lascetic Posted March 15, 2017 Both files are detected as PUP.InstallCore/Variant. They are both windows media player add-ons. I have used SAS inbuilt function to report them, too. https://www.virustotal.com/en/file/0427d92a2dd05aa3bb0bd0d6e7611e2ed1e2454dedb7f15c8556705f3cfc4ea3/analysis/1489581960/ https://www.virustotal.com/en/file/f9fa370e0b9b95442544fe485bed37a9538fb85c1938ec6c5f1422087aead35b/analysis/1489582144/ Share this post Link to post Share on other sites
SAS Malware Research Posted March 15, 2017 Hello lascetic, Thank you for bringing this to our attention. I have adjusted the definition database and these files should no longer be detected as of database version 13474, which will be released shortly. Please let me know if you have any other questions or concerns, Gabe Share this post Link to post Share on other sites