{"id":4101,"date":"2026-06-08T18:01:42","date_gmt":"2026-06-08T15:01:42","guid":{"rendered":"https:\/\/support.withsecure.com\/en\/?post_type=support_article&#038;p=4101"},"modified":"2026-06-08T18:01:42","modified_gmt":"2026-06-08T15:01:42","slug":"trojanw32-geninflated-b-infection-shown-for-powerautomatedesktop-adaptivecards-dll","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/fr\/support-articles\/trojanw32-geninflated-b-infection-shown-for-powerautomatedesktop-adaptivecards-dll\/","title":{"rendered":"Trojan:W32\/GenInflated.B infection shown for PowerAutomateDesktop adaptivecards.dll"},"content":{"rendered":"<h3>Issue:<\/h3>\n<p>Elements Endpoint Protection portal&#39;s\u00a0<strong>Security Events\u00a0<\/strong>page shows\u00a0<span style=\"font-family: Courier New,Courier,monospace;\">Trojan:W32\/GenInflated.B<\/span> infection name for:\u00a0<\/p>\n<ul>\n<li><span style=\"font-family: Courier New,Courier,monospace;\">C:\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\Microsoft\\Windows\\DeliveryOptimization\\Cache\\6b9a4d43-a587-4b92-882f-398e6d291cb5\\content.bin\\[50] PowerAutomateDesktop-11.2401.31.0-x64.msix\\[1] AdaptiveCards.dll<\/span><\/li>\n<\/ul>\n<p>Alert type\u00a0on_demand_scanner.file_infection.nothing<\/p>\n<p>Example SHA-1:\u00a0<\/p>\n<ul>\n<li>2dcf073e1c252d0b6106aa9e98ff7ee335fb29ac<\/li>\n<li>afc450c794c05185440a39076e7d766d25b31b7b<\/li>\n<li>c9612dd52736928d64c0c6c4a52f80f394752fea<\/li>\n<li>52f4251fac3d15ce318a5ee7f963cbdece1c5c0e<\/li>\n<\/ul>\n<p>Is this a false positive or not?\u00a0<\/p>\n<h3>Resolution:<\/h3>\n<p>This\u00a0<span style=\"font-family: Courier New,Courier,monospace;\">Trojan:W32\/GenInflated.B<\/span> detection for\u00a0adaptivecards.dll detection occurs because the <span style=\"font-family: Courier New,Courier,monospace;\">AdaptiveCards.dll<\/span>\u00a0 is over 800MB in size. We have released F-Secure Hydra Engine (64-bit) 2024-02-26_01) which should fix the issue. If you are still seeing this detection appearing on one or more devices, make sure you have the latest Hydra Engine version installed on the device.\u00a0 You can check the version by right-clicking the Elements Agent icon in the taskbar and then selecting\u00a0<strong>Check for updates<\/strong>.\u00a0\u00a0<\/p>\n<p>If you do not want to receive further security alerts about this detection, you can exclude the SHA-1 from the Elements profile:<\/p>\n<ol>\n<li>Log in to the Elements Security Center: <a href=\"https:\/\/elements.withsecure.com\" target=\"_blank\" rel=\"noopener\">https:\/\/elements.withsecure.com<\/a><\/li>\n<li>Open the\u00a0<strong>Security configurations\u00a0<\/strong>section from the menu on the left<\/li>\n<li>Go to the\u00a0<strong>Profiles\u00a0<\/strong>page<\/li>\n<li>Select the profile that is in use on your devices\n<ul>\n<li>Note that only custom profiles can be edited. You can create a custom profile either by clicking\u00a0&quot;<strong>Create a profile<\/strong>&quot; or cloning an existing profile<\/li>\n<\/ul>\n<\/li>\n<li>Go to the\u00a0<strong>General settings\u00a0<\/strong>page in the profile<\/li>\n<li>Click\u00a0<strong>Add exclusion <\/strong>in the\u00a0<strong>Exclude folders and files from all security scans <\/strong>section\u00a0<\/li>\n<li>Enter the SHA-1 value from the detection (Detections can be viewed from the\u00a0<strong>Events\u00a0<\/strong>&gt;\u00a0<strong>Security Events<\/strong>\u00a0page)\n<ul>\n<li>If you want to add multiple SHA-1 values, create separate exclusions for them by clicking\u00a0<strong>Add\u00a0<\/strong><strong>exclusion\u00a0<\/strong>again<\/li>\n<\/ul>\n<\/li>\n<li>Click <b>Save and publish<\/b><\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>Elements Endpoint Protection portal&rsquo;s\u00a0 Security Events\u00a0 page shows\u00a0Trojan:W32\/GenInflated.B infection name for:\u00a0<\/p>\n<p>C:\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\Microsoft\\Windows\\DeliveryOptimization\\Cache\\6b9a4d43-a587-4b92-882f-398e6d291cb5\\content.bin\\[50] PowerAutomateDesktop-11.2401.31.0-x64.msix\\[1] AdaptiveCards.dll<br \/>\nAlert type\u00a0on_demand_scanner.file_infection.nothing<\/p>\n<p>SHA-1 can be:\u00a0<\/p>\n<p>2dcf073e1c252d0b6106aa9e98ff7ee335fb29ac<br \/>\nafc450c794c05185440a39076e7d766d25b31b7b<br \/>\nc9612dd527369<\/p>\n","protected":false},"template":"","support_article_product":[99],"class_list":["post-4101","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000012124","source_version":3,"source_system":"salesforce","source_date_updated":"2026-06-08 15:01:42","import_hash":"463e2fde3e3ba99b7e9e0a994a7af36d0b787183","vanilla_article_id":32307,"vanilla_url":"https:\/\/community.withsecure.com\/en\/kb\/articles\/32307-trojanw32-geninflated-b-infection-shown-for-powerautomatedesktop-adaptivecards-dll","vanilla_kb_id":30,"vanilla_category_id":102,"machine_translated":false,"reactions_helpful_yes":0,"reactions_helpful_no":0},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/support_article\/4101","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/media?parent=4101"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/support_article_product?post=4101"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}