About hisingh

Hello @janicesharp8576  and @jambojet226    For us to analysis, we only need sha256. I am seeing many URLs, it would be great if you can download the file by yourself and provide us sha256   Best Himani ... View more

Hello @CGSupport    This hash is changed to benign, I hope you will have no issue with file download. TV link:  https://threatvault.paloaltonetworks.com/?query=cee5c15067c7af7dafd46cbfda4188f88752b4e02fbac82442883ce516a88775&type= Your hash: cee5c15067c7af7dafd46cbfda4188f88752b4e02fbac82442883ce516a88775   best ... View more

Hello @CGSupport    We can't reach on this site mentioned as it was blocked, Could you please provide the hash of the file.   Best ... View more

Hello @Daniyal    Beginning with the content release version 8215, Palo Alto Networks added a new file type, "unknown-binary," for customers running a PAN-OS 9.0 release. This new file type enables visibility for files that are binary encoded and not identified as any other supported file type. For customers who want visibility into transfers of "unknown-binary" files in their networks, we recommend that you set this file type to "alert" so that you can observe where these files appear in your network traffic. We also recommend that you monitor your Data Filtering logs for "Unknown Binary File" for several weeks before you consider updating to a more severe action ("block" or "continue"). If you are running a PAN-OS 9.0 release with an "alert all" rule in your file-blocking profiles (which includes the predefined "basic file blocking" and "strict file blocking" profiles), expect to see logs for "Unknown Binary File" after you install this content update; additionally, you can configure the "unknown-binary" file type in File Blocking profiles. (Customers running a PAN-OS 8.1 or earlier release will not experience any changes related to this new file type.)   Thank you Himani ... View more

Hello @JonIsaacson    This exception can be added under the spyware profile ->DNS signature-> exception.  Please remember that after adding this exception the whole category of "newly register domains" will be whitelisted.   Best Himani ... View more

Hello @Jamesy    I would suggest going through the best practices, you can find the documents here: https://docs.paloaltonetworks.com/best-practices/9-0/internet-gateway-best-practices/best-practice-internet-gateway-security-policy/transition-safely-to-best-practice-security-profiles.html   Best Himani ... View more

Hello @hhiggins  Could you please provide the hash of  Teams-1.3.00.12058-full.nupkg.  An issue like this that has possible False Positive on a file is better to open at VirusTotal_Discussions. Link: https://live.paloaltonetworks.com/t5/virustotal/bd-p/VirusTotal_Discussions   Best Himani ... View more

Hello   I herd back from the malware team, this file verdict is been changed to Grayware.   Best Himani ... View more

Hello @kns123    I have asked for the re-analysis, I will update you once I hear more.   Best Himani ... View more

Hello    Few Non-RFC Complaint signatures that was introduced in late last year and non-RFC Compliant SSL Traffic on Port 443(56112) is one of them. Please note that the main aim behind the signature TID 56112 is to detect suspicious and non-RFC compliant SSL traffic on port 443 or applications sending non-SSL traffic using port 443 or indicate possible malicious activity.  You can capture the facebook traffic from the android device on your Firewall and check the traffic SSL protocol.   Best Himani ... View more

Hello @gsteam    The file is marked as benign,   Best Himani ... View more

Hello @gsteam    Our team is rechecking verdict associated with this hash, I will update you once I hear more.   Best Himani ... View more

Hello @beniam    This hash is marked as benign, you should not have any more issues with the  AirMyPC.exe file.   Best Himani ... View more

Hello @beniam    I have submitted this hash to recheck and will update you as soon as I hear more,   Best   ... View more

Hello,  I heard back from the malware team, they have marked this as grayware.  Best, ... View more