Microsoft.DiaSymReader.ni.dll detected as Malware.Heuristic.1003?

[AnonAware]

This was a file on a hard drive I was using during a transition from Windows 7 to 10. I couldn't access it using Windows Explorer for some reason? The (E:/Windows/Assembly/) path wasn't a filesystem I could browse through using Explorer, but for some reason I could use Firefox to navigate to it and download the offending file. I'm not really sure what it is but it showed up in the report whenever I moved the file somewhere and scanned that directory. The scan had other detections, but those were Firefox user.js preferences and I removed them from the report because those were intentional and also on a different drive.

FPreport.txt Microsoft.DiaSymReader.ni.zip

[AnonAware]

I should mention that I have ran this scan before (using the expert systems algorithm) with this drive attached and it hasn't returned anything until today

 

[Porthos]

1 minute ago, AnonAware said:

I should mention that I have ran this scan before (using the expert systems algorithm)

You should turn that non default setting.

 

[AnonAware]

I'm aware of it not showing up without that option, this is just the first time it's shown up using that option after several scans over the year. I'm just relatively paranoid about it

[Porthos]

7 minutes ago, AnonAware said:

I'm just relatively paranoid about it

Currently while the feature is basically experimental, you will more False Positives then real detection's with it enabled. That is why it is not enabled by default. The same applies to rootkit detection as well.

[shadowwar]

This file has been whitelisted. 

[AnonAware]

Thank you guys for the assistance and the update.