topic Re: False positive for my Python app in VirusTotal

False positive for my Python app

Teiji_Ishida — Wed, 03 Jul 2024 21:37:25 GMT

File Hash: 45dc76b21c0b83e1ba5d490e91c5a4fab3cee6441288c918cd64ce9427b016ca
Link to Virustotal report for the file: https://www.virustotal.com/gui/file/45dc76b21c0b83e1ba5d490e91c5a4fab3cee6441288c918cd64ce9427b016ca?nocache=1
Current VirustTotal Verdict: Generic.ml
Description: I created this Python app called Vulcan. It is a simple GUI to change batch files and denoising files (vpy) provided by the app.

Repository link: https://github.com/teijiIshida/Vulcan

The app is compiled with Cython and pyinstaller/auto-py-to-exe.

2656780 INFO: PyInstaller: 6.8.0, contrib hooks: 2024.7
2656781 INFO: Python: 3.12.3

It is not released to the public yet, however, I know that Python app compiled with pyinstaller tend to generate these false positive detections, so I'm sending my app to vendors to remove this false positive.

If you need additional files or info, please let me know. I kindly request that you remove this detection and whitelist it. Thank you.

I don't want to post my file publicly though (because it is not a free app). Is there a way to upload it so only the admin can see it?

Re: False positive for my Python app

DaBone — Wed, 03 Jul 2024 23:12:17 GMT

File has been submitted for review

Re: False positive for my Python app

DaBone — Thu, 04 Jul 2024 01:39:38 GMT

This file was deemed malware. Our verdict has stayed the same.

Re: False positive for my Python app

Teiji_Ishida — Thu, 04 Jul 2024 01:51:24 GMT

I'm sorry but that is ridiculous. My app does not connect to the internet, does not store or send any user data, does not modify any system settings or registry, nor any other nefarious malware traits. Do you want to see my source code? I can send the whole python file along with all the necessary modules privately?

Re: False positive for my Python app

Teiji_Ishida — Thu, 04 Jul 2024 12:24:25 GMT

Here are my results from Microsoft and Malwarebytes Anti-malware:

https://forums.malwarebytes.com/topic/314147-malwareai2734645492-false-positive/

Both, including many other vendors I've sent my requests found that my app is not malware.