Analysis

  • max time kernel
    154s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230621-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-06-2023 01:06

General

  • Target

    MBSetup-0062692.0062692-consumer.exe

  • Size

    2.5MB

  • MD5

    2934dc1e4c95c9c6a9acaad0871af226

  • SHA1

    91cfc4e82bb2fbdccc8c6191f5ac37f9a5257aaa

  • SHA256

    90750197384e4ed5add4587135f91b2e22a6898906e642b1a4953d5131d92af9

  • SHA512

    bce2a73ef06f1284d00313551e2c57e4f7576b27b6c1e6d7bb27bd4597b8c37de8004e9f325c9bad252763173f03af20e4cd4a4d12089b328bc85775eba5c689

  • SSDEEP

    49152:Xe//Bxd1CRAm14cr76YWf0wLZN2DxiIq2dWKsf6vHx:O/iRAm1Lr7utWRq2oQ

Malware Config

Signatures

  • Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs
  • Downloads MZ/PE file
  • Drops file in Drivers directory 21 IoCs
  • Modifies RDP port number used by Windows 1 TTPs
  • Sets service image path in registry 2 TTPs 2 IoCs
  • Checks BIOS information in registry 2 TTPs 4 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 12 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 1 IoCs
  • Executes dropped EXE 56 IoCs
  • Loads dropped DLL 64 IoCs
  • Registers COM server for autorun 1 TTPs 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 20 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 39 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: LoadsDriver 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 10 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:3196
      • C:\Users\Admin\AppData\Local\Temp\MBSetup-0062692.0062692-consumer.exe
        "C:\Users\Admin\AppData\Local\Temp\MBSetup-0062692.0062692-consumer.exe"
        2⤵
        • Suspicious use of NtCreateUserProcessOtherParentProcess
        • Drops file in Drivers directory
        • Checks BIOS information in registry
        PID:4000
      • C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe"
        2⤵
        • Executes dropped EXE
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of FindShellTrayWindow
        PID:4124
    • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
      "C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe"
      1⤵
      • Drops file in Drivers directory
      • Enumerates connected drives
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies Internet Explorer settings
      • Modifies data under HKEY_USERS
      • Modifies system certificate store
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:1084
      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" /Service /Protected
        2⤵
        • Drops file in Drivers directory
        • Drops file in System32 directory
        • Executes dropped EXE
        • Registers COM server for autorun
        • Modifies registry class
        • Suspicious use of AdjustPrivilegeToken
        PID:4744
    • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
      "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"
      1⤵
      • Drops file in Drivers directory
      • Sets service image path in registry
      • Checks BIOS information in registry
      • Enumerates connected drives
      • Drops file in System32 directory
      • Drops file in Program Files directory
      • Drops file in Windows directory
      • Executes dropped EXE
      • Loads dropped DLL
      • Registers COM server for autorun
      • Checks processor information in registry
      • Modifies Internet Explorer settings
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Modifies system certificate store
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4856
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5176
      • C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        PID:5204
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-0.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5272
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-1.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5380
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-2.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5444
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-3.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5480
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-4.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5540
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-5.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5584
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-6.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5592
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-7.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5624
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-8.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5672
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-9.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5692
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-10.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5712
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-11.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5748
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-12.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5768
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-13.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5792
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-14.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5828
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-15.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5884
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-16.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5948
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-17.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:6068
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-18.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:6104
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-19.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:6140
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-20.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:4664
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-21.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:2156
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-22.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:1720
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-23.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:4828
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-24.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:1440
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-25.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:3184
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-26.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:5084
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-27.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:3976
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-28.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:4964
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-29.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:3436
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-30.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:1700
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-31.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:688
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-32.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:4068
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-33.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:3488
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-34.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:1612
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-35.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:3868
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-36.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:2204
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-37.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:1980
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-38.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:2524
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-39.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:4280
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-40.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:2152
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-41.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:4008
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-42.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:4296
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-43.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:1424
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-44.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:932
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-45.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:4480
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-46.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:3932
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-47.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:920
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-48.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:3204
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig-49.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:3836
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x2d4 0x300
      1⤵
        PID:5224

      Network

      MITRE ATT&CK Enterprise v6

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\7z.dll

        Filesize

        1.7MB

        MD5

        461faf68ccc02b0223fd273b630f21fe

        SHA1

        363b8beaa74f0f454c2d544ace9e71a84bc2b4cf

        SHA256

        cb07f3f461e9c267831b1ab93af6dfda1bb51d72e42d73d00d26594f09326be1

        SHA512

        4b671f48e45fdedf50c7f7bb6c8d82a3b98f7502006eb002aaf8ff31f25f9ff1257c7bcc12caf622e43d4ec665b19d978ae3e3762f76def0bc71485ebdb8426f

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\Actions.dll

        Filesize

        5.0MB

        MD5

        1eff53d95ecaf6bbfffe80d866d8e1dd

        SHA1

        d7ef7d7c77fd04b2c0eb8c16bb3cd08057f6742f

        SHA256

        6dd748f7ca56125cbe158fa3612f08e7312ef58ad5375e6b7ab5532cc16ca0ac

        SHA512

        c59b8e6f0b238a247e64b9c7bb42213dadac1dada63542830a6292361174c935c0c662b2d1aed3fb6100cc4993297b1eaf25e328f2b4613458c4ffca63b9f02d

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ActionsShim.dll

        Filesize

        2.5MB

        MD5

        e7a4bb8fa34bc5ae8b84bf15442da99c

        SHA1

        26e6d20876f01faa32a7a846c12dd35c695d55b6

        SHA256

        9ed946c62c7801779822a83d9126257f6426af381a42ce29d5a3c49c774fc141

        SHA512

        10b007f132cdaa7ea2e75281cd7767b59fd61335d28bc55b778e05479ac993e3578ba1370fe1ce6bf35d271ca970346d5f8cd13637f59fb1fa01c8a6345727b1

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\BrowserSDKDLL.dll

        Filesize

        5.8MB

        MD5

        1ed53171d00f440f29a12f9beb84dac4

        SHA1

        4d9a1e3579b0999f1ab2fa818b588411e9ee920c

        SHA256

        e659e687a872050f9e65d78992d16bd9b393cf3f8e8c94e0e15fb42b7065327e

        SHA512

        17161cfc672d1b996b8af4ebac17f9a8a3807f38c9a23e2e5b4dadcd9a21c3a64faec9bf59147022a9df88b80f89300f1b537091289bd7a42806bd206a317e6e

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\BrowserSDKDLLShim.dll

        Filesize

        2.5MB

        MD5

        2e8ad6f405eb7744908f635dc089438a

        SHA1

        f2ca3f55ce4395dfe39a0ba099a39f8c30e263cb

        SHA256

        4824ad6b30b42a9166bfd3db41f11e3cb67e7aab96058b7f946797d7dadba891

        SHA512

        3eacea19caf3f04cddb35091102c5d627b82acc8c73be1bfa4d72932c78cba7821c99c616bbd8d422ce588b865700db560ba441f8a5da6a9629af844f6ad28c5

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\CleanControllerImpl.dll

        Filesize

        6.9MB

        MD5

        c11f1ccbbe0f94051c6485c13aa68e83

        SHA1

        4a0f605a7c378bebd03e2f7c52c5df67634e7e18

        SHA256

        d8d589b26c729f12c051d96f159742a94dfb17872293cb0aa5da75ad6611ed38

        SHA512

        b81d305974d69b0d8ec33e1c9cbcf25e8aedb3cf73cc5151fefb059dedc2d51c475581a85fca04f69e7801cc80bcef32a09cf1f705db743f5e8e450a78658533

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\CloudControllerImpl.dll

        Filesize

        4.8MB

        MD5

        b363ba051e682435814237ede8a86727

        SHA1

        5b64fada974d2767368c8c8d7ce8c5612f9aacb5

        SHA256

        dcf8d3b8225deae2ef06910783e1d248f4440d5f65150610f80f194d80d47f5a

        SHA512

        13393064285dd8a4a3e74c2df9fc8a31d2ae8ab8df2ee89c5eed848a1dedb602981a33e8cc051dfbc3e88d65e496028be2bd40b085c37b3653f31c4059b1a16e

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\LicenseControllerImpl.dll

        Filesize

        4.4MB

        MD5

        45860a26769dd43a97615da32d656716

        SHA1

        01b64bc0122bfbf2fdbd1ad8630fbf6c47c9a01c

        SHA256

        bd506481b6e13cda953f7f0b0441fb0a358f95caee12c00e784d2422924637c4

        SHA512

        44e486cfb7163218dfeab3a47543b89ea23976654d0146fe55346c7533aa7f4c475bd6e63b9be3e2cf4b6c25898dfa281f6d1d52713db5fea4a7ea3af1595504

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MBAMCore.dll

        Filesize

        6.4MB

        MD5

        c62178af0cccb43974747725c8466c5f

        SHA1

        f8f765fe5dd1ab8410b556d77d56e26e77eefc61

        SHA256

        7366f87436b13ad92549d0fb77ef5ee0ba49c5df64e87d28b604648e33b7c15f

        SHA512

        f82096bdc626a876ef1efd995efb618fb090689a6668c855e434122c4fbc2659a5116fb0fb4c27734e446746c3433bbdf94a905267820cd68ffd39d55bcd9334

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MBAMShim.dll

        Filesize

        3.0MB

        MD5

        f44b6c80c46c4cf3071b5f5b916e1271

        SHA1

        839f2238ecbbfa80ebf9c1f77eafc78204b58761

        SHA256

        732523df43358729d5e85cceb557d69016dcdd3e2238d903c33c5327c3131fae

        SHA512

        99be164ae96bc4f93dc896d5df445ad1c2f023f10605a8c9857d7ebedfc5b070f50cd33b401d61003e601a06b8446e6c0b5dbddda4927a2e1352407d3b266942

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll

        Filesize

        4.1MB

        MD5

        5471d57066b9c30fd2ded9353ef0cf85

        SHA1

        21d231c088ac7e983f0d620c3f172fa0fa373e3b

        SHA256

        1454ea0493b479bff5c3e27a7600d24f61d107451c05902cc6dff4abf86533f0

        SHA512

        1409a79e6b35253f3276425de518eb760623065c2c6290fffba3fa9b75675b7456b7cd535c54b7a4b9ca3cc5f5df9231727d2d531e9e824e7192c4e03ce23b83

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ScanControllerImpl.dll

        Filesize

        5.7MB

        MD5

        1754f0b9038eaa34d593cb52c4b10757

        SHA1

        4592871fc09e16fa932da84ab833007e1b97874d

        SHA256

        e780984e6f05bd1e0773bd02eefd5018054451f5cee7062b1ac8eb5766398e0e

        SHA512

        61def1f315b7efdee83ac98573a1fd5020d98bd4034a6841bcb6c6bb58c5785e2b1f1358682f54c2cb0d01c0e603a72d2ff46ddab0c021563122b74023187696

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\Swissarmy.dll

        Filesize

        4.0MB

        MD5

        3486801ce1e8ffc1bbc6d4f097b0f369

        SHA1

        08f2a85cd07cf1c0d6f27f0d5e7179c2a5cb8600

        SHA256

        26720d0b669898089a4ab5a6c53203918ec399d227331273ba11169bbe273678

        SHA512

        81974a79bf4e4086549874ef778e7716713a0107ccce212e9564f3355a26670943845aaba744691d2b68224e06e2f9d9a263e29f4ca7e46e1bfdb507a24656d5

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SwissarmyShim.dll

        Filesize

        2.6MB

        MD5

        89a38afcfa758e3298609c6c51929593

        SHA1

        2df1ee30adc92bd995526e41fd9c823354de30b4

        SHA256

        4795576483af0c136a71dcee87a0ffb54f0869cae6395ac2ff8312bf555e7161

        SHA512

        cceaed0b9a7517aebd739a377c7bd8987b9ac357be2bf987dbae31d59f2121c5bb9a9bfa2c70a9a54ad65546ef23903176dd6328d93408cb5c991257d59e2717

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\TelemetryControllerImpl.dll

        Filesize

        5.3MB

        MD5

        f2648750059ca74ffd9e895c0c5b6a91

        SHA1

        fa6b6ade56c91cb9de14228acec1100fd9c9d3df

        SHA256

        a352f5ec1827e89a150d98b1ff2ac087e0a31f9834f37ae72522ba4515da33b2

        SHA512

        70cb00f0fc834a9527e8190aab590a9662cd1ada6baca373fc1ead282218480b47ad8b680f26690b5b48c84a91030cb806a8e8e931bdef83eaf1f97d079deabc

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\UpdateControllerImpl.dll

        Filesize

        4.4MB

        MD5

        a6e9327da5c03691e326c1e01e8b21a4

        SHA1

        b72f44ab3c3eccf0c41a3727dd6ae5e2a5c07429

        SHA256

        c5c361eac8e848b27095dbb1f7fcf80b1953270c0e2cd497c6077d29ceabb7a1

        SHA512

        75f9c6e42bfb9bde5b767274238d5d21cd2e3d02b6012992b84b1ca2489dfc90dd09eba1b44932bf5f80fe0b50f5d095d7a64e51967f3434f7fd181081b835d0

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe

        Filesize

        1.8MB

        MD5

        3ccbcabc11be3bb9cf9d62f2023fd63c

        SHA1

        f676bef30368b0fc8b7365fd1e737f799b0850e7

        SHA256

        f856e9b29dc04b6eba72d6bf383e4c0fc21a374af783cee5c4e6b5f768157eff

        SHA512

        d6ae7d9473e0b3e02a0f2b1df6fc3066ce672cf754268cab71792c575896ebc7018b522e7da304e8a7e2351ba4879e995055ec2b22c00ec17ef4a6cb08764a42

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\pkgvers.dat

        Filesize

        75B

        MD5

        0e8a1bec02b02c10140c0e1a08a466b5

        SHA1

        7aa11e550bb0159aa844b98dbf2b7fc5d44d617a

        SHA256

        0d8c106333edad9b64c0dda836840441f87616ef97a2e82492356a96a75c24c0

        SHA512

        ce940ce0e4155786ce2888b23b244275996674b76f29da3d64879d0bde63591619231f1d0e935705ce297335243d96a2fdee2ae2669803107be9fe77eca04c60

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\sample.dll

        Filesize

        528KB

        MD5

        ff8aaf92246cc522f7f335132b5dd5c2

        SHA1

        119a2dd0ce3a35e51f732dd749813589bbc032fd

        SHA256

        3094458a624b25eb5e53191cad552f57f48389fe23deef20fef1fa8dc93a112e

        SHA512

        d2901a9d3b8762437335ea50b6f433e698a741dff47cea3029e157d56355e8959679a9b66a8f3bd347d965ffddaa29452e5b4e25f520b1e5c39af748419cc9c1

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\version.dat

        Filesize

        47B

        MD5

        2fd833745cd479301e6bc9aadb96d7c1

        SHA1

        4ad15523e9e17713ba853f6f5fece99ca2299c87

        SHA256

        02ee38003f8be2d3025dfd35b216df34391c391408cf779552cf9b6b9081bc66

        SHA512

        df4e96ff8c5b347827bae996a0f64ca3a0999e1090abc164dd31b3a073e7d226d00adf46e6819d50d0eac31fd8c89b4a44db1048eeebf8dc79547ca0fe4e23fd

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\Global.nm

        Filesize

        335KB

        MD5

        1dd368ad83428d51b993dacdc5bc4a99

        SHA1

        efada223021c1670f8475f1a778ece74fa8cce75

        SHA256

        d1bcb91d47703845f9429211ffbfc7d6ffd71db873c5d8ac8cc0fa63dd54243b

        SHA512

        6f178501c11224a250ace8534de1755c3888b1cef1e6b76584a5d7b74a0fd4e6b666f0ef4cfd24bb4c5170b824291ab9c3cb49176f7772c70f0fd8a0f155ab63

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\Global.sr

        Filesize

        12.9MB

        MD5

        48a633d46e38ef64afa568f17ee48356

        SHA1

        aa6465ccae2aea1640d9962af842529a088b5069

        SHA256

        975c52927f5112718a6e0fcc5b53d8649e49442aba421d55f966bcf40dce0832

        SHA512

        c44bb4fa943ceea9070c5ef42f7ad47ea4f33276ff9a807b63a65d1eb32de7847e21261bf8ac2e422c86f7417c009138b6536d393ba3e97f91f6a427c86e0cbc

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\cfg.bin

        Filesize

        661B

        MD5

        8fd13803b1e5f14b4d241facc601a170

        SHA1

        7321eec794bc766d84d75bd0370a9f2e4d7abdf6

        SHA256

        925d771b2643715b62ef720801dfa96047fff1ee70eabb244bed802234673717

        SHA512

        f5b3514258487f8576fe32a795eefcffef049c7d002a6abdca17383bba838c7a218be23ec6803dcefed615f40afc2ba4b15bf65c9a74c4f6bb891d15d02bfc22

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\clean.mbdb

        Filesize

        10KB

        MD5

        ada5df347a6e016a6532ca5b0a0751bd

        SHA1

        617fac3947aba6cd91129cf12a3eb229cb9008f0

        SHA256

        a7e851818e5c7431d5fb288fe4946bab13624da65f3280d457c2022772555b6a

        SHA512

        9886cbc156739a33dcbd9e1aedb20a3572da83400dd1a881630eeb21a9f19228c1acd5652df30770ca48bc981bd71b81a3f376b69c2ea2b7bce1b7a8dd9d649c

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbmanifest2.dat

        Filesize

        924B

        MD5

        761e1410a133f918354fd7c7d0028423

        SHA1

        c8dcb395a34161ade7dc2b6fff995d24b7d10079

        SHA256

        c646f72018e86279a0bd5f337dd70dab4570e9856853449ce461adb3bccad789

        SHA512

        7442eaff98334fb47bec00a0de1e10f4efa80fa03f3ccf8dcdb24aae8882afdf14f13780b547c45ca0f83adceb963d0db9d5173d61a47d76dd7719dd783c9888

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dynconfig.dat

        Filesize

        39KB

        MD5

        10f23e7c8c791b91c86cd966d67b7bc7

        SHA1

        3f596093b2bc33f7a2554818f8e41adbbd101961

        SHA256

        008254ca1f4d6415da89d01a4292911de6135b42833156720a841a22685765dc

        SHA512

        2d1b21371ada038323be412945994d030ee8a9007db072484724616c8597c6998a560bc28886ebf89e2c8919fb70d76c98338d88832351823027491c98d48118

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\exclusions.txt

        Filesize

        23KB

        MD5

        aef4eca7ee01bb1a146751c4d0510d2d

        SHA1

        5cf2273da41147126e5e1eabd3182f19304eea25

        SHA256

        9e87e4c9da3337c63b7f0e6ed0eb71696121c74e18a5da577215e18097715e2f

        SHA512

        d31d21e37b0048050b19600f8904354cff3f3ec8291c5a7a54267e14af9fb88dfb6d11e74a037cc0369ade8a8fb9b753861f3b3fb2219563e8ec359f66c042db

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\mbdigsig2.dat

        Filesize

        514B

        MD5

        5b2f36faed5202056def529dbeddc3db

        SHA1

        4743b47a12f44da41fad3eb60c5e8c300f2b7fe3

        SHA256

        af9d130fc86694f6a6f4a9bd5ba1232a42a2c943f8ccb2e86a8242f2fc888412

        SHA512

        5a2bfd412d1c4d2f3ef1583199dc8609d4052a5f557bb0ce70b490492f5b7c6b0143b20127cdb7ca701e67f695101b3c20dbd46456f193ffac13bebeb4b32fb7

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\prot.mbdb

        Filesize

        24B

        MD5

        546d9e30eadad8b22f5b3ffa875144bf

        SHA1

        3b323ffef009bfe0662c2bd30bb06af6dfc68e4d

        SHA256

        6089fbf0c0c1413f62e91dc9497bedc6d8a271e9dc761e20adc0dccf6f4a0c1f

        SHA512

        3478f5dcf7af549dd6fe48ad714604200de84a90120b16a32233b6d44fa7240f5f4e5fe803f54b86bbdfd10fa1bfdd88fb85eb6a78e23e426933f98d0a2565ec

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\rdefs.mbdb

        Filesize

        24B

        MD5

        2f7423ca7c6a0f1339980f3c8c7de9f8

        SHA1

        102c77faa28885354cfe6725d987bc23bc7108ba

        SHA256

        850a4ea37a0fd6f68bf95422d502b2d1257264eb90cc38c0a3b1b95aa375be55

        SHA512

        e922ac8a7a2cde6d387f8698207cf5efbd45b646986a090e3549d97a7d552dd74179bd7ac20b7d246ca49d340c4c168982c65b4749df760857810b2358e7eb69

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\rules.mbdb

        Filesize

        8.0MB

        MD5

        322644a0f91a92d4e815cfd08d85b5a4

        SHA1

        d7489dea2ab371df333218ea1e7e87f189f7383d

        SHA256

        cd914d2b54d0f3ee8f24cccf0baddc77c7edc096b784163e7ccd735c1c49d72a

        SHA512

        1d3e7562f16b1b5f2147b98bd9f6a976df28a8043a59ada59c454f8d5d83674b939df27ab2c3b0cad44c1bcf5c72cc140f2a7f370d428083d860478dc89be170

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\scan.mbdb

        Filesize

        1.0MB

        MD5

        94fe1db111bb756f187afc939671190a

        SHA1

        cf9a1c80f8fd5fe860e4ec3ed885a7933aee871d

        SHA256

        f04bbe31d252669400288b3714328acb1e2e21384dcd67215ef330ba4395e836

        SHA512

        649da0c2ca749acf4d72e33c05b6fcde7aab90b9e267dc3e61c60b9525e4a5f11a59acdb9079161e9479cfd3a0530d1f1ce0ae661bf940f18ec2453e024a3251

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\tids.mbdb

        Filesize

        175KB

        MD5

        9621dc50ca094909945f3d60683ab97a

        SHA1

        50f95896ab62295a12735dd0689adb505e58bad9

        SHA256

        c5f2f6de5408fc26050cdad564c4ce72f01f2ad277338b2ba98256bb8a5a34c6

        SHA512

        cbd2094f5fbb33888d738b9ef7e8fab76aa595382ebe64e775672333d42aa2c61ab4ecaf6439a05caf15b9d9dcacb320156de74077d185ab702149ce50ae83de

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\wprot2.mbdb

        Filesize

        42.2MB

        MD5

        9eda80b27491310a37f12ee241fe7aff

        SHA1

        30a4f3cff95e50541b2dc5ec2cb1fe1d872f28ba

        SHA256

        db2898a17eda4d2e745b8cd39002c94af0060b8a6d1b4c2b37013aeb88b0695c

        SHA512

        f0734db7aab66821e408001c6aacbaff9010b9e43b71a439b1a8af6b0b9b85f62a61051561558923a24575ab80265a2d87489b8dbebb79b6fb3a283d1708d581

      • C:\Program Files\Malwarebytes\Anti-Malware\7z.dll

        Filesize

        1.7MB

        MD5

        461faf68ccc02b0223fd273b630f21fe

        SHA1

        363b8beaa74f0f454c2d544ace9e71a84bc2b4cf

        SHA256

        cb07f3f461e9c267831b1ab93af6dfda1bb51d72e42d73d00d26594f09326be1

        SHA512

        4b671f48e45fdedf50c7f7bb6c8d82a3b98f7502006eb002aaf8ff31f25f9ff1257c7bcc12caf622e43d4ec665b19d978ae3e3762f76def0bc71485ebdb8426f

      • C:\Program Files\Malwarebytes\Anti-Malware\Actions.dll

        Filesize

        5.0MB

        MD5

        1eff53d95ecaf6bbfffe80d866d8e1dd

        SHA1

        d7ef7d7c77fd04b2c0eb8c16bb3cd08057f6742f

        SHA256

        6dd748f7ca56125cbe158fa3612f08e7312ef58ad5375e6b7ab5532cc16ca0ac

        SHA512

        c59b8e6f0b238a247e64b9c7bb42213dadac1dada63542830a6292361174c935c0c662b2d1aed3fb6100cc4993297b1eaf25e328f2b4613458c4ffca63b9f02d

      • C:\Program Files\Malwarebytes\Anti-Malware\ActionsShim.dll

        Filesize

        2.5MB

        MD5

        e7a4bb8fa34bc5ae8b84bf15442da99c

        SHA1

        26e6d20876f01faa32a7a846c12dd35c695d55b6

        SHA256

        9ed946c62c7801779822a83d9126257f6426af381a42ce29d5a3c49c774fc141

        SHA512

        10b007f132cdaa7ea2e75281cd7767b59fd61335d28bc55b778e05479ac993e3578ba1370fe1ce6bf35d271ca970346d5f8cd13637f59fb1fa01c8a6345727b1

      • C:\Program Files\Malwarebytes\Anti-Malware\CleanControllerImpl.dll

        Filesize

        6.9MB

        MD5

        c11f1ccbbe0f94051c6485c13aa68e83

        SHA1

        4a0f605a7c378bebd03e2f7c52c5df67634e7e18

        SHA256

        d8d589b26c729f12c051d96f159742a94dfb17872293cb0aa5da75ad6611ed38

        SHA512

        b81d305974d69b0d8ec33e1c9cbcf25e8aedb3cf73cc5151fefb059dedc2d51c475581a85fca04f69e7801cc80bcef32a09cf1f705db743f5e8e450a78658533

      • C:\Program Files\Malwarebytes\Anti-Malware\CloudControllerImpl.dll

        Filesize

        4.8MB

        MD5

        b363ba051e682435814237ede8a86727

        SHA1

        5b64fada974d2767368c8c8d7ce8c5612f9aacb5

        SHA256

        dcf8d3b8225deae2ef06910783e1d248f4440d5f65150610f80f194d80d47f5a

        SHA512

        13393064285dd8a4a3e74c2df9fc8a31d2ae8ab8df2ee89c5eed848a1dedb602981a33e8cc051dfbc3e88d65e496028be2bd40b085c37b3653f31c4059b1a16e

      • C:\Program Files\Malwarebytes\Anti-Malware\LicenseControllerImpl.dll

        Filesize

        4.4MB

        MD5

        45860a26769dd43a97615da32d656716

        SHA1

        01b64bc0122bfbf2fdbd1ad8630fbf6c47c9a01c

        SHA256

        bd506481b6e13cda953f7f0b0441fb0a358f95caee12c00e784d2422924637c4

        SHA512

        44e486cfb7163218dfeab3a47543b89ea23976654d0146fe55346c7533aa7f4c475bd6e63b9be3e2cf4b6c25898dfa281f6d1d52713db5fea4a7ea3af1595504

      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe

        Filesize

        8.7MB

        MD5

        f030f4622a8ebc67a726c1fbc55a48d5

        SHA1

        33a740c08b971ce580f7fa507b9d6987d11ddac8

        SHA256

        ee8eae908edc5b8af0c3bccbd0be761c36663e27252f14a41e9bb6f38b6fb873

        SHA512

        128a84f84898c36e059216a541e0a23c3d2b9da6223549f140d6794eabb7300fc426bb3786a1a68048cb5915ced11324cf544c9558c8d9a746939dc1baaf6db8

      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe

        Filesize

        8.7MB

        MD5

        f030f4622a8ebc67a726c1fbc55a48d5

        SHA1

        33a740c08b971ce580f7fa507b9d6987d11ddac8

        SHA256

        ee8eae908edc5b8af0c3bccbd0be761c36663e27252f14a41e9bb6f38b6fb873

        SHA512

        128a84f84898c36e059216a541e0a23c3d2b9da6223549f140d6794eabb7300fc426bb3786a1a68048cb5915ced11324cf544c9558c8d9a746939dc1baaf6db8

      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

        Filesize

        8.8MB

        MD5

        a3e7aee21c3a8468e7ef8216596f7254

        SHA1

        982e2afee4a0f95d601c8a382621020ea0332b64

        SHA256

        7e85076e6d1b6c66b1bb8cce31bd9452c279de20059890f86997f097fe363433

        SHA512

        3453403a51734c5404163c5b9295439d89ad7fe9047915f1b8f5d5e154fb40e257e08086bb5dede26e7aebd36727a277246a343627731934182b12de11dc0b36

      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

        Filesize

        8.8MB

        MD5

        a3e7aee21c3a8468e7ef8216596f7254

        SHA1

        982e2afee4a0f95d601c8a382621020ea0332b64

        SHA256

        7e85076e6d1b6c66b1bb8cce31bd9452c279de20059890f86997f097fe363433

        SHA512

        3453403a51734c5404163c5b9295439d89ad7fe9047915f1b8f5d5e154fb40e257e08086bb5dede26e7aebd36727a277246a343627731934182b12de11dc0b36

      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

        Filesize

        8.8MB

        MD5

        a3e7aee21c3a8468e7ef8216596f7254

        SHA1

        982e2afee4a0f95d601c8a382621020ea0332b64

        SHA256

        7e85076e6d1b6c66b1bb8cce31bd9452c279de20059890f86997f097fe363433

        SHA512

        3453403a51734c5404163c5b9295439d89ad7fe9047915f1b8f5d5e154fb40e257e08086bb5dede26e7aebd36727a277246a343627731934182b12de11dc0b36

      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMShim.dll

        Filesize

        3.0MB

        MD5

        f44b6c80c46c4cf3071b5f5b916e1271

        SHA1

        839f2238ecbbfa80ebf9c1f77eafc78204b58761

        SHA256

        732523df43358729d5e85cceb557d69016dcdd3e2238d903c33c5327c3131fae

        SHA512

        99be164ae96bc4f93dc896d5df445ad1c2f023f10605a8c9857d7ebedfc5b070f50cd33b401d61003e601a06b8446e6c0b5dbddda4927a2e1352407d3b266942

      • C:\Program Files\Malwarebytes\Anti-Malware\MbamElam.cat

        Filesize

        10KB

        MD5

        60608328775d6acf03eaab38407e5b7c

        SHA1

        9f63644893517286753f63ad6d01bc8bfacf79b1

        SHA256

        3ed5a1668713ef80c2b5599b599f1434ad6648999f335cf69757ea3183c70c59

        SHA512

        9f65212121b8a5d1a0625c3baa14ef04a33b091d26f543324333e38dcdb903e02ccc4d009e22c2e85d2f61d954e0b994c2896e52f685003a6ef34758f8a650c7

      • C:\Program Files\Malwarebytes\Anti-Malware\MbamElam.inf

        Filesize

        2KB

        MD5

        c481ad4dd1d91860335787aa61177932

        SHA1

        81633414c5bf5832a8584fb0740bc09596b9b66d

        SHA256

        793626d240fd8eefc81b78a57c8dfe12ea247889b6f07918e9fd32a7411aa1c3

        SHA512

        d292e028936412f07264837d4a321ecfa2f5754d4048c8bcf774a0e076e535b361c411301558609d64c71c1ce9b19e6041efa44d201237a7010c553751e1e830

      • C:\Program Files\Malwarebytes\Anti-Malware\MbamElam.sys

        Filesize

        20KB

        MD5

        9e77c51e14fa9a323ee1635dc74ecc07

        SHA1

        a78bde0bd73260ce7af9cdc441af9db54d1637c2

        SHA256

        b5619d758ae6a65c1663f065e53e6b68a00511e7d7accb3e07ed94bfd0b1ede0

        SHA512

        a12ccf92bead694f5d3cba7ff7e731a2f862198efc338efc7f33a882fe0eb7499fb3fb533538d0a823e80631a7ca162962fbdfd78e401e3255672910b7140186

      • C:\Program Files\Malwarebytes\Anti-Malware\PoliciesControllerImpl.dll

        Filesize

        4.1MB

        MD5

        5471d57066b9c30fd2ded9353ef0cf85

        SHA1

        21d231c088ac7e983f0d620c3f172fa0fa373e3b

        SHA256

        1454ea0493b479bff5c3e27a7600d24f61d107451c05902cc6dff4abf86533f0

        SHA512

        1409a79e6b35253f3276425de518eb760623065c2c6290fffba3fa9b75675b7456b7cd535c54b7a4b9ca3cc5f5df9231727d2d531e9e824e7192c4e03ce23b83

      • C:\Program Files\Malwarebytes\Anti-Malware\ScanControllerImpl.dll

        Filesize

        5.7MB

        MD5

        1754f0b9038eaa34d593cb52c4b10757

        SHA1

        4592871fc09e16fa932da84ab833007e1b97874d

        SHA256

        e780984e6f05bd1e0773bd02eefd5018054451f5cee7062b1ac8eb5766398e0e

        SHA512

        61def1f315b7efdee83ac98573a1fd5020d98bd4034a6841bcb6c6bb58c5785e2b1f1358682f54c2cb0d01c0e603a72d2ff46ddab0c021563122b74023187696

      • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json

        Filesize

        607B

        MD5

        52720ddc39b042b10f03ca1ff4bc0511

        SHA1

        3c20b4726d6bc6e018b0234a7a1d7534ad2221fa

        SHA256

        f39a37aac6ce277e71fff34c07f8ffad152bd6f28c61c4e85bbcd4fb8d352685

        SHA512

        b668103933a4fc6d1726021acf60f6c39e47875ed58be249edd9b55929a8fe99fc4d9d44877dcde1e5281455c9f9acc3eda2f5ecb5ea07ffb440c474a350c39c

      • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json

        Filesize

        607B

        MD5

        52720ddc39b042b10f03ca1ff4bc0511

        SHA1

        3c20b4726d6bc6e018b0234a7a1d7534ad2221fa

        SHA256

        f39a37aac6ce277e71fff34c07f8ffad152bd6f28c61c4e85bbcd4fb8d352685

        SHA512

        b668103933a4fc6d1726021acf60f6c39e47875ed58be249edd9b55929a8fe99fc4d9d44877dcde1e5281455c9f9acc3eda2f5ecb5ea07ffb440c474a350c39c

      • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json

        Filesize

        669B

        MD5

        364517a3abce4e13581563a41489aab1

        SHA1

        5a8ece6e184997ceef42f705dcdca0d367bec5a7

        SHA256

        8bbad60b3b4aa8114385968022ed9b968e3c29263bc2569622a0ebddb0b5891c

        SHA512

        1b153f33d3d4951f849c02970d1f9f5cc0d90845fc3e8f3e20eee8b279c8f845533355afed737bb347ff9b77d898ee50461329ccaeed037767e370b2468ed9eb

      • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json.bak

        Filesize

        607B

        MD5

        52720ddc39b042b10f03ca1ff4bc0511

        SHA1

        3c20b4726d6bc6e018b0234a7a1d7534ad2221fa

        SHA256

        f39a37aac6ce277e71fff34c07f8ffad152bd6f28c61c4e85bbcd4fb8d352685

        SHA512

        b668103933a4fc6d1726021acf60f6c39e47875ed58be249edd9b55929a8fe99fc4d9d44877dcde1e5281455c9f9acc3eda2f5ecb5ea07ffb440c474a350c39c

      • C:\Program Files\Malwarebytes\Anti-Malware\Swissarmy.dll

        Filesize

        4.0MB

        MD5

        3486801ce1e8ffc1bbc6d4f097b0f369

        SHA1

        08f2a85cd07cf1c0d6f27f0d5e7179c2a5cb8600

        SHA256

        26720d0b669898089a4ab5a6c53203918ec399d227331273ba11169bbe273678

        SHA512

        81974a79bf4e4086549874ef778e7716713a0107ccce212e9564f3355a26670943845aaba744691d2b68224e06e2f9d9a263e29f4ca7e46e1bfdb507a24656d5

      • C:\Program Files\Malwarebytes\Anti-Malware\SwissarmyShim.dll

        Filesize

        2.6MB

        MD5

        89a38afcfa758e3298609c6c51929593

        SHA1

        2df1ee30adc92bd995526e41fd9c823354de30b4

        SHA256

        4795576483af0c136a71dcee87a0ffb54f0869cae6395ac2ff8312bf555e7161

        SHA512

        cceaed0b9a7517aebd739a377c7bd8987b9ac357be2bf987dbae31d59f2121c5bb9a9bfa2c70a9a54ad65546ef23903176dd6328d93408cb5c991257d59e2717

      • C:\Program Files\Malwarebytes\Anti-Malware\TelemetryControllerImpl.dll

        Filesize

        5.3MB

        MD5

        f2648750059ca74ffd9e895c0c5b6a91

        SHA1

        fa6b6ade56c91cb9de14228acec1100fd9c9d3df

        SHA256

        a352f5ec1827e89a150d98b1ff2ac087e0a31f9834f37ae72522ba4515da33b2

        SHA512

        70cb00f0fc834a9527e8190aab590a9662cd1ada6baca373fc1ead282218480b47ad8b680f26690b5b48c84a91030cb806a8e8e931bdef83eaf1f97d079deabc

      • C:\Program Files\Malwarebytes\Anti-Malware\UpdateControllerImpl.dll

        Filesize

        4.4MB

        MD5

        a6e9327da5c03691e326c1e01e8b21a4

        SHA1

        b72f44ab3c3eccf0c41a3727dd6ae5e2a5c07429

        SHA256

        c5c361eac8e848b27095dbb1f7fcf80b1953270c0e2cd497c6077d29ceabb7a1

        SHA512

        75f9c6e42bfb9bde5b767274238d5d21cd2e3d02b6012992b84b1ca2489dfc90dd09eba1b44932bf5f80fe0b50f5d095d7a64e51967f3434f7fd181081b835d0

      • C:\Program Files\Malwarebytes\Anti-Malware\ctlrvers.dat

        Filesize

        8B

        MD5

        9f148dddd140f9c89a36a25adf554493

        SHA1

        e69362cf61ffa577136bbffcb18aacd2a54466b5

        SHA256

        1c140e839bf2745ceb093ab02a4d4e98e8fdc35697e194584185f916f4ef7e05

        SHA512

        f3e3649f8a6810dbd484b930a9fd55289e6e5b7b5da46bb55b3b6195c4c57a76c81b3cecb4dce36cdca3e4e331f28a53bb9f6966d219011facbb17ab5bf1262f

      • C:\Program Files\Malwarebytes\Anti-Malware\mb4uns.exe

        Filesize

        3.8MB

        MD5

        e8dd943b67fb14caf3f09d6762e25660

        SHA1

        0414f4cc1157559479b5f2c1d6f452eab14ca2c1

        SHA256

        683946520fefe89c98edf1fe3b8adf17ae48d0ba0a76782bec8537a6c9c6361e

        SHA512

        4fd53b35901612fe80d4ca223c99027bded437cd700a90f367234d21fe15690e6626c30525ed9beefb412729f9d8334d72e0a1625ab74596d463a19ca47c8645

      • C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe

        Filesize

        22.7MB

        MD5

        6061e54a46fbd7e58cb0fc2559af5a79

        SHA1

        97b44a246c841ed20dd9a09b6c912da60b01a3a5

        SHA256

        5bc54857cd45d8a6d9466c2c7082e9e70b7f29a88e450c2be09ddd3bb6790100

        SHA512

        d9e8eb1f0449ed08d9d5bfa9f008dd3c4e8b199d490f6f1c50706e7f440720946021de3e4736c835f3ec48d0b09f34724bb41dfb7b49ce3b0349e257db18b820

      • C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

        Filesize

        8.5MB

        MD5

        ccd533b72d25e4b2783cbeccb7f0bf32

        SHA1

        fab53bf4189b282bfbf2d7e2801493d4170eacd3

        SHA256

        0918c962fad759cf8712809789f071a6408ed3a2a00e713f9760207784f6068f

        SHA512

        2d5ecc63d2828011666637cad99f055c67378db6d19874a8fd10cd0d8ff0887ccd26de65dbfd139448579bed56055c7d7fb8487de1e4bf0e2f0bacd0d7c94d4f

      • C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll

        Filesize

        2.7MB

        MD5

        b7e5071b317550d93258f7e1e13e7b6f

        SHA1

        2d08d78a5c29cf724bc523530d1a9014642bbc60

        SHA256

        467de01d7cee7ec54166b80658ff22f9feebdb1c24eaf1629cf40e4124508064

        SHA512

        9c35293c95c1a9141740ac99315605964aa37c4a42d3a11cae9e5649ff1427a9480d3d5e7f763212cf13db3511c5ea3c84e68f95f0067fe6339a9d3fb7b27c54

      • C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll

        Filesize

        2.7MB

        MD5

        b7e5071b317550d93258f7e1e13e7b6f

        SHA1

        2d08d78a5c29cf724bc523530d1a9014642bbc60

        SHA256

        467de01d7cee7ec54166b80658ff22f9feebdb1c24eaf1629cf40e4124508064

        SHA512

        9c35293c95c1a9141740ac99315605964aa37c4a42d3a11cae9e5649ff1427a9480d3d5e7f763212cf13db3511c5ea3c84e68f95f0067fe6339a9d3fb7b27c54

      • C:\Program Files\Malwarebytes\Anti-Malware\offreg.dll

        Filesize

        114KB

        MD5

        16663d125398773a90d0a53333b7cf5e

        SHA1

        f92928ae3c9292588547ceaca1cb1d372bfd7936

        SHA256

        38e6811b47262101759aa51a631263d9e3eee5d211164318a751e078afec4cbc

        SHA512

        091764b8ad80aa31eea0bbd91ee505ebdea2654bc8aeaa3081a061d0d37ab13d27dd203075fd0de10c6687591aa0e36139a38af846c4e34e6aa67ab81dc277df

      • C:\Program Files\Malwarebytes\Anti-Malware\offreg.dll

        Filesize

        114KB

        MD5

        16663d125398773a90d0a53333b7cf5e

        SHA1

        f92928ae3c9292588547ceaca1cb1d372bfd7936

        SHA256

        38e6811b47262101759aa51a631263d9e3eee5d211164318a751e078afec4cbc

        SHA512

        091764b8ad80aa31eea0bbd91ee505ebdea2654bc8aeaa3081a061d0d37ab13d27dd203075fd0de10c6687591aa0e36139a38af846c4e34e6aa67ab81dc277df

      • C:\Program Files\Malwarebytes\Anti-Malware\sdk\MBAMSwissArmy.sys

        Filesize

        233KB

        MD5

        1dc6d344ee9b6b024ba23278891db9a5

        SHA1

        519b792d11daa2bf9d127f69cdd603a236576e04

        SHA256

        823e1c7321e177b006c1f3fd1ec8b99607a12d2c3c321f3a6cbbcf7030b6c240

        SHA512

        fb96c4ede03c3aa729d2ea5a72c5f14029f6d69a79b6e0d5449e371bf3acdbbd1cb2079e8bbac3a3140a257c71018bc7a2a31a45ad5c8b65382e67cc3431ab6a

      • C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt.sys

        Filesize

        194KB

        MD5

        6b187634792ceb280735d542946f226e

        SHA1

        1eb53044e5e477cd2e3de1571a3a8920bb36567e

        SHA256

        4a9cc386803f32da7f0cd97cbf0b7712adcd9196f036eca505c00f05dfe7f622

        SHA512

        4b7d4146452e6c17191f0a490419969c204e52d8c43769c8871b5b95e053e7b766717ee7ef3334eac7cd7ab1a11263690af9eef0fc41fe824746dd2f7c4485a6

      • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.cat

        Filesize

        10KB

        MD5

        dfe383b7b48853f4c3dd383fa40de764

        SHA1

        68066a7ca36ec32699e645fed7bdb33be1e2b395

        SHA256

        552a30fb8aa05793a5c78028c3e1ff9658b1a7c831c5b60a5c74a10f0f1127a0

        SHA512

        21bea8f59bb7f02a52e16b5404ed522b6d1a8854f7ca6c9d34031bb02ccef11b0f1a53e36fb7031ff943add4028195d92de0732856465b1ae3498e1e1e50daa7

      • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.inf

        Filesize

        3KB

        MD5

        e5bb98e4d7adf79cf7355aeb4a12d3c4

        SHA1

        c2996909b98b95863d54c6a2f7843e5c05015596

        SHA256

        1f2ec66c3947802dd97abead84d71bacebf84e4a2e871852cf5291958d45a189

        SHA512

        f65ec684a21481c66f4571fec4f5cd17fb629fbc4b5fda88bfe00ada30573f3c74313311f5e8a164709824b8033a60fa2ae0f1643d0ee3ba8ae4fd558709aa7f

      • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.sys

        Filesize

        217KB

        MD5

        6a21162e1c8a9f65787b14bc439eb077

        SHA1

        1bf68b253edd6cae098144e24e09b4e22178784f

        SHA256

        8b7990e1c676f53918e41f6b18b20179d77e598352d9243b05e2ea22b2d9e4fe

        SHA512

        a0dafe66479b9e68ebf04a7e2fa7c7cc352fb075356b7eccebee7af527393711e3cb36c7ff6466a5e28b17d1d003c1c49ef176b448f5de36a7c8177c9c8808c4

      • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mwac.sys

        Filesize

        177KB

        MD5

        2152a9aba3407e2cfcaa84e4c20423a2

        SHA1

        825e79fe98922ac978aee92e243aec0ab44ddd91

        SHA256

        a7d456c7679717500c4a8968a9ea205107dd6e72c81ba1435777af2bd3bd95d3

        SHA512

        32c1d5f1ba553848213353a2f39b9971c7ac6818390b1a00d6b23335be8f542665d4ed60202e7ca04a1976141881515833665782cdfa8f69fcb3ef0abfd4f37a

      • C:\Program Files\Malwarebytes\Anti-Malware\srvversion.dat

        Filesize

        10B

        MD5

        df247b49ce4558bb5b5340c47aa90fbd

        SHA1

        4093a325cf65326f8699e914fe9104a622c4ee85

        SHA256

        6b5273cc0e9eef94267ac0336c817770ad81f07ff129826b32188f14dcc0a077

        SHA512

        544cb6d75e69db15663f78f54f7928b02e30c42e0fa692ad78ad74c1ee72f7686f72b614e449ce1c8ecaba514f7cb0ac9f008b5576c51e95ed1253f8f12b0bff

      • C:\Program Files\Malwarebytes\Anti-Malware\uipkgver.dat

        Filesize

        6B

        MD5

        74c6677020fc6b6c867aab117078bf5f

        SHA1

        8c46db37dc0b39eb963d4144539c8b591e122400

        SHA256

        cdbb9bc874d71e154c71b68b1fe959913d286036dac11e226e5620c919ba9708

        SHA512

        3f9db8d9bb25322f8d8e750750bf92dbe6ac63d686eced65cddfcd61178cf0e947118a491058414d4d2cbb4892e39815565669aee0dfdda23aece72d278292d0

      • C:\Program Files\Malwarebytes\Anti-Malware\version.dat

        Filesize

        47B

        MD5

        2fd833745cd479301e6bc9aadb96d7c1

        SHA1

        4ad15523e9e17713ba853f6f5fece99ca2299c87

        SHA256

        02ee38003f8be2d3025dfd35b216df34391c391408cf779552cf9b6b9081bc66

        SHA512

        df4e96ff8c5b347827bae996a0f64ca3a0999e1090abc164dd31b3a073e7d226d00adf46e6819d50d0eac31fd8c89b4a44db1048eeebf8dc79547ca0fe4e23fd

      • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

        Filesize

        1KB

        MD5

        5474af06252fa9d060955a934c178e11

        SHA1

        11442a04a023c0207af2c548f29ce5375cfe5c85

        SHA256

        ed0272a6ba19c638053934a4165b937e84adc40d05057ea1045a427b3d4d8603

        SHA512

        02fdcab9c6b18cde279aad9dc0cb3ec5397d691ac9ffd3bd673d8450989c40120a5ec79e69ba1ca470b62e8c8d3b5edabaaf7b30230bd308088138805ba43194

      • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

        Filesize

        47KB

        MD5

        265ee21c4837f8593a67d3d6c2c3f115

        SHA1

        4d295ff7cc06631e08c78443d392df37c1dda651

        SHA256

        955de4ad9f17eae2a7b79f317d77ab44f14388bcfb20dfd4647aa74eb35b81fc

        SHA512

        e839f6e18cbc4b00374246a0e0e81b6cbc5bc62d754378440a129295090f646d458a2c5fcbf212f1788113dee09ec1a303288056b866128035cfd49ad5ea9ca9

      • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

        Filesize

        64KB

        MD5

        4a676414ae6fc5273f33c23345078df8

        SHA1

        d42c31b318fbd5a237a5e4634c81681e19cf5b17

        SHA256

        f00763d3fb0554233b8994272f17240cd18280678357fee80496b59e3cfe2fb6

        SHA512

        490313b7ade2ee4396849844e1fa90680b87de72a75bf1c723b6372c3661f84087c1ec8946ee2e443f3e8c0379c9081d9a1c198f865ecd8bd216f9190938d6ba

      • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

        Filesize

        64KB

        MD5

        2bf65c1cc17aa2a4830d72b25cb7ef35

        SHA1

        9a6863a10c6b199d9b8d34e79dd21f2700247b42

        SHA256

        f95b36c4066d020bf9bba0292fac5cdf5275de2a95dccf6a3bf348b495749b92

        SHA512

        b4531f54652a6a62f8c36ac406915c6525bf5cfe9c7c7a303c6b5b4cab06057b04e1fbbc1aad6df744b549a9d308302ead4a49fa22082b762caeb99110e61b59

      • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json

        Filesize

        86KB

        MD5

        e69ba446d0689f5e5b364927cce785a7

        SHA1

        ca760aa575173229cf015f10048c2c2e423d2a31

        SHA256

        c8c52b1cabfb10b38e3914c7282e5d6c93171fb1f91fb356b7bfcec3e8d6ec3a

        SHA512

        319d9c57101e870a799da447de8e8e6743da6c5b49df3c6d389508487203546d5ae0cd628a8da3f0e0d53c207bdb25fba461c29290dca5ffe1a8c355c54575ed

      • C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json

        Filesize

        607B

        MD5

        944741a1bb384e438a108b84e2d05ae5

        SHA1

        9edfa73dfd1c4b21b1fb483ab28040eab40ec525

        SHA256

        4a0ead8b55c7785bc0080c0f205d0a086d0c279c3329589a1c1e42496193b66e

        SHA512

        3ea43a79aae2f2a39f339c720b43838bc79b5d0ee30866e8bcc628cfb70a53d32b127f17d9a1cdd824144bdbcc7ac1395f9a3612709d11106ea5dd6eba17d904

      • C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json

        Filesize

        608B

        MD5

        cbf02c3c5433d3f6c8e7798334c5b148

        SHA1

        86bbbb1a3657e544012d3aaefb0bff3948f3fdb5

        SHA256

        0d372494d812773faf563de659f10b03e8dfdaa4e16037902e34bed9026924ea

        SHA512

        e901c92a6390bdfec944a358ff1bdc86286bb0be4dc124383e477ecde9db92253d626bb9d9e09eeea2cd3b4d7afc8f09600ccc5a141e9512df68f05230acb451

      • C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json

        Filesize

        847B

        MD5

        99ee846153a81360897a1cbadb0e3c07

        SHA1

        cbd3ec572cbe4b868106fa9fe556676d7266f968

        SHA256

        7e3495d1c69f94bd0cc6e3256a43ecdee644ae3f99478a00162877d997fbd261

        SHA512

        b0b6cd3c4e14024b19157161dc435dd4cad7c68f750e4b26b90e5e32a7778eb3b10ef36e9de9ed2fdf1e91a9e2ff7c250fc7ff021a768289c2f09b15f002773b

      • C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json

        Filesize

        846B

        MD5

        27c791f5f9f02ebeaa14fd9aa42d7de9

        SHA1

        88b61101edfbcad6ca8dd4e2e56e5407d8835d95

        SHA256

        0aba5e21a66b4858f6ca6a5737be721d3934b32c52c0c2fbcf167ace487a0b28

        SHA512

        14a490d132c797df40ca067c84e96db37ed7a2682ba620309027aef93055b199aa79f227c4da90d1027023f0cfba0c26688399d07d9eae5bae00faa92a2b418c

      • C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json

        Filesize

        791B

        MD5

        5b7459d5d4cc13ecc9f7cd39eecebf5b

        SHA1

        889dca9bb4ad05e3c8ec803002b44f049f6e43d2

        SHA256

        e9a93afbe916a57746c57e368d6c4c7effdd2d809e9111576d972834510f1156

        SHA512

        2a818d199961e13e6fbb8f445bebdfcab54593b598ed7e657d0ce880f3ca6232f4924e071c2c867c2217bce3fd3f6bcb0d4381733b89aaf0ceaadfd3ff8c8121

      • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

        Filesize

        9KB

        MD5

        21477933eeec6dd3aad57c5a97b1fca3

        SHA1

        4c6bc18277382f481c28ea9cfb93834ef283fc1c

        SHA256

        b8b5e957dccc50f31d01fe55d8ca235df813f51e2b5b66c644ca509a67f22aad

        SHA512

        b425e6486d47999c4e5cd73787bf3a4667aa5db4fda20a9816a11a64fcd01365e96d438f14a2dd967edc6f6b60fc26898a6155d5d3aa4a85c8f4a358fdc8c61a

      • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

        Filesize

        10KB

        MD5

        da05ff16120f89abef8ad55698a1d1ec

        SHA1

        9ebfb5146486103eefce705114f00de578317e2f

        SHA256

        1c827b717c09eb48ce85ad70c0d3a6aaeb0a69e31a7f9b35fb779d0ebb5c3604

        SHA512

        d7076b2887e87470dedbd67ae0145653c178c2998e99f2f05abb7be71a295b70097d63d6306f6538a4f9914f83bcb3ff4258a83e777b4427d9b99e7f1142abfb

      • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

        Filesize

        10KB

        MD5

        5ba8dc2f025a4ea2f0e4c547b0de8161

        SHA1

        c072b73274d6f70652e788c5401d5dbedab97026

        SHA256

        9d3d778d60154bc11e6e5131124fdd7aab7fec12ae50725b0822e0d98021def7

        SHA512

        1f991ed4c7e9bdf85111e34b8621a65dc113b6b613dc43a59a0bf34c65b28583287881b68654c50b1b4caadf4c41ea2b842ca4252bbcbc441f8da78192301f4f

      • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json

        Filesize

        10KB

        MD5

        b0b9dfc9f1a702961fe27147dc695d40

        SHA1

        5e29c867d43704a6bd658fafa3e04786f1387497

        SHA256

        af3167581b526f9f49996c35baac5bd3352ab8683c06db4521a676761b2115cf

        SHA512

        93f89a787f6cd7ae1417456ca6f9208fb1654b43956807abf14262a951837770fab79ac22d6e1b82a48f3bbabc4b3adfbc147f4d3ecb2f5e6483a997ccffe8ab

      • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

        Filesize

        1KB

        MD5

        3648473d10d72b856b3f5aa1c9e9d4e6

        SHA1

        4e29f4aec327cd4bbf58c1a48344745236376314

        SHA256

        6926426637d82a237f511559575be29cbbeba2f52f521b4d5682a376c339138a

        SHA512

        be5f1284093207d375ebb73fe409ca0c786d024c2394b4afefb768a34d9ebeca330efa7d5219493dc53783b0afa9079811eb15c190e02b24c5840c86afd66223

      • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

        Filesize

        10KB

        MD5

        b0300dc8dcfcdccb64884b07f7a7974d

        SHA1

        430a21f4742601b5482eb86aa1ff2f97a33b86e4

        SHA256

        da617c0f8aeab3894a0b0d348d2d631143a44a4783fb2ddb5942e8f38b2aec6c

        SHA512

        e2c1a6f7bf30847dcc98e96a678caca0918421a67e1e241c5f8369898403257f93ab874c7b47a18fb0dfb03b6dd0a869f8eb7bb3660cff78c9f1ce70d431bc20

      • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

        Filesize

        11KB

        MD5

        1da4d586423897ed4b2842d718801ef7

        SHA1

        b19f597797c1d6053fd81d8f8f1e267bc068bbd4

        SHA256

        a53800e05c1d9346b756ec758ee87f68b346e3157d5811653ba7ab49fb15afae

        SHA512

        24ce85febc05ccb77b2d67eccbcf2ca2f80f729712e39d14cddb30b7b6d40b8030181a9e3e1596fdc33d08720b0be641ee9edea9c46b63d7054418198849218f

      • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

        Filesize

        11KB

        MD5

        7a616b4966562ace77f6dc53a659edee

        SHA1

        3df24ac45ae46dbcfbb73c3ee6dcc8394b1ed06b

        SHA256

        8170680d232d47e7eb2625aaa537ea831ccef6f5e052a4d66cef6de19acd5dea

        SHA512

        f9c7607c1e81176dfe9c6feb45dce57268544478ad17cf41c889be34ab90d09c4718333b9e5e3fa86494752dea7044c5d67459ade80cd39fb62c33f671a3705d

      • C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json

        Filesize

        11KB

        MD5

        714e4335e3e11d26eadee94e2096664d

        SHA1

        2c75750b298951a71e9f24c8f0b740d6e2cd8532

        SHA256

        89e68d9d7b6ea5108cf5e56b4ee3f476e1135337472f5b38f46ad62aa507f721

        SHA512

        7b827c191b33a970ce95247f2e763e5529f4547539dbcb5bbce962255796e3d7d43e8f288ecde24f8a172779d65e8f5ebd7aed9a60c5052e60817308834250ba

      • C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json

        Filesize

        1KB

        MD5

        01c5a56bd81bd5d20d24d1aa4e90b708

        SHA1

        e3c6a4dacb7186b17a6d44856b8651f5a9dfce49

        SHA256

        57b017488d3b4a832c726c4971f9740e4249a45f8b684cd4e93964b79bd90604

        SHA512

        a0709bc9de58981a5beb3e2cdac34c5a4e4de32e4d48151b6ee9233126e8970bcd1cb65aa70c19cad8b51732fcb4311de35a8cd562c5f7bcda312768f8fde72e

      • C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json

        Filesize

        2KB

        MD5

        48e36cde884d6f600b044c17a829c69d

        SHA1

        d8f44ef65f8e0cedbff6a9abb4b2954a4ca60a02

        SHA256

        e7a8ba6a05db58637659fe418a3dfe401577ce7b06e59628e3dde7f47ca82223

        SHA512

        934c7f0a344191e8dad748bd6ba59f92f7969dc1d780f80460e3da71cc28b2f6296d911433fb819188b9519c39c51ba92a5353605e95ec43997189dd26ebf280

      • C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json

        Filesize

        814B

        MD5

        53fedeab84d642c8cfa1bcd5dd815cb6

        SHA1

        d1c4e1b735d40e827ee0a644024ee9935ca726ab

        SHA256

        1aa6b5b24521b7889b861d88843e4ecd7be34d3f1356406940bc1f8cd73d0291

        SHA512

        7b192677eaaf85ef96eea4155e7b4a857700574824f988683b47552d0af1c35371a7bb95a361ee8a023122aca91d7a7fb464ea204f287e66770196929b10dfb4

      • C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json

        Filesize

        1KB

        MD5

        a8acb752c29c0f7b5ee0c8d79e00c62a

        SHA1

        66552b91f0529dfb7fc4c724b1e1b02b9600cc66

        SHA256

        f8e40aeacdb58c863a9ba1c82e6bfc5aa6489ac5fb45ce837c19f28823d7c7cc

        SHA512

        a43e93c61775dbb5b7d5a3745c942ecd86a0dcf211897835e4aa7646233bb8945c27670da73f3db08b192fe39f0a52ae7c611889cd3b09f1c517522299fe5f22

      • C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json

        Filesize

        1KB

        MD5

        412b178a6bad45a3c9f74bb56ea1aeb4

        SHA1

        a57ed1cb284f194fd469107f6480e91eacf900f7

        SHA256

        3597c76811584bc1aa094a8194984e7cd624cfd7acbb74234a8eb8dc2dfb03de

        SHA512

        60b3fd66379d2354b3efd112ffe2a092e29ffbbd97e3f812b8f42870c41fd6f80bdef7908f616ada032e9ad9c388587ce9d4a6eb6a39dd257c36d44126e7cf2a

      • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

        Filesize

        2KB

        MD5

        187ff3ac7a02d9b31e66c7f38fcad21c

        SHA1

        f25829c838ec122a0a441110eff88d5dc3caf9b4

        SHA256

        26d10c99d5b9f3cf18a3c74372805b3786ca97dd8d1303ed9415ea7f05cf4d48

        SHA512

        0c3af5ed0c62ffe206efd2eea57df58568f6550fcb158e68bad25abd5b2699e5916be8affdcbea51439b093ed06219f4b234193f4f5be913e7649dd10597243f

      • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

        Filesize

        4KB

        MD5

        466548f83cc499f3e0952592b9f5edce

        SHA1

        988ca52165726c4a071499a84ff9b9567883e3a1

        SHA256

        a7666bf03f46deafa94049c9ea637bcf7b8ea58c518599383316a2bb44e6ec88

        SHA512

        6d02255ef67ffa862ca4f79b27416f5a5e1436e76456a704e55b01bbd35bc0ee95e36a1481926f31515648d8b91dd6ca0e616e69bcd3dea2445f686c4f5c6ed2

      • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json

        Filesize

        7KB

        MD5

        76420d2666e0b795e66e887657056ffc

        SHA1

        8d421bf2560a8abbe93a8e9c31427400ee359dee

        SHA256

        4dc586efd334a4f1050d6902f2d4416a6b0baaf42f4a34d78757604ba1002e45

        SHA512

        5f84b7a77bde417985cf25910f64d0043564c30d82642735b4fa62fdd1ff561e99c7958dceb167e2db74059acdc68df254d994dbaa3c4419c705b39913802dc6

      • C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json

        Filesize

        10KB

        MD5

        1aedd6a12d3fbfa9af962afd83b33705

        SHA1

        9c1e7b78c5d6dc2d74107072aa07e82f9565c967

        SHA256

        6cba2baef19ea56cf47178082f5c92556797239cb2215d458ad309d0dd002487

        SHA512

        d9cdefc907fea00c774d68bdff37e92d6202e3c5b263d4dbeb88e4deafcad999dcab33f07546ed11315d27227fd075649cbd50b841d16f81ad3344908c5287d1

      • C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json

        Filesize

        10KB

        MD5

        721b28df56143c26cde7beb5c8417d72

        SHA1

        c0dba8035071954924b881df0e82629026e29c2d

        SHA256

        f46269fe5865ee7a5620bb46d23061956e47613337e2efb6fc289474576df224

        SHA512

        21c4c4c961de5b2f4694190965eb1b5308af6c1336ac75d7eaf8e67a36eaf4608bd6b3c2a27d407f00f29210f9a9daac9f48fd5b8d8f2d23c44d3b1f8496cd6f

      • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

        Filesize

        1KB

        MD5

        d2aa0fe6ddd0899df627d8d3aada3152

        SHA1

        b49e85a6948efc2cdcd3133ed1a8f0b674aaaf5d

        SHA256

        69e57cbf237c9c3e9edbc755c0e2d2b8f294b387c923fe1599acfe6934ab3442

        SHA512

        6d3f4cb1ae1be254ae7598169c9007622b95df6b8b3904f666cff080f7cea11d527de92521708215934bc69e2e2df3956c9d22f920c4f8f886eed735977096a8

      • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

        Filesize

        1KB

        MD5

        e0b439d5158c55e8b00e2dbd1aee1540

        SHA1

        77330147e2f9b799cb8cba126836b1cf350e7ec6

        SHA256

        bff6431fe6f577dc18655b0b1f35c4f7b8eefaa6c7ee363cb3801ec7faa6bfae

        SHA512

        5cffe2458c84638867fe0205570ead1078baf4fe2d225cd6b2bc99c4c7cd2c731e7f3a8531be8827be7fc08d916093525e96cc13b7b10b0513f22403c700995d

      • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

        Filesize

        1KB

        MD5

        c9d022dc5881f4e1a10c8568e3c1e4c3

        SHA1

        460f02217d8b4ceb15b30b8010a0afe7a4cb6443

        SHA256

        d5f8b6f19fe2fe7c5920b9193e0722dc165855d93c5588d9eeb95eec2d4e5d78

        SHA512

        977c344e6c44598d50939a65f3a4f2bc2bbe712e6c968e47f371b774d83f0335c13882247c4893dd60ba8d66d60c14351b68167e084790b245e175e0cd9b423c

      • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

        Filesize

        1KB

        MD5

        92263cc86c6963919f601a9972d9af9d

        SHA1

        75195b45e651d9ef996065ebf405fa5b21dd032b

        SHA256

        eec3f2cc7c7b671e794db0381ba7d2403b3d508024e098663b953be226405a10

        SHA512

        db933b1368e719e4ab6c3ec3b2aa56dc036fa7e5023b58d81cb15294316be9eb8590e9387eaa662a6ce92035fad63d6f40b2a42554abf86252c7c94649b9a87a

      • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

        Filesize

        1KB

        MD5

        e7af763f18cfa95e8d21f266be96817e

        SHA1

        623c80dddaf5bc146101141d4bcb4a0bdc627f4e

        SHA256

        de270bead310b12315dd1e7cbb14978f042f74619bdd2ef219a3ae0fb6ce62ac

        SHA512

        8ec9b571bbf42583fb65cf95a0ab94abb222f7845b751d82bb98b3922807d12fd47edcfc1eaca5ca63294d084bf24329fcc195d09cab09a1421eda07b76cf050

      • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json

        Filesize

        1KB

        MD5

        359ba0035fbff5dea529c7a9e036ee93

        SHA1

        527a069410724350168719e881e381cfa0cd1ac8

        SHA256

        b7589859901cb7b338c08ead1330d24aff012b309187df9dd1be30d6f1c1b43b

        SHA512

        d031ab57d5fa66cf310d6cbcbd7ecc9cf745cef2b9b392bf5ce2d87a82917db1dafc0e700a2a8c00de8b09049fe5e7d5c705a4beed73cfc6186f02b91e234bf1

      • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json.bak

        Filesize

        1KB

        MD5

        209773bc4dceb24c6deca9a49ce367c1

        SHA1

        ca17851e5174ab6fd44338e2e19c81db9bdebf0a

        SHA256

        f219874f0040cb248245e0df01ee972667bda9c826007fb2b8ed9d74a9ce7e79

        SHA512

        1739f4e717615143741a0fef6fab6a6e480b359eccc1bb3ffac99c60830c148064cad04690e36e78a8d837fb6b80e31df40cb89a2df9cdf3dd7f948710a64b0c

      • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json.bak

        Filesize

        1KB

        MD5

        c875e2c6d19deb8ed6d5876ae6f89cda

        SHA1

        59437184ced0d883e40e68732e65c43a3e1ef2c5

        SHA256

        0f2aa21aba744718b1fdc6ef2e5006bba59fc45245b2f505f39e4686022bcd4d

        SHA512

        d34c96f4bd1e98226b48d5543d82b67df0813dee3ff2acc6391ff4deacb8b45349b5ee91e3c97c484b5fbb21f1a50eef19d77b02c0bd0e6d8e2ed41f32960313

      • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

        Filesize

        1KB

        MD5

        110ef306afe8dc231e05d20cdcf13ebd

        SHA1

        56e2051ba2d16c9bfe783d60b99c3f00606e42bb

        SHA256

        d6d69e0f27b94e796dfcb850fab718e323b3083b4749c5d0a4f6fa3070939a97

        SHA512

        2b1292f8eafd5f1184ab280fce38549e713ad973afca857b37faaeaf2173f137a298d75f97116ef3f0e9a278b080f038cf60c9d69e83a664b25294181bcdd30e

      • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

        Filesize

        1KB

        MD5

        294bd07d3bce0f41bc62ad9b6be2c0a3

        SHA1

        501773a4b93ef47c811e149f0200f9ee39ccae35

        SHA256

        cfa1270734bc65980a82493dd2f8e69979d6f1d46f7892bb19aee0ce20d9cf68

        SHA512

        3b8061dd2057b94d2651b8ffbdb02bd137ce8cdba293bbc5d04ffbe9f8141d3815410784ee41e751bce8f1b74f0ea8a1f56cf140cd73c5881de8420c710bd11a

      • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

        Filesize

        1KB

        MD5

        8c0eaf51860ce05cc28459f970649ca1

        SHA1

        ea535518368980b6fa73e47fd50667afc5e15d8c

        SHA256

        f07a13b7b2d4aa255b0dd7dc7edfa1e682526a71608fc237b2a8c5f10e223ad7

        SHA512

        3408a2d5d5361ed9e2e3c2158213f137cd996b9594edecca18559b3ed71e016437b67c1582097bde0d8a1f4b3af6c270fec6412b7790c6e3ea6c7c9a02d01f86

      • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json

        Filesize

        1KB

        MD5

        f709882a258f4bfa545ee08fef9c8d2f

        SHA1

        21c80a7d120e32a0753bd905bcd77bb21a5fed7e

        SHA256

        300cf0bbabf569161a2aef4a1dc1633753e5192e7cdd22aaeba69b5fb5fb47a3

        SHA512

        d2e875fee36894a8516b43884ff35ac138831e4ccfe77299969414d1f2c6f44eb6a9accbf49d6f3c073097dc0b74589bb28f86928e250dd9556a8f62cafc1206

      • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak

        Filesize

        1KB

        MD5

        9c8a57dc5cfc00b61348176a9845cd36

        SHA1

        1c6ea057eb34e35a35ff36057ebb3b5d815b758b

        SHA256

        a23287a4c334680fbd44e197ad55888892a412712b8ebd27921b14fe36c87d83

        SHA512

        3203c3d0946e1110344ed17a34112754663de4c807be62520a84cb574db1c66ec7da3c2851e16d5d3b147cf1fdb7c8d79d43e0f6ce89f809e709adb1e09cc1cd

      • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak

        Filesize

        1KB

        MD5

        c498052cb7c9bf3475376b2e04d2e869

        SHA1

        df7aa2c170a901e6023da91d3b1ea36f75c3e86d

        SHA256

        f0823ca9861e4db9dc9f0b51b59f309369148d11e70efcd3b1eb40c8dcb77fb5

        SHA512

        14c561b74146f2edaa7c00db285e212fa8333b67e61dfa81df0e3cb542a517c8ae6084eeaf212fa08f90b91fb6804997e68353a44ece65684c0bf8e3ea7c5999

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Actions.dll

        Filesize

        5.0MB

        MD5

        1eff53d95ecaf6bbfffe80d866d8e1dd

        SHA1

        d7ef7d7c77fd04b2c0eb8c16bb3cd08057f6742f

        SHA256

        6dd748f7ca56125cbe158fa3612f08e7312ef58ad5375e6b7ab5532cc16ca0ac

        SHA512

        c59b8e6f0b238a247e64b9c7bb42213dadac1dada63542830a6292361174c935c0c662b2d1aed3fb6100cc4993297b1eaf25e328f2b4613458c4ffca63b9f02d

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\BrowserSDKDLL.dll

        Filesize

        5.8MB

        MD5

        1ed53171d00f440f29a12f9beb84dac4

        SHA1

        4d9a1e3579b0999f1ab2fa818b588411e9ee920c

        SHA256

        e659e687a872050f9e65d78992d16bd9b393cf3f8e8c94e0e15fb42b7065327e

        SHA512

        17161cfc672d1b996b8af4ebac17f9a8a3807f38c9a23e2e5b4dadcd9a21c3a64faec9bf59147022a9df88b80f89300f1b537091289bd7a42806bd206a317e6e

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Global.nm

        Filesize

        335KB

        MD5

        1dd368ad83428d51b993dacdc5bc4a99

        SHA1

        efada223021c1670f8475f1a778ece74fa8cce75

        SHA256

        d1bcb91d47703845f9429211ffbfc7d6ffd71db873c5d8ac8cc0fa63dd54243b

        SHA512

        6f178501c11224a250ace8534de1755c3888b1cef1e6b76584a5d7b74a0fd4e6b666f0ef4cfd24bb4c5170b824291ab9c3cb49176f7772c70f0fd8a0f155ab63

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Global.sr

        Filesize

        12.9MB

        MD5

        48a633d46e38ef64afa568f17ee48356

        SHA1

        aa6465ccae2aea1640d9962af842529a088b5069

        SHA256

        975c52927f5112718a6e0fcc5b53d8649e49442aba421d55f966bcf40dce0832

        SHA512

        c44bb4fa943ceea9070c5ef42f7ad47ea4f33276ff9a807b63a65d1eb32de7847e21261bf8ac2e422c86f7417c009138b6536d393ba3e97f91f6a427c86e0cbc

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\MBAMCore.dll

        Filesize

        6.4MB

        MD5

        c62178af0cccb43974747725c8466c5f

        SHA1

        f8f765fe5dd1ab8410b556d77d56e26e77eefc61

        SHA256

        7366f87436b13ad92549d0fb77ef5ee0ba49c5df64e87d28b604648e33b7c15f

        SHA512

        f82096bdc626a876ef1efd995efb618fb090689a6668c855e434122c4fbc2659a5116fb0fb4c27734e446746c3433bbdf94a905267820cd68ffd39d55bcd9334

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\cfg.bin

        Filesize

        661B

        MD5

        8fd13803b1e5f14b4d241facc601a170

        SHA1

        7321eec794bc766d84d75bd0370a9f2e4d7abdf6

        SHA256

        925d771b2643715b62ef720801dfa96047fff1ee70eabb244bed802234673717

        SHA512

        f5b3514258487f8576fe32a795eefcffef049c7d002a6abdca17383bba838c7a218be23ec6803dcefed615f40afc2ba4b15bf65c9a74c4f6bb891d15d02bfc22

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\clean.mbdb

        Filesize

        10KB

        MD5

        ada5df347a6e016a6532ca5b0a0751bd

        SHA1

        617fac3947aba6cd91129cf12a3eb229cb9008f0

        SHA256

        a7e851818e5c7431d5fb288fe4946bab13624da65f3280d457c2022772555b6a

        SHA512

        9886cbc156739a33dcbd9e1aedb20a3572da83400dd1a881630eeb21a9f19228c1acd5652df30770ca48bc981bd71b81a3f376b69c2ea2b7bce1b7a8dd9d649c

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\dbmanifest2.dat

        Filesize

        924B

        MD5

        761e1410a133f918354fd7c7d0028423

        SHA1

        c8dcb395a34161ade7dc2b6fff995d24b7d10079

        SHA256

        c646f72018e86279a0bd5f337dd70dab4570e9856853449ce461adb3bccad789

        SHA512

        7442eaff98334fb47bec00a0de1e10f4efa80fa03f3ccf8dcdb24aae8882afdf14f13780b547c45ca0f83adceb963d0db9d5173d61a47d76dd7719dd783c9888

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\dynconfig.dat

        Filesize

        39KB

        MD5

        10f23e7c8c791b91c86cd966d67b7bc7

        SHA1

        3f596093b2bc33f7a2554818f8e41adbbd101961

        SHA256

        008254ca1f4d6415da89d01a4292911de6135b42833156720a841a22685765dc

        SHA512

        2d1b21371ada038323be412945994d030ee8a9007db072484724616c8597c6998a560bc28886ebf89e2c8919fb70d76c98338d88832351823027491c98d48118

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\exclusions.txt

        Filesize

        23KB

        MD5

        aef4eca7ee01bb1a146751c4d0510d2d

        SHA1

        5cf2273da41147126e5e1eabd3182f19304eea25

        SHA256

        9e87e4c9da3337c63b7f0e6ed0eb71696121c74e18a5da577215e18097715e2f

        SHA512

        d31d21e37b0048050b19600f8904354cff3f3ec8291c5a7a54267e14af9fb88dfb6d11e74a037cc0369ade8a8fb9b753861f3b3fb2219563e8ec359f66c042db

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\ig.exe

        Filesize

        1.8MB

        MD5

        3ccbcabc11be3bb9cf9d62f2023fd63c

        SHA1

        f676bef30368b0fc8b7365fd1e737f799b0850e7

        SHA256

        f856e9b29dc04b6eba72d6bf383e4c0fc21a374af783cee5c4e6b5f768157eff

        SHA512

        d6ae7d9473e0b3e02a0f2b1df6fc3066ce672cf754268cab71792c575896ebc7018b522e7da304e8a7e2351ba4879e995055ec2b22c00ec17ef4a6cb08764a42

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\mbdigsig2.dat

        Filesize

        514B

        MD5

        5b2f36faed5202056def529dbeddc3db

        SHA1

        4743b47a12f44da41fad3eb60c5e8c300f2b7fe3

        SHA256

        af9d130fc86694f6a6f4a9bd5ba1232a42a2c943f8ccb2e86a8242f2fc888412

        SHA512

        5a2bfd412d1c4d2f3ef1583199dc8609d4052a5f557bb0ce70b490492f5b7c6b0143b20127cdb7ca701e67f695101b3c20dbd46456f193ffac13bebeb4b32fb7

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\prot.mbdb

        Filesize

        24B

        MD5

        546d9e30eadad8b22f5b3ffa875144bf

        SHA1

        3b323ffef009bfe0662c2bd30bb06af6dfc68e4d

        SHA256

        6089fbf0c0c1413f62e91dc9497bedc6d8a271e9dc761e20adc0dccf6f4a0c1f

        SHA512

        3478f5dcf7af549dd6fe48ad714604200de84a90120b16a32233b6d44fa7240f5f4e5fe803f54b86bbdfd10fa1bfdd88fb85eb6a78e23e426933f98d0a2565ec

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\rdefs.mbdb

        Filesize

        24B

        MD5

        2f7423ca7c6a0f1339980f3c8c7de9f8

        SHA1

        102c77faa28885354cfe6725d987bc23bc7108ba

        SHA256

        850a4ea37a0fd6f68bf95422d502b2d1257264eb90cc38c0a3b1b95aa375be55

        SHA512

        e922ac8a7a2cde6d387f8698207cf5efbd45b646986a090e3549d97a7d552dd74179bd7ac20b7d246ca49d340c4c168982c65b4749df760857810b2358e7eb69

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\rules.mbdb

        Filesize

        8.0MB

        MD5

        322644a0f91a92d4e815cfd08d85b5a4

        SHA1

        d7489dea2ab371df333218ea1e7e87f189f7383d

        SHA256

        cd914d2b54d0f3ee8f24cccf0baddc77c7edc096b784163e7ccd735c1c49d72a

        SHA512

        1d3e7562f16b1b5f2147b98bd9f6a976df28a8043a59ada59c454f8d5d83674b939df27ab2c3b0cad44c1bcf5c72cc140f2a7f370d428083d860478dc89be170

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\sample.dll

        Filesize

        528KB

        MD5

        ff8aaf92246cc522f7f335132b5dd5c2

        SHA1

        119a2dd0ce3a35e51f732dd749813589bbc032fd

        SHA256

        3094458a624b25eb5e53191cad552f57f48389fe23deef20fef1fa8dc93a112e

        SHA512

        d2901a9d3b8762437335ea50b6f433e698a741dff47cea3029e157d56355e8959679a9b66a8f3bd347d965ffddaa29452e5b4e25f520b1e5c39af748419cc9c1

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\scan.mbdb

        Filesize

        1.0MB

        MD5

        94fe1db111bb756f187afc939671190a

        SHA1

        cf9a1c80f8fd5fe860e4ec3ed885a7933aee871d

        SHA256

        f04bbe31d252669400288b3714328acb1e2e21384dcd67215ef330ba4395e836

        SHA512

        649da0c2ca749acf4d72e33c05b6fcde7aab90b9e267dc3e61c60b9525e4a5f11a59acdb9079161e9479cfd3a0530d1f1ce0ae661bf940f18ec2453e024a3251

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\tids.mbdb

        Filesize

        175KB

        MD5

        9621dc50ca094909945f3d60683ab97a

        SHA1

        50f95896ab62295a12735dd0689adb505e58bad9

        SHA256

        c5f2f6de5408fc26050cdad564c4ce72f01f2ad277338b2ba98256bb8a5a34c6

        SHA512

        cbd2094f5fbb33888d738b9ef7e8fab76aa595382ebe64e775672333d42aa2c61ab4ecaf6439a05caf15b9d9dcacb320156de74077d185ab702149ce50ae83de

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\wprot2.mbdb

        Filesize

        42.2MB

        MD5

        9eda80b27491310a37f12ee241fe7aff

        SHA1

        30a4f3cff95e50541b2dc5ec2cb1fe1d872f28ba

        SHA256

        db2898a17eda4d2e745b8cd39002c94af0060b8a6d1b4c2b37013aeb88b0695c

        SHA512

        f0734db7aab66821e408001c6aacbaff9010b9e43b71a439b1a8af6b0b9b85f62a61051561558923a24575ab80265a2d87489b8dbebb79b6fb3a283d1708d581

      • C:\ProgramData\Malwarebytes\MBAMService\pkgvers.dat

        Filesize

        75B

        MD5

        0e8a1bec02b02c10140c0e1a08a466b5

        SHA1

        7aa11e550bb0159aa844b98dbf2b7fc5d44d617a

        SHA256

        0d8c106333edad9b64c0dda836840441f87616ef97a2e82492356a96a75c24c0

        SHA512

        ce940ce0e4155786ce2888b23b244275996674b76f29da3d64879d0bde63591619231f1d0e935705ce297335243d96a2fdee2ae2669803107be9fe77eca04c60

      • C:\Windows\System32\CatRoot2\dberr.txt

        Filesize

        146KB

        MD5

        440c5d8d83504fbd46bf6e0e580a8248

        SHA1

        eb5feaeba3763e5a13c81c391fb5ad10f533d8d8

        SHA256

        4be960c0d104363b3245f3911fbac8d26c0468593374d4865c7e61157c6f92d8

        SHA512

        b9bfc1fd82c7bf7bc8b8528d82f56de2b7379439e5326b71469ed0a8ee8ac98a7f04046e71462563fc79f88c6ba20b4d4aafe5039a753801e9bfbb0d73defdf7

      • C:\Windows\System32\catroot2\dberr.txt

        Filesize

        147KB

        MD5

        17fd5ea5a02ae4088a233d160e475cad

        SHA1

        18cd51fa76a54c5b7b44010b894e22b4e058ffc1

        SHA256

        eca0ca3f63f8f4dccc4ccca0df908654750339f45e68cec65368f302ed10aa66

        SHA512

        f418b87e08d7d8524b9007747d0b58c7729ffb31607555a92a3e9836995c806584f601b722bbd82c9bcdfed0fd44f7d8e7b891733960b50886d3c1ccec3373aa

      • C:\Windows\Temp\MBInstallTemp3a80dae7109911ee997e7ecb2dafa72a\7z.dll

        Filesize

        1.6MB

        MD5

        ab8f0c1a37c0df5c8924aab509db42c9

        SHA1

        53dba959124e6d740829bda2360e851bcb85cce8

        SHA256

        6e223b275b84d948cc5ae1f161f0bfff2adb34de04634c84d7dbe9305a4998d5

        SHA512

        ff8a26e8fd5a08c74e5ba93a564e0d3cd932754e7f06993a365bfad06670497889e69ec45bfba1378040b72f82d468e79682beba2439937bb29d2a41da940d4a

      • C:\Windows\Temp\MBInstallTemp3a80dae7109911ee997e7ecb2dafa72a\7z.dll

        Filesize

        1.6MB

        MD5

        ab8f0c1a37c0df5c8924aab509db42c9

        SHA1

        53dba959124e6d740829bda2360e851bcb85cce8

        SHA256

        6e223b275b84d948cc5ae1f161f0bfff2adb34de04634c84d7dbe9305a4998d5

        SHA512

        ff8a26e8fd5a08c74e5ba93a564e0d3cd932754e7f06993a365bfad06670497889e69ec45bfba1378040b72f82d468e79682beba2439937bb29d2a41da940d4a

      • C:\Windows\Temp\MBInstallTemp3a80dae7109911ee997e7ecb2dafa72a\ctlrpkg\mbae64.sys

        Filesize

        154KB

        MD5

        95515708f41a7e283d6725506f56f6f2

        SHA1

        9afc20a19db3d2a75b6915d8d9af602c5218735e

        SHA256

        321058a27d7462e55e39d253ad5d8b19a9acf754666400f82fe0542f33e733c6

        SHA512

        d9230901adeecb13b1f92287abe9317cdac458348885b96ef6500960793a7586c76ae374df053be948a35b44abe934aa853975a6ccd3788f93909903cc718c08

      • C:\Windows\Temp\MBInstallTemp3a80dae7109911ee997e7ecb2dafa72a\servicepkg\MBAMService.exe

        Filesize

        8.8MB

        MD5

        a3e7aee21c3a8468e7ef8216596f7254

        SHA1

        982e2afee4a0f95d601c8a382621020ea0332b64

        SHA256

        7e85076e6d1b6c66b1bb8cce31bd9452c279de20059890f86997f097fe363433

        SHA512

        3453403a51734c5404163c5b9295439d89ad7fe9047915f1b8f5d5e154fb40e257e08086bb5dede26e7aebd36727a277246a343627731934182b12de11dc0b36

      • C:\Windows\Temp\MBInstallTemp3a80dae7109911ee997e7ecb2dafa72a\servicepkg\mbamelam.cat

        Filesize

        10KB

        MD5

        60608328775d6acf03eaab38407e5b7c

        SHA1

        9f63644893517286753f63ad6d01bc8bfacf79b1

        SHA256

        3ed5a1668713ef80c2b5599b599f1434ad6648999f335cf69757ea3183c70c59

        SHA512

        9f65212121b8a5d1a0625c3baa14ef04a33b091d26f543324333e38dcdb903e02ccc4d009e22c2e85d2f61d954e0b994c2896e52f685003a6ef34758f8a650c7

      • C:\Windows\Temp\MBInstallTemp3a80dae7109911ee997e7ecb2dafa72a\servicepkg\mbamelam.inf

        Filesize

        2KB

        MD5

        c481ad4dd1d91860335787aa61177932

        SHA1

        81633414c5bf5832a8584fb0740bc09596b9b66d

        SHA256

        793626d240fd8eefc81b78a57c8dfe12ea247889b6f07918e9fd32a7411aa1c3

        SHA512

        d292e028936412f07264837d4a321ecfa2f5754d4048c8bcf774a0e076e535b361c411301558609d64c71c1ce9b19e6041efa44d201237a7010c553751e1e830

      • C:\Windows\Temp\MBInstallTemp3a80dae7109911ee997e7ecb2dafa72a\servicepkg\mbamelam.sys

        Filesize

        20KB

        MD5

        9e77c51e14fa9a323ee1635dc74ecc07

        SHA1

        a78bde0bd73260ce7af9cdc441af9db54d1637c2

        SHA256

        b5619d758ae6a65c1663f065e53e6b68a00511e7d7accb3e07ed94bfd0b1ede0

        SHA512

        a12ccf92bead694f5d3cba7ff7e731a2f862198efc338efc7f33a882fe0eb7499fb3fb533538d0a823e80631a7ca162962fbdfd78e401e3255672910b7140186

      • C:\Windows\Temp\MBInstallTemp3a80dae7109911ee997e7ecb2dafa72a\servicepkg\mbshlext.dll

        Filesize

        2.7MB

        MD5

        b7e5071b317550d93258f7e1e13e7b6f

        SHA1

        2d08d78a5c29cf724bc523530d1a9014642bbc60

        SHA256

        467de01d7cee7ec54166b80658ff22f9feebdb1c24eaf1629cf40e4124508064

        SHA512

        9c35293c95c1a9141740ac99315605964aa37c4a42d3a11cae9e5649ff1427a9480d3d5e7f763212cf13db3511c5ea3c84e68f95f0067fe6339a9d3fb7b27c54

      • C:\Windows\Temp\MBInstallTemp3a80dae7109911ee997e7ecb2dafa72a\uipkg\QtQuick\Controls.2\HorizontalHeaderView.qml

        Filesize

        1KB

        MD5

        d8c9674c0e9bddbd8aa59a9d343cf462

        SHA1

        490aa022ac31ddce86d5b62f913b23fbb0de27c2

        SHA256

        1ef333b5fb4d8075973f312ef787237240b9f49f3f9185fb21202883f900e7d7

        SHA512

        0b86ec673133f6400c38b79f9ba4f7b37ce5afdab1a2e34acbf75019e2590cc26b26d323ddc1567c91375053c9c8593be0615389db8eb1a8d1eb084ad4200b82

      • C:\Windows\Temp\MBInstallTemp3a80dae7109911ee997e7ecb2dafa72a\uipkg\QtQuick\Controls.2\Imagine\VerticalHeaderView.qml

        Filesize

        1KB

        MD5

        829769b2741d92df3c5d837eee64f297

        SHA1

        f61c91436ca3420c4e9b94833839fd9c14024b69

        SHA256

        489c02f8716e7a1de61834b3d8bbb61bce91ca4a33a6b62342b4c851d93e51e0

        SHA512

        4061c271db37523b9dea9a9973226d91337e1809d4e7767e57ac938d35d77a302363ed92ab4be18c35ba589f528194ad71c93a8507449bf74dd035acf7cdb521

      • memory/920-4707-0x0000000074E50000-0x0000000074EDD000-memory.dmp

        Filesize

        564KB

      • memory/4124-4715-0x00007FFB3F460000-0x00007FFB3F9CB000-memory.dmp

        Filesize

        5.4MB

      • memory/4124-5183-0x000001F1210E0000-0x000001F1210E1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5210-0x000001F121110000-0x000001F121112000-memory.dmp

        Filesize

        8KB

      • memory/4124-5209-0x000001F1210F0000-0x000001F1210F1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5208-0x000001F1210F0000-0x000001F1210F1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5207-0x000001F121100000-0x000001F121102000-memory.dmp

        Filesize

        8KB

      • memory/4124-4714-0x00007FFB3FDF0000-0x00007FFB4020E000-memory.dmp

        Filesize

        4.1MB

      • memory/4124-4713-0x00007FF763130000-0x00007FF76478A000-memory.dmp

        Filesize

        22.4MB

      • memory/4124-4716-0x000001F117740000-0x000001F117750000-memory.dmp

        Filesize

        64KB

      • memory/4124-5206-0x000001F1210F0000-0x000001F1210F1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5205-0x000001F1210F0000-0x000001F1210F1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5203-0x000001F121100000-0x000001F121102000-memory.dmp

        Filesize

        8KB

      • memory/4124-4790-0x000001F117740000-0x000001F117750000-memory.dmp

        Filesize

        64KB

      • memory/4124-5166-0x000001F1210E0000-0x000001F1210E1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5167-0x000001F1210E0000-0x000001F1210E1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5168-0x000001F1210E0000-0x000001F1210E1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5169-0x000001F1210E0000-0x000001F1210E1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5170-0x000001F1210E0000-0x000001F1210E1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5171-0x000001F1210E0000-0x000001F1210E1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5172-0x000001F1210E0000-0x000001F1210E1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5173-0x000001F1210E0000-0x000001F1210E1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5175-0x000001F1208B0000-0x000001F1208B1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5177-0x000001F1208B0000-0x000001F1208B1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5176-0x000001F1208B0000-0x000001F1208B1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5179-0x000001F1208B0000-0x000001F1208B1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5178-0x000001F1208B0000-0x000001F1208B1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5181-0x000001F1208C0000-0x000001F1208C1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5204-0x000001F1210F0000-0x000001F1210F1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5182-0x000001F1210E0000-0x000001F1210E1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5185-0x000001F1210E0000-0x000001F1210E1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5184-0x000001F1210E0000-0x000001F1210E1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5186-0x000001F1210E0000-0x000001F1210E1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5187-0x000001F1208C0000-0x000001F1208C1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5188-0x000001F1208C0000-0x000001F1208C1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5189-0x000001F1208C0000-0x000001F1208C1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5191-0x000001F1208C0000-0x000001F1208C1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5190-0x000001F1208C0000-0x000001F1208C1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5192-0x000001F1208C0000-0x000001F1208C1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5193-0x000001F1208C0000-0x000001F1208C1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5195-0x000001F1210F0000-0x000001F1210F1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5196-0x000001F1210F0000-0x000001F1210F1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5198-0x000001F121100000-0x000001F121102000-memory.dmp

        Filesize

        8KB

      • memory/4124-5197-0x000001F1210F0000-0x000001F1210F1000-memory.dmp

        Filesize

        4KB

      • memory/4124-5199-0x000001F121100000-0x000001F121102000-memory.dmp

        Filesize

        8KB

      • memory/4124-5200-0x000001F121100000-0x000001F121102000-memory.dmp

        Filesize

        8KB

      • memory/4124-5202-0x000001F121110000-0x000001F121112000-memory.dmp

        Filesize

        8KB

      • memory/4856-4618-0x0000023E785D0000-0x0000023E78904000-memory.dmp

        Filesize

        3.2MB

      • memory/4856-4789-0x0000023E785D0000-0x0000023E78904000-memory.dmp

        Filesize

        3.2MB

      • memory/4856-4712-0x0000023E785D0000-0x0000023E78904000-memory.dmp

        Filesize

        3.2MB

      • memory/4856-3399-0x0000023E785D0000-0x0000023E78904000-memory.dmp

        Filesize

        3.2MB

      • memory/5204-4474-0x00007FFB3FDF0000-0x00007FFB4020E000-memory.dmp

        Filesize

        4.1MB

      • memory/5204-4475-0x00007FFB3F460000-0x00007FFB3F9CB000-memory.dmp

        Filesize

        5.4MB

      • memory/5204-4493-0x0000011CC7640000-0x0000011CC7A80000-memory.dmp

        Filesize

        4.2MB

      • memory/5204-4500-0x0000011CC7A80000-0x0000011CC7C80000-memory.dmp

        Filesize

        2.0MB

      • memory/5204-4510-0x0000011CC5090000-0x0000011CC50A0000-memory.dmp

        Filesize

        64KB