topic certified app is flagged by PaloAlto Networks (known signatures) in VT as generic.pup in VirusTotal

certified app is flagged by PaloAlto Networks (known signatures) in VT as generic.pup

Xiayutu — Mon, 20 Mar 2017 20:15:58 GMT

Here is the link for the program that is flagged by Palo Alto scanner in VT: https://www.virustotal.com/en/file/c2dbbb72b090715e050b496e10efdf799838a0cc91b2a4eeec534dcf44150764/analysis/1489579687/. This is a clean certified application by AppEsteem https://customer.appesteem.com/vendors/DRVHQ. Please review this app and let me know what's the reason it is flagged as PUP or it is a false positive detection.

Here is the full certified app requirement https://customer.appesteem.com/Home/AppCertReqs from AppEsteem, a company

believes software monetization industry needs regulation. It focuses on certifying app, helping consumer to never be exposed to apps (windows App, Chrome extension, mobile Apps) that:

1) Do things without their informed consent

2) Give them unpleasant surprises

3) Leave them feeling cheated after paying for something

DriverSupport meets all AppEsteem's ACR (App Ceritification Requirements) and was certified Nov last year.

Thank you!

Researcher@AppEsteem

Re: certified app is flagged by PaloAlto Networks (known signatures) in VT as generic.pup

maurisy — Thu, 23 Mar 2017 20:10:27 GMT

We have submitted this to our engineering team for investigation.

-Thanks

Re: certified app is flagged by PaloAlto Networks (known signatures) in VT as generic.pup

Xiayutu — Mon, 27 Mar 2017 19:50:42 GMT

Thank you! May we know the investigation progress? It has been a week since we sumitted this case. If it is not a FP, please let us know what's the issue that app should fix to improve based on your detection criteria. If it is a FP, please help to solve the detection and update the signature in VT.

Thanks!

Hong

Researcher @ AppEsteem

Re: certified app is flagged by PaloAlto Networks (known signatures) in VT as generic.pup

maurisy — Mon, 27 Mar 2017 20:14:30 GMT

We are fairly confident this is an FP. Please expect this to be handled by 5PM PST today. Apologies for any inconvenience.

-The Palo Alto Networks Content, Apps, & Threats Team

Re: certified app is flagged by PaloAlto Networks (known signatures) in VT as generic.pup

goku123 — Tue, 28 Mar 2017 16:56:34 GMT

This has been resolved:

https://www.virustotal.com/en/file/c2dbbb72b090715e050b496e10efdf799838a0cc91b2a4eeec534dcf44150764/analysis/