From my understanding, this is a false positive and the reason of this detection is because GSA SER is packed (to reduce size of the file as well randomize the code so it's harder to decrypt). If you downloaded GSA SER from the original source, you should just add the .exe of GSA SER in the allowed list.
Comments