False Positive: antartidecoind.exe detected as Trojan.CoinMiner on VirusTotal

AntartideCoin

Hello Rising Security Team,

I would like to report a suspected false positive affecting AntartideCoin Core.

File name:
antartidecoind.exe

SHA-256:
a76ccb259ef552fe387e2d6ac81ba5683ec37065652e9aab55b097431c199405

Rising detection on VirusTotal:
Trojan.CoinMiner!1.14012 (CLASSIC)

VirusTotal result:
1/70 security vendors detected the file.
Rising is currently the only vendor reporting this detection in the VirusTotal analysis.

AntartideCoin Core is legitimate cryptocurrency node software. The daemon intentionally implements Proof-of-Work and Scrypt AuxPoW merged-mining functionality. It provides legitimate blockchain RPC functions including getblocktemplate, createauxblock and submitauxblock.

These mining-related functions are part of the blockchain protocol and do not represent hidden or unauthorized cryptocurrency mining.

We performed additional checks on this exact executable. A local ClamAV scan reported no infection. We also performed static inspection of the executable and found no packer and no indicators such as CreateRemoteThread, WriteProcessMemory, VirtualAllocEx, PowerShell or download-and-execute functionality.

Please analyze this file and, if confirmed to be a false positive, update the Rising detection so that the file is no longer classified as Trojan.CoinMiner.

Thank you.

AntartideCoin Project