MVision detect a Credential theft

[nathan_2000]

On all Clients I tested MVISION Endpoint 18.8.3.11 I get many events with the following details:

I scanned the system with ENS 10.6 and other competitors, the system seems to be clean.

C:\Windows\System32\taskhostw.exe

Credential theft mitigated

40050

Warning

Real Protect-CTP

Virus

Blocked

True

MVISION Endpoint

[sbenedix · Accepted solution]

Please follow the guidelines set out in "KB85567 - How to submit potential false positives from the product or through Global Threat Intelligence to McAfee Labs" - kc.mcafee.com to submit a sample so it can be looked into. Reference detecting Product and relevant details and we'll check it out.