Proc.Run.PE - false positive?

[cinder]

Hi team,

Could you please let me know if this is a false positive? I am getting '[6692] svchost.exe; C:\Windows\System32\scvhost.exe'

I read another thread where you addressed this and I downloaded Process Explorer and I found process 6692, however it was listed as Google Chrome. There were many instances of svchost.exe so I did not know which to create the dump file.

Any help please?

Thanks.

[Curson]

Hi cinder,

Please reboot your computer and redo a scan. Don't delete/terminate anything.
Then, please post the JSON scan report with your next reply.

Regards.

[cinder]

Hi Curson,

I did this and the scan was fine. All ok then?

Thanks.

[Curson]

Hi cinder,

Yes. A svchost process had propably crashed and had to be relanched.
Please post again if the issue still happens.

Regards.

[cinder]

No worries, thanks for the help!

[Curson]

Hi cinder,

You are very welcome.

Regards.