psiphon.exe detected as malware. Most likely FP

CIS 10.0.0.6092 keeps detecting psiphon (the internet anti censorship tool) as being malware for some time:

https://s13.postimg.org/482bhwe93/image.png

website for the software: http://psiphon.ca

NOTE: please note that this software appears to be updated frequently (almost daily or once every few days). For this reason, file hashes would not help I think. However, the file is digitally signed:

https://s7.postimg.org/x1ndsfsez/psin.png

I think comodo only pops up when the file is run from USB (but I am not sure if this is the most exact cause, just a probable cause - it may be flagged for being run form USB). But I have also noticed it being flagged as malware even from hard drive.

Database version: 26604

Hello,
Please attach the file here or submit it via the web interface for further analysis.

Best regards,
Andrei Savin

Here it is.

Inside archive you will find:

Type: .exe
Size: 4.7 MB
Bytes: 5006440
Modified: 2017-02-16 21:10:58
Attributes: A
SHA1: 840EED2CE41A58589C0060D32E3BF9E6C1A7FF1B
Directory content: -
% size: 100%

Checked (HEX) 1 element(s), 4.7 MB [5006440 B]

Since the forum upload issued an error, (upload folder is full), I will place a link to the file:

https://files.fm/u/5pqujypm

Hi cocalaur,

This is to inform you that false-positive has been fixed.
You can update to AV database Version <26606> and confirm it.

Best regards
Qiuhui.■■■■

Thank you so much for the quick response.

I will test it later today. Hopefully it won’t detect future updates to the app (when hash value changes)