<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Wildfire False Positive for THREAT-ID 614284446 in Advanced Threat Prevention Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/advanced-threat-prevention/wildfire-false-positive-for-threat-id-614284446/m-p/591499#M2239</link>
    <description>&lt;P&gt;FILE HASH:&amp;nbsp;9329f42ac6f2c7470c070863af04572c9f32148c1d86cdbb6e0e301c7f5d780e&lt;BR /&gt;&lt;BR /&gt;Link To Virus Total:&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;A href="https://www.virustotal.com/gui/file/9329f42ac6f2c7470c070863af04572c9f32148c1d86cdbb6e0e301c7f5d780e/detection" target="_self" rel="nofollow noopener noreferrer"&gt;LINK&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;This file --&amp;nbsp;MSJT4JLT.DLL is being detected as&amp;nbsp;&lt;SPAN&gt;wildfire-virus and being blocked by WildFire but Virustotal link and Wildfire portal itself categorize this as BENIGN.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;The Threat ID it shows as 614284446 but hashes do not match in threat vault. Why this file hash is being matched with this THREAT ID. This is a False positive.&lt;/SPAN&gt;&lt;/P&gt;</description>
    <pubDate>Tue, 09 Jul 2024 18:47:08 GMT</pubDate>
    <dc:creator>UtkarshKumar</dc:creator>
    <dc:date>2024-07-09T18:47:08Z</dc:date>
    <item>
      <title>Wildfire False Positive for THREAT-ID 614284446</title>
      <link>https://live.paloaltonetworks.com/t5/advanced-threat-prevention/wildfire-false-positive-for-threat-id-614284446/m-p/591499#M2239</link>
      <description>&lt;P&gt;FILE HASH:&amp;nbsp;9329f42ac6f2c7470c070863af04572c9f32148c1d86cdbb6e0e301c7f5d780e&lt;BR /&gt;&lt;BR /&gt;Link To Virus Total:&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;A href="https://www.virustotal.com/gui/file/9329f42ac6f2c7470c070863af04572c9f32148c1d86cdbb6e0e301c7f5d780e/detection" target="_self" rel="nofollow noopener noreferrer"&gt;LINK&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;This file --&amp;nbsp;MSJT4JLT.DLL is being detected as&amp;nbsp;&lt;SPAN&gt;wildfire-virus and being blocked by WildFire but Virustotal link and Wildfire portal itself categorize this as BENIGN.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;The Threat ID it shows as 614284446 but hashes do not match in threat vault. Why this file hash is being matched with this THREAT ID. This is a False positive.&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 09 Jul 2024 18:47:08 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/advanced-threat-prevention/wildfire-false-positive-for-threat-id-614284446/m-p/591499#M2239</guid>
      <dc:creator>UtkarshKumar</dc:creator>
      <dc:date>2024-07-09T18:47:08Z</dc:date>
    </item>
    <item>
      <title>Re: Wildfire False Positive for THREAT-ID 614284446</title>
      <link>https://live.paloaltonetworks.com/t5/advanced-threat-prevention/wildfire-false-positive-for-threat-id-614284446/m-p/591790#M2254</link>
      <description>&lt;P&gt;It was a false positive. The signature "Virus/Win32.WGeneric.edimvs(614284446)" was disabled.&lt;/P&gt;</description>
      <pubDate>Fri, 12 Jul 2024 05:28:42 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/advanced-threat-prevention/wildfire-false-positive-for-threat-id-614284446/m-p/591790#M2254</guid>
      <dc:creator>ymiyashita</dc:creator>
      <dc:date>2024-07-12T05:28:42Z</dc:date>
    </item>
  </channel>
</rss>

