Fusion.dll

[Scallops_Casino]

Hello, first time on boards. Looking to clarify if the following is false positive. Detected shortly after fresh windows 10 pro on re-formatted drive. Please advise is not posting in correct forum.

Thanks

Malwarebytes
www.malwarebytes.com

 

-Software Information-
Version: 4.1.0.56
Components Version: 1.0.920
Update Package Version: 1.0.24204
License: Trial

-System Information-
OS: Windows 10 (Build 18362.836)
CPU: x64
File System: NTFS

File: 1
Malware.Generic.3182892073, C:\USERS\mystery1\APPDATA\LOCAL\TEMP\FUSION.DLL.TMP, No Action By User, 1000000, 0, 1.0.24204, 38C2A4909CDA2736BDB71429, dds, 00729618

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

[cli]

Can you provide the file? Thanks.

[Scallops_Casino]

14 hours ago, cli said:

Can you provide the file? Thanks.

Yes. I am new at this so how would you like me to do this? As an attachment?

[TwinHeadedEagle]

Hi,

You can get the scan report of this detection on this location:

C:\ProgramData\Malwarebytes\MBAMService\ScanResults

If there is more of them with the same date when you performed a scan, please attach them all.

Hopefully this will give us enough data to find and analyze the detected file.

Edited May 22, 2020 by TwinHeadedEagle

[Scallops_Casino]

Here you go. Thanks

 

fusion1.docx

[TwinHeadedEagle]

This was a valid detection. It is a FusionCore bundle that was detected.

[Scallops_Casino]

Hmmmm troubling. Just reformatted so am curious where it came from. Very limited as to what has been installed at this time.

Thanks for checking.

[TwinHeadedEagle]

It was probably a part of the software you tried to install. Many freeware applications have these bundling components integrated as a way of pay per install scheme.