Home

Malware hash match from Linqpad installer?

Hello,
One of my users has requested your application on their workstation at the office. We analysed the installer and saw it drops two files that are suspected to be malicious. (Matched by hash to Malware)
C:\Users\user~1\AppData\Local\Temp\is-0L958.tmp\_isetup\_shfoldr.dll
MD5: 92DC6EF532FBB4A5C3201469A5B5EB63

C:\Users\user~1\AppData\Local\Temp\is-1BBT9.tmp\LINQPad5Setup.tmp
MD5: 1305181DE520F125AEABF85DC24A89D6
These files have been seen in Keyloggers and other known Malware. Can you inform us what their purpose is inside your program?

Thanks!

Comments

Sign In or Register to comment.