False Positive Report

[taesig]

Hi,

I am Taesig Ahn from Abbott Cyber Security Team and contacting your organization regarding False Positive analysis on Virus Total.

The file is developed by Abbott for our customers to use. The file is detected as malicious because it scans network.

Unfortunately, we do not have access to direct logs, so here are file hashes and VT link.

 

File 1

MD5: 4ec05b78058a2ed3da8290a745e2e2f9

SHA256: b9aa5d4c706d11c1088094f8c31334dc9aad18a7c41b55b875dae291a86440c1

Virus Total Link: https://www.virustotal.com/gui/file/b9aa5d4c706d11c1088094f8c31334dc9aad18a7c41b55b875dae291a86440c1

 

File 2

MD5: d0d0a29dd94316d013f2eb655cfb2a17

SHA256: d8cd77e3d87c46207b73d3167ddd4ca529087faa5172af5cd02ca9f306934a67

Virus Total Link: https://www.virustotal.com/gui/file/d8cd77e3d87c46207b73d3167ddd4ca529087faa5172af5cd02ca9f306934a67

 

Attached are two files. 7597966135.zip

[miekiemoes]

Hi,

This is indeed a false positive by our additional machinelearning engine we have implemented.
This will get fixed.

Thanks for reporting!

Additional note... Our engine format and configuration in VirusTotal is different than our consumer and corporate products’ default configuration. In VirusTotal we use a command-line engine with different configuration and detection techniques/heuristics which might detect more than the commercial product. There are also false-positive suppression mechanisms in the commercial product which are not present in the command-line engine in VirusTotal.
This will eventually fix itself in Virustotal as well, as we don't have control over this.