Advice Request McAfee detection: Suspect!

[fabiobr]

Does someone know what is that? Real? False positive?

I have no idea what software is that.

 

[Divine_Barakah]

Was the detection originated from Real Protect component? Have you tried uploading the detected file to VT?

 

[silversurfer]

Does someone know what is that? Real? False positive?

I have no idea what software is that.

Looks like a file packed as archive (.cab)

.CAB File Extension - How to open .cab files

Verified information about the .cab file format and a list of apps that open .cab files.

fileinfo.com

A CAB file is a Windows Cabinet file saved in an archive format native to Microsoft Windows that supports .ZIP, Quantum, and LZX data compression algorithms. CAB files contain compressed data and is used for Windows software installations such as system files, network components, and device drivers.

 

[struppigel]

Seems to be related to KnowBe4 RanSim - a ransomware simulator. I found it here using the same folder in the package cache: RanSimSetup.exe (MD5: 39545865CE9ACE414FC4F29EC6C8673E) - Interactive analysis - ANY.RUN
Website of the product: Ransomware Simulator | KnowBe4

It's correct that a malware simulator is detected by AV.

 

[gery79]

why not ask the support

 

[fabiobr]

Seems to be related to KnowBe4 RanSim - a ransomware simulator. I found it here using the same folder in the package cache: RanSimSetup.exe (MD5: 39545865CE9ACE414FC4F29EC6C8673E) - Interactive analysis - ANY.RUN
Website of the product: Ransomware Simulator | KnowBe4

It's correct that a malware simulator is detected by AV.

Thanks!

I didn't even remember that one time I tried it.