NEWCALCRUISING.exe and VANUATUCRUISING.exe False Positives

[richardhc]

I received a MachineLearning/Anomalous.100% for two programs   I created myself and know it is 100% NOT malware. This is a false positive. The files are NEWCALCRUISING.exe and VANUATUCRUISING.exe (attached as zip files). Both files were built with Adobe Flash and the exe files are protected from pirates with Software Passport and run with a library of sub-files for sailing and navigating in New Caledonia and Vanuatu. See https://cruising-newcaledonia.com and https://cruising-vanuatu.com. These guides have been widely used by thousands of sailors for more than 20 years and are 100% safe. Please correct this false positive as we depend on sales for buying our groceries. 

The same software was used to develop our travel guides but these are not being tagged. The only difference is that the cruising guide exe files are wrapped with Software Passport to protect them from piracy. They have the be activated and after activation can only be used on the one computer. But the files being tagged as malware have already been activated on the computer for several years so it was not the process of activation that triggered the malware alert. It might have been the software checking the computer hardware details to be sure it was on the same computer. 
Here is the Malwarebytes log. 
 

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 4/17/24
Scan Time: 6:43 AM
Log File: 9d945378-fc29-11ee-baad-64bc58688fca.json

-Software Information-
Version: 4.6.12.323
Components Version: 1.0.2309
Update Package Version: 1.0.83525
License: Premium

-System Information-
OS: Windows 11 (Build 22000.1936)
CPU: x64
File System: NTFS
User: System

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Scheduler
Result: Completed
Objects Scanned: 362687
Threats Detected: 4
Threats Quarantined: 0
Time Elapsed: 3 min, 36 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 4
MachineLearning/Anomalous.100%, C:\USERS\FEDDIE\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\User Pinned\TaskBar\Cruising Vanuatu.lnk, No Action By User, 0, 392687, , , , , EA6E3EA725A04BD40573108C3B510195, 91CEECDA2300FB1306B06123221EF598C1121D61F77FFC452BCD8CFBA218C853
MachineLearning/Anomalous.100%, C:\PROGRAM FILES (X86)\CRUISING VANUATU\VANUATUCRUISING.EXE, No Action By User, 0, 392687, 1.0.83525, , shuriken, , 7B9F5A5A252834231A76A5577A35F04E, 678DDFBAD5F8A3A4746BE2D5B6DB38BC4BC3A73F611D689D41B45679E39D310B
MachineLearning/Anomalous.100%, C:\USERS\FEDDIE\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\User Pinned\TaskBar\Cruising New Caledonia.lnk, No Action By User, 0, 392687, , , , , F39E19BAA17EE197741686F98D7CD964, 4F314C5DEC3DE21E3E250BC4CC89B3E7BA055A1430E7709056EC908EC7037B90
MachineLearning/Anomalous.100%, C:\PROGRAM FILES (X86)\CRUISING NEW CALEDONIA\NEWCALCRUISING.EXE, No Action By User, 0, 392687, 1.0.83525, , shuriken, , F3B6732764F9E9BEDAD4FA9BA49ED9B9, B72C460F3821EBF78B9E63DB68018C02B2DEDABC0275E7DA6C2B6BA6A1855BDF

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

NEWCALCRUISING.zip

Edited April 17 by richardhc
change title add malwarebytes detection log

[cli]

Thanks for reporting, this will be fixed in 10 minutes.

[richardhc]

28 minutes ago, cli said:

Thanks for reporting, this will be fixed in 10 minutes.

Thank  you so much Cli. I recommend Malwarebytes to all my customers as the very best. I'd hate to have to tell them to whitelist my own cruising guides. The warning notice "MachineLearning/Anomalous.100%" would really scare anyone - it even scared me!

[cli]

🙂