topic Re: False Positive Submission Cortex XDR in VirusTotal

False Positive Submission Cortex XDR

devtech — Fri, 11 Sep 2020 09:53:20 GMT

Hi, I would like to report a false positive detection by Palo Alto Networks of the following file:

File Hash:
MD5: 4be43dd969458a0660acd4073c465a50
SHA1: a673a5565cf45a488da571474219e44c98f19c31
SHA256: c735a96fcd9c7ec78f1a70744497d0c0073aa13c90a301436a167eb0925f32b7

Link to Virustotal report for the file:
https://www.virustotal.com/gui/file/c735a96fcd9c7ec78f1a70744497d0c0073aa13c90a301436a167eb0925f32b7

Current VirusTotal Verdict:
none

Description:

Cortex XDR-Code: c0400055
App Name: IBI-aws Client
App Version: 1.23.2.9
Company Name: IBITECH AG

Thank you!

Regards

Martin

Re: False Positive Submission Cortex XDR

mivaldi — Wed, 16 Sep 2020 20:57:06 GMT

This is a VirusTotal forum for non-customers. Please open a Support ticket.

Re: False Positive Submission Cortex XDR

devtech — Thu, 17 Sep 2020 08:12:16 GMT

We are not a customer. We just saw a screenshot of the blocking message through a forwarded e-mail. We will try to get in contact with our customer who is using WildFire so that he can open a support ticket

Re: False Positive Submission Cortex XDR

mivaldi — Thu, 17 Sep 2020 16:26:51 GMT

VirusTotal does not have this sample marked with Palo Alto Networks detections.

Re: False Positive Submission Cortex XDR

devtech — Fri, 18 Sep 2020 06:23:01 GMT

ok, let's hope it stays that way 🙂

thank you for your help.