False-positive detection - Injector

[TL Enzo]

RAPORT: You have to register to be able to see this link. Register HERE! If you are already a member please log in! If you still you are not able to see the link you need to activate your account or an administrator need to activate your account!
ANTIVIRUS: Kaspersky Total Security
Additional information: I have done a lot of scans in the past even but this is the first time Wargods scan detects Lenovo Legion Toolkit proccess as an Injector and it got me banned from the server . but the way even in the old scans the program never caused a problem.
GAME MEMORY DUMP LINK: You have to register to be able to see this link. Register HERE! If you are already a member please log in! If you still you are not able to see the link you need to activate your account or an administrator need to activate your account!

[Tiger]

Please search and upload me the file called "Lenovo Legion Toolkit.exe" (md5: 8144158A32FDDE1EA6AD8EEAD8575E88) for analysis.

[TL Enzo]

1- Excuse my ignorance where should i search for the file to upload it .
2 - I think the issue was the app was asking for update . After updating it and doing another scan the result was clean (you can see it here : You have to register to be able to see this link. Register HERE! If you are already a member please log in! If you still you are not able to see the link you need to activate your account or an administrator need to activate your account! )
3 - Will the update change the MD5?

[TL Enzo]

1hour ago i was playing and an admin asked for a scan so closed the app and the report was clean . So will updating the app and closing it might give a different hash and results ?

[Tiger]

1. Don't know, we don't save file paths. You will have to search the entire system if you don't know about it.
2, 3 - indeed, if the file is updated it will change the file hash. But this is not the case, you didn't got detected because that app wasn't running anymore. Search for it and hope it has the same file hash.

[TL Enzo]

I mean yea i did update the app and when the admin asked for a test i closed the app to avoid any confusion that's why i doesn't appear in the Processes.
Here is exe file but after the update : You have to register to be able to see this link. Register HERE! If you are already a member please log in! If you still you are not able to see the link you need to activate your account or an administrator need to activate your account! .
Should i try to recreate the issue . i will install an old versions from the app releases and when the app ask for update im not gonna close it and start a scan and if the report says "Injector" then i will upload the exe file for you?

--------------- Added after 18 minutes ---------------

I tried to recreate the issue with 2 different versions of the app . but the last 2 scans are ok the proccess says Unkown instead of Injector.
is there any chance where the report that says Injector can be deleted or repalced with No Cheat Signature Detected ?

[Tiger]

Doesn't help me, I need the original file from your report.

[TL Enzo]

I managed to recreate the same problem :
1- The last scan says Injector caused by the same proccess - You have to register to be able to see this link. Register HERE! If you are already a member please log in! If you still you are not able to see the link you need to activate your account or an administrator need to activate your account!
2- "Lenovo Legion Toolkit.exe" (md5: 8144158A32FDDE1EA6AD8EEAD8575E88) You have to register to be able to see this link. Register HERE! If you are already a member please log in! If you still you are not able to see the link you need to activate your account or an administrator need to activate your account!

[Tiger]

False-positive, detections removed. Thank you for reporting the issue.