False positive, Malware.Heuristic.1001 - Flash Player 10.1.102.64 + SWF

[dsc]

This file is detected in virustotal as Malware.Heuristic.1001, the file is question is Flash Player 10.1.102.64 with a embedded flash file (swf)
It appears like it started being flagged recently, though i don't have a exact time-frame - possibly in the last month/weeks.

https://www.virustotal.com/gui/file/7e2387ecfbfaecacbdcd0ca6f6664eb3e1b1fefbf9209521a75ee9fbc437cb1f/detection

Projector.zip

[dsc]

I forgot to mention, the above is the virustotal report for the zip, but the exe contained is also detected, https://www.virustotal.com/gui/file/d21a8a1b36f7a6a5d52dc33b59d9fe201997260919e9da9ab08713ee8d41669e

[cli]

Thanks for reporting, this will be fixed in 10 minutes.

[dsc]

It was fixed for a few days, but it appears like it is now again triggering a false positive.

[cli]

Can you attach new detection log and detected file. Thanks.

[dsc]

6 hours ago, cli said:

Can you attach new detection log and detected file. Thanks.

zip: https://www.virustotal.com/gui/file/7e2387ecfbfaecacbdcd0ca6f6664eb3e1b1fefbf9209521a75ee9fbc437cb1f
exe: https://www.virustotal.com/gui/file/d21a8a1b36f7a6a5d52dc33b59d9fe201997260919e9da9ab08713ee8d41669e
Both show up as: Malware.Heuristic.1001

Projector.zip

[dsc]

Oh, i guess i did not make it clear previously; but nothing changed with the file, it's identical to the OP.

[Porthos]

1 hour ago, dsc said:

Oh, i guess i did not make it clear previously; but nothing changed with the file, it's identical to the OP.

The attached file is not detected by the consumer or commercial versions of Malwarebytes.

The engine format and configuration in VirusTotal is different than the consumer and corporate products’ default configuration. In VirusTotal Malwarebytes uses a command-line engine with different configuration and detection techniques/heuristics which might detect more than the commercial product. There are also false-positive suppression mechanisms in the commercial product which are not present in the command-line engine in VirusTotal.

This will eventually fix itself in Virustotal as well, as Malwarebytes has no control over this. Virus Total is having trouble reaching Malwarebytes cloud.

[dsc]

On 9/19/2022 at 7:43 AM, Porthos said:

The attached file is not detected by the consumer or commercial versions of Malwarebytes.

 

The engine format and configuration in VirusTotal is different than the consumer and corporate products’ default configuration. In VirusTotal Malwarebytes uses a command-line engine with different configuration and detection techniques/heuristics which might detect more than the commercial product. There are also false-positive suppression mechanisms in the commercial product which are not present in the command-line engine in VirusTotal.

 

This will eventually fix itself in Virustotal as well, as Malwarebytes has no control over this. Virus Total is having trouble reaching Malwarebytes cloud.

Is there any kind of ETA on when this would eventually resolve itself, or perhaps further steps that can be taken?, as it stands virustotal blames malware bytes and malware bytes blames virustotal for this issue and there does not appear to be any way to resolve this.

[miekiemoes]

Hi,

There is no eta for this for Virustotal and the teams are working on this. This file is not detected for anyone locally.