https://live.paloaltonetworks.com/t5/virustotal/false-positive-request-virus-win32-wgeneric-zlbje/m-p/254376#M946 <P>File Hash:&nbsp;435a46b111cbc1bea5c0cd5db83fb338</P><P>&nbsp;</P><P>Link to Virustotal report for the file:&nbsp;</P><P><A href="https://www.virustotal.com/#/file/1ef7e202ecce2bdc46be2cc5aa2f409f4f31ef7245e6c3234babc4677aa94729/details" target="_blank" rel="noopener">https://www.virustotal.com/#/file/1ef7e202ecce2bdc46be2cc5aa2f409f4f31ef7245e6c3234babc4677aa94729/details</A></P><P><A href="https://www.hybrid-analysis.com/sample/1ef7e202ecce2bdc46be2cc5aa2f409f4f31ef7245e6c3234babc4677aa94729" target="_blank">https://www.hybrid-analysis.com/sample/1ef7e202ecce2bdc46be2cc5aa2f409f4f31ef7245e6c3234babc4677aa94729</A></P><P>&nbsp;</P><P>Current VirustTotal Verdict: Unable to scan via vtotal. But triggers&nbsp;<SPAN>Virus/Win32.WGeneric.zlbje</SPAN></P><P>&nbsp;</P><P>Description: RTF file provided by 3rd party business relationship. File does utilize some non-traditional methods (mavinject32.exe) and multiple character sets but appears to ultimately be benign.</P> Wed, 20 Mar 2019 13:54:02 GMT NaFrench 2019-03-20T13:54:02Z https://live.paloaltonetworks.com/t5/virustotal/false-positive-request-virus-win32-wgeneric-zlbje/m-p/254376#M946 <P>File Hash:&nbsp;435a46b111cbc1bea5c0cd5db83fb338</P><P>&nbsp;</P><P>Link to Virustotal report for the file:&nbsp;</P><P><A href="https://www.virustotal.com/#/file/1ef7e202ecce2bdc46be2cc5aa2f409f4f31ef7245e6c3234babc4677aa94729/details" target="_blank" rel="noopener">https://www.virustotal.com/#/file/1ef7e202ecce2bdc46be2cc5aa2f409f4f31ef7245e6c3234babc4677aa94729/details</A></P><P><A href="https://www.hybrid-analysis.com/sample/1ef7e202ecce2bdc46be2cc5aa2f409f4f31ef7245e6c3234babc4677aa94729" target="_blank">https://www.hybrid-analysis.com/sample/1ef7e202ecce2bdc46be2cc5aa2f409f4f31ef7245e6c3234babc4677aa94729</A></P><P>&nbsp;</P><P>Current VirustTotal Verdict: Unable to scan via vtotal. But triggers&nbsp;<SPAN>Virus/Win32.WGeneric.zlbje</SPAN></P><P>&nbsp;</P><P>Description: RTF file provided by 3rd party business relationship. File does utilize some non-traditional methods (mavinject32.exe) and multiple character sets but appears to ultimately be benign.</P> Wed, 20 Mar 2019 13:54:02 GMT https://live.paloaltonetworks.com/t5/virustotal/false-positive-request-virus-win32-wgeneric-zlbje/m-p/254376#M946 NaFrench 2019-03-20T13:54:02Z https://live.paloaltonetworks.com/t5/virustotal/false-positive-request-virus-win32-wgeneric-zlbje/m-p/254464#M947 <P>Hi</P><P>&nbsp;</P><P>Submitted this signature for review.</P><P>&nbsp;</P><P>Thanks</P><P>Himani</P> Thu, 21 Mar 2019 01:59:24 GMT https://live.paloaltonetworks.com/t5/virustotal/false-positive-request-virus-win32-wgeneric-zlbje/m-p/254464#M947 hisingh 2019-03-21T01:59:24Z https://live.paloaltonetworks.com/t5/virustotal/false-positive-request-virus-win32-wgeneric-zlbje/m-p/257415#M994 <P>This file is not listed as malicious by Palo Alto.&nbsp;</P> Fri, 12 Apr 2019 13:36:25 GMT https://live.paloaltonetworks.com/t5/virustotal/false-positive-request-virus-win32-wgeneric-zlbje/m-p/257415#M994 dparris 2019-04-12T13:36:25Z