topic Re: False Positive Removal Request Winflector in VirusTotal

False Positive Removal Request Winflector

dziekan — Fri, 26 Oct 2018 08:15:07 GMT

False-positive submission

Hi research team,

PaloAlto false-positive detected, Cylance and VBA32 false-positive detected the application (wfserver.exe).

The appliaction is a part of the installer:

Please clean paloAlto false-positive detection.

The file/installer can be downloaded from:

Would appriciate your quick help.

Thanks,

Rafal

hisingh — Fri, 26 Oct 2018 18:31:35 GMT

Hi Dziekan,

I am checking on the sample and I will update the result.

Himani

hisingh — Fri, 26 Oct 2018 19:30:45 GMT

The file "wfsetup-3964.exe" sha256sum is

2b57bd2885eb1c505fed8c14c41dd7b1d6cac4e7d4029d801ce5bbc6110e8c5b. I checked this is benign.

The hash with VT link doesn't match.

ec36883157a62423c80c5ff315ede3bc81fa6ee3ac4c6931d797b8f744c9a644

Thanks

Himani

dziekan — Fri, 26 Oct 2018 20:19:57 GMT

The link for wfserver.exe file extracted from the installer.

and VT link:

Regards

Rafal

mivaldi — Fri, 26 Oct 2018 21:33:15 GMT

Reported ec36883157a62423c80c5ff315ede3bc81fa6ee3ac4c6931d797b8f744c9a644 for manual verdict re-evaluation.

mivaldi — Mon, 29 Oct 2018 20:18:49 GMT

Verdict has been changed to benign.