CG: False Positive Submission (Malware.Heuristic.1003)

[CGS]

Hello!
We have checked our software on virustotal and got false positive detections (Malware.Heuristic.1003).
Please check the protected zip file with sample:

https://cloud.cgames.app/s/cJRMpmQBmFHTwpA

 

Password for the zip file is “infected” (without quotes).
The archive also contains link to virustotal reports.

magic_setup.exe:
MD5
9c0e556a150c3e274e728b063e3d8529
SHA-1
8b7ef5fc0a8ea53b5b12fecf2369e01eafec5947
SHA-256
2b90b3af18cff5047d2feba7bd402fe099ee2294eeca47181f892cc0d2a3c0b8

khelo_setup.exe:
MD5
fe6bb6743dc2edd89916e6169c64586f
SHA-1
dea800c30bfac73d1e80cb0a44818368a951c751
SHA-256
b1a99e7970d8a7227c0d81478c04b3105e29b1c4d46d12913b57d33a2b960eaf

wager_setup.exe:
MD5
d80774cf1945f9ab114833455b05c5a8
SHA-1
5071c86b389c0c3f0c6105e8bb108a48acaac28e
SHA-256
534ce8fc25a2b0ce7bb0dee0b236dc92176e0f4ed4681905919e3c283cc87df0

lpc_setup.exe:
MD5
a3c2bd0733f53142dc4d5c97a93fdac6
SHA-1
80b81f398ae14cfe7adb7d1e86c82ea8ca740e9c
SHA-256
21da26e4d4a6aa92d82cc570d60ab51603a4a4928c442b180e7bcb510c308dbc

Thank you!

 

 

Edited January 16, 2023 by AdvancedSetup
Corrected font issue

[cli]

Thanks for reporting. I scanned the files and they are not detected locally so your customers will not see the detection. 

Our engine format and configuration in VirusTotal is different than our products' default configuration. In VirusTotal we use a command-line engine with more aggressive detection techniques and heuristics which might detect more than the commercial product. This is the norm with most if not all other antivirus vendors in VirusTotal.

For more information, please read  VirusTotal-only detections, not detected in Desktop product.

[screen317]

Hello again,

It appears the VirusTotal detections are no longer present. Please let us know if you encounter any further issues.

All very best,