We are getting hundreds of these threat detections this morning in our environment. These are all considered "low" and the smss.exe file is clean (SHA-256: 56afe5133fdc5806ec6b19436f7b55f1499cfc94619740c171424fbcf7808fd3)
Seems to be triggered at logon. Anyone else seeing these? Suspect a false positive. All scans have come back clean
