File Hash: lots of files (all versions we have distributed since the service started) Files to download : https://drive.google.com/file/d/1UU_LUlLwhNan-Z657WEMD9gOtDyfFvET/view?usp=sharing Link to Virustotal report for the file: https://www.virustotal.com/gui/file/e6ed2f92fe26eb85dc5019654da03c11b7b3a03adb0e6de065c54d9c71c5ded1/detection Current VirustTotal Verdict: Generic.ml ( 2 / 67) Description: Our product is developed with C# .NET framework and we use .NET Reactor to secure it. .Net Reactor is a tool for code protection and anti-debug. This service is utility tools for small businesses in South Korea. And all our binaries signed with EV Code Signing certificate. About 5 month ago, we noticed that our product was treated as a malware by multiple anti-virus softwares. The problem was an option of .NET Reactor. We received advice from .NET Reactor team and turned off the 'Native EXE' option in their software since Oct 15th, 2020. KST After changing the option, most false positive detection have disappeared. However, TotalVirus keeps histories of previous versions of our binaries which are not distributing anymore. ex. https://www.virustotal.com/gui/file/6693d1f5eec019580667d10a52d6623777ba774ee7714bac3e7f3a38e06cd5a0/detection And Paloalto keeps ' Generic.ml ' after it. https://drive.google.com/file/d/1UU_LUlLwhNan-Z657WEMD9gOtDyfFvET/view?usp=sharing These are all the binaries we have distributed. Some are clean by Paloalto and some are treated as a malware by Paloalto. Please review all the files. Thank you
... View more