Overview

overview

10

Static

static

10

MBSetup (1).exe

windows7-x64

8

MBSetup (1).exe

windows10-2004-x64

10

Analysis

  • max time kernel
    120s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-07-2024 21:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    MBSetup (1).exe

  • Size

    2.5MB

  • MD5

    8611a0d47266ce8d473d540bd6534ffc

  • SHA1

    8804544c8ac023d89783d3d27b8c00b11dd8cbb4

  • SHA256

    a573205f27cd8a421e33322a41037ddf74d4f9cedc574c86dea6550a8f065143

  • SHA512

    8f4291ebb1b8cb5561b857d3ea2418c503f79b37b201f017d04a3c49746bfdc29abad5cfef3f2ce150fa8163824ac0a649a24386aee4562940d394f6514e4b7c

  • SSDEEP

    49152:OE8I6oEK7uzgRTvnFjStQyfvE0Z3R0nxiIq2dseYGfXH:OE8IjzuzgFt7KtQRq2VXH

Score
10/10
defense_evasiondiscoverypersistenceprivilege_escalationspywarestealer

Malware Config

Signatures

  • Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs
  • Drops file in Drivers directory 9 IoCs
  • Modifies RDP port number used by Windows 1 TTPs
  • Sets service image path in registry 2 TTPs 2 IoCs
    persistence
  • Checks BIOS information in registry 2 TTPs 6 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Impair Defenses: Safe Mode Boot 1 TTPs 2 IoCs
    defense_evasion
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Downloads MZ/PE file
  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops file in System32 directory 64 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 5 IoCs
  • Executes dropped EXE 22 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks SCSI registry key(s) 3 TTPs 26 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 5 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 27 IoCs
    evasionspywaretrojan
  • Script User-Agent 1 IoCs

    Uses user-agent string associated with script host/environment.

  • Suspicious behavior: EnumeratesProcesses 31 IoCs
  • Suspicious behavior: LoadsDriver 13 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 32 IoCs
  • Suspicious use of SendNotifyMessage 25 IoCs
  • Suspicious use of WriteProcessMemory 53 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:3480
      • C:\Users\Admin\AppData\Local\Temp\MBSetup (1).exe
        "C:\Users\Admin\AppData\Local\Temp\MBSetup (1).exe"
        2⤵
        • Suspicious use of NtCreateUserProcessOtherParentProcess
        • Drops file in Drivers directory
        • Checks BIOS information in registry
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:464
      • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe"
        2⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:2988
        • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
          "C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe"
          3⤵
          • Executes dropped EXE
          PID:3220
    • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
      "C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe"
      1⤵
      • Drops file in Drivers directory
      • Impair Defenses: Safe Mode Boot
      • Enumerates connected drives
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies Internet Explorer settings
      • Modifies data under HKEY_USERS
      • Modifies system certificate store
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:3216
      • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe" /installmbtun
        2⤵
        • Drops file in System32 directory
        • Drops file in Windows directory
        • Executes dropped EXE
        • Loads dropped DLL
        PID:956
      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" /Service /Protected
        2⤵
        • Drops file in Drivers directory
        • Drops file in System32 directory
        • Executes dropped EXE
        • Modifies registry class
        • Suspicious use of AdjustPrivilegeToken
        PID:4316
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
      1⤵
      • Drops file in Windows directory
      • Checks SCSI registry key(s)
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4736
      • C:\Windows\system32\DrvInst.exe
        DrvInst.exe "4" "9" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf" "9" "4ba9030c7" "000000000000014C" "Service-0x0-3e7$\Default" "0000000000000160" "208" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun"
        2⤵
        • Drops file in System32 directory
        • Drops file in Windows directory
        • Checks SCSI registry key(s)
        • Modifies data under HKEY_USERS
        PID:4740
    • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
      "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"
      1⤵
      • Drops file in Drivers directory
      • Sets service image path in registry
      • Checks BIOS information in registry
      • Enumerates connected drives
      • Drops file in System32 directory
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks processor information in registry
      • Modifies Internet Explorer settings
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Modifies system certificate store
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:3160
      • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe" nowindow
        2⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        PID:4340
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:2944
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:3868
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:2684
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:4592
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:1304
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:4868
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:1508
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:4564
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:4120
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:1684
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:3360
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:2128
      • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
        ig.exe reseed
        2⤵
        • Executes dropped EXE
        PID:3524
      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe" /wac 0 /status on true /updatesubstatus none /scansubstatus none /settingssubstatus none
        2⤵
        • Executes dropped EXE
        PID:1904
      • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\updatrpkg\mbupdatrV5.exe
        "C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\updatrpkg\mbupdatrV5.exe" "C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE" "C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\UpdateControllerConfig.json" "C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE" "C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\staging" /db:dbupdate /su:no
        2⤵
        • Checks BIOS information in registry
        • Executes dropped EXE
        • Modifies data under HKEY_USERS
        PID:4420

    Network

    MITRE ATT&CK Enterprise v15

    Reconnaissance

    Resource Development

    Initial Access

    Execution

    Persistence

    Boot or Logon Autostart Execution

    1
    T1547

    Registry Run Keys / Startup Folder

    1
    T1547.001

    Event Triggered Execution

    1
    T1546

    Component Object Model Hijacking

    1
    T1546.015

    Privilege Escalation

    Boot or Logon Autostart Execution

    1
    T1547

    Registry Run Keys / Startup Folder

    1
    T1547.001

    Event Triggered Execution

    1
    T1546

    Component Object Model Hijacking

    1
    T1546.015

    Defense Evasion

    Impair Defenses

    1
    T1562

    Safe Mode Boot

    1
    T1562.009

    Modify Registry

    3
    T1112

    Subvert Trust Controls

    1
    T1553

    Install Root Certificate

    1
    T1553.004

    Credential Access

    Unsecured Credentials

    1
    T1552

    Credentials In Files

    1
    T1552.001

    Discovery

    Peripheral Device Discovery

    2
    T1120

    Query Registry

    6
    T1012

    System Information Discovery

    6
    T1082

    Lateral Movement

    Remote Services

    1
    T1021

    Remote Desktop Protocol

    1
    T1021.001

    Collection

    Data from Local System

    1
    T1005

    Command and Control

    Exfiltration

    Impact

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\CleanControllerImpl.dll
      Filesize

      6.6MB

      MD5

      87eb6bd2e3b35af6e3159f1808f5979d

      SHA1

      857bca1bad4f27ebb01fe396ed6f7330531f41fa

      SHA256

      63df6ea9e767a1c10af87b2d60d467aec4af5948db457746406eb8abbbc86fba

      SHA512

      1b16c97a77590d1eb190c2848ed794d3b34a361374f14490c8c7ed21a559f0a1fdcd94dc60b2fffa737e746c9babaf9623ffdfe7e5aab9fa2c85e7c856ce0a55

      Download Submit

    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\CloudControllerImpl.dll
      Filesize

      5.0MB

      MD5

      6bb324588fb6eec8b096a6027719cad8

      SHA1

      c18276d9144b608ebfc51b8b29f625a064f4260f

      SHA256

      c510c6685c0669648e8bc97d97bbd754360ae501f3b0064b1b49a30082ca00fa

      SHA512

      0ce367382fc9be77c130dfdbd2a7b9a41f097f40a6220b3c464606a11f3f99d1c93501b5a1a5e464e29149b306b6d38d39fa33394075277364d105bb8fabecc9

      Download Submit

    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\LicenseControllerImpl.dll
      Filesize

      4.8MB

      MD5

      215eb0aaf99043f36c9132cbe49204e5

      SHA1

      2db6e49c8c32cbfc560f2d24f5223ff23d18b12d

      SHA256

      15855cbcfd3188012c3748991041c4b7e8f65ed3278f0ad74aba1a1bb9ce0bf9

      SHA512

      4bc9084e61a52cf8ce189bd7234d29f3105e4baa9854296eec51b2e892031a12a36259c3e94aeed404fdaa887b2abfe95d6b5af686704c8c9dab7d7303b3871d

      Download Submit

    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
      Filesize

      4.2MB

      MD5

      80202b21a6f3df9d0d54f20a381df93c

      SHA1

      6915dcc75d0b84e5db40656d6382cb217a1996c2

      SHA256

      4217a62ea3df3bd98e40d205b4fb5f9673c340c366551adb771ff3e34e7bdcfc

      SHA512

      8d691deae1f7c5243d045940f7f728a874e72550859b291119c9b951bd95232980dc2a1b3c19154c723c42e0aa93747a046f747bbc305941594477a39c2925f1

      Download Submit

    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ScanControllerImpl.dll
      Filesize

      5.3MB

      MD5

      dc0faa2c37fe59718247f09c5e6c2259

      SHA1

      9874a8326e30ff36bcef268a61aed8970ad68aec

      SHA256

      23feea6a672a097ae98ee9dfcc19fdd233a2a6b35caf62be773ad9b17ce0afd7

      SHA512

      3cbca3cb26d1c8c29edb421c9e131b55e0c20c0cf446b7b65c6b7d209a003a870ee63d6a3b725eaa660f6d8d8c9a0b0a3f90045e3c255957ebee3005f650594e

      Download Submit

    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\TelemetryControllerImpl.dll
      Filesize

      5.1MB

      MD5

      9b01265995faf3961871ff3c1727f05a

      SHA1

      80f0c87741e1c1f3525d9a5845d505270a3c13ca

      SHA256

      1544af37a65ff92a02a43076c5c053d611a1e372ccb499a65cf0e4a8dc104ada

      SHA512

      413a23b431423307b3178d10705b570936c471bc3a4ed3ea8a189d1818a4aac7e5cfbcad0ef158aea2bd7d089dcaebd3c67dc4c1f5bb9bf78b7b252229bdadae

      Download Submit

    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\UpdateControllerImpl.dll
      Filesize

      4.3MB

      MD5

      26e2306862a3e09489e224b8c7c08b4a

      SHA1

      31b054b957d27ea4b2e3270ebfe7cf62e32890f8

      SHA256

      c8aca420097260a96d04398a90f7c346f0b1abf94a44ffa539050e4dd06259f0

      SHA512

      604c980476b386d5efad2ed273a840fb92dc40bcbee78c9f2fe9d300437978c8b47b2d44e903b43c3b1127c276fbf58fd823342850e6d3effc038acb0f6b1202

      Download Submit

    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\pkgvers.dat
      Filesize

      75B

      MD5

      2538f191c5984770f17a024661267f5d

      SHA1

      6f926dbeeb4d297e871eacf42f92bddc98eec44d

      SHA256

      249baee4b9c6e85f8212813b1bd0e6334e0dde06f590b084a4d4ce584338bc42

      SHA512

      de310b5ae21bcc18d17a5466a4e672d34c64f8ac8f4341a59abfdf54e83b6bb710487343c4b83438b0717af7b5fc19cc8a5a732a11061a67b0b920b1cc4c1024

      Download Submit

    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\Global.nm
      Filesize

      335KB

      MD5

      40263654ac69164df827b99190aaed7a

      SHA1

      aa13a5fbf8d9fc9384d513b8bc000067c8ba3a70

      SHA256

      1b60f09ffde0c96822b44d3d69a87c3fb71b604de3de4d474184a32155a5fee3

      SHA512

      53736f6516a3bcb0939229daf40f650c6c639f36f3e7921424127fce814cabe493d8ff4211bb0bd60f81e6ecc3b7566aa5907de8440076bc943e7969ced0ee17

      Download Submit

    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\Global.sr
      Filesize

      18.3MB

      MD5

      2a02c66812131af1c17098be5b4d8569

      SHA1

      aeede819445c04a45743a88e6dc457377829eab5

      SHA256

      9fc060209c7887b3c888ddb9d50f1c395c2c63324ec03c16b45e6f4ca9b348a4

      SHA512

      92da48b4fef2771c4687f0dc4be7161b23136842d0d4b3ef2d5dfb73fe3d72df6b5d3ae4ebfd39119ba4597fbc82a61e65ce1ccc0ff4a230a5aa91abad4744ad

      Download Submit

    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\cfg.bin
      Filesize

      1KB

      MD5

      69ac80ec518ddfcb3428c91e1064f4ec

      SHA1

      0d28ef92f3b27a70dffaa780999dfdfca078de1f

      SHA256

      9345fe4378ab8bc156b8e87d59f76f5dbde8f2a554941d5697c1c5d7bab508d9

      SHA512

      6e91f24aae10fe9f872a9ac7c62a8ef86f9ceae7ef47d06d38d355f31d874d00a36527c08682b28ff4bd31040bfa5b2738ebc3dd732b74a01a0e764c549134ea

      Download Submit

    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\clean.mbdb
      Filesize

      13KB

      MD5

      b7d81a6d5d8738e7f6c2253739b59398

      SHA1

      fec2cef56b1987f521bcd4e89b555c8119f84f5f

      SHA256

      7de661b04c1e8677e04cbc6b758a8cd9e5584fac65ed7ed13265c0c8823d630f

      SHA512

      964530ddd3e14726c16f69df7112ea0ed55d53e76c67c2187f5a609a32f1588d838aa3363c0ca10b6ec55f6c9c701daf1139965794678fbc5ef75ce522017f5c

      Download Submit

    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbmanifest2.dat
      Filesize

      924B

      MD5

      f3723d6db34a2d5dbf2ad266c319994a

      SHA1

      e9ae7015db3699b2a8b554b6824b2b8b9d14de9e

      SHA256

      34fe7365fa8b8756ce40432c8aae10bdb78ebcccd247aa7d928580551293d42d

      SHA512

      d506de90c31c010a2be790cf5ffa5d00b39756b30519df022b7387af83d41f4fa1fa470bf2ce389cd2db69d6a82da9482d0d175f8cd2b18bd1005e82f838b7f4

      Download Submit

    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dynconfig.dat
      Filesize

      39KB

      MD5

      10f23e7c8c791b91c86cd966d67b7bc7

      SHA1

      3f596093b2bc33f7a2554818f8e41adbbd101961

      SHA256

      008254ca1f4d6415da89d01a4292911de6135b42833156720a841a22685765dc

      SHA512

      2d1b21371ada038323be412945994d030ee8a9007db072484724616c8597c6998a560bc28886ebf89e2c8919fb70d76c98338d88832351823027491c98d48118

      Download Submit

    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\exclusions.txt
      Filesize

      23KB

      MD5

      aef4eca7ee01bb1a146751c4d0510d2d

      SHA1

      5cf2273da41147126e5e1eabd3182f19304eea25

      SHA256

      9e87e4c9da3337c63b7f0e6ed0eb71696121c74e18a5da577215e18097715e2f

      SHA512

      d31d21e37b0048050b19600f8904354cff3f3ec8291c5a7a54267e14af9fb88dfb6d11e74a037cc0369ade8a8fb9b753861f3b3fb2219563e8ec359f66c042db

      Download Submit

    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\mbdigsig2.dat
      Filesize

      514B

      MD5

      17a3ace041c3eab33e45db991116675c

      SHA1

      b3297044564c6ef0b92c846d62e058b91ed3a018

      SHA256

      ab5719d4c94f4d6be46c4672c6a85d893e4b29f7a5e1b6a30e087fa49052b9c2

      SHA512

      7a43dac8eeb6887f9ee40b7dab01bb25025e2db9a4b0331c1b3357c0b57d63c5edd28471622b47ace2bef218e7295c755f759102f455ebbe85c5822fbe8bb62a

      Download Submit

    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\prot.mbdb
      Filesize

      24B

      MD5

      546d9e30eadad8b22f5b3ffa875144bf

      SHA1

      3b323ffef009bfe0662c2bd30bb06af6dfc68e4d

      SHA256

      6089fbf0c0c1413f62e91dc9497bedc6d8a271e9dc761e20adc0dccf6f4a0c1f

      SHA512

      3478f5dcf7af549dd6fe48ad714604200de84a90120b16a32233b6d44fa7240f5f4e5fe803f54b86bbdfd10fa1bfdd88fb85eb6a78e23e426933f98d0a2565ec

      Download Submit

    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\rdefs.mbdb
      Filesize

      24B

      MD5

      2f7423ca7c6a0f1339980f3c8c7de9f8

      SHA1

      102c77faa28885354cfe6725d987bc23bc7108ba

      SHA256

      850a4ea37a0fd6f68bf95422d502b2d1257264eb90cc38c0a3b1b95aa375be55

      SHA512

      e922ac8a7a2cde6d387f8698207cf5efbd45b646986a090e3549d97a7d552dd74179bd7ac20b7d246ca49d340c4c168982c65b4749df760857810b2358e7eb69

      Download Submit

    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\rules.mbdb
      Filesize

      9.7MB

      MD5

      c352637bdedcdee69da818d9940e2d84

      SHA1

      16bbf468bacd63ec1609b4dc9e696bf2be54de49

      SHA256

      4e4b61106ad9be2d41ae692432409b444dfae5d833210b9b81be5d507f89dd4d

      SHA512

      2c6332ac539c0a3c5961bda5943a238d2fd9958cf12c3bc05b0f10d2a8bec690af8b74897404093232e474030c1b813ddd7130db2381e216edf3fe8a7a71e06c

      Download Submit

    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\scan.mbdb
      Filesize

      876KB

      MD5

      de02044daf400396c2cc7991101d48ed

      SHA1

      9a0ebd4f34b45445105789d484e65af23999b9aa

      SHA256

      b806cf521fc94809f2b7fa092cd0b94d9ecaa984d038f458415157b18d0a7a2c

      SHA512

      4f7970c2a19baad06b0e47a3c09ba6052bd9f341282f7a66432a55ebc439c986123e61a641d644a824fc672d5468a5f621c2f837f8eb11f7f09641ebf00f2ccf

      Download Submit

    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\tids.mbdb
      Filesize

      169KB

      MD5

      7fa243b51ad5436aaa43154eb1e83e7a

      SHA1

      76713b5300609c0b376f9e3324aeee4d57dde4bc

      SHA256

      a21ff5af7970d9b9a0aadf13a09d37bca943c6d2b6efe072b56ce6abdd776205

      SHA512

      2e6e94c306e36464952b1cc86615cdd0cd51fea19cd08cd92d231e94941031aa52c7b406288939fe95e8c9d694413ec6c3f18cf881b757b3d202f045b86f348b

      Download Submit

    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\wprot2.mbdb
      Filesize

      25.4MB

      MD5

      72d7a326dc777f20b49087e2283b537c

      SHA1

      f5cd951c64051d86821b7e3844e959a3803249af

      SHA256

      8ea66c326678f144645400d24dca518cc57b1d8ecd72b6415d268e126b70946c

      SHA512

      028f1433ccaa85f074a931eaf5c8456e5039c16f700d68375c2127a8faa6c00b99ceaad7ffa22bee6efb52d83680d3e3d930409195027db7f7dc9e9ec3f64ac6

      Download Submit

    • C:\PROGRA~1\MALWAR~1\ANTI-M~1\mbtun\mbtun.cat
      Filesize

      10KB

      MD5

      8abff1fbf08d70c1681a9b20384dbbf9

      SHA1

      c9762e121e4f8a7ad931eee58ee60c8e9fc3ecb6

      SHA256

      9ceb410494b95397ec1f8fa505d071672bf61f81cc596b8eccd167a77893c658

      SHA512

      37998e0aee93ff47fe5b1636fce755966debe417a790e1aebd7674c86c1583feef04648a7bc79e4dedaabb731051f4f803932ac49ea0be05776c0f4d218b076f

      Download Submit

    • C:\PROGRA~1\MALWAR~1\ANTI-M~1\mbtun\mbtun.sys
      Filesize

      107KB

      MD5

      83d4fba999eb8b34047c38fabef60243

      SHA1

      25731b57e9968282610f337bc6d769aa26af4938

      SHA256

      6903e60784b9fa5d8b417f93f19665c59946a4de099bd1011ab36271b267261c

      SHA512

      47faab5fff3e3e2d2aea0a425444aa2e215f1d5bf97edee2a3bb773468e1092919036bcd5002357594b62519bf3a8980749d8d0f6402de0e73c2125d26e78f1e

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\ActionsShim.dll
      Filesize

      2.2MB

      MD5

      13ee270968b2eaf9d45770e831412c0a

      SHA1

      6f4bfee0efd52db649a9378298148fd5ae5001e1

      SHA256

      81a28988d59a8e75b771456f61aa3029f334f2a492da70f53bd93403122e2951

      SHA512

      36f9339f15bd1982fe196eaf23ed879db5fdf1cc1c41683a915d1ee9718053720c9794e77d093a51adf9c20f58b2f5191abeecef41ea87746933c845be48bcde

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
      Filesize

      8.6MB

      MD5

      8ef5fe48aa57a5c252d9bc09bc21d17a

      SHA1

      b1d73d06719c32163427ce69cabfd18630f20386

      SHA256

      75348e3dae5d4e878df0655583cc00281d7eab72b0b7a708dbd6fb9206315ffa

      SHA512

      7f8eac31a7cb9af960069785360e50686976f8f99ae709b0cfee6ed078dc9eaa80ba93ae1ea6d65998ca668e721162dbab237103c92ea38a76f6c8400e25d291

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
      Filesize

      2.9MB

      MD5

      46f875f1fe3d6063b390e3a170c90e50

      SHA1

      62b901749a6e3964040f9af5ddb9a684936f6c30

      SHA256

      1cf9d3512efffaa2290c105ac8b7534026604067c9b533e7b7df2e017569a4ec

      SHA512

      fdfb348061158f8133380e9a94215f4bfc0f6ce643a129d623cb8034c49144f1489de56cd076da645478506d9fbddc7590fe3d643622210084b15fdf0d16b557

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
      Filesize

      289KB

      MD5

      3cad9ed77b1f5f989a4ced18c506b5f4

      SHA1

      54b40391f0a390b38bb3cd637a018162d8172f02

      SHA256

      57c2751c98f2bc33e305bd1a061fec7043c2ee0899d46dea1acc2dd6b32cf193

      SHA512

      eaa4d99241088f417095447ea5c299f83b9638678fbb9e409bba4b444e6ea300541d668f9f6169377b208b2e50c8cbb76383da131366c81c080b944ca3eee0fa

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json
      Filesize

      621B

      MD5

      1681eea699630c99e182c35a76941d8e

      SHA1

      a031ebdf20701b672224b9363337de73f779fec8

      SHA256

      15b8570bb6ede4aaf22aab0583158b9d8b72325a53bef4293fdbcb20de08ac36

      SHA512

      9339ea85608228e1fd70cf92fbc130f1b93958e5ddccbc999e279cd8a227dd94dcacea73685c43a311a7eabf825b88648037011582f9c47b4d07668994f02d8b

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json
      Filesize

      654B

      MD5

      f6e07f173b407e66e50e1540b39cefa6

      SHA1

      227b403053957f11cf1260e79a783903670f2d46

      SHA256

      e159e277873a558206d60c0f0ebbfd0163e675260f10eb81018ab4e545b706da

      SHA512

      d3d2d68c66dd290c51d8dfa0b1f6ae2b9cc524c3d1cee0d77b8170604564e7df9f140ba3a340c67a7f8f5b32805f87dc881a5dd2560993863706a5c01b9305dd

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\ctlrvers.dat
      Filesize

      8B

      MD5

      122f7cfa0873f645896d88bb90b0a019

      SHA1

      f654c66c0f1c9553a63cd4e0c7f6178148ecc9e0

      SHA256

      bd76430c4602fc44f068d599825d5a658081ade4fdaf2d8d37f0b7527bea80a8

      SHA512

      b5d80698b30560efe5f7f622d76cb542bdf62e176023a45cd2162f144babbd889920fa85339bd4afc5e4c716b8a7d2131baff8177e7e3bacf13d0e50e2bc63db

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\mb5uns.exe
      Filesize

      3.8MB

      MD5

      fc84388160f87641af2535e9c0a33e7a

      SHA1

      3165a98fe463ff0eb013e7e53a87e5a5970ef0f5

      SHA256

      6c8a390a7a577600cf6608c911057f577a56cf5a3f98b02e64d6929905ba12de

      SHA512

      fa96226fbb8466c89a412f31f1603c21070e3c321bdc5c8e7888bdaf88f5870b7347e2a0ec9ce36b4a7d90389bed46fb93ec922c40f093b8096b34b8e80a7e48

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll
      Filesize

      2.9MB

      MD5

      3bc4d2bb173c005c678da34697c17d99

      SHA1

      2e07b4f3af7dc82d8f7a5fdc920578f6e908a0cf

      SHA256

      fbcfade08f8d2617b6e9f2e279f81ce3b5e1fc0cce5bcfd927cde1335114f6da

      SHA512

      36864cef0ba96899d1c9ce088ae931b10461f1360a21fe8791b61acbd6ff1b30786a0f6745eac6acbdcfbcd3f05347aa1aa05fdaaf9e36e8fd0da3768ae78a17

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll
      Filesize

      2.7MB

      MD5

      b7e5071b317550d93258f7e1e13e7b6f

      SHA1

      2d08d78a5c29cf724bc523530d1a9014642bbc60

      SHA256

      467de01d7cee7ec54166b80658ff22f9feebdb1c24eaf1629cf40e4124508064

      SHA512

      9c35293c95c1a9141740ac99315605964aa37c4a42d3a11cae9e5649ff1427a9480d3d5e7f763212cf13db3511c5ea3c84e68f95f0067fe6339a9d3fb7b27c54

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\mbtun.dll
      Filesize

      2.8MB

      MD5

      2bbf63f1dab335f5caf431dbd4f38494

      SHA1

      90f1d818ac8a4881bf770c1ff474f35cdaa4fcd0

      SHA256

      f21a980316bd4c57c70e00840ab76d9ad412092d7d2d6a2cff4f1311f7c05364

      SHA512

      ebb9834323329dc01ba2c87e5fad1083a4cb86f5ed761cb63299ac5336a9843a1aadd42fbed706797c2295117af1c00f96806422338352653c8e0255fecc2fd5

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf
      Filesize

      1KB

      MD5

      5d1917024b228efbeab3c696e663873e

      SHA1

      cec5e88c2481d323ec366c18024d61a117f01b21

      SHA256

      4a350fc20834a579c5a58352b7a3aa02a454abbbd9eecd3cd6d2a14864a49cd8

      SHA512

      14b345f03284b8c1d97219e3dd1a3910c1e453f93f51753f417e643f50922e55c0e23aab1d437300e6c196c7017d7b7538de4850df74b3599e90f3941b40ab4a

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\offreg.dll
      Filesize

      113KB

      MD5

      2ccb84bed084f27ca22bdd1e170a6851

      SHA1

      16608b35c136813bb565fe9c916cb7b01f0b20af

      SHA256

      a538caf4ac94708ddb4240d38b1b99914ca3e82283f0d8a2290be28fc05eaccb

      SHA512

      0fd66d241bdebd0052f4972e85b42639e3c5a40affe23170b84bc4068dff8e84446898a77ebf7cc0bef97454abb788faccce508a68bc5e717980ef26d8436986

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\sdk\MBAMSwissArmy.cat
      Filesize

      10KB

      MD5

      f7c8e0339bd48b6fe8eca81ac3ba5ba5

      SHA1

      1369bd4dcfa7709d8eed12fa76fdbebd39dd6bcc

      SHA256

      a9dd01f84a075ea8d0b0968fd7a11720e49f019834f7d4fe80f50dacb12030aa

      SHA512

      c722510c40fbed32bcda3b5b69c590a9043e4e51f8e804f77f73eb8ea0cac0f4a587ef540f2773981839f04e44f48bbc8b5e8c03ded3f0cf637ed1e3172c8e07

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\sdk\MBAMSwissArmy.inf
      Filesize

      2KB

      MD5

      d87c2f68057611e687bdb8cc6ebea5b8

      SHA1

      27b1311d3b199e4c22772fa1b7ea556805775d37

      SHA256

      ff93773f55bf4a6a0242adf82276a8c95c0b244b9bc05e515c4e810c81a960e8

      SHA512

      4aa65b8911d8a2a0f9ef0ee6e934b94db0a9ad4c2ec543b5edcf21486be43f6ab1fda6617ea2cbb85eff230628c9fa8e7649da915d6de695803b28e55bef5819

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\sdk\MBAMSwissArmy.sys
      Filesize

      233KB

      MD5

      4b2cc2d3ebf42659ea5e6e63584e1b76

      SHA1

      0042da8151f2e10a31ecceb60795eb428316e820

      SHA256

      3db4366ccb9d94062388000926c060e2524c7d3ee4b6b7c7cf06f909f747fc6c

      SHA512

      804d64d346b3dbb1ce3095a5d0fa7acc5da0bf832c458e557dac486559fe53144f15f08c444fea84a01471fd5981e68801a809b143c56b5b63e3e16de9db0d98

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt.cat
      Filesize

      11KB

      MD5

      cffd7ecf8765733aa7a2c36ca5f1eac0

      SHA1

      549b0974cf92676a7589466a3ee29e1dd45afa6d

      SHA256

      89c561a58d649d5f29fe1c576ca46245780369845df32045a64739b4056d8bb3

      SHA512

      47006f07c3270f358ce67c235739ebaa17b8fbd9a05da9f05a079322a003f8e6d704d3c5353e1a186df74b1bd6438526f6701a0c173563d676846c0f0f230be6

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt.inf
      Filesize

      2KB

      MD5

      358bb9bf66f2e514310dc22e4e3a4dc5

      SHA1

      87bfc1398e6756273eee909a0dfb4ef18b38d17c

      SHA256

      ff51780a5a854b2c18f71ae426cb066a13723ef6155e24f4910137c9e8dfdc17

      SHA512

      301ec5ec5c0813951843011f2204924240235494999136ea30a557cbf58146fc6043a8866b344fa7deb927d7c83d44e2aaf45adca7d221aba5d36715b9a63e09

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt.sys
      Filesize

      196KB

      MD5

      9c4bec17ba2add58348045dbc762ab67

      SHA1

      b00ed0ca3634a93a23f70e79bda67c945dc915b6

      SHA256

      9c3b11ba1d4e462d9470fa0b50a61fde9f00cf4adfafd8e8b19f1e8af369cdd6

      SHA512

      6aab0e3d3c189c18ea6540d1736b64a518958c62e1cb0a2874826f6cfd76e3a06fdbd28ae0b81e2fc8fc20601d00d804d86fe9887ab6919dd8090a696fb52b31

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.cat
      Filesize

      11KB

      MD5

      91822615a1481ff43eeca0b430fe9ca1

      SHA1

      5bdef1c6aabafce0177fa1b21b94e2d2b48afc3d

      SHA256

      a1afbd8b08c848af6c0962bd44c772bfa007daa0e878c20f81a6552811ad4376

      SHA512

      9f3c473c32e1c079a75d183d565991bb3216cd89f78e4ffc0300a079c0d761c6047a472705ea557728368c096bf08912a523d55fa0367f708113cd70951d6aeb

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.inf
      Filesize

      3KB

      MD5

      5a9717e1385703e8f06b27aa10a69e87

      SHA1

      84ee67a9167b5eb6560711b9871de98898ad07a5

      SHA256

      47b7c516bb57c612de19f0ca865590af95b6e32bf873a0fef9e011b2c5b483d4

      SHA512

      dd3c7278c2c11ad15a55fae6d19b96dadd92f85b7f0c8ce934298258af00bb5c052a84a98499b8867b0f43704fb307c67d03692ca69dda4d814c6c17dd73df44

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.sys
      Filesize

      216KB

      MD5

      7764c438ad9a4f024d60c77b82f2721f

      SHA1

      64e478e83bde2965216a37f283beb2695997b69d

      SHA256

      3f51a3149e6a79cd71fcb1451660196b6ba59c3b687736f59b24e5dab425d73c

      SHA512

      bbbac97b950d20621ae396a7f8ba8ec990ad056e2180bfa10d11b4eaccf3680e8830d652b7972bae52826535bfc68ae8c1e4ee93071c954ec7f8dbc7a6dcfd84

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\srvversion.dat
      Filesize

      9B

      MD5

      b302673116414c7c4cc5428d0e50e7e5

      SHA1

      14c56a67d0f3e4f6c7e92146ead787d722b1e89e

      SHA256

      2bab6e8554a9f52106e43711b3d1c10b6e1125c9900e67cfab642b0e6be9ded3

      SHA512

      156db182d8d577eb570b6871b044a067e9f70316d0c5167c3127c6b60c368a26f125771b2411a219de39c2c14d2aaeef5dadc2eaeaa7228a4576fe62b2548a99

      Download Submit

    • C:\Program Files\Malwarebytes\Anti-Malware\version.dat
      Filesize

      47B

      MD5

      d9f965c66e2fd323696767dbd9dae15c

      SHA1

      edf90949469251737d272f6e1d49499603d63022

      SHA256

      fb22ba1f8b39d65a59f327fee25327ed1bd64bf1ad21a29d4a23baf10a0c5bcd

      SHA512

      158af7365a2a18a21633d0631b40e53e565a9021c448676c599f4ff613be30e784e95d590279a69d52139af0425b84a73773e8e236e312d6fd070661243853b4

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\LOGS\mbae-default.log
      Filesize

      1KB

      MD5

      20e4ccc24efc85e6d71f4b0a3c67aae2

      SHA1

      648bbd22b40f641733167ce1c57a5bf6e8b16e62

      SHA256

      9154cb8c10c3989645420a7377fd57c435121d62b1fa7c21cb249535365356d9

      SHA512

      7eae6fc31cc9b04c078bca50b775e08ac845fa0f6a290bbb93065f377393f0ff008435760f0f8db42196319fcf5ec3ea273536600af986d023c18a7245f1e312

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
      Filesize

      1KB

      MD5

      1bce743cb01e529600afc0fa03e659d3

      SHA1

      0e2a8097cf4f81207e8d51bce9b1201de154e186

      SHA256

      ed8f151ec1973d4eec3ee11ea47e538474a5b4b4106f0d2bd23712548cd65624

      SHA512

      91eccb683d19575b51fd42f84f41aedc8340e819dab479b8e85be3ff4dcf46add18bd108b3b00c27a1b760d62eed4ff220795a476d78e69178ffa638a761ab81

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
      Filesize

      47KB

      MD5

      7d32098487e7c9760de6409810941381

      SHA1

      358019746083b5e39076d22305cd505282469afb

      SHA256

      8bd32c50e440c0f89fb3e1a43910134ac6b363f9bd28670562bd5efd4412650f

      SHA512

      385aa944b4d143014d569ab90d430f48bad56e4d0e5f93f050b491488bcae6fdfdf58038ca72d77db6d6de1a6d563b8950fabb18270277f760241f9d00a6c100

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
      Filesize

      66KB

      MD5

      75210a44d5331ba29234049dc59be941

      SHA1

      4f7b0042795be6b71f34cb79dfeca0565e04f428

      SHA256

      f099e26ffc0157ae1a8e17a070aacef40dcc7edef4d6cf59c0968a404f5048a1

      SHA512

      044b514021b76c2c85a51140ba64e0c302650b378a6da8c0e24dc90c22176e377999a8b334b32ff69bcb5a092b975993a2d76851a5b7c31fd8ff88f6af640cbf

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
      Filesize

      66KB

      MD5

      c5497a9426fd93d9e72ffacc0324ad41

      SHA1

      aac9753dbe25c97a995751e0f72edd4add5c1fab

      SHA256

      ad55fa35bb6733d112e5327c37d4b5bcfecbf541ff0667d43bd1c9c44d6e5f7d

      SHA512

      cc1b1217c722a82a38770b9e025d6a131c787363d87e5e9258b0779af03db70cc0a585ef104e5db2844975f1c227ff4940be7579734efa38e26ce1b7b5ab8aee

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
      Filesize

      89KB

      MD5

      82dbed4b75bf03dc50e95adb606c1173

      SHA1

      3b03259f950d498747757f973d3bee3ddb7b10cc

      SHA256

      f3461d02b394ab9f83c3f5e489f8c15522f9e457458ffe26732a70946bce313a

      SHA512

      d868a4518185b7f25f8af8d441a4539832970e5981445e1a489a24dca0cd37b856f3fc2909f4e513302f6f77a7a1cc5bff94ff822b77ca8c910334904efce48c

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json
      Filesize

      607B

      MD5

      b3e13fdec6aeb9dd01bc95cb7ceb81cc

      SHA1

      6d57ff86264babac801ade27cdcbcd5bb37e7e4b

      SHA256

      45240a187545cd4352a6f51bba66501e78a08cd7dad585e1146384b9c82d4f77

      SHA512

      bf7defacd24a1e76bc3585546c3c0d0d0d3bab0f69c726df4f3611c44262bc9274db95d02e803cdeaf4b4e8367c7f63c0314e2e3fcfe1bc927c63b3548048bc7

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json
      Filesize

      608B

      MD5

      f6cb7d6e717f8fc492d7e0eca96811ff

      SHA1

      64b25886f369d80e8404d328b83e95e9072d4836

      SHA256

      92cb1b58ef992d060adbbdf749ea2f43dfeb04a3ac9ef2c9bac1d783e192a3fe

      SHA512

      beba6a7261a464b06be76b703a894dd2ff6de7f2c7e362d3581b79a38e4ba36b1d32f976da3119e8c60f773c9816a00647b6d3975443cc32346c6c4a6e11ab3d

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json
      Filesize

      847B

      MD5

      bd097c39b4438f2748de790a4f4f4381

      SHA1

      dfe3c1590d3168dd8ac1cd8a788061f0f6ba99cf

      SHA256

      4bdea1cd94b70318048fe0fbf2f0a0604ac74f36eb6e7421568a10d04ba8bcb2

      SHA512

      9474fef1d4d292d432d9f238f0568d2aec85b81988db5097b9253094f78e22cad13e77f063d8ac0c294c0479570ea9fbc37a6d93389826b1e6cca2e983851f8e

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json
      Filesize

      846B

      MD5

      8ad0e3607eb0104eaa7842bd1f1bfd7b

      SHA1

      8b236cfafbfbbbe5d9b1c5a04252c7c938902d16

      SHA256

      76989fb7653d697974695d981bada11ad294cfebb7de4aeba1fac5aab601b062

      SHA512

      af879e8767e725744cc35b603fec747f16bc58a7320420e944be28b80c191a6a058b4f1d65b6b75f27b3ec001cf8224b8492fa2a020211d1ff2d41f9f82309e8

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json
      Filesize

      827B

      MD5

      e71178c7044c5e5588a6237f66716826

      SHA1

      60eccebf3b265a1f3172da2a86cfd428cc36a20d

      SHA256

      fb42465c25da3f37941d2f4f8ba05aa982fd4834245a32f2c68e5abb95493a7b

      SHA512

      716f0f4385a26e055d0ceabb46dabe3fffb3cd1270450724901f445e7fa24db6a63ee307453f5a6ffd23c620b765fcd2eab560ca6dc23a353d48889fe2eb0c48

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json
      Filesize

      2KB

      MD5

      e20e74b304392e0cc2876089f591cf99

      SHA1

      e2eb1775f0d702a243e9dc0b06f0f78d6444cfa8

      SHA256

      f5daf19cbf5a83e198252e0b84efcfee52e79e8f9977eac03e10f58479226743

      SHA512

      c7c0123489020301510530de6e487b242a62cb16bd0f30cc98f9629439674ab4120dc07a9c9702c315c2651d07bf9000b0fdc711b8dea7ffb9c291cc685f3420

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json.bak
      Filesize

      1KB

      MD5

      52c6e056bdde11eb589bed95c8567a6c

      SHA1

      d8ae48d841e191f365e682a0c57d35d9b5f08315

      SHA256

      62ae1255b95f2b4c301c7c54cfd1d474878b6c18c1608e9f06cad3c90c073ea2

      SHA512

      b9e59f1f023631923ee6e0dc619cd2d4f057b92105aadb2354adf9609d16042630831f666c9ba5b0630d740d07bba20902c2225c75bf009ac61355f8ab8ea36e

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
      Filesize

      11KB

      MD5

      cdfbf1504f46a493ab660eeb1e67ff40

      SHA1

      3a71fa46261069447dab7d01b3d248f462e19f1a

      SHA256

      a14e78323ec7f601de6d50bc9fa44eed50748677a0f815573bcb2089a1957f96

      SHA512

      c63a887b833b9c09543cf64594510529a8081716ad5aa85b738bace60eb92b226a18f4d31fc16e68c3ce6c49d4c96b4dde64760f8aa7777d855f9d88aa584cea

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
      Filesize

      11KB

      MD5

      2ddb84588ed6de145088c89df499343b

      SHA1

      b192c6d66b187908e521d5017628d5f0a0bd8c3f

      SHA256

      24ebdcf132aec16a695e1eff359b84a9b6688fc4c20a71acecd1c7322d1f0d3a

      SHA512

      fb45b550710c657c549d325e4ec3a319652800a7470ef26f31223fb8323eee164a18d824ce50f89dad178688e4b55fd7fb4b427ba05e4b871e50904246023547

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
      Filesize

      11KB

      MD5

      7f03a08b56b2d45f5dd9098ad71b5bbd

      SHA1

      6a4c6167fe8cdd5567cf870b79ac4197373ca5f4

      SHA256

      86217043885b27b705f6f149a8203130115789e1ab768fedcefc32e8d62205b0

      SHA512

      5c2b6d29782559c8ed3194dab0bf3be7194e7f84855d1013f369fb40c22752b11a35ff02a392d708585822ce380a2b65cefdd356bce08dbf2c244e9df77cdca6

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
      Filesize

      11KB

      MD5

      1befdbbb9b36e1d19aa5818d3b6d371e

      SHA1

      aed2a4ae7148a04df38708512937acd897a5bffb

      SHA256

      6d403279804512b9af7f8a2e57ba006f6320048003348073f406b9317bd719fa

      SHA512

      c1264392b2aab3b2b1dce10f57a5a5993b2899803b4afae6f2346b1e73859d51c6c6c89fcc608d2edf42f24a85dc16a18291f1b28005261aa339b3cb145e201b

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
      Filesize

      11KB

      MD5

      bcdd86e05a408805e2545d87597ec929

      SHA1

      5194b31ea0b10154aa33ad6de72a2c1fd0a3f741

      SHA256

      15c6e6437de6c26c28756635e8e2792a442d4ffc0e17af844b0f408595597ce2

      SHA512

      da98f261caebcf626ae51b663611840d342161de765b4afaae4fe0c89271780a4aa39972f594511666b8948c23e48b97ccf5a3d02d6ad2f8d63ac337e3e1c14d

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json
      Filesize

      1KB

      MD5

      565f680401c2130b2ee3d2ada02665ce

      SHA1

      be0b756a29c9f96b034aa46a374e7de0dd532564

      SHA256

      06223fc95610033866cc91d0840ef46dc6022a261e47cf1a2b723834852062ad

      SHA512

      a5ccf9802e598c88dd70b9ce95b709a8fed6b02728230c57e573cfea79a48bdb75c2d34f9b1ae634c3fcec465fac6be0d497a39f89d9ae14b5e4737474af7e46

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json
      Filesize

      2KB

      MD5

      c4b74825f5b81ad9defec30488063e21

      SHA1

      e38b7b62ea7f01252d6b6ea06a46aca39cded5a6

      SHA256

      adc5d93c768fa28f9f760c850315e4a3da09d686d9018d399c372a6894904054

      SHA512

      bd90a4fd2ef0e1ab1dc5af4ebfa962b96c6dbdef47ac9623b2701cc6d57dd335fc080bd95800658afa02303a9d6521984fd16a5bdc81d43e55d5a874c888098b

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json
      Filesize

      814B

      MD5

      6e923929aa263ab62328752f44796ef9

      SHA1

      abd1eb4ded458c6bbc8f38177265a2db96f77683

      SHA256

      0d7c44e060769fbacfe8687f284f8c4e66de11a6a58405637cd53e0ca9384341

      SHA512

      1fa1605d25609230629e5e25b9a474219cea0e3fff593e5596d0d20e88dfbe6ca2de6f8ec56734c1fb37dcd4f507959921263515a7b7004a9814ee4f9a501aca

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json
      Filesize

      816B

      MD5

      ba83d17ffe954f21f6c489ff7c2d1623

      SHA1

      6afa09a1d0bc334b14bb2703a4ba1a01d3522930

      SHA256

      9921ba8536f57fd48a8871d499ea59aa40d4963711021c3a5db88e56e5844ca2

      SHA512

      f3c2d9372e49ec7613a5f7c611fc75eee8937f59e0a9a9980fc4db8ee35b78c0aa1143b361445ca9769e9ff1b28e6423f71fa01c85b9d0c7eef351c4cc5be123

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
      Filesize

      1KB

      MD5

      3e924850528e33a0515b8cdeaceea75a

      SHA1

      7b5a67b4b61a88cebf01e2166e02d7f6b969aa7e

      SHA256

      5440cbf1b7f7afdb7eff8dcd9965093d52a10e2787cf00b51aa63ef33cbc0e46

      SHA512

      92c695c8e8e57e681478b4dcf2b437b7e2bf49e1cb82bd4c16f0f3ea3164dafe6ced74bbbc77a29b81bc2b5a2013f3ce3b76ac3d099cbdf3a1545b10d8fef0f4

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
      Filesize

      1KB

      MD5

      b151f02ed5fc8f0333343a719cd854b2

      SHA1

      79393427e6786ca66e9009c8d5a9b89373e1f62c

      SHA256

      625d7255d4ebdd80f279e134a6710a1ba42652e66106db36feed9d8142060ea3

      SHA512

      f709c7f34a1b4f1fe87c4666c02792552aec0d8fbbd962df006c0c27faa9dc4c10dcac92a5688282cc41b52f09c04092e2f44d514e098fbd9762c79661c07cf5

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
      Filesize

      1KB

      MD5

      bbbce15234dbe9a2fc1a35731686d2ac

      SHA1

      a498e86ffad0ba068d2400f1cbda710b14cd5f86

      SHA256

      33238c0eee945a5861144e087ecb00aa6a5fc430e7eed21983f7dc8a851aa3c1

      SHA512

      cb70ed5e798cf422b1222c55e64465bb4af97c7099132f9aa2d1fdc1171482370279b9dddac0875ba795a7bdab593f20ce8c6173c13b6450aa23192a708b1f07

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
      Filesize

      1KB

      MD5

      819a74d77bab501d710d64a2acb3c875

      SHA1

      4993225041d120b7a8abf3f1b8b7bb5643fd037b

      SHA256

      7cceb96b312f776788acdf3518b720c0d72ff45784b6e235fea063f6d843882f

      SHA512

      0541b59f91e4b77db74eef82ed28c4454d83758d2aec99fcd2d7f99a2c3f908e43f8bd8bbf87d88676733fe23502dcff5ef2151d482a22d9edce775c2ee12fc1

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
      Filesize

      2KB

      MD5

      54c659f91ad67b5aec04f5dd43cc0f74

      SHA1

      c27579a338633110982d07c4135697904f0ff5ac

      SHA256

      414523614b0f61a4fb270c1dda1e3243736c503954bf42ca35ef01740672ca23

      SHA512

      6a09c1ec1ed4fc25d84406e76146622af21f12d7e87c434f2afea691f5360020573e356c63d1281e1ccf09c93fd19f0d44a99e7e88f12de27ece8bce0bc8f9cb

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
      Filesize

      4KB

      MD5

      82e47081b817e211459c560596ec570d

      SHA1

      0a393f40ad95e8c55fc3ba2806b33d9ce4c0d546

      SHA256

      eb91ce2f0727d22ff7973148f82468de9db4792c0d29d87516382b8a7477dc07

      SHA512

      895b16f5a23cf397a3a856213834496dc8f1d9512e8216d0a20d817dc8823304ef2f6f8d9b43710ddcf493301c51d615931198276b07fbd0f500169cc41b478c

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
      Filesize

      7KB

      MD5

      737978dc81771278de436943c490aaa5

      SHA1

      86b33b4d332a62b1c7a8696806866a9bdd93308f

      SHA256

      c131f5513fa2752b8c234b3af71c1ef907d18020b3542e3e52f38e982c3d0c79

      SHA512

      902ac49b1836f5f4140851dbe29bbfd280f4e81d8fef4603b87bd6e41b70253e293fb4cece9cf212ffc9a085b2c710baab82d12b22df9c180e87258a9e0fab65

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
      Filesize

      7KB

      MD5

      08a8fa7ef2d91fb87b3c785d7cd7c80f

      SHA1

      fb5a7e24d7285450e5ee11ecc94bbc108f4aa3d3

      SHA256

      12ac3cad2f1a627cd41f35343a8977e059c42c97e183aa91b016273b9353ed83

      SHA512

      824a36a4323ef2bcee956f2a6c202fcd4b221ba43d4f93e23929c4ee59ce348799461e04724dc2a2c78ae1692148af40e631afcecc9706c797ccfc8673c8940c

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
      Filesize

      7KB

      MD5

      488184f1397967effb6cce4b75590abf

      SHA1

      5d3bd37750ae7218c9a664cc0b27d60aadceedf9

      SHA256

      2d9ced48462a3ccbb6425e26ea834e6942c63ff8cd2cb19d4275d5a0d3d97173

      SHA512

      c481eb7fa8e115f3e8c82065def754ca6344e1527a0894afc2b30cb395c368cf9eb0838ca99d11c408f3cd4f8c93a83c26795c32f299b3a7b5b9d723d295b6f7

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
      Filesize

      7KB

      MD5

      e25a94a8b65b5e83d2a22fa1d5c44d8d

      SHA1

      82140c839e58f965edb714b5b0b12981be9e24d1

      SHA256

      058cdd191feac38d048d23ee1040553031d1c17c044daf24c1a4354923bf88ba

      SHA512

      b27a2b19a46fe4d6b20603dce378b40bed17c244c107521814b3f139d455041854765d4d0a2e5efeee433f5b3100495c00875381200ca0eceae87c9097cd413f

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json.bak
      Filesize

      7KB

      MD5

      909d70601fd66de8998621c0bf8de8c2

      SHA1

      9cbcc6ac7c212e363d1c28432626480d01e6c78c

      SHA256

      71eda3bf70480825327324e55c82c3ae9692de25d3c9154c2b62ed4e80458c08

      SHA512

      1a0c3427b06106c9dae1a7a6b4f5cf102a607a0ab98aa4cb9672cffe1ba517248b557014045bb666377ae7e9622ccd082df2a64f4e38e6101ac7c59551b70d5c

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json
      Filesize

      11KB

      MD5

      fb3f39298cf6cb6e9f8af11676e4c8d9

      SHA1

      f73f93f4ceb147a02d2516830362291d208fe579

      SHA256

      813b3f754b715078d78d860e1ded348e49bdb216dcb39810ff74c4712fb945f8

      SHA512

      ae71611ae61345419b7e293e70f4253a860089799deddc712bd223c3b596faa814626a82a0dabce5fe2add988cfd03050275e4d7a9d3851b75d1d4bd3ba0fae8

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json
      Filesize

      11KB

      MD5

      c90de6d33e637a7ad95e72e299625401

      SHA1

      237dec5138790e21b5c21f3250dec6400c0dfb00

      SHA256

      91c4fb7d6b72395cf602f8c8d04dc867fc4d55f712029caa4fb172efb676057a

      SHA512

      9dfea2563ae5f63b3f54c8eeeeba905c2dfb67a0042c2604fcb50b25a75dc3d7c004fc75b40634950b0dca19b89682b3302389977dba0b93c4cd03e7d427fdbd

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
      Filesize

      1KB

      MD5

      ec7ee8f6bd4504f7a104cb6916a08ebf

      SHA1

      9974e1c9ca852b7576d76a2250b3cbd736469c1f

      SHA256

      9c33558aec4e29246c8d3f05572edc0edf5ea51ab81b0fd18038ee0c4ce21bd8

      SHA512

      4065a52bb593fd67be5291e0d6a0c3415fd58662b014fb2b2c3c4f28776b095b5fd360105b453a33a213968cbcc158b7bd6cdb8a25cfa91e18b902e6112636c9

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
      Filesize

      1KB

      MD5

      c373877b1e75eb927dc23ac3d2ec7ad6

      SHA1

      eadb378cc0f2ea585df5a171dc9bfeca28e848ff

      SHA256

      38821a6184eec4ffc86f2cc27d93b4066de2cc50b6d904a5f5d23a00e1678160

      SHA512

      66c28d86178cd9254f066ab864c04e51939314c6cd1f53a31ae0a9346b55b6a8c35d92e2299a5cf790a06f03173662db459596bcf1636fafbaec0647e05eca03

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
      Filesize

      1KB

      MD5

      61381368e1b6c7c2d0331bfa52b869d6

      SHA1

      8de2ab6cef1b67499d6a7d33a14309c073e633af

      SHA256

      527fa7ebe9dba0807023ecf28170a97e510ffdcfd9412cfe0014d136d53a6e8c

      SHA512

      99389f232c2563bb892f76b7d3e9a1f636da5c5fad46944d039e98dca69d72499e93a64e7528e7ee40161409c471550552dca0b0f9b20938c5f0244d54789a33

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
      Filesize

      1KB

      MD5

      3a92cac2a4c442815292d95560cf7908

      SHA1

      7bdb6531b164251bc2bc217478a3480edb69e7d3

      SHA256

      176304814e3e178319e1bbc2da541085431e2af18d4a3a38e5176e2e679c9151

      SHA512

      d020cda839854c0a47afb33fac6690ba8090e21c1b5a9055482f44f909bdc4a796b7d5d349c037de88e3c276bbde15a9d81ddfe3e2f784a60cca9d8fcb4102b6

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
      Filesize

      1KB

      MD5

      3f48e99d88ce881441b85025487871a2

      SHA1

      27c9423532cd5f8aa5d0b0f8835963ac555d1254

      SHA256

      079b92d7dca9b6f7da8311d312644364ac5125f531c70a3ecacbb0e248a0ba4c

      SHA512

      0e5049210ec1966f900b79c4eb9318361984cf8bb0f13cfa8edc7acf3aa0ca2c80b0e1916a458fb615b991b22ad35e4b89ef20882252c67cfcbf9b0fe3c69acf

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
      Filesize

      1KB

      MD5

      37d1611eea2306322bc03c152f9e4479

      SHA1

      c5366bcc052b2e8c7ef5c0a701390c069813e735

      SHA256

      22e2cc261b88bd9001e7dd061d01d74bc7cae4fb81cde3b5e6f817ad3428873d

      SHA512

      dc11f53451c2f33cc78adeb7b56b1d3eae50e1526571f13905a6d64ea6a8641e6e87dbf518b439efa15646dac1b9686b8b65762481e95d49666a6d867f9146b8

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
      Filesize

      1KB

      MD5

      3236659dc691b50c2763f92b356f19b2

      SHA1

      1584c3b10f96f7ab25c262752a6b683122578ce6

      SHA256

      5e6b0d6212e67333bb9c506016c7eb9e811b46b82563e55ea6e7bfceb79291cd

      SHA512

      e7536d4e9c963e77650d6c5fe3e234eb66762d296fdb01647151a69a9537c31896901cdbf700db0ddc04130574c1541e03151f5efaa4346c6961860605964190

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
      Filesize

      1KB

      MD5

      936c91df7712c431ff1cce4fb086dbb4

      SHA1

      aabc92703caf471c09bb718a176cdfd6e5cefe3a

      SHA256

      1d7b13b777bd965e1d3657854156190ec8d2c35a5140733af84b27bcad4e6f95

      SHA512

      84ea767132e2bb56e0c0dd0b481cac81efa02af521f6500e9a78b899ab7bef85ac9efc52ba3328314fdc62d5b5338a9f34c685de39f96f062516dbbd7578690c

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
      Filesize

      1KB

      MD5

      76d19817175c367e86105ec6ed978bd2

      SHA1

      008bdeadca953388c633d0024168ac0d01358a7e

      SHA256

      2db6eb6cda2bddf851db948f8cd40a5122bf9d44a80d7e9dede2dad4827ef265

      SHA512

      3e3334e5a1b2e250c9d73e4c6be1db6b668a91f397a416a9562c6f0889d0eee2ad3293e32cfa348855f4a754b07dd23b5b9b8064f8055be399e8bd55f5f57665

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
      Filesize

      1KB

      MD5

      4289652feb8f0fc0504b59fe1e385346

      SHA1

      7ed8539b9263a0254e3a373f02308d348e5f3238

      SHA256

      ba8ab11f1870d8a8c98f72bfd33950783dc85f6c1db4eb4f2a1afeb92ad97600

      SHA512

      56bd6ab87648afaab2afed162aacae4242d7bbefc4c8d4e9008bf25497d7dec76b8e7f959f23353ed9dc7419999b18296c077ca6ea59e72e267909943792aa3e

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
      Filesize

      1KB

      MD5

      736d6e187b67eea5473d829994bd4809

      SHA1

      8dd38672e879c7bb0a338b701e52dc3041736ebc

      SHA256

      f547926225d2ffadefa9ec2984a50b19ec0ce9df6c70025b380063e212653a91

      SHA512

      04a69d7b1edf77df3733b55004a0f430298f1e6a5b2a0dccaa5e2f972c15957ad39530478017e6995b0d4f19a23a0dc5e99001eb1f995e9e23795b42f5cb48b7

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
      Filesize

      1KB

      MD5

      55e67c58fc127621e3397244af7d0e9d

      SHA1

      a50ae19436b9848417a7987c054429320947c8da

      SHA256

      49c25ddddf5daee4d9a258ccd759184d8b110ea739eabcafa41fd4ceaccf9092

      SHA512

      3c85e75a7b05dc5cd3d838e32e6e1599f01b4fe5baafa992d8de0b4eb039aa2e9beae2a5d4606fb640a94be0dc5525a7d841ed99136ed8e55f47c446c1764981

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
      Filesize

      1KB

      MD5

      299607dc37266b82b972ba6ee5c19a3d

      SHA1

      5fac944ece0aef03ee1397eac5df5ec5451d2afe

      SHA256

      dfdd27e05806db3c02a3dcc415572fae4fea75b5d9b846cf1f814e5970141495

      SHA512

      db14fa1752dfbc592aedf9442344315362876e448ccb15af1a60034e67c8aabaa3b1aa4be941d03287526c7acf9fda9f8a5a0fcc7baa036aaad88009d5493602

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
      Filesize

      1KB

      MD5

      a31a75bb5420beacf20a13ef1f69bcfa

      SHA1

      1db2533a3a86997cb145406a16cf47b24e7d0c70

      SHA256

      c72775b9b63a9b0a280f1060b740f33f6c4e0500e867bb6cae3f4563ef70e925

      SHA512

      81c872cd22d01710c0de21b9a0823d535003198d07875edcd6c7d0510d036a84d7e17cfeeb12507e293b85640675b0095a77642224002efda389f3e2ca4b4e10

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
      Filesize

      1KB

      MD5

      8d3b8dc4ca32941d0fe3c4ef6808dbc1

      SHA1

      461d75f5377ae2b537118211b823136070e1cd6a

      SHA256

      e4eb6e1a72b46ab88844f8a4631d261088779ef522da8af0d122bd4a797cbe39

      SHA512

      5448ea87f13ed11bb79a00b97a8e30d56f0a4d45531791186e02f590efc95b1c0b1d9c473518cf7ebf9fc6051caa81b11a214fc9138cd37f857da31f7d2e47ce

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak
      Filesize

      1KB

      MD5

      008dfba0758c3e9e4162d3b1e6ed6f29

      SHA1

      fae65b5a2839944572436b76c1189952d5664851

      SHA256

      7759875618cbec6a5f8dd5ac8344fec61182481be30ee5acc7c51b764f524a6d

      SHA512

      0db3a8adc133b4b28dcf303a976588b9e3c38e51f2a9270299ec20cf4ae6d37d0cef195909dd2532266ed36b3086ec4210d94092deadedb410b61936f2c7c3b3

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json
      Filesize

      1KB

      MD5

      6dfa99f79a482ce747b29b7b24a60f2e

      SHA1

      9474ee0f10ddc0e07304364b1b1b61b122eea7c2

      SHA256

      2c2f4dc4d4073444b90059fd5db754e8606a4a9395bebea0211f739a2b0a9d7f

      SHA512

      f86c1efc923cff0b350af3df98adc0c9eccd659ef88e34252539c4825d5d237a7c63597eee9525cb25901a313b3fae9a0aa28e445bf1113ac47b25a088c94e97

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json
      Filesize

      1KB

      MD5

      0b87a24c65f0028ad2f9cfc297bf302f

      SHA1

      6c92302b6ad61607c790049dbdeb287302867b1a

      SHA256

      de19f4ad187f752a9a900550a71901a92c4e11e7c5ddbebe535a29a161b0b969

      SHA512

      a25da49cc703b3ec7eedf21ef726bf182876a23c751b68307314ba3e8d8f344c2d348f1c2cf899f19803a8aa6f5a8a91b91864d2feb9c32528d80044968f848e

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\config\VPNServerListConfig.json
      Filesize

      125B

      MD5

      31bc330dbc5b066c5a0a7091bce95c97

      SHA1

      3177521c4f418d91153ab33705bf235fd2f95662

      SHA256

      46320a9a21530913a5af907a0b841db655e2e1ccf7e0a8df248a632c2651f05e

      SHA512

      06d04d37994e30199a548d9cf30ac9bf7afd5387cdf47ada1f2e5323c7812efff294365b7e2a38a6321d537ee4b1d5e64b146254cff1a372063f96e8f4489ca2

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\dds_tmp\D1B.tmp
      Filesize

      1.1MB

      MD5

      3b337c2d41069b0a1e43e30f891c3813

      SHA1

      ebee2827b5cb153cbbb51c9718da1549fa80fc5c

      SHA256

      c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7

      SHA512

      fdb3012a71221447b35757ed2bdca6ed1f8833b2f81d03aabebd2cd7780a33a9c3d816535d03c5c3edd5aaf11d91156842b380e2a63135e3c7f87193ad211499

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\dds_tmp\D1F.tmp
      Filesize

      504KB

      MD5

      b5d0f85e7c820db76ef2f4535552f03c

      SHA1

      91eff42f542175a41549bc966e9b249b65743951

      SHA256

      3d6d6e7a6f4729a7a416165beabda8a281afff082ebb538df29e8f03e1a4741c

      SHA512

      5246ebeaf84a0486ff5adb2083f60465fc68393d50af05d17f704d08229ce948860018cbe880c40d5700154c3e61fc735c451044f85e03d78568d60de80752f7

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\dds_tmp\D37.tmp
      Filesize

      1.8MB

      MD5

      804b9539f7be4ece92993dc95c8486f5

      SHA1

      ec3ca8f8d3cd2f68f676ad831f3f736d9c64895c

      SHA256

      76d0da51c2ed6ce4de34f0f703af564cbefd54766572a36b5a45494a88479e0b

      SHA512

      146c3b2a0416ac19b29a281e3fc3a9c4c5d6bdfc45444c2619f8f91beb0bdd615b26d5bd73f0537a4158f81b5eb3b9b4605b3e2000425f38eeeb94aa8b1a49f2

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\dds_tmp\D39.tmp
      Filesize

      68KB

      MD5

      54dde63178e5f043852e1c1b5cde0c4b

      SHA1

      a4b6b1d4e265bd2b2693fbd9e75a2fc35078e9bd

      SHA256

      f95a10c990529409e7abbc9b9ca64e87728dd75008161537d58117cbc0e80f9d

      SHA512

      995d33b9a1b4d25cd183925031cffa7a64e0a1bcd3eb65ae9b7e65e87033cd790be48cd927e6fa56e7c5e7e70f524dccc665beddb51c004101e3d4d9d7874b45

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\dds_tmp\D3B.tmp
      Filesize

      116KB

      MD5

      699dd61122d91e80abdfcc396ce0ec10

      SHA1

      7b23a6562e78e1d4be2a16fc7044bdcea724855e

      SHA256

      f843cd00d9aff9a902dd7c98d6137639a10bd84904d81a085c28a3b29f8223c1

      SHA512

      2517e52f7f03580afd8f928c767d264033a191e831a78eed454ea35c9514c0f0df127f49a306088d766908af7880f713f5009c31ce6b0b1e4d0b67e49447bfff

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\dds_tmp\D47.tmp
      Filesize

      2.7MB

      MD5

      efb9a5a5685cb47a17e5ae02835cabdc

      SHA1

      4d2b6d30d34bd0fe875de38f6f3f1f84079dbcdc

      SHA256

      29ad44181749bbff2731e84b2c4cbdc296d3b467145e1b4c79a2b0b714bd5aae

      SHA512

      8a9274c35c3b1e10a8720604ab1ef3cd2311cdf9e4a542747cb771a3d4e77c7ebffad2d049e2dc577e47228d6503039fe5286f1f7e8a77747313f210f2b231c8

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\Actions.dll
      Filesize

      4.5MB

      MD5

      f802ae578c7837e45a8bbdca7e957496

      SHA1

      38754970ba2ef287b6fdf79827795b947a9b6b4d

      SHA256

      5582e488d79a39cb9309ae47a5aa5ecc5a1ea0c238b2b2d06c86232d6ce5547b

      SHA512

      9b097abeafe0d59ed9650f18e877b408eda63c7ec7c28741498f142b10000b2ea5d5f393361886ba98359169195f2aceeee45ff752aa3c334d0b0cc8b6811395

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\BrowserSDKDLL.dll
      Filesize

      5.4MB

      MD5

      956b145931bec84ebc422b5d1d333c49

      SHA1

      9264cc2ae8c856f84f1d0888f67aea01cdc3e056

      SHA256

      c726b443321a75311e22b53417556d60aa479bbd11deb2308f38b5ad6542d8d3

      SHA512

      fb9632e708cdae81f4b8c0e39fed2309ef810ca3e7e1045cf51e358d7fdb5f77d4888e95bdd627bfa525a8014f4bd6e1fbc74a7d50e6a91a970021bf1491c57c

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\ig.exe
      Filesize

      1.8MB

      MD5

      ffe5a249402aecd1d0b141012ef5b3cf

      SHA1

      9fe9b21390d35a0f82097fddaf1ee18e91fd2f2d

      SHA256

      1acc1c8c918e0ac6cdb4fc41d96339959d42a71947a02f573686ee091606ac57

      SHA512

      1f7427472ca3f8a9abf06d761595fadca59b77ccea93477e6d71546a1385d654817cb356585dc05499ef87f61c504511399620852e95a46601f31fc6fa05f2d7

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\sample.dll
      Filesize

      528KB

      MD5

      ad5afe7fe3eac12a647f73aeb3b578bf

      SHA1

      29c482e6b9dd129309224b51297bff65c8914119

      SHA256

      7d2c7bc745e07d54f1c26c06d7438eb40ec6f5d17dfa15928b67d447f4c63747

      SHA512

      5be9f8384cc22bb7d69d8e532e7025675db16777b2d01ca1819a6e3d8c7daaaaa23d842d338d55d74eb9973e230a8f9a11ce7524667fee09b18fbdcb5a49289f

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\SdkDbUpdatrV5.dll
      Filesize

      2.6MB

      MD5

      52c4aa7e428e86445b8e529ef93e8549

      SHA1

      72508ba29ff3becbbe9668e95efa8748ce69aa3f

      SHA256

      6050d13b465417dd38cc6e533f391781054d6d04533baed631c4ef4cea9c7f63

      SHA512

      f30c6902de6128afbaaed58b7d07e1a0a674f0650d02a1b98138892abcab0da36a08baa8ca0aba53f801f91323916e4076bda54d6c2dc44fdad8ab571b4575f7

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\expapply64.dll
      Filesize

      473KB

      MD5

      76a6c5124f8e0472dd9d78e5b554715b

      SHA1

      88ab77c04430441874354508fd79636bb94d8719

      SHA256

      d23706f8f1c3fa18e909fe028d612d56df7cd4f9ad0c3a2b521cb58e49f3925d

      SHA512

      35189cc2bf342e9c6e33fd036f19667398ac53c5583c9614db77fb54aadf9ac0d4b96a3e5f41ec7e8e7f3fe745ae71490bdcf0638d7410b12121e7a4312fae9e

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\mbupdatrV5.exe
      Filesize

      5.9MB

      MD5

      e23e61a546103001426c847d66597c47

      SHA1

      86e64fe9e604b4abf95330c6a498c6f6ed0331de

      SHA256

      a603dde8953bf95ed32da8ff8392b436a09fca3c47856478a79be874e11c9142

      SHA512

      9acb31bd41250cc6b5748f144af2f59c2bb9c09ff18d5452e2fe8e9dce8e8c2f10bd3bbbcb148cb8996ac991641492b7722c386fb64c1d193d89a46bda0ec75c

      Download Submit

    • C:\ProgramData\Malwarebytes\MBAMService\version.dat
      Filesize

      26B

      MD5

      635bee2e6904afa674aac3e78afe2146

      SHA1

      349ac563e7356168d40769bd0fd1774d91cb87f5

      SHA256

      2e78a019ada78a2d50cddfdebd5045609cd45216594139142152eed90bcdd258

      SHA512

      e988c2ec1d1cf37e237660b3dcc9fda87e340214e727a09a824cac05a8da37e577d3513941e1f9330e98bfae5b60c03abfd57daee3837e74973e52228beee0dc

      Download Submit

    • C:\Windows\System32\CatRoot2\dberr.txt
      Filesize

      16KB

      MD5

      28cb9c1bc8ed845cc43f249b190ca744

      SHA1

      7ffe72cdc6cd3012c6702f3cd719b8746912c3a4

      SHA256

      0bbf9e126357690131fcc7dc3955c716d2a05355696f1775c2f838d1b19b4432

      SHA512

      f613c82c590814045bab2516d9c3698544ed6abcd1127bf2bcb8edb1dab0b53a797f2f52e924f4e2d06f6725c83790217482276206238d9aa587223ef83d0cdc

      Download Submit

    • C:\Windows\System32\catroot2\dberr.txt
      Filesize

      17KB

      MD5

      22c4b768d2aa5059b06e95e943d2500c

      SHA1

      e8ce77f3b6683f05ec028342e16fe653839d7100

      SHA256

      6c05c310a980fd90fa64c435eebb79598518227d898719a7d5578a02f0dd2d62

      SHA512

      845ce6ef9bd1e031833b4fb6e88ac9859b7d31018cb6f0ffd2b35b172c99ae0408dc9814586875c53923ecdb4e51cb8187864b39ccf1a13658de1b17eae09546

      Download Submit

    • C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9EC3B71635F8BA3FC68DE181A104A0EF_10CFC0D4C45D2E76B7EA49C8C22BEDFE
      Filesize

      5B

      MD5

      5bfa51f3a417b98e7443eca90fc94703

      SHA1

      8c015d80b8a23f780bdd215dc842b0f5551f63bd

      SHA256

      bebe2853a3485d1c2e5c5be4249183e0ddaff9f87de71652371700a89d937128

      SHA512

      4cd03686254bb28754cbaa635ae1264723e2be80ce1dd0f78d1ab7aee72232f5b285f79e488e9c5c49ff343015bd07bb8433d6cee08ae3cea8c317303e3ac399

      Download Submit

    • C:\Windows\System32\drivers\mbam.sys
      Filesize

      76KB

      MD5

      113e213914c40631aedef185984c5629

      SHA1

      57bf886bfe1e4d765ea43e4c91709a5c4a9a024a

      SHA256

      d314cea3ba19c49342763fca6b64a33f12d730a8fa531ed9f7e75675035ba004

      SHA512

      76d7286963f28430d8a9bc3b59adf209b5fceb6a5248b7be54c60fff0b931ba2cf46a779f7e66008baa0853ad6ce55a4b9dd56e33574230d1e2588f7679630b8

      Download Submit

    • C:\Windows\Temp\MBInstallTemp28b6afc33a4e11efa99e4aa38301372e\7z.dll
      Filesize

      1.6MB

      MD5

      4da585f081e096a43a574f4f4167947e

      SHA1

      38c81c6deae0e6d35c64c060b26271413a176a49

      SHA256

      623e628393bc4b8131c1f4302b195429dfa67e890d3325ceaa56940660052b1b

      SHA512

      0fe168bf1661691dbaa103e478dd7e46b476db094bf1938bf1ad12ddb8a8f371bf611ff504d2eb3ac319862444cc64a27ebee8735aa3752aa32a399b09427243

      Download Submit

    • C:\Windows\Temp\MBInstallTemp28b6afc33a4e11efa99e4aa38301372e\ctlrpkg\Malwarebytes_Assistant.runtimeconfig.json
      Filesize

      372B

      MD5

      d94cf983fba9ab1bb8a6cb3ad4a48f50

      SHA1

      04855d8b7a76b7ec74633043ef9986d4500ca63c

      SHA256

      1eca0f0c70070aa83bb609e4b749b26dcb4409784326032726394722224a098a

      SHA512

      09a9667d4f4622817116c8bc27d3d481d5d160380a2e19b8944bdd1271a83f718415ce5e6d66e82e36819e575ec1b55f19c45213e0013b877b8d61e6feb9d998

      Download Submit

    • C:\Windows\Temp\MBInstallTemp28b6afc33a4e11efa99e4aa38301372e\ctlrpkg\mbae64.sys
      Filesize

      154KB

      MD5

      95515708f41a7e283d6725506f56f6f2

      SHA1

      9afc20a19db3d2a75b6915d8d9af602c5218735e

      SHA256

      321058a27d7462e55e39d253ad5d8b19a9acf754666400f82fe0542f33e733c6

      SHA512

      d9230901adeecb13b1f92287abe9317cdac458348885b96ef6500960793a7586c76ae374df053be948a35b44abe934aa853975a6ccd3788f93909903cc718c08

      Download Submit

    • C:\Windows\Temp\MBInstallTemp28b6afc33a4e11efa99e4aa38301372e\dbclspkg\MBAMCoreV5.dll
      Filesize

      6.3MB

      MD5

      0ccbda151fcaab529e1eeb788d353311

      SHA1

      0b33fbce5034670fbd1e3a4aeac452f2a2ae16eb

      SHA256

      2a6ac5a8677bd1b410420183169b9ca9ec87dbb78ce0f11ebac2bfa022df7c70

      SHA512

      1bf9b8849b27491ecadfb4caf4e61926f9a0a8479c247a2281ba2d7c1ae0587251330ee29cc053630047e279ef6b52d3a125e21144b9688f1328f101bfc3c2e9

      Download Submit

    • C:\Windows\Temp\MBInstallTemp28b6afc33a4e11efa99e4aa38301372e\dotnetpkgtmp\shared\Microsoft.NETCore.App\6.0.28\mscordaccore.dll
      Filesize

      1.3MB

      MD5

      3143ffcfcc9818e0cd47cb9a980d2169

      SHA1

      72f1932fda377d3d71cb10f314fd946fab2ea77a

      SHA256

      b7fb9547e4359f6c116bd0dbe36a8ed05b7a490720f5a0d9013284be36b590b7

      SHA512

      904800d157eb010e7d17210f5797409fea005eed46fbf209bca454768b28f74ff3ff468eaad2cfd3642155d4978326274331a0a4e2c701dd7017e56ddfe5424b

      Download Submit

    • C:\Windows\Temp\MBInstallTemp28b6afc33a4e11efa99e4aa38301372e\servicepkg\MBAMService.exe
      Filesize

      8.5MB

      MD5

      c02dea5bcab50ce7b075c8db8739dbe1

      SHA1

      d1d08a208e00567e62233a631176a5f9912a5368

      SHA256

      c264dd072a5c7954667804611bcc8a0708125ed907b1cf2f8f86434df1a125dd

      SHA512

      74bb2b82d0d2bad4e26138304d4e4ad6379acf19f8aa13aacc749901e7381281d59720d7bfc3c6df0c835d805f134ed08fcde47a79c4c5384a92abeaa4c89f4c

      Download Submit

    • C:\Windows\Temp\MBInstallTemp28b6afc33a4e11efa99e4aa38301372e\servicepkg\mbamelam.cat
      Filesize

      10KB

      MD5

      60608328775d6acf03eaab38407e5b7c

      SHA1

      9f63644893517286753f63ad6d01bc8bfacf79b1

      SHA256

      3ed5a1668713ef80c2b5599b599f1434ad6648999f335cf69757ea3183c70c59

      SHA512

      9f65212121b8a5d1a0625c3baa14ef04a33b091d26f543324333e38dcdb903e02ccc4d009e22c2e85d2f61d954e0b994c2896e52f685003a6ef34758f8a650c7

      Download Submit

    • C:\Windows\Temp\MBInstallTemp28b6afc33a4e11efa99e4aa38301372e\servicepkg\mbamelam.inf
      Filesize

      2KB

      MD5

      c481ad4dd1d91860335787aa61177932

      SHA1

      81633414c5bf5832a8584fb0740bc09596b9b66d

      SHA256

      793626d240fd8eefc81b78a57c8dfe12ea247889b6f07918e9fd32a7411aa1c3

      SHA512

      d292e028936412f07264837d4a321ecfa2f5754d4048c8bcf774a0e076e535b361c411301558609d64c71c1ce9b19e6041efa44d201237a7010c553751e1e830

      Download Submit

    • C:\Windows\Temp\MBInstallTemp28b6afc33a4e11efa99e4aa38301372e\servicepkg\mbamelam.sys
      Filesize

      20KB

      MD5

      9e77c51e14fa9a323ee1635dc74ecc07

      SHA1

      a78bde0bd73260ce7af9cdc441af9db54d1637c2

      SHA256

      b5619d758ae6a65c1663f065e53e6b68a00511e7d7accb3e07ed94bfd0b1ede0

      SHA512

      a12ccf92bead694f5d3cba7ff7e731a2f862198efc338efc7f33a882fe0eb7499fb3fb533538d0a823e80631a7ca162962fbdfd78e401e3255672910b7140186

      Download Submit