Bug 151319 - 1 security vendor(TrendMicro) flagged this file (LibreOfficeDev_7.4.3.0.0_Win_x64_sdk.msi) as malicious -> due to "HEUR_JSRANSOM.O4"
Summary: 1 security vendor(TrendMicro) flagged this file (LibreOfficeDev_7.4.3.0.0_Win...
Status: RESOLVED NOTOURBUG
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: sdk (show other bugs)
Version:
(earliest affected)
unspecified
Hardware: x86-64 (AMD64) All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-10-04 07:01 UTC by eugeniusz.kaluza
Modified: 2023-02-21 09:48 UTC (History)
1 user (show)

See Also:
Crash report or crash signature:

Attachments
1o security vendor flagged this file as malicious (55.72 KB, application/vnd.oasis.opendocument.text)
2022-10-04 07:03 UTC, eugeniusz.kaluza 		Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description eugeniusz.kaluza 2022-10-04 07:01:42 UTC 
Description:
LibreOfficeDev_7.4.3.0.0_Win_x64_sdk.msi
e5622a0698a5582113761bdd0d0d387cd61e1977a2d54f43717d636952373b69
LibreOfficeDev_7.4.3.0.0_Win_x64_sdk.msi
Size 23.88 MB 
Security Vendors' Analysis
1 security vendor and no sandboxes flagged this file as malicious
TrendMicro -> HEUR_JSRANSOM.O4

Steps to Reproduce:
1. virustotal.com
2. drag file: LibreOfficeDev_7.4.3.0.0_Win_x64_sdk.msi  to virustotal.com webpage
3. wait for report

Actual Results:
1 security vendor and no sandboxes flagged this file as malicious
TrendMicro -> HEUR_JSRANSOM.O4

Expected Results:
No security vendors and no sandboxes flagged this file as malicious


Reproducible: Always


User Profile Reset: No



Additional Info:
remove this threat
Comment 1 eugeniusz.kaluza 2022-10-04 07:03:38 UTC 
Created attachment 182819 [details]
1o security vendor flagged this file as malicious

e5622a0698a5582113761bdd0d0d387cd61e1977a2d54f43717d636952373b69
LibreOfficeDev_7.4.3.0.0_Win_x64_sdk.msi
Size 23.88 MB
Comment 2 Buovjaga 2023-02-21 09:48:54 UTC 
Please report it to virustotal.com as a false positive. Thanks.