False Positive with Financial Software App Telegram Link or Real?

[glitchinspector]

From a standard Quantower installation the DLL for their Telegram flags as Trojan.PasswordStealer.Discord. It also shows some detections on https://www.hybrid-analysis.com/ but nothing 100% (https://www.hybrid-analysis.com/sample/abfe494951171aeb553e683d4cde6bfcc646ff93500c5af9f62bd0d48c87f339/6384ce2006ec372a67187ed7). Some of them seem to be verifiably false quite obviously however. Also I left a version of this untouched for a few months and no change data whatsoever occurred as far as I could tell which from my understanding isnt especially common with this type of malware if it were actually malicious.

ATT&CK IDs from Hybrid-Analysis: T1106, T1082, T1083, T1056.004, T1012, T1573, T1027.002

Malwarebytes threat report:

Hash: ABFE494951171AEB553E683D4CDE6BFCC646FF93500C5AF9F62BD0D48C87F339

Threat name: Trojan.PasswordStealer.Discord

 

I dont know if this is actually a false positive but I would appreciate anything people could do to determine that or if it is actually malicious with certainty.

TelegramMessenger.zip file_detection_quantower_false_positive_validation.txt

[Emphyrio]

This will be fied in the next update

[glitchinspector]

Ah ok. So is this actually a clean file?

[Porthos]

1 hour ago, glitchinspector said:

Ah ok. So is this actually a clean file?

Yes it is

[glitchinspector]

9 hours ago, Porthos said:

Yes it is

Thank you for the clarification. I like your dog.