I just noticed this detection on my Windows 10 desktop. Running the powershell command, I see that in my case it seems to be related to my Crashplan backup service: (I did open a ticket with them as well) > Get-MpThreatDetection ActionSuccess : True AdditionalActionsBitMask : 0 AMProductVersion : 4.18.1806.18062 CleaningActionID : 2 CurrentThreatExecutionStatusID : 1 DetectionID : {F78F14C3-9BBD-41DA-8D11-24F4240D0A26}