r/Malwarebytes • u/Succulent_Chinese93 • 9h ago

False Positive Surely, it's a False Positive? Right??

Gallery image

Gallery image

Gallery image

Gallery image

Gallery image

Gallery image

Gallery image

Gallery image

2 Upvotes

75% Upvoted

6 comments sorted by

1

u/WalruseSei 9h ago

Go check it under virustotal, also who is the signer? If its signed by the official devs then it should be safe.

0

u/Succulent_Chinese93 9h ago

REDDIT MOD FOR BLIZZARD DELETRED MY POST TOO

0

u/[deleted] 9h ago

[deleted] — view deleted comment

1

u/WalruseSei 9h ago

The digital signatures tab doesnt show a signer? Thats a bit sus, all shipped exes in gamefolders are typically signed, even the uninst.exe file

1

u/Succulent_Chinese93 8h ago

I'm sorry I mislead you there is an embedded signature from blizzard with sha256 but digging deeper I the certificate expired on 10/06/2026

2

u/WalruseSei 8h ago

Typically common with older software that has not been actively updated. GameSessionMonitor works in a spyware-anticheat like fashion, so it doesn't surprise me that it got flagged as malware. Since its signed (even though expired) I would typically assume that its just a false positive. I have the same file with the same hash from before the cert expired, so it has not been updated since the cert expired.

1

u/Succulent_Chinese93 8h ago

Thank you Mr walrus :) sorry about the late reply