02-08-2024 09:13 AM
Hi Everyone,
Our Palo Alto Anti-Virus Profile is picking up AGCInvokerUtility.exe as Virus/Win32.Wgeneric.Eedlvy(624280308). I did a quick search on Threat Vault and found the associated hash: b807502f1a0804543488c5b85a386452d6f9848bf611db01728f3d8c23a212c9 which as per VirusTotal is malicious as well.
However when you do a search on the AGCInvokerUtility.exe, by definition it is a Adobe GC Invoker Utility process that runs as part of the Adobe Software Integrity Service validation testing. It checks for any tampering with Adobe Software program files or improper or invalid licenses.
So the question is if PA is picking it up as virus, and if it is indeed a legit file what would be the next steps to deal with it?
02-19-2024 04:06 PM
Due to the False Positive, the signature (ID: 624280308) was disabled on Feb 09.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
