Possible False Positive

[EAngev]

Just had MB detect a file as possibly being malware during a scheduled scan.  Nothing was detected yesterday, and no real time alerts between then and this detection, so I'm wondering if a definition update suddenly flagged it.  Would just like to clarify if this is merely a false positive or something more sinister.

Name:  Malware.Sandbox.DDS.860810409

Location: C:\Users\ redacted for privacy \appdata\local\temp\mwb198F.tmp\ERUNT.exe   (folder appears to be storage for MB support tool)

There a appears to be a problem uploading the report, so I'll copy paste it.

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 10/22/21
Scan Time: 10:16 AM
Log File: 9876d850-3342-11ec-8e6e-60a44ce70644.json

-Software Information-
Version: 4.4.8.137
Components Version: 1.0.1474
Update Package Version: 1.0.46268
License: Premium

-System Information-
OS: Windows 10 (Build 19042.1288)
CPU: x64
File System: NTFS
User: System

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Scheduler
Result: Completed
Objects Scanned: 399895
Threats Detected: 1
Threats Quarantined: 1
Time Elapsed: 28 min, 59 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
Malware.Sandbox.DDS.860810409, C:\USERS\  redacted for privacy  \APPDATA\LOCAL\TEMP\MWB198F.TMP\ERUNT.EXE, Quarantined, 1000003, 0, 1.0.46268, 21B551CDF855C75A334EECA9, dds, 01476724, 2E0323A94915FAAB10A25F3BABF82584, F422EB7DC475E79663B390BAA45FE757B7B134B8D53F2DC43FDF4FE5CBFD9F79

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

[shadowwar]

This file has been whitelisted. Thanks for reporting.