MeltyLauncher falsely detected as Malware.sandbox

[DarthVitrial]

downloaded from https://github.com/MeltyLauncher/MeltyLauncher/releases

 

Scan log:

Malwarebytes Scan Report 2024-09-18 085756.txt

[cli]

Thanks for reporting, I just scanned the file and it is no longer detected.

[DarthVitrial]

It's still being detected for me.

Malwarebytes Scan Report 2024-09-20 085801.txt MeltyLauncher.7z

[cli]

That's weird. Can you clear your hubble cache by doing the following? 

1. Right-Click on the Malwarebytes icon in the system tray
2. Select "Quit Malwarebytes"
3. Navigate to %PROGRAMDATA%\Malwarebytes\MBAMService
4. Delete the file HubbleCache
5. Open Malwarebytes

[Porthos]

@cli I got the same detection when the op reported it and still have it after the Hubble removal.

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 9/20/2024
Scan Time: 5:11 PM
Log File: 4ec3dc10-779d-11ef-a2d9-001a7dda7102.json

-Software Information-
Version: 5.1.11.133
Components Version: 1.0.5044
Update Package Version: 1.0.89475
License: Premium

-System Information-
OS: Windows 10 (Build 19045.4894)
CPU: x64
File System: NTFS
User:

-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 1
Threats Detected: 1
Threats Quarantined: 0
Time Elapsed: 0 min, 8 sec

-Scan Options-
Memory: Disabled
Startup: Disabled
File system: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
Malware.AI.4040850077, C:\MALWARE TEST NO WD\MELTYLAUNCHER\MELTYLAUNCHER.EXE, No Action By User, 1000000, -254117219, 1.0.89475, 3378E11981A0F41FF0DA7A9D, dds, 03009429, AD51C052F453223F7CF518A269ED860C, 5A55B7E0DAD5EFA2A3715605186143D0FF6E2B31A1275164DF28682C24D63A66

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

[cli]

I am not getting a detection on my computer, but added a different way of whitelisting.

Can you scan again to see if it is still detected?

Thanks.

 

[Porthos]

51 minutes ago, cli said:

Can you scan again to see if it is still detected?

Yes still detected. Could this be an issue with the current BETA as both the OP and I are using it?

1cff41f8-77a5-11ef-a3d0-001a7dda7102.zip

MBAMSERVICE.LOG

Edited September 20 by Porthos

[cli]

Interesting, it looks like it might be a BETA version issue. I verified that it was detected on the beta version 5.1.11.133, but not on detected on live version 5.1.10.127.

Will look into what happened here.

[Atribune]

Porthos could you turn on debug logging, then attempt to recreate and get a full set of logs please.

[Porthos]

mbst-grab-results.zip

@Atribune

[Atribune]

Thank you.

[Atribune]

Porthos, are you still able to repro ?

[Porthos]

15 minutes ago, Atribune said:

Porthos, are you still able to repro ?

Yes

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 9/23/2024
Scan Time: 8:45 AM
Log File: 1e0116bc-79b2-11ef-bb4e-001a7dda7102.json

-Software Information-
Version: 5.1.11.133
Components Version: 1.0.5044
Update Package Version: 1.0.89597
License: Premium

-System Information-
OS: Windows 10 (Build 19045.4894)
CPU: x64
File System: NTFS
User:

-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 1
Threats Detected: 1
Threats Quarantined: 0
Time Elapsed: 0 min, 10 sec

-Scan Options-
Memory: Disabled
Startup: Disabled
File system: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
Malware.AI.4040850077, C:\MALWARE TEST NO WD\MELTYLAUNCHER\MELTYLAUNCHER.EXE, No Action By User, 1000000, -254117219, 1.0.89597, 3378E11981A0F41FF0DA7A9D, dds, 03013204, AD51C052F453223F7CF518A269ED860C, 5A55B7E0DAD5EFA2A3715605186143D0FF6E2B31A1275164DF28682C24D63A66

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

[Atribune]

Thanks again Porthos. We have identified the defect in the beta and will have it fixed prior to our next release. 

[tetonbob]

@Porthos a new Beta is available.

Malwarebytes version 5.1.11.133
Component package version 1.0.5048

Can you try a new scan?

[Porthos]

6 minutes ago, tetonbob said:

Can you try a new scan?

Done, no detection.

[tetonbob]

Great, thanks! 

[Porthos]

Just now, tetonbob said:

Great, thanks! 

I do what ever I can around here.

[tetonbob]

And that is much appreciated!