Reply to thread

Message

<blockquote data-quote="Deleted member 65228" data-source="post: 724130">If the newest builds are not flagged at VirusTotal or Metadefender, they may still be flagged by AV products because the engines on these cloud services aren&#039;t always accurate representations of the engines incorporated into the actual vendors products.I would not worry about it, you may as well spend the time focusing on making as good software as you can. Take precautions to keep everything ethical and wanted over the opposite and you&#039;ll be fine.As for behavioral analysis services which are web-based, they are bound to have inaccurate scoring. Most safe genuine binaries I upload for testing come back with a malicious score. For example, one sandbox service in-particular flags the same things across all Win32 binaries for things like anti-debugging just because Kernel32.dll/KernelBase.dll does internal checks for different things, or something along those lines - even though it had nothing to do with the authors code for the sample. Such is mainly only useful for analysts actually checking the logs.</blockquote>

[QUOTE="Deleted member 65228, post: 724130"] If the newest builds are not flagged at VirusTotal or Metadefender, they may still be flagged by AV products because the engines on these cloud services aren't always accurate representations of the engines incorporated into the actual vendors products. I would not worry about it, you may as well spend the time focusing on making as good software as you can. Take precautions to keep everything ethical and wanted over the opposite and you'll be fine. As for behavioral analysis services which are web-based, they are bound to have inaccurate scoring. Most safe genuine binaries I upload for testing come back with a malicious score. For example, one sandbox service in-particular flags the same things across all Win32 binaries for things like anti-debugging just because Kernel32.dll/KernelBase.dll does internal checks for different things, or something along those lines - even though it had nothing to do with the authors code for the sample. Such is mainly only useful for analysts actually checking the logs. [/QUOTE]

Verification