VirusTotal

Have you encountered a false positive verdict for Palo Alto Networks (Known Signatures) on VirusTotal? Use this forum to submit a verdict change request. Change requests should include the File Hash, Link to VirusTotal report, current VirusTotal verdict, and description.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
VirusTotal
Have you encountered a false positive verdict for Palo Alto Networks (Known Signatures) on VirusTotal? Use this forum to submit a verdict change request. Change requests should include the File Hash, Link to VirusTotal report, current VirusTotal verdict, and description.
About VirusTotal

Welcome to the VirusTotal discussion forum. This forum exists as a place to submit verdict review requests for False Positive verdicts for Palo Alto Networks (Known Signatures) seen on VirusTotal. All posts to this forum must be properly structured in order to be reviewed by our team.

For an introduction to the forum, please see the sticky!

Disclaimer:
This forum is not a customer support venue. Palo Alto Networks staff will not engage in active discussions on this forum. Our staff will ingest properly formatted submissions for review and update Palo Alto Networks (Known Signatures) verdicts when appropriate. For information on contacting Palo Alto Networks support, click here.

Discussions

VirusTotal Verdict Change Request for False Positive

Sticky post for VirusTotal Discussion Forum.

 

This forum is here to enable those who are not Palo Alto Networks customers to submit a false positive verdict change request for a Palo Alto Networks verdict on VirusTotal. (i.e. malware or malicious

...

brcook by L2 Linker
  • 10551 Views
  • 0 replies
  • 6 Likes

Palo EDL list - some malicious IPs not included

Hi,

 

Just want to make sure I understand Palo's EDL's correctly: a client has a query about 3 IP addresses that are not included in Palo's EDL, but is picked up as malicious via Virus Total and MXToolbox

138.199.15.177

179.43.149.114

45.148.10.237

 

...

R.Bester by L0 Member
  • 131 Views
  • 1 replies
  • 0 Likes

Report false positive 2

 

File Hash: 3008e28f2e50ca89e0b24b4eaa2a43caea6f45eea1d819ae4ed8dd45a83b657e

Link to Virustotal report for the file: https://www.virustotal.com/gui/file/3008e28f2e50ca89e0b24b4eaa2a43caea6f45eea1d819ae4ed8dd45a83b657e

Current VirustTotal Verdict: Ge

...

Report False positive

 

File Hash: 512aee2bf9656af68d0c001af9470070563a1b592e668569d7191998828d1698

Link to Virustotal report for the file:  https://www.virustotal.com/gui/file/512aee2bf9656af68d0c001af9470070563a1b592e668569d7191998828d1698

Current VirustTotal Verdict: G

...

VT Request change for False Positive

File Hash: fe18039452f6289f3a5fcd252fe0317b9dca717ba826516da1cfdd395acfad37

Link to Virustotal report for the file: VirusTotal - File - fe18039452f6289f3a5fcd252fe0317b9dca717ba826516da1cfdd395acfad37

Current VirustTotal Verdict: Generic.ml

Descripti

...

Resolved! VT Change Request for False Positive

Dear Vendor,

I am writing from the developer company of the file contained in the following virustotal link: VirusTotal - File - fe18039452f6289f3a5fcd252fe0317b9dca717ba826516da1cfdd395acfad37

I request kind support in reviewing the search engine ve

...

False postive on https://app.wavecnct.com/

Hi there, we are not Palo Alto Networks customers but some of our customers are and they are getting false positives on our domain https://app.wavecnct.com/. When checking with https://urlfiltering.paloaltonetworks.com/query/ , I see that we are cate

...

False Positive

A false positive has been detected for RemotePC.exe. Please resolve this.

 

File Hash: <929803af7c4690cb6b282a05e503698ac5ea3fede9562eaa3ef5e11d17b4c264>

Link to Virustotal report for the file: <https://www.virustotal.com/gui/file/929803af7c4690cb6b2

...

HelpDesk Viewer: False Positive

False positive has been detected for the HelpDeskViewer.exe. Please review.

 

File Hash: <276d5242719b7f8230bc1e6fba1cc5a49deee02506f7e52520a8f03748d5a1fd>

Link to Virustotal report for the file: <https://www.virustotal.com/gui/file/276d5242719b7f823

...

Resolved! FP Canva setup

File hash: 1948a17151b399e47fbe297a69447a258484369f16dba80f3c6ce5fdab203228

 

Current VirustTotal Verdict: Generic.ml

 

Description: The setup file for Canva is again detected as Generic.ml.

 

Resolved! Report false positive

File hash: e789cb6279d7ecaf609eab9446df92f138b2e5d7d2d31f3362748bec8288e0df

 

Link to Virustotal report for the file: https://www.virustotal.com/gui/file/e789cb6279d7ecaf609eab9446df92f138b2e5d7d2d31f3362748bec8288e0df

 

Current VirustTotal Verdict

...

woeruw by L1 Bithead
  • 3125 Views
  • 5 replies
  • 0 Likes

Resolved! Submit false positive

File hash: ba56598da0770fe88ef3d0b7b4769e612b9bb10bb1d94eb6153922628fb96295

Link to Virustotal: https://www.virustotal.com/gui/file/ba56598da0770fe88ef3d0b7b4769e612b9bb10bb1d94eb6153922628fb96295/details

Current VirustTotal Verdict: Generic....

woeruw by L1 Bithead
  • 2279 Views
  • 3 replies
  • 0 Likes

FP

File Hash: 454122b50452e43b36f55029e0205d72ac339e2bc04683725a70f2edd5e4ecd1

Link to Virustotal report for the file: https://www.virustotal.com/gui/file/454122b50452e43b36f55029e0205d72ac339e2bc04683725a70f2edd5e4ecd1

Current VirustTotal Verdict:

...

beniam by L2 Linker
  • 641 Views
  • 0 replies
  • 0 Likes

Hone.gg - Request for Review and Removal of False Virus Detection

Palo Alto Networks detects our uninstallation as a 'Generic.ml'. if you need any more information, let us know. The detected file is attached as well as the VirusTotal screenshot.

 

SHA-256: 0b2823edc3603506d6c52eb350544bb6071a91538cda1463cc3a7f346a1
...

rob by L0 Member
  • 1528 Views
  • 2 replies
  • 0 Likes
  • 742 Posts
  • 62 Subscriptions
Top Solution Authors