Malware flag for components/test/data/device_signals/empty.exe in git

[Niranjan Rao]

Greetings,

Malware scanner on my machine flagged empty.exe as a potential malware threat. While security department accepted my explanation that file came with chromium source code from it's own git repository and should be safe, they are not exactly happy that it has such a high (bad) reputation score. This is the directory where the file shows up - https://github.com/chromium/chromium/tree/main/components/test/data/device_signals.

Here is a link virustotal that shows the reputation of the file - https://www.virustotal.com/gui/file/e08b26dda78b6dd3904048e82e21b6519788f8cdd2cba7d9ce8db430c71bedc5. It seems like lot of tools are flagging this file.

Is there any explanation I can provide to security department

Regards,

Niranjan

--
Niranjan Rao | Sr.Architect
Paymentus
Paymentus Corporation The Real-Time Bill Payment Company^TM

860 Hillview Court Suite 220 Milpitas CA 95035
www.paymentus.com

[Joe Mason]

I recommend sending this to securi...@chromium.org. They'll be able to give a more definitive answer for your security department.

--
--
Chromium Developers mailing list: chromi...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-dev
---
You received this message because you are subscribed to the Google Groups "Chromium-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-dev...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-dev/13612b62-6813-c2e2-d713-6865264fba9b%40paymentus.com.

[Avi Drissman]

A correction: email secu...@chromium.org. security-dev is an internal list and you can't access it.

Avi

To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-dev/CAH%3DT95Srmr3aO%2BEhmMDkAptH2vkmQvuOY38jq8W2Qr1LTF8B7g%40mail.gmail.com.