FP - Malware.AI.2574956438 CONNECTWISECONTROL.CLIENTSETUP.EXE

[Checkdigits]

I have the commercial Premium version of MalwareBytes 4.3.3 and I can confirm it is definitely detecting the ConnectWise client setup exe as malware.  It reports it as Malware.AI.2574956438

I use ScreenConnect to connect to various remote servers and PCs so there is more than one ScreenConnect client exe - all were detected as malware - and they're not.

Details from detection log: 

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 5/23/21
Scan Time: 7:28 AM
Log File: 6463320e-bbc2-11eb-8721-6c6a77e318b2.json

-Software Information-
Version: 4.3.3.116
Components Version: 1.0.1292
Update Package Version: 1.0.40814
License: Premium

-System Information-
OS: Windows 10 (Build 19042.985)
CPU: x64
File System: NTFS
User: System

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Scheduler
Result: Completed
Objects Scanned: 315875
Threats Detected: 3
Threats Quarantined: 0
Time Elapsed: 7 min, 5 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 3
Malware.AI.2574956438, C:\USERS\IAN\DOWNLOADS\CONNECTWISECONTROL.CLIENTSETUP (1).EXE, No Action By User, 1000000, 0, 1.0.40814, 45EF6CAD9ABC0A71997AB796, dds, 01257803, A1DB2852AC08752A56A97A9A6C95DEF9, BC1AC5ADF2F87F4CC51377AAB786047F046547E751E6460CB5820E679A132F14
Malware.AI.2574956438, C:\USERS\IAN\DOWNLOADS\CONNECTWISECONTROL.CLIENTSETUP (2).EXE, No Action By User, 1000000, 0, 1.0.40814, 45EF6CAD9ABC0A71997AB796, dds, 01257803, C73C0CE53EFD218CC3A43E9ED9994417, FB550B48DBE0837367364E98E963285F284A48757C26D7B9E8A82D4FF11BB740
Malware.AI.2574956438, C:\USERS\IAN\DOWNLOADS\CONNECTWISECONTROL.CLIENTSETUP.EXE, No Action By User, 1000000, 0, 1.0.40814, 45EF6CAD9ABC0A71997AB796, dds, 01257803, 3FE142A8FDB0B61F35B89B3E9063EDB8, 83FED0430FBF95822F749019E2F3D846EA071533EF6F076E91FA19C519A81B4D

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

[TwinHeadedEagle]

Hi,

We will need all of those files so we can look into removing the detection.