Virustotal Trapmine suspicious.low.ml.score

From yesterday, when I scan my exe file that written and built by myself on Virustotal, I get this

Trapmine

suspicious.low.ml.score

The full result can be found here

It's very simple C# app, should I worry about anything?

3 Answers

I suspect the low ML score is a confidence score, not an actual detection. Basically if whatever system has not seen enough samples it marks it as suspicious by default, even if no signature or heuristics indicate malware.

No, just ignore it. Had the same issues too with some of my tools. That is a false positive.

I guess you know at best, what you codes does.

I checked The link of OP on March 14, 2019 and I found the file is clean I re-evaluated it, and it's clean 0/69 pass 69 engine including Trapmine

The summary information

 No engines detected this file SHA-256 c2c22c7d4769104982ce9dcfc70819ec1ee6fee0ad2a0d428c5e8b2b077b518d File name TeachEngine.exe File size 419.5 KB Last analysis 2019-03-14 07:55:31 UTC Community score +7

Every Trapmine ThreatScore results using machine learning have four different outcomes which are:

  • clean
  • suspicious.low.ml.score
  • malicious.moderate.ml.score
  • malicious.high.ml.score

For more details review TRAPMINE Integrates Machine Learning Engine into VirusTota

Ignore it, It's not a real malware, only an evaluation score.

Your Answer

Sign up or log in

Sign up using Google Sign up using Facebook Sign up using Email and Password

Post as a guest

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

You Might Also Like