false positive, name is loader.exe

[CHRIS-CH]

Hello

We do have an application that is using a generic name "loader.exe" 

it is at two place

C:\Program Files (x86)\Brisoft\Salines_PROD_3.8

C:\Program Files (x86)\Brisoft\Salines_TEST_3.8

 

Our Nebula and our OneView installatrion are sometimes put this file in quarantine because "MachineLearning/Anomalous.100%"

Can you check the attachment and learn it as safe, if it is save

 

Thanks you to confirm when done

Thanks

 

loader.zip

[miekiemoes]

Hi,

This is detected by our MachineLearning engine, which helps to protect even better against 0day threats. Unfortunately, as this is a heuristic engine, it's possible False Positives happen. Also see here for more explanation: https://forums.malwarebytes.com/topic/238670-machinelearninganomalous-detections-and-explanation/
Thanks for reporting these, as this helps to finetune the engine, so these won't be detected in the future anymore.

This should be fixed by now. Please give it some time (max 10 minutes) in order to have it populate, so detection won't happen anymore.