File scan report
Verdict Safe
Is Wispr
Signed installer with zero engine detections and medium prevalence across 54 sources.
Strong evidence · A verified publisher signature, and no engine flags it.
The sample shows no malicious indicators and can be treated as a legitimate installer when sourced from official channels.
Good practice2 tips
We found nothing harmful in this file.
Run it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 69 flagged
- Flagged 0
- No detection 69
- No result 6
- Code signing Wispr AI, Inc.
- Test run Completed
- First seen 2mo ago
Chapter 02
Why we think so
3 points against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
All 69 antivirus engines that checked it returned clean. The file is signed by 'Wispr AI' and shows installer behaviour with no malicious sandbox verdict or known-bad children.
Zero malicious detections across 75 reporting engines and no major flags indicate the file is not recognised as malware. Signing is verified but the publisher has no prior history in our records. Observed MITRE techniques and direct-IP traffic are consistent with legitimate Electron/Squirrel installers. Medium prevalence and absence of malicious files it created or sandbox verdicts support a safe classification.
What We Detected
75 engines scanned the sample; none flagged it malicious. The file is a signed 64-bit PE with verified signature from 'Wispr AI'. Sandbox execution recorded process creation, file writes, and network activity typical of an Electron-based installer using Squirrel.
Threat Behavior
Four MITRE techniques (T1055, T1485, T1486, T1543) were mapped from evidence from the test run, but no sandbox flagged the activity as malicious. Contacted hosts include one suspicious domain (raw.githubusercontent.com) and several IPs; none appear in our malicious-host cache. Ten files it created were inspected and none classified malicious.
What To Do Now
Keep security software enabled. The file can be executed if obtained from the official Wispr Flow distribution channel. Monitor for unexpected behaviour and report anomalies through normal support channels.
Where this verdict could be wrong1 caveat
- contactedHosts shows one suspicious host (raw.githubusercontent.com) and behaviour shows direct-IP traffic plus MITRE T1055/T1485/T1486/T1543, but no major detections or malicious sandbox verdict.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- Zero detections across 75 engines
- Verified digital signature
- Medium prevalence from 54 sources
- No malicious files it created
- New signer with no historical samples
- Direct-IP network traffic observed
- One contacted host flagged suspicious
6 sources checked · 5 complete · 1 partial. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 25sandbox rule tags
- 7spawned processes
- 15network contacts
- 29filesystem & mutex artifacts
Includes 25 mapped techniques, every process, file, registry and network entry and 9 dropped files.
Show the technical evidenceChapter 04
Technical details
None of the 69 antivirus engines that checked it flag it; signed by Wispr AI, Inc..
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 partial. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 17, 2026, 1:23 PM UTC
- SHA-256
f7e114a361af2d6efad2b660e7d13cb7cf7163fbfec168784781954eeca4a8ee- SHA-1
5a5069f3a0f1869d5a574c1d304613966f6c86fa- MD5
68e984a45fe5846f3014b8bd3396bf1b
About this file
WisprFlowInstaller.dll is a Win32 EXE file of 6.2 MB.
- Type and size
- Win32 EXE · 6.2 MB
- Signer
- Wispr AI, Inc.Valid code signature.
- First seen
- Aug 11, 2026On VirusTotal.
- Submitted by
- 54 distinct sources
- Packer
- None detected
- Entropy
- 7.55 of 8
First scanned Updated
Includes every engine result (75), 1 matched signature rule, PE section entropy and packers and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 7 questions people ask most about this file.
Is WisprFlowInstaller.dll safe?
What is WisprFlowInstaller.dll?
How many antivirus engines detected WisprFlowInstaller.dll?
Is WisprFlowInstaller.dll digitally signed?
What is the SHA-256 hash of WisprFlowInstaller.dll?
Is it safe to run WisprFlowInstaller.dll?
How up to date is this analysis of WisprFlowInstaller.dll?
Community
Member reviews and reports for this exact file hash.