False Positive Report: Android APK (Flutter App)

[bahisec]

Hello Fortinet Community,

I am reporting a false positive detection for my legitimate Android APK file built with Flutter. File Name: AppleTrack.apk SHA-256 Hash: 7607192fcfcdd64cdef7107ceeb3000d8f4a3dc7cd4b530cfc8a36e951ef7663 VirusTotal Report Link: https://www.virustotal.com/gui/file/7607192fcfcdd64cdef7107ceeb3000d8f4a3dc7cd4b530cfc8a36e951ef7663...

APK : https://drive.google.com/file/d/17JviLMrjUim3dza6Mv94dqCzJTQmSp9a/view?usp=sharing

Detection: FortinetAndroid/Generic.S.7E8092!tr (1/65 on VT, all others clean).

This is a safe Flutter app for game tracking (Apple of Fortune tool). It uses standard packages like video_player, url_launcher, and shared_preferences. No malware, network calls are only to Google/YouTube for tutorials. The obfuscation is from standard Flutter build (--obfuscate flag). Sandbox shows normal behaviors (DNS to googlesource.com, flutter.dev, etc.).

Please review and whitelist/remove this false positive from your database. I can provide the full source code if needed.

Attached: The APK file (AppleTrack.apk) for analysis.

Thank you for your help! Best regards,

[Yurisk]

Hi, have you scanned it also on the Fortinet site https://fortiguard.fortinet.com/faq/onlinescanner ?

Anyway, to dispute software categorization Fortinet recommend contacting them, at https://www.fortiguard.com/contactus -> Dispute a software classification.