topic Re: Flase Positive in windows antivirus product in VirusTotal

Flase Positive in windows antivirus product

ericsia — Wed, 23 Feb 2022 18:04:16 GMT

removed

Re: Flase Positive in windows antivirus product

dparris — Wed, 02 Dec 2020 21:16:07 GMT

Hello ,

Can you please use the SHA256 hashes of your files?

I see no records in Palo Alto Networks for either ,

Medlexo32 MD5: 5774F7FED8E83098AA00BB2CC82F2EE1

Medlexo64 MD5: E6123D707C54C23ED25DAED1F83BB26E

Re: Flase Positive in windows antivirus product

ericsia — Wed, 02 Dec 2020 22:19:17 GMT

ahh my bad, I thought you guys would have direct download using the link from the site.

Here is the sha256:

447d01383e9dfc897a1dd0663a2c0c21eb3d613308ef0f3d0a6e3b89f5412ade

c3ba8e9982dae17b41d1eb0650b3a036b91351c621e8b169b8e9083461b8d382

Re: Flase Positive in windows antivirus product

DaBone — Wed, 02 Dec 2020 23:33:57 GMT

For:

447d01383e9dfc897a1dd0663a2c0c21eb3d613308ef0f3d0a6e3b89f5412ade

I've requested further analysis over the above hash.

c3ba8e9982dae17b41d1eb0650b3a036b91351c621e8b169b8e9083461b8d382

This hash is not seen as malicious by us.

Searching here for the hash, and it comes up as nothing:
https://threatvault.paloaltonetworks.com/

Also, in VT we are not showing this as malicious either.

https://www.virustotal.com/gui/file/c3ba8e9982dae17b41d1eb0650b3a036b91351c621e8b169b8e9083461b8d382/detection

Re: Flase Positive in windows antivirus product

ericsia — Thu, 03 Dec 2020 00:25:17 GMT

Yes thank you for the progress and quick response, I am aware only this is flagging https://www.virustotal.com/gui/file/447d01383e9dfc897a1dd0663a2c0c21eb3d613308ef0f3d0a6e3b89f5412ade/detection

I submitted two just wanted to make sure you guys don't flag the 32bit version in near future as well as it would trouble each other to open and resolve a ticket again.