# False Positive Report

**URL:** <https://discuss.elastic.co/t/false-positive-report/311191>\
**Category:** Endpoint Security\
**Created:** [August 2, 2022, 9:20am UTC](https://discuss.elastic.co/t/false-positive-report/311191 "2022-08-02T09:20:09Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![ChristianR](https://avatars.discourse-cdn.com/v4/letter/c/e36b37/32.png) [@ChristianR](https://discuss.elastic.co/u/ChristianR)\
**Post date:** [August 2, 2022, 9:20am UTC](https://discuss.elastic.co/t/false-positive-report/311191/1 "2022-08-02T09:20:09Z")

</div>

Hi, we followed your advice and forwarded a false positive report to [fp\_reports@elastic.co](mailto:fp_reports@elastic.co) but have not received any response. Pls advise:

Filename: mavwin\_8\_35\_0\_9.exe

Hash (SHA256): 3987CB0CCDD1FABB879AF8E59EB847E1042232DE01C6B5C18118B238FE9EB0DF

VirusTotal: [VirusTotal](https://www.virustotal.com/gui/file/3987cb0ccdd1fabb879af8e59eb847e1042232de01c6b5c18118b238fe9eb0df?nocache=1)

Company Name: Actelis Networks

---

<div class="post-metadata">

**Author:** ![mark.dufresne](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mark.dufresne/32/84895_2.png) [@mark.dufresne](https://discuss.elastic.co/u/mark.dufresne)\
**Post date:** [August 12, 2022, 9:02pm UTC](https://discuss.elastic.co/t/false-positive-report/311191/2 "2022-08-12T21:02:42Z")

</div>

Hi Christian - We got the report. We handle them in batches approximately every two weeks. We expect to resolve the issue by mid-week next week. Thanks!

-Mark

---

<div class="post-metadata">

**Author:** ![ChristianR](https://avatars.discourse-cdn.com/v4/letter/c/e36b37/32.png) [@ChristianR](https://discuss.elastic.co/u/ChristianR)\
**Post date:** [August 22, 2022, 8:24am UTC](https://discuss.elastic.co/t/false-positive-report/311191/3 "2022-08-22T08:24:40Z")

</div>

Hello Mark, many thanks for your help. Our application is still identified as malicious but I guess it will take a little more time to be updated.

Many Thanks!

Christian

---

<div class="post-metadata">

**Author:** ![ChristianR](https://avatars.discourse-cdn.com/v4/letter/c/e36b37/32.png) [@ChristianR](https://discuss.elastic.co/u/ChristianR)\
**Post date:** [August 26, 2022, 7:35am UTC](https://discuss.elastic.co/t/false-positive-report/311191/4 "2022-08-26T07:35:11Z")

</div>

Hello Mark, our application is still identified as malicious. When can we expect that this false positive report is fixed?

Many thanks!

Christian

---

<div class="post-metadata">

**Author:** ![mark.dufresne](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mark.dufresne/32/84895_2.png) [@mark.dufresne](https://discuss.elastic.co/u/mark.dufresne)\
**Post date:** [August 29, 2022, 1:45pm UTC](https://discuss.elastic.co/t/false-positive-report/311191/5 "2022-08-29T13:45:15Z")

</div>

Hi Christian

Unfortunately we're bumping in a bug in our Virustotal scanner which is taking longer than expected to deal with.

Our actual Endpoint product does not call the file malicious or block it. The issue is only with the standalone scanner in VT.

Sorry for the delay, we are working on it.

-Mark

---

<div class="post-metadata">

**Author:** ![mark.dufresne](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mark.dufresne/32/84895_2.png) [@mark.dufresne](https://discuss.elastic.co/u/mark.dufresne)\
**Post date:** [August 29, 2022, 10:05pm UTC](https://discuss.elastic.co/t/false-positive-report/311191/6 "2022-08-29T22:05:16Z")

</div>

Hi again Christian

Believe we've taken care of the problem in VT. Thanks again for your patience!

Mark

---

<div class="post-metadata">

**Author:** ![ChristianR](https://avatars.discourse-cdn.com/v4/letter/c/e36b37/32.png) [@ChristianR](https://discuss.elastic.co/u/ChristianR)\
**Post date:** [August 30, 2022, 7:06am UTC](https://discuss.elastic.co/t/false-positive-report/311191/7 "2022-08-30T07:06:42Z")

</div>

Hello Mark,

many thanks, looks all good now.

Many thanks

Christian

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 27, 2022, 7:06am UTC](https://discuss.elastic.co/t/false-positive-report/311191/8 "2022-09-27T07:06:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
