F.lux.exe detected as Malware.AI.3935786368

[compromised]

Is this a false positive?

I've had F.lux installed for years and I don't think it took an update recently.

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 4/5/24
Scan Time: 11:34 AM
Log File: 0c32a6fc-f362-11ee-834f-e884a50f03f1.json

-Software Information-
Version: 4.6.11.320
Components Version: 1.0.2302
Update Package Version: 1.0.83056
License: Premium

-System Information-
OS: Windows 10 (Build 19045.4170)
CPU: x64
File System: NTFS
User: System

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Scheduler
Result: Completed
Objects Scanned: 301557
Threats Detected: 4
Threats Quarantined: 4
Time Elapsed: 2 min, 31 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 1
Malware.AI.3935786368, C:\USERS\USER\APPDATA\LOCAL\FLUXSOFTWARE\FLUX\FLUX.EXE, Quarantined, 1000000, -359180928, , , , , 751BBD58B74DEDFFE2B532259F995639, 7470C0F0534143AA37F038274B1611732A3D85F1DD8B433CEC2DA9CCF7A60CE7

Module: 1
Malware.AI.3935786368, C:\USERS\USER\APPDATA\LOCAL\FLUXSOFTWARE\FLUX\FLUX.EXE, Quarantined, 1000000, -359180928, , , , , 751BBD58B74DEDFFE2B532259F995639, 7470C0F0534143AA37F038274B1611732A3D85F1DD8B433CEC2DA9CCF7A60CE7

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 2
Malware.AI.3935786368, C:\USERS\USER\APPDATA\ROAMING\Microsoft\Windows\Start Menu\Programs\f.lux.lnk, Quarantined, 1000000, -359180928, , , , , 0DE1C3B6B2006EF594FE90829F84E199, 8854451407BF2A0F6D8C242F2763392D54BB9F060E351C64EB243007CEBB21C2
Malware.AI.3935786368, C:\USERS\USER\APPDATA\LOCAL\FLUXSOFTWARE\FLUX\FLUX.EXE, Quarantined, 1000000, -359180928, 1.0.83056, BA4F32620D7741DCEA975580, dds, 02767050, 751BBD58B74DEDFFE2B532259F995639, 7470C0F0534143AA37F038274B1611732A3D85F1DD8B433CEC2DA9CCF7A60CE7

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

[compromised]

Here is the detected file (an exe), zipped

flux.zip

[Zatta]

I just had the same thing happen. The last update to f.lux was in January.

[blender]

Hello,

These should no longer be detected shortly. 

Thanks for reporting.