topic Re: B00MTESA.EXE - false positive in VirusTotal

B00MTESA.EXE - false positive

ErwinTD — Tue, 20 Aug 2019 09:03:20 GMT

Hi, I would like to report a false positive detection by Palo Alto Networks of the following file:

File Hash:

MD5 f190aea015df51d47dcf6ee5f4da1933
SHA-1 54ace5911cbc9d7811ff2fc126fec67433db2398
SHA-256 48077107f34122ac84bc045f93b794c4768f6fd8e894d4d2f3ec4f48f1a1ea5d

Link to Virustotal report for the file: https://www.virustotal.com/gui/file/48077107f34122ac84bc045f93b794c4768f6fd8e894d4d2f3ec4f48f1a1ea5d/detection

Current VirustTotal Verdict: No engines detected this file
Description:

Company: Technidata (https://www.technidata-web.com)

Type of company: Medical Software

File: b00mtesa.exe (https://drive.google.com/open?id=1TwpvPB9yX7kzOibFLJrRpo2sn0Ai8BRp)

Thank you!

Re: B00MTESA.EXE - false positive

Brandon_Wertz — Tue, 20 Aug 2019 12:48:43 GMT

In general I don't think discussion boards are an accepted way to report errors or false positives with Palo products or subscriptions. You'll likely need to open a support case to have this corrected.

Re: B00MTESA.EXE - false positive

dparris — Tue, 20 Aug 2019 17:44:14 GMT

First, if you are a Palo Alto customer please open a ticket for any false positives.

Second, this file is not listed as Malicious by Palo Alto.

Re: B00MTESA.EXE - false positive

ErwinTD — Tue, 27 Aug 2019 02:35:19 GMT

@Brandon_Wertz wrote:
In general I don't think discussion boards are an accepted way to report errors or false positives with Palo products or subscriptions. You'll likely need to open a support case to have this corrected.

Hi Brandon_Wertz, I thought this was a venue to discuss it as I read in the description? (snippet below)

Thanks for replying.

About VirusTotal

Welcome to the VirusTotal discussion forum. This forum exists as a place to submit verdict review requests for False Positive verdicts for Palo Alto Networks (Known Signatures) seen on VirusTotal. All posts to this forum must be properly structured in order to be reviewed by our team.

For an introduction to the forum, please see the sticky!

Re: B00MTESA.EXE - false positive

ErwinTD — Tue, 27 Aug 2019 02:38:43 GMT

@dparris wrote:
First, if you are a Palo Alto customer please open a ticket for any false positives.

Second, this file is not listed as Malicious by Palo Alto.

Hi dparris,

No, I am from company that is a software manufacturer and I do not have a support account to open a ticket.

But my customer uses Palo Alto products and they reported to me that our product triggered a detection hence I am submitting it for Palo Alto to review.

I do not find any other way to submit a false positive report other than this discussion board, if I missed one please let me know!

Thanks!

Re: B00MTESA.EXE - false positive

dparris — Tue, 27 Aug 2019 13:08:26 GMT

This is not listed as malicious by Palo Alto.

If your customer is having issues, they should open a ticket with us.