Overview

overview

10

Static

static

10

MBSetup.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    65s
  • max time network
    65s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-uk
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-uklocale:uk-uaos:windows10-2004-x64systemwindows
  • submitted
    22-05-2024 19:10

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    MBSetup.exe

  • Size

    2.5MB

  • MD5

    6107ffe4a1a1ee9eb2453ca669791ac9

  • SHA1

    8f69617ffd69adab260500ec25d5ae50cc49b882

  • SHA256

    3c68baabc345c58d95825e548a395d305775b7f0313ec42997c17870ea6a458f

  • SHA512

    305ed565d5b61271e3deac9ab254ce2d70c031f4713c9b37212ea56ff061b8ce0afb5002c02a5252991c506d217f3f6aad439c192384646432f2ae71c252fb56

  • SSDEEP

    49152:u5wZat2rFnBQjvaq/GM6+StQyfvE0Z3R0nxiIq2dd5OAnp:u5wZauVBQjvLQYKtQRq2Hnp

Score
10/10
discoverypersistencespywarestealer

Malware Config

Signatures

  • Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs
  • Drops file in Drivers directory 9 IoCs
  • Modifies RDP port number used by Windows 1 TTPs
  • Sets service image path in registry 2 TTPs 2 IoCs
    persistence
  • Checks BIOS information in registry 2 TTPs 4 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Downloads MZ/PE file
  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 5 IoCs
  • Executes dropped EXE 58 IoCs
  • Loads dropped DLL 64 IoCs
  • Registers COM server for autorun 1 TTPs 64 IoCs
    persistence
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks SCSI registry key(s) 3 TTPs 26 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 5 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 24 IoCs
    evasionspywaretrojan
  • Script User-Agent 1 IoCs

    Uses user-agent string associated with script host/environment.

  • Suspicious behavior: EnumeratesProcesses 24 IoCs
  • Suspicious behavior: LoadsDriver 12 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:3412
      • C:\Users\Admin\AppData\Local\Temp\MBSetup.exe
        "C:\Users\Admin\AppData\Local\Temp\MBSetup.exe"
        2⤵
        • Suspicious use of NtCreateUserProcessOtherParentProcess
        • Drops file in Drivers directory
        • Checks BIOS information in registry
        • Drops file in Program Files directory
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        PID:4832
      • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe"
        2⤵
        • Executes dropped EXE
        PID:5504
        • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
          "C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe"
          3⤵
          • Executes dropped EXE
          PID:5424
    • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
      "C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe"
      1⤵
      • Drops file in Drivers directory
      • Enumerates connected drives
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies Internet Explorer settings
      • Modifies data under HKEY_USERS
      • Modifies system certificate store
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:452
      • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe" /installmbtun
        2⤵
        • Drops file in System32 directory
        • Drops file in Windows directory
        • Executes dropped EXE
        • Loads dropped DLL
        PID:320
      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" /Service /Protected
        2⤵
        • Drops file in Drivers directory
        • Executes dropped EXE
        • Registers COM server for autorun
        • Modifies registry class
        • Suspicious use of AdjustPrivilegeToken
        PID:4612
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:4404
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
        1⤵
        • Drops file in Windows directory
        • Checks SCSI registry key(s)
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:4116
        • C:\Windows\system32\DrvInst.exe
          DrvInst.exe "4" "9" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf" "9" "4ba9030c7" "000000000000014C" "Service-0x0-3e7$\Default" "000000000000015C" "208" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun"
          2⤵
          • Drops file in System32 directory
          • Drops file in Windows directory
          • Checks SCSI registry key(s)
          • Modifies data under HKEY_USERS
          PID:4320
      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"
        1⤵
        • Drops file in Drivers directory
        • Sets service image path in registry
        • Checks BIOS information in registry
        • Enumerates connected drives
        • Drops file in System32 directory
        • Drops file in Program Files directory
        • Executes dropped EXE
        • Loads dropped DLL
        • Registers COM server for autorun
        • Checks processor information in registry
        • Modifies Internet Explorer settings
        • Modifies data under HKEY_USERS
        • Modifies registry class
        • Modifies system certificate store
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:4632
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:2632
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:4132
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:4044
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:1072
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:2120
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:3676
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:2512
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:2232
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:3176
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:3212
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:2916
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:4384
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:1020
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:900
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:1400
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:2476
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:3196
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:4972
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:4916
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:1244
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:4364
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:2740
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:4700
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:396
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:3908
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:2080
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:2032
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:2256
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:4380
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:4580
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:1192
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:3804
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:2012
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:4880
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:3328
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:4448
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:2868
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:2956
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:1328
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:3696
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:3304
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:700
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:2408
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:4128
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:916
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:2284
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:5868
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:2688
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:4228
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:5876
        • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
          ig.exe reseed
          2⤵
          • Executes dropped EXE
          PID:3228
        • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
          "C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe" nowindow
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5248

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\7z.dll
        Filesize

        1.7MB

        MD5

        b9bab3b367c53472908741b774fce358

        SHA1

        987e358915e7bb78491a65073189642f88d0d823

        SHA256

        77a4eb913e5bc068fe1479f6da9bd2b31303b6d23c7e353dde2984fa373273f2

        SHA512

        60b3858901df2ad51db7efde8673fd17c529c09029247d6bfb6565031d53d00b1d554ba558b0440a00c961204b0bb812d0f9ceef16a7fc1934f6b1a5efa91745

        Download Submit

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\Actions.dll
        Filesize

        4.5MB

        MD5

        20d70c6e04dbf14c01ab2d756e97854f

        SHA1

        f172c8b8c0e87d2a9ab064513dce004d16d03e0d

        SHA256

        c4002339b58bc493ae3540bafe1b2ca0a70bba0f853e29f60e0f6a1680fa9a24

        SHA512

        13e073cd4b3d53c6d9fdda671a55962266b5c0a18abcb5774092c35f0d0bf2c5d0d9802d8955d32cceb166821634bfc067dac7809c9ade143cf3a3b497743b36

        Download Submit

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ActionsShim.dll
        Filesize

        2.2MB

        MD5

        13ee270968b2eaf9d45770e831412c0a

        SHA1

        6f4bfee0efd52db649a9378298148fd5ae5001e1

        SHA256

        81a28988d59a8e75b771456f61aa3029f334f2a492da70f53bd93403122e2951

        SHA512

        36f9339f15bd1982fe196eaf23ed879db5fdf1cc1c41683a915d1ee9718053720c9794e77d093a51adf9c20f58b2f5191abeecef41ea87746933c845be48bcde

        Download Submit

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\BrowserSDKDLL.dll
        Filesize

        5.4MB

        MD5

        a3fe79081a59d493c01b5c1139babdc9

        SHA1

        1505cb4053bcd9b55c40227ad6b62a2457cebbdf

        SHA256

        60c8c024ff020f04fcccec10ee78872bb1e6985463d6370c6af095761d88b860

        SHA512

        22310a585edb36050ff20356cd9eb5129cdae3ffea2ccd7a54d9652dbd336d7f402ed119dc59ae3250b93bad40e75983184256c0bb239cff049bbb983f487bdc

        Download Submit

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\CleanControllerImpl.dll
        Filesize

        6.6MB

        MD5

        af90150f1e491048599c39a64014f093

        SHA1

        185528c8652fd1ad9f5a706870aa9e3129855b41

        SHA256

        b2185815e7724eaecc7cb35cbb4667948a4d93697de5dd2bc058e4c604a90735

        SHA512

        ac72684392ff795f10c8e18761a9ae8fb5fbc7f50bb4a4fb17457c1612a9525b9b9193f68fac5af309aff64cf569539b7d6bd363c0070bfe0765d3362bff0d35

        Download Submit

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\CloudControllerImpl.dll
        Filesize

        5.0MB

        MD5

        a2db65cede42839ec75c58993c80a10b

        SHA1

        33a33b6e26433ba4a2eb1c2312602028d1fab4ee

        SHA256

        6df797d08b5f468cd9cde86704da80c04f8f2468551d687eef3d38e7ae32e8a9

        SHA512

        0f4625a4c45462569ef835ea2f65d61954a02e68d60f22a945063d2b70fd30b956f2f95319f110cc1424eb6cc42d2ffe3ca527c41471f6beef1945dab4bdf9e6

        Download Submit

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\LicenseControllerImpl.dll
        Filesize

        4.8MB

        MD5

        0ea9e23809dada42b3fee0210d8c7907

        SHA1

        a468e990f09610226170edb07ae0e3839abff4e5

        SHA256

        60d1140904e0e8b19c1d2812fe80e3b7e2e071dd4a1b27647bc6dd94bdfa51bc

        SHA512

        b0d5e6f7e84f1209df2adbaa238e6497980a3a44a10de8b6dc38f81d84b8376b85e3582854cf4887d2459bb3590dd555e2f6cb7cdf3f0d43a4f4093175f4f2cb

        Download Submit

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
        Filesize

        4.2MB

        MD5

        80202b21a6f3df9d0d54f20a381df93c

        SHA1

        6915dcc75d0b84e5db40656d6382cb217a1996c2

        SHA256

        4217a62ea3df3bd98e40d205b4fb5f9673c340c366551adb771ff3e34e7bdcfc

        SHA512

        8d691deae1f7c5243d045940f7f728a874e72550859b291119c9b951bd95232980dc2a1b3c19154c723c42e0aa93747a046f747bbc305941594477a39c2925f1

        Download Submit

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ScanControllerImpl.dll
        Filesize

        5.3MB

        MD5

        135e06864aec33cd277fe6b71989107e

        SHA1

        3ccd7cc2213de5c3c76efa16224e195ae73708b9

        SHA256

        69aff5516ff2a282933de35ff9e38ce88d62b98ce125e7088ed0da168639dcc6

        SHA512

        1182ae84cebae6a8434b8707c3d23255e92c1959e100fdda5ddea586e770a50b574b02b28c6a98252340fff63211942affc9fd22b38a55b76d6d96629d7fc415

        Download Submit

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\TelemetryControllerImpl.dll
        Filesize

        5.1MB

        MD5

        8c0dc4b519228df594105f9fe7aaa0f9

        SHA1

        a1682e4c5ab80bfdb52c3234dc7172838f7c8594

        SHA256

        a2810cab5f9e7ce85be8ae7ba9d30e909e1e322bf10a84e651e16db39b251796

        SHA512

        c0a7393d665b6006496b698f250cd86c09ec5601fdb297ee7483ad560427b37cbe75b3d1bf4c711433a5f324a1a1bd9699738efb2daa61c26b9c3ba6963e663f

        Download Submit

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\UpdateControllerImpl.dll
        Filesize

        4.3MB

        MD5

        6867cbf4557635aca16ac6fba455e82c

        SHA1

        41994b5169762474d9febff66ed3ece998f691ca

        SHA256

        26de9b9f28927dcc71c40ba623a77a7b47bace9d749d06a1b3e229e296513846

        SHA512

        24fd41344211e1c95c44a4338c33e0d6c734107757694e3b59773c574ac424cd030bf37fd08fec2824e3111a52c5288bf8dd8a8900457b8749246142d019de74

        Download Submit

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
        Filesize

        1.8MB

        MD5

        478df352bc79ef18c258b53f662b0885

        SHA1

        e80aff69534545fa437074818da66c5b06ce85a7

        SHA256

        95370683adaec8d785ee7368d590cac8de0e7add72c88c24aaefcbfde9ac1826

        SHA512

        1771d6d85614369c810a52c2044b4e8b6014fe4ee62c1586b28442eafdd0db50c9d514a3e0c94cca2a2450da2fca19ddca74608dea5ab0edf87a7d78b34685bb

        Download Submit

      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\pkgvers.dat
        Filesize

        75B

        MD5

        b1ecb193e95da7714f2c5e5e7ed0b3e6

        SHA1

        a855e7eaba04985bd6fd138cc98216f9fdded549

        SHA256

        828241d7267093969be1360f98d6549ccc0aeac6b57027c8d380a353aeebe070

        SHA512

        de40024f90714492ccd4a89a9121e9c685eda78031967518706ecf118a55628cd2c68b73ec1657d9f5245da2643552e79093b217edbc064eb482d57186ff764d

        Download Submit

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\Global.nm
        Filesize

        335KB

        MD5

        30883360b281130386ba95562f9ac0b3

        SHA1

        2809f1edddbfccb4fdbe761f4846d38dc63a631c

        SHA256

        2648a4adb3a4bb673ef8d0373666fb2012fe4162d37b2661420e24e236f30406

        SHA512

        23d039f033b2daac2ac5fecfcc994c2b57b15e9edb8f4469d8203bb5323129c06442b3c7cffe1560ede8d3f74941e8085151c987924c98b0e0622edb1459f873

        Download Submit

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\Global.sr
        Filesize

        14.3MB

        MD5

        43abcde7252b4b46961a7f9273912764

        SHA1

        350e7286b8bc55637184524a4662aa63d08cdb75

        SHA256

        8bb9c9e56e1e90ef6e156418a2bf74c7411cfa8fa9212e4c89042a9341bd5376

        SHA512

        f45806442f7891ab086766b4769edb001adaed4b45ca6a7b122364701a4e7a337a3cf9f5ad6c5dc4a1155aeb1c576c6dc530a64833124e435d241006407dd577

        Download Submit

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\cfg.bin
        Filesize

        845B

        MD5

        1bea85f6f77b365122fd5f51b10777e3

        SHA1

        2431dda3ae3310739fdbc59a1c40aadf5b0c5e2f

        SHA256

        ebb6bfbcb66f79d34e10c57e70b26aee5f99e11207e6f103c660b4c2a005f771

        SHA512

        01402e189787bb653c14400721acd55ed2ae78f94c4ce9d0c9b9fd8a49ee504136bee56deaf24291e0594dfc73489a973d54f2e19094ea21f061cad2daf35460

        Download Submit

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\clean.mbdb
        Filesize

        12KB

        MD5

        4015a8b99b38a7e5199b09077e52f9d0

        SHA1

        7203c5416cec486b37eac2e1c8367874aedc348c

        SHA256

        b75fa20e09442db84943bd2073351d36620120ec6621e81700c43cbaae1a64b2

        SHA512

        4a38400e3e9ca71a8ac2622938aaf9657e53c17aef7b2ba5071d8cb9f4cb54ccf6d409d6b0554af06a50cf91cec69f42ad8f4942f60ae8d4254b95cb7830a692

        Download Submit

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbmanifest2.dat
        Filesize

        924B

        MD5

        93ed171b1c8440cd1eb32fb7de027e1d

        SHA1

        1756b5660f0dc8db7300891abcbb7167b8bd957f

        SHA256

        cdc8423823aedf346653cdfa4796b07b62785f5aa2aa001919ad5ca404eafa54

        SHA512

        b28d1f69f0072fea39212be890011e81637156af77a4095d6f3550546287886ca476ca98b24d8e5b1972aa80b079a1cb53deef552cdaf10b6183110d95a81b5a

        Download Submit

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dynconfig.dat
        Filesize

        39KB

        MD5

        10f23e7c8c791b91c86cd966d67b7bc7

        SHA1

        3f596093b2bc33f7a2554818f8e41adbbd101961

        SHA256

        008254ca1f4d6415da89d01a4292911de6135b42833156720a841a22685765dc

        SHA512

        2d1b21371ada038323be412945994d030ee8a9007db072484724616c8597c6998a560bc28886ebf89e2c8919fb70d76c98338d88832351823027491c98d48118

        Download Submit

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\exclusions.txt
        Filesize

        23KB

        MD5

        aef4eca7ee01bb1a146751c4d0510d2d

        SHA1

        5cf2273da41147126e5e1eabd3182f19304eea25

        SHA256

        9e87e4c9da3337c63b7f0e6ed0eb71696121c74e18a5da577215e18097715e2f

        SHA512

        d31d21e37b0048050b19600f8904354cff3f3ec8291c5a7a54267e14af9fb88dfb6d11e74a037cc0369ade8a8fb9b753861f3b3fb2219563e8ec359f66c042db

        Download Submit

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\mbdigsig2.dat
        Filesize

        514B

        MD5

        5468d15283b91c64c2e5fe457e30985b

        SHA1

        858ade4ee05779b485572ed203f46e1dba8a4465

        SHA256

        27fd66cd5cbad050e886b56ee5623dd23cd02ee597c4da0de2f7068525ca818f

        SHA512

        4d871f3b737a2e52ba4fdcbe9dcb0997af559785e6cd7581c3efd25d9e81cfe95b30e06624858ff157117c91d3cf5bfaed61266be0198bafdf4d0e7111cb75b6

        Download Submit

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\prot.mbdb
        Filesize

        24B

        MD5

        546d9e30eadad8b22f5b3ffa875144bf

        SHA1

        3b323ffef009bfe0662c2bd30bb06af6dfc68e4d

        SHA256

        6089fbf0c0c1413f62e91dc9497bedc6d8a271e9dc761e20adc0dccf6f4a0c1f

        SHA512

        3478f5dcf7af549dd6fe48ad714604200de84a90120b16a32233b6d44fa7240f5f4e5fe803f54b86bbdfd10fa1bfdd88fb85eb6a78e23e426933f98d0a2565ec

        Download Submit

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\rdefs.mbdb
        Filesize

        24B

        MD5

        2f7423ca7c6a0f1339980f3c8c7de9f8

        SHA1

        102c77faa28885354cfe6725d987bc23bc7108ba

        SHA256

        850a4ea37a0fd6f68bf95422d502b2d1257264eb90cc38c0a3b1b95aa375be55

        SHA512

        e922ac8a7a2cde6d387f8698207cf5efbd45b646986a090e3549d97a7d552dd74179bd7ac20b7d246ca49d340c4c168982c65b4749df760857810b2358e7eb69

        Download Submit

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\rules.mbdb
        Filesize

        9.5MB

        MD5

        20e5779f93a4cd1d35a26038d038efd0

        SHA1

        901de817db018b3eb78f7c4b7081374ee02838d6

        SHA256

        1c776618fce0ec908937f23c2f2cd0a6c5e34e2da3737eb3f070081ac1de0882

        SHA512

        9825dd166adba9c38718ac0f83b676026f9672058af32dca9c98a96e7b1af7350ecb0f15ed6714d0979d5e506952b9e27e596af6f3c790be54122b01ff0763b9

        Download Submit

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\scan.mbdb
        Filesize

        905KB

        MD5

        80ae2fa497f6b48a692b71db785f2fef

        SHA1

        e6812a14f28fbedd86b88e629b6647e879fa06db

        SHA256

        a763d93764f239386253017d5978fde9d330feeee4969e4f664a9096734af793

        SHA512

        905070dbf41fcf6717a12f98479ce4c45890527a8b0c6e8ce8134411e9f185482f17140dc7f0f6a9b503158d83dd009d489a07ea55fbc1962dcf4510d9324a99

        Download Submit

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\tids.mbdb
        Filesize

        169KB

        MD5

        289a6b2683e52b9b1128cf59b4bb4a2a

        SHA1

        ba2239f65ae4dabd04d14312134a5bf42bd40e50

        SHA256

        62d3c7b5f1fe4a24339a7559488fa8a54486e406aecdd30fc04379d583fa5781

        SHA512

        472aaa9f82176a383fcfbd3f1b855e8a1fd205d7a347664d7c6dc6c7b054f87ed9d17bc4be0a7b1f22ddde5bc04c6908d56ad13890a7329277adb348a9c90445

        Download Submit

      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\wprot2.mbdb
        Filesize

        26.5MB

        MD5

        2f2d359b8afe66725e6f200899fc0cfe

        SHA1

        021ea4c0de723d3d47d291fef4560f194e9717a5

        SHA256

        1e9f33799e0bea16ea0bfd2a8c6496286a82fcb4bf70f7249e93ed465374f740

        SHA512

        37d68447180b9f5e0ba2472ba9c7b7f5eb6bd0bb05c32cc414e43061053bf67b10201e4dcb6d713032faa851b0c283ab066949e757e337a95368a4a60bc72ca4

        Download Submit

      • C:\PROGRA~1\MALWAR~1\ANTI-M~1\mbtun\mbtun.cat
        Filesize

        10KB

        MD5

        8abff1fbf08d70c1681a9b20384dbbf9

        SHA1

        c9762e121e4f8a7ad931eee58ee60c8e9fc3ecb6

        SHA256

        9ceb410494b95397ec1f8fa505d071672bf61f81cc596b8eccd167a77893c658

        SHA512

        37998e0aee93ff47fe5b1636fce755966debe417a790e1aebd7674c86c1583feef04648a7bc79e4dedaabb731051f4f803932ac49ea0be05776c0f4d218b076f

        Download Submit

      • C:\PROGRA~1\MALWAR~1\ANTI-M~1\mbtun\mbtun.sys
        Filesize

        107KB

        MD5

        83d4fba999eb8b34047c38fabef60243

        SHA1

        25731b57e9968282610f337bc6d769aa26af4938

        SHA256

        6903e60784b9fa5d8b417f93f19665c59946a4de099bd1011ab36271b267261c

        SHA512

        47faab5fff3e3e2d2aea0a425444aa2e215f1d5bf97edee2a3bb773468e1092919036bcd5002357594b62519bf3a8980749d8d0f6402de0e73c2125d26e78f1e

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
        Filesize

        9.6MB

        MD5

        a545b29abb9db951e9e2508a1bbc8d2a

        SHA1

        061494912b29c965638263b7321a54b9e0399417

        SHA256

        7607ca2abc8f5dfe7a100ccf73d885375ec599b0648ebd964ffb8bff39c821df

        SHA512

        e7e33f5e49570ea74d427e12c049a7f0f89f7e4d3c7c511f59170cfb166bb5dd49ebfaa5a968dfdc15758f3177d7d39beebce26e593629aa0eac630748b403f1

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
        Filesize

        2.9MB

        MD5

        46f875f1fe3d6063b390e3a170c90e50

        SHA1

        62b901749a6e3964040f9af5ddb9a684936f6c30

        SHA256

        1cf9d3512efffaa2290c105ac8b7534026604067c9b533e7b7df2e017569a4ec

        SHA512

        fdfb348061158f8133380e9a94215f4bfc0f6ce643a129d623cb8034c49144f1489de56cd076da645478506d9fbddc7590fe3d643622210084b15fdf0d16b557

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
        Filesize

        288KB

        MD5

        589a48dafeb9c78b9d8094ee4ac4b055

        SHA1

        0629e032dacc0335ba1e3061bf10eab93f3d624d

        SHA256

        c39ff9286ce4346089bbeae39afa198c032ff473b480760408ffaba11f63b08a

        SHA512

        2fc385198d654f2e6b4928a7292c5ee14e703b987711395a2a10afd05bb1cb09f79a212158e2869c94c83685efdc3fe9a60906407dfa5abe8dd38e0b45225659

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json
        Filesize

        621B

        MD5

        0b41593e432fb1eea96f4315dbaea680

        SHA1

        49ed8bcddacbfc5e82cdb8a2fa5695c9a000ce43

        SHA256

        e423bc6edbf16ba368c8209781afdadd79ed96807291c40ca45849c73fcbe611

        SHA512

        d789cdcd54d8673c9614dccc10d2709e3ada69fecad6e6969cac83f46667b226624e35ced99c7a76c3b9893d4774a7880298371b908936a6c00d4133f7af1c98

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json
        Filesize

        654B

        MD5

        e5ce0189ce434f23961327d579beaa91

        SHA1

        f55c496b58cff6a107f3ead80444b9d0248e26c1

        SHA256

        edf817d344d99cec57b7f263bf7aecabee9e01a9195175a9ffa462399e8a4388

        SHA512

        3864df398dbb2b5bc3a8371c53b41a7632644e2336929e62e34e7f5098555ad8d3de818ecc64c66145238ad7f01609db8296d3d0c16340bd69100600bc2f7be4

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\ctlrvers.dat
        Filesize

        8B

        MD5

        17412178172b24c5e570f6f13c42f4c0

        SHA1

        f0aac01bdd57f034d9cda7dbec9dd97c0dcb81eb

        SHA256

        2f2bb8b0a74e9049f4ee9dd039d81bc853fa8db3f311a799032f002b9cc1de41

        SHA512

        3b9808f22e3455505da42b26d3c0c0d56cbac41fd0d2076c3363273d9e77064047d8fc7b969612a5f5c78e0588f510ddd5b2173be224b1b5eedc5e51e9e5a92e

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\mb5uns.exe
        Filesize

        3.8MB

        MD5

        eaac9032a5151ea0d7b74ae4bab32b35

        SHA1

        f2c1f886868f6b9f78aeda8cf95df5051239c1ef

        SHA256

        807379fdd7315c29bc1e96ed224285ac5ae0226bdfa5318642eaed6bb0ca3191

        SHA512

        91fc6c387ee270372c401aa27aa399c5f6091dbcf1e94058c88e5edb473a7876c9de632cff5a4d6479a2a9bdcfb499c8ac6cdd3bd954b04db89685ccde0661db

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll
        Filesize

        2.7MB

        MD5

        b7e5071b317550d93258f7e1e13e7b6f

        SHA1

        2d08d78a5c29cf724bc523530d1a9014642bbc60

        SHA256

        467de01d7cee7ec54166b80658ff22f9feebdb1c24eaf1629cf40e4124508064

        SHA512

        9c35293c95c1a9141740ac99315605964aa37c4a42d3a11cae9e5649ff1427a9480d3d5e7f763212cf13db3511c5ea3c84e68f95f0067fe6339a9d3fb7b27c54

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\mbtun.dll
        Filesize

        2.8MB

        MD5

        2bbf63f1dab335f5caf431dbd4f38494

        SHA1

        90f1d818ac8a4881bf770c1ff474f35cdaa4fcd0

        SHA256

        f21a980316bd4c57c70e00840ab76d9ad412092d7d2d6a2cff4f1311f7c05364

        SHA512

        ebb9834323329dc01ba2c87e5fad1083a4cb86f5ed761cb63299ac5336a9843a1aadd42fbed706797c2295117af1c00f96806422338352653c8e0255fecc2fd5

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf
        Filesize

        1KB

        MD5

        5d1917024b228efbeab3c696e663873e

        SHA1

        cec5e88c2481d323ec366c18024d61a117f01b21

        SHA256

        4a350fc20834a579c5a58352b7a3aa02a454abbbd9eecd3cd6d2a14864a49cd8

        SHA512

        14b345f03284b8c1d97219e3dd1a3910c1e453f93f51753f417e643f50922e55c0e23aab1d437300e6c196c7017d7b7538de4850df74b3599e90f3941b40ab4a

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\offreg.dll
        Filesize

        114KB

        MD5

        f782f049b0e8c13b21f8e10e705bd7e5

        SHA1

        5c11f955e3983c50ea46b5d432c97c9148ac8e9f

        SHA256

        16c450a310edbea07f578f31368f168ec338011cd117406898593e86ebb83dae

        SHA512

        eed29c42b14ff26a030f53d61d6dc8e3971e478dc7646b26189f14f16699b6bedc170c4bcc37efe2e8f3048bde37480033b49eaf1a4712b88464f5da0efc18f2

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\sdk\MBAMSwissArmy.cat
        Filesize

        10KB

        MD5

        f7c8e0339bd48b6fe8eca81ac3ba5ba5

        SHA1

        1369bd4dcfa7709d8eed12fa76fdbebd39dd6bcc

        SHA256

        a9dd01f84a075ea8d0b0968fd7a11720e49f019834f7d4fe80f50dacb12030aa

        SHA512

        c722510c40fbed32bcda3b5b69c590a9043e4e51f8e804f77f73eb8ea0cac0f4a587ef540f2773981839f04e44f48bbc8b5e8c03ded3f0cf637ed1e3172c8e07

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\sdk\MBAMSwissArmy.inf
        Filesize

        2KB

        MD5

        d87c2f68057611e687bdb8cc6ebea5b8

        SHA1

        27b1311d3b199e4c22772fa1b7ea556805775d37

        SHA256

        ff93773f55bf4a6a0242adf82276a8c95c0b244b9bc05e515c4e810c81a960e8

        SHA512

        4aa65b8911d8a2a0f9ef0ee6e934b94db0a9ad4c2ec543b5edcf21486be43f6ab1fda6617ea2cbb85eff230628c9fa8e7649da915d6de695803b28e55bef5819

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\sdk\MBAMSwissArmy.sys
        Filesize

        233KB

        MD5

        4b2cc2d3ebf42659ea5e6e63584e1b76

        SHA1

        0042da8151f2e10a31ecceb60795eb428316e820

        SHA256

        3db4366ccb9d94062388000926c060e2524c7d3ee4b6b7c7cf06f909f747fc6c

        SHA512

        804d64d346b3dbb1ce3095a5d0fa7acc5da0bf832c458e557dac486559fe53144f15f08c444fea84a01471fd5981e68801a809b143c56b5b63e3e16de9db0d98

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt.cat
        Filesize

        11KB

        MD5

        cffd7ecf8765733aa7a2c36ca5f1eac0

        SHA1

        549b0974cf92676a7589466a3ee29e1dd45afa6d

        SHA256

        89c561a58d649d5f29fe1c576ca46245780369845df32045a64739b4056d8bb3

        SHA512

        47006f07c3270f358ce67c235739ebaa17b8fbd9a05da9f05a079322a003f8e6d704d3c5353e1a186df74b1bd6438526f6701a0c173563d676846c0f0f230be6

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt.inf
        Filesize

        2KB

        MD5

        358bb9bf66f2e514310dc22e4e3a4dc5

        SHA1

        87bfc1398e6756273eee909a0dfb4ef18b38d17c

        SHA256

        ff51780a5a854b2c18f71ae426cb066a13723ef6155e24f4910137c9e8dfdc17

        SHA512

        301ec5ec5c0813951843011f2204924240235494999136ea30a557cbf58146fc6043a8866b344fa7deb927d7c83d44e2aaf45adca7d221aba5d36715b9a63e09

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt.sys
        Filesize

        196KB

        MD5

        9c4bec17ba2add58348045dbc762ab67

        SHA1

        b00ed0ca3634a93a23f70e79bda67c945dc915b6

        SHA256

        9c3b11ba1d4e462d9470fa0b50a61fde9f00cf4adfafd8e8b19f1e8af369cdd6

        SHA512

        6aab0e3d3c189c18ea6540d1736b64a518958c62e1cb0a2874826f6cfd76e3a06fdbd28ae0b81e2fc8fc20601d00d804d86fe9887ab6919dd8090a696fb52b31

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.cat
        Filesize

        11KB

        MD5

        aef40e9e7ca500f8d23f53a9b7b4fd1f

        SHA1

        9d6c9f4c18b6d57e43f26bb2593c11264a1eaa41

        SHA256

        8e66264dc7478e517b72af31ca7a308be15ce7dc9060e5f0488fb186ab1220b3

        SHA512

        f6857b87a244dd68ac14016bd6e25e31d45b1b00fcbe70129dccd33ab8db1d01d4c31651f5f7c08d237c76c0291a35e262fc7c25670ac11166354841272e1277

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.inf
        Filesize

        3KB

        MD5

        5a9717e1385703e8f06b27aa10a69e87

        SHA1

        84ee67a9167b5eb6560711b9871de98898ad07a5

        SHA256

        47b7c516bb57c612de19f0ca865590af95b6e32bf873a0fef9e011b2c5b483d4

        SHA512

        dd3c7278c2c11ad15a55fae6d19b96dadd92f85b7f0c8ce934298258af00bb5c052a84a98499b8867b0f43704fb307c67d03692ca69dda4d814c6c17dd73df44

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.sys
        Filesize

        217KB

        MD5

        ef356c49f9dbbfa13365a3fda7dfdaa2

        SHA1

        ac5286b5570b83b733f5833e92a220e2ceb0ef7c

        SHA256

        a507ab3164163a52c2039a02a1f5b7ab55fc120b1c1aa73930184086bcc5597b

        SHA512

        d2d88333f367d0ccefca84b4a24185dea257b30a15c28ed26b00f04ac90b3b2c4e4c5c42e4bdb97e07895c4a5f3d38786fe811d3eb04bc10a1a4b7a55795d8f5

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\srvversion.dat
        Filesize

        9B

        MD5

        35c919c92586d90651a5183e962c4a5a

        SHA1

        48653cfa8c7a378f7226b3cc55052af55091f5c0

        SHA256

        69cbe3b65794fd3ddb7e49ce394a6ce5ec8d8512d4a5932f24417c4c7b61e1fb

        SHA512

        ea1159f582119a37dc4f3408028a00886bb4760cc5c3b51da53f186cec81ac2aba35ccf24bb2d35aee6effcf787f548583bb41977827c3ef0987a9daabb2e9c8

        Download Submit

      • C:\Program Files\Malwarebytes\Anti-Malware\version.dat
        Filesize

        47B

        MD5

        31a7a9760eacbf8dff01c067004ea235

        SHA1

        e9833cdb4802c86319fdc8032aef8ac0a896370a

        SHA256

        b71e894211b4f99734d01dc9fc4edd0a50c50cf4e945d4d07a960169d8137aa3

        SHA512

        8c36f853079c19f0fbf08dffa83c9e9428db3402c12afedd7707ba733e371e9b4cd495bd4555dcffcdf610f33ee2080e6dc5a51ee501fdcb3fd93799e31618a6

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\LOGS\mbae-default.log
        Filesize

        1KB

        MD5

        9c6217f4ae54420aa7f4a618f0e1e6f4

        SHA1

        c44eacec75cde6f2e0dabc42d7c10daed9dd9f34

        SHA256

        f63cda8b1c60b8af3c2018b9349c73d5304ecf93d317f359fe2431bc04c4f8f5

        SHA512

        c464853d9f741e3a400ff031a1d70ad0027fbb68f1fe3fb0bdaa7b0b34a9bc059fda6f4e8af2318d529905748a6a316423041adecb0a497f5d4267cd7e886d4f

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
        Filesize

        1KB

        MD5

        3a4eb8f504e93f9605186f232a86e32a

        SHA1

        90583defd5fae71f4f69b276af3a3468bed4c26a

        SHA256

        592e9e9098f31abb3ad8f95f7d3f79d7e08978493d9182b78c26e9116933f7b7

        SHA512

        be8ba0b8045c037c0994ccee75183b31920e2a0a13b361ad5aed221938c018790cfb5cffe30ef96c0cb518e9ee50bd3189cf1ff18d4d986fea842e7a53b28216

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
        Filesize

        47KB

        MD5

        ba7433a2bb54a09ddd76cb7a3d58995a

        SHA1

        8131f4a65bd729a96c838ffcf91714e35d661a45

        SHA256

        5cde8cb5fb35d08ce0b103c6529a310fc20a54c3e2df7fcc18600d566aa85dcb

        SHA512

        7c967658d7b5c7ac912b241be995939ce65aecd4e502d59d29906aa54a8e1cf95b5c7fb30a39035db8fe041c41f3368e7a53e4b0507095897be557cb227ee740

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
        Filesize

        66KB

        MD5

        f3f582094b62dae08fbce67cc61932a1

        SHA1

        7ca0203e2edf00cf0428a7511e1eb34dc40cdb07

        SHA256

        38e110eefe22e5d03480b6d25c6f90144ab787b30e80300fce75f5344c09ed86

        SHA512

        11ae517e4913e9f06210bcb447e4ceb88ca2c3f9aa5ef5bd5e29ce4c55915c69f8f22eeb3457982317dc1f76a179002e4484b89a0db10ba4336e5546cb8e3eae

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
        Filesize

        66KB

        MD5

        c7d5d60fae66ed0830ce54b797486cef

        SHA1

        3199fd5477206dfcdc26765b7b8f5637d47071ab

        SHA256

        19e2ebf479c6a91e75bc8464f7b842eef9642dc6e818f2d1a0cc0f435bbfe037

        SHA512

        ab866e988a8e39606b68025f4c860d66b41a757cd3ba85e9c1270e85abaad7a1210896edae4abade1673cabfd28d4ee6225d5b34ffd8032c93f64490a23fd4dc

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
        Filesize

        89KB

        MD5

        8e5e1131a0dda96fad8615ef030db5a9

        SHA1

        a5e83c45e75406f369dd0496ee0a94c7de298ab4

        SHA256

        8c29d88fd169869c6d7579fac67c7ad4d7c0c3ef9d6f7e605dc6d5988381cbcf

        SHA512

        fe5e8db724e277823d176ec62077f048a6294ef660eeb3ba4d9ccf3fccb7604503ac591474eb6b0c2b080ff4ad35692c322d5bf812eba220f51261f42daf447a

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json
        Filesize

        607B

        MD5

        3a932a2643c729e91625978093440a77

        SHA1

        f9ea670332a4655b0e2967c1b7166d8b2b9be0c1

        SHA256

        02a7d072327f6629244c77bba3a9be7b83b8798f1b4a6f079bfefa2595a9a38e

        SHA512

        56a9ae9a7720e131c63e0ec2f410bdc42f4436ff7c865ac9b09a4503492ab503d439b3b73a2c2a096132ee489655f795dae3be3b3150bd439b5fcfddc5a50e31

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json
        Filesize

        608B

        MD5

        daf7684e97ff713370f5bcc0678f9dd5

        SHA1

        765ec5f79785bd4e8754e0a2fb42bf49bbd6da3a

        SHA256

        cbbb3df8a500c6fd55cf12dfd2e9b5243c90eefca3a1f11dcc14818c5e02f345

        SHA512

        c8e14bdaa83dc4c82685ef492a2c861d6ccc5877ab280edd39b351dbd2a45cb45cd3701c9c655449db62140a6e3c4e708c45166b2aecbc80ab585a2814556b58

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json
        Filesize

        847B

        MD5

        f6fdc34f2d805c0634d3f61e87e96032

        SHA1

        bf43d3936a4ee3699da9e3144d16ab11538b0aa3

        SHA256

        d6e8baab16d189f98f301c5c8f0a9fe776a6a2c177a8a0ed3716cc5027e31320

        SHA512

        1350690e9e09d50fb1d14dc58b90073ca60e43da9c67c0230b5113d3d3602b65eb77eda9ff5dffcfec652a9250070212d5b34147ac0afb63cfd678b8f2c51c2c

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json
        Filesize

        827B

        MD5

        4abf38cf39bb0e392f038139581d1996

        SHA1

        8f56790b15fa213ec8e7bdbdc453903b4fa2c9a5

        SHA256

        bb494a1fc1d707131e042bb75de9208560eac21ad3a16a159af49714dda09273

        SHA512

        204e571dc6c41fb3bfbb78a20b5eb8f94dec2be30d1d870b0f69053f9fbdfd680dc77022f66f1eb3e72669b91951e583a0330d64eca2ecc94955472a54fd1dd9

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
        Filesize

        11KB

        MD5

        8884912de95acdedb85cdda05362fa10

        SHA1

        c961d7f87e903d3f9469c51464cae43fd5ee9e3c

        SHA256

        4aaca653b17138b95e8a21d504218e84713a7524860bbd015fc1fc571b6d098c

        SHA512

        e6dafbeb258c526897f6ec06252a3c4b598e7d7fc452e3f1544b622355dee5d1cdfa5d8ac82a4edfdd58bc56f0c9179dbd92d2c1bec83491e843800a37e86dae

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
        Filesize

        11KB

        MD5

        611aad332481d4a1894efa66e440919e

        SHA1

        72a925b1efcdeb2baa7b351622a7fa9fc4feb0b8

        SHA256

        e4e0a3ff74dd1e553fc6ef612ead5bd9b46a0f5873e79c41361bd7a3e48c7978

        SHA512

        ec384af80b0724d0c41efed0034621a18add85b45e1b756a7e397cd3e7175a95135663c96c70a75ae0ce3020322df67a3bcea69d8274393043206531b6b839f3

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
        Filesize

        11KB

        MD5

        e113e9ded050e5cd15eb9884068dea06

        SHA1

        0b4a00aae76fb877d475e461ec24d5fe79ce478a

        SHA256

        c89187318116950986e61b2c985159ab9adf48ba458ee2867e92b0ef4fd33b38

        SHA512

        78d3b236149d26f06432415588a2b094e85ffe6f4d405f91b9b6360e4d644f52e27a5071ffb8b615b26f1c2aac6957d7faa85996cd92f068b8dbcb783a44a73f

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json
        Filesize

        1KB

        MD5

        14dcd717f0113173a181a67d9abf1487

        SHA1

        a0177c0b2bee648e81c0e9fca401a1e50738a9f9

        SHA256

        c15ff94f65233b690c05d7585b8a4f4096a5bc71149b536938b940d898610269

        SHA512

        ebf6a0966e9a478078a39a57fa5c975d3ea5a4925893a8301a31baaba1fb2222173358bb34663eb216ff24509396e2e35a7a049ab613d963cc50ce6d8616c1a0

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json
        Filesize

        2KB

        MD5

        d2e7499f1f9f027bb68ffcf33fd970ed

        SHA1

        fa3dd384572d03ff34beb013c165f1abb329939a

        SHA256

        bb55a728cd3d7cff548a3da99246e19d49397be6a8e12db408aa47b4369d88bc

        SHA512

        c78162a6ffac9d56f2fdd098c6fe4970b7e0968b422362640db2fd50b96c5cb3e00650aa52328188eaf6efe704a559a101c544fff3926bdd11f1d7ec596511ad

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json
        Filesize

        814B

        MD5

        30c4d3e8081eaf370e71f6c4be8971f6

        SHA1

        417969cbe377c981dd8a9e40cc5757a5d2d33f24

        SHA256

        6580c485c66fba67108801116067d8c2987990717c641c84c0226f8a4063bfbf

        SHA512

        f182b227e25cb573a1d45458995f8eeb63ab3d9fb9ee42db37ef817f6044d7914d2b1468f83dd2f5cd41e3a9c50d5656fb1b41ce49a840d45d9499dae9c385e8

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json
        Filesize

        814B

        MD5

        5a16d7a7f0b6423b745c5d8c1a7cb7a3

        SHA1

        88cd974089a8a744a2238592d4e9155d5842d853

        SHA256

        1a84ac95afad7516bf7c4b8f6e61586da94e7b6b31ce630ff3f989e3f26ef46c

        SHA512

        b0e3bf431d40fb27f23162b515333b6cc1ed8d7653a10c16278e9409c21fb18a8a974cdcd7a36ae7401f85feb8eec54f64ee32232a9fe26d25653296a0c6a548

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
        Filesize

        1KB

        MD5

        fe7d06e6bb6025e1fd7896bb8e4846c2

        SHA1

        52d1f1b31b8de310248efaab197b9e43040fb366

        SHA256

        d31c655ac8b9cf2fba5d945e18c4384f4c8127309b59a97b4319f2f9fb31fbf8

        SHA512

        5ea10fe5af54524a6ec25c08ea0f12cc5b8c6794ba2f147ff7758e11718480e6f1e1736d3ff093c9e4b1cad18d004bcf3ec6badd6d2fa35a8306228afa717d0a

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
        Filesize

        1KB

        MD5

        7777c7d341b7ecfee792633cbf3d3f82

        SHA1

        62146f35db15e366412e302e662cac482193fbf0

        SHA256

        de3550a22cd36cba114ef5130f8859460dd1eabf1355ffcba3badd5ee44703d3

        SHA512

        781f04aa4826947499c86b3aca744a57b7438ee390c7f01b040d15e048361d86ab83b23abc96077a75ed1c7e0f0dd1bf3836acf268e8d200c40349ee2351f766

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
        Filesize

        2KB

        MD5

        78a5d5629dffc2d6e736fb4f3af3d27c

        SHA1

        9ae95a1d3cce059215a3dc74c9f5e36ae115b9c2

        SHA256

        4cfb0bf0a285f468e9ded70f237ebc9e10cdb76f5774eab9216842b93d9e0bb5

        SHA512

        35384be231001e76df76ef232c7ce8367dcbe84ded2b5f39513e87a3459a31543be11567f05d92afea8153b11ced0a7d70638f5c3d2cca29692ae0fda1525eef

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
        Filesize

        4KB

        MD5

        e0614a90fc3fec57f988257fef8de58d

        SHA1

        e7aa7875e214931a08360d29a9b8798e13326785

        SHA256

        4e26e531037e2d8b16292f5fb1b230fe6d339b32f92a7914fd2f9dd53295603f

        SHA512

        68611f415e7480f61e170535a052be66e07010bf3e3c76faa0df57f2cdace0ac6ea039be730a172c9a775fbf0e1c734a529827a246d9f822d20b9e285a48b950

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
        Filesize

        7KB

        MD5

        78f74ca17f050833e6483841e91e15be

        SHA1

        5e0ad3339b35e92bbe151456bf77f2854203b08d

        SHA256

        4262c1452723e9d20b8cf9e8c081efaebcc5902a12482910840584f0e84af919

        SHA512

        bfe12cdf128b3bc0cb6ad4814d64363a7dd63c0e20af839e7963868f593e127a6c03515c3e7fecaea202acf5587d8a50dae83435914b764c89ec523f7f8a48a8

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json
        Filesize

        11KB

        MD5

        9ceb8879bd6ac89c61ccc74baf20ada5

        SHA1

        ae0c207674980ef3d4502414ee3cbb6f24a4e8da

        SHA256

        6641f0e31bf20057b3c6f8ccb229d05e6da08f053e31b38ba87adf27f72bebf1

        SHA512

        cf1c36b8212eebec91ff963e2b19e4fe60261056bad25e1fe4f0d7846cc2ac0c6fec7a2bb85630c6af8dc5dd49893057031d9130ad4dd0c391d776852edbb1dd

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
        Filesize

        1KB

        MD5

        13edcdf4422a58f8e3012c471a79fe71

        SHA1

        5148a2b3ab1890b71f956ff85bf217bb6e9a59d6

        SHA256

        c4d742270247164ec1efc5dccb28bc09289f66e8d0c1948bb840db42fd90a82c

        SHA512

        d93f19052c1e728dcfc2dda1ddc4ad09b42d747a9563f3d078f4e7e5f20e91f6b8d363dcfe69a6b2f8e684086f0112eaa42f7e0d0602c0c35f743f2752020831

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
        Filesize

        1KB

        MD5

        b0fba4077dbd9f2277a2251d2116c8d5

        SHA1

        c1587997fd54875a812ddc7ce9e3e0bf148557e6

        SHA256

        61d3bfa026da8e14fb4e89ed1d780de1359dd1343984f9d168008d9338c600fb

        SHA512

        ed451b2b7ab6a98be753066cfbbf6c6ecf49e16cf40fbd4ea2fb619f0b49a179ef945a1e6e583c5a1d25ef8042a00219f76519a81fd1879c283714f7c92a167b

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
        Filesize

        1KB

        MD5

        85f1e997fceacf94569122da3fbf7200

        SHA1

        fd9ad6c022e69dd266ec2b2739ad9567c63317e6

        SHA256

        0e288ed5cd556704da4ae49235462dee34260f131ac308a9659cbeca07ca30b0

        SHA512

        a40c14796b9967022913e9c88f2c7dd0ed5f0b58b6dcaa49263ff78d3322ab3e841241281cac5cdfe7b4927eda37acf16ea9a9db2bffa449536128270e048b72

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json.bak
        Filesize

        1KB

        MD5

        d8080c68da052daa3cf61801376710c8

        SHA1

        43efebcd04f8689b390346d827a5d7430e6c1abb

        SHA256

        9621341578ff61a02f752417935e59000a854f263a68d5a4966df9a7e5b5fc44

        SHA512

        6a87c343a832cdd9ea41832360cd4ba8e8d210ef32c9a0bb90f9bdd282961dd9664cf1618ebd2eebeb98324066a0da0917256488aef3fb94e927afe904692369

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json.bak
        Filesize

        1KB

        MD5

        6bfcaa819aef71526141fd23a0804504

        SHA1

        cd0ac827c7b809dc501dd308e89f5bdfb3784969

        SHA256

        1427452b46cdf9a91ba46c7f1263d4971beccfd50a7ee562e96e3dd080e18599

        SHA512

        9bbd1d8676066a5b470861df644be9b3c089fec92b1837d52ad0720d172f7e27e829d680aa5dccbb688af12974a8c67d3ff7492ee679b95da4d5bc54ea564222

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
        Filesize

        1KB

        MD5

        8e9ff529325087a35547b8aec4ed4d70

        SHA1

        256e35e707c6ac1665f1912041adfa55bba77184

        SHA256

        ce3e66a29f93929bd50b70d09b6e625214b88b2053470b3af905d24e16584fe0

        SHA512

        a5374868bbcd399a03b2b188da06a69a9b429e60ec6ab3601065c1910e86dc3badf304be79d8023ccc77aaed221bfc9c311073881add101d127c4278b9cbf1fc

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
        Filesize

        1KB

        MD5

        1dd8e04dd928a2e4fb3673ae3fa6214f

        SHA1

        c586387993ef9bc540e9964d292e7fc1a0b9e596

        SHA256

        baa80ba39548379a6d778ae30b59f1c98bc5199f075728e49c0b60bf8c394865

        SHA512

        efc1b6687b3ad99864e1121ee8632df5da12adb1872a77fe07d6ba3db390209705c11b1c7bed8ba1a3b45db1afbb89e8dd578c0e0a93afc429834ce07c389cb5

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
        Filesize

        1KB

        MD5

        b6377044d13677475c8ae924055e0457

        SHA1

        26c39421efc682c16b616932fc196d5e0000cef6

        SHA256

        a9afe15f2108ee80763d4335bd1a3d7a07272c3f2413a73ae06abbad9b124f85

        SHA512

        755fd5dbd4118f4c504b155dd06e2c158614738e209ef3024b2dd7246c30a4fe97230bdef612b6b8c024a16d14f386ed5d10a35ef6354aa6ac5636e1347bd31f

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
        Filesize

        1KB

        MD5

        f2c4e59b42f34716806eebf179c31d37

        SHA1

        77be954635e0fe9c160e1494737f91236feff530

        SHA256

        b3a3d1d92bbb50e3f00cacc78b652cba07cfa12b9e06d5ada1e5b95dea6176fb

        SHA512

        c61098ed13f81bd3fd8a3a8203e883ecbd9826653f5cc4bb45c4b3441165781f5a8f01385428f8c91d448e7724470a062031ab4fecb6495a29c6863619c846cc

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
        Filesize

        1KB

        MD5

        9ac535e298f6b06244eda8bd4e9015ec

        SHA1

        64859cc78bea8d9a75b5486f47e5ef6c923bd0cb

        SHA256

        367919889da66c8b894f5a214ee3c3d1b157c3fb49228f764509fd044cf389cf

        SHA512

        8717ed0b2b1583378ee33ddaa71924a007d070032ee9eaef286787b57da5fb9c811938c86e2fa5e8adf0dd9da5faebf9277dcd7eb0d1dfe57cd1fb4def8a72a6

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
        Filesize

        1KB

        MD5

        bba0f158bdc54f0502e4809bbab34e9e

        SHA1

        f93c921d26ead155f52e3859c469b8f9c15b19c7

        SHA256

        83bcbbc8851787bc5d73229d836b72bd87a77c7a8ed8366ef923d1440a778933

        SHA512

        86230425a7709994dfb548e4987d3721ebe91b434cdc582d5aa60ad5d4873a7e69c1f05e21106a2cbc3cf7e559dbcdeaf7fdb398f58a8d3409104d21416502c7

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak
        Filesize

        1KB

        MD5

        f7da5311af89962b3fc5ac6761cdcd6b

        SHA1

        dc0098389052392ecaaac7349c283e61ac05d9d9

        SHA256

        2e18f0adc17109df2bad090b6e9db91141c9c84672533d61caf15c61edb4632d

        SHA512

        d25cc81920ba15b3c8be52dd71ac3fedc4523f3c5e4393d302056a159608d3b3fb49f036fb9bf87ba8c723194b3ad913987a0e617a04ab64019768cfb9ed2129

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json
        Filesize

        1KB

        MD5

        7cdf7d41a1652167437e2c2979a8bc53

        SHA1

        8f4650bb738abee980d9c0f0230dda6a9af684c9

        SHA256

        2222bbe076df2a0a10d4ed79fc30904d0a9e18d3f488c02af3e67fb46e38e075

        SHA512

        138b6dc18693282ec9de1e6f8ee4b539b7948b983d2f2e3b396ea9247dd4ec4247313d537b7dc1f5ee90d94dc530ed79e624ffe0df57599a5c8c813b7e771950

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json
        Filesize

        1KB

        MD5

        587cc2c1e22ba6975cb01ff3fbeb5bd3

        SHA1

        28261dd70a617f312972e646a75d89fa2d3173e2

        SHA256

        cee9d615500c71a32a02fb548c970c06dc1fc90d754236ab9b60bb310a4ea8a5

        SHA512

        8c21c5eefa92507cadb696a31a640bbea6ae05c4bcb8cad7d6dd0570a5d2671170b834a6ba5583f372ef260dd7b0c0931012aa4b6e5531585ab8241afb3e5475

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\config\VPNServerListConfig.json
        Filesize

        125B

        MD5

        9530adc9e12cf7006d2a0ace5b4fd72f

        SHA1

        769851183dece340c0b72c3e920ff38a8b2fb122

        SHA256

        5f6f322475ac388fc3a007c3245259b0b0d46c59954f39d565f85df3dbc7d208

        SHA512

        c9054e3afdbe58e25ed92ad5184a32414cf72443f858b8926a778e49141ebfd4d4c03841856ff34ffa7fea2e8908e44648395a5be669092facafa0382454aee1

        Download Submit

      • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\sample.dll
        Filesize

        529KB

        MD5

        71c2939bcb601b29868a2549fc22a827

        SHA1

        e4065e0a62cd60915ebae2d510830f50b3a4c266

        SHA256

        1a2348213858488dfb80c9ae5ed650352879a9593c776e56edea92ea1c1e146f

        SHA512

        ba2f9a22a3be1f470dfa7ea933eee04d4fcd5c8b38b0d2d3ed38d197e5f3aa3ecf3f82fdcd11aad34bb427ea39ea394220ba1a628c6aed3d6c80289b795b1028

        Download Submit

      • C:\Windows\System32\CatRoot2\dberr.txt
        Filesize

        22KB

        MD5

        4208e56d7c5b2bd1903a701121e0f569

        SHA1

        6426939539d5c15174da8e1eafcf8dffa36ce66d

        SHA256

        2a533894617680d28afb95f9913a40f1e3447e8cb111e73e16cf8d00ac805533

        SHA512

        73a9effbaab590d578bd9e2190d4eea1df4414e8a700d35db60dd264585914587fc82b8f831457411071102530799ab05dce7ec907ac96ee2df44b8dcfe2c030

        Download Submit

      • C:\Windows\System32\catroot2\dberr.txt
        Filesize

        22KB

        MD5

        8d3bedfe0a029d84357f4c200f99b085

        SHA1

        ad30031e5946974ec4e29f5573cb439c5ee9e12d

        SHA256

        7ba98eb3c95ed21487d1bd371f65e7e4c1bfd68b00b7d2809be4d11aa4c04296

        SHA512

        0fc7dfa14182ffb48e1830e60bbfef03bbd1b35878105bd21fa43e810f8e08141d97a437da3c26e4dd75e30ca6c40151936e01981216fd9f24ce17d72b9364a6

        Download Submit

      • C:\Windows\Temp\MBInstallTemp16fb6076186f11ef9f34fe70fd89e148\7z.dll
        Filesize

        2.5MB

        MD5

        a144e24209683e3cba6e29dab5764162

        SHA1

        ab2112cce717bec8f5667721a072d790484095ec

        SHA256

        b2ff9dbf90cbd0c45cd7d95ce4892377ec7e92970e05f2e56b0ce93861190348

        SHA512

        2c823981b53b7eb7c1b726468d3b28c234c7e555aab35e759e88d38658566d267a20867f1cb18d96c830e7d53643629a9fa313eecee8b553703086fbb64cc984

        Download Submit

      • C:\Windows\Temp\MBInstallTemp16fb6076186f11ef9f34fe70fd89e148\ctlrpkg\Malwarebytes_Assistant.runtimeconfig.json
        Filesize

        372B

        MD5

        d94cf983fba9ab1bb8a6cb3ad4a48f50

        SHA1

        04855d8b7a76b7ec74633043ef9986d4500ca63c

        SHA256

        1eca0f0c70070aa83bb609e4b749b26dcb4409784326032726394722224a098a

        SHA512

        09a9667d4f4622817116c8bc27d3d481d5d160380a2e19b8944bdd1271a83f718415ce5e6d66e82e36819e575ec1b55f19c45213e0013b877b8d61e6feb9d998

        Download Submit

      • C:\Windows\Temp\MBInstallTemp16fb6076186f11ef9f34fe70fd89e148\ctlrpkg\mbae64.sys
        Filesize

        154KB

        MD5

        95515708f41a7e283d6725506f56f6f2

        SHA1

        9afc20a19db3d2a75b6915d8d9af602c5218735e

        SHA256

        321058a27d7462e55e39d253ad5d8b19a9acf754666400f82fe0542f33e733c6

        SHA512

        d9230901adeecb13b1f92287abe9317cdac458348885b96ef6500960793a7586c76ae374df053be948a35b44abe934aa853975a6ccd3788f93909903cc718c08

        Download Submit

      • C:\Windows\Temp\MBInstallTemp16fb6076186f11ef9f34fe70fd89e148\dbclspkg\MBAMCoreV5.dll
        Filesize

        6.7MB

        MD5

        65dae541c8dbc3e18f1bc9150ffad616

        SHA1

        f9c98b9eee98e94240c425a4548aae1b5d943ea6

        SHA256

        75249cc6d5ddbb92a76f6750165380eb3b6182cdd4733d8a18003b7dfc88b558

        SHA512

        4f2755add2fa384d617e7bd6d5d2c793503b54a284eb04be78682a0b6cfa7e6369995ae6625bd085ba2887b5034760323dfc61c2b28ea6db91b9d17a8394e988

        Download Submit

      • C:\Windows\Temp\MBInstallTemp16fb6076186f11ef9f34fe70fd89e148\dotnetpkgtmp\shared\Microsoft.NETCore.App\6.0.28\mscordaccore.dll
        Filesize

        1.3MB

        MD5

        3143ffcfcc9818e0cd47cb9a980d2169

        SHA1

        72f1932fda377d3d71cb10f314fd946fab2ea77a

        SHA256

        b7fb9547e4359f6c116bd0dbe36a8ed05b7a490720f5a0d9013284be36b590b7

        SHA512

        904800d157eb010e7d17210f5797409fea005eed46fbf209bca454768b28f74ff3ff468eaad2cfd3642155d4978326274331a0a4e2c701dd7017e56ddfe5424b

        Download Submit

      • C:\Windows\Temp\MBInstallTemp16fb6076186f11ef9f34fe70fd89e148\servicepkg\MBAMService.exe
        Filesize

        8.5MB

        MD5

        8c89563b4351b2c39d94c81ec37ace7b

        SHA1

        4c238dcd62b99226b3ac1a67c7b7c2cc2ad1edf4

        SHA256

        d17e0a77d02d5875318c14af09ee900bc4bafb87a96b2f84dfc9ef7656884228

        SHA512

        8f1421c8a553acc7d4541cf6d319ab97abf2803a2c0c83ac7ac8d1dc9335eeb0bd911e79a0bedc14e65f1eb523efb76f9cfea0dd71a79e43c9501c954546ef2a

        Download Submit

      • C:\Windows\Temp\MBInstallTemp16fb6076186f11ef9f34fe70fd89e148\servicepkg\mbamelam.cat
        Filesize

        10KB

        MD5

        60608328775d6acf03eaab38407e5b7c

        SHA1

        9f63644893517286753f63ad6d01bc8bfacf79b1

        SHA256

        3ed5a1668713ef80c2b5599b599f1434ad6648999f335cf69757ea3183c70c59

        SHA512

        9f65212121b8a5d1a0625c3baa14ef04a33b091d26f543324333e38dcdb903e02ccc4d009e22c2e85d2f61d954e0b994c2896e52f685003a6ef34758f8a650c7

        Download Submit

      • C:\Windows\Temp\MBInstallTemp16fb6076186f11ef9f34fe70fd89e148\servicepkg\mbamelam.inf
        Filesize

        2KB

        MD5

        c481ad4dd1d91860335787aa61177932

        SHA1

        81633414c5bf5832a8584fb0740bc09596b9b66d

        SHA256

        793626d240fd8eefc81b78a57c8dfe12ea247889b6f07918e9fd32a7411aa1c3

        SHA512

        d292e028936412f07264837d4a321ecfa2f5754d4048c8bcf774a0e076e535b361c411301558609d64c71c1ce9b19e6041efa44d201237a7010c553751e1e830

        Download Submit

      • C:\Windows\Temp\MBInstallTemp16fb6076186f11ef9f34fe70fd89e148\servicepkg\mbamelam.sys
        Filesize

        20KB

        MD5

        9e77c51e14fa9a323ee1635dc74ecc07

        SHA1

        a78bde0bd73260ce7af9cdc441af9db54d1637c2

        SHA256

        b5619d758ae6a65c1663f065e53e6b68a00511e7d7accb3e07ed94bfd0b1ede0

        SHA512

        a12ccf92bead694f5d3cba7ff7e731a2f862198efc338efc7f33a882fe0eb7499fb3fb533538d0a823e80631a7ca162962fbdfd78e401e3255672910b7140186

        Download Submit

      • memory/4632-3345-0x0000026AC0D00000-0x0000026AC114F000-memory.dmp

        Filesize

        4.3MB

        Download

      • memory/4632-4179-0x0000026AC0D00000-0x0000026AC114F000-memory.dmp

        Filesize

        4.3MB

        Download