False positive audioplugin_fluxer.dll

[seb000000]

Hearthstone\Hearthstone_Data\Plugins\x86\audioplugin_fluxer.dll

fileHash: 9fb10e6ac7333dad407353f79c1f967aef6ba462cef6c0714c929b602b39b38a

Link to Virustotal report for the file: https://www.virustotal.com/gui/file/9fb10e6ac7333dad407353f79c1f967aef6ba462cef6c0714c929b602b39b38a...

[DaBone]

please follow the format outlined here:
https://live.paloaltonetworks.com/t5/virustotal/virustotal-verdict-change-request-for-false-positive...

[seb000000]

File Hash: <9fb10e6ac7333dad407353f79c1f967aef6ba462cef6c0714c929b602b39b38a>

Link to Virustotal report for the file: <https://www.virustotal.com/gui/file/9fb10e6ac7333dad407353f79c1f967aef6ba462cef6c0714c929b602b39b38a...>

Current VirustTotal Verdict: < 3/72 security vendors flagged this file as malicious>

Description: <Detected as malicious but genuine file. Has been detected as malicious in the past (in 2023 and 2024) by several vendors but always considered then as false positive>

[DaBone]

we do not see this as malicious.  

[seb000000]

Cortex XDR apparently does. 

: {"trigger":2,"component":311,"cystatus":3225419864,"filePath":"C:\\Program Files (x86)\\Hearthstone\\Hearthstone_Data\\Plugins\\x86\\audioplugin_fluxer.dll","fileHash":{"sha256":"9FB10E6AC7333DAD407353F79C1F967AEF6BA462CEF6C0714C929B602B39B38A","sha1":"27E8625822A58520F739CE9D2B0933034EC3AD77","md5":"1749919002788BF605648F1C22493295"},"streamHash":{"sha256":"9FB10E6AC7333DAD407353F79C1F967AEF6BA462CEF6C0714C929B602B39B38A","sha1":"27E8625822A58520F739CE9D2B0933034EC3AD77","md5":"1749919002788BF605648F1C22493295"},"verdict":1,"fvHash":"4FE36A756732D62D83F41A00060000000E000021000500022140012200621401","fileType":2,"fileSize":"548864","streamFileType":2,"streamSize":"548864"}

[DaBone]

Are you currently a customer with Cortex XDR?

[seb000000]

My company is. They apparently installed Cortex XDR recently and since then this dll is flagged. 

[DaBone]

Please open a case with TAC. This forum is for Non-Palo customers.  

[seb000000]

I cannot open a case. It is a big company and I do not have the info to register as a customer. I am stuck