Bug 151319

Summary:	1 security vendor(TrendMicro) flagged this file (LibreOfficeDev_7.4.3.0.0_Win_x64_sdk.msi) as malicious -> due to "HEUR_JSRANSOM.O4"
Product:	LibreOffice	Reporter:	eugeniusz.kaluza
Component:	sdk	Assignee:	Not Assigned <libreoffice-bugs>
Status:	RESOLVED NOTOURBUG
Severity:	normal	CC:	ilmari.lauhakangas
Priority:	medium
Version:	unspecified
Hardware:	x86-64 (AMD64)
OS:	All
Whiteboard:
Crash report or crash signature:		Regression By:
Attachments:	1o security vendor flagged this file as malicious

Description eugeniusz.kaluza 2022-10-04 07:01:42 UTC

Description:
LibreOfficeDev_7.4.3.0.0_Win_x64_sdk.msi
e5622a0698a5582113761bdd0d0d387cd61e1977a2d54f43717d636952373b69
LibreOfficeDev_7.4.3.0.0_Win_x64_sdk.msi
Size 23.88 MB 
Security Vendors' Analysis
1 security vendor and no sandboxes flagged this file as malicious
TrendMicro -> HEUR_JSRANSOM.O4

Steps to Reproduce:
1. virustotal.com
2. drag file: LibreOfficeDev_7.4.3.0.0_Win_x64_sdk.msi  to virustotal.com webpage
3. wait for report

Actual Results:
1 security vendor and no sandboxes flagged this file as malicious
TrendMicro -> HEUR_JSRANSOM.O4

Expected Results:
No security vendors and no sandboxes flagged this file as malicious


Reproducible: Always


User Profile Reset: No



Additional Info:
remove this threat

Comment 1 eugeniusz.kaluza 2022-10-04 07:03:38 UTC

Created attachment 182819 [details]
1o security vendor flagged this file as malicious

e5622a0698a5582113761bdd0d0d387cd61e1977a2d54f43717d636952373b69
LibreOfficeDev_7.4.3.0.0_Win_x64_sdk.msi
Size 23.88 MB

Comment 2 Buovjaga 2023-02-21 09:48:54 UTC

Please report it to virustotal.com as a false positive. Thanks.