Possible false positive: Gallery-DL from Chocolatey repository

[Firehawke]

Gallery-DL uses PyInstaller, which seems to be getting it caught as possible malware. It's probably a false positive, but I'd rather get eyes on it. The package is at https://chocolatey.org/packages/gallery-dl

I've attached the .exe here as well.

gallery-dl.7z

[miekiemoes]

Hi,

I can't reproduce detection on the attached file. Is it still being detected for you?

If so, please export the detection log, as that gives more details.

Thanks!

[Firehawke]

I think I have the right file here. Let's see...

 

gallery-dl-log.txt

[miekiemoes]

Thanks.

This helps. The sample you attached was different than the one in the log, hence why I couldn't reproduce detection.

In either way, this was indeed a false positive by our additional machinelearning engine we have implemented.
This will get fixed and should be reflected in less than 10 minutes.

Thanks for reporting!

[Firehawke]

Interesting. That was the exact same file, though. Weird. Well, thanks for your assistance in any case!