topic Re: I believe we have a false positive identifation of Genetec's OmniDir.exe executable in VirusTotal

I believe we have a false positive identifation of Genetec's OmniDir.exe executable

cleverlyc — Wed, 19 Feb 2020 19:00:14 GMT

Hi folks,

VirusTotal has Palo Alto reporting that the Genetec OmniCast 4.7 service executable OmniDir.exe is identified as 'generic.ml' malware, and I suspect it is a false positive

File Hash: 580fe736fb1fd546f6d8536e0ef7418ddad2dc3b2def0fbeb4a35da4f73351da

VirusTotal report: https://www.virustotal.com/gui/file/580fe736fb1fd546f6d8536e0ef7418ddad2dc3b2def0fbeb4a35da4f73351da/detection

Current VirusTotal Verdict: 1/68 - Palo Alto - Generic.ml

Description: This is the Genetec OmniCast Directory service executable for some older security camera software. I verified it is unaltered from original installation version.

Thank you!

Re: I believe we have a false positive identifation of Genetec's OmniDir.exe executable

hisingh — Wed, 19 Feb 2020 22:14:59 GMT

Hello

I have submitted this hash for re-analysis. I will update you once I hear more from our team.

Best

Himani

Re: I believe we have a false positive identifation of Genetec's OmniDir.exe executable

hisingh — Thu, 20 Feb 2020 17:23:56 GMT

Hello

The verdict has been changed on this hash and file.

Best

Himani