Hello all,
Over the past week we have been having this detection on AMP and I can not for the life of me figure out how to remediate it. It feels like this may be a false positive, but I can't confirm, and we get countless notifications per day on this. Does anyone have any info on this, or had seen it before in their own environment.
- Detection:Dropper.Generic::1201
- File:tmp
- File path: \\?\C:\Windows\Installer\MSIE21C.tmp
- Detection SHA-256: 6b01db091507022acfd121cc5d1f6ff0db8103f46a1940a6779dc36cca090854
- Application SHA-256: 199b3890d28a1f5906f4014e73615a268b3c4414f1f71697bf13e0d464258d54
TIA to anyone that can shed some light on how to handle this.
