Advice Request McAfee detection: Suspect!

[fabiobr]

Does someone know what is that? Real? False positive?

I have no idea what software is that.

 

[Divine_Barakah]

Was the detection originated from Real Protect component? Have you tried uploading the detected file to VT?

 

[silversurfer]

Does someone know what is that? Real? False positive?

I have no idea what software is that.

Looks like a file packed as archive (.cab)

CAB File - What is a .cab file and how do I open it?

Learn about .CAB files and view a list of programs that open them.

fileinfo.com

A CAB file is a Windows Cabinet file saved in an archive format native to Microsoft Windows that supports .ZIP, Quantum, and LZX data compression algorithms. CAB files contain compressed data and is used for Windows software installations such as system files, network components, and device drivers.

 

[struppigel]

Seems to be related to KnowBe4 RanSim - a ransomware simulator. I found it here using the same folder in the package cache: RanSimSetup.exe (MD5: 39545865CE9ACE414FC4F29EC6C8673E) - Interactive analysis - ANY.RUN
Website of the product: Ransomware Simulator | KnowBe4

It's correct that a malware simulator is detected by AV.

 

[gery79]

why not ask the support

 

[fabiobr]

Seems to be related to KnowBe4 RanSim - a ransomware simulator. I found it here using the same folder in the package cache: RanSimSetup.exe (MD5: 39545865CE9ACE414FC4F29EC6C8673E) - Interactive analysis - ANY.RUN
Website of the product: Ransomware Simulator | KnowBe4

It's correct that a malware simulator is detected by AV.

Thanks!

I didn't even remember that one time I tried it.