<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic False Positive (Generic.ml) ? in VirusTotal</title>
    <link>https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/391037#M1805</link>
    <description>&lt;P&gt;File Hash: &lt;SPAN&gt;68a56075f5b3bcf354a38ff47ab481493075e67479752bb6d54158aaf583d6f5&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;Link to Virustotal report for the file:&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;A href="https://www.virustotal.com/gui/file/68a56075f5b3bcf354a38ff47ab481493075e67479752bb6d54158aaf583d6f5/detection" target="_blank" rel="noopener"&gt;https://www.virustotal.com/gui/file/68a56075f5b3bcf354a38ff47ab481493075e67479752bb6d54158aaf583d6f5/detection&lt;/A&gt;&lt;/P&gt;&lt;P&gt;Current VirustTotal Verdict: paloaltonetworks Generic.ml&lt;/P&gt;&lt;DIV class="divider"&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV&gt;&lt;DIV&gt;&lt;DIV class="sub-section"&gt;&lt;DIV class=""&gt;The engine only includes the blacklist of known bad signatures.&lt;/DIV&gt;&lt;DIV class="detection"&gt;&lt;P class="engine"&gt;&lt;SPAN class="engine-name"&gt;Palo Alto Networks&lt;/SPAN&gt;&lt;/P&gt;&lt;P class="malicious result file"&gt;&lt;SPAN class="individual-detection"&gt;Generic.ml&lt;/SPAN&gt;&lt;/P&gt;&lt;P class="malicious result file"&gt;&amp;nbsp;&lt;/P&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;P&gt;Description:&amp;nbsp;&lt;A href="https://www.virustotal.com/gui/search/name%253Abreakout-windows-x86_amd64.exe" target="_blank" rel="noopener"&gt;breakout-windows-x86_amd64.exe&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I downloaded this from a fresh install of Cisco's CML.&amp;nbsp; The tool is used to allow connection to the virtual lab via securecrt on the users local machine.&amp;nbsp; &amp;nbsp;I'm thinking that this is a benign executable.&amp;nbsp;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Fri, 12 Mar 2021 22:18:10 GMT</pubDate>
    <dc:creator>norsk81</dc:creator>
    <dc:date>2021-03-12T22:18:10Z</dc:date>
    <item>
      <title>False Positive (Generic.ml) ?</title>
      <link>https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/391037#M1805</link>
      <description>&lt;P&gt;File Hash: &lt;SPAN&gt;68a56075f5b3bcf354a38ff47ab481493075e67479752bb6d54158aaf583d6f5&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;Link to Virustotal report for the file:&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;A href="https://www.virustotal.com/gui/file/68a56075f5b3bcf354a38ff47ab481493075e67479752bb6d54158aaf583d6f5/detection" target="_blank" rel="noopener"&gt;https://www.virustotal.com/gui/file/68a56075f5b3bcf354a38ff47ab481493075e67479752bb6d54158aaf583d6f5/detection&lt;/A&gt;&lt;/P&gt;&lt;P&gt;Current VirustTotal Verdict: paloaltonetworks Generic.ml&lt;/P&gt;&lt;DIV class="divider"&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV&gt;&lt;DIV&gt;&lt;DIV class="sub-section"&gt;&lt;DIV class=""&gt;The engine only includes the blacklist of known bad signatures.&lt;/DIV&gt;&lt;DIV class="detection"&gt;&lt;P class="engine"&gt;&lt;SPAN class="engine-name"&gt;Palo Alto Networks&lt;/SPAN&gt;&lt;/P&gt;&lt;P class="malicious result file"&gt;&lt;SPAN class="individual-detection"&gt;Generic.ml&lt;/SPAN&gt;&lt;/P&gt;&lt;P class="malicious result file"&gt;&amp;nbsp;&lt;/P&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;P&gt;Description:&amp;nbsp;&lt;A href="https://www.virustotal.com/gui/search/name%253Abreakout-windows-x86_amd64.exe" target="_blank" rel="noopener"&gt;breakout-windows-x86_amd64.exe&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I downloaded this from a fresh install of Cisco's CML.&amp;nbsp; The tool is used to allow connection to the virtual lab via securecrt on the users local machine.&amp;nbsp; &amp;nbsp;I'm thinking that this is a benign executable.&amp;nbsp;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 12 Mar 2021 22:18:10 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/391037#M1805</guid>
      <dc:creator>norsk81</dc:creator>
      <dc:date>2021-03-12T22:18:10Z</dc:date>
    </item>
    <item>
      <title>Re: False Positive (Generic.ml) ?</title>
      <link>https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/392737#M1807</link>
      <description>&lt;P&gt;Under review&lt;/P&gt;</description>
      <pubDate>Mon, 22 Mar 2021 16:30:42 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/392737#M1807</guid>
      <dc:creator>tsullivan7</dc:creator>
      <dc:date>2021-03-22T16:30:42Z</dc:date>
    </item>
    <item>
      <title>Re: False Positive (Generic.ml) ?</title>
      <link>https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/393041#M1812</link>
      <description>&lt;P&gt;Sample no longer classified as malicious.&lt;/P&gt;</description>
      <pubDate>Tue, 23 Mar 2021 16:35:23 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/393041#M1812</guid>
      <dc:creator>tsullivan7</dc:creator>
      <dc:date>2021-03-23T16:35:23Z</dc:date>
    </item>
  </channel>
</rss>

