Skip to content

Add DLPUserAgent.exe to mpclient.dll#163

Merged
wietze merged 2 commits intowietze:mainfrom
MATTANDERS0N:add-dlpuseragent
Feb 26, 2026
Merged

Add DLPUserAgent.exe to mpclient.dll#163
wietze merged 2 commits intowietze:mainfrom
MATTANDERS0N:add-dlpuseragent

Conversation

@MATTANDERS0N
Copy link
Contributor

Observed this in the wild by a threat actor. Mpclient.dll is called by DLPUserAgent.exe.
image
image

@MATTANDERS0N MATTANDERS0N requested a review from wietze as a code owner February 17, 2026 17:32
@wietze
Copy link
Owner

wietze commented Feb 18, 2026

Hey @MATTANDERS0N would you happen to have a file hash of both/either file?

@MATTANDERS0N
Copy link
Contributor Author

DLPUserAgent.exe - 388c53e8ff438f0cf101fe0322ad8f32bae140ff85da9b71b0fa366a76097408
mpclient.dll - 64ec615c046a59c08f0ddf3fe9f93e0c9e1bed227d980628cc09600e94adcd25

@wietze wietze merged commit 99b33e2 into wietze:main Feb 26, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants