topic Re: False positive audioplugin_fluxer.dll in VirusTotal

False positive audioplugin_fluxer.dll

seb000000 — Mon, 23 Jun 2025 10:06:53 GMT

Hearthstone\Hearthstone_Data\Plugins\x86\audioplugin_fluxer.dll

fileHash: 9fb10e6ac7333dad407353f79c1f967aef6ba462cef6c0714c929b602b39b38a

Link to Virustotal report for the file: https://www.virustotal.com/gui/file/9fb10e6ac7333dad407353f79c1f967aef6ba462cef6c0714c929b602b39b38a/detection

Re: False positive audioplugin_fluxer.dll

DaBone — Mon, 23 Jun 2025 16:20:05 GMT

please follow the format outlined here:
https://live.paloaltonetworks.com/t5/virustotal/virustotal-verdict-change-request-for-false-positive/td-p/287364

Re: False positive audioplugin_fluxer.dll

seb000000 — Wed, 25 Jun 2025 07:12:08 GMT

File Hash: <9fb10e6ac7333dad407353f79c1f967aef6ba462cef6c0714c929b602b39b38a>

Link to Virustotal report for the file: <https://www.virustotal.com/gui/file/9fb10e6ac7333dad407353f79c1f967aef6ba462cef6c0714c929b602b39b38a/detection>

Current VirustTotal Verdict: < 3/72 security vendors flagged this file as malicious>

Description: <Detected as malicious but genuine file. Has been detected as malicious in the past (in 2023 and 2024) by several vendors but always considered then as false positive>

Re: False positive audioplugin_fluxer.dll

DaBone — Wed, 25 Jun 2025 17:58:55 GMT

we do not see this as malicious.

Re: False positive audioplugin_fluxer.dll

seb000000 — Wed, 25 Jun 2025 19:06:31 GMT

Cortex XDR apparently does.

: {"trigger":2,"component":311,"cystatus":3225419864,"filePath":"C:\\Program Files (x86)\\Hearthstone\\Hearthstone_Data\\Plugins\\x86\\audioplugin_fluxer.dll","fileHash":{"sha256":"9FB10E6AC7333DAD407353F79C1F967AEF6BA462CEF6C0714C929B602B39B38A","sha1":"27E8625822A58520F739CE9D2B0933034EC3AD77","md5":"1749919002788BF605648F1C22493295"},"streamHash":{"sha256":"9FB10E6AC7333DAD407353F79C1F967AEF6BA462CEF6C0714C929B602B39B38A","sha1":"27E8625822A58520F739CE9D2B0933034EC3AD77","md5":"1749919002788BF605648F1C22493295"},"verdict":1,"fvHash":"4FE36A756732D62D83F41A00060000000E000021000500022140012200621401","fileType":2,"fileSize":"548864","streamFileType":2,"streamSize":"548864"}

Re: False positive audioplugin_fluxer.dll

DaBone — Thu, 26 Jun 2025 01:39:10 GMT

Are you currently a customer with Cortex XDR?

Re: False positive audioplugin_fluxer.dll

seb000000 — Thu, 26 Jun 2025 08:04:14 GMT

My company is. They apparently installed Cortex XDR recently and since then this dll is flagged.

Re: False positive audioplugin_fluxer.dll

DaBone — Thu, 26 Jun 2025 20:03:21 GMT

Please open a case with TAC. This forum is for Non-Palo customers.

Re: False positive audioplugin_fluxer.dll

seb000000 — Fri, 27 Jun 2025 08:12:09 GMT

I cannot open a case. It is a big company and I do not have the info to register as a customer. I am stuck