https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/1256106#M3171 <DIV id="bodyDisplay" class="lia-message-body lia-component-message-view-widget-body lia-component-body-signature-highlight-escalation lia-component-message-view-widget-body-signature-highlight-escalation"> <DIV class="lia-message-body-content"> <P>File Hash: &lt;56d73d544ed3b848a59c05eb57ec308b3bfa457c678ec1992fb03c41c101f77b&gt;</P> <P>Link to Virustotal report for the file: &lt;<A href="https://www.virustotal.com/gui/file/ea1bbdcb96f37f3204ce5486b1721e579eb7143ce8a1ebc58199f8eb44d84c8d" rel="nofollow noopener noreferrer" target="_blank">https://www.virustotal.com/gui/file/56d73d544ed3b848a59c05eb57ec308b3bfa457c678ec1992fb03c41c101f77b</A><A href="https://www.virustotal.com/gui/file/ea1bbdcb96f37f3204ce5486b1721e579eb7143ce8a1ebc58199f8eb44d84c8d" rel="nofollow noopener noreferrer" target="_blank">&gt;</A></P> <P>Current VirustTotal Verdict: &lt;Maliicious&gt;<BR /><BR /><SPAN>Description: &lt;</SPAN>I am the author of this program. I work for Candescent which used to be a division of NCR. We make banking software for some of the top banks in North America and elsewhere. We have verified that our build processes are clean. The file is digitally signed by our legal entity Digital First Holdings. Previous versions of this file were signed by NCR Voyix and NCR.<BR />The software installs device drivers for USB check scanners, sets itself to run on login, opens firewalls to scan customer cheques to send to bank websites for deposit.&gt;</P> </DIV> </DIV> <DIV class="lia-rating-metoo lia-component-me-too lia-component-message-view-widget-me-too"> <DIV class="RatingDisplay lia-component-ratings-widget-rating-display">&nbsp;</DIV> </DIV> Thu, 11 Jun 2026 15:53:10 GMT darryl.oneill 2026-06-11T15:53:10Z https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/1256106#M3171 <DIV id="bodyDisplay" class="lia-message-body lia-component-message-view-widget-body lia-component-body-signature-highlight-escalation lia-component-message-view-widget-body-signature-highlight-escalation"> <DIV class="lia-message-body-content"> <P>File Hash: &lt;56d73d544ed3b848a59c05eb57ec308b3bfa457c678ec1992fb03c41c101f77b&gt;</P> <P>Link to Virustotal report for the file: &lt;<A href="https://www.virustotal.com/gui/file/ea1bbdcb96f37f3204ce5486b1721e579eb7143ce8a1ebc58199f8eb44d84c8d" rel="nofollow noopener noreferrer" target="_blank">https://www.virustotal.com/gui/file/56d73d544ed3b848a59c05eb57ec308b3bfa457c678ec1992fb03c41c101f77b</A><A href="https://www.virustotal.com/gui/file/ea1bbdcb96f37f3204ce5486b1721e579eb7143ce8a1ebc58199f8eb44d84c8d" rel="nofollow noopener noreferrer" target="_blank">&gt;</A></P> <P>Current VirustTotal Verdict: &lt;Maliicious&gt;<BR /><BR /><SPAN>Description: &lt;</SPAN>I am the author of this program. I work for Candescent which used to be a division of NCR. We make banking software for some of the top banks in North America and elsewhere. We have verified that our build processes are clean. The file is digitally signed by our legal entity Digital First Holdings. Previous versions of this file were signed by NCR Voyix and NCR.<BR />The software installs device drivers for USB check scanners, sets itself to run on login, opens firewalls to scan customer cheques to send to bank websites for deposit.&gt;</P> </DIV> </DIV> <DIV class="lia-rating-metoo lia-component-me-too lia-component-message-view-widget-me-too"> <DIV class="RatingDisplay lia-component-ratings-widget-rating-display">&nbsp;</DIV> </DIV> Thu, 11 Jun 2026 15:53:10 GMT https://live.paloaltonetworks.com/t5/virustotal/false-positive-generic-ml/m-p/1256106#M3171 darryl.oneill 2026-06-11T15:53:10Z