False Positive Removal Request Winflector

[dziekan]

False-positive submission

Hi research team, 

PaloAlto false-positive detected,  Cylance and VBA32 false-positive detected the application (wfserver.exe).

https://www.virustotal.com/#/file/ec36883157a62423c80c5ff315ede3bc81fa6ee3ac4c6931d797b8f744c9a644/d...

The appliaction is a part of the installer:

https://www.virustotal.com/#/file/2b57bd2885eb1c505fed8c14c41dd7b1d6cac4e7d4029d801ce5bbc6110e8c5b/d...

Please clean paloAlto false-positive detection. 

The file/installer can be downloaded from: 

https://www.winflector.com/store/free-version/index/id/388

Would appriciate your quick help. 

Thanks, 

Rafal

[dziekan]

PaloAlto false-positive detected,  Cylance and VBA32 false-positive detected the application (wfserver.exe).

https://www.virustotal.com/#/file/ec36883157a62423c80c5ff315ede3bc81fa6ee3ac4c6931d797b8f744c9a644/d...

The appliaction is a part of the installer:

https://www.virustotal.com/#/file/2b57bd2885eb1c505fed8c14c41dd7b1d6cac4e7d4029d801ce5bbc6110e8c5b/d...

Please clean paloAlto false-positive detection. 

The file/installer can be downloaded from: 

https://www.winflector.com/store/free-version/index/id/388

Would appriciate your quick help. 

Thanks, 

Rafal

[hisingh]

Hi Dziekan, 

I am checking on the sample and I will update the result.

Himani

[hisingh]

Hi

The file "wfsetup-3964.exe"  sha256sum is  

2b57bd2885eb1c505fed8c14c41dd7b1d6cac4e7d4029d801ce5bbc6110e8c5b. I checked this is benign. 

The hash with VT link doesn't match. 

ec36883157a62423c80c5ff315ede3bc81fa6ee3ac4c6931d797b8f744c9a644

Thanks

Himani

[dziekan]

Hi

The link for wfserver.exe file extracted from the installer.

https://www.winflector.com/wfserver.exe

and VT link:

https://www.virustotal.com/#/file/ec36883157a62423c80c5ff315ede3bc81fa6ee3ac4c6931d797b8f744c9a644/d...

Regards

Rafal

[mivaldi]

Reported ec36883157a62423c80c5ff315ede3bc81fa6ee3ac4c6931d797b8f744c9a644 for manual verdict re-evaluation.

[mivaldi]

Verdict has been changed to benign.