Unable to Submit False Positive Report for FsHud.exe – Win64:Evo-gen [Trj]

[andya1lan]

Hello Norton Community,

Norton is currently blocking the latest version of FsHud.exe from https://www.fshud.com/ and detecting it as:

Win64:Evo-gen [Trj]

I have tried several times to submit a false positive report through the official submission page:

https://submissions.norton.com/reportfalsepositive

However, the form cannot be submitted and always returns this error:

The form cannot be sent.
An internal error occurred while sending the form.
Please try to send the form again later.

Since the submission portal is not working, could the community help contact Norton to investigate FsHud.exe and correct the detection if it is confirmed to be a false positive?

FsHud is a payware for third-party ATC simulation on Microsoft Flight Simulator platform. The FsHud developer has stated that the application is packaged and encrypted to protect its code and intellectual property, which may be triggering the heuristic detection.

Detection details:

• File: FsHud.exe

• Detection: Win64:Evo-gen [Trj]

• Norton reference shown in the alert: 6d48be91fbdc

Files link: Gofile - Cloud Storage Made Simple

Thank you.

BR,

Andy

[SoulAsylum]

@andya1lan

FsHud.exe

@andya1lan This software utilizes background injection as its interface and adds a Windows registry entry for auto-start that is more likely than not triggering this.

AI Overview

FSHud is a legitimate Air Traffic Control add-on for Microsoft Flight Simulator, but it can trigger false positive alerts from antivirus software. The program uses background process injection (to interface with the simulator) and adds itself to the Windows registry to start automatically, which security tools often flag as potentially unauthorized behavior. [1, [2]

(MalwareBazaar | Checking your browser), 3, 4]

Since submitting a copy of this file for a second opinion has a cost attached my suggestion is for you to submit the file to MetaDefender for their results. Please post back what those results are if you’d be so kind.

Online Malware Analysis for Files, URLs, IPs & Hashes | MetaDefender Cloud

After the MetaDefender results and IF, you are confident this doesn’t present a risk to you add the file to the Norton exclusions for scan and detections. Lets see what results you get.

SA

[andya1lan]

Hi SA,

Thanks for quick response! Kindly check the metadefender report: Scan Results | MetaDefender Cloud It reports no threat but blocked by sandbox.

I have also uploaded the installer and main program to gofile: Gofile - Cloud Storage Made Simple
Is it possible to do detailed analysis before login the paywall?

Andy

[bjm]

fwiw ~ I tried making F/P submission with OP details

====

Developers: CIEDRA Deniss
Version: 2.1.193
Identified: 7/11/26,
Last Used: 7/11/26,
Startup Item: No

Very few
Very few in the Norton Community have used this file.

Mature
This file was released a month ago.

Unproven
There is not enough information about this file to recommend it.

---

Origin

Downloaded from: https://store3.gofile.io/download/web/6179737a-0843-49ce-a36a-c80fcdc6a4e9/FSHud-Setup.exe

File: FSHud-Setup.exe
File size: 236 MB (247,787,176 bytes)
MD5 checksum: A4567C2E1C38C1B10F90FDC4DC56D1FD
SHA1 checksum: FA93D2F08F9AAF6D7608CFB9D2BF12C920CB3140
SHA256 checksum: D8A1A35C3286E74F678E23D0689634476790BDBDCE3959B8976319CD6C3579B9
Date/Time: 7/11/2026

========================

Developers: CIEDRA Deniss
Version: 2.1.193.0
Identified: 7/11/26,
Last Used: 7/11/26,
Startup Item: No

Very few
Very few in the Norton Community have used this file.

Mature
This file was released a month ago.

Unproven
There is not enough information about this file to recommend it.

---

Origin

Downloaded from: https://store-na-phx-4.gofile.io/download/web/13343967-0daa-4c6a-9539-aeaa8289ec29/FsHud.exe

File: FsHud.exe
File size: 147 MB (154,612,008 bytes)
MD5 checksum: CB2ACB5798421F3E3D4B369584E9FDD1
SHA1 checksum: 72D4216C38FF1BDD2C2FA1E68F9F3EC49D76FA1B
SHA256 checksum: 83A784C2D42707985F3DE7EA004454054B459B514172783E7129BB628B16FA34
Date/Time: 7/11/2026

=======

Win64:Evo-gen [Trj] is a generic detection name used primarily by antivirus engines like Avast, AVG, and Norton to flag files exhibiting suspicious, Trojan-like characteristics. Because it relies on heuristic analysis—meaning the software looks at what a file does or how its code is structured rather than matching a known database of confirmed viruses—this alert frequently turns out to be a false positive.

Unsigned developer files, freshly compiled code, game updates, and specialized software packages regularly trigger this specific warning. However, because actual malware can also masquerade behind this generic label, you should thoroughly verify the flagged file before interacting with it.

Caveat: I’m not familiar with FSHud - Air Traffic Control
AI sourced content may make mistakes

[SoulAsylum]

@andya1lan I did review your files just now, today was a busy day. It appears Guru bjm did the leg work instead. I did post earlier what the reasons are for the detection:

AI Overview

FSHud is a legitimate Air Traffic Control add-on for Microsoft Flight Simulator, but it can trigger false positive alerts from antivirus software. The program uses background process injection (to interface with the simulator) and adds itself to the Windows registry to start automatically, which security tools often flag as potentially unauthorized behavior. [1, [2]

SA

[bjm]

Request Timeout
The server timed out while waiting for the browser’s request.
Reference #2.ba02c417.1783868154.63a3358
https://errors.edgesuite.net/2.ba02c417.1783868154.63a3358

[andya1lan]

Hi SA and bjm,

Thank you both for checking and for the detailed information.

It seems that this is not just a network issue on my end, but rather a problem on Norton’s server side when submitting false positive reports.

May I know if there is anything else I can do? I have tried contacting Norton Live Support, but I only received AI-generated replies instead of being connected to a real human agent.

Andy

[bjm]

@andya1lan

I have tried contacting Norton Live Support, but I only received AI-generated replies instead of being connected to a real human agent.

If you want to reach a human support agent. Simply get past Norton’s attempt to push DIY help articles and Norton’s attempt to gather telemetry. If your goal is to reach a human support agent. Just click any presets or whatever satisfies you. Your goal is to get past Norton bots/presets.

• type “agent” three times to reach a human agent
• speak “agent” three times to reach a human agent

=============================================

EDIT: Please check now and if the issue reoccurs – Please reply

fwiw ~ from my side —

[SoulAsylum]

@MJay Can you assist with the submissions portal issue? TIA.

SA

[MJay]

Hello @SoulAsylum, @bjm, @andya1lan,

Thank you for highlighting this issue, and I’m sorry for the trouble. I’ve tested from a few different devices and networks, and the submission always passed. We are checking on our side what is causing this and will let you know once have any update.

Thank you.

[bjm]

Hello @MJay

Request Timeout

The server timed out while waiting for the browser’s request.
Reference #2.d2b52e17.1784309269.deda49c3
https://errors.edgesuite.net/2.d2b52e17.1784309269.deda49c3

https://community.norton.com/t/norton-blocking-android-studio-from-running-powershell-command/525211/24

[MJay]

Hello @bjm,

Thank you for highlighting this. Let me confirm that we’ve identified a potential root cause and that the team is working on a fix. While we don’t have an exact ETA, we aim to fix it as soon as possible.

I’d like to ask you for your patience. I’ll keep you posted.

Thank you.

[MJay]

Hello @SoulAsylum, @bjm, @andya1lan,

Let me confirm that we’ve released a fix for this issue. Would you please try to submit the file again and let me know the outcome?

Thank you.

[bjm]

@MJay

Let me confirm that we’ve released a fix for this issue. Would you please try to submit the file again and let me know the outcome?

Does the sample need to be zip’d?

[MJay]

@bjm

Does the sample need to be zip’d?

Ideally yes, but it would be great if you could try both - zip’d and .exe.

[bjm]

@MJay

Ideally yes, but it would be great if you could try both - zip’d and .exe.

fwiw ~ on my side submission (.exe or .zip) remains slow and iffy.

#Request Timeout
The server timed out while waiting for the browser’s request.
Reference #2.ba02c417.1784818148.226e9e3e
https://errors.edgesuite.net/2.ba02c417.1784818148.226e9e3e

#Request Timeout
The server timed out while waiting for the browser’s request.
Reference #2.b9c83017.1784819092.f97d749
https://errors.edgesuite.net/2.b9c83017.1784819092.f97d749

Brave browser with Shields down
Norton Private Browser with Privacy Guard paused & Cookie Consent Manager off & third party cookies allowed

=====

slow and iffy

===

[andya1lan]

Also negative on my Windows with latest Chrome 151

[MJay]

Thank you for the verification, and I’m sorry for the issues! We’re looking into this further, and I’ll let you know once I have an update.

[bjm]

===

[bjm]

Hello @MJay
Norton Private Browser
Privacy Guard & Cookie Consent Manager = off