# False Positive Report – EXO Panda Installer (Elastic Detection)

**URL:** <https://discuss.elastic.co/t/false-positive-report-exo-panda-installer-elastic-detection/386082>\
**Category:** Endpoint Security\
**Created:** [April 29, 2026, 1:31am UTC](https://discuss.elastic.co/t/false-positive-report-exo-panda-installer-elastic-detection/386082 "2026-04-29T01:31:20Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jude\_Tallent](https://avatars.discourse-cdn.com/v4/letter/j/7ba0ec/32.png) [@Jude\_Tallent](https://discuss.elastic.co/u/Jude_Tallent)\
**Post date:** [April 29, 2026, 1:31am UTC](https://discuss.elastic.co/t/false-positive-report-exo-panda-installer-elastic-detection/386082/1 "2026-04-29T01:31:20Z")

</div>

Hello Elastic Team,

I'm the owner of EXO Panda ([exopanda.com](http://exopanda.com)), a legitimate macro and tutorial hub for Roblox players. I'm reaching out regarding a false positive detection by Elastic's engine on VirusTotal for our installer file.

Details:

- Product: EXO Panda Installer
- SHA-256: d4cefaa3c60112c0e57ff347659576f395fcec75cf69896f061bc208c7f8e1e6
- VirusTotal link: [VirusTotal](https://www.virustotal.com/gui/file/d4cefaa3c60112c0e57ff347659576f395fcec75cf69896f061bc208c7f8e1e6)

This file is our official installer distributed exclusively through [exopanda.com](http://exopanda.com). It does not contain any malicious code, phishing content, or harmful functionality. The detection appears to be a false positive from automated scanning.

Could someone from the Elastic Security team please:

1. Manually review this detection and reclassify if appropriate?
2. Advise on whether publisher or certificate whitelisting is available to prevent repeat flags on future versions?

We take software safety seriously and want to resolve this professionally. Thank you for your time.

— Jude  
Owner, EXO Panda

> **[EXO Panda | #1 Free Roblox Macro Hub](https://exopanda.com/)**
>
> Best free Roblox macro. Auto farm any game. Safe & trusted by 100k+ users.

---

<div class="post-metadata">

**Author:** ![lesio](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lesio/32/89323_2.png) [@lesio](https://discuss.elastic.co/u/lesio)\
**Post date:** [April 29, 2026, 9:29pm UTC](https://discuss.elastic.co/t/false-positive-report-exo-panda-installer-elastic-detection/386082/2 "2026-04-29T21:29:52Z")

</div>

We have an official false positive submission channel

> [@Submitting False Positives](https://discuss.elastic.co/t/submitting-false-positives/232322):
>
> We welcome your False Positive (FP) report for Elastic’s malware detection engine. These FP reports help us improve our security products. Please note that as of June 5, 2024 we have updated our False Positive review process. Due to a high volume of spam and/or submissions not adhering to our guidelines, we will no longer accept email submissions. Please submit your False Positives via the [Elastic False Positive Submission Form](https://forms.gle/LSYYPu9iS4Ex5R8p8). Submissions received after June 5, 2024 via email will no longer …

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 27, 2026, 9:30pm UTC](https://discuss.elastic.co/t/false-positive-report-exo-panda-installer-elastic-detection/386082/3 "2026-05-27T21:30:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.