# Can you please confirm this is false positive and update it in virus total engine?

**URL:** <https://discuss.elastic.co/t/can-you-please-confirm-this-is-false-positive-and-update-it-in-virus-total-engine/229450>\
**Category:** Endpoint Security\
**Created:** [April 23, 2020, 11:16am UTC](https://discuss.elastic.co/t/can-you-please-confirm-this-is-false-positive-and-update-it-in-virus-total-engine/229450 "2020-04-23T11:16:20Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![hamza.g](https://avatars.discourse-cdn.com/v4/letter/h/5f9b8f/32.png) [@hamza.g](https://discuss.elastic.co/u/hamza.g)\
**Post date:** [April 23, 2020, 11:16am UTC](https://discuss.elastic.co/t/can-you-please-confirm-this-is-false-positive-and-update-it-in-virus-total-engine/229450/1 "2020-04-23T11:16:20Z")

</div>

Hi,  
Could you please check this file, as I think it is a false detection. I've send mails to [info@endgame.com](mailto:info@endgame.com) but i didn't get any response  
This file has been falsely detected as malware  
link for the issue :  
[https://www.virustotal.com/gui/file/7344896fa56313fbd24be18580c8319f4b890265196894da72f7d7b495d530f9/detection](https://www.virustotal.com/gui/file/7344896fa56313fbd24be18580c8319f4b890265196894da72f7d7b495d530f9/detection)

File to Analyse : Wibu.exe

MD5: 93cad76f71f84c56eab63d06ec4162b2

SHA-1: 424da07a71ac32ddf127c779144628bda7bdd0fc

SHA-256: 7344896fa56313fbd24be18580c8319f4b890265196894da72f7d7b495d530f9

---

<div class="post-metadata">

**Author:** ![mark.dufresne](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mark.dufresne/32/84895_2.png) [@mark.dufresne](https://discuss.elastic.co/u/mark.dufresne)\
**Post date:** [April 23, 2020, 3:52pm UTC](https://discuss.elastic.co/t/can-you-please-confirm-this-is-false-positive-and-update-it-in-virus-total-engine/229450/2 "2020-04-23T15:52:02Z")

</div>

Hi Hamza - Thank you for the note. This appears to be a FP and we'll handle it in an upcoming update.

-Mark

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 21, 2020, 3:52pm UTC](https://discuss.elastic.co/t/can-you-please-confirm-this-is-false-positive-and-update-it-in-virus-total-engine/229450/3 "2020-05-21T15:52:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.