Virus/Win32.WGeneric.clqdkh

EJaspe — Thu, 26 May 2022 06:15:17 GMT

Alert name: Virus/Win32.WGeneric.clqdkh

Hash:(sha256): 354ef16a451f716c8cb3b47ced9878d8962088c143dfa2cf01f4f2ddfc70c097

I've checked the hash file for the the alert name through the https://threatvault.paloaltonetworks.com/ and I got the hash on it.

After checking this hash on Virustotal, the result is "No Matches found".

My questions:

1) If no matches found result, does it mean that the hash is new?

2) How may i determine if is it false positive or malicious?

I checked similar cases regarding on Virus/Win32.WGeneric and they says that this is a false positive.
Give me some thoughts and ideas about this for additional knowledge as i'm starting on this role as a cyber security.

Thank you in advance!

Re: Virus/Win32.WGeneric.clqdkh

DaBone — Thu, 26 May 2022 17:31:42 GMT

Hello,

This forum is for non-customers to request that their files be manually reviewed.

If you have a support license then please open a case with the threat team, Product/Problem area = Threat.

You can also get the actual file that is being deemed malicious and review the file, is this a file from your DEV team and they are creating a new program? Basically what is this file?

There is a possibility this could be a signature collision. Meaning, the file you have matches the signature we have for an actual malicious file. However, you file maybe benign.

Do you own this file? Does this file come from your company/organization?

topic Virus/Win32.WGeneric.clqdkh in VirusTotal

Virus/Win32.WGeneric.clqdkh

Re: Virus/Win32.WGeneric.clqdkh