Analysis

  • max time kernel
    151s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    12-04-2023 15:58

General

  • Target

    MBSetup.exe

  • Size

    2.5MB

  • MD5

    1ed0d8b2214a5d067d5422145689f747

  • SHA1

    e671419cc7957c1118b9bb84251a40c03351f07f

  • SHA256

    06a4bacdae17ad89c8fc93fc4ebf6603ca406e8bcc51f3fd32f700d18436be56

  • SHA512

    e2a686efcb1bcda6b55c5d10654124fc2b27c426a979929a1e9de171794745abc9f0cd9dbd302a4e02d95269c7abee5dd051c1687e8f794da317b3fc4bf665b8

  • SSDEEP

    24576:05mJfwapNdG219GpuNXCtbKoYFYE4XcUaOECcW0wd/ZL8Ug+JwNZgCxiIsCA2flq:0GNd28XOJYFYtcOcW0wxZN2DxiIq2dnq

Malware Config

Signatures

  • BazarBackdoor

    Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.

  • Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs
  • Bazar/Team9 Backdoor payload 1 IoCs
  • Downloads MZ/PE file
  • Drops file in Drivers directory 10 IoCs
  • Modifies RDP port number used by Windows 1 TTPs
  • Sets service image path in registry 2 TTPs 2 IoCs
  • Checks BIOS information in registry 2 TTPs 4 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Registers COM server for autorun 1 TTPs 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 48 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 2 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 16 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 40 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 14 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:3156
      • C:\Users\Admin\AppData\Local\Temp\MBSetup.exe
        "C:\Users\Admin\AppData\Local\Temp\MBSetup.exe"
        2⤵
        • Suspicious use of NtCreateUserProcessOtherParentProcess
        • Drops file in Drivers directory
        • Checks BIOS information in registry
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:2932
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://links.malwarebytes.com/link/installed?prodVer=4.5.26.259&prodCode=MDAM-B&lang=es
          3⤵
          • Enumerates system info in registry
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:4968
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xf8,0xfc,0x100,0xd8,0x104,0x7ffe184646f8,0x7ffe18464708,0x7ffe18464718
            4⤵
              PID:1624
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,1173908987630343515,18147206930800183815,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2168 /prefetch:2
              4⤵
                PID:3536
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,1173908987630343515,18147206930800183815,131072 --lang=es --service-sandbox-type=none --mojo-platform-channel-handle=2252 /prefetch:3
                4⤵
                • Suspicious behavior: EnumeratesProcesses
                PID:4852
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,1173908987630343515,18147206930800183815,131072 --lang=es --service-sandbox-type=utility --mojo-platform-channel-handle=2672 /prefetch:8
                4⤵
                  PID:1932
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1173908987630343515,18147206930800183815,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3628 /prefetch:1
                  4⤵
                    PID:1164
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,1173908987630343515,18147206930800183815,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3536 /prefetch:1
                    4⤵
                      PID:2316
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,1173908987630343515,18147206930800183815,131072 --lang=es --service-sandbox-type=none --mojo-platform-channel-handle=5748 /prefetch:8
                      4⤵
                        PID:5116
                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,1173908987630343515,18147206930800183815,131072 --lang=es --service-sandbox-type=none --mojo-platform-channel-handle=5748 /prefetch:8
                        4⤵
                        • Suspicious behavior: EnumeratesProcesses
                        PID:2712
                  • C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
                    "C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe"
                    2⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious behavior: AddClipboardFormatListener
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of FindShellTrayWindow
                    PID:3616
                • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
                  "C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe"
                  1⤵
                  • Drops file in Drivers directory
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates connected drives
                  • Drops file in Program Files directory
                  • Modifies Internet Explorer settings
                  • Modifies data under HKEY_USERS
                  • Modifies system certificate store
                  • Suspicious behavior: EnumeratesProcesses
                  • Suspicious use of WriteProcessMemory
                  PID:2372
                  • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
                    "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" /Service /Protected
                    2⤵
                    • Drops file in Drivers directory
                    • Executes dropped EXE
                    • Registers COM server for autorun
                    • Drops file in System32 directory
                    • Modifies registry class
                    • Suspicious use of AdjustPrivilegeToken
                    PID:4048
                • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
                  "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"
                  1⤵
                  • Drops file in Drivers directory
                  • Sets service image path in registry
                  • Checks BIOS information in registry
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Registers COM server for autorun
                  • Enumerates connected drives
                  • Drops file in System32 directory
                  • Drops file in Program Files directory
                  • Checks processor information in registry
                  • Modifies Internet Explorer settings
                  • Modifies data under HKEY_USERS
                  • Suspicious behavior: EnumeratesProcesses
                  • Suspicious use of AdjustPrivilegeToken
                  • Suspicious use of WriteProcessMemory
                  PID:4728
                  • C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
                    "C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
                    2⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious behavior: AddClipboardFormatListener
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of FindShellTrayWindow
                    • Suspicious use of SendNotifyMessage
                    PID:4592
                • C:\Windows\System32\CompPkgSrv.exe
                  C:\Windows\System32\CompPkgSrv.exe -Embedding
                  1⤵
                    PID:4312
                  • C:\Windows\system32\AUDIODG.EXE
                    C:\Windows\system32\AUDIODG.EXE 0x2d0 0x45c
                    1⤵
                      PID:4476

                    Network

                    MITRE ATT&CK Enterprise v6

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\7z.dll

                      Filesize

                      1.7MB

                      MD5

                      461faf68ccc02b0223fd273b630f21fe

                      SHA1

                      363b8beaa74f0f454c2d544ace9e71a84bc2b4cf

                      SHA256

                      cb07f3f461e9c267831b1ab93af6dfda1bb51d72e42d73d00d26594f09326be1

                      SHA512

                      4b671f48e45fdedf50c7f7bb6c8d82a3b98f7502006eb002aaf8ff31f25f9ff1257c7bcc12caf622e43d4ec665b19d978ae3e3762f76def0bc71485ebdb8426f

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\Actions.dll

                      Filesize

                      5.0MB

                      MD5

                      1eff53d95ecaf6bbfffe80d866d8e1dd

                      SHA1

                      d7ef7d7c77fd04b2c0eb8c16bb3cd08057f6742f

                      SHA256

                      6dd748f7ca56125cbe158fa3612f08e7312ef58ad5375e6b7ab5532cc16ca0ac

                      SHA512

                      c59b8e6f0b238a247e64b9c7bb42213dadac1dada63542830a6292361174c935c0c662b2d1aed3fb6100cc4993297b1eaf25e328f2b4613458c4ffca63b9f02d

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ActionsShim.dll

                      Filesize

                      2.5MB

                      MD5

                      e7a4bb8fa34bc5ae8b84bf15442da99c

                      SHA1

                      26e6d20876f01faa32a7a846c12dd35c695d55b6

                      SHA256

                      9ed946c62c7801779822a83d9126257f6426af381a42ce29d5a3c49c774fc141

                      SHA512

                      10b007f132cdaa7ea2e75281cd7767b59fd61335d28bc55b778e05479ac993e3578ba1370fe1ce6bf35d271ca970346d5f8cd13637f59fb1fa01c8a6345727b1

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\BrowserSDKDLL.dll

                      Filesize

                      5.8MB

                      MD5

                      1ed53171d00f440f29a12f9beb84dac4

                      SHA1

                      4d9a1e3579b0999f1ab2fa818b588411e9ee920c

                      SHA256

                      e659e687a872050f9e65d78992d16bd9b393cf3f8e8c94e0e15fb42b7065327e

                      SHA512

                      17161cfc672d1b996b8af4ebac17f9a8a3807f38c9a23e2e5b4dadcd9a21c3a64faec9bf59147022a9df88b80f89300f1b537091289bd7a42806bd206a317e6e

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\BrowserSDKDLLShim.dll

                      Filesize

                      2.5MB

                      MD5

                      2e8ad6f405eb7744908f635dc089438a

                      SHA1

                      f2ca3f55ce4395dfe39a0ba099a39f8c30e263cb

                      SHA256

                      4824ad6b30b42a9166bfd3db41f11e3cb67e7aab96058b7f946797d7dadba891

                      SHA512

                      3eacea19caf3f04cddb35091102c5d627b82acc8c73be1bfa4d72932c78cba7821c99c616bbd8d422ce588b865700db560ba441f8a5da6a9629af844f6ad28c5

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\CleanControllerImpl.dll

                      Filesize

                      6.9MB

                      MD5

                      2d6fc36a0ea8e62edf6dcff9511a4d84

                      SHA1

                      bdb30ac3b016fc5ed4252256a79bc99afac0b105

                      SHA256

                      0bf1c43a71ecbee3b6dc9c0ea0b7ef06d7d99daa7d520505a8bbd9a17cefd685

                      SHA512

                      ca302cf5fde2fa1373533cf8603004310831b7bfa00e608ef70c400957f1d1bf24c95daf3b0d9d5f1177faf39e3dd82579685bc6b00595fd522cda4f5487c490

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\CloudControllerImpl.dll

                      Filesize

                      4.8MB

                      MD5

                      3cad89a85ae704b4e264a03dcbf1de8f

                      SHA1

                      aacc5111236b95b9044f3228c961345ead3ee5c2

                      SHA256

                      1f56f70c09fb6b6c92795dedbcfa0626ec29383d53166ef0f179e86a46b33b56

                      SHA512

                      4efbb0b81392378cd143e1526d94b39434306e7354dbd6326bceb37cc3919f2b84d4ec08b378a35b44a2f93b660623f9112a36f4fb745f34327f9fda8f0e84d2

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\LicenseControllerImpl.dll

                      Filesize

                      4.4MB

                      MD5

                      b7a9a7b44b82e954c1b77e7b7f71ee66

                      SHA1

                      02f3eabef778d5641eea89d318268e79949da7c6

                      SHA256

                      ba97bf9a2a0c454dbd965ef7b6c12f582d49391d5297fe2ef4a94bb13d2d472e

                      SHA512

                      524dee007193cc13ee81e9734564e8a121715f7ecb27d113eb7d8265b7562ab60237aa64c556a819239ee9b4abdc8523a57ca666bdd48de82eca79efba771bc5

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MBAMCore.dll

                      Filesize

                      6.3MB

                      MD5

                      bd96638fbea97c8a92354cf13b57ad11

                      SHA1

                      7a1bd8295c5de8f35236919712580f3e4061d7ef

                      SHA256

                      bfa914fa06a8f621c465bfba1c498b8a1b7d2e34081b76b175d49b3349dffbaf

                      SHA512

                      5407ae3404bc97302e50e02bd371cf2d3203069e4c10651cf9b0f7ca349682435109e13701d874c63f76be56979c1f5c31cf3ad65434df479ef9084c8dfe65c0

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MBAMShim.dll

                      Filesize

                      3.0MB

                      MD5

                      f44b6c80c46c4cf3071b5f5b916e1271

                      SHA1

                      839f2238ecbbfa80ebf9c1f77eafc78204b58761

                      SHA256

                      732523df43358729d5e85cceb557d69016dcdd3e2238d903c33c5327c3131fae

                      SHA512

                      99be164ae96bc4f93dc896d5df445ad1c2f023f10605a8c9857d7ebedfc5b070f50cd33b401d61003e601a06b8446e6c0b5dbddda4927a2e1352407d3b266942

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll

                      Filesize

                      4.1MB

                      MD5

                      c447ffc8af4633daf687e0a943061a60

                      SHA1

                      2f0a1854d75a82929dcff5308befe3b83439259b

                      SHA256

                      c01804c902c5532517fa0ceadc91beed01d5ac67adf062b7ce7eaba8272c40bc

                      SHA512

                      e0d650c35a46063d0e3870e1888d95827050e7792391b8c6ba4b5cd0cf2501cf0eb3aeb1c4a9f524467b6efcc4cb44c8816ba91aa09858c3594d8334a3eb2edf

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ScanControllerImpl.dll

                      Filesize

                      5.7MB

                      MD5

                      a340fa4ce6b8a5e22dfe5348752138c8

                      SHA1

                      4cd995cce3194b43a5e2f12f032eb5cad88fc3c5

                      SHA256

                      250f17aad7e80a1b33b79b1e95cdae26d6be6f1c27dc9aaba1b6d8f346393b8a

                      SHA512

                      bc72a19624042b1a3f6f873ec193c890a12fbb85111b60399e5b3c9584a752c9c38b637fc37b5a7a968dcedaf804b299ee2156726aa7462bc940154d3654feff

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\Swissarmy.dll

                      Filesize

                      4.0MB

                      MD5

                      3486801ce1e8ffc1bbc6d4f097b0f369

                      SHA1

                      08f2a85cd07cf1c0d6f27f0d5e7179c2a5cb8600

                      SHA256

                      26720d0b669898089a4ab5a6c53203918ec399d227331273ba11169bbe273678

                      SHA512

                      81974a79bf4e4086549874ef778e7716713a0107ccce212e9564f3355a26670943845aaba744691d2b68224e06e2f9d9a263e29f4ca7e46e1bfdb507a24656d5

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SwissarmyShim.dll

                      Filesize

                      2.6MB

                      MD5

                      89a38afcfa758e3298609c6c51929593

                      SHA1

                      2df1ee30adc92bd995526e41fd9c823354de30b4

                      SHA256

                      4795576483af0c136a71dcee87a0ffb54f0869cae6395ac2ff8312bf555e7161

                      SHA512

                      cceaed0b9a7517aebd739a377c7bd8987b9ac357be2bf987dbae31d59f2121c5bb9a9bfa2c70a9a54ad65546ef23903176dd6328d93408cb5c991257d59e2717

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\TelemetryControllerImpl.dll

                      Filesize

                      5.3MB

                      MD5

                      a6b7865089133607d9fe66617abcebea

                      SHA1

                      e7d887a75fd48945d3f56b5635bae822ad5c7a1c

                      SHA256

                      f1f1958fbd3ecc0b61f1be129025dfc59112c09b146299caca61bd6f552c0355

                      SHA512

                      3c0638229b90fd4d4ecfbdac89a467d514824e57f1d40f68c5009051a48cc53a0f2f5712aeb530ed6aa9b855272590563c95738abf768f46bdc332806e6d7792

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\UpdateControllerImpl.dll

                      Filesize

                      4.4MB

                      MD5

                      d0b204fb32962798ebd9ab0ad336a83c

                      SHA1

                      f281b35553afa236a214b910c537ecad0e3bacea

                      SHA256

                      627db74adff5407a074e94997cb724434478801607c972ff2afdf10d4928bb98

                      SHA512

                      5d3aa0851b7479d3c6d092052fa8271cb335f54ccac526a01c64745c222f906b6a5ece2fb6637e6dee878cf76af3ad89e0eb7e7686a7061c134a9e8e6d0d3eac

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

                      Filesize

                      1.8MB

                      MD5

                      1de486b8ed4b8be4e2167c57f05fa0bc

                      SHA1

                      fe50086756f5e49cdf3502661d3e924a9320504b

                      SHA256

                      76b6b8a44197195a4e6ec099994d12223d7e357145995aa3a28f36c6af19a249

                      SHA512

                      6379ebc068fc7ae1e042ec66200bfee7df3d3cbeedde809785ea22be45f6b4a9af042a1b814faccdbbd1808de22d06da9884d2bd6552bdcd40b96ee343169fe3

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\pkgvers.dat

                      Filesize

                      75B

                      MD5

                      b14161dc493580b365e49f68c273683f

                      SHA1

                      a1a252bed7e458026ee9ebe48ffa83211af41676

                      SHA256

                      7f637601e7e869fb56593343cbc3161943bd6e7008b004e4f85d8cf8788b6e7c

                      SHA512

                      1157f6896ee57e2cd62a252035dc8a7f886936f02b83ea39490d8d79f973286e6396bcedc6774896cab3f46208fb09c42c1fd303103c4d193e076ff77dc02f40

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\sample.dll

                      Filesize

                      528KB

                      MD5

                      efe681deaaa5933a7739bea15d3bac7b

                      SHA1

                      3fa6171c50169a669afd83729a4259a98e661894

                      SHA256

                      e1dc101b784eabdaf10c72ff2a0733707ab6d04a25a4bc49506eece5c529a843

                      SHA512

                      49c23f3679125f7884b033986d0a3602858403ccd3b31c0a0c188df0b6d43e0d04fd8a9042e2460fac23b66eca1990bb96a388edd81d1397f4184f9444e9e0fa

                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\version.dat

                      Filesize

                      47B

                      MD5

                      f163c133dcfe424cf819d529a495952b

                      SHA1

                      763956357d426a5cf1ec9fa84305ef1490e58136

                      SHA256

                      9dbce69ee132b37a00033116d084386d3ee6520471324c243098c770dda1b93b

                      SHA512

                      1bc9f7fc0e4d52def7bf0b25d96779994a6ce6dc05dfecdd83e8befdae7789e1d15a48a49f99820769f77d89f2c6db497d90e230afacc09cd7c79acd4deb41e5

                    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\Global.nm

                      Filesize

                      316KB

                      MD5

                      b8a25c3628025b6dfc4d0600291da376

                      SHA1

                      4c9963fb4f10aa3a820dc97974e0241147ca1a61

                      SHA256

                      70c70f0a8f9d20fb30dd8a0a6f5358b649282e900bd45ba3451e028067ceb210

                      SHA512

                      0686a08d7d6c52b17f0b4d22443a3a03e7337e3a7c6af2704f1bef0b84ca54506d8ab663e9fb48a6caa7d66e18a75f24a234a09d42ce92961ef317e0158bdbe6

                    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\Global.sr

                      Filesize

                      12.6MB

                      MD5

                      ae57cd819176c8a817c7fde1405cbe10

                      SHA1

                      2515332908fa311555eec77713c20ab9dbdd1ac0

                      SHA256

                      fe7d33d400e1b8dcebfdfc96191c46d7de07d21dbb7d5f6287268a00dd4ccad2

                      SHA512

                      cafdf98d303ed53c683259a1254189c4718f45205348278628c8fb353367cd1f792252a4b9f81d5af85dc621beefa16a46809ca3f38c73ea14603da5d5603fcb

                    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\cfg.bin

                      Filesize

                      639B

                      MD5

                      544a36063346eeb1e751030008a9f7e3

                      SHA1

                      b5c44a037d16bfd5cfe0e6ba9cb770111b3aac82

                      SHA256

                      33a822063dc53b5a693b5920f6a14bf4c9c1905c08b3257b7621c9f0c41d39d6

                      SHA512

                      fb86ef1c271d10da364654b244253a4492b8331d69e2a71479671a44f613b88a72822b5a849159b63b7b28c7cbe0c6b7ed35f82cf749a598b23676fae70f279c

                    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\clean.mbdb

                      Filesize

                      10KB

                      MD5

                      139463e2c959cb40c3cd45d9fbde3d9b

                      SHA1

                      366d67d10d35cc969de0119c43793944810eaf21

                      SHA256

                      db2c789d5b6879a3a3ba9bae5a928be8f930ccca617daff4f2d14d148a232808

                      SHA512

                      1a37f6bf3cc837a6582cedee5e72ec5af19dd9707015ca1ad12d20da6d5ab26efad8bf79ddecf3eb8e75f0c9b06edc7f9a6a0319e130496c10ef43713e0426b4

                    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbmanifest2.dat

                      Filesize

                      924B

                      MD5

                      cda9818608e36413437a7ee9bfa7ee24

                      SHA1

                      50a2a598cfaa83312e098899c1120e584ed59b5d

                      SHA256

                      a545fb7be580a48a78766213161ff931b806331b1c07605671e167ef147f5d85

                      SHA512

                      fe880ce1c8db60c69703902de4b21f43a1944898f6f8965165a5e04cbf39b867bbc1c9e986ea6062db1969b334c74c8364c7133f6c9c7be35d28fe2c8531c310

                    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dynconfig.dat

                      Filesize

                      39KB

                      MD5

                      10f23e7c8c791b91c86cd966d67b7bc7

                      SHA1

                      3f596093b2bc33f7a2554818f8e41adbbd101961

                      SHA256

                      008254ca1f4d6415da89d01a4292911de6135b42833156720a841a22685765dc

                      SHA512

                      2d1b21371ada038323be412945994d030ee8a9007db072484724616c8597c6998a560bc28886ebf89e2c8919fb70d76c98338d88832351823027491c98d48118

                    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\exclusions.txt

                      Filesize

                      23KB

                      MD5

                      aef4eca7ee01bb1a146751c4d0510d2d

                      SHA1

                      5cf2273da41147126e5e1eabd3182f19304eea25

                      SHA256

                      9e87e4c9da3337c63b7f0e6ed0eb71696121c74e18a5da577215e18097715e2f

                      SHA512

                      d31d21e37b0048050b19600f8904354cff3f3ec8291c5a7a54267e14af9fb88dfb6d11e74a037cc0369ade8a8fb9b753861f3b3fb2219563e8ec359f66c042db

                    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\mbdigsig2.dat

                      Filesize

                      514B

                      MD5

                      7aba465ef503879838997b7a247228b1

                      SHA1

                      8cb88b65b678c706c8f9c2d4e081dff2a69bfa94

                      SHA256

                      8b15f0b12761e28c88337e3ef7cad386da7f0fbe91eefbeb57b270878621770d

                      SHA512

                      e069448379bc01bf0803f8054e23b24cbdb3bb8a0d7f54ae5463cf435adb7b20339ca1a8d714fb3ef0f43e45c6d0ecc47be574bba15110b0f1d5c7d0c66ef8ed

                    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\prot.mbdb

                      Filesize

                      24B

                      MD5

                      546d9e30eadad8b22f5b3ffa875144bf

                      SHA1

                      3b323ffef009bfe0662c2bd30bb06af6dfc68e4d

                      SHA256

                      6089fbf0c0c1413f62e91dc9497bedc6d8a271e9dc761e20adc0dccf6f4a0c1f

                      SHA512

                      3478f5dcf7af549dd6fe48ad714604200de84a90120b16a32233b6d44fa7240f5f4e5fe803f54b86bbdfd10fa1bfdd88fb85eb6a78e23e426933f98d0a2565ec

                    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\rdefs.mbdb

                      Filesize

                      24B

                      MD5

                      2f7423ca7c6a0f1339980f3c8c7de9f8

                      SHA1

                      102c77faa28885354cfe6725d987bc23bc7108ba

                      SHA256

                      850a4ea37a0fd6f68bf95422d502b2d1257264eb90cc38c0a3b1b95aa375be55

                      SHA512

                      e922ac8a7a2cde6d387f8698207cf5efbd45b646986a090e3549d97a7d552dd74179bd7ac20b7d246ca49d340c4c168982c65b4749df760857810b2358e7eb69

                    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\rules.mbdb

                      Filesize

                      21.8MB

                      MD5

                      deede457e02b1d028b003ce8502923a0

                      SHA1

                      3ed7b618074199826aa0b469d5f6719261adb5af

                      SHA256

                      8b60f08c604333488bc0152177d6d6eca02f7df182be2c5e901277ea7ed7bc41

                      SHA512

                      b7a4ca26f42a99022709f2648c386202f8aa5d9f49cfb8715712583f16021fda8a1e60f7d288db05ecdd9e8c48c54cc42e4698ef95a08b016d2942e554fd3645

                    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\scan.mbdb

                      Filesize

                      1.4MB

                      MD5

                      2dd90f007a3da13bf16554110b553ecb

                      SHA1

                      776fe978dedeb7c61defc0f3ec5ff089acb38d64

                      SHA256

                      7f6b0b34342fe9c98d671db1156dbd10b97e52ed3bf5f86e27652ec7703fd703

                      SHA512

                      51599377001937fcf981647616ce3e1ad479ea53e7dadfe52a82d78c558f11b4750340666dc06d136e046448a2a6c3418a5c535b8ecf168deb525551d4867c5d

                    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\tids.mbdb

                      Filesize

                      234KB

                      MD5

                      870c0a1b7a8af2f75366dd5a169f7118

                      SHA1

                      e41398c1b1cda8cffb4a6956c50a184d0aa7d4eb

                      SHA256

                      52038228fcb7267babbfefed9785555022a403010ba13f7db0ec782cae6bbb6c

                      SHA512

                      fb704363a5f1085a510ae51ff4a08a40a1b4ec895b9c15ef46c1763a55a0425bddc8ff1ed2fc76b2014b4d95ca2cb8bd0334b904ce5c4e0837cf4c834689fad4

                    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\wprot2.mbdb

                      Filesize

                      40.2MB

                      MD5

                      1d20412d4dcd63d51d0effd6a778dcdc

                      SHA1

                      07adb172ac7b3be4fe8f78760cdd5e27fe93159d

                      SHA256

                      1e01fbfeaa2e73e0a08b2e6dcb49ab0eb23c05c40c36b87a67cc40120bbe282c

                      SHA512

                      3bca90a57f91ff251214c47d4fa68300707049d1d3dc2f778f4d0c35dfba94fe9cd7151413e191ea79cdb79ff38ab10605b4186e6761c6505e9d9ff3a971fb27

                    • C:\Program Files\Malwarebytes\Anti-Malware\7z.dll

                      Filesize

                      1.7MB

                      MD5

                      461faf68ccc02b0223fd273b630f21fe

                      SHA1

                      363b8beaa74f0f454c2d544ace9e71a84bc2b4cf

                      SHA256

                      cb07f3f461e9c267831b1ab93af6dfda1bb51d72e42d73d00d26594f09326be1

                      SHA512

                      4b671f48e45fdedf50c7f7bb6c8d82a3b98f7502006eb002aaf8ff31f25f9ff1257c7bcc12caf622e43d4ec665b19d978ae3e3762f76def0bc71485ebdb8426f

                    • C:\Program Files\Malwarebytes\Anti-Malware\Actions.dll

                      Filesize

                      5.0MB

                      MD5

                      1eff53d95ecaf6bbfffe80d866d8e1dd

                      SHA1

                      d7ef7d7c77fd04b2c0eb8c16bb3cd08057f6742f

                      SHA256

                      6dd748f7ca56125cbe158fa3612f08e7312ef58ad5375e6b7ab5532cc16ca0ac

                      SHA512

                      c59b8e6f0b238a247e64b9c7bb42213dadac1dada63542830a6292361174c935c0c662b2d1aed3fb6100cc4993297b1eaf25e328f2b4613458c4ffca63b9f02d

                    • C:\Program Files\Malwarebytes\Anti-Malware\ActionsShim.dll

                      Filesize

                      2.5MB

                      MD5

                      e7a4bb8fa34bc5ae8b84bf15442da99c

                      SHA1

                      26e6d20876f01faa32a7a846c12dd35c695d55b6

                      SHA256

                      9ed946c62c7801779822a83d9126257f6426af381a42ce29d5a3c49c774fc141

                      SHA512

                      10b007f132cdaa7ea2e75281cd7767b59fd61335d28bc55b778e05479ac993e3578ba1370fe1ce6bf35d271ca970346d5f8cd13637f59fb1fa01c8a6345727b1

                    • C:\Program Files\Malwarebytes\Anti-Malware\CleanControllerImpl.dll

                      Filesize

                      6.9MB

                      MD5

                      2d6fc36a0ea8e62edf6dcff9511a4d84

                      SHA1

                      bdb30ac3b016fc5ed4252256a79bc99afac0b105

                      SHA256

                      0bf1c43a71ecbee3b6dc9c0ea0b7ef06d7d99daa7d520505a8bbd9a17cefd685

                      SHA512

                      ca302cf5fde2fa1373533cf8603004310831b7bfa00e608ef70c400957f1d1bf24c95daf3b0d9d5f1177faf39e3dd82579685bc6b00595fd522cda4f5487c490

                    • C:\Program Files\Malwarebytes\Anti-Malware\CloudControllerImpl.dll

                      Filesize

                      4.8MB

                      MD5

                      3cad89a85ae704b4e264a03dcbf1de8f

                      SHA1

                      aacc5111236b95b9044f3228c961345ead3ee5c2

                      SHA256

                      1f56f70c09fb6b6c92795dedbcfa0626ec29383d53166ef0f179e86a46b33b56

                      SHA512

                      4efbb0b81392378cd143e1526d94b39434306e7354dbd6326bceb37cc3919f2b84d4ec08b378a35b44a2f93b660623f9112a36f4fb745f34327f9fda8f0e84d2

                    • C:\Program Files\Malwarebytes\Anti-Malware\LicenseControllerImpl.dll

                      Filesize

                      4.4MB

                      MD5

                      b7a9a7b44b82e954c1b77e7b7f71ee66

                      SHA1

                      02f3eabef778d5641eea89d318268e79949da7c6

                      SHA256

                      ba97bf9a2a0c454dbd965ef7b6c12f582d49391d5297fe2ef4a94bb13d2d472e

                      SHA512

                      524dee007193cc13ee81e9734564e8a121715f7ecb27d113eb7d8265b7562ab60237aa64c556a819239ee9b4abdc8523a57ca666bdd48de82eca79efba771bc5

                    • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe

                      Filesize

                      8.7MB

                      MD5

                      e1c0f2da194dfd9c093541baac63692e

                      SHA1

                      7696459c3dca589a4c51fc49e96bb25f9574d764

                      SHA256

                      7a4f4a7398cbe34f817cb30ac23ff03001a7870bf1ebfa214ccb345f5410c0ed

                      SHA512

                      6037c3ebd79b201741cde0aee5798e338cff4651d731bbef7e1875a0e23d777d8c490f8552036f2cd8c1afc95dce64d5b9f6e2d1920a8e2772d4b7fd82f3564e

                    • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe

                      Filesize

                      8.7MB

                      MD5

                      e1c0f2da194dfd9c093541baac63692e

                      SHA1

                      7696459c3dca589a4c51fc49e96bb25f9574d764

                      SHA256

                      7a4f4a7398cbe34f817cb30ac23ff03001a7870bf1ebfa214ccb345f5410c0ed

                      SHA512

                      6037c3ebd79b201741cde0aee5798e338cff4651d731bbef7e1875a0e23d777d8c490f8552036f2cd8c1afc95dce64d5b9f6e2d1920a8e2772d4b7fd82f3564e

                    • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

                      Filesize

                      8.7MB

                      MD5

                      df6a796460b0f70a9a42cb1ab98e7ffd

                      SHA1

                      657c2c3cdef7325c6331f377fe0227760f6bde1a

                      SHA256

                      676f3c56d6e5c8dddd7f01d5d10baad352683a2cb8b9bd4ce526a7629fc8fa43

                      SHA512

                      21b399a76845f81ceabc60d2225ddea30296f3ecd52a3668e60a51d9593c9444596b8ec041b53ae8d8f6f18ee54ab23db8678945e832355e9e76a6fbbfcc0b87

                    • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

                      Filesize

                      8.7MB

                      MD5

                      df6a796460b0f70a9a42cb1ab98e7ffd

                      SHA1

                      657c2c3cdef7325c6331f377fe0227760f6bde1a

                      SHA256

                      676f3c56d6e5c8dddd7f01d5d10baad352683a2cb8b9bd4ce526a7629fc8fa43

                      SHA512

                      21b399a76845f81ceabc60d2225ddea30296f3ecd52a3668e60a51d9593c9444596b8ec041b53ae8d8f6f18ee54ab23db8678945e832355e9e76a6fbbfcc0b87

                    • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

                      Filesize

                      8.7MB

                      MD5

                      df6a796460b0f70a9a42cb1ab98e7ffd

                      SHA1

                      657c2c3cdef7325c6331f377fe0227760f6bde1a

                      SHA256

                      676f3c56d6e5c8dddd7f01d5d10baad352683a2cb8b9bd4ce526a7629fc8fa43

                      SHA512

                      21b399a76845f81ceabc60d2225ddea30296f3ecd52a3668e60a51d9593c9444596b8ec041b53ae8d8f6f18ee54ab23db8678945e832355e9e76a6fbbfcc0b87

                    • C:\Program Files\Malwarebytes\Anti-Malware\MBAMShim.dll

                      Filesize

                      3.0MB

                      MD5

                      f44b6c80c46c4cf3071b5f5b916e1271

                      SHA1

                      839f2238ecbbfa80ebf9c1f77eafc78204b58761

                      SHA256

                      732523df43358729d5e85cceb557d69016dcdd3e2238d903c33c5327c3131fae

                      SHA512

                      99be164ae96bc4f93dc896d5df445ad1c2f023f10605a8c9857d7ebedfc5b070f50cd33b401d61003e601a06b8446e6c0b5dbddda4927a2e1352407d3b266942

                    • C:\Program Files\Malwarebytes\Anti-Malware\MbamElam.cat

                      Filesize

                      10KB

                      MD5

                      60608328775d6acf03eaab38407e5b7c

                      SHA1

                      9f63644893517286753f63ad6d01bc8bfacf79b1

                      SHA256

                      3ed5a1668713ef80c2b5599b599f1434ad6648999f335cf69757ea3183c70c59

                      SHA512

                      9f65212121b8a5d1a0625c3baa14ef04a33b091d26f543324333e38dcdb903e02ccc4d009e22c2e85d2f61d954e0b994c2896e52f685003a6ef34758f8a650c7

                    • C:\Program Files\Malwarebytes\Anti-Malware\MbamElam.inf

                      Filesize

                      2KB

                      MD5

                      c481ad4dd1d91860335787aa61177932

                      SHA1

                      81633414c5bf5832a8584fb0740bc09596b9b66d

                      SHA256

                      793626d240fd8eefc81b78a57c8dfe12ea247889b6f07918e9fd32a7411aa1c3

                      SHA512

                      d292e028936412f07264837d4a321ecfa2f5754d4048c8bcf774a0e076e535b361c411301558609d64c71c1ce9b19e6041efa44d201237a7010c553751e1e830

                    • C:\Program Files\Malwarebytes\Anti-Malware\MbamElam.sys

                      Filesize

                      20KB

                      MD5

                      9e77c51e14fa9a323ee1635dc74ecc07

                      SHA1

                      a78bde0bd73260ce7af9cdc441af9db54d1637c2

                      SHA256

                      b5619d758ae6a65c1663f065e53e6b68a00511e7d7accb3e07ed94bfd0b1ede0

                      SHA512

                      a12ccf92bead694f5d3cba7ff7e731a2f862198efc338efc7f33a882fe0eb7499fb3fb533538d0a823e80631a7ca162962fbdfd78e401e3255672910b7140186

                    • C:\Program Files\Malwarebytes\Anti-Malware\PoliciesControllerImpl.dll

                      Filesize

                      4.1MB

                      MD5

                      c447ffc8af4633daf687e0a943061a60

                      SHA1

                      2f0a1854d75a82929dcff5308befe3b83439259b

                      SHA256

                      c01804c902c5532517fa0ceadc91beed01d5ac67adf062b7ce7eaba8272c40bc

                      SHA512

                      e0d650c35a46063d0e3870e1888d95827050e7792391b8c6ba4b5cd0cf2501cf0eb3aeb1c4a9f524467b6efcc4cb44c8816ba91aa09858c3594d8334a3eb2edf

                    • C:\Program Files\Malwarebytes\Anti-Malware\ScanControllerImpl.dll

                      Filesize

                      5.7MB

                      MD5

                      a340fa4ce6b8a5e22dfe5348752138c8

                      SHA1

                      4cd995cce3194b43a5e2f12f032eb5cad88fc3c5

                      SHA256

                      250f17aad7e80a1b33b79b1e95cdae26d6be6f1c27dc9aaba1b6d8f346393b8a

                      SHA512

                      bc72a19624042b1a3f6f873ec193c890a12fbb85111b60399e5b3c9584a752c9c38b637fc37b5a7a968dcedaf804b299ee2156726aa7462bc940154d3654feff

                    • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json

                      Filesize

                      593B

                      MD5

                      84e21cd7da2ab85bf414eeb834e5154e

                      SHA1

                      534258e8346b68ecdc4cec6ad964d20940dd74b8

                      SHA256

                      2b8629037d154d60f946350ea0fa16f96970448ebe1d8e21a474cab35aa559b8

                      SHA512

                      2a9e7995c754e7fa61847a9563c1a252b77acdc30858e29761691223d2cd4bba0ed904687ba11853e30eff92ca62594e5cddb9cced0c7306812a1625c94602f9

                    • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json

                      Filesize

                      593B

                      MD5

                      84e21cd7da2ab85bf414eeb834e5154e

                      SHA1

                      534258e8346b68ecdc4cec6ad964d20940dd74b8

                      SHA256

                      2b8629037d154d60f946350ea0fa16f96970448ebe1d8e21a474cab35aa559b8

                      SHA512

                      2a9e7995c754e7fa61847a9563c1a252b77acdc30858e29761691223d2cd4bba0ed904687ba11853e30eff92ca62594e5cddb9cced0c7306812a1625c94602f9

                    • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json

                      Filesize

                      655B

                      MD5

                      fbace5175daf3afaed1950c4b95de62d

                      SHA1

                      2cbac72a4a1213edde8050d4ff2286e5d08b6ebe

                      SHA256

                      746b04ddbb75907bacc1c8036dd6e1f16bd22f1a5a0b928ddbc22b0433bfe452

                      SHA512

                      966ddc3c1d4f730b27adfee947be57ae4a0517ab3620b5c4042c608273c8ec3d82aa5cdfe896d82bb3cb37e46859b715032ffe1d62eb064d4ebecc996d1ac942

                    • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json.bak

                      Filesize

                      593B

                      MD5

                      84e21cd7da2ab85bf414eeb834e5154e

                      SHA1

                      534258e8346b68ecdc4cec6ad964d20940dd74b8

                      SHA256

                      2b8629037d154d60f946350ea0fa16f96970448ebe1d8e21a474cab35aa559b8

                      SHA512

                      2a9e7995c754e7fa61847a9563c1a252b77acdc30858e29761691223d2cd4bba0ed904687ba11853e30eff92ca62594e5cddb9cced0c7306812a1625c94602f9

                    • C:\Program Files\Malwarebytes\Anti-Malware\Swissarmy.dll

                      Filesize

                      4.0MB

                      MD5

                      3486801ce1e8ffc1bbc6d4f097b0f369

                      SHA1

                      08f2a85cd07cf1c0d6f27f0d5e7179c2a5cb8600

                      SHA256

                      26720d0b669898089a4ab5a6c53203918ec399d227331273ba11169bbe273678

                      SHA512

                      81974a79bf4e4086549874ef778e7716713a0107ccce212e9564f3355a26670943845aaba744691d2b68224e06e2f9d9a263e29f4ca7e46e1bfdb507a24656d5

                    • C:\Program Files\Malwarebytes\Anti-Malware\SwissarmyShim.dll

                      Filesize

                      2.6MB

                      MD5

                      89a38afcfa758e3298609c6c51929593

                      SHA1

                      2df1ee30adc92bd995526e41fd9c823354de30b4

                      SHA256

                      4795576483af0c136a71dcee87a0ffb54f0869cae6395ac2ff8312bf555e7161

                      SHA512

                      cceaed0b9a7517aebd739a377c7bd8987b9ac357be2bf987dbae31d59f2121c5bb9a9bfa2c70a9a54ad65546ef23903176dd6328d93408cb5c991257d59e2717

                    • C:\Program Files\Malwarebytes\Anti-Malware\TelemetryControllerImpl.dll

                      Filesize

                      5.3MB

                      MD5

                      a6b7865089133607d9fe66617abcebea

                      SHA1

                      e7d887a75fd48945d3f56b5635bae822ad5c7a1c

                      SHA256

                      f1f1958fbd3ecc0b61f1be129025dfc59112c09b146299caca61bd6f552c0355

                      SHA512

                      3c0638229b90fd4d4ecfbdac89a467d514824e57f1d40f68c5009051a48cc53a0f2f5712aeb530ed6aa9b855272590563c95738abf768f46bdc332806e6d7792

                    • C:\Program Files\Malwarebytes\Anti-Malware\UpdateControllerImpl.dll

                      Filesize

                      4.4MB

                      MD5

                      d0b204fb32962798ebd9ab0ad336a83c

                      SHA1

                      f281b35553afa236a214b910c537ecad0e3bacea

                      SHA256

                      627db74adff5407a074e94997cb724434478801607c972ff2afdf10d4928bb98

                      SHA512

                      5d3aa0851b7479d3c6d092052fa8271cb335f54ccac526a01c64745c222f906b6a5ece2fb6637e6dee878cf76af3ad89e0eb7e7686a7061c134a9e8e6d0d3eac

                    • C:\Program Files\Malwarebytes\Anti-Malware\ctlrvers.dat

                      Filesize

                      8B

                      MD5

                      5de6761dfaf6bff8a566a80bad9c0aed

                      SHA1

                      7c513bf3de55d4a397b3f41e538fa4988c41820c

                      SHA256

                      74f655918435255fc9d1cc9a7be6750df82f5a5dc4d3e422c5fd40e686826d9e

                      SHA512

                      87d9a3a5a4d8153273b3504c86a3a54a693ce8f0b23c3ac7719bdc646b516d59aae4f4f25c4d16d7c3860111029f20dcc13be19c44cc8edc6ed05fac7e86a491

                    • C:\Program Files\Malwarebytes\Anti-Malware\mb4uns.exe

                      Filesize

                      3.8MB

                      MD5

                      bafe0316a997b14cdfd91ea213c67542

                      SHA1

                      5f15257200374c7f3fc7e8858578cf2edd1fc58f

                      SHA256

                      08ef4e9363d8117bef551cb3ebc1370c066ecfecd10781b64a6510b7d2d8247b

                      SHA512

                      931fa97c40e7a8822dda69af856343effa794e304b3d22f8c5489db1b05440c2d84b9dae37a0d0429987aa4f0dd5b2399fe228b494efd1b8c27c12a4a522abbc

                    • C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe

                      Filesize

                      22.3MB

                      MD5

                      0eae912523483b77c66ebefaa361fbcd

                      SHA1

                      28fc9c46b610ab4b94ee4e6d0c33d5b155fb5175

                      SHA256

                      cc3c1308301e3916a9bdc0c00aaaefc5f4e5207b4626364500d30d7d977d3a9f

                      SHA512

                      d302b81a4f7bd9a8120e437b9448b36760cde3ec061b971895cb7ebe08ed7c502428302effec80c895237719323bddec585526665fc7cd8e2beafb67d7abfb1e

                    • C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

                      Filesize

                      8.1MB

                      MD5

                      bbc2f701f6397724ec997def851785c0

                      SHA1

                      ca16d57b0defe2f4f0bb4d14bea9baab5bc6874c

                      SHA256

                      083c0d95f234f624559e19a3be6de5bd304e0d0c43b68a78487cf01240bc08ae

                      SHA512

                      d0efe173217fcac12c0b1c366b7742ff8d8eeb4e8689b73562e5b1ec57427b0b94b249efe05d63f8b14684a1a46890c9f89896b01882ab31bb0a601d13b7a49b

                    • C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll

                      Filesize

                      2.7MB

                      MD5

                      b7e5071b317550d93258f7e1e13e7b6f

                      SHA1

                      2d08d78a5c29cf724bc523530d1a9014642bbc60

                      SHA256

                      467de01d7cee7ec54166b80658ff22f9feebdb1c24eaf1629cf40e4124508064

                      SHA512

                      9c35293c95c1a9141740ac99315605964aa37c4a42d3a11cae9e5649ff1427a9480d3d5e7f763212cf13db3511c5ea3c84e68f95f0067fe6339a9d3fb7b27c54

                    • C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll

                      Filesize

                      2.7MB

                      MD5

                      b7e5071b317550d93258f7e1e13e7b6f

                      SHA1

                      2d08d78a5c29cf724bc523530d1a9014642bbc60

                      SHA256

                      467de01d7cee7ec54166b80658ff22f9feebdb1c24eaf1629cf40e4124508064

                      SHA512

                      9c35293c95c1a9141740ac99315605964aa37c4a42d3a11cae9e5649ff1427a9480d3d5e7f763212cf13db3511c5ea3c84e68f95f0067fe6339a9d3fb7b27c54

                    • C:\Program Files\Malwarebytes\Anti-Malware\offreg.dll

                      Filesize

                      114KB

                      MD5

                      16663d125398773a90d0a53333b7cf5e

                      SHA1

                      f92928ae3c9292588547ceaca1cb1d372bfd7936

                      SHA256

                      38e6811b47262101759aa51a631263d9e3eee5d211164318a751e078afec4cbc

                      SHA512

                      091764b8ad80aa31eea0bbd91ee505ebdea2654bc8aeaa3081a061d0d37ab13d27dd203075fd0de10c6687591aa0e36139a38af846c4e34e6aa67ab81dc277df

                    • C:\Program Files\Malwarebytes\Anti-Malware\offreg.dll

                      Filesize

                      114KB

                      MD5

                      16663d125398773a90d0a53333b7cf5e

                      SHA1

                      f92928ae3c9292588547ceaca1cb1d372bfd7936

                      SHA256

                      38e6811b47262101759aa51a631263d9e3eee5d211164318a751e078afec4cbc

                      SHA512

                      091764b8ad80aa31eea0bbd91ee505ebdea2654bc8aeaa3081a061d0d37ab13d27dd203075fd0de10c6687591aa0e36139a38af846c4e34e6aa67ab81dc277df

                    • C:\Program Files\Malwarebytes\Anti-Malware\sdk\MBAMSwissArmy.sys

                      Filesize

                      233KB

                      MD5

                      1dc6d344ee9b6b024ba23278891db9a5

                      SHA1

                      519b792d11daa2bf9d127f69cdd603a236576e04

                      SHA256

                      823e1c7321e177b006c1f3fd1ec8b99607a12d2c3c321f3a6cbbcf7030b6c240

                      SHA512

                      fb96c4ede03c3aa729d2ea5a72c5f14029f6d69a79b6e0d5449e371bf3acdbbd1cb2079e8bbac3a3140a257c71018bc7a2a31a45ad5c8b65382e67cc3431ab6a

                    • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.sys

                      Filesize

                      217KB

                      MD5

                      6a21162e1c8a9f65787b14bc439eb077

                      SHA1

                      1bf68b253edd6cae098144e24e09b4e22178784f

                      SHA256

                      8b7990e1c676f53918e41f6b18b20179d77e598352d9243b05e2ea22b2d9e4fe

                      SHA512

                      a0dafe66479b9e68ebf04a7e2fa7c7cc352fb075356b7eccebee7af527393711e3cb36c7ff6466a5e28b17d1d003c1c49ef176b448f5de36a7c8177c9c8808c4

                    • C:\Program Files\Malwarebytes\Anti-Malware\srvversion.dat

                      Filesize

                      10B

                      MD5

                      69b658fbeec3172c7399a81fca80be51

                      SHA1

                      8f7b19f9428f3e53702209715d244f2516b7385d

                      SHA256

                      80f5bbe171839f4bc52616af01fe90931f72cba73c0008119e3046281c765b51

                      SHA512

                      8f609422356246b8f88f88545fc496ad18829241ce52ad05a764342c9ba7fc39d0bd2f5025d8a1dfc050389c6724d5d7d313c1d230a5074ab1c0173472e2fb09

                    • C:\Program Files\Malwarebytes\Anti-Malware\uipkgver.dat

                      Filesize

                      6B

                      MD5

                      74c6677020fc6b6c867aab117078bf5f

                      SHA1

                      8c46db37dc0b39eb963d4144539c8b591e122400

                      SHA256

                      cdbb9bc874d71e154c71b68b1fe959913d286036dac11e226e5620c919ba9708

                      SHA512

                      3f9db8d9bb25322f8d8e750750bf92dbe6ac63d686eced65cddfcd61178cf0e947118a491058414d4d2cbb4892e39815565669aee0dfdda23aece72d278292d0

                    • C:\Program Files\Malwarebytes\Anti-Malware\version.dat

                      Filesize

                      47B

                      MD5

                      f163c133dcfe424cf819d529a495952b

                      SHA1

                      763956357d426a5cf1ec9fa84305ef1490e58136

                      SHA256

                      9dbce69ee132b37a00033116d084386d3ee6520471324c243098c770dda1b93b

                      SHA512

                      1bc9f7fc0e4d52def7bf0b25d96779994a6ce6dc05dfecdd83e8befdae7789e1d15a48a49f99820769f77d89f2c6db497d90e230afacc09cd7c79acd4deb41e5

                    • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

                      Filesize

                      1KB

                      MD5

                      d3f54eade94035d4f2e516094c835c28

                      SHA1

                      fd2456398ef4126ac8419d428e9c1b0ccfa201fa

                      SHA256

                      fe782b3a47cf7b9cf1ed697e409215c7085692ce9c788c52604ccf26d71b9828

                      SHA512

                      8275368053b22911a8db20788693e7564846792edac70ad2d96260092d3f705fe01cc520909c00177d31184a548c42a15037ac60614dba062a8ea583f8df245f

                    • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

                      Filesize

                      47KB

                      MD5

                      10b2140c415363a5e74e1251d55dcee5

                      SHA1

                      c0d09e53e1f2c8bdf768c35b6e506b1a519b4d02

                      SHA256

                      05f6a67dc81bb50e9767b5d87a92ef5d941c68d723caac675b23ac39108278a5

                      SHA512

                      37b0a1260dee013f538b368744164a868f8540c61becb5e7d4d3a146d4f6d2524f5e45339a6e8019f12c70820b0aeded968911774909829bda353def28b3a925

                    • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

                      Filesize

                      64KB

                      MD5

                      7a9573ce14c68210b38d40a7fe5068ae

                      SHA1

                      0447c6c94afd05f6ecbfc9649aeac293c3845e0c

                      SHA256

                      92a5572301eca2b7c9954f91a05ac0458875cc9e9dc3ac6d9d1f8fc99a4027ea

                      SHA512

                      e82ce86b5edd635be824f9197d89c010324fb0b358ebb2c935eee80960de3361fc79e8d67b6c84cbeb3d7845ac713fea22d309e7bf38b4035b7887cc83a8d95e

                    • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json.bak

                      Filesize

                      64KB

                      MD5

                      8f338282120a7a9eb419012b759bbfb1

                      SHA1

                      0f6b74a3387dc3316759e72917377380dc41fa51

                      SHA256

                      b629ff2a3dd34fa85e3d854301dbdbfde6f475c4cb55dc0c5f11962c9df6902a

                      SHA512

                      e20b99dfacf55267f817574408c60534a8cb6557b6e3970ae9258b77f6be3278c4accacfa9f3ca0a624525de98a4ac42a895af379c4e7c2b415a9d93f1ef71a0

                    • C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json

                      Filesize

                      607B

                      MD5

                      5ab2665fc6dfb834122a9fec3fbe67da

                      SHA1

                      d79fd9d626f3f6e5176f0e862078ed726114b17f

                      SHA256

                      7bb49a95e039de26710db3f65bdb164680ce10f84f977361fca5a3fe281edab6

                      SHA512

                      c8f565675b5da6745f0416b3068b4ea597fb91ff46876f2bf429653ce6cc1ec4919b678a3f0bc3ddb6876c747d1d6976e6f88cc5a2887213d976b1d66b633b36

                    • C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json

                      Filesize

                      847B

                      MD5

                      13407cd4e5d805701a34523d79e4618c

                      SHA1

                      7d1d56d8a5b3e3b2a5d2e6b6510f5d7a45b61e95

                      SHA256

                      42d3a0d3a5813195fc359c474a1cca96e454519e93ba8d38661b7c96c9e93664

                      SHA512

                      3ce7aacc5984fefec383c9f9d74e44c20ba36b3fd68fbf5faa2e2afe3d1f6f08c1b1d84c7e295a8bb2b1d96929abf9d523668a5cbd8984626bb6d6dc6d631c93

                    • C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json

                      Filesize

                      543B

                      MD5

                      00610c5168eef9f8434b1b58df73f434

                      SHA1

                      375246173f84271b727ad29cec6cdc6d4a53a964

                      SHA256

                      edb9034f76e7933b6712f5581024d454d0377ca85fb07ba7b9f278e08a3ad47c

                      SHA512

                      ff46b333e5aef3d10e36043cf9485eea718e6949959a94e624765881745eda0a4c53408ba3aa1b330f979a3de23b87f702b8798362007c0941e9333edabe3b4e

                    • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

                      Filesize

                      9KB

                      MD5

                      4968f5f0b1acb4e13ef6b741877bbcda

                      SHA1

                      301a6a00b1d69e6c686aea6bac9c3de8ec7415ea

                      SHA256

                      a0656aef9c41cd9985280b1b94059f71f908b5b08a91d86732594e1ca89945bb

                      SHA512

                      4320a4acfdc11f30dbfee9b40f0a8b13fb65890dc2b36946dd39c4d46a617585555c64de316b629249a5e887071bf8ef126f216ead000efdb536c14d733bf008

                    • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

                      Filesize

                      10KB

                      MD5

                      10d609e66c8ccebed46b0a6c257569d0

                      SHA1

                      8b848498d12824b101073d7b4661791a0fa44abe

                      SHA256

                      a607e9efcbfa873523fef36a0ed6e44c3f907eb1dc5f93053df7477784fe588e

                      SHA512

                      c00c6ca59e5e29752eae64c14f70ba389816c2e0ad5ce620eb2a94df2436ca5c4343c356813f4a6a99f2ebf55e6bb0e4c115094521846ca4ae33160a0012a8cb

                    • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

                      Filesize

                      10KB

                      MD5

                      13e1d966f822da203c7a2a69b9d21c53

                      SHA1

                      b7c1b1e4ebc538e36567b0df7f9d78f02ba84ed3

                      SHA256

                      f7dfd9107787c2a18552d98569a08eb13a7870fd37f8d91bf0aeb41a5c4e8158

                      SHA512

                      3a1a96ec01c85ffe15d82ac68ca84a2d18d22b0c36c3ec1d29d33f06a74066f365ef379c159e300a31ff9b407534efd2fd63cca06482c7eb969064a35dbfbcd7

                    • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

                      Filesize

                      10KB

                      MD5

                      d39b813081ebd5cce674e3f10a18ffb6

                      SHA1

                      9b96331fa3519ef8c88a84d0be57735735ea6bac

                      SHA256

                      3d45624896f907df5700f0c40d002dd415ce4306aeadb8be7ae908a3cceac0c5

                      SHA512

                      d33651bd75242c0214d0eaeb947269d5939a2da069cb27af5f1d585fc7c119928318318294e443101031fe315c4e8a3ab2acd0189242bd698440d5c435a3e467

                    • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

                      Filesize

                      1KB

                      MD5

                      0f8742c0bf3fa4dd3c2c6b8c1186dd5f

                      SHA1

                      580c8109bd5eddeb1954408e58709c3db17b5715

                      SHA256

                      ea738a54a0bf18efa41aad33e655946d8d3d442018feeb4576fa7788e7a58845

                      SHA512

                      ddca59d280ea5c8b0babc84fda965fe956c98f6d04248a03914235da076bf9b78e07e9821a260079e9029bfb02ac5c97db67d46bd7cb654efee4f33e23058d14

                    • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

                      Filesize

                      482KB

                      MD5

                      57dd8a8f85602af98e0b1844d74b5408

                      SHA1

                      28af8ad8ad8505deefc8cd0d78c9d9f93b776bf7

                      SHA256

                      7e1266d7155c0d67a84511cbdfbc42aaf852c74fee0341034e27c17040d3dad0

                      SHA512

                      461b5658b8d20127fe683493e503df54e86fb409fab41fe1ff281ad6484d86139371cda9aa539de742e7732d3cece2cb93d6be2ea055c10f22df75c213033604

                    • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

                      Filesize

                      482KB

                      MD5

                      0fb52dd5bad4bea5dfefb4a0d69f435d

                      SHA1

                      c26d45a819135290340e5d2066fb143183e03d10

                      SHA256

                      7a5b00dc3b98750ab0856843e9895ae0099c5bc2badb06cee8c331e91b071ab0

                      SHA512

                      b5db585145acb505b307c9076968d6e5551223e7805b5ac0491b4e672d8e4c415e75f344ac457217d5a4125e31db45488db537bdb667c823ebbb9cfbc6996ae7

                    • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

                      Filesize

                      482KB

                      MD5

                      c8db0432b10adbbf00c9d23f297912a0

                      SHA1

                      8028464bfa737b4f343dcba115de0624dd3281bc

                      SHA256

                      3cb3d3c04115873343dc923a3095329418393e94b6f1afb959bc1da06af9053a

                      SHA512

                      201232480eb4861dcaf6ee8a49203999d8df2d04d42d0859d85a318f02015dc74c1d94b8131519e38b477cf6e79f022113ce453ddbf0c33c90a0fdc1de104aef

                    • C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json

                      Filesize

                      1KB

                      MD5

                      c3bba3f70ad4d465c276c2829bba2537

                      SHA1

                      7da266e4d8e45a5e667987d21566bf9207b118e7

                      SHA256

                      4afd94930e70ec593bd1adfd2b3f6eeb3594a2cdc4199434eb1d5dcefa8d93ad

                      SHA512

                      fa9da9e2fc3c06b641b2090b636f8bd3d9e797f6bbf3916da1a6d912c2cd6aa29557e55440d9795ceacd2d84558dd70e85339d1eb04a576d3b58eec3a58d022c

                    • C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json.bak

                      Filesize

                      2KB

                      MD5

                      6674fbce6091c1c1ae718ab18e865724

                      SHA1

                      118a90d5f5e05d034b81762154dfe637789b10f7

                      SHA256

                      39abb6d1c7b9d34d2b1a871789c7c561c7b9dd9c3ad5d2f1a353b2f19c7b89f4

                      SHA512

                      9b0093f9b7047a246f1035d9f297f74407c337144bdd9fc0355d7c0fb99c976ae235fccae0f0426e84be1a395a4154d6e3a69c07a170d488e84e6538b85a6e36

                    • C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json

                      Filesize

                      811B

                      MD5

                      b829752ba832ac3767d0e08945f383b5

                      SHA1

                      8e43a7236c7d2c4fd4fbde883ea4846f05a3bc47

                      SHA256

                      903d2102cd9c3e0014f7c9364c0b23906650d092dde969cbbd870ebbd73593bb

                      SHA512

                      ef3ff7baa66661ed02494f8e679ee639203900381cc4628885bfdb7e32e8aae8fc3a67e353dc08fcee46949c05e484e633ed9a1eb4bcb264b6266f61af659db5

                    • C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json

                      Filesize

                      811B

                      MD5

                      3e58c28bb5e1ca83ed5beaba75f9e603

                      SHA1

                      a750bf0381212f11a628b99e6fb42d02f10f56e5

                      SHA256

                      3aa835774f00e24ffbd0ef89bb3a696ddd88eeeb246560fe0102d0fe7a6f527d

                      SHA512

                      c6431e0468e035a21f4d9a976639fd8deac25237744bc15a05b46790d02a9758a6744bb855555d4a4abf6fc33d8c33087e2780422cedb0d4fc25152a7ed96a90

                    • C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json

                      Filesize

                      1KB

                      MD5

                      1c9fd1253fcf3932dcff8647978fc758

                      SHA1

                      e210292f6ed9a63a58bc2bc969b4aa1f45e47367

                      SHA256

                      96e1442bd897b7c67263152a38d4e97a84b15bdefa36780635ad872537ad3c34

                      SHA512

                      e82411e6b20e8975ac60165d6a85e254c757776b67f1dddc7ba1495cc7452a5616f843b1a37bcef9ac3d2267ac5cc13d506f4b9f957e7c714ecbf948435b0c57

                    • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

                      Filesize

                      4KB

                      MD5

                      dd0b16c6bad3d5dc6afb6e0f58adbe43

                      SHA1

                      f40561ebe1db46c49691e2e33e6663dcb7464e3d

                      SHA256

                      f4b8aa2d4d9cd3c8ddc5a23236d0289e41f3c59420f19784a27e4f62ab5996fa

                      SHA512

                      b1ad0afb8f1a48608796d93b5f4f54710dbab21f79377758636950b1537803685cca3fa4941ded3c854ac9b753c52968602c5378a9fd567e8662e0358d116a79

                    • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

                      Filesize

                      7KB

                      MD5

                      cf59e4fe555633c64a8f85388b0d41cb

                      SHA1

                      08acf3a21d41c19f8d57c1f3f1674cd7b95a2f14

                      SHA256

                      5a540307ed23b4c1b3be40c6ffb3c82cc2eb8ac8b4ed551268f2104e70bd4f6a

                      SHA512

                      7d8ace50adb929018cd53c263c05124bf08440db98196fb39ef070bbcc56a1a197452e5ce0a3e02fcb87d8d9e309137113139265b9728eb67b07b7080d8d8f3f

                    • C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json

                      Filesize

                      10KB

                      MD5

                      81276cf981a6f3b9a20c89a067581828

                      SHA1

                      885514bcfb9684b0a01d92a1994135f47572ffd4

                      SHA256

                      7f2352acfd98bab41ff3a641b1376e1478433a5fc7c9b09f3f7947ab923c7eb5

                      SHA512

                      82c760c084f6aa72612dfbfd81ffefdfd87bfb8136ee9b20302f3303d5a4a873c94139dffaec2b948212d7f298c1cfdba6d643364405bfe1731c9b2a79e88b48

                    • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

                      Filesize

                      1KB

                      MD5

                      62cdcb5e04f4f57696a482d438ba2ee7

                      SHA1

                      937be5ecc8ecc6ee72b52ad6293087490163e315

                      SHA256

                      e7156a587a5b1b2a804101a00ce7e235585a55ae9236e1bcfd36efb87355d87e

                      SHA512

                      f40f01067cf3a752e52544fd838a3c337586d4f2a86baf074a1192628217c94d0da345c82337728508f07ccd0ea6d8675dac59d19f0c767cd1be6b1b409780ef

                    • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

                      Filesize

                      1KB

                      MD5

                      1cf617c81cce85544566c332b8fbdc23

                      SHA1

                      50909cd2a36103e51a51f032e1a4c27b0b7f2881

                      SHA256

                      7dede57972a07b2d335aabf5ff4125e0a5f41d335f31bae1b4f1acd1e9843cdd

                      SHA512

                      7cac89f14f19ca71b1bb24c33507745f55f45e2ae231a4cbe9b2e2af9765741168c4b5303f0cb6d060d2f0b852109ef430436d3ca042ee970bf352bca28121e4

                    • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

                      Filesize

                      1KB

                      MD5

                      d32cc4f0919d23774b1705f72d3dff96

                      SHA1

                      d770d6f6142c5ff7745b366669d32427d55f6e37

                      SHA256

                      d0a3b6ece319fb8bc0e4bc52b504ff5a1723e5e1b45fa7ddced0d236739e248d

                      SHA512

                      d4fc1532adb034eac1a817e875d868bafb1584a75c7d7bd255bc4f2f0df1c7189b00c971dca0457fee36bcb6c3e603b9cd74681104f6efe70a7e1d1cad39c01c

                    • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

                      Filesize

                      1KB

                      MD5

                      587cf62b69cfd13298406c301fa8f061

                      SHA1

                      763129eef587ddeb3469771f9ea502ebf8a237f9

                      SHA256

                      90eafd836a4609c578ca62cce7505807a507748820bde3b663775426bd0bc629

                      SHA512

                      b86d8cef5fac17090a7a8e91faad9a92470c9ee8b72aa8897652544da2be178b45ffe62bd283583e8ed9e8f8930a6acb4ec9e083a3e740c106bd288b98ec4fc2

                    • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

                      Filesize

                      1KB

                      MD5

                      66c4c5801b4e3ec4aa2dc8870590d1a5

                      SHA1

                      54113aa88054cccdd6c1341e10bbd937edd3c704

                      SHA256

                      2fd52888e3fabfea678125b2392d5a6ee2e9f17c5854a28e385b6c24471b9068

                      SHA512

                      d5e3abfeb557c022d5602ffb774b07d5a6a0124ee7ea280a72b07f6af3ce14b90af7f7a9fa97094118926fa2cb70c2060a5b7acc673866aa74b18efd84019939

                    • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

                      Filesize

                      1KB

                      MD5

                      e3e7f1140a5001ca9bec337f6ff2790a

                      SHA1

                      6a09ace75dea7337d5307a44ff125ef647a34c3e

                      SHA256

                      0589edfb84f45a9ebe4a1dd6468e773b057eb71715d6f7050d58acf715a76be8

                      SHA512

                      e8aecb0f8a7743cf99395f437d20fc4279a3245ca1ee251fd358e89cb6236be366983b57c55afd631c2426af5feb968c2d9ba9a9e375c96e3ff6cfdb9e4f4ab9

                    • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak

                      Filesize

                      1KB

                      MD5

                      b37a2c776d3089f3b33ff17ee9c2896c

                      SHA1

                      90714acb7a90be13a4920719b154d609f6e90386

                      SHA256

                      6d4a7d2e1494bd336eb181a5cb373b10bf8b04b57cd71cd7adb4e80742272d4f

                      SHA512

                      d9a31087356e39202c0ae9db4d2ce743ce430df0a83d4f2c3f16a6805fa4460df2ea193c517e897520060214f35213fb149d9eaa3010da28e66f857ed1b609e2

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Actions.dll

                      Filesize

                      5.0MB

                      MD5

                      1eff53d95ecaf6bbfffe80d866d8e1dd

                      SHA1

                      d7ef7d7c77fd04b2c0eb8c16bb3cd08057f6742f

                      SHA256

                      6dd748f7ca56125cbe158fa3612f08e7312ef58ad5375e6b7ab5532cc16ca0ac

                      SHA512

                      c59b8e6f0b238a247e64b9c7bb42213dadac1dada63542830a6292361174c935c0c662b2d1aed3fb6100cc4993297b1eaf25e328f2b4613458c4ffca63b9f02d

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\BrowserSDKDLL.dll

                      Filesize

                      5.8MB

                      MD5

                      1ed53171d00f440f29a12f9beb84dac4

                      SHA1

                      4d9a1e3579b0999f1ab2fa818b588411e9ee920c

                      SHA256

                      e659e687a872050f9e65d78992d16bd9b393cf3f8e8c94e0e15fb42b7065327e

                      SHA512

                      17161cfc672d1b996b8af4ebac17f9a8a3807f38c9a23e2e5b4dadcd9a21c3a64faec9bf59147022a9df88b80f89300f1b537091289bd7a42806bd206a317e6e

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Global.nm

                      Filesize

                      316KB

                      MD5

                      b8a25c3628025b6dfc4d0600291da376

                      SHA1

                      4c9963fb4f10aa3a820dc97974e0241147ca1a61

                      SHA256

                      70c70f0a8f9d20fb30dd8a0a6f5358b649282e900bd45ba3451e028067ceb210

                      SHA512

                      0686a08d7d6c52b17f0b4d22443a3a03e7337e3a7c6af2704f1bef0b84ca54506d8ab663e9fb48a6caa7d66e18a75f24a234a09d42ce92961ef317e0158bdbe6

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Global.sr

                      Filesize

                      12.6MB

                      MD5

                      ae57cd819176c8a817c7fde1405cbe10

                      SHA1

                      2515332908fa311555eec77713c20ab9dbdd1ac0

                      SHA256

                      fe7d33d400e1b8dcebfdfc96191c46d7de07d21dbb7d5f6287268a00dd4ccad2

                      SHA512

                      cafdf98d303ed53c683259a1254189c4718f45205348278628c8fb353367cd1f792252a4b9f81d5af85dc621beefa16a46809ca3f38c73ea14603da5d5603fcb

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\MBAMCore.dll

                      Filesize

                      6.3MB

                      MD5

                      bd96638fbea97c8a92354cf13b57ad11

                      SHA1

                      7a1bd8295c5de8f35236919712580f3e4061d7ef

                      SHA256

                      bfa914fa06a8f621c465bfba1c498b8a1b7d2e34081b76b175d49b3349dffbaf

                      SHA512

                      5407ae3404bc97302e50e02bd371cf2d3203069e4c10651cf9b0f7ca349682435109e13701d874c63f76be56979c1f5c31cf3ad65434df479ef9084c8dfe65c0

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\cfg.bin

                      Filesize

                      639B

                      MD5

                      544a36063346eeb1e751030008a9f7e3

                      SHA1

                      b5c44a037d16bfd5cfe0e6ba9cb770111b3aac82

                      SHA256

                      33a822063dc53b5a693b5920f6a14bf4c9c1905c08b3257b7621c9f0c41d39d6

                      SHA512

                      fb86ef1c271d10da364654b244253a4492b8331d69e2a71479671a44f613b88a72822b5a849159b63b7b28c7cbe0c6b7ed35f82cf749a598b23676fae70f279c

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\clean.mbdb

                      Filesize

                      10KB

                      MD5

                      139463e2c959cb40c3cd45d9fbde3d9b

                      SHA1

                      366d67d10d35cc969de0119c43793944810eaf21

                      SHA256

                      db2c789d5b6879a3a3ba9bae5a928be8f930ccca617daff4f2d14d148a232808

                      SHA512

                      1a37f6bf3cc837a6582cedee5e72ec5af19dd9707015ca1ad12d20da6d5ab26efad8bf79ddecf3eb8e75f0c9b06edc7f9a6a0319e130496c10ef43713e0426b4

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\dbmanifest2.dat

                      Filesize

                      924B

                      MD5

                      cda9818608e36413437a7ee9bfa7ee24

                      SHA1

                      50a2a598cfaa83312e098899c1120e584ed59b5d

                      SHA256

                      a545fb7be580a48a78766213161ff931b806331b1c07605671e167ef147f5d85

                      SHA512

                      fe880ce1c8db60c69703902de4b21f43a1944898f6f8965165a5e04cbf39b867bbc1c9e986ea6062db1969b334c74c8364c7133f6c9c7be35d28fe2c8531c310

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\dynconfig.dat

                      Filesize

                      39KB

                      MD5

                      10f23e7c8c791b91c86cd966d67b7bc7

                      SHA1

                      3f596093b2bc33f7a2554818f8e41adbbd101961

                      SHA256

                      008254ca1f4d6415da89d01a4292911de6135b42833156720a841a22685765dc

                      SHA512

                      2d1b21371ada038323be412945994d030ee8a9007db072484724616c8597c6998a560bc28886ebf89e2c8919fb70d76c98338d88832351823027491c98d48118

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\exclusions.txt

                      Filesize

                      23KB

                      MD5

                      aef4eca7ee01bb1a146751c4d0510d2d

                      SHA1

                      5cf2273da41147126e5e1eabd3182f19304eea25

                      SHA256

                      9e87e4c9da3337c63b7f0e6ed0eb71696121c74e18a5da577215e18097715e2f

                      SHA512

                      d31d21e37b0048050b19600f8904354cff3f3ec8291c5a7a54267e14af9fb88dfb6d11e74a037cc0369ade8a8fb9b753861f3b3fb2219563e8ec359f66c042db

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\ig.exe

                      Filesize

                      1.8MB

                      MD5

                      1de486b8ed4b8be4e2167c57f05fa0bc

                      SHA1

                      fe50086756f5e49cdf3502661d3e924a9320504b

                      SHA256

                      76b6b8a44197195a4e6ec099994d12223d7e357145995aa3a28f36c6af19a249

                      SHA512

                      6379ebc068fc7ae1e042ec66200bfee7df3d3cbeedde809785ea22be45f6b4a9af042a1b814faccdbbd1808de22d06da9884d2bd6552bdcd40b96ee343169fe3

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\mbdigsig2.dat

                      Filesize

                      514B

                      MD5

                      7aba465ef503879838997b7a247228b1

                      SHA1

                      8cb88b65b678c706c8f9c2d4e081dff2a69bfa94

                      SHA256

                      8b15f0b12761e28c88337e3ef7cad386da7f0fbe91eefbeb57b270878621770d

                      SHA512

                      e069448379bc01bf0803f8054e23b24cbdb3bb8a0d7f54ae5463cf435adb7b20339ca1a8d714fb3ef0f43e45c6d0ecc47be574bba15110b0f1d5c7d0c66ef8ed

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\prot.mbdb

                      Filesize

                      24B

                      MD5

                      546d9e30eadad8b22f5b3ffa875144bf

                      SHA1

                      3b323ffef009bfe0662c2bd30bb06af6dfc68e4d

                      SHA256

                      6089fbf0c0c1413f62e91dc9497bedc6d8a271e9dc761e20adc0dccf6f4a0c1f

                      SHA512

                      3478f5dcf7af549dd6fe48ad714604200de84a90120b16a32233b6d44fa7240f5f4e5fe803f54b86bbdfd10fa1bfdd88fb85eb6a78e23e426933f98d0a2565ec

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\rdefs.mbdb

                      Filesize

                      24B

                      MD5

                      2f7423ca7c6a0f1339980f3c8c7de9f8

                      SHA1

                      102c77faa28885354cfe6725d987bc23bc7108ba

                      SHA256

                      850a4ea37a0fd6f68bf95422d502b2d1257264eb90cc38c0a3b1b95aa375be55

                      SHA512

                      e922ac8a7a2cde6d387f8698207cf5efbd45b646986a090e3549d97a7d552dd74179bd7ac20b7d246ca49d340c4c168982c65b4749df760857810b2358e7eb69

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\rules.mbdb

                      Filesize

                      21.8MB

                      MD5

                      deede457e02b1d028b003ce8502923a0

                      SHA1

                      3ed7b618074199826aa0b469d5f6719261adb5af

                      SHA256

                      8b60f08c604333488bc0152177d6d6eca02f7df182be2c5e901277ea7ed7bc41

                      SHA512

                      b7a4ca26f42a99022709f2648c386202f8aa5d9f49cfb8715712583f16021fda8a1e60f7d288db05ecdd9e8c48c54cc42e4698ef95a08b016d2942e554fd3645

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\sample.dll

                      Filesize

                      528KB

                      MD5

                      efe681deaaa5933a7739bea15d3bac7b

                      SHA1

                      3fa6171c50169a669afd83729a4259a98e661894

                      SHA256

                      e1dc101b784eabdaf10c72ff2a0733707ab6d04a25a4bc49506eece5c529a843

                      SHA512

                      49c23f3679125f7884b033986d0a3602858403ccd3b31c0a0c188df0b6d43e0d04fd8a9042e2460fac23b66eca1990bb96a388edd81d1397f4184f9444e9e0fa

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\scan.mbdb

                      Filesize

                      1.4MB

                      MD5

                      2dd90f007a3da13bf16554110b553ecb

                      SHA1

                      776fe978dedeb7c61defc0f3ec5ff089acb38d64

                      SHA256

                      7f6b0b34342fe9c98d671db1156dbd10b97e52ed3bf5f86e27652ec7703fd703

                      SHA512

                      51599377001937fcf981647616ce3e1ad479ea53e7dadfe52a82d78c558f11b4750340666dc06d136e046448a2a6c3418a5c535b8ecf168deb525551d4867c5d

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\tids.mbdb

                      Filesize

                      234KB

                      MD5

                      870c0a1b7a8af2f75366dd5a169f7118

                      SHA1

                      e41398c1b1cda8cffb4a6956c50a184d0aa7d4eb

                      SHA256

                      52038228fcb7267babbfefed9785555022a403010ba13f7db0ec782cae6bbb6c

                      SHA512

                      fb704363a5f1085a510ae51ff4a08a40a1b4ec895b9c15ef46c1763a55a0425bddc8ff1ed2fc76b2014b4d95ca2cb8bd0334b904ce5c4e0837cf4c834689fad4

                    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\wprot2.mbdb

                      Filesize

                      40.2MB

                      MD5

                      1d20412d4dcd63d51d0effd6a778dcdc

                      SHA1

                      07adb172ac7b3be4fe8f78760cdd5e27fe93159d

                      SHA256

                      1e01fbfeaa2e73e0a08b2e6dcb49ab0eb23c05c40c36b87a67cc40120bbe282c

                      SHA512

                      3bca90a57f91ff251214c47d4fa68300707049d1d3dc2f778f4d0c35dfba94fe9cd7151413e191ea79cdb79ff38ab10605b4186e6761c6505e9d9ff3a971fb27

                    • C:\ProgramData\Malwarebytes\MBAMService\pkgvers.dat

                      Filesize

                      75B

                      MD5

                      b14161dc493580b365e49f68c273683f

                      SHA1

                      a1a252bed7e458026ee9ebe48ffa83211af41676

                      SHA256

                      7f637601e7e869fb56593343cbc3161943bd6e7008b004e4f85d8cf8788b6e7c

                      SHA512

                      1157f6896ee57e2cd62a252035dc8a7f886936f02b83ea39490d8d79f973286e6396bcedc6774896cab3f46208fb09c42c1fd303103c4d193e076ff77dc02f40

                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                      Filesize

                      152B

                      MD5

                      cd4f5fe0fc0ab6b6df866b9bfb9dd762

                      SHA1

                      a6aaed363cd5a7b6910e9b3296c0093b0ac94759

                      SHA256

                      3b803b53dbd3d592848fc66e5715f39f6bc02cbc95fb2452cd5822d98c6b8f81

                      SHA512

                      7072630ec28cf6a8d5b072555234b5150c1e952138e5cdc29435a6242fda4b4217b81fb57acae927d2b908fa06f36414cb3fab35110d63107141263e3bba9676

                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                      Filesize

                      152B

                      MD5

                      1d40312629d09d2420e992fdb8a78c1c

                      SHA1

                      903950d5ba9d64ec21c9f51264272ca8dfae9540

                      SHA256

                      1e7c6aa575c3ec46cd1fdf6df51063113d277012ed28f5f6b37aea95cd3a64ac

                      SHA512

                      a7073247ae95e451ed32ceeae91c6638192c15eaad718875c1272eff51c0564016d9f84690543f27df509a7d579de329d101fbf82fed7cbeb27af57393de24ac

                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                      Filesize

                      720B

                      MD5

                      dc951fa8ad0e8c41516ca2c9d189dd20

                      SHA1

                      6a115c3067b60d38e2d523a4bae55c34e1a671f9

                      SHA256

                      4885277e79967ee0b91d5b481a3e1c4db62b081129869f73784fe251f7200169

                      SHA512

                      db54b89838b24657f6227028edc86fdbe3a455d3c503106a27188358d9aba7b4dbdcbddca3dc8198ae8a6c93924a1c3f44643ea33e690fe47ae6c5a39ea97190

                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                      Filesize

                      48B

                      MD5

                      648da5cb7247dc5788f6240d03a2bd98

                      SHA1

                      8ac13cc0804e0b338be4a88f91515e469f37ad9e

                      SHA256

                      7fe5dc82caa58ec122d24d8c53d5762268670ec0fb8a02bed30474896cef0132

                      SHA512

                      1af597b8dc81f7c5bda8fc9c3ebada9b5afa2f897ee7f8ce38cce9f7902d7509f52ee625ba63f57f96247317a1d118c19d38d1d3b8f7950a16d6c677d7de5e48

                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico

                      Filesize

                      70KB

                      MD5

                      e5e3377341056643b0494b6842c0b544

                      SHA1

                      d53fd8e256ec9d5cef8ef5387872e544a2df9108

                      SHA256

                      e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25

                      SHA512

                      83f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef

                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1

                      Filesize

                      264KB

                      MD5

                      f50f89a0a91564d0b8a211f8921aa7de

                      SHA1

                      112403a17dd69d5b9018b8cede023cb3b54eab7d

                      SHA256

                      b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                      SHA512

                      bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnk

                      Filesize

                      2KB

                      MD5

                      006b2d560fa07f62bcc21204049d3e90

                      SHA1

                      ba33da1db7f1eaf20a9cd2c8bd2ca23c0a094019

                      SHA256

                      2559a0b2e6ae3e428698d9ac5706b0fb95fe8d8d3a4381603be75442828d6f8d

                      SHA512

                      8358ffaa5faffdbe03804e91713e40890913ae96a6dcd9cec3260ca04ff85bd4ee7e960fb864a8ad7b3582cb74e05ca33983028518ad4c6e4a5b346ceea1d9e7

                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                      Filesize

                      2KB

                      MD5

                      d2ce0f4d0540cb8d4c8a4c1686db5568

                      SHA1

                      4238b3d7c078db15535dc4914bb9a33dab1daeed

                      SHA256

                      9ae607999d45790bd89a83099628059b7d2dea868033ca53e4d205e8e5489e06

                      SHA512

                      bc93cec7e980c8d4f6f857cfb126dd59b3dc974e00b6d950808958bc5a88df16563d2066de7f2f83bfcac27aace5cc8de270aad85ac01a0f22d4dc9228e37bb9

                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                      Filesize

                      4KB

                      MD5

                      5ac4e72ec26e267d2b7fc832d88c4a34

                      SHA1

                      fe705ef4c4acbcb1d2f653914473ababb2d8e93e

                      SHA256

                      5aa68097935b74b8c803f5c43840d5cd3b70d4a03c5427873088a6c41752fbf1

                      SHA512

                      2b73a895700a5365b7bc553e30fe6bb573ca3236124cf305a3b6c09fb7b2ca36a5401536c72b53835e721dc29b32b804429ae59fb8de5d96a6e4ef1ee4da5163

                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                      Filesize

                      8KB

                      MD5

                      a3d17775efa434d57121e5919e460505

                      SHA1

                      001df63d535d8244eb55897a7afe3f6386b02e2d

                      SHA256

                      4d97e88b7201d2d7b528689908371d00b298cfff063b1464596b9853bdf1f7de

                      SHA512

                      ca6fb512ec3040d0c5c58f40e7971e2994279d10b54a7697f421512d8da78e025788360b8bcd6ee8a432b54d0bec1a37aae8e4cca8f315b25b581467458c133b

                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

                      Filesize

                      24KB

                      MD5

                      1463bf2a54e759c40d9ad64228bf7bec

                      SHA1

                      2286d0ac3cfa9f9ca6c0df60699af7c49008a41f

                      SHA256

                      9b4fd2eea856352d8fff054b51ea5d6141a540ca253a2e4dc28839bc92cbf4df

                      SHA512

                      33e0c223b45acac2622790dda4b59a98344a89094c41ffdb2531d7f1c0db86a0ea4f1885fea7c696816aa4ceab46de6837cc081cd8e63e3419d9fcb8c5a0eb66

                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\CURRENT

                      Filesize

                      16B

                      MD5

                      46295cac801e5d4857d09837238a6394

                      SHA1

                      44e0fa1b517dbf802b18faf0785eeea6ac51594b

                      SHA256

                      0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                      SHA512

                      8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\MANIFEST-000001

                      Filesize

                      41B

                      MD5

                      5af87dfd673ba2115e2fcf5cfdb727ab

                      SHA1

                      d5b5bbf396dc291274584ef71f444f420b6056f1

                      SHA256

                      f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                      SHA512

                      de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                      Filesize

                      16B

                      MD5

                      206702161f94c5cd39fadd03f4014d98

                      SHA1

                      bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                      SHA256

                      1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                      SHA512

                      0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                      Filesize

                      9KB

                      MD5

                      85edb873244dea30fd24336f8a486458

                      SHA1

                      6052941bd962ffb3faec2acf869f6fbaca600ca2

                      SHA256

                      b75f2d47a4e6b42ca6d41516057d887fcef3e0d1d9eb5ebc2c9a681a2e65ba93

                      SHA512

                      9f02392dd0a3856b6e9318373e0626e4fcac8d4f67a35d1c669c0c622d8a655aecd44dc17a375a1f7ed3c8b23a46686e6b7593222b2e9697b924dbc61fb489b6

                    • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

                      Filesize

                      3KB

                      MD5

                      88e6a45612c595e6cbf41e2f5acdc122

                      SHA1

                      bf52cbef9f43c1718047a5f5d18c7f05568050c8

                      SHA256

                      8b6e4c51a21a55e4494b1da31ac4d68c03a36e696048e1d8e7e660155745c58a

                      SHA512

                      5b140feb7250fcbb48e5f6df92569f3fe6ad745cc3270946653cdfceabffe435767191acbdc99735a3c4c2d71b41ebb487c75c867d4c1f41d414afcc3792b7d5

                    • C:\Windows\System32\CatRoot2\dberr.txt

                      Filesize

                      146KB

                      MD5

                      ed55a3412b039298800a2b484451e8eb

                      SHA1

                      7dde90d5d8a732590c8c815157a7455e4848caa8

                      SHA256

                      dcb32ab5e4f0cf2b75f6e778ef8220a45f39daf4f9cd0b321632cd7ae1537bc3

                      SHA512

                      10bf0d81e8c2a35b4f8057f47310bc7496134ce586016c4d95a6fdf4319f89b584c66961de1fa4b3b5742b8fc2dc431e9589150105616ea10c5e07f01316005a

                    • C:\Windows\Temp\MBInstallTempd457d928d95b11edb651c6a25d41c1ad\7z.dll

                      Filesize

                      1.6MB

                      MD5

                      ab8f0c1a37c0df5c8924aab509db42c9

                      SHA1

                      53dba959124e6d740829bda2360e851bcb85cce8

                      SHA256

                      6e223b275b84d948cc5ae1f161f0bfff2adb34de04634c84d7dbe9305a4998d5

                      SHA512

                      ff8a26e8fd5a08c74e5ba93a564e0d3cd932754e7f06993a365bfad06670497889e69ec45bfba1378040b72f82d468e79682beba2439937bb29d2a41da940d4a

                    • C:\Windows\Temp\MBInstallTempd457d928d95b11edb651c6a25d41c1ad\7z.dll

                      Filesize

                      1.6MB

                      MD5

                      ab8f0c1a37c0df5c8924aab509db42c9

                      SHA1

                      53dba959124e6d740829bda2360e851bcb85cce8

                      SHA256

                      6e223b275b84d948cc5ae1f161f0bfff2adb34de04634c84d7dbe9305a4998d5

                      SHA512

                      ff8a26e8fd5a08c74e5ba93a564e0d3cd932754e7f06993a365bfad06670497889e69ec45bfba1378040b72f82d468e79682beba2439937bb29d2a41da940d4a

                    • C:\Windows\Temp\MBInstallTempd457d928d95b11edb651c6a25d41c1ad\ctlrpkg\mbae64.sys

                      Filesize

                      154KB

                      MD5

                      95515708f41a7e283d6725506f56f6f2

                      SHA1

                      9afc20a19db3d2a75b6915d8d9af602c5218735e

                      SHA256

                      321058a27d7462e55e39d253ad5d8b19a9acf754666400f82fe0542f33e733c6

                      SHA512

                      d9230901adeecb13b1f92287abe9317cdac458348885b96ef6500960793a7586c76ae374df053be948a35b44abe934aa853975a6ccd3788f93909903cc718c08

                    • C:\Windows\Temp\MBInstallTempd457d928d95b11edb651c6a25d41c1ad\servicepkg\MBAMService.exe

                      Filesize

                      8.7MB

                      MD5

                      df6a796460b0f70a9a42cb1ab98e7ffd

                      SHA1

                      657c2c3cdef7325c6331f377fe0227760f6bde1a

                      SHA256

                      676f3c56d6e5c8dddd7f01d5d10baad352683a2cb8b9bd4ce526a7629fc8fa43

                      SHA512

                      21b399a76845f81ceabc60d2225ddea30296f3ecd52a3668e60a51d9593c9444596b8ec041b53ae8d8f6f18ee54ab23db8678945e832355e9e76a6fbbfcc0b87

                    • C:\Windows\Temp\MBInstallTempd457d928d95b11edb651c6a25d41c1ad\servicepkg\mbamelam.cat

                      Filesize

                      10KB

                      MD5

                      60608328775d6acf03eaab38407e5b7c

                      SHA1

                      9f63644893517286753f63ad6d01bc8bfacf79b1

                      SHA256

                      3ed5a1668713ef80c2b5599b599f1434ad6648999f335cf69757ea3183c70c59

                      SHA512

                      9f65212121b8a5d1a0625c3baa14ef04a33b091d26f543324333e38dcdb903e02ccc4d009e22c2e85d2f61d954e0b994c2896e52f685003a6ef34758f8a650c7

                    • C:\Windows\Temp\MBInstallTempd457d928d95b11edb651c6a25d41c1ad\servicepkg\mbamelam.inf

                      Filesize

                      2KB

                      MD5

                      c481ad4dd1d91860335787aa61177932

                      SHA1

                      81633414c5bf5832a8584fb0740bc09596b9b66d

                      SHA256

                      793626d240fd8eefc81b78a57c8dfe12ea247889b6f07918e9fd32a7411aa1c3

                      SHA512

                      d292e028936412f07264837d4a321ecfa2f5754d4048c8bcf774a0e076e535b361c411301558609d64c71c1ce9b19e6041efa44d201237a7010c553751e1e830

                    • C:\Windows\Temp\MBInstallTempd457d928d95b11edb651c6a25d41c1ad\servicepkg\mbamelam.sys

                      Filesize

                      20KB

                      MD5

                      9e77c51e14fa9a323ee1635dc74ecc07

                      SHA1

                      a78bde0bd73260ce7af9cdc441af9db54d1637c2

                      SHA256

                      b5619d758ae6a65c1663f065e53e6b68a00511e7d7accb3e07ed94bfd0b1ede0

                      SHA512

                      a12ccf92bead694f5d3cba7ff7e731a2f862198efc338efc7f33a882fe0eb7499fb3fb533538d0a823e80631a7ca162962fbdfd78e401e3255672910b7140186

                    • C:\Windows\Temp\MBInstallTempd457d928d95b11edb651c6a25d41c1ad\servicepkg\mbshlext.dll

                      Filesize

                      2.7MB

                      MD5

                      b7e5071b317550d93258f7e1e13e7b6f

                      SHA1

                      2d08d78a5c29cf724bc523530d1a9014642bbc60

                      SHA256

                      467de01d7cee7ec54166b80658ff22f9feebdb1c24eaf1629cf40e4124508064

                      SHA512

                      9c35293c95c1a9141740ac99315605964aa37c4a42d3a11cae9e5649ff1427a9480d3d5e7f763212cf13db3511c5ea3c84e68f95f0067fe6339a9d3fb7b27c54

                    • C:\Windows\Temp\MBInstallTempd457d928d95b11edb651c6a25d41c1ad\uipkg\QtQuick\Controls.2\HorizontalHeaderView.qml

                      Filesize

                      1KB

                      MD5

                      d8c9674c0e9bddbd8aa59a9d343cf462

                      SHA1

                      490aa022ac31ddce86d5b62f913b23fbb0de27c2

                      SHA256

                      1ef333b5fb4d8075973f312ef787237240b9f49f3f9185fb21202883f900e7d7

                      SHA512

                      0b86ec673133f6400c38b79f9ba4f7b37ce5afdab1a2e34acbf75019e2590cc26b26d323ddc1567c91375053c9c8593be0615389db8eb1a8d1eb084ad4200b82

                    • C:\Windows\Temp\MBInstallTempd457d928d95b11edb651c6a25d41c1ad\uipkg\QtQuick\Controls.2\Imagine\VerticalHeaderView.qml

                      Filesize

                      1KB

                      MD5

                      829769b2741d92df3c5d837eee64f297

                      SHA1

                      f61c91436ca3420c4e9b94833839fd9c14024b69

                      SHA256

                      489c02f8716e7a1de61834b3d8bbb61bce91ca4a33a6b62342b4c851d93e51e0

                      SHA512

                      4061c271db37523b9dea9a9973226d91337e1809d4e7767e57ac938d35d77a302363ed92ab4be18c35ba589f528194ad71c93a8507449bf74dd035acf7cdb521

                    • memory/3616-5143-0x000002598AC70000-0x000002598AC71000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5164-0x000002598A210000-0x000002598A211000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5180-0x000002598AC80000-0x000002598AC81000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5178-0x000002598AC90000-0x000002598AC92000-memory.dmp

                      Filesize

                      8KB

                    • memory/3616-5179-0x000002598AC80000-0x000002598AC81000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5177-0x000002598ACA0000-0x000002598ACA2000-memory.dmp

                      Filesize

                      8KB

                    • memory/3616-4672-0x00007FFE19B20000-0x00007FFE19F3E000-memory.dmp

                      Filesize

                      4.1MB

                    • memory/3616-4673-0x00007FFE195B0000-0x00007FFE19B1B000-memory.dmp

                      Filesize

                      5.4MB

                    • memory/3616-4671-0x00007FF7D8930000-0x00007FF7D9F24000-memory.dmp

                      Filesize

                      22.0MB

                    • memory/3616-4676-0x0000025982910000-0x0000025982920000-memory.dmp

                      Filesize

                      64KB

                    • memory/3616-5175-0x000002598AC90000-0x000002598AC92000-memory.dmp

                      Filesize

                      8KB

                    • memory/3616-5173-0x000002598AC90000-0x000002598AC92000-memory.dmp

                      Filesize

                      8KB

                    • memory/3616-5174-0x000002598AC90000-0x000002598AC92000-memory.dmp

                      Filesize

                      8KB

                    • memory/3616-5172-0x000002598AC80000-0x000002598AC81000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5171-0x000002598AC80000-0x000002598AC81000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-4760-0x0000025982910000-0x0000025982920000-memory.dmp

                      Filesize

                      64KB

                    • memory/3616-5141-0x000002598AC70000-0x000002598AC71000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5142-0x000002598AC70000-0x000002598AC71000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5170-0x000002598AC80000-0x000002598AC81000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5144-0x000002598AC70000-0x000002598AC71000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5145-0x000002598AC70000-0x000002598AC71000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5146-0x000002598AC70000-0x000002598AC71000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5147-0x000002598AC70000-0x000002598AC71000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5148-0x000002598AC70000-0x000002598AC71000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5150-0x000002598A200000-0x000002598A201000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5151-0x000002598A200000-0x000002598A201000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5152-0x000002598A200000-0x000002598A201000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5153-0x000002598A200000-0x000002598A201000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5154-0x000002598A200000-0x000002598A201000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5156-0x000002598A210000-0x000002598A211000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5158-0x000002598AC70000-0x000002598AC71000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5157-0x000002598AC70000-0x000002598AC71000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5159-0x000002598AC70000-0x000002598AC71000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5160-0x000002598AC70000-0x000002598AC71000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5161-0x000002598AC70000-0x000002598AC71000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5162-0x000002598A210000-0x000002598A211000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5163-0x000002598A210000-0x000002598A211000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5168-0x000002598A210000-0x000002598A211000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5165-0x000002598A210000-0x000002598A211000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5167-0x000002598A210000-0x000002598A211000-memory.dmp

                      Filesize

                      4KB

                    • memory/3616-5166-0x000002598A210000-0x000002598A211000-memory.dmp

                      Filesize

                      4KB

                    • memory/4592-4226-0x00007FFE19B20000-0x00007FFE19F3E000-memory.dmp

                      Filesize

                      4.1MB

                    • memory/4592-4225-0x00007FFE195B0000-0x00007FFE19B1B000-memory.dmp

                      Filesize

                      5.4MB

                    • memory/4592-4227-0x00000228C6FE0000-0x00000228C7420000-memory.dmp

                      Filesize

                      4.2MB

                    • memory/4592-4229-0x00000228C7420000-0x00000228C7620000-memory.dmp

                      Filesize

                      2.0MB

                    • memory/4592-4233-0x00000228C4B40000-0x00000228C4B50000-memory.dmp

                      Filesize

                      64KB

                    • memory/4728-4500-0x000001F4C2BE0000-0x000001F4C3066000-memory.dmp

                      Filesize

                      4.5MB

                    • memory/4728-3386-0x000001F4C2BE0000-0x000001F4C3066000-memory.dmp

                      Filesize

                      4.5MB

                    • memory/4728-4709-0x000001F4C3870000-0x000001F4C3BA4000-memory.dmp

                      Filesize

                      3.2MB

                    • memory/4728-4708-0x000001F4C2BE0000-0x000001F4C3066000-memory.dmp

                      Filesize

                      4.5MB

                    • memory/4728-4231-0x000001F4C2BE0000-0x000001F4C3066000-memory.dmp

                      Filesize

                      4.5MB

                    • memory/4728-4232-0x000001F4C3870000-0x000001F4C3BA4000-memory.dmp

                      Filesize

                      3.2MB