Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We had this false positive as well. I opened a TALOS reputation ticket, it is marked resolved but still in AMP we have hundreds of "compromised" machines.