topic False Positive Submission in VirusTotal

False Positive Submission

MissXie — Thu, 09 Nov 2017 08:12:48 GMT

Hello!

We have checked our software on VirusTotal and see false positive detection (generic.ml). Please fix the issue.
The file is available

Thank you!

mivaldi — Fri, 01 Dec 2017 23:03:19 GMT

Please provide the sha256 hash of these samples.

MissXie — Tue, 05 Dec 2017 09:59:22 GMT

Thank you for your reply! How should I submit these samples?

mivaldi — Tue, 05 Dec 2017 18:11:30 GMT

If you're a Palo Alto Networks customer, open a case with Support.

If you're not a Palo Alto Networks customer, provide the sha256 hash and VT link of the files being misidentified.

MissXie — Wed, 06 Dec 2017 09:12:33 GMT

The SHA256 hash details of these samples：

ScreenRecorder：57 e3 79 b3 9b 5e ad a4 1d 2f 47 43 1c a7 3e 71 5c ac 4e c7 9c 64 19 60 84 db 74
5d 9c f1 a2 fc

VideoEditor：16 37 32 14 6e 96 c1 18 b2 a4 9b 86 cd a0 95 cc 33 ff 96 f8 b7 10 49 c9 ae bc 9c
a3 78 ca 15 e6

mivaldi — Wed, 06 Dec 2017 22:08:17 GMT

Thanks for the hashes.

These appear to be PUP's, but not Malware.

I requested the verdict be considered to be changed from Malware to Grayware (Adware/PUP).

mivaldi — Tue, 19 Dec 2017 18:16:40 GMT

Samples:

57e379b39b5eada41d2f47431ca73e715cac4ec79c64196084db745d9cf1a2fc

163732146e96c118b2a49b86cda095cc33ff96f8b71049c9aebc9ca378ca15e6

Verdicts have been changed to grayware and the associated antivirus signatures have been disabled.