False positive: Generic.ml

[cguide]

SHA256: 12bf791d60c30fbaae296d1c06f1b0515cb74e4972c18e6de2f2f0fdff7b32cb Virustotal: https://www.virustotal.com/gui/file/12bf791d60c30fbaae296d1c06f1b0515cb74e4972c18e6de2f2f0fdff7b32cb... File: https://files3.codecguide.com/K-Lite_Codec_Pack_1580_Full.exe SHA256: 9feae7075548a3cac3aa6a9e99fe178b6b682a99e38a9df27b2aaf3ab12872a6 Virustotal: https://www.virustotal.com/gui/file/9feae7075548a3cac3aa6a9e99fe178b6b682a99e38a9df27b2aaf3ab12872a6... File: https://files3.codecguide.com/K-Lite_Codec_Pack_1580_Mega.exe

[tsullivan7]

Under review.

[tsullivan7]

We have changed sample to benign.

[cguide]

Only the first file has been fixed.

[cguide]

Another file with same false positive detection.

SHA256: f3feafa635520b49ca9e346e85542f7b7633f1ecd4cb006d8ed9e1d14b9382cc

Virustotal: https://www.virustotal.com/gui/file/f3feafa635520b49ca9e346e85542f7b7633f1ecd4cb006d8ed9e1d14b9382cc...

File: https://files3.codecguide.com/K-Lite_Codec_Pack_1580_Standard.exe

[cguide]

The above detections have been fixed. However, the same false detection happens again for newer versions of the above software. So it appears you are using a whitelisting strategy instead of improving the detection engine. Is there any hope this will be fixed properly in the future?