FALSE Positive

[GunProtect]

Hi
We are anti-cheat software developed, and our product were tagged as virus.
But as you can see it isn't a virus, it's a game based DLL packed with WinLicense to make it harder to get hacked by cheat developers, please we ask you to look every byte in this DLL because everytime we update our product and when we scan the file it's been detected again, please trust our files. We are here to provide you all the details you want.
Please take a look on our case.

Download link: https://www.sendspace.com/file/mg9wyd

Password: gitzac
Thanks in advance
Rizzo
GunProtect Team
www.gunprotect.com.br

[dparris]

Hello,

Can you please supply the SHA256 of the file in question. We do not download from links, this ensures that we submit the correct file for review.

[GunProtect]

9ba7ffb7c62ce4062cfc60a4564e19004c2c6e7512fc98d24a1c6ec419be6d0a

[dparris]

I have requested a review of the file that you submitted. 

[GunProtect]

Ok and we are here to provide everything you want to fix this FALSE positive forever.

[mivaldi]

Look into DLL signage. If you get your DLL's signed we can work with you to whitelist the signer.

[GunProtect]

Our DLL's is signed, take a look

[mivaldi]

Already did.

[GunProtect]

Sorry, this version went online unsigned.

But this one is signed:
https://www.virustotal.com/#/file/0f8b93833f4c860d1b9817d3ef2cbaf8c3f6d488786cbefc9f8fb2a4157eb9f5/d...

[dparris]

You requested the verdict be changed to benign. This request has been completed successfully.

[mivaldi]

0f8b93833f4c860d1b9817d3ef2cbaf8c3f6d488786cbefc9f8fb2a4157eb9f5 is showing clean for Palo Alto Networks.

That doesn't give me an indication that your signer *is not* in the trusted list already.

You can request the signer to be added if we come across a signed FP in the future.