False Positive DeskBuild an appeal
VENDOR APPEAL GUIDE

Endgame false positive?
Here’s where to start.

Elastic acquired Endgame. Use Elastic's current review channel to ask about a historical Endgame file detection.

Vendor guidance checkedSources reviewed: 2026-10-14File

Appeal contacts

Choose a channel for the type of detection you want reviewed. Contact availability and acceptance are controlled by the vendor.

How to request a review

File review

Elastic acquired Endgame. Use Elastic's current review channel to ask about a historical Endgame file detection.

  1. State that the disputed VirusTotal result uses the historical Endgame name.
  2. If you are an Elastic support customer, open the request through your existing support channel.
  3. Otherwise, complete the community form with the file's SHA-256, VirusTotal sample URL, company or software name, and contact name and email.
  4. Add the software website, filename and useful context where available, then submit the form.
  • This is a legacy engine name. Availability of a historical verdict review must be confirmed with the current vendor.
  • Elastic no longer reviews email submissions sent after June 5, 2024.
  • The form is for community submissions and states that a report does not guarantee a verdict change.

Scope & contact notes

  • Listed in VirusTotal search-prefix documentation but absent from the contributor roster snapshot; this is not proof the engine is currently active.
  • This name appears in a VirusTotal engine-prefix list or contact table but is not matched to a current contributor entry. Current engine activity is unconfirmed.

Names you may see in a report

Endgameendgame

Aliases help locate the responsible vendor. Related products can use different submission channels; check the scope shown above.

Sources for this entry

“Guidance checked” means a public vendor source supports the route or instructions. We have not sent a test appeal or verified mailbox delivery. Read our methodology.

← Back to all vendors