Proton Bus Simulator 32-bit false positive as MachineLearning/Anomalous.100

[MarcosElias]

Hello! It seems that your software is flagging my game as malicious, but it is a false positive. Could you please verify that manually? I don't have Malwarebytes on my computer, but it is being flagged once I upload the file on VirusTotal:

https://www.virustotal.com/gui/file/a19494a37fec5dca5b073296c957febd54bc3f48e07b06b0e00bd99f02478b21?nocache=1

This is for v297 Windows 32-bit, available on link below.

There are many versions, generally 32-bit are being flagged as seen on VirusTotal. It is an Unity game. The main executable is shared between thousands or millions of games since it is generated by Unity, just with a different logo and name (the game content like exclusive models and assets are inside its folders). So probably this is what causes the false positive: probably the antivirus tought it was a modified version of another software since the smaller executable is very popular.

Here are some experimental recent versions (v297 32-bit was flagged, the download link is at the bottom of the page):
http://www.protonbus.com.br/arvores/ 

Here are the stable versions (the highest number is the most recent one):
https://pbsu.busmods.com/static/
https://pbsr.busmods.com/static/

Proton Bus is an indie bus simulator created in 2017 for Android and PC. We are almost releasing it on Steam, but due to the development steps still needed we only post on our website. Any person can very easily download and verify that it does not contain any malware by checking the files and folders that it access. Being flagged is very annoying for our curstomers and reputation :(

If you need the logs I may install your software on some machine to test. I am not sending it right here because the detection is shown on Virustotal. 

[Porthos]

Here is a log of the single detection.

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 7/2/22
Scan Time: 8:17 PM
Log File: ec5bdd2e-fa6d-11ec-9d8a-4439c43a4aa3.json

-Software Information-
Version: 4.5.10.200
Components Version: 1.0.1709
Update Package Version: 1.0.56713
License: Premium

-System Information-
OS: Windows 10 (Build 19044.1766)
CPU: x64
File System: NTFS
 

-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 1233
Threats Detected: 1
Threats Quarantined: 0
Time Elapsed: 0 min, 15 sec

-Scan Options-
Memory: Disabled
Startup: Disabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
MachineLearning/Anomalous.100%, C:\MALWARE TEST NO WD\PROTONCORE FASE 3.1 TESTE WINDOWS 32 - V297 - 2022-07-02\PROTONCORE WINDOWS 32 - MONO\PROTON BUS SIMULATOR.EXE, No Action By User, 0, 392687, 1.0.56713, , shuriken, , 482883EE17C2DD77B4D13FC1A008FB3E, A19494A37FEC5DCA5B073296C957FEBD54BC3F48E07B06B0E00BD99F02478B21

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

Proton Bus Simulator.zip

Edited July 3, 2022 by Porthos

[shadowwar]

This was automatically learned and whitelisted earlier today.