PNG File Chunk Length Abnormal

jr_dot — Fri, 18 Nov 2022 22:35:13 GMT

A strange trend we're seeing the application ms-update return a threat of:

It's been occurring since June and the png files related to the threat are named:

sw_saber_rey.png

sw_saber_luke.png

sw_saber_vader.png

Anyone else come accross this threat and application/file reference?

Re: PNG File Chunk Length Abnormal

kiwi — Wed, 23 Nov 2022 13:21:54 GMT

I'd recommend enabling PCAP for the threat and have it submitted to TAC for analysis if you believe this is a false positive.

Kind regards,

-Kiwi.