Wox Flagged as Malicious – Request for Clarification

[Stan69000]

Hello,

I’m reaching out because I noticed that the application Wox, downloaded from its official GitHub repository, is being flagged as malicious by several antivirus solutions.

The following detections appear with Virus Total :

• tStealer.Agent!8.C2 (CLOUD)
• MALICIOUS
• Trojan:Multi/Agent.RR

These alerts occur right after the file is downloaded, without being executed.

I’m trying to better understand the nature of these detections and whether they indicate actual malicious behavior or if there might be another explanation.

Thank you in advance for any clarification you can provide.

Best regards,
Stan

[qianlifeng]

Wox dynamically extracts a frontend exe program of flutter during startup, this program is used to display the Wox UI interface, I think this behavior might have caused the antivirus software to mistakenly identify it as a Trojan.