c23a212c9&nbsp; which as per VirusTotal is malicious as well.</SPAN></P> <P>&nbsp;</P> <P><SPAN>However when you do a search on the AGCInvokerUtility.exe, by definition it is a&nbsp;Adobe GC Invoker Utility&nbsp;process that runs as part of the Adobe Software Integrity Service validation testing. It checks for any tampering with Adobe Software program files or improper or invalid licenses.</SPAN></P> <P>&nbsp;</P> <P><SPAN>So the question is if PA is picking it up as virus, and if it is indeed a legit file what would be the next steps to deal with it?&nbsp;</SPAN></P> Thu, 08 Feb 2024 17:13:46 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/agcinvokerutility-exe-pa-picking-it-up-as-virus/m-p/576655#M2098 Sahil_Arora 2024-02-08T17:13:46Z https://live.paloaltonetworks.com/t5/advanced-threat-prevention/agcinvokerutility-exe-pa-picking-it-up-as-virus/m-p/577692#M2099 <P>Due to the False Positive, the signature (ID: 624280308) was disabled on Feb 09.</P> Tue, 20 Feb 2024 00:06:39 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/agcinvokerutility-exe-pa-picking-it-up-as-virus/m-p/577692#M2099 ymiyashita 2024-02-20T00:06:39Z