The Shadowserver Foundation (@shadowserver@infosec.exchange)

Despite its association with legitimate software, is often categorized as "suspicious" by Endpoint Detection and Response (EDR) systems. Security researchers and automated analysis tools have noted several behaviors that trigger these alerts: