Malware hash match from Linqpad installer?

spongblob

Hello,
One of my users has requested your application on their workstation at the office. We analysed the installer and saw it drops two files that are suspected to be malicious. (Matched by hash to Malware)

C:\Users\user~1\AppData\Local\Temp\is-0L958.tmp\_isetup\_shfoldr.dll
MD5: 92DC6EF532FBB4A5C3201469A5B5EB63

C:\Users\user~1\AppData\Local\Temp\is-1BBT9.tmp\LINQPad5Setup.tmp
MD5: 1305181DE520F125AEABF85DC24A89D6

These files have been seen in Keyloggers and other known Malware. Can you inform us what their purpose is inside your program?

Thanks!

JoeAlbahari

Can you forward the links that claim this is malware? Running it through virustotal.com yields no matches.

azerty1983

As I suspected...