#16 RecordEdit Installer flagged as suspicious.

[David Brown]

Hi, as part of our company's audit for installing software when RecordEdit_Installer_for_HSQL_0.99.3.exe was checked by SHA256 hash, the file was flagged as suspicious. Please explain why it is being flagged and validate if it is a false positive and can be ignored safely without posing any security risk to our company. Thanks

[Bruce Martin]

To the best of my knowledge there should not be any ransomware in it.

• was the file downloaded from sourceforge or someware else ???
• Do you know what ransomware is being flagged ???
• have you tried yhe Generic/USB versions ???

[Anonymous]

Hi Bruce, thanks for getting back to me.

The following was detected:

[cid:image001.png@01DA4214.2692B960]

Can this be corrected?

Thanks,
David

From: support-requests@record-editor.p.re.sourceforge.net support-requests@record-editor.p.re.sourceforge.net On Behalf Of Bruce Martin
Sent: Friday, January 5, 2024 4:06 PM
To: [record-editor:support-requests] 16@support-requests.record-editor.p.re.sourceforge.net
Subject: [record-editor:support-requests] #16 RecordEdit Installer flagged as suspicious.

To the best of my knowledge there should not be any ransomware in it.

• was the file downloaded from sourceforge or someware else ??? SourceForge
• Do you know what ransomware is being flagged ??? see above
• have you tried yhe Generic/USB versions ??? no, seems that they would also have the readme file

---

**[support-requests:#16]https://sourceforge.net/p/record-editor/support-requests/16/ RecordEdit Installer flagged as suspicious. **

Status: open
Group: v1.0_(example)
Created: Wed Jan 03, 2024 05:23 PM UTC by David Brown
Last Updated: Wed Jan 03, 2024 05:23 PM UTC
Owner: Bruce Martin
Attachments:

• RecordEdit Audit.pnghttps://sourceforge.net/p/record-editor/support-requests/16/attachment/RecordEdit%20Audit.png (89.3 kB; image/png)

Hi, as part of our company's audit for installing software when RecordEdit_Installer_for_HSQL_0.99.3.exe was checked by SHA256 hash, the file was flagged as suspicious. Please explain why it is being flagged and validate if it is a false positive and can be ignored safely without posing any security risk to our company. Thanks

---

Sent from sourceforge.net because you indicated interest in https://sourceforge.net/p/record-editor/support-requests/16/

To unsubscribe from further messages, please visit https://sourceforge.net/auth/subscriptions/

The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you. Message Encrypted via TLS connection

[Bruce Martin]

It is objecting to the Readme.html

[Anonymous]

Hi Bruce,

Please validate if it is a false positive and can be ignored safely without posing any security risk.

Thank you,
David

From: support-requests@record-editor.p.re.sourceforge.net support-requests@record-editor.p.re.sourceforge.net On Behalf Of Bruce Martin
Sent: Monday, January 8, 2024 12:48 PM
To: [record-editor:support-requests] 16@support-requests.record-editor.p.re.sourceforge.net
Subject: [record-editor:support-requests] #16 RecordEdit Installer flagged as suspicious.

It is objecting to the Readme.html

---

**[support-requests:#16]https://sourceforge.net/p/record-editor/support-requests/16/ RecordEdit Installer flagged as suspicious. **

Status: open
Group: v1.0_(example)
Created: Wed Jan 03, 2024 05:23 PM UTC by David Brown
Last Updated: Sat Jan 06, 2024 12:06 AM UTC
Owner: Bruce Martin
Attachments:

• RecordEdit Audit.pnghttps://sourceforge.net/p/record-editor/support-requests/16/attachment/RecordEdit%20Audit.png (89.3 kB; image/png)

Hi, as part of our company's audit for installing software when RecordEdit_Installer_for_HSQL_0.99.3.exe was checked by SHA256 hash, the file was flagged as suspicious. Please explain why it is being flagged and validate if it is a false positive and can be ignored safely without posing any security risk to our company. Thanks

---

Sent from sourceforge.net because you indicated interest in https://sourceforge.net/p/record-editor/support-requests/16/

To unsubscribe from further messages, please visit https://sourceforge.net/auth/subscriptions/

The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you. Message Encrypted via TLS connection

[Bruce Martin]

Yes the **ReadMe.html" is a false positive and can safetly be ignored. historically readme.html where fairly common. If there is anything else that should be investigated separately.