False positive detection (Generic.ml)

[Sebin_Idrive]

Hi All,

I am writing on behalf of Idrive Software Inc, to intimate about the false positive warning displayed in VirusTotal Website with PaloAltoNetwork for our Remote Access Software. Since our Application is having all the security validations and certifications, it is still detected as a " Generic.ml"  category in VT Website.

We are requesting the team to have a check on this asap and add our applications "RemotePC.exe, RemotePCHost.exe and RemotePCViewer.exe installer setup files to whitelist. Kindly do the needful asap.

[tsullivan7]

Could you provide a hash or VT link for this?

[Sebin_Idrive]

Kindly find the hash value and Screenshot.

Vhash:  0470866d1c0d1c051505505016z1c9z5bz1fz

[Sebin_Idrive]

Hi Team,

Can we get an update on this? Still its showing False Alarm to users.

[tsullivan7]

We use SHA256 hashes.  Please provide either the SHA256 or the VT link so we can evaluate it.

[Sebin_Idrive]

RemotePC.exe:

SHA-256

66d69d9fe71faa8a88130e974393663c111c2d7fc9bdf3378bd0faadd644b264

 

Link: https://www.virustotal.com/gui/file/66d69d9fe71faa8a88130e974393663c111c2d7fc9bdf3378bd0faadd644b264...

[DaBone]

This file has been submitted for review. 

66d69d9fe71faa8a88130e974393663c111c2d7fc9bdf3378bd0faadd644b264

[Sebin_Idrive]

Hi All,

Any update on the submission.?

Thanks

Sebin J

[tsullivan7 · Accepted solution]

The sample has been changed to benign.

[Sebin_Idrive]

Hi All,

Again this has started detecting as Malware.

SHA-256: d6dd67de83fc9df2025c767e76c78b599378a4f4b4dbacae02b4670e19a1cdf0

Ref URL: https://www.virustotal.com/gui/file/d6dd67de83fc9df2025c767e76c78b599378a4f4b4dbacae02b4670e19a1cdf0...

Please add to false positive.

Thanks

Sebin John

[DaBone]

This file was submitted for review

[DaBone · Accepted solution]

d6dd67de83fc9df2025c767e76c78b599378a4f4b4dbacae02b4670e19a1cdf0 

The above file is no longer seen as malware

If there are other files that you want to have us review, please follow the guidance in the pinned post at the top of this forum.  Please make a new post if these files have different hashes than what is found in this post.