topic Re: False Positive Submission (Generic.ml) in VirusTotal

False Positive Submission (Generic.ml)

danaix — Fri, 18 Sep 2020 01:10:18 GMT

Dear Support,

I would like to report a false positive detection on VirusTotal for our product, 5 minutes after release.

The program is clean, signed by a trusted party and doesn't contain any unwanted behavior.

File type: win32.exe
SHA256: 754a64c9d7911cd6ef9be2aef1bc21fca677805cf7c414bf6101fbaa41c4c6fe
VirusTotal: https://www.virustotal.com/gui/file/754a64c9d7911cd6ef9be2aef1bc21fca677805cf7c414bf6101fbaa41c4c6fe/detection

My company is developer a computer management system, there was a problem detecting viruses. From the virustotal website engine base "Palo Alto Networks".
Functionality generally requires server-client communication, so I want to inform that the file. My "OfficeaAgent.exe" does not contain a virus component. Please proceed with the investigation. And update the virus information at the site

Attachment
https://moscii-my.sharepoint.com/:f:/g/personal/danai_ch_codesuite_co_th/EuBUN-qM9m9JvDCS6W8tL_4Bz3s2hVu65bhW3nyMnkZ8aw?e=swYFG9

This my site :
https://starcatsoftware.com/

Best Regards

Danai Cha.

Re: False Positive Submission (Generic.ml)

tsullivan7 — Fri, 18 Sep 2020 13:21:10 GMT

My name is Troy from the PAN TAC CyberSecurity team. Please allow us to research this issue for you.

Re: False Positive Submission (Generic.ml)

danaix — Mon, 21 Sep 2020 05:34:21 GMT

thanks for your support, Please let me know if you have any quistions.

Re: False Positive Submission (Generic.ml)

tsullivan7 — Mon, 21 Sep 2020 13:17:13 GMT

We have changed the sample to benign.

Re: False Positive Submission (Generic.ml)

danaix — Mon, 21 Sep 2020 13:45:31 GMT

Thank you for your help, I have a question for same file name in cases on the different creation date

example

SHA256: 754a64c9d7911cd6ef9be2aef1bc21fca677805cf7c414bf6101fbaa41c4c6fe

and

SHA256: 9e4c21def844200a601beca384ddfa69eb0b1b22e3a875b30887e71b5f976005

Files from the same source code different date of creation. And investigations from different virustotal web
Will the verification still be safe, what are your recommendations ?

Re: False Positive Submission (Generic.ml)

mivaldi — Mon, 21 Sep 2020 23:06:58 GMT

Submitted

Re: False Positive Submission (Generic.ml)

mivaldi — Tue, 22 Sep 2020 16:42:15 GMT

No longer considered malicious

Re: False Positive Submission (Generic.ml)

danaix — Wed, 23 Sep 2020 02:49:17 GMT

thanks for your support, Please let me know if you have any quistions.