Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    206s
  • max time network
    211s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-es
  • resource tags

    arch:x64arch:x86image:win10-20230220-eslocale:es-esos:windows10-1703-x64systemwindows
  • submitted
    11/03/2023, 18:20

Errors

Reason
Machine shutdown

General

  • Target

    MBSetup-9CC8C5F5.exe

  • Size

    2.5MB

  • MD5

    6b2068e1d2027a8c44a0292220496eaf

  • SHA1

    64f09b577b56c5bc8bbe48d6f3c28f2ae0ebcc9b

  • SHA256

    45f080107243e8515b501ae5081e68b15e02e11c64b09a856074676058e946a9

  • SHA512

    d062cff15fbac58b53aef7d165a94fae82feb7387398846bd3f18471be2488e51d8a12657d058fad8a7d60199adac7af2a72dcb138acd9c14fbe564519e15234

  • SSDEEP

    24576:NxluWCEkx/gITyj4HYTvmngOezyr3yNtGs0wd/ZL8Ug+JwNZgCxiIsCA2flywBuz:0WFcGOng5yEGs0wxZN2DxiIq2d3d0

Malware Config

Signatures

  • Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs
  • Downloads MZ/PE file
  • Drops file in Drivers directory 17 IoCs
  • Modifies RDP port number used by Windows 1 TTPs
  • Sets service image path in registry 2 TTPs 2 IoCs
  • Checks BIOS information in registry 2 TTPs 2 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Executes dropped EXE 7 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Registers COM server for autorun 1 TTPs 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 48 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 13 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 6 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 52 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: LoadsDriver 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 23 IoCs
  • Suspicious use of SendNotifyMessage 21 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 20 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:3208
      • C:\Users\Admin\AppData\Local\Temp\MBSetup-9CC8C5F5.exe
        "C:\Users\Admin\AppData\Local\Temp\MBSetup-9CC8C5F5.exe"
        2⤵
        • Suspicious use of NtCreateUserProcessOtherParentProcess
        • Drops file in Drivers directory
        • Suspicious use of WriteProcessMemory
        PID:1276
      • C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe"
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of FindShellTrayWindow
        PID:3672
    • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
      "C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe"
      1⤵
      • Drops file in Drivers directory
      • Executes dropped EXE
      • Loads dropped DLL
      • Enumerates connected drives
      • Drops file in Program Files directory
      • Modifies Internet Explorer settings
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:1976
      • C:\Windows\system32\certutil.exe
        "C:\Windows\system32\certutil.exe" -f -addstore root "C:\Windows\TEMP\MBInstallTempdbe79ee0c04111edaecdda918d48b55a\servicepkg\starfieldrootcag2_new.crt"
        2⤵
        • Modifies data under HKEY_USERS
        PID:4424
      • C:\Windows\system32\certutil.exe
        "C:\Windows\system32\certutil.exe" -f -addstore root "C:\Windows\TEMP\MBInstallTempdbe79ee0c04111edaecdda918d48b55a\servicepkg\msrootca2020.crt"
        2⤵
          PID:4944
        • C:\Windows\system32\certutil.exe
          "C:\Windows\system32\certutil.exe" -f -addstore root "C:\Windows\TEMP\MBInstallTempdbe79ee0c04111edaecdda918d48b55a\servicepkg\SectigoRootCA.crt"
          2⤵
            PID:4856
          • C:\Windows\system32\certutil.exe
            "C:\Windows\system32\certutil.exe" -f -addstore root "C:\Windows\TEMP\MBInstallTempdbe79ee0c04111edaecdda918d48b55a\servicepkg\starfieldClass2CA.crt"
            2⤵
            • Modifies data under HKEY_USERS
            PID:4984
          • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
            "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" /Service /Protected
            2⤵
            • Drops file in Drivers directory
            • Executes dropped EXE
            • Registers COM server for autorun
            • Drops file in System32 directory
            • Drops file in Windows directory
            • Modifies registry class
            • Suspicious use of AdjustPrivilegeToken
            PID:3440
        • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
          "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"
          1⤵
          • Drops file in Drivers directory
          • Sets service image path in registry
          • Checks BIOS information in registry
          • Executes dropped EXE
          • Loads dropped DLL
          • Registers COM server for autorun
          • Enumerates connected drives
          • Drops file in System32 directory
          • Drops file in Program Files directory
          • Drops file in Windows directory
          • Checks processor information in registry
          • Modifies Internet Explorer settings
          • Modifies data under HKEY_USERS
          • Modifies system certificate store
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:2756
          • C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
            "C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
            2⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Suspicious behavior: AddClipboardFormatListener
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            PID:4268
          • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
            ig.exe reseed
            2⤵
            • Executes dropped EXE
            PID:4380
          • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-0.exe
            ig.exe reseed
            2⤵
            • Executes dropped EXE
            PID:708
          • C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe
            "C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe" /wac 0 /status off true /updatesubstatus none /scansubstatus recommended /settingssubstatus none
            2⤵
              PID:1560
          • C:\Windows\system32\AUDIODG.EXE
            C:\Windows\system32\AUDIODG.EXE 0x3f8
            1⤵
              PID:500
            • C:\Windows\system32\LogonUI.exe
              "LogonUI.exe" /flags:0x0 /state0:0xa3ace855 /state1:0x41c64e6d
              1⤵
              • Modifies data under HKEY_USERS
              • Suspicious use of SetWindowsHookEx
              PID:2796

            Network

            MITRE ATT&CK Enterprise v6

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\7z.dll

              Filesize

              1.7MB

              MD5

              461faf68ccc02b0223fd273b630f21fe

              SHA1

              363b8beaa74f0f454c2d544ace9e71a84bc2b4cf

              SHA256

              cb07f3f461e9c267831b1ab93af6dfda1bb51d72e42d73d00d26594f09326be1

              SHA512

              4b671f48e45fdedf50c7f7bb6c8d82a3b98f7502006eb002aaf8ff31f25f9ff1257c7bcc12caf622e43d4ec665b19d978ae3e3762f76def0bc71485ebdb8426f

            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\Actions.dll

              Filesize

              5.0MB

              MD5

              1eff53d95ecaf6bbfffe80d866d8e1dd

              SHA1

              d7ef7d7c77fd04b2c0eb8c16bb3cd08057f6742f

              SHA256

              6dd748f7ca56125cbe158fa3612f08e7312ef58ad5375e6b7ab5532cc16ca0ac

              SHA512

              c59b8e6f0b238a247e64b9c7bb42213dadac1dada63542830a6292361174c935c0c662b2d1aed3fb6100cc4993297b1eaf25e328f2b4613458c4ffca63b9f02d

            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ActionsShim.dll

              Filesize

              2.5MB

              MD5

              e7a4bb8fa34bc5ae8b84bf15442da99c

              SHA1

              26e6d20876f01faa32a7a846c12dd35c695d55b6

              SHA256

              9ed946c62c7801779822a83d9126257f6426af381a42ce29d5a3c49c774fc141

              SHA512

              10b007f132cdaa7ea2e75281cd7767b59fd61335d28bc55b778e05479ac993e3578ba1370fe1ce6bf35d271ca970346d5f8cd13637f59fb1fa01c8a6345727b1

            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\BrowserSDKDLL.dll

              Filesize

              5.8MB

              MD5

              1ed53171d00f440f29a12f9beb84dac4

              SHA1

              4d9a1e3579b0999f1ab2fa818b588411e9ee920c

              SHA256

              e659e687a872050f9e65d78992d16bd9b393cf3f8e8c94e0e15fb42b7065327e

              SHA512

              17161cfc672d1b996b8af4ebac17f9a8a3807f38c9a23e2e5b4dadcd9a21c3a64faec9bf59147022a9df88b80f89300f1b537091289bd7a42806bd206a317e6e

            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\CleanControllerImpl.dll

              Filesize

              6.9MB

              MD5

              43fbf5f22dab653a0eb0eb5d45020735

              SHA1

              514d5ac5984a3c317f3a228c0bff859d18968f26

              SHA256

              2a12f432e0fce924e69b32646b668edc15c7c73d51cfcbbdaea001d375bcc5a1

              SHA512

              d9a9efd84c838527026d3e009f23d1fb65980420d2bd3eac09acdef5b16039d34209c91a7a34a0fcc4e949a3504fe12d904796c36c0a3d155f9c3bdfe639dcfe

            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\CloudControllerImpl.dll

              Filesize

              4.8MB

              MD5

              3cad89a85ae704b4e264a03dcbf1de8f

              SHA1

              aacc5111236b95b9044f3228c961345ead3ee5c2

              SHA256

              1f56f70c09fb6b6c92795dedbcfa0626ec29383d53166ef0f179e86a46b33b56

              SHA512

              4efbb0b81392378cd143e1526d94b39434306e7354dbd6326bceb37cc3919f2b84d4ec08b378a35b44a2f93b660623f9112a36f4fb745f34327f9fda8f0e84d2

            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\LicenseControllerImpl.dll

              Filesize

              4.4MB

              MD5

              b7a9a7b44b82e954c1b77e7b7f71ee66

              SHA1

              02f3eabef778d5641eea89d318268e79949da7c6

              SHA256

              ba97bf9a2a0c454dbd965ef7b6c12f582d49391d5297fe2ef4a94bb13d2d472e

              SHA512

              524dee007193cc13ee81e9734564e8a121715f7ecb27d113eb7d8265b7562ab60237aa64c556a819239ee9b4abdc8523a57ca666bdd48de82eca79efba771bc5

            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MBAMCore.dll

              Filesize

              6.3MB

              MD5

              c50e71e52ceb96775bb67c4a6e68dc7a

              SHA1

              0c4ecaabd984deb29c5d6a42a05fc9bb5be8396e

              SHA256

              b35d7d0860270cacebb69580545778cf6b589c8b8827353ac1d7248af6da715f

              SHA512

              aeb46246ad23ea555758c3999a276ffaf1bc08e52e8614af857f0cc1030fbe0015f35ebaf1889000ab329a4b5ead838b2095becdcac772ea17e9b57653728755

            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MBAMShim.dll

              Filesize

              3.0MB

              MD5

              f44b6c80c46c4cf3071b5f5b916e1271

              SHA1

              839f2238ecbbfa80ebf9c1f77eafc78204b58761

              SHA256

              732523df43358729d5e85cceb557d69016dcdd3e2238d903c33c5327c3131fae

              SHA512

              99be164ae96bc4f93dc896d5df445ad1c2f023f10605a8c9857d7ebedfc5b070f50cd33b401d61003e601a06b8446e6c0b5dbddda4927a2e1352407d3b266942

            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll

              Filesize

              4.1MB

              MD5

              c447ffc8af4633daf687e0a943061a60

              SHA1

              2f0a1854d75a82929dcff5308befe3b83439259b

              SHA256

              c01804c902c5532517fa0ceadc91beed01d5ac67adf062b7ce7eaba8272c40bc

              SHA512

              e0d650c35a46063d0e3870e1888d95827050e7792391b8c6ba4b5cd0cf2501cf0eb3aeb1c4a9f524467b6efcc4cb44c8816ba91aa09858c3594d8334a3eb2edf

            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ScanControllerImpl.dll

              Filesize

              5.7MB

              MD5

              ad96e59bd9708c8c8ea5374b056f1ab0

              SHA1

              f9edf0b985ec3b22bc133c418cc99b2577f2f081

              SHA256

              b1731d8ded2243e94f243b92fa5b8c15704118e385b50f3add746588274e12f3

              SHA512

              51fcd39302b36e09483dbce0903db2c76b25a998002d875692d8fa745106e2aab339909d0d6fca3872700042e22160b5469c7c50b87d8b4bd95ced151f4f3a9c

            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SwissarmyShim.dll

              Filesize

              2.6MB

              MD5

              89a38afcfa758e3298609c6c51929593

              SHA1

              2df1ee30adc92bd995526e41fd9c823354de30b4

              SHA256

              4795576483af0c136a71dcee87a0ffb54f0869cae6395ac2ff8312bf555e7161

              SHA512

              cceaed0b9a7517aebd739a377c7bd8987b9ac357be2bf987dbae31d59f2121c5bb9a9bfa2c70a9a54ad65546ef23903176dd6328d93408cb5c991257d59e2717

            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\TelemetryControllerImpl.dll

              Filesize

              5.3MB

              MD5

              8dd27ae0da8393c66c2df6367cd80d01

              SHA1

              4aef9d7c31c0ffb99596ee9acbaeb820247de01c

              SHA256

              e9f40a5e120fb674e2457a8c2a81fc9e7fc44f9c9f17f7053af046e8450f164e

              SHA512

              443ce9cf538704f201064d588c99a4926a8a5f028f739c7d59a03bbfdd8d4f1d1ca02d262754210dcade63741f689da9538f98d9a3bf80c72e0c578645ff92f9

            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\UpdateControllerImpl.dll

              Filesize

              4.4MB

              MD5

              d0b204fb32962798ebd9ab0ad336a83c

              SHA1

              f281b35553afa236a214b910c537ecad0e3bacea

              SHA256

              627db74adff5407a074e94997cb724434478801607c972ff2afdf10d4928bb98

              SHA512

              5d3aa0851b7479d3c6d092052fa8271cb335f54ccac526a01c64745c222f906b6a5ece2fb6637e6dee878cf76af3ad89e0eb7e7686a7061c134a9e8e6d0d3eac

            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

              Filesize

              1.8MB

              MD5

              b0c614d06fac08aad26ae7a81c41eca0

              SHA1

              096d6c6c0c0a9968daf890210684d76054d616a9

              SHA256

              8038a9bd13139254718ec7300ee4eb87db3d2b1d747570b55f5ed84d9dc4daa5

              SHA512

              6a9af994fb79f2ffb0084acbe59e0a25bc0e366cf976caf75da4fefff976ba081f5a5b2780b4414683c9febeb43f991da7bb767a0b5274bcc588a97c935f1963

            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\pkgvers.dat

              Filesize

              75B

              MD5

              5c105b69806d4d880a2cdb7be7a98f55

              SHA1

              4b7e9074b4ade12d5934ed74bb42a16e04b02fb6

              SHA256

              10ea1eca96398cb059f128f6b504c5e3cc6be3595fbc50fbfe32a02363051b9a

              SHA512

              1eabf64776573d6355b18fd162f7391883e905d8f6d957407b8ba15fb169ebd01bb2619b74e88d224ffd57097fe6e8a1f6ce3c83e8158875d6244d815fb5dcf9

            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\sample.dll

              Filesize

              528KB

              MD5

              8a6712fd2c6710dfd194add06803f150

              SHA1

              d1bc36913b4be572f694ce612eff51f65b183811

              SHA256

              df553c89f1742c74eba9cd2d9dc3019ed5889ebd0cc5d0a73ed441b5ecdd7b45

              SHA512

              8db67819451114455e7b3938c9dac7e41e9705744faa50e63ccb50d0663b6913e5093d4d1bf46e1e37d17cedc2d3f44d4156319f507239e60e069a32341324bf

            • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\version.dat

              Filesize

              47B

              MD5

              8b82f11f0437c5430d80e3e33a9c5c49

              SHA1

              20e9b4dfe61d81111791c57c8267998287a5cbe0

              SHA256

              9ba49bb6cb6a54d9a3e0e954e7aa98b6a48e0ffd16f8bcdbe4bed9d4743d21f1

              SHA512

              37db2c4ef4b94a2e6c487de5345da97f844b1af54ac2e7a044601b3a3fd5b6515a65d4d840c155c2122324c8c3fd27af973669dad31fa4109966c996f841275e

            • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\Global.nm

              Filesize

              316KB

              MD5

              814a8ac81d48df6c50a693f116de8800

              SHA1

              a460115c85b19a3c7f38e234ab4277f74ef714d2

              SHA256

              bc2bda6d7cefe6a309fd5fcf69450604a904ee67ae66c715b39e58b201de0003

              SHA512

              b7c07b180f397e2babcb19f202b8127dacc98eaee7922ba7971ef6c17847bbd0bb4ec9f0aa86a271e9970cd155adcbf8999270f70a2e4f6e88c7fb95c0e8a93d

            • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\Global.sr

              Filesize

              23.8MB

              MD5

              0b586d98258439be24c7af28b7e49261

              SHA1

              d96b7ee2eb87187896ae56f8127a8b6b708f80a5

              SHA256

              2fec48ebbaa6eeafe8c96ee5d5516402067e392f3b2f73dbe8dff8d91a389eaa

              SHA512

              4cf9669dbe246309df3cb9631f430755e7545c932c8eaa31f6eff3c4e08d34cb13b1b110bd0367d33bb9bf6de3387dbc0e279f0778f9ca6b69b5132c92096aec

            • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\cfg.bin

              Filesize

              639B

              MD5

              544a36063346eeb1e751030008a9f7e3

              SHA1

              b5c44a037d16bfd5cfe0e6ba9cb770111b3aac82

              SHA256

              33a822063dc53b5a693b5920f6a14bf4c9c1905c08b3257b7621c9f0c41d39d6

              SHA512

              fb86ef1c271d10da364654b244253a4492b8331d69e2a71479671a44f613b88a72822b5a849159b63b7b28c7cbe0c6b7ed35f82cf749a598b23676fae70f279c

            • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\clean.mbdb

              Filesize

              10KB

              MD5

              c04599b35e8b9b5c9702b07c182fbb00

              SHA1

              582b9a917c7fd1ad89055fc43c2acac34ce9b75e

              SHA256

              d7dec540a736235f4aa148bb5d84b8ee826bb6f9d3bdf28a33e44f86709f781a

              SHA512

              a4e690ca327ea4afa16aa0d6ec3ad6a51c5f3e58d9a55edd6dbba63d375f26ebf49eae7fd9cb50a18c947b47fe428281ac5a9c067a404e6f8f49af0970270a8f

            • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbmanifest2.dat

              Filesize

              924B

              MD5

              1b53ffea0e47820fe12791a32524fa95

              SHA1

              89a67447181b287e2c79b40549a0761a284a351c

              SHA256

              4efc1dfbe4d0a66f51e76cbc8e7448b5312dd4ce597fd269bf3f4a310160d273

              SHA512

              c4a457768076b31878600872bcb463018138c5c0367a8bbdcd89ed7be4a2d2ab9ce5e14db451a7a9ee83eb9a4d1074143bbe09dfe9f62a3e8bd3fa80f22de042

            • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dynconfig.dat

              Filesize

              39KB

              MD5

              10f23e7c8c791b91c86cd966d67b7bc7

              SHA1

              3f596093b2bc33f7a2554818f8e41adbbd101961

              SHA256

              008254ca1f4d6415da89d01a4292911de6135b42833156720a841a22685765dc

              SHA512

              2d1b21371ada038323be412945994d030ee8a9007db072484724616c8597c6998a560bc28886ebf89e2c8919fb70d76c98338d88832351823027491c98d48118

            • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\exclusions.txt

              Filesize

              23KB

              MD5

              aef4eca7ee01bb1a146751c4d0510d2d

              SHA1

              5cf2273da41147126e5e1eabd3182f19304eea25

              SHA256

              9e87e4c9da3337c63b7f0e6ed0eb71696121c74e18a5da577215e18097715e2f

              SHA512

              d31d21e37b0048050b19600f8904354cff3f3ec8291c5a7a54267e14af9fb88dfb6d11e74a037cc0369ade8a8fb9b753861f3b3fb2219563e8ec359f66c042db

            • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\instuuid.dat

              Filesize

              8B

              MD5

              cdd7835b0ce4c3d94cd11e4ecf828937

              SHA1

              07d0bdc9f6b072a8fb2ade4d312266e64a7c1b22

              SHA256

              e03d5dd4f308168e4fc45348b0bcda249d5684d0bbd658d26807e028fb6eb605

              SHA512

              786295745f594a7ff62f94b22886890596b2acd5267be6411677d7f9e1c50a3043b5be1ec40c331e4c81d54711d305adf6fdea5f25479efab19c8fdffef67a8e

            • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\mbdigsig2.dat

              Filesize

              514B

              MD5

              a2f272d2fa33895d231213b124c20179

              SHA1

              543faae364c952cbb459055961e145ab5e0cd572

              SHA256

              7589a49e829d80a3ea9927d176c0d82c2959ffbda58306a015be9bd10761e7e4

              SHA512

              3b747470843fa3585c8191bed347e1176270d68cbe360df098de34b03c801ea91fcee28bb61f1682e5970d5516cbeb79dc337b92648479fb3048ea0a36c8f3d6

            • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\prot.mbdb

              Filesize

              24B

              MD5

              546d9e30eadad8b22f5b3ffa875144bf

              SHA1

              3b323ffef009bfe0662c2bd30bb06af6dfc68e4d

              SHA256

              6089fbf0c0c1413f62e91dc9497bedc6d8a271e9dc761e20adc0dccf6f4a0c1f

              SHA512

              3478f5dcf7af549dd6fe48ad714604200de84a90120b16a32233b6d44fa7240f5f4e5fe803f54b86bbdfd10fa1bfdd88fb85eb6a78e23e426933f98d0a2565ec

            • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\rdefs.mbdb

              Filesize

              24B

              MD5

              2f7423ca7c6a0f1339980f3c8c7de9f8

              SHA1

              102c77faa28885354cfe6725d987bc23bc7108ba

              SHA256

              850a4ea37a0fd6f68bf95422d502b2d1257264eb90cc38c0a3b1b95aa375be55

              SHA512

              e922ac8a7a2cde6d387f8698207cf5efbd45b646986a090e3549d97a7d552dd74179bd7ac20b7d246ca49d340c4c168982c65b4749df760857810b2358e7eb69

            • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\rules.mbdb

              Filesize

              21.6MB

              MD5

              0de4c0f73b0c0e097a6268722ef08bc6

              SHA1

              7b811b4e4c1594f9a9a7e8fabdd785acfc8d5af5

              SHA256

              78796a32042fd38a66e131c1e5d60ff6c9bbf0167f688db6ad01e3cec312b19c

              SHA512

              ba3e368b016c888cd129ca595ac96bc6ee70e3d12dd269ae740fa507a69b7ff3e586ff17d8752f70395a50123f194322bf897ede18081b9d15da818e9fe09691

            • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\scan.mbdb

              Filesize

              1.4MB

              MD5

              4d154cef7cc6df6b34e5fe74a2ab8f6c

              SHA1

              03b25deb9217acac02ce0b9a3962f61803633698

              SHA256

              2a5283d90c4bd2db76262363e9841b5cf6b249401b835bdad4baa9fe002d03d4

              SHA512

              afd6f31e4716543a34891f709cfd3654d47934ecb5fce854884e9e021feb082c2e884f4b3a1dfa6fcf0668c41d4838edfebaf3b3741b6215a1472b8782cd1a21

            • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\tids.mbdb

              Filesize

              235KB

              MD5

              5f523758445d14e99ad4be6b180a6575

              SHA1

              ca7505ec8dd5e9898d4ef00bac9f140072425705

              SHA256

              97ea10081b206a79086a5ebec43dd29e4dec7d774c5984d0b4fc4016168a84c6

              SHA512

              ef890c2397db59982f9ad431342d80d787b24616e68c0127c4d3f50f315b0a179a40d46f2aea076d942e4aa7c61e0f841fceb791c74fb34cceb837c791ecbae7

            • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\wprot2.mbdb

              Filesize

              39.3MB

              MD5

              10cada49102a53bc5aada3e5aab8efac

              SHA1

              90b1732ba1126d225468b9d7995868f9b6e0e628

              SHA256

              e5467e664fa0bf718cb92d1623749e7dd9cc2b08bd05da8f9f2c6cecc02cd45a

              SHA512

              c945d89aac273d5955c39c47e53d4cb972f1094b63f16c22887e8418c8a8cf4b99e596cca518899e0f606924153f22db92a70a038e93044e2bb986804e60453f

            • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe

              Filesize

              8.6MB

              MD5

              a8b8fc960947f7cf2719a5c4a850970f

              SHA1

              f4636f549e4f2ccf409b8ad5b2d670cc8addadc8

              SHA256

              42e6b0f3399af4ea3e5e9296dc8ea5b2433b71075680d8fc897ba466c493372c

              SHA512

              017715c5400e167cd3499f70bda4a715fe4c71ba527b891ab5cffdad5cd6c00755784775413704b56812d656a1cfe510aba6ffad3f1d2024882238a32508b803

            • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe

              Filesize

              8.6MB

              MD5

              a8b8fc960947f7cf2719a5c4a850970f

              SHA1

              f4636f549e4f2ccf409b8ad5b2d670cc8addadc8

              SHA256

              42e6b0f3399af4ea3e5e9296dc8ea5b2433b71075680d8fc897ba466c493372c

              SHA512

              017715c5400e167cd3499f70bda4a715fe4c71ba527b891ab5cffdad5cd6c00755784775413704b56812d656a1cfe510aba6ffad3f1d2024882238a32508b803

            • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

              Filesize

              8.7MB

              MD5

              55cf151e0ceae43ac17101f79f4f82a1

              SHA1

              1ad4ec5dfbe24b1f2f3e6dff3b4cad79a56edcb3

              SHA256

              b6f2f8bf872cf318929612e2ec0b980f4e0816d633a4633f9ad1cab021cfb93e

              SHA512

              4cbc805a2b748d912337f2b9ae4205785b11f40cab0f9a490e91474b3a0635c8f5f56d269f79799ad338c0ee3cc8b69e196dcde27226ab75ce9db9cfb2233cb5

            • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

              Filesize

              8.7MB

              MD5

              55cf151e0ceae43ac17101f79f4f82a1

              SHA1

              1ad4ec5dfbe24b1f2f3e6dff3b4cad79a56edcb3

              SHA256

              b6f2f8bf872cf318929612e2ec0b980f4e0816d633a4633f9ad1cab021cfb93e

              SHA512

              4cbc805a2b748d912337f2b9ae4205785b11f40cab0f9a490e91474b3a0635c8f5f56d269f79799ad338c0ee3cc8b69e196dcde27226ab75ce9db9cfb2233cb5

            • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

              Filesize

              8.7MB

              MD5

              55cf151e0ceae43ac17101f79f4f82a1

              SHA1

              1ad4ec5dfbe24b1f2f3e6dff3b4cad79a56edcb3

              SHA256

              b6f2f8bf872cf318929612e2ec0b980f4e0816d633a4633f9ad1cab021cfb93e

              SHA512

              4cbc805a2b748d912337f2b9ae4205785b11f40cab0f9a490e91474b3a0635c8f5f56d269f79799ad338c0ee3cc8b69e196dcde27226ab75ce9db9cfb2233cb5

            • C:\Program Files\Malwarebytes\Anti-Malware\MbamElam.cat

              Filesize

              10KB

              MD5

              60608328775d6acf03eaab38407e5b7c

              SHA1

              9f63644893517286753f63ad6d01bc8bfacf79b1

              SHA256

              3ed5a1668713ef80c2b5599b599f1434ad6648999f335cf69757ea3183c70c59

              SHA512

              9f65212121b8a5d1a0625c3baa14ef04a33b091d26f543324333e38dcdb903e02ccc4d009e22c2e85d2f61d954e0b994c2896e52f685003a6ef34758f8a650c7

            • C:\Program Files\Malwarebytes\Anti-Malware\MbamElam.inf

              Filesize

              2KB

              MD5

              c481ad4dd1d91860335787aa61177932

              SHA1

              81633414c5bf5832a8584fb0740bc09596b9b66d

              SHA256

              793626d240fd8eefc81b78a57c8dfe12ea247889b6f07918e9fd32a7411aa1c3

              SHA512

              d292e028936412f07264837d4a321ecfa2f5754d4048c8bcf774a0e076e535b361c411301558609d64c71c1ce9b19e6041efa44d201237a7010c553751e1e830

            • C:\Program Files\Malwarebytes\Anti-Malware\MbamElam.sys

              Filesize

              20KB

              MD5

              9e77c51e14fa9a323ee1635dc74ecc07

              SHA1

              a78bde0bd73260ce7af9cdc441af9db54d1637c2

              SHA256

              b5619d758ae6a65c1663f065e53e6b68a00511e7d7accb3e07ed94bfd0b1ede0

              SHA512

              a12ccf92bead694f5d3cba7ff7e731a2f862198efc338efc7f33a882fe0eb7499fb3fb533538d0a823e80631a7ca162962fbdfd78e401e3255672910b7140186

            • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json

              Filesize

              593B

              MD5

              9d40914c6bb93f2a93f4412be0a34610

              SHA1

              a682468be8725b18882f4a068e9a694fbaa86bd6

              SHA256

              0e9539e273cc3a5c72d19ec9569e94659c53d2a19e1155aa3da964a8972e0a9e

              SHA512

              4e6070e535a2ac7213efc645cfc895e08da0429de1cf267d54d830723eacaa0f49c48dd00dea30f2fb70cb6f66c5609b7a8ad281dd1bd26fa6925ba601cea238

            • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json

              Filesize

              593B

              MD5

              9d40914c6bb93f2a93f4412be0a34610

              SHA1

              a682468be8725b18882f4a068e9a694fbaa86bd6

              SHA256

              0e9539e273cc3a5c72d19ec9569e94659c53d2a19e1155aa3da964a8972e0a9e

              SHA512

              4e6070e535a2ac7213efc645cfc895e08da0429de1cf267d54d830723eacaa0f49c48dd00dea30f2fb70cb6f66c5609b7a8ad281dd1bd26fa6925ba601cea238

            • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json

              Filesize

              655B

              MD5

              ad577efc320d6d69d61a17d8602196df

              SHA1

              329b22b6dfbdebd7109f74f75fd72fe5e0c278e4

              SHA256

              66ec0ca660415db823256105cd521343bcddcf9fd781584fe5796d4307632eca

              SHA512

              bfa474723ee97f7dcc6b7c6b4acd2386dfc8dd0b863bc6079e28cade2b3a5597cb02dba119d5307c9f6550a7f9056c273461b22a0468940dc26ae51e93d13ee5

            • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json.bak

              Filesize

              593B

              MD5

              9d40914c6bb93f2a93f4412be0a34610

              SHA1

              a682468be8725b18882f4a068e9a694fbaa86bd6

              SHA256

              0e9539e273cc3a5c72d19ec9569e94659c53d2a19e1155aa3da964a8972e0a9e

              SHA512

              4e6070e535a2ac7213efc645cfc895e08da0429de1cf267d54d830723eacaa0f49c48dd00dea30f2fb70cb6f66c5609b7a8ad281dd1bd26fa6925ba601cea238

            • C:\Program Files\Malwarebytes\Anti-Malware\ctlrvers.dat

              Filesize

              8B

              MD5

              c4adda9e23287abf41b82ba55355d509

              SHA1

              d46242e6f124a0c2ec31ec2d3fd5e86f7f56e057

              SHA256

              ff9b4766cb0ef7ec578d377b0a666cebf8e0391e7c42934d57fa5c3972ed3093

              SHA512

              8740b66440a66ac649025be12f4e8d6d869ced97990e5c16378eaab312ca3463ff24ae7dc5a53c2dadca360f495eb5d0546645f698ce4586ad4326bd3c01c761

            • C:\Program Files\Malwarebytes\Anti-Malware\mb4uns.exe

              Filesize

              3.6MB

              MD5

              fe3187138fbc2632ba74c9d3345a2308

              SHA1

              84fc4ab7342961db4cd7df0ac8248ec60a178652

              SHA256

              5d27a3ff32c382e3db4e1b98e116642f60eeb584ee509a1f86f10fec7ca1232d

              SHA512

              8320959b5be4a23024f1c5498f4820ca199eefdb52e6ac93eac18fbc03235e620092ca6a4c05eef68e98e1a8f907f7d27748a6481e38cb82c84a0d8cd49d5549

            • C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe

              Filesize

              22.1MB

              MD5

              d137f842c494fc6ac5ddf3c9a998e167

              SHA1

              e7b169e6bf03ab89321354084f49141bf8acca30

              SHA256

              2733e4ac567971f41139361ab3c73ba82f85c68426d12f1fa5d8cb146c6ea8a1

              SHA512

              bea41c9d1cab848347c6ef2c42abf5438c070408c9e3897b42b6b1236b2e633381736d4d20a469c358c54782c8918f955aca6683e6bb9815dbd4a0dd84dbf17f

            • C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

              Filesize

              8.0MB

              MD5

              0736daa33377faebd2cecb0074f6a80e

              SHA1

              145f65d22dfc2844a98648ced968397498f94fcd

              SHA256

              223a667347180070d721a9b062bac763b69f3d9263a619d31167cefe64a6e94c

              SHA512

              9e80d7f37172e13200b865147f6de69decfb9aef64265be6ec8321cdb71e41847329b5100ecac98d3b54eafb41a523b380c1a82c8559ab19f7db5fefbe58c78b

            • C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll

              Filesize

              2.7MB

              MD5

              b7e5071b317550d93258f7e1e13e7b6f

              SHA1

              2d08d78a5c29cf724bc523530d1a9014642bbc60

              SHA256

              467de01d7cee7ec54166b80658ff22f9feebdb1c24eaf1629cf40e4124508064

              SHA512

              9c35293c95c1a9141740ac99315605964aa37c4a42d3a11cae9e5649ff1427a9480d3d5e7f763212cf13db3511c5ea3c84e68f95f0067fe6339a9d3fb7b27c54

            • C:\Program Files\Malwarebytes\Anti-Malware\offreg.dll

              Filesize

              114KB

              MD5

              16663d125398773a90d0a53333b7cf5e

              SHA1

              f92928ae3c9292588547ceaca1cb1d372bfd7936

              SHA256

              38e6811b47262101759aa51a631263d9e3eee5d211164318a751e078afec4cbc

              SHA512

              091764b8ad80aa31eea0bbd91ee505ebdea2654bc8aeaa3081a061d0d37ab13d27dd203075fd0de10c6687591aa0e36139a38af846c4e34e6aa67ab81dc277df

            • C:\Program Files\Malwarebytes\Anti-Malware\sdk\MBAMSwissArmy.inf

              Filesize

              2KB

              MD5

              0ff3f3ba83e1dc78aa42e205e1a01867

              SHA1

              0a557f31af77bfccccd9530227d593efb4809fd2

              SHA256

              9c5dad17bd0878115a88a4c94405fbd9048294462eea474f265ddddedc90771e

              SHA512

              80543530d28722b926d3aeda4a0c61fc5bea1812e38a3a1b7b84a5a1803c078bc54c32eff23b96766fd5e27301818f105d86235cdddbaa0dc51ac347ed3d7dfd

            • C:\Program Files\Malwarebytes\Anti-Malware\sdk\MBAMSwissArmy.sys

              Filesize

              233KB

              MD5

              1dc6d344ee9b6b024ba23278891db9a5

              SHA1

              519b792d11daa2bf9d127f69cdd603a236576e04

              SHA256

              823e1c7321e177b006c1f3fd1ec8b99607a12d2c3c321f3a6cbbcf7030b6c240

              SHA512

              fb96c4ede03c3aa729d2ea5a72c5f14029f6d69a79b6e0d5449e371bf3acdbbd1cb2079e8bbac3a3140a257c71018bc7a2a31a45ad5c8b65382e67cc3431ab6a

            • C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt.sys

              Filesize

              193KB

              MD5

              172617d364d7913a70f4a4e0d976bb95

              SHA1

              77ac8d3930c0f941b6d72e4f86607030357e1b3c

              SHA256

              b78dbba8786f8a77f3ffac55cf32408f4aa864a8abae4fcd52d4ddfe11f6fdc2

              SHA512

              3a7fe5f436b670723b705eb1a80e01c2840bce0b2922ed1f6c23b32911030f2795f75857008f3805d91e0dcae8f8d92ed23434037ba1c6183fe70f77b636989d

            • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.sys

              Filesize

              217KB

              MD5

              6a21162e1c8a9f65787b14bc439eb077

              SHA1

              1bf68b253edd6cae098144e24e09b4e22178784f

              SHA256

              8b7990e1c676f53918e41f6b18b20179d77e598352d9243b05e2ea22b2d9e4fe

              SHA512

              a0dafe66479b9e68ebf04a7e2fa7c7cc352fb075356b7eccebee7af527393711e3cb36c7ff6466a5e28b17d1d003c1c49ef176b448f5de36a7c8177c9c8808c4

            • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mwac.sys

              Filesize

              177KB

              MD5

              1e12dfd5396809da1c6cc5bcffbea079

              SHA1

              db1aed7c81a618af1053e8c20a8f06facfc0835c

              SHA256

              5afffafc7392d7e587228b50862cbf2c435e45e596148fa05ac3c2d0af7721da

              SHA512

              cbf33ba1c0af4ebe85764a969a8b60fe3e65162f6f8f4eb91790d8aee4c09a7d4e8ee6a438116103fbd966ba2c377ce538801140402711543c402e3a7a375462

            • C:\Program Files\Malwarebytes\Anti-Malware\srvversion.dat

              Filesize

              10B

              MD5

              c0e73d34d83a7138d4089de1e177a8d7

              SHA1

              33b979926be93aeadcc56fdc8a9a786ad5602b7b

              SHA256

              32af1ba639e8ab9b57cd7660a2ed0a575f465541eac842408a3f798844df4a4a

              SHA512

              feb156a5430e1ffae298ab08f2e70210996048ef689dd764683d8c7676ba3259a8b2e6522682bc38b6658d829754e6dd8d9fbacfc0013e92edae16711114fe67

            • C:\Program Files\Malwarebytes\Anti-Malware\uipkgver.dat

              Filesize

              6B

              MD5

              9e94f26e0bdd478d4c04984bbee7af09

              SHA1

              2faa997e896c76833739c181ac8a9d43a06d490d

              SHA256

              98bfb5c401b5ddc4bd6b666ffec4037e780478a8ace9afad84567a4d6530b787

              SHA512

              185082a8b6b3868afe36593bfd5eaae910efc9acbe2bbf214da08f58debd6c536184b67def9062e337fcd6133c1c62c2999b16b76c6a9c232d5e751d0813fd6f

            • C:\Program Files\Malwarebytes\Anti-Malware\version.dat

              Filesize

              47B

              MD5

              8b82f11f0437c5430d80e3e33a9c5c49

              SHA1

              20e9b4dfe61d81111791c57c8267998287a5cbe0

              SHA256

              9ba49bb6cb6a54d9a3e0e954e7aa98b6a48e0ffd16f8bcdbe4bed9d4743d21f1

              SHA512

              37db2c4ef4b94a2e6c487de5345da97f844b1af54ac2e7a044601b3a3fd5b6515a65d4d840c155c2122324c8c3fd27af973669dad31fa4109966c996f841275e

            • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

              Filesize

              64KB

              MD5

              ead0d61fc889fec9a71d995a30ed5eb1

              SHA1

              5c144fe8970ed4eea0a7cfb40be156f65ccb4481

              SHA256

              be68774524e6ccbe35e0f76e1cc88ec34e443dd8c32588fd352e4ee24c9c7087

              SHA512

              8661316166c7c0129b3b4c70acf302ecbc382db6120ae2cefb15c9519350559fc049f238e8bb4128f031abada23e544ebf0742d9135586e46fe2b3196313c1e7

            • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

              Filesize

              64KB

              MD5

              782e41d63cbb95c4fcbb43384e24d634

              SHA1

              028075f90a3460d42530af2dde5596c4f65e978a

              SHA256

              e1c4382277a96f1374cf785a3f62625e2321dfbcac845a6bca8f1d9a0f479e08

              SHA512

              dfc4568fb10a2f34d9202117782fa10b16db8f0e5e537c85e2307c9cce1b133a4e8da3b81334ef15734aa37531e407783c39859babf742f028efb9d79a8bab3e

            • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

              Filesize

              86KB

              MD5

              6e01daa318bfd658f941b3067e73715c

              SHA1

              2d34b1b70ce099640488836bd460000233f5c69f

              SHA256

              cd8decf97f38168237f792844a5c0b87a046979975c699b7a4011557244619e8

              SHA512

              526bd01ee9fb476148a445b4d96cd6e44ff916509550ca264cba8d77762af9b13c9ddb8e02eee8dfd4c9df0bd2c5d6918a91c5a73f9d530e8a88c09c2e058d20

            • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json.bak

              Filesize

              47KB

              MD5

              7d4a0a46e15b956a7efc3158290f445c

              SHA1

              76cf76daacd3024491f83b5218627f59c61ef600

              SHA256

              ff4fa75ab69f34a004a70a6a10c03690060560db15504f11362956337af3f694

              SHA512

              60b5da811a489ae16bb51ae2c0c5a9c94316abfa6cf82faea3ced024f381e38dc1be8aa87e272ced65c47c64f867e0dd6de2ffbb40ae1703fffbb24aa0411416

            • C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json

              Filesize

              607B

              MD5

              6d0fb80d79f703a1dae8b8fc63dad3b4

              SHA1

              553e108e5728f972feb781acc31cec04b69b6a83

              SHA256

              ede4e5719444ef9716f10d4e82d3315632feed4e7c03de236c18ba0171247f43

              SHA512

              1a3442ad8b0b89fe98bcc9e6a20a7a2ab33733b99b5bda44bf1dd0b6cf59976a746144c39d7c11aa1b6ec2b3a649da4cb4afd6249a86bc2d8f7c379160563c1c

            • C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json

              Filesize

              608B

              MD5

              0b491c99e3b60f1ce0617125c783ec98

              SHA1

              d561fcacf5e6f6b35fb0cca665296035ad2acdfe

              SHA256

              c57959a5e44a116ad44a7e88700e26052ab6bfdcec5ea359f9ac70c3b3571b2c

              SHA512

              1654adf897fe6a1ec4c71d1240d5164d868c423c93809e1f285fe75227ab035c8f621e7e774ff781fbe1af14cfd93b08d0675d29746fa0ead475906eea0311d7

            • C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json

              Filesize

              808B

              MD5

              0cca2e9c81566997b618d89f2713ff23

              SHA1

              fde65f79954db82507a1036a8704216eb535462b

              SHA256

              c6b8fade8df9a417d9bc9ba974a5f6b0079f298f6fac24b6b6bfddf5a660be9f

              SHA512

              31370dc11554b458cfd0e2243711cde53c2710be8318ed65185520847643ec6c18edbf506c735ae7d2bde6c9927d97dec548506b271c210aacd7804f60eaa4bc

            • C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json

              Filesize

              543B

              MD5

              dd49aa252e12eba08ac57b41c1613093

              SHA1

              044777e78ad3df43edc5ee079a37b08299d864e0

              SHA256

              18402b96921ad3d52d6615514d88dbcd7aa01e1738452a68efc458e97cb02c23

              SHA512

              07a61809868b12773a4b51ab5d94a6989fd3c03a49882b5bddd4d518a129db61ac5dfc5efdaf23b4c1d835f44a62ff0055669f2d5e47203d8a84b6c3ec488ef5

            • C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json

              Filesize

              1KB

              MD5

              de6f2f3c14e0548d4cdc8fcb4f8e001e

              SHA1

              df4cb4bd797676ecf22167739923a9660f97af13

              SHA256

              62fb667af88344080f1fd22549cc9c17cc0c461e07cd36e70ab3c6523ddbebe4

              SHA512

              436b57653fc9bf4eff3d2ef477f6e392db38986802dce51f7619b13d2b6a9a6eb04d5ec9061cb6ad92455bf0b918b3a48075e1df0430d4734acd3359099cd73b

            • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

              Filesize

              9KB

              MD5

              da84301ebc4c3c6fd26828a20f7a4ecf

              SHA1

              0684f36d4d13663273374b92a3f7060bf9edabf6

              SHA256

              be5b0798c20c1641d0a9dcee8f265dceb0765752e0146ce6650e3d392eb7fc1a

              SHA512

              9a0cb802288f705b0efa00dc44f6a9953567341daa529db6c33d348accd763d855bfd04bdba46715a69efede5c743084819a4cec439e7c407d27ed94e3d3791d

            • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

              Filesize

              10KB

              MD5

              78598de8199f3c72e557f1544ad569b4

              SHA1

              16398d6e99e1d494276e7f4d00bf0a79e964681c

              SHA256

              6aa33e8204506e475cb4ce075d5dfdb63834e978f7ac0b45791014b781b330a4

              SHA512

              7f9ff43b065262ac6e655518c5f483e84b94fbd88eb2e62cdea3c85743c98183cee2492268999951235738a66b402235754767c444a1eca3bbf50559bc944c0c

            • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

              Filesize

              10KB

              MD5

              486aba326503e6c895fb8da3b9acf6d0

              SHA1

              4836ec75aa006ffc8f059a9a91686a24ffd66d18

              SHA256

              fea2bcf59ca5d4411ad16c5bf999d51742a7721c22628e74958c1f5aa52df231

              SHA512

              cf6152e11ae3d7283641d1c95d24703bea7fd5a6332d123cdb5f63ce8e8af5db13e7e6c6816e412159f6d2df9c62c85de3b5e877b73871c22a1c9e39d8e48725

            • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

              Filesize

              10KB

              MD5

              c3a23e254d6845354870040cc0162951

              SHA1

              77d09d33a63db34f3a430fcda62103fd9f79d83f

              SHA256

              8220976314188a703d31c49bfbdfb67e035e8eebdd66d05d0c1deed5aabe60e3

              SHA512

              e6b2377157d3fe6581a0cf396b104422ae4c459cef9c6791c92d9cedfa429cec747d3540f0df83aefc24399de49b375e751eeec85227228843b22a3397263227

            • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

              Filesize

              10KB

              MD5

              5a08d329a1f100cbe612c0058cd02f14

              SHA1

              5aea9f9e9ceb0274564258402cc918608222fc0b

              SHA256

              054062efde44faad4257888c98b1a251ab949e5eb9faf723032cc09d40a10a77

              SHA512

              9c108dc59090b012df103b0cce76dee22e8c8e3d085a4d2142848d5514e0dcba49d286d2834bc30d96ffbce6f7c6b34526a287b67fae20bbcd6ba04cb85aeb8e

            • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

              Filesize

              1KB

              MD5

              0a4c6537ded8c31ebcd449056320c537

              SHA1

              1d6f3ba930f96ba09ffa7c4ccca97a95af973ea6

              SHA256

              bffeaa45503bdcf3fec74ff4128cb838737d63f83e76fe3e640a216311c9a812

              SHA512

              bc3cf697d4aa0856e10f204dbffa12f6bc4ee47c07af2f9e521cf28dff9d67e93f855905820e001301be30e0d24811d63ffe8e42348bb21d2721821bf4731a33

            • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

              Filesize

              1KB

              MD5

              866ec74078b6575516c7ab766da70842

              SHA1

              9e0384bc61d60e4442e8a5afdfa747b18fe82ddc

              SHA256

              232daa651c0c93a875a2b6349fc3f350656c59fa2051b99272d23f040b8c49b5

              SHA512

              014fc41986a83fa992e0b404cecdd7cf94b2243c3b337037cf0e389bd4bcf75db8c4dc33af23ea3fc8b6e473992e8f8b7b393a5c300750884d1fc8633e230134

            • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

              Filesize

              128KB

              MD5

              a1baceb4645109abaa2cc4b630b2c5ce

              SHA1

              f29900469c8b5fe65e771ee1ef04910bd33299dc

              SHA256

              b8f9f7e8c32155373603726d170ec3bd7bcfc9676ffa743866858efec4c25b8f

              SHA512

              c2a544389cee901e3f205d2da18af8589a66da5853f9f634a55ef0e1b3976989531c7e601fddffee32a5dd1853b9bd87a7be207e97c19670f3f281647d59afaf

            • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

              Filesize

              256KB

              MD5

              ce3407b7f997a8bffe5f7af409ca15f4

              SHA1

              9a7fbe4c947a7b5f87caba432195fe402ca4753e

              SHA256

              20c622a6adda953b828008115e349c183dd506bd837cfa06ed4623908b044e96

              SHA512

              fa45093cc911edb753154535e87a964a06ac5fd231b5c5aa36dfa438d6ff3ffc6c3ff3d2936b633083cd4481a017a9077d068d6f8cf5f57083b27a9f7307a617

            • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

              Filesize

              331KB

              MD5

              9938b86368d8e73ce55b505dd10dc9bb

              SHA1

              10420ea2c29218b7c6d43c2c2845c45789ff0818

              SHA256

              dba31cfacac0461e487e51dbee04650deae60bdd9d33fb7ca7f858c4e9945f65

              SHA512

              18c1b8d864582ac6ebe34540fef8d3065fc07893814d7840ced69cf42eba80c4e937b2f11b237ec524a5d7fbde9350440073c7ee9a2622f8ade3504e43a5150f

            • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

              Filesize

              320KB

              MD5

              9e168c0163cf05525b35a4174cb390b3

              SHA1

              f40fa88177060bf82cac23ee6563c40336d19526

              SHA256

              42ca32839d8d228e8986e020640cd10cbfd14d19177a3d18126b7f632990051d

              SHA512

              eea8147b32540a65627ab7f0e114337a4b4530aded5234f6babd81b3a448d43c83505df79752b191291ad5b4809abb315ba4663bedfd67889e73a51daf2586c2

            • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

              Filesize

              332KB

              MD5

              71ba6f45c6ff59cded2b5749e915ca82

              SHA1

              536a8e97a4f72279effa44d3a51f2bf321a50612

              SHA256

              f079baedc00fd1af9cb004ef9a8aea7ee115c25b7a1cd570fd6506a58205cda3

              SHA512

              fc8b3dfec1b4b26c40cd3c42abc3fefcc1da1e5c6408a4b5d5d4e735effd58632412194dd33d8721901382a15694b054d83cccef193d0e9d9b4a80a898ac04b4

            • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

              Filesize

              332KB

              MD5

              d7185f1161d07d37c73064116b18277e

              SHA1

              a44a4868fbeb6c64728836dfcb802335f326e9ae

              SHA256

              394f512be40454dbd3065f46ccccbe03ba3c1d29984cab0b8599d664e503f99f

              SHA512

              6970b32f9172017a243d83d05b4b2af66926fd29a46c6920002647171830b0c9f292e80bb711c004de6423604b782a384d3451e9957d7fa75fecfae3179334bf

            • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

              Filesize

              332KB

              MD5

              76d13dfa86e093d65c382a19fa21180a

              SHA1

              148177a5f22e9996e76ee8186638b2619b11b266

              SHA256

              6e4383d113ec03a059d3e7266c95df71b99585d7103b9122cd27bfdf78541ac3

              SHA512

              1a68c326dacb9a6486c594feadd2212b4814a9acfad7144cdb6bd35bf5d6dd6ec73d8a0b98e3d354c4d4f993a70a3e4e1eac13e30cee42ff5888dc4729ecdc7e

            • C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json

              Filesize

              1KB

              MD5

              a332e73a6015a04a672a51fbeca3e690

              SHA1

              746500f815665e3c023d02344f8d74d84d764da4

              SHA256

              2aa8438eb731ea5a323618f008cd00196ea3004bd8bc878fcbe06f6d7fc6366a

              SHA512

              25daf2c2b6624d60f864dffe513566bd50d9ac8f838f7629ca92df4be7ec671e4852a0e389f8325d69024b2f781abe139781b1008c8dc46e0459256454362cbb

            • C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json

              Filesize

              2KB

              MD5

              bd041837fe341ab59b246dde04ae1d7d

              SHA1

              0324625d963272fc6505b1d4f0fd365afbafd786

              SHA256

              fe40293ea3194f51b42fadc574e75ff0edff669e0633e564f265519b8bf71090

              SHA512

              99ffc78286e6db650d3fcba5b2017ad0374e530d4767ecf28159aa2680f8be8792206af72c10224900246feaaa35464eb9a92886ce00b2bc8101c74fc7247a29

            • C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json

              Filesize

              2KB

              MD5

              4304c172527960090a03b9a8ef68ef7b

              SHA1

              db982f7f85d81671d8272e4779bb22b62600fffc

              SHA256

              5f271f21d698a2a1230569fc04592f741f8084c260e544c082dd630a3c60191c

              SHA512

              440a2720e17ca69fb68134c62163e7980eb737d6c29ae5f68c091efcdc59fe987b8723a3506422835c6a833e05dbb1f566d926e0c6c2d5ba8c4ed07d3f978ac0

            • C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json

              Filesize

              2KB

              MD5

              0a60a7ade05b4df86fb90f8a24d9280a

              SHA1

              062077d002c46064ce7ba075034c68b3b833fae4

              SHA256

              4c12e995b2bdde8c7c1af77056a83721299fc561eb18c04db8fc9ce4af775722

              SHA512

              0e62f8d974b165e8ecfe74ee0d21e96796be838584fa8fc4aa75aa2cdfa81d68c8cd2056b7bebc72410664542e188b1bbeaaaba73830b1885bd4e3218780d055

            • C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json

              Filesize

              811B

              MD5

              befa3e18283e82534a78c22cd5781670

              SHA1

              0963a7e10f5f70c4922334f84c605eb7a8bfc883

              SHA256

              265edbb2810c309bb2fdceec323aab17bd243fe9261f0ec0b7024f3b7ddcbe2f

              SHA512

              1e700fb27e854be428597b01f9123ebf87e0b2ba6077eb93a02b9fa227ef9d68b69553551e3147e60f82ce2e15ad1dabd3b5b13817b2441156fbd448c8b1047c

            • C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json

              Filesize

              811B

              MD5

              3ad09623aca3bc40413d0699f15d11e4

              SHA1

              275fbe8bd930a101607fa56d32e25078c89fe62d

              SHA256

              8c75d5d4a2c2c5fbc95232ca25cec219e2302e065864013f9c1ea554deadf6cd

              SHA512

              5a63c1a79d783248f34851f5824f2cedcf8f08c429ff2d70033af2d185141fcd32061c19c4117c9392aa0a93f16e0e54ca9e9b869f07223e403b5c9e69b9c693

            • C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json

              Filesize

              1KB

              MD5

              4a90247eed9ae09d446f74733309b6d9

              SHA1

              a771d7cee7118b890d293d459a0310d5064730cb

              SHA256

              b9029d408017e4ac0be82765e89a38f4f52088560100a07b87f69c5019ce41f9

              SHA512

              75e3a1dfaf5b8542c78416063fda5e1c0398f45c9057ac5cdbf03609a2c659a9927c71495e36ed492e64d30ddf9eca20edcce21ae7185a59c5ce35fffcaa36d5

            • C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json

              Filesize

              1KB

              MD5

              f7eeb9fcdbee7642ea9fa536e8e32cbd

              SHA1

              accbb6b154887d2ef25bc9c5574adcd2c6dbfde2

              SHA256

              095a2a4b9c2fb55248d15cbadcdb779fe9c1957fae26f3cff9fb280cc5b4138e

              SHA512

              6b1b3601303d92b03849a785c271ab9c36dd2c2473e2114491a34ff8b08598f8ce7c9b18f1bc2eaf7cc8006f476560abaab4ee8b4f5573302f05bbdccfbb090a

            • C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json

              Filesize

              1KB

              MD5

              b1d343c9f582b44ae86952297dc964cb

              SHA1

              1f4b5bf373656c34a8e9df9c5ba6bafaf213da54

              SHA256

              e60c6be02e54a3d290d3f5fd833930442cb9241166fa87db99a94e17162c3765

              SHA512

              8df500e9d755c7a7e63a2df7f0762ca4b770f2a4225eaae5f49f7ff4de543d47646ae3ee5d08a12fd3723e521c431b164332293a0dacc9809055644b96791fe2

            • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

              Filesize

              2KB

              MD5

              1678630317be5b2d73235aa0031e613b

              SHA1

              70a81a261a978210a0597be97bc589f7e70b38dc

              SHA256

              22f7fb53753e8d7726c5b612d689549bfc90f5915b87115bd1a20d9a761901df

              SHA512

              64f3407e508c7876c00bc17ccc2191da0bb43b4156ba3b50fa28ba907bcbe8ebaf0cef34147f4cb60e892c287f7e267d3a131ab00c7e24c17e9bf8283ea7fbf9

            • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

              Filesize

              4KB

              MD5

              461e3026bc0cb6d06c89ed4e732de28a

              SHA1

              b93f4609c096646ac1448e641a2978f769237082

              SHA256

              1bad5564750e7346b49b8ea0d26c697ab4a759f477b8fc675b15f0e8e8ed9ffe

              SHA512

              a7f4851458e9037fbe1547d72edacda8ebf63cb5b6b8d8436ac9d9eb330ab3b5ea640fcaf4c31208fc7f2e2bc8e6ca391a5723519f5b047c5ff98247b94e14cd

            • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

              Filesize

              7KB

              MD5

              57ab1291a0c4850278ba40b41f62af58

              SHA1

              d0ca2dad258bd05f02947acbb3bca3b84567a7b1

              SHA256

              ebb6a080d49a79c81671e2f6901f4706c5c468854d394ebec76fe5cdf3cc7605

              SHA512

              360853c633b6cb6c36aebeda55e74fa3b4d730317c89d97d75e359ae652be266526d6e5b6c88a8d1b61835bda9e5141e9e8d7fcd7e9187c4eca8dfa70a67fda8

            • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

              Filesize

              7KB

              MD5

              9ecea69bbe10e8110994a60bd60204b9

              SHA1

              477646a16531566524651dcb17a41b1ac92f316d

              SHA256

              7721bba9c1826db02931ac8ebb77ce6fb8e87af8ecbf4c7b778837d40ba7f14a

              SHA512

              66c8e93154d6b2a277b7c2300d02fd0801af111735fc027963e9d12b4339653889ba027f3d1709778412c0446bab2422a8debc7b89ca924145a84893690898e6

            • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json.bak

              Filesize

              7KB

              MD5

              644fd1859427648fbfd8c8162eb12614

              SHA1

              32a85ebd680f074c9aab7322655318e432e18f47

              SHA256

              a829e031053b2c3354ed8b2368eebe8a1e7d01bab25e5c0fa979c5a6e7631421

              SHA512

              926dc2b41b22604bc1ca00887eecfa05c781984b75e442436e48beb62b8487f52c33955e113a39514bbecd3677b230cd067b6ef0dacf18be48f8f12ed89cb830

            • C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json

              Filesize

              10KB

              MD5

              aae4560f94c07673fbc3a757c5f81edc

              SHA1

              312834234909e306583e65fba8c19bac9cea1220

              SHA256

              78c1393369cebb6df21265fabc0b36b4938af2cc7c52eb1167d955c303044256

              SHA512

              01f5cf03d29f51b6be7da1d25f175c24024346f8237b0bad283a1ce04a0f001a7f33e4dfec927fe83b651dc55107c3185bb8cfa9a0370d5cfbdc394319dae901

            • C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json

              Filesize

              10KB

              MD5

              f541ea0f34e7cc003a1fd55eb0a63f5c

              SHA1

              5eac80ab4671f883aa55a4f5926c49d3069b5c99

              SHA256

              a66be7f7aca6811871f162a58e1a058fabc7119494cab2615854b1636819d6ac

              SHA512

              647196f6d9518a66161f25eff43dc9d9c7526d7b8b5609ac5fb4b456048e82258130bd2ee1a4afe51dacdff17642de7d205ce0ab8b3a8fbc288922434152111c

            • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

              Filesize

              1KB

              MD5

              870153fbcf6b5f8e5be5481d456e69e6

              SHA1

              1c27640d18f7e82439280aa46f887301f9650721

              SHA256

              746cad8f93d9df5f6cf6c1b45d825569d3a641da964182d48c8a1b130f93cc58

              SHA512

              68fc8cbcfd9997ecace910498f6371dd2959d2d945a4803cf2bf499358653a1002919c08562b7c81543c0819942320a55cdf5d6e167f49d08157231f507c6866

            • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

              Filesize

              1KB

              MD5

              2dfef393790f3e861515762554a2c1fd

              SHA1

              870e5ee07216a7485338ee1859e7bf8de9f7dbdb

              SHA256

              fb96e441f52bfbfc80fc7fc959f6c51ad65cc19464457db21db84f7859a3562e

              SHA512

              99c0e4e1603e1e32f1ebab10c4538f6364b7dd33ed98d23bdee53ff0ae16a8bd216692378fd9e1a08a3b98deddfed545e709178a731bfdedb52160a4bba739cb

            • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

              Filesize

              1KB

              MD5

              18605cd6ae25b4c837ef2c0340968fe0

              SHA1

              2eb124a8771cdd2ebb5f42066fe2338d142f5709

              SHA256

              87290fb2e124c5e1fe964c59f5179d0b0e0d7a5758dbb89a5f9a6c59b60247c9

              SHA512

              8e58e784fee4a0683f9abb7622969d104dff5deac1a0d27eec23043563babdd6c1a57f405402c8174d46fea368c28a5cfce900138f1d917a666ffe0559ebba1f

            • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

              Filesize

              1KB

              MD5

              bba7b96fb410dc208c4ed629fccd7d4e

              SHA1

              ae6f78ee0913f80fcb2f30a020c45119225fbfbc

              SHA256

              0fa201af307bc5ba74f9e01cc3ccf380ff58def7009ef4b62b4f39e671ddb4dd

              SHA512

              d8be2d8901b3e0107369c99775ab118f69d4d90049e3796e22798c3d585952effe38eacd756e352e2a98ad85888d13626cbfc2d2c10a330b1fb5e438828045ac

            • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

              Filesize

              1KB

              MD5

              3cf21d1570954ec9c1caaa750b012b2f

              SHA1

              efe4dfaa55fb301edc7fcef0c98727e895e55198

              SHA256

              dd036ab953db8d141cc685bb1bdb84c8ee85a3d8b1a9c6235d47b39796af7d36

              SHA512

              2488bb5663bc3f7b53afafabcb8a69a0c5945690969daf3576b1d0862929bea3931214803a1174c19f911eb177544a3522cba944cc663bbee3115d952e9a73cc

            • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

              Filesize

              1KB

              MD5

              8e4f68a336cd3913bb1cb7b92d76d10e

              SHA1

              4cc6e4220e8b5939981496448b73a039dfd06598

              SHA256

              7510fd2007e52cf8c7937cbef247e907e9a19895289d36e4db9b599a386229c6

              SHA512

              0ef15909f4b3c44969afa59811cc35e5e6cc11395ed10075d66bbe5ee0d45521038427888692d27ea135f61ca50f25f00c4403c704952279fe51c5ece2cf0544

            • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

              Filesize

              1KB

              MD5

              5e6f9bb0ec5ffa181e19803980798ed9

              SHA1

              9e306eee8b358e6b3f165310b53a40c7ed090aad

              SHA256

              9965e9e863e064733f57263d94056a71cb8d021e057839ef4ee99b65fa5c004d

              SHA512

              e9a647afdefeb3d837ea1ab9661810946b46d67342b164965b00e151cfb061f3dfc218cfb7bb9b642cc40a951b5c7804485dd274fb9563cbafee6b32cfab3da1

            • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

              Filesize

              1KB

              MD5

              b0fd6a7111ba36b7302584df4f57d34a

              SHA1

              b6755e3697b35169dc4f88b4577bff22a1952e9b

              SHA256

              c0d31a0146effbad8ae533608853b0803fc22bd142b39bf100143eacdc6a8b99

              SHA512

              68aed2328edbbb64fbab75704c66b0e7cb3abaf11e6dd8f890bea68d51eebd7238ae025d6a2298d89a7095d94caad043d13d138d4d1f6c4bcb8bf2132d16a778

            • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

              Filesize

              1KB

              MD5

              d4e1e5a182eab5b167f0a36e578171e3

              SHA1

              4b37b1d8f063ce44529e4d3d6272aa50fdeca562

              SHA256

              b920161e2f75ce2f40557f916d27d9329c1d95da3a981903d1e9fb135a2bfc35

              SHA512

              1a857f3558f43d9cbeac47c31523582b77b7c76a6ebe7366158250878c990204a9c18617a132981cd3910bf6e45da9945e6a424a49d9b406531f8d839991335a

            • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

              Filesize

              1KB

              MD5

              5fe665e9d80d7bee54629c9707d4dca7

              SHA1

              601b4b613b4a5f6af998b9de8fce389ae255eb82

              SHA256

              23a30722e7d4fed6d451648c7694ee5657731b6c3b1580146a6cdcda2ad3007a

              SHA512

              ef9de23443e2f823fcb30dee1764d45fd9a8150b7237b0e6e054376ff89b7bea73793fb75ccea8a897139327f9b597b280792066ec3922781b26661292b3e736

            • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

              Filesize

              1KB

              MD5

              96d6b1c244282448062fc41e6a001298

              SHA1

              dfd4f32a04b5a49abe69e6e31c2ec1e0b9e110bd

              SHA256

              0bb17d8bb21ccbdb351727f35a21d4cecd2821946fb59e771b9e9fc5704c43b1

              SHA512

              20175d1a64d05deef3509c8b634c11f3025bbefa7daf71aaf0960d14438072f7df6582f4fb63d1247687c77077c6e6c69fc11267e4d94a24247726fa8de8677d

            • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

              Filesize

              1KB

              MD5

              36633d74ac1f0fd0a593dd7dd7e76d73

              SHA1

              17ebe2b1db6ca774774693359f6bdfa8c0987f7f

              SHA256

              dbfe4afbeb7798e3415616c0fd9bbd5e3995059cdaf508443adc16211b3af0b5

              SHA512

              c59c11bf120607a4e1d4d8e2b906a1aafe1f582814c5c7fd17ea441afbbd4563fb3029bc16751f2c56767373328aba060d13a19cc8973a9bf556a3e3ad0d7b24

            • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

              Filesize

              1KB

              MD5

              e6ca56513559d9c1cba6d686b83c9467

              SHA1

              30478243ca6e07f1517f5ce4685f25b1bb37498a

              SHA256

              55832d33c7fcaa274f5e3f5d56a15625572f931aaaff021e8a56d47acc409ecf

              SHA512

              19495f949face361053af9d11c0f4332cd2de97942889c8e91586c4b7deb7a8aef6e3d31c773e7b7f5ad62eeb57ff84aa1e67393037d45629f7ecd44bbaf21f4

            • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak

              Filesize

              1KB

              MD5

              e21f7874b863b1aa316c06be9e60ec5d

              SHA1

              fb6ef2855239973fb0f61460459ea1f4d162d772

              SHA256

              550eeba2827ef7aa9b2219c2851eb2d7fc062ab133f74614bffde1edd1f004ea

              SHA512

              3bdbd5e578a7aaad97d870a14268a196f5a292a3c4f697972a44b31566084d74dd42b0a6cc3a9c59f329a8438cc9005ca12cdaa6f5c5653d1716d4bb32f68632

            • C:\ProgramData\Malwarebytes\MBAMService\config\telemetry.json

              Filesize

              387B

              MD5

              dd63df9fccbff405f31685aa47456d29

              SHA1

              1e7eb3ed951f9c917e079d4a216b6a517bb8c41f

              SHA256

              1afbb7c7ce5c9e0a89dc1c7fe689d535be757cc8e31f9e5dccfc7a8cbf75db72

              SHA512

              3f0bb16081a66e68e707ead74048a232286ce4ec6aa1318104ddb18d5537553a60b0020b793c5f4fc4715ef626ca757173161d77830cceac8447c93c67e03f07

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Actions.dll

              Filesize

              5.0MB

              MD5

              1eff53d95ecaf6bbfffe80d866d8e1dd

              SHA1

              d7ef7d7c77fd04b2c0eb8c16bb3cd08057f6742f

              SHA256

              6dd748f7ca56125cbe158fa3612f08e7312ef58ad5375e6b7ab5532cc16ca0ac

              SHA512

              c59b8e6f0b238a247e64b9c7bb42213dadac1dada63542830a6292361174c935c0c662b2d1aed3fb6100cc4993297b1eaf25e328f2b4613458c4ffca63b9f02d

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\BrowserSDKDLL.dll

              Filesize

              5.8MB

              MD5

              1ed53171d00f440f29a12f9beb84dac4

              SHA1

              4d9a1e3579b0999f1ab2fa818b588411e9ee920c

              SHA256

              e659e687a872050f9e65d78992d16bd9b393cf3f8e8c94e0e15fb42b7065327e

              SHA512

              17161cfc672d1b996b8af4ebac17f9a8a3807f38c9a23e2e5b4dadcd9a21c3a64faec9bf59147022a9df88b80f89300f1b537091289bd7a42806bd206a317e6e

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Global.nm

              Filesize

              316KB

              MD5

              814a8ac81d48df6c50a693f116de8800

              SHA1

              a460115c85b19a3c7f38e234ab4277f74ef714d2

              SHA256

              bc2bda6d7cefe6a309fd5fcf69450604a904ee67ae66c715b39e58b201de0003

              SHA512

              b7c07b180f397e2babcb19f202b8127dacc98eaee7922ba7971ef6c17847bbd0bb4ec9f0aa86a271e9970cd155adcbf8999270f70a2e4f6e88c7fb95c0e8a93d

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Global.sr

              Filesize

              23.8MB

              MD5

              0b586d98258439be24c7af28b7e49261

              SHA1

              d96b7ee2eb87187896ae56f8127a8b6b708f80a5

              SHA256

              2fec48ebbaa6eeafe8c96ee5d5516402067e392f3b2f73dbe8dff8d91a389eaa

              SHA512

              4cf9669dbe246309df3cb9631f430755e7545c932c8eaa31f6eff3c4e08d34cb13b1b110bd0367d33bb9bf6de3387dbc0e279f0778f9ca6b69b5132c92096aec

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\MBAMCore.dll

              Filesize

              6.3MB

              MD5

              c50e71e52ceb96775bb67c4a6e68dc7a

              SHA1

              0c4ecaabd984deb29c5d6a42a05fc9bb5be8396e

              SHA256

              b35d7d0860270cacebb69580545778cf6b589c8b8827353ac1d7248af6da715f

              SHA512

              aeb46246ad23ea555758c3999a276ffaf1bc08e52e8614af857f0cc1030fbe0015f35ebaf1889000ab329a4b5ead838b2095becdcac772ea17e9b57653728755

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\cfg.bin

              Filesize

              639B

              MD5

              544a36063346eeb1e751030008a9f7e3

              SHA1

              b5c44a037d16bfd5cfe0e6ba9cb770111b3aac82

              SHA256

              33a822063dc53b5a693b5920f6a14bf4c9c1905c08b3257b7621c9f0c41d39d6

              SHA512

              fb86ef1c271d10da364654b244253a4492b8331d69e2a71479671a44f613b88a72822b5a849159b63b7b28c7cbe0c6b7ed35f82cf749a598b23676fae70f279c

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\clean.mbdb

              Filesize

              10KB

              MD5

              c04599b35e8b9b5c9702b07c182fbb00

              SHA1

              582b9a917c7fd1ad89055fc43c2acac34ce9b75e

              SHA256

              d7dec540a736235f4aa148bb5d84b8ee826bb6f9d3bdf28a33e44f86709f781a

              SHA512

              a4e690ca327ea4afa16aa0d6ec3ad6a51c5f3e58d9a55edd6dbba63d375f26ebf49eae7fd9cb50a18c947b47fe428281ac5a9c067a404e6f8f49af0970270a8f

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\dbmanifest2.dat

              Filesize

              924B

              MD5

              1b53ffea0e47820fe12791a32524fa95

              SHA1

              89a67447181b287e2c79b40549a0761a284a351c

              SHA256

              4efc1dfbe4d0a66f51e76cbc8e7448b5312dd4ce597fd269bf3f4a310160d273

              SHA512

              c4a457768076b31878600872bcb463018138c5c0367a8bbdcd89ed7be4a2d2ab9ce5e14db451a7a9ee83eb9a4d1074143bbe09dfe9f62a3e8bd3fa80f22de042

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\dynconfig.dat

              Filesize

              39KB

              MD5

              10f23e7c8c791b91c86cd966d67b7bc7

              SHA1

              3f596093b2bc33f7a2554818f8e41adbbd101961

              SHA256

              008254ca1f4d6415da89d01a4292911de6135b42833156720a841a22685765dc

              SHA512

              2d1b21371ada038323be412945994d030ee8a9007db072484724616c8597c6998a560bc28886ebf89e2c8919fb70d76c98338d88832351823027491c98d48118

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\exclusions.txt

              Filesize

              23KB

              MD5

              aef4eca7ee01bb1a146751c4d0510d2d

              SHA1

              5cf2273da41147126e5e1eabd3182f19304eea25

              SHA256

              9e87e4c9da3337c63b7f0e6ed0eb71696121c74e18a5da577215e18097715e2f

              SHA512

              d31d21e37b0048050b19600f8904354cff3f3ec8291c5a7a54267e14af9fb88dfb6d11e74a037cc0369ade8a8fb9b753861f3b3fb2219563e8ec359f66c042db

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\ig.exe

              Filesize

              1.8MB

              MD5

              b0c614d06fac08aad26ae7a81c41eca0

              SHA1

              096d6c6c0c0a9968daf890210684d76054d616a9

              SHA256

              8038a9bd13139254718ec7300ee4eb87db3d2b1d747570b55f5ed84d9dc4daa5

              SHA512

              6a9af994fb79f2ffb0084acbe59e0a25bc0e366cf976caf75da4fefff976ba081f5a5b2780b4414683c9febeb43f991da7bb767a0b5274bcc588a97c935f1963

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\mbdigsig2.dat

              Filesize

              514B

              MD5

              a2f272d2fa33895d231213b124c20179

              SHA1

              543faae364c952cbb459055961e145ab5e0cd572

              SHA256

              7589a49e829d80a3ea9927d176c0d82c2959ffbda58306a015be9bd10761e7e4

              SHA512

              3b747470843fa3585c8191bed347e1176270d68cbe360df098de34b03c801ea91fcee28bb61f1682e5970d5516cbeb79dc337b92648479fb3048ea0a36c8f3d6

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\prot.mbdb

              Filesize

              24B

              MD5

              546d9e30eadad8b22f5b3ffa875144bf

              SHA1

              3b323ffef009bfe0662c2bd30bb06af6dfc68e4d

              SHA256

              6089fbf0c0c1413f62e91dc9497bedc6d8a271e9dc761e20adc0dccf6f4a0c1f

              SHA512

              3478f5dcf7af549dd6fe48ad714604200de84a90120b16a32233b6d44fa7240f5f4e5fe803f54b86bbdfd10fa1bfdd88fb85eb6a78e23e426933f98d0a2565ec

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\rdefs.mbdb

              Filesize

              24B

              MD5

              2f7423ca7c6a0f1339980f3c8c7de9f8

              SHA1

              102c77faa28885354cfe6725d987bc23bc7108ba

              SHA256

              850a4ea37a0fd6f68bf95422d502b2d1257264eb90cc38c0a3b1b95aa375be55

              SHA512

              e922ac8a7a2cde6d387f8698207cf5efbd45b646986a090e3549d97a7d552dd74179bd7ac20b7d246ca49d340c4c168982c65b4749df760857810b2358e7eb69

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\rules.mbdb

              Filesize

              21.6MB

              MD5

              0de4c0f73b0c0e097a6268722ef08bc6

              SHA1

              7b811b4e4c1594f9a9a7e8fabdd785acfc8d5af5

              SHA256

              78796a32042fd38a66e131c1e5d60ff6c9bbf0167f688db6ad01e3cec312b19c

              SHA512

              ba3e368b016c888cd129ca595ac96bc6ee70e3d12dd269ae740fa507a69b7ff3e586ff17d8752f70395a50123f194322bf897ede18081b9d15da818e9fe09691

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\sample.dll

              Filesize

              528KB

              MD5

              8a6712fd2c6710dfd194add06803f150

              SHA1

              d1bc36913b4be572f694ce612eff51f65b183811

              SHA256

              df553c89f1742c74eba9cd2d9dc3019ed5889ebd0cc5d0a73ed441b5ecdd7b45

              SHA512

              8db67819451114455e7b3938c9dac7e41e9705744faa50e63ccb50d0663b6913e5093d4d1bf46e1e37d17cedc2d3f44d4156319f507239e60e069a32341324bf

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\scan.mbdb

              Filesize

              1.4MB

              MD5

              4d154cef7cc6df6b34e5fe74a2ab8f6c

              SHA1

              03b25deb9217acac02ce0b9a3962f61803633698

              SHA256

              2a5283d90c4bd2db76262363e9841b5cf6b249401b835bdad4baa9fe002d03d4

              SHA512

              afd6f31e4716543a34891f709cfd3654d47934ecb5fce854884e9e021feb082c2e884f4b3a1dfa6fcf0668c41d4838edfebaf3b3741b6215a1472b8782cd1a21

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\tids.mbdb

              Filesize

              235KB

              MD5

              5f523758445d14e99ad4be6b180a6575

              SHA1

              ca7505ec8dd5e9898d4ef00bac9f140072425705

              SHA256

              97ea10081b206a79086a5ebec43dd29e4dec7d774c5984d0b4fc4016168a84c6

              SHA512

              ef890c2397db59982f9ad431342d80d787b24616e68c0127c4d3f50f315b0a179a40d46f2aea076d942e4aa7c61e0f841fceb791c74fb34cceb837c791ecbae7

            • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\wprot2.mbdb

              Filesize

              39.3MB

              MD5

              10cada49102a53bc5aada3e5aab8efac

              SHA1

              90b1732ba1126d225468b9d7995868f9b6e0e628

              SHA256

              e5467e664fa0bf718cb92d1623749e7dd9cc2b08bd05da8f9f2c6cecc02cd45a

              SHA512

              c945d89aac273d5955c39c47e53d4cb972f1094b63f16c22887e8418c8a8cf4b99e596cca518899e0f606924153f22db92a70a038e93044e2bb986804e60453f

            • C:\ProgramData\Malwarebytes\MBAMService\pkgvers.dat

              Filesize

              75B

              MD5

              5c105b69806d4d880a2cdb7be7a98f55

              SHA1

              4b7e9074b4ade12d5934ed74bb42a16e04b02fb6

              SHA256

              10ea1eca96398cb059f128f6b504c5e3cc6be3595fbc50fbfe32a02363051b9a

              SHA512

              1eabf64776573d6355b18fd162f7391883e905d8f6d957407b8ba15fb169ebd01bb2619b74e88d224ffd57097fe6e8a1f6ce3c83e8158875d6244d815fb5dcf9

            • C:\Users\Admin\AppData\Local\Temp\mbam\qt-jl-icons\1d338d058e0.ico

              Filesize

              4KB

              MD5

              91a74c169917bee7cb2c8ef9dc74ecbe

              SHA1

              8633b44ae58c4b201078114d925f551b36c549b0

              SHA256

              1e5eaee00708bb44d5d053ee25da5b273ad855b7f49456268dcdebac5d5d5710

              SHA512

              d5274c14e4f1aa99d5ead0cafa5f42fad074092944d6f48c3fb0cc6a311f958f97e23fdeba3c5639fae0751f692f9e5f85dd065baf2638291f2ba2a42c4afb72

            • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\a712c324879904b1.customDestinations-ms

              Filesize

              6KB

              MD5

              701cd10f719ad532e52c216fee9956ec

              SHA1

              65d75b19324d4c37b7bfdb5014421005a454e925

              SHA256

              302204ec8f69a33015bcf86992fe23dcdc1d4f30ec0213d9d5b2a131614178fd

              SHA512

              b2c34f6afdb0ec837976438c70090918197a4ca6e36cb938ad45eca85d35b83185dbec8a758dd9ee09b2a907762578f41d081c9ba4fce0e23660296fd5c0f903

            • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\a712c324879904b1.customDestinations-ms

              Filesize

              3KB

              MD5

              9e6420c3b5daf3618fcfbb7081f78586

              SHA1

              55c7c3a2abc6494d53cf0431631d8bd6154847a6

              SHA256

              62dd5726733781f33293c6bfbe16e299f4b7891bd9aafce44212f7d2ce838287

              SHA512

              2ff4921dcbe015b68cfffc53c2ceb5f5e9be4d72e7fa0b76faa7998dcd7fc847bbf46fda78c175fb3a2a54e199192784a5d5491bb172e1ae3b10da9c3fb23bdf

            • C:\Windows\System32\catroot2\dberr.txt

              Filesize

              181KB

              MD5

              2d7fa6270db84a241c89306dd00967bc

              SHA1

              ab4208fbcdb724a4d9f27ae54c4aa3a9d1cc5ecb

              SHA256

              77772ea882eafaeda8c1ef05269c088ec95a239f8e8ed2d8368c40c258431e1e

              SHA512

              09bc2e4e763c13435bf8a7c8e1aa7c965bf4ac1dd1fd8b350ff806caa903dcd1d26df211ade467e9ea840b897af1453ce84fde2c0a14f9a767e51329f129d73b

            • C:\Windows\TEMP\MBInstallTempdbe79ee0c04111edaecdda918d48b55a\servicepkg\SectigoRootCA.crt

              Filesize

              1KB

              MD5

              b821ee78c10eda973c40a382fa5ca457

              SHA1

              f40c413c6d17c4c4195d30a9a1454d186710727c

              SHA256

              028fd01ccc988386d6718eda921f6131044a61c06e0f84574d4911918e4659f3

              SHA512

              ea4b9b5e8d7ea4e9c137fc21b36112c01905aad771ad09c408ab94d7eb7d0458a60f3730b5a5af6cbfe8d6167c28132483b68900e7c8db55a4430e7bbd56d61f

            • C:\Windows\TEMP\MBInstallTempdbe79ee0c04111edaecdda918d48b55a\servicepkg\msrootca2020.crt

              Filesize

              2KB

              MD5

              77ac2a1ae404c2e29334c4d0ce29ac0e

              SHA1

              c8eecd58d3b43a2ddec5054ef9eacdf0c2940e62

              SHA256

              626727d3f4fb4c4ef816648217966d5eb2a028afe03c801788b1834a456b48e8

              SHA512

              40bf30c83db166803798fdfbdcbc04d6d01bce7ec569d2f24089bf1b6d81f8694876d43c29ce78359d1101d40386044a0b9f11aedabb3a6348eb1a7da6762fd9

            • C:\Windows\TEMP\MBInstallTempdbe79ee0c04111edaecdda918d48b55a\servicepkg\starfieldClass2CA.crt

              Filesize

              1KB

              MD5

              7fe5fafc33ce6e6f97e73bc5071bc3ce

              SHA1

              9ea40194cd3610f746f9fadee86d8e57e7905d2e

              SHA256

              64e8c4bf59964857adcd42001e719c1764a7f060d52b170982504e07bd26246b

              SHA512

              4578f75aa7bd65e5932c9d851299f1ec71bcc6c3e70361a9df76053532f246e026de1cbfdfdc8ac285bc5c9eb32fcc39cdcd405995734f3d3256c61cfbaeca09

            • C:\Windows\TEMP\MBInstallTempdbe79ee0c04111edaecdda918d48b55a\servicepkg\starfieldrootcag2_new.crt

              Filesize

              993B

              MD5

              d63981c6527e9669fcfcca66ed05f296

              SHA1

              b51c067cee2b0c3df855ab2d92f4fe39d4e70f0e

              SHA256

              2ce1cb0bf9d2f9e102993fbe215152c3b2dd0cabde1c68e5319b839154dbb7f5

              SHA512

              5fada52ff721f4f7f14f5a70500531fa7b131d1203eabb29b5c85a39d67cf358287d9d5b9104c8517b9757dba58df9527d07dc9a82f704b8961f8473cdd92ae7

            • C:\Windows\Temp\MBInstallTempdbe79ee0c04111edaecdda918d48b55a\ctlrpkg\mbae64.sys

              Filesize

              154KB

              MD5

              95515708f41a7e283d6725506f56f6f2

              SHA1

              9afc20a19db3d2a75b6915d8d9af602c5218735e

              SHA256

              321058a27d7462e55e39d253ad5d8b19a9acf754666400f82fe0542f33e733c6

              SHA512

              d9230901adeecb13b1f92287abe9317cdac458348885b96ef6500960793a7586c76ae374df053be948a35b44abe934aa853975a6ccd3788f93909903cc718c08

            • C:\Windows\Temp\MBInstallTempdbe79ee0c04111edaecdda918d48b55a\servicepkg\MBAMService.exe

              Filesize

              8.7MB

              MD5

              55cf151e0ceae43ac17101f79f4f82a1

              SHA1

              1ad4ec5dfbe24b1f2f3e6dff3b4cad79a56edcb3

              SHA256

              b6f2f8bf872cf318929612e2ec0b980f4e0816d633a4633f9ad1cab021cfb93e

              SHA512

              4cbc805a2b748d912337f2b9ae4205785b11f40cab0f9a490e91474b3a0635c8f5f56d269f79799ad338c0ee3cc8b69e196dcde27226ab75ce9db9cfb2233cb5

            • C:\Windows\Temp\MBInstallTempdbe79ee0c04111edaecdda918d48b55a\servicepkg\mbamelam.cat

              Filesize

              10KB

              MD5

              60608328775d6acf03eaab38407e5b7c

              SHA1

              9f63644893517286753f63ad6d01bc8bfacf79b1

              SHA256

              3ed5a1668713ef80c2b5599b599f1434ad6648999f335cf69757ea3183c70c59

              SHA512

              9f65212121b8a5d1a0625c3baa14ef04a33b091d26f543324333e38dcdb903e02ccc4d009e22c2e85d2f61d954e0b994c2896e52f685003a6ef34758f8a650c7

            • C:\Windows\Temp\MBInstallTempdbe79ee0c04111edaecdda918d48b55a\servicepkg\mbamelam.inf

              Filesize

              2KB

              MD5

              c481ad4dd1d91860335787aa61177932

              SHA1

              81633414c5bf5832a8584fb0740bc09596b9b66d

              SHA256

              793626d240fd8eefc81b78a57c8dfe12ea247889b6f07918e9fd32a7411aa1c3

              SHA512

              d292e028936412f07264837d4a321ecfa2f5754d4048c8bcf774a0e076e535b361c411301558609d64c71c1ce9b19e6041efa44d201237a7010c553751e1e830

            • C:\Windows\Temp\MBInstallTempdbe79ee0c04111edaecdda918d48b55a\servicepkg\mbamelam.sys

              Filesize

              20KB

              MD5

              9e77c51e14fa9a323ee1635dc74ecc07

              SHA1

              a78bde0bd73260ce7af9cdc441af9db54d1637c2

              SHA256

              b5619d758ae6a65c1663f065e53e6b68a00511e7d7accb3e07ed94bfd0b1ede0

              SHA512

              a12ccf92bead694f5d3cba7ff7e731a2f862198efc338efc7f33a882fe0eb7499fb3fb533538d0a823e80631a7ca162962fbdfd78e401e3255672910b7140186

            • C:\Windows\Temp\MBInstallTempdbe79ee0c04111edaecdda918d48b55a\servicepkg\mbshlext.dll

              Filesize

              2.7MB

              MD5

              b7e5071b317550d93258f7e1e13e7b6f

              SHA1

              2d08d78a5c29cf724bc523530d1a9014642bbc60

              SHA256

              467de01d7cee7ec54166b80658ff22f9feebdb1c24eaf1629cf40e4124508064

              SHA512

              9c35293c95c1a9141740ac99315605964aa37c4a42d3a11cae9e5649ff1427a9480d3d5e7f763212cf13db3511c5ea3c84e68f95f0067fe6339a9d3fb7b27c54

            • C:\Windows\Temp\MBInstallTempdbe79ee0c04111edaecdda918d48b55a\uipkg\QtQuick\Controls.2\HorizontalHeaderView.qml

              Filesize

              1KB

              MD5

              d8c9674c0e9bddbd8aa59a9d343cf462

              SHA1

              490aa022ac31ddce86d5b62f913b23fbb0de27c2

              SHA256

              1ef333b5fb4d8075973f312ef787237240b9f49f3f9185fb21202883f900e7d7

              SHA512

              0b86ec673133f6400c38b79f9ba4f7b37ce5afdab1a2e34acbf75019e2590cc26b26d323ddc1567c91375053c9c8593be0615389db8eb1a8d1eb084ad4200b82

            • C:\Windows\Temp\MBInstallTempdbe79ee0c04111edaecdda918d48b55a\uipkg\QtQuick\Controls.2\Imagine\VerticalHeaderView.qml

              Filesize

              1KB

              MD5

              829769b2741d92df3c5d837eee64f297

              SHA1

              f61c91436ca3420c4e9b94833839fd9c14024b69

              SHA256

              489c02f8716e7a1de61834b3d8bbb61bce91ca4a33a6b62342b4c851d93e51e0

              SHA512

              4061c271db37523b9dea9a9973226d91337e1809d4e7767e57ac938d35d77a302363ed92ab4be18c35ba589f528194ad71c93a8507449bf74dd035acf7cdb521

            • \Program Files\Malwarebytes\Anti-Malware\7z.dll

              Filesize

              1.7MB

              MD5

              461faf68ccc02b0223fd273b630f21fe

              SHA1

              363b8beaa74f0f454c2d544ace9e71a84bc2b4cf

              SHA256

              cb07f3f461e9c267831b1ab93af6dfda1bb51d72e42d73d00d26594f09326be1

              SHA512

              4b671f48e45fdedf50c7f7bb6c8d82a3b98f7502006eb002aaf8ff31f25f9ff1257c7bcc12caf622e43d4ec665b19d978ae3e3762f76def0bc71485ebdb8426f

            • \Program Files\Malwarebytes\Anti-Malware\Actions.dll

              Filesize

              5.0MB

              MD5

              1eff53d95ecaf6bbfffe80d866d8e1dd

              SHA1

              d7ef7d7c77fd04b2c0eb8c16bb3cd08057f6742f

              SHA256

              6dd748f7ca56125cbe158fa3612f08e7312ef58ad5375e6b7ab5532cc16ca0ac

              SHA512

              c59b8e6f0b238a247e64b9c7bb42213dadac1dada63542830a6292361174c935c0c662b2d1aed3fb6100cc4993297b1eaf25e328f2b4613458c4ffca63b9f02d

            • \Program Files\Malwarebytes\Anti-Malware\ActionsShim.dll

              Filesize

              2.5MB

              MD5

              e7a4bb8fa34bc5ae8b84bf15442da99c

              SHA1

              26e6d20876f01faa32a7a846c12dd35c695d55b6

              SHA256

              9ed946c62c7801779822a83d9126257f6426af381a42ce29d5a3c49c774fc141

              SHA512

              10b007f132cdaa7ea2e75281cd7767b59fd61335d28bc55b778e05479ac993e3578ba1370fe1ce6bf35d271ca970346d5f8cd13637f59fb1fa01c8a6345727b1

            • \Program Files\Malwarebytes\Anti-Malware\CleanControllerImpl.dll

              Filesize

              6.9MB

              MD5

              43fbf5f22dab653a0eb0eb5d45020735

              SHA1

              514d5ac5984a3c317f3a228c0bff859d18968f26

              SHA256

              2a12f432e0fce924e69b32646b668edc15c7c73d51cfcbbdaea001d375bcc5a1

              SHA512

              d9a9efd84c838527026d3e009f23d1fb65980420d2bd3eac09acdef5b16039d34209c91a7a34a0fcc4e949a3504fe12d904796c36c0a3d155f9c3bdfe639dcfe

            • \Program Files\Malwarebytes\Anti-Malware\CloudControllerImpl.dll

              Filesize

              4.8MB

              MD5

              3cad89a85ae704b4e264a03dcbf1de8f

              SHA1

              aacc5111236b95b9044f3228c961345ead3ee5c2

              SHA256

              1f56f70c09fb6b6c92795dedbcfa0626ec29383d53166ef0f179e86a46b33b56

              SHA512

              4efbb0b81392378cd143e1526d94b39434306e7354dbd6326bceb37cc3919f2b84d4ec08b378a35b44a2f93b660623f9112a36f4fb745f34327f9fda8f0e84d2

            • \Program Files\Malwarebytes\Anti-Malware\LicenseControllerImpl.dll

              Filesize

              4.4MB

              MD5

              b7a9a7b44b82e954c1b77e7b7f71ee66

              SHA1

              02f3eabef778d5641eea89d318268e79949da7c6

              SHA256

              ba97bf9a2a0c454dbd965ef7b6c12f582d49391d5297fe2ef4a94bb13d2d472e

              SHA512

              524dee007193cc13ee81e9734564e8a121715f7ecb27d113eb7d8265b7562ab60237aa64c556a819239ee9b4abdc8523a57ca666bdd48de82eca79efba771bc5

            • \Program Files\Malwarebytes\Anti-Malware\MBAMShim.dll

              Filesize

              3.0MB

              MD5

              f44b6c80c46c4cf3071b5f5b916e1271

              SHA1

              839f2238ecbbfa80ebf9c1f77eafc78204b58761

              SHA256

              732523df43358729d5e85cceb557d69016dcdd3e2238d903c33c5327c3131fae

              SHA512

              99be164ae96bc4f93dc896d5df445ad1c2f023f10605a8c9857d7ebedfc5b070f50cd33b401d61003e601a06b8446e6c0b5dbddda4927a2e1352407d3b266942

            • \Program Files\Malwarebytes\Anti-Malware\PoliciesControllerImpl.dll

              Filesize

              4.1MB

              MD5

              c447ffc8af4633daf687e0a943061a60

              SHA1

              2f0a1854d75a82929dcff5308befe3b83439259b

              SHA256

              c01804c902c5532517fa0ceadc91beed01d5ac67adf062b7ce7eaba8272c40bc

              SHA512

              e0d650c35a46063d0e3870e1888d95827050e7792391b8c6ba4b5cd0cf2501cf0eb3aeb1c4a9f524467b6efcc4cb44c8816ba91aa09858c3594d8334a3eb2edf

            • \Program Files\Malwarebytes\Anti-Malware\ScanControllerImpl.dll

              Filesize

              5.7MB

              MD5

              ad96e59bd9708c8c8ea5374b056f1ab0

              SHA1

              f9edf0b985ec3b22bc133c418cc99b2577f2f081

              SHA256

              b1731d8ded2243e94f243b92fa5b8c15704118e385b50f3add746588274e12f3

              SHA512

              51fcd39302b36e09483dbce0903db2c76b25a998002d875692d8fa745106e2aab339909d0d6fca3872700042e22160b5469c7c50b87d8b4bd95ced151f4f3a9c

            • \Program Files\Malwarebytes\Anti-Malware\TelemetryControllerImpl.dll

              Filesize

              5.3MB

              MD5

              8dd27ae0da8393c66c2df6367cd80d01

              SHA1

              4aef9d7c31c0ffb99596ee9acbaeb820247de01c

              SHA256

              e9f40a5e120fb674e2457a8c2a81fc9e7fc44f9c9f17f7053af046e8450f164e

              SHA512

              443ce9cf538704f201064d588c99a4926a8a5f028f739c7d59a03bbfdd8d4f1d1ca02d262754210dcade63741f689da9538f98d9a3bf80c72e0c578645ff92f9

            • \Program Files\Malwarebytes\Anti-Malware\UpdateControllerImpl.dll

              Filesize

              4.4MB

              MD5

              d0b204fb32962798ebd9ab0ad336a83c

              SHA1

              f281b35553afa236a214b910c537ecad0e3bacea

              SHA256

              627db74adff5407a074e94997cb724434478801607c972ff2afdf10d4928bb98

              SHA512

              5d3aa0851b7479d3c6d092052fa8271cb335f54ccac526a01c64745c222f906b6a5ece2fb6637e6dee878cf76af3ad89e0eb7e7686a7061c134a9e8e6d0d3eac

            • \Program Files\Malwarebytes\Anti-Malware\mbshlext.dll

              Filesize

              2.7MB

              MD5

              b7e5071b317550d93258f7e1e13e7b6f

              SHA1

              2d08d78a5c29cf724bc523530d1a9014642bbc60

              SHA256

              467de01d7cee7ec54166b80658ff22f9feebdb1c24eaf1629cf40e4124508064

              SHA512

              9c35293c95c1a9141740ac99315605964aa37c4a42d3a11cae9e5649ff1427a9480d3d5e7f763212cf13db3511c5ea3c84e68f95f0067fe6339a9d3fb7b27c54

            • \Program Files\Malwarebytes\Anti-Malware\offreg.dll

              Filesize

              114KB

              MD5

              16663d125398773a90d0a53333b7cf5e

              SHA1

              f92928ae3c9292588547ceaca1cb1d372bfd7936

              SHA256

              38e6811b47262101759aa51a631263d9e3eee5d211164318a751e078afec4cbc

              SHA512

              091764b8ad80aa31eea0bbd91ee505ebdea2654bc8aeaa3081a061d0d37ab13d27dd203075fd0de10c6687591aa0e36139a38af846c4e34e6aa67ab81dc277df

            • \Windows\Temp\MBInstallTempdbe79ee0c04111edaecdda918d48b55a\7z.dll

              Filesize

              1.6MB

              MD5

              ab8f0c1a37c0df5c8924aab509db42c9

              SHA1

              53dba959124e6d740829bda2360e851bcb85cce8

              SHA256

              6e223b275b84d948cc5ae1f161f0bfff2adb34de04634c84d7dbe9305a4998d5

              SHA512

              ff8a26e8fd5a08c74e5ba93a564e0d3cd932754e7f06993a365bfad06670497889e69ec45bfba1378040b72f82d468e79682beba2439937bb29d2a41da940d4a

            • \Windows\Temp\MBInstallTempdbe79ee0c04111edaecdda918d48b55a\7z.dll

              Filesize

              1.6MB

              MD5

              ab8f0c1a37c0df5c8924aab509db42c9

              SHA1

              53dba959124e6d740829bda2360e851bcb85cce8

              SHA256

              6e223b275b84d948cc5ae1f161f0bfff2adb34de04634c84d7dbe9305a4998d5

              SHA512

              ff8a26e8fd5a08c74e5ba93a564e0d3cd932754e7f06993a365bfad06670497889e69ec45bfba1378040b72f82d468e79682beba2439937bb29d2a41da940d4a

            • memory/3672-4096-0x000001D33E630000-0x000001D33E632000-memory.dmp

              Filesize

              8KB

            • memory/3672-4085-0x000001D33E610000-0x000001D33E611000-memory.dmp

              Filesize

              4KB

            • memory/3672-4084-0x000001D33E610000-0x000001D33E611000-memory.dmp

              Filesize

              4KB

            • memory/3672-4086-0x000001D33E610000-0x000001D33E611000-memory.dmp

              Filesize

              4KB

            • memory/3672-4087-0x000001D33E610000-0x000001D33E611000-memory.dmp

              Filesize

              4KB

            • memory/3672-4088-0x000001D33E610000-0x000001D33E611000-memory.dmp

              Filesize

              4KB

            • memory/3672-4089-0x000001D33E610000-0x000001D33E611000-memory.dmp

              Filesize

              4KB

            • memory/3672-4091-0x000001D33E620000-0x000001D33E621000-memory.dmp

              Filesize

              4KB

            • memory/3672-4092-0x000001D33E620000-0x000001D33E621000-memory.dmp

              Filesize

              4KB

            • memory/3672-4093-0x000001D33E620000-0x000001D33E621000-memory.dmp

              Filesize

              4KB

            • memory/3672-4094-0x000001D33E630000-0x000001D33E632000-memory.dmp

              Filesize

              8KB

            • memory/3672-4095-0x000001D33E630000-0x000001D33E632000-memory.dmp

              Filesize

              8KB

            • memory/3672-4083-0x000001D33E610000-0x000001D33E611000-memory.dmp

              Filesize

              4KB

            • memory/3672-4098-0x000001D33E640000-0x000001D33E642000-memory.dmp

              Filesize

              8KB

            • memory/3672-4099-0x000001D33E630000-0x000001D33E632000-memory.dmp

              Filesize

              8KB

            • memory/3672-4101-0x000001D33E620000-0x000001D33E621000-memory.dmp

              Filesize

              4KB

            • memory/3672-4100-0x000001D33E620000-0x000001D33E621000-memory.dmp

              Filesize

              4KB

            • memory/3672-4103-0x000001D33E630000-0x000001D33E632000-memory.dmp

              Filesize

              8KB

            • memory/3672-4102-0x000001D33E620000-0x000001D33E621000-memory.dmp

              Filesize

              4KB

            • memory/3672-4105-0x000001D33E620000-0x000001D33E621000-memory.dmp

              Filesize

              4KB

            • memory/3672-4104-0x000001D33E620000-0x000001D33E621000-memory.dmp

              Filesize

              4KB

            • memory/3672-4106-0x000001D33E640000-0x000001D33E642000-memory.dmp

              Filesize

              8KB

            • memory/3672-4108-0x000001D33E650000-0x000001D33E651000-memory.dmp

              Filesize

              4KB

            • memory/3672-4110-0x000001D33E660000-0x000001D33E661000-memory.dmp

              Filesize

              4KB

            • memory/3672-4112-0x000001D33E620000-0x000001D33E621000-memory.dmp

              Filesize

              4KB

            • memory/3672-4111-0x000001D33E650000-0x000001D33E651000-memory.dmp

              Filesize

              4KB

            • memory/3672-4082-0x000001D33E5E0000-0x000001D33E5E1000-memory.dmp

              Filesize

              4KB

            • memory/3672-4080-0x000001D33E5E0000-0x000001D33E5E1000-memory.dmp

              Filesize

              4KB

            • memory/3672-4081-0x000001D33E5E0000-0x000001D33E5E1000-memory.dmp

              Filesize

              4KB

            • memory/3672-4078-0x000001D33E5E0000-0x000001D33E5E1000-memory.dmp

              Filesize

              4KB

            • memory/3672-4079-0x000001D33E5E0000-0x000001D33E5E1000-memory.dmp

              Filesize

              4KB

            • memory/3672-4077-0x000001D33E610000-0x000001D33E611000-memory.dmp

              Filesize

              4KB

            • memory/3672-4075-0x000001D33E600000-0x000001D33E601000-memory.dmp

              Filesize

              4KB

            • memory/3672-4074-0x000001D33E600000-0x000001D33E601000-memory.dmp

              Filesize

              4KB

            • memory/3672-4073-0x000001D33E600000-0x000001D33E601000-memory.dmp

              Filesize

              4KB

            • memory/3672-4072-0x000001D33E600000-0x000001D33E601000-memory.dmp

              Filesize

              4KB

            • memory/3672-4071-0x000001D33E600000-0x000001D33E601000-memory.dmp

              Filesize

              4KB

            • memory/3672-4069-0x000001D33E5E0000-0x000001D33E5E1000-memory.dmp

              Filesize

              4KB

            • memory/3672-4068-0x000001D33E5E0000-0x000001D33E5E1000-memory.dmp

              Filesize

              4KB

            • memory/3672-4066-0x000001D33E5E0000-0x000001D33E5E1000-memory.dmp

              Filesize

              4KB

            • memory/3672-4067-0x000001D33E5E0000-0x000001D33E5E1000-memory.dmp

              Filesize

              4KB

            • memory/3672-4065-0x000001D33E5E0000-0x000001D33E5E1000-memory.dmp

              Filesize

              4KB

            • memory/3672-4064-0x000001D33E5E0000-0x000001D33E5E1000-memory.dmp

              Filesize

              4KB

            • memory/3672-4063-0x000001D33E5E0000-0x000001D33E5E1000-memory.dmp

              Filesize

              4KB

            • memory/3672-4062-0x000001D33E5E0000-0x000001D33E5E1000-memory.dmp

              Filesize

              4KB

            • memory/3672-3673-0x000001D338430000-0x000001D338440000-memory.dmp

              Filesize

              64KB

            • memory/3672-3534-0x000001D338430000-0x000001D338440000-memory.dmp

              Filesize

              64KB

            • memory/3672-3529-0x00007FF7902A0000-0x00007FF791871000-memory.dmp

              Filesize

              21.8MB

            • memory/3672-3528-0x00007FFA8FCA0000-0x00007FFA9020B000-memory.dmp

              Filesize

              5.4MB

            • memory/3672-3527-0x00007FFA90210000-0x00007FFA9062E000-memory.dmp

              Filesize

              4.1MB

            • memory/3672-5466-0x000001D338430000-0x000001D338440000-memory.dmp

              Filesize

              64KB

            • memory/4268-3489-0x000001C83A8B0000-0x000001C83A8C0000-memory.dmp

              Filesize

              64KB

            • memory/4268-3487-0x000001C83B970000-0x000001C83BB70000-memory.dmp

              Filesize

              2.0MB

            • memory/4268-3485-0x000001C83B530000-0x000001C83B970000-memory.dmp

              Filesize

              4.2MB

            • memory/4268-3483-0x00007FFA90210000-0x00007FFA9062E000-memory.dmp

              Filesize

              4.1MB

            • memory/4268-3484-0x00007FFA8FCA0000-0x00007FFA9020B000-memory.dmp

              Filesize

              5.4MB