Advice Request Is Rusroute malicious or are they false positives?

[eonline]

VirusTotal

VirusTotal

www.virustotal.com

Hello everyone, I was about to install RusRoute firewall and I happened to upload it to virustotal and I got three detections that may be false positives but I was struck by the tab that I add the link, I'm not a specialist in this most likely it is safe to use. But I leave the question here to see if someone can clarify this for me. Thank you very much.

 

[Kongo]

VirusTotal

VirusTotal

www.virustotal.com

Hello everyone, I was about to install RusRoute firewall and I happened to upload it to virustotal and I got three detections that may be false positives but I was struck by the tab that I add the link, I'm not a specialist in this most likely it is safe to use. But I leave the question here to see if someone can clarify this for me. Thank you very much.

All of the detections are AI/ML based which are prone to false positives. But I'll let a specialist answer your question.

 

[eonline]

Maybe @struppigel can clarify this for us. Thank you very much in advance.

 

[ForgottenSeer 95367]

VirusTotal

VirusTotal

www.virustotal.com

Hello everyone, I was about to install RusRoute firewall and I happened to upload it to virustotal and I got three detections that may be false positives but I was struck by the tab that I add the link, I'm not a specialist in this most likely it is safe to use. But I leave the question here to see if someone can clarify this for me. Thank you very much.

1. Depends upon the engines that detected (detections by none of the top ones - e.g. Bitdefender, Kaspersky, Norton, etc - likely a false positive)
2. Depends upon the number of detections (customarily, anything less than 5 engines is considered a false positive)

AI\ML still needs human inspection as is the case here. It is a tool like any other and in some ways even after all these years it does not deliver on the promises of the AI\ML revolution.

 

[struppigel]

Hello. I do not see any red flags here to suspect that this is malware. A small amount of generic false positives on VT is normal, especially for security software.
(I did not analyse this file, it takes ages for clean files, I checked VT intelligence only)

 

[eonline]

Thank you.

Topic solved.