False positive hit ... or not ? - Solved

[Brian Korfitz Miehs]

Hi

I'm working with a costumers Sourcefire and ran into this file being blocked by the system.

AAFlash_setup.exe

https://www.virustotal.com/en/file/8e13f9c500757b2822c8c36a5ee32b820ff274e8cbbc9976f0cce096d7e7dd18/analysis/

I can't seem to find any reason anywhere as to why the file is being blocked other that the Sourcefire dosn't like it.

So does it contain malware or is it a false positive ?

And where do i find this infomation because my almighty google didn't help me.

Picture with the hit is attached

//Brian

[Philip D'Ath]

The screenshot you supplied says it is malware ...

[Brian Korfitz Miehs]

I can read and that is really not my problem 😉

My problem is 56 other virus scanners say that this file is clean and the only Sourcefire says it's infected and dosn't show in detail with what.

[Brian Korfitz Miehs]

I found someone with access to threatgrid and the file was just slightly bad and with no virus.

[Dennis Perto · Accepted solution]

Then it must be a false positive.