False positive - SCR Calculator (App in Windows AppStore)

[programmer1]

Hello,

I am the developer for the new App "SCR Calculator" (https://www.microsoft.com/store/apps/9P59CMDTKFXB).   I used code obfuscation to protect the source code; and I believe that's why your software detects the App as "Machine Learning/Anomalous 100%" every time and quaranteen it.

The App has been vetted by Microsoft and is in the store, so you can be convinced it is Virus free. Could you please put it onto your whitelist?

Many thanks,

 

 

 

[cli]

Can you attach logs and the files detected? Thanks.

[programmer1]

Thanks Cli, Please find attached.

The exe file which caused the false alarm is in the zip.

Not sure if the log file is of any use, because it did not detect any threat in the scan.

SCRCalculator.zip scan report malwarebytes.txt

[cli]

Thanks for reporting, this will be fixed in the next update.

[Porthos]

3 hours ago, programmer1 said:

The App has been vetted by Microsoft and is in the store

FYI. Microsoft has issues with it too

https://www.virustotal.com/gui/file/3d3052d9867ad127efe845aa2f217c03f7c00645c482d50ef8ac96bf149d53f2/details

Edited April 6, 2023 by Porthos

[programmer1]

OK thanks Porthos. I will investigate further. This 'virustotal''s conclusion might not be the same as Microsoft itself, I suppose? Because the app is in the Microsoft store already.

[Porthos]

2 hours ago, programmer1 said:

This 'virustotal''s conclusion might not be the same as Microsoft itself

The screenshot is Windows Defender detecting your app and deleting it.

My post is just a heads-up to you who detects your app. You are free to ignore the results if you wish.

[programmer1]

Porthos: Thanks again! I believe another point is that there is a difference between a signed and unsigned app:

- The .exe file that I attached to this forum is my unsigned dev version of the app; and it causes such an error.

- Once I submitted it to the Microsoft AppStore and sign it, then the Microsoft signed version automatically passes those tests, I suppose?

[Porthos]

You are correct. The dev version never makes it into the wild. And being unsigned ver will trip many vendor's detections including Malwarebytes AI. Which has been fixed.

The signed store version is different.