False-Positive for MSFS Mobile Companion App v1.7 (Generic.ml)

[martin_caronstudios]

Hello!

The latest version of Microsoft Flight Simulator Mobile Companion App is being detected as a threat Generic.ml.

File Hash: d05b8fda6b3683d4da64cca46b095ef9b9e1e5027dd15f743c804b4fd7f32fda

Link to Virustotal report for the file: https://www.virustotal.com/gui/file/d05b8fda6b3683d4da64cca46b095ef9b9e1e5027dd15f743c804b4fd7f32fda...

Current VirustTotal Verdict: Thread Generic.ml

Description:

The file MSFS_MCA_v1-7.exe, which is being detected as a false-positive, has been compiled using pyinstaller. It is a tool for Microsoft Flight Simulator which lets you control planes using your mobile device. It creates a local web server using Flask and uses SimConnect to communicate with Microsoft Flight Simulator. You can find more information on the file on my GitHub page: https://github.com/mracko/MSFS-Mobile-Companion-App

Microsoft had been identifying the file as Program:Win32/Wacapew.C!ml, but it's been already cleared from their database.

Thank you!

Martin

[hisingh]

Hello @martin_caronstudios 

We have no record for this hash.

Best

Himani

[martin_caronstudios]

Hi Himani!

It's new file - I've compiled it this week on Thursday. But you can find it here:

https://github.com/mracko/MSFS-Mobile-Companion-App/releases/download/1.7/MSFS_MCA_v1-7.zip

The zip comes packed with several other files, but the one causing the false-positive report is the MSFS_MCA_v1-7.exe.

I hope this helps.

Best,

Martin

[hisingh]

Hello @martin_caronstudios 

Thanks, I have submitted it for review. 

Best

Himani

[martin_caronstudios]

Thanks Himani!

[hisingh · Accepted solution]

Hello @martin_caronstudios 

This has been changed to benign. 

Thanks

Himani

[martin_caronstudios]

Thanks @hisingh! Much appreciated.