topic Re: False Positive Submission (Generic.ml) in VirusTotal

False Positive Submission (Generic.ml)

Kereng — Wed, 20 Apr 2022 10:53:35 GMT

Hi,

Our partner's file is falsely detected by PaloAlto as Generic.ml, which is the only AV detection on the file so clearly its a false positive.

Please remove the detection ASAP.

Link to VT: https://www.virustotal.com/gui/file/20d83ea8e5af8fe3d91e45013045e0e3e66002d9f0fc0cdf124a26508b548065

SHA256: 20d83ea8e5af8fe3d91e45013045e0e3e66002d9f0fc0cdf124a26508b548065

Here is a link to download the product (password "infected"): https://dy8hs5q74vnzo.cloudfront.net/FileSharing/setup_fp.exe.zip

Thank you.

Re: False Positive Submission (Generic.ml)

yblancovar — Wed, 20 Apr 2022 23:14:24 GMT

We've submitted a re-analysis of the sample and a verdict change with our engineering team.

Re: False Positive Submission (Generic.ml)

yblancovar — Thu, 21 Apr 2022 00:47:00 GMT

The verdict has been flipped to benign and the signature is disabled in the AV package that'll be released on 4/22. Once available have the AV updated.