topic Re: Apple SoftwareUpdate.exe got blocked by Cortex XDR in General Topics

Apple SoftwareUpdate.exe got blocked by Cortex XDR

ReisingerM — Tue, 08 Mar 2022 06:46:01 GMT

Hello Palo Community,

does anybody know why the Apple SoftwareUpdate.exe got blocked by today

Or has someone else also encountered this Problem?

In the Community section of VirusTotal I discoverd a comment that Palo Alto apperently changed the status at one point, yet i have some triggers with this software that came in today.

https://www.virustotal.com/gui/file/0682eef4ae722d6dad6b0c41f530d86e44f094f8487105372d5a03e0f0a437e9/community

Thank you in advance,

ReisinM

Re: Apple SoftwareUpdate.exe got blocked by Cortex XDR

kiwi — Tue, 08 Mar 2022 09:36:52 GMT

Hi @ReisingerM ,

Confirmed false positive. WildFire has indeed updated the status from Malware to Benign.

Cheers,

-Kiwi.

Re: Apple SoftwareUpdate.exe got blocked by Cortex XDR

MartinPfeil — Tue, 08 Mar 2022 09:48:35 GMT

It is benign software, initally identified as malware.

Same thing happend in the last two days for other software updates, like for Epson and HP:

Initially identified as malicious but then the verdict was reversed a few hours later.

Files had to be released manually and hashes had to be added by hand to the whitelist