user38607: I tried to download Bitcoin cash ABC wallet from bitcoincash official site.
If I download zip to my computer and upload it to VirusTotal site, it says 11/62 positives.
If I go to VirusTotal site and enter the zip URL to be scanned it says it is clean.
SHA-256 sum is also different.
Is this normal ? 
Maybe someone else can test ? :/
https://download.bitcoinabc.org/0.17.2/win/bitcoin-abc-0.17.2-win64.zip 
edit: the SHA256 is the same, I initially thought it was different, maybe I compared too many at once, the main issue (warnings) remains.



user38618: Yes, that's very usual and expected. 
It is not surprising to have Bitcoin-related code in Bitcoin Core(-forks), but the malware analyzers don't understand the purpose of Bitcoin code.
Here's a real software with a Bitcoin miner (utorrent 3.4.2): https://www.virustotal.com/#/file/0e7e8526e8c4ab3c3dc938b1bb042bda07f464390a919c7f3f30caadec156549/detection
The same happens for Bitcoin Core:


38607: <p>I tried to download Bitcoin cash ABC wallet from bitcoincash official site.</p>

<p>If I download zip to my computer and upload it to VirusTotal site, it says 11/62 positives.
If I go to VirusTotal site and enter the zip URL to be scanned it says it is clean.
<del>SHA-256 sum is also different.</del></p>

<p>Is this normal ? 
Maybe someone else can test ? :/</p>

<p><a href="https://download.bitcoinabc.org/0.17.2/win/bitcoin-abc-0.17.2-win64.zip" rel="nofollow noreferrer">https://download.bitcoinabc.org/0.17.2/win/bitcoin-abc-0.17.2-win64.zip</a> </p>

<p>edit: the SHA256 is the same, I initially thought it was different, maybe I compared too many at once, the main issue (warnings) remains.</p>

<p><a href="https://i.stack.imgur.com/M2JA4.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/M2JA4.png" alt="clean, from url"></a>
<a href="https://i.stack.imgur.com/XcezL.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/XcezL.png" alt="not clean, from downloaded zip"></a></p>
 38618: <p>Yes, that's very usual and expected. </p>

<p>It is not surprising to have Bitcoin-related code in Bitcoin Core(-forks), but the malware analyzers don't understand the purpose of Bitcoin code.</p>

<p>Here's a real software with a Bitcoin miner (utorrent 3.4.2): <a href="https://www.virustotal.com/#/file/0e7e8526e8c4ab3c3dc938b1bb042bda07f464390a919c7f3f30caadec156549/detection" rel="nofollow noreferrer">https://www.virustotal.com/#/file/0e7e8526e8c4ab3c3dc938b1bb042bda07f464390a919c7f3f30caadec156549/detection</a></p>

<p>The same happens for Bitcoin Core:
<img src="https://i.stack.imgur.com/38z2Z.png" alt=""></p>
