FF273E9370A1B116405A7F4775E0AED49EFE6BBEA9441DD05E4ADC0F257791D3
{
"applicationVersion" : "4.4.0.117",
"chromeSyncResetQueryRequested" : false,
"chromeSyncResetQueryResult" : false,
"clientID" : "MbamUI",
"clientType" : "fullUIScan",
"componentsUpdatePackageVersion" : "1.0.1344",
"coreDllFileVersion" : "3.0.0.1164",
"cpu" : "x64",
"dbSDKUpdatePackageVersion" : "1.0.42193",
"detectionDateTime" : "2021-06-24T21:45:14Z",
"fileSystem" : "NTFS",
"id" : "75882148-d535-11eb-b0bc-00ff654cccc4",
"isUserAdmin" : true,
"licenseState" : "free",
"linkagePhaseComplete" : true,
"loggedOnUserName" : "MarcPc\\Marc",
"machineID" : "",
"os" : "Windows 10 (Build 19042.1052)",
"schemaVersion" : 19,
"sourceDetails" : {
"aggressiveMode" : false,
"clientMetadata" : {
"jobId" : "",
"scheduleId" : "",
"scheduleTag" : ""
},
"ddsigEnabled" : true,
"filesScannedByIG" : 7,
"objectsScanned" : 353122,
"scanEndTime" : "2021-06-24T21:50:13Z",
"scanOnlineStatus" : "online",
"scanOptions" : {
"pumHandling" : "detect",
"pupHandling" : "detect",
"scanArchives" : true,
"scanFileSystem" : true,
"scanMemoryObjects" : true,
"scanPUMs" : true,
"scanPUPs" : true,
"scanRookits" : true,
"scanStartupAndRegistry" : true,
"scanType" : "threat",
"useHeuristics" : true
},
"scanResult" : "completed",
"scanStartTime" : "2021-06-24T21:45:14Z",
"scanState" : "completed",
"shurikenEnabled" : true,
"type" : "scan"
},
"threats" : [
{
"ddsSigFileVersion" : "",
"linkedTraces" : [

],
"mainTrace" : {
"archiveMember" : "",
"archiveMemberMD5" : "",
"cleanAction" : "quarantine",
"cleanContext" : {
"fileReplaceData" : {
"replacementDataFileName" : "C:\\PROGRAMDATA\\MALWAREBYTES\\MBAMSERVICE\\tmp\\EXPLORER.EXEf954549c-d535-11eb-89e8-00ff654cccc4-r.mbam"
}
},
"cleanResult" : "successful",
"cleanResultErrorCode" : 0,
"cleanTime" : "2021-06-24T21:50:27Z",
"generatedByPostCleanupAction" : false,
"hubbleRequestErrorCode" : 0,
"id" : "f9a27c62-d535-11eb-ab32-00ff654cccc4",
"igExitCode" : "",
"isPEFile" : true,
"isPEFileValid" : true,
"isWhitelistedByAdsInfo" : false,
"linkType" : "none",
"objectMD5" : "800EF617DDC3C635CD25E20E0EC39CC6",
"objectPath" : "C:\\USERS\\MARC\\DESKTOP\\EXPLORER.EXE",
"objectSha256" : "100F6AB2737F1AF0746D6650D9DDD0E4B56A9A8583DD087DF64DECA62E77F65B",
"objectSize" : -1,
"objectType" : "file",
"resolvedPath" : "C:\\Users\\Marc\\Desktop\\explorer.exe",
"suggestedAction" : {
"archiveDir" : false,
"chromeExtensionOther" : false,
"chromeExtensionPreferences" : false,
"chromeExtensionSecurePreferences" : false,
"chromeExtensionSyncData" : false,
"chromeUrlOther" : false,
"chromeUrlSecurePreferences" : false,
"chromeUrlSyncData" : false,
"chromeUrlWebData" : false,
"disableHubbleWhiteListing" : false,
"disableSignatureWhiteListing" : false,
"fileDelete" : false,
"fileReplace" : true,
"fileTxtReplace" : false,
"folderDelete" : false,
"isChromeObject" : false,
"isDDS" : false,
"isDoppleganging" : false,
"isExternalDetection" : false,
"isPUP" : false,
"isShuriken" : false,
"isWMIEventConsumer" : false,
"killProcess" : false,
"minimalWhiteListing" : false,
"moduleUnload" : false,
"noLinking" : true,
"physicalSectorReplace" : false,
"priorityHigh" : false,
"priorityNormal" : false,
"priorityUrgent" : true,
"processUnload" : false,
"regKeyDelete" : false,
"regValueDelete" : false,
"regValueReplace" : false,
"shortcutReplace" : false,
"silentMode" : false,
"singleDelete" : false,
"treatAsRootkit" : true,
"useDDA" : true,
"verifyResolvedPath" : true,
"whitelistCheckError" : false
}
},
"ruleID" : 293543,
"ruleString" : "",
"rulesVersion" : "0.0.0",
"srcEngineComponent" : "ame",
"srcEngineThreatNames" : [

],
"threatID" : 5651,
"threatName" : "RiskWare.HeuristicsReservedWordExploit"
},
{
"ddsSigFileVersion" : "",
"linkedTraces" : [

],
"mainTrace" : {
"archiveMember" : "",
"archiveMemberMD5" : "",
"cleanAction" : "quarantine",
"cleanContext" : {
},
"cleanResult" : "successful",
"cleanResultErrorCode" : 0,
"cleanTime" : "2021-06-24T21:50:28Z",
"generatedByPostCleanupAction" : false,
"hubbleRequestErrorCode" : 0,
"id" : "06e4ac56-d536-11eb-84e4-00ff654cccc4",
"igExitCode" : "",
"isPEFile" : true,
"isPEFileValid" : true,
"isWhitelistedByAdsInfo" : false,
"linkType" : "none",
"objectMD5" : "72A56FCC22AD0F507269C9C4159AB29B",
"objectPath" : "C:\\USERS\\MARC\\DOWNLOADS\\FFSETUPLITE5.6.0.0.EXE",
"objectSha256" : "43ADFF34FE971D51B53C19DE97FFAC37DAF8FA5CF545FD3D3E65D097853E74E8",
"objectSize" : 1558096,
"objectType" : "file",
"resolvedPath" : "C:\\Users\\Marc\\Downloads\\FFSetupLite5.6.0.0.exe",
"suggestedAction" : {
"archiveDir" : false,
"chromeExtensionOther" : false,
"chromeExtensionPreferences" : false,
"chromeExtensionSecurePreferences" : false,
"chromeExtensionSyncData" : false,
"chromeUrlOther" : false,
"chromeUrlSecurePreferences" : false,
"chromeUrlSyncData" : false,
"chromeUrlWebData" : false,
"disableHubbleWhiteListing" : true,
"disableSignatureWhiteListing" : true,
"fileDelete" : true,
"fileReplace" : false,
"fileTxtReplace" : false,
"folderDelete" : false,
"isChromeObject" : false,
"isDDS" : false,
"isDoppleganging" : false,
"isExternalDetection" : false,
"isPUP" : true,
"isShuriken" : false,
"isWMIEventConsumer" : false,
"killProcess" : false,
"minimalWhiteListing" : false,
"moduleUnload" : false,
"noLinking" : false,
"physicalSectorReplace" : false,
"priorityHigh" : false,
"priorityNormal" : false,
"priorityUrgent" : false,
"processUnload" : false,
"regKeyDelete" : false,
"regValueDelete" : false,
"regValueReplace" : false,
"shortcutReplace" : false,
"silentMode" : false,
"singleDelete" : false,
"treatAsRootkit" : false,
"useDDA" : false,
"verifyResolvedPath" : true,
"whitelistCheckError" : false
},
"winVerifyTrustResult" : {
"expectedError" : false,
"lastErrorCode" : 0,
"wvtCalled" : true,
"wvtResult" : 0
}
},
"ruleID" : 935457,
"ruleString" : "",
"rulesVersion" : "1.0.42193",
"srcEngineComponent" : "ame",
"srcEngineThreatNames" : [

],
"threatID" : 14484,
"threatName" : "PUP.Optional.DotSetupIo.BundleInstaller"
}
],
"threatsDetected" : 2
}