False Positive: VLC 3.0.4

[bhabel]

We are still receiving alerts that VLC 3.0.4 is being blocked.

Exploit payload process blocked                BLOCK           C:\Users\****\AppData\Local\Temp\vlc-3.0.4-win32.exe             ****      VLC Player           C:\Program Files (x86)\VideoLAN\VLC\vlc.exe   Attacked application: C:\Program Files (x86)\VideoLAN\VLC\vlc.exe; Parent process name: SpillmanClient.exe; Layer: Application Behavior Protection; API ID: 205; Address: ; Module: ; AddressType: ; StackTop: ; StackBottom: ; StackPointer: ; Extra:

Exploit payload file blocked         BLOCK           C:\Users\***\AppData\Local\Temp\vlc-3.0.4-win32.exe            ****       VLC Player           C:\Program Files (x86)\VideoLAN\VLC\vlc.exe   Attacked application: C:\Program Files (x86)\VideoLAN\VLC\vlc.exe; Parent process name: SpillmanClient.exe; Layer: Application Behavior Protection; API ID: 205; Address: ; Module: ; AddressType: ; StackTop: ; StackBottom: ; StackPointer: ; Extra:

[Arthi]

Thanks bhabel. Can you please post logs here.

Please use this tool to grab the logs. Thanks.

 

[rlamadrid]

Was there a verdict on this?  We've seen a similar detection and believe it is a false positive as well.

Thank you.

[Arthi]

Hi All,

We have an update on this issue.

We have a fix for this. It will released end of this month. Thanks.

[bhabel]

Howdy Arthi, any updates on this? It is being flagged by Malwarebytes Anti-Exploit.