Sandboxie 5.24 is flagged by one Engine in VirusTotal

If it's not about a problem in the program
Post Reply
Inbox
Posts: 54
Joined: Tue Jun 16, 2015 2:11 am

Sandboxie 5.24 is flagged by one Engine in VirusTotal

Post by Inbox » Sat Mar 17, 2018 11:49 am

"Baidu Win32.Trojan.WisdomEyes.16070401.950"

You should probably contact Baidu and get this false positive resolved with them so nothing is flagged.

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2981
Joined: Mon Nov 07, 2016 3:10 pm

Re: Sandboxie 5.24 is flagged by one Engine in VirusTotal

Post by Barb@Invincea » Mon Mar 19, 2018 12:51 pm

Hello Inbox,

Thanks for the info. We try to reach out to these companies but most of the times, either the captcha doesn't work (like for Baidu), or they close the requests.

To ensure you have downloaded a valid file, please see this:
https://www.sandboxie.com/AllVersions

Regards,
Barb.-

Inbox
Posts: 54
Joined: Tue Jun 16, 2015 2:11 am

Re: Sandboxie 5.24 is flagged by one Engine in VirusTotal

Post by Inbox » Wed Mar 21, 2018 6:55 pm

You should be using SHA256 or SHA512 for file hash authentication, not SHA1 or MD5.

MD5 is extremely weak and can be forged with an investment of about $40K (probably less now as I read that a few years ago).

Google warned several years ago that SHA1 is weak as well, and could probably be compromised by a large corporation (such as Google themselves) or a state actor:
https://konklone.com/post/why-google-is ... kill-sha-1
http://www.zdnet.com/article/google-chr ... s-in-2016/
https://security.googleblog.com/2014/09 ... sha-1.html

Of course any old hash will likely protect you from random errors in the download due to equipment or software problems, but as far as authenticating they're genuine against an adversary - yeah you need to be using SHA256 or SHA512.

Post Reply

Who is online

Users browsing this forum: No registered users and 3 guests