Software False positive

[Raiever]

Hello,

 

The programs attached are marked as a false positive and are legitimate software, Obfuscated and encrypted to protect copyrighted material, and then digitally signed by Sectigo for proof of ownership to Sammichscripts (Sam Bostock).

The false positive is caused by the encryption used to protect the source code called "Obsidium". It has been flagged by other providers but has been removed or is in the process of being removed. The password for the zip file is "infected". If you need anything else please do not hesitate to reach out.

Thank you!

Files.zip

[cli]

This may have been fixed automatically. I scanned the files you attached and they were not detected.

[Raiever]

Just now, cli said:

This may have been fixed automatically. I scanned the files you attached and they were not detected.

Interesting, I just tested 2 out of 3 and they flagged!

 

Also, scanning with virustotal showed at least 1 of the 3 as malicious. Is that a different area to post in? :)

 

Thanks for your help!

[cli]

I refreshed the VT page and the detection is no longer showing. Also, please do the following to clear your hubble cache:

1. Click on the Malwarebytes icon in the system tray
2. Select "Quit Malwarebytes"
3. Navigate to %PROGRAMDATA%\Malwarebytes\MBAMService
4. Delete the file HubbleCache
5. Open Malwarebytes

[Raiever]

19 minutes ago, cli said:

I refreshed the VT page and the detection is no longer showing. Also, please do the following to clear your hubble cache:

1. Click on the Malwarebytes icon in the system tray
2. Select "Quit Malwarebytes"
3. Navigate to %PROGRAMDATA%\Malwarebytes\MBAMService
4. Delete the file HubbleCache
5. Open Malwarebytes

Yep, there it goes! Gone now.. How weird the timing! Well this can be closed! Thank you for your help and have a great weekend!