Is anyone else seeing "Outbreak Detected" in Windows Temp directory? Specifically Windows Server 2016/2019. I opened a ticket with support and they deemed it to be a false positive which I agree with; however, I'd like to be 100% confident and it has popped up on 3 of our servers so far. All of the file names are similar and Sophos cleans them up without creating a threat case so I am unable to inspect the files at all. The only information Sophos is providing is the detection name, file name and hash of the file which I've checked are not on VirusTotal. I don't want to whitelist the Temp directory, nor turn off the outbreak notifications.
Sample Detection (x100): PUA detected: 'Generic ML PUA' at 'C:\Windows\Temp\{f3143db0-a536-453a-b50d-52a61f1cd081}'
Edited tags
[edited by: GlennSen at 5:09 AM (GMT -8) on 10 Dec 2021]
