Overview

overview

10

Static

static

10

MBSetup.exe

windows7-x64

8

MBSetup.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    110s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-07-2024 20:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    MBSetup.exe

  • Size

    2.5MB

  • MD5

    8611a0d47266ce8d473d540bd6534ffc

  • SHA1

    8804544c8ac023d89783d3d27b8c00b11dd8cbb4

  • SHA256

    a573205f27cd8a421e33322a41037ddf74d4f9cedc574c86dea6550a8f065143

  • SHA512

    8f4291ebb1b8cb5561b857d3ea2418c503f79b37b201f017d04a3c49746bfdc29abad5cfef3f2ce150fa8163824ac0a649a24386aee4562940d394f6514e4b7c

  • SSDEEP

    49152:OE8I6oEK7uzgRTvnFjStQyfvE0Z3R0nxiIq2dseYGfXH:OE8IjzuzgFt7KtQRq2VXH

Score
10/10
defense_evasiondiscoverypersistenceprivilege_escalationspywarestealer

Malware Config

Signatures

  • Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs
  • Drops file in Drivers directory 9 IoCs
  • Modifies RDP port number used by Windows 1 TTPs
  • Sets service image path in registry 2 TTPs 2 IoCs
    persistence
  • Checks BIOS information in registry 2 TTPs 6 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Impair Defenses: Safe Mode Boot 1 TTPs 2 IoCs
    defense_evasion
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Downloads MZ/PE file
  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops file in System32 directory 64 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 5 IoCs
  • Executes dropped EXE 14 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks SCSI registry key(s) 3 TTPs 26 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 8 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Delays execution with timeout.exe 1 IoCs
    evasion
  • Modifies Internet Explorer settings 1 TTPs 5 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 24 IoCs
    evasionspywaretrojan
  • Script User-Agent 1 IoCs

    Uses user-agent string associated with script host/environment.

  • Suspicious behavior: EnumeratesProcesses 30 IoCs
  • Suspicious behavior: LoadsDriver 11 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 28 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:3432
      • C:\Users\Admin\AppData\Local\Temp\MBSetup.exe
        "C:\Users\Admin\AppData\Local\Temp\MBSetup.exe"
        2⤵
        • Suspicious use of NtCreateUserProcessOtherParentProcess
        • Drops file in Drivers directory
        • Checks BIOS information in registry
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:1628
        • C:\Windows\SysWOW64\cmd.exe
          cmd.exe /C timeout /t 1 & "C:\Program Files\Mozilla Firefox\firefox.exe" -install -extension "C:\Users\Admin\AppData\Local\Temp\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi"
          3⤵
          • Suspicious use of WriteProcessMemory
          PID:1684
          • C:\Windows\SysWOW64\timeout.exe
            timeout /t 1
            4⤵
            • Delays execution with timeout.exe
            PID:928
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -install -extension "C:\Users\Admin\AppData\Local\Temp\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi"
            4⤵
            • Suspicious use of WriteProcessMemory
            PID:1688
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -install -extension C:\Users\Admin\AppData\Local\Temp\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi
              5⤵
              • Checks processor information in registry
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of SendNotifyMessage
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:4740
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4740.0.566624912\106463546" -parentBuildID 20230214051806 -prefsHandle 1820 -prefMapHandle 1712 -prefsLen 22076 -prefMapSize 235121 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3768eb99-1ba8-4f8f-b179-85938c1e62fb} 4740 "\\.\pipe\gecko-crash-server-pipe.4740" 1900 23a21824358 gpu
                6⤵
                  PID:3132
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4740.1.1625563785\313329281" -parentBuildID 20230214051806 -prefsHandle 2464 -prefMapHandle 2460 -prefsLen 22927 -prefMapSize 235121 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4daf7687-1d97-4016-85e0-30c682414c68} 4740 "\\.\pipe\gecko-crash-server-pipe.4740" 2492 23a14a86658 socket
                  6⤵
                    PID:2376
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4740.2.208450710\1295915961" -childID 1 -isForBrowser -prefsHandle 3324 -prefMapHandle 3320 -prefsLen 22965 -prefMapSize 235121 -jsInitHandle 1160 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b976252d-ebc8-4ffc-b1af-813f9b69e20c} 4740 "\\.\pipe\gecko-crash-server-pipe.4740" 3336 23a2445a558 tab
                    6⤵
                      PID:2920
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4740.3.1491140104\1591815455" -childID 2 -isForBrowser -prefsHandle 2808 -prefMapHandle 3020 -prefsLen 27616 -prefMapSize 235121 -jsInitHandle 1160 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {14075dae-6884-4c5c-8606-9c48756445f4} 4740 "\\.\pipe\gecko-crash-server-pipe.4740" 3012 23a14a82958 tab
                      6⤵
                        PID:4912
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4740.4.1106987608\1174683133" -childID 3 -isForBrowser -prefsHandle 5152 -prefMapHandle 5148 -prefsLen 27696 -prefMapSize 235121 -jsInitHandle 1160 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1d7a1eba-b123-48c7-a69a-b7297db3a307} 4740 "\\.\pipe\gecko-crash-server-pipe.4740" 5136 23a26792b58 tab
                        6⤵
                          PID:3152
                        • C:\Program Files\Mozilla Firefox\firefox.exe
                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4740.5.973423435\1778596165" -childID 4 -isForBrowser -prefsHandle 5368 -prefMapHandle 5364 -prefsLen 27696 -prefMapSize 235121 -jsInitHandle 1160 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0df56998-baa3-4c39-b728-90c2f377d7ad} 4740 "\\.\pipe\gecko-crash-server-pipe.4740" 5284 23a267d4858 tab
                          6⤵
                            PID:4336
                          • C:\Program Files\Mozilla Firefox\firefox.exe
                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4740.6.154715316\1089407874" -childID 5 -isForBrowser -prefsHandle 5500 -prefMapHandle 5504 -prefsLen 27696 -prefMapSize 235121 -jsInitHandle 1160 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0b7ada89-37ad-4ef5-a4e0-650a4b174e63} 4740 "\\.\pipe\gecko-crash-server-pipe.4740" 5576 23a267d4b58 tab
                            6⤵
                              PID:4116
                    • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
                      "C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe"
                      2⤵
                      • Executes dropped EXE
                      PID:5372
                      • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
                        "C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe"
                        3⤵
                        • Executes dropped EXE
                        PID:5424
                  • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
                    "C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe"
                    1⤵
                    • Drops file in Drivers directory
                    • Impair Defenses: Safe Mode Boot
                    • Enumerates connected drives
                    • Drops file in Program Files directory
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Modifies Internet Explorer settings
                    • Modifies data under HKEY_USERS
                    • Modifies system certificate store
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of WriteProcessMemory
                    PID:4272
                    • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
                      "C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe" /installmbtun
                      2⤵
                      • Drops file in System32 directory
                      • Drops file in Windows directory
                      • Executes dropped EXE
                      • Loads dropped DLL
                      PID:2648
                    • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
                      "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" /Service /Protected
                      2⤵
                      • Drops file in Drivers directory
                      • Executes dropped EXE
                      • Modifies registry class
                      • Suspicious use of AdjustPrivilegeToken
                      PID:4024
                  • C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
                    1⤵
                    • Drops file in Windows directory
                    • Checks SCSI registry key(s)
                    • Suspicious use of AdjustPrivilegeToken
                    • Suspicious use of WriteProcessMemory
                    PID:2604
                    • C:\Windows\system32\DrvInst.exe
                      DrvInst.exe "4" "9" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf" "9" "4ba9030c7" "000000000000014C" "Service-0x0-3e7$\Default" "0000000000000148" "208" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun"
                      2⤵
                      • Drops file in System32 directory
                      • Drops file in Windows directory
                      • Checks SCSI registry key(s)
                      • Modifies data under HKEY_USERS
                      PID:3648
                  • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
                    "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"
                    1⤵
                    • Drops file in Drivers directory
                    • Sets service image path in registry
                    • Checks BIOS information in registry
                    • Enumerates connected drives
                    • Drops file in System32 directory
                    • Drops file in Program Files directory
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Checks processor information in registry
                    • Modifies Internet Explorer settings
                    • Modifies data under HKEY_USERS
                    • Modifies system certificate store
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    PID:1724
                    • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
                      "C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe" nowindow
                      2⤵
                      • Checks computer location settings
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious behavior: EnumeratesProcesses
                      • Suspicious use of FindShellTrayWindow
                      • Suspicious use of SendNotifyMessage
                      PID:1404
                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
                      ig.exe reseed
                      2⤵
                      • Executes dropped EXE
                      PID:6016
                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
                      ig.exe reseed
                      2⤵
                      • Executes dropped EXE
                      PID:6032
                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
                      ig.exe reseed
                      2⤵
                      • Executes dropped EXE
                      PID:6036
                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
                      ig.exe reseed
                      2⤵
                      • Executes dropped EXE
                      PID:5852
                    • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
                      ig.exe reseed
                      2⤵
                      • Executes dropped EXE
                      PID:6052
                    • C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe
                      "C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe" /wac 0 /status on true /updatesubstatus none /scansubstatus none /settingssubstatus none
                      2⤵
                      • Executes dropped EXE
                      • Modifies data under HKEY_USERS
                      PID:2684
                    • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\updatrpkg\mbupdatrV5.exe
                      "C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\updatrpkg\mbupdatrV5.exe" "C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE" "C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\config\UpdateControllerConfig.json" "C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE" "C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbclsupdate\staging" /db:dbupdate /su:no
                      2⤵
                      • Checks BIOS information in registry
                      • Executes dropped EXE
                      • Modifies data under HKEY_USERS
                      PID:4504

                  Network

                  MITRE ATT&CK Enterprise v15

                  Reconnaissance

                  Resource Development

                  Initial Access

                  Execution

                  Persistence

                  Boot or Logon Autostart Execution

                  1
                  T1547

                  Registry Run Keys / Startup Folder

                  1
                  T1547.001

                  Event Triggered Execution

                  1
                  T1546

                  Component Object Model Hijacking

                  1
                  T1546.015

                  Privilege Escalation

                  Boot or Logon Autostart Execution

                  1
                  T1547

                  Registry Run Keys / Startup Folder

                  1
                  T1547.001

                  Event Triggered Execution

                  1
                  T1546

                  Component Object Model Hijacking

                  1
                  T1546.015

                  Defense Evasion

                  Impair Defenses

                  1
                  T1562

                  Safe Mode Boot

                  1
                  T1562.009

                  Modify Registry

                  3
                  T1112

                  Subvert Trust Controls

                  1
                  T1553

                  Install Root Certificate

                  1
                  T1553.004

                  Credential Access

                  Unsecured Credentials

                  1
                  T1552

                  Credentials In Files

                  1
                  T1552.001

                  Discovery

                  Peripheral Device Discovery

                  2
                  T1120

                  Query Registry

                  7
                  T1012

                  System Information Discovery

                  6
                  T1082

                  Lateral Movement

                  Remote Services

                  1
                  T1021

                  Remote Desktop Protocol

                  1
                  T1021.001

                  Collection

                  Data from Local System

                  1
                  T1005

                  Command and Control

                  Exfiltration

                  Impact

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\Actions.dll
                    Filesize

                    4.5MB

                    MD5

                    f802ae578c7837e45a8bbdca7e957496

                    SHA1

                    38754970ba2ef287b6fdf79827795b947a9b6b4d

                    SHA256

                    5582e488d79a39cb9309ae47a5aa5ecc5a1ea0c238b2b2d06c86232d6ce5547b

                    SHA512

                    9b097abeafe0d59ed9650f18e877b408eda63c7ec7c28741498f142b10000b2ea5d5f393361886ba98359169195f2aceeee45ff752aa3c334d0b0cc8b6811395

                    Download Submit

                  • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\CleanControllerImpl.dll
                    Filesize

                    6.6MB

                    MD5

                    87eb6bd2e3b35af6e3159f1808f5979d

                    SHA1

                    857bca1bad4f27ebb01fe396ed6f7330531f41fa

                    SHA256

                    63df6ea9e767a1c10af87b2d60d467aec4af5948db457746406eb8abbbc86fba

                    SHA512

                    1b16c97a77590d1eb190c2848ed794d3b34a361374f14490c8c7ed21a559f0a1fdcd94dc60b2fffa737e746c9babaf9623ffdfe7e5aab9fa2c85e7c856ce0a55

                    Download Submit

                  • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\CloudControllerImpl.dll
                    Filesize

                    5.0MB

                    MD5

                    6bb324588fb6eec8b096a6027719cad8

                    SHA1

                    c18276d9144b608ebfc51b8b29f625a064f4260f

                    SHA256

                    c510c6685c0669648e8bc97d97bbd754360ae501f3b0064b1b49a30082ca00fa

                    SHA512

                    0ce367382fc9be77c130dfdbd2a7b9a41f097f40a6220b3c464606a11f3f99d1c93501b5a1a5e464e29149b306b6d38d39fa33394075277364d105bb8fabecc9

                    Download Submit

                  • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\LicenseControllerImpl.dll
                    Filesize

                    4.8MB

                    MD5

                    215eb0aaf99043f36c9132cbe49204e5

                    SHA1

                    2db6e49c8c32cbfc560f2d24f5223ff23d18b12d

                    SHA256

                    15855cbcfd3188012c3748991041c4b7e8f65ed3278f0ad74aba1a1bb9ce0bf9

                    SHA512

                    4bc9084e61a52cf8ce189bd7234d29f3105e4baa9854296eec51b2e892031a12a36259c3e94aeed404fdaa887b2abfe95d6b5af686704c8c9dab7d7303b3871d

                    Download Submit

                  • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
                    Filesize

                    4.2MB

                    MD5

                    80202b21a6f3df9d0d54f20a381df93c

                    SHA1

                    6915dcc75d0b84e5db40656d6382cb217a1996c2

                    SHA256

                    4217a62ea3df3bd98e40d205b4fb5f9673c340c366551adb771ff3e34e7bdcfc

                    SHA512

                    8d691deae1f7c5243d045940f7f728a874e72550859b291119c9b951bd95232980dc2a1b3c19154c723c42e0aa93747a046f747bbc305941594477a39c2925f1

                    Download Submit

                  • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ScanControllerImpl.dll
                    Filesize

                    5.3MB

                    MD5

                    dc0faa2c37fe59718247f09c5e6c2259

                    SHA1

                    9874a8326e30ff36bcef268a61aed8970ad68aec

                    SHA256

                    23feea6a672a097ae98ee9dfcc19fdd233a2a6b35caf62be773ad9b17ce0afd7

                    SHA512

                    3cbca3cb26d1c8c29edb421c9e131b55e0c20c0cf446b7b65c6b7d209a003a870ee63d6a3b725eaa660f6d8d8c9a0b0a3f90045e3c255957ebee3005f650594e

                    Download Submit

                  • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\TelemetryControllerImpl.dll
                    Filesize

                    5.1MB

                    MD5

                    9b01265995faf3961871ff3c1727f05a

                    SHA1

                    80f0c87741e1c1f3525d9a5845d505270a3c13ca

                    SHA256

                    1544af37a65ff92a02a43076c5c053d611a1e372ccb499a65cf0e4a8dc104ada

                    SHA512

                    413a23b431423307b3178d10705b570936c471bc3a4ed3ea8a189d1818a4aac7e5cfbcad0ef158aea2bd7d089dcaebd3c67dc4c1f5bb9bf78b7b252229bdadae

                    Download Submit

                  • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\UpdateControllerImpl.dll
                    Filesize

                    4.3MB

                    MD5

                    26e2306862a3e09489e224b8c7c08b4a

                    SHA1

                    31b054b957d27ea4b2e3270ebfe7cf62e32890f8

                    SHA256

                    c8aca420097260a96d04398a90f7c346f0b1abf94a44ffa539050e4dd06259f0

                    SHA512

                    604c980476b386d5efad2ed273a840fb92dc40bcbee78c9f2fe9d300437978c8b47b2d44e903b43c3b1127c276fbf58fd823342850e6d3effc038acb0f6b1202

                    Download Submit

                  • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
                    Filesize

                    1.8MB

                    MD5

                    ffe5a249402aecd1d0b141012ef5b3cf

                    SHA1

                    9fe9b21390d35a0f82097fddaf1ee18e91fd2f2d

                    SHA256

                    1acc1c8c918e0ac6cdb4fc41d96339959d42a71947a02f573686ee091606ac57

                    SHA512

                    1f7427472ca3f8a9abf06d761595fadca59b77ccea93477e6d71546a1385d654817cb356585dc05499ef87f61c504511399620852e95a46601f31fc6fa05f2d7

                    Download Submit

                  • C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\pkgvers.dat
                    Filesize

                    75B

                    MD5

                    941861fd111cff46c5a1ec6c0aa9d4dd

                    SHA1

                    49fee370e37c6d476cf01a95bfe4b4591acf3406

                    SHA256

                    840f307cde76cefc37c54495d5924243e447c7ac2fdc9904771f6913fd99cdc3

                    SHA512

                    258732a11011a14609eab56ad057226a82c82efdfe7d3b96ec35b43f694bac15f071fee87cd886eb3e2e0ba176dbd7a802e9ad3a065d921cc46fd9785007e75a

                    Download Submit

                  • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\Global.nm
                    Filesize

                    335KB

                    MD5

                    a5b9aeecfc3c2357f4ccb924d8a36e44

                    SHA1

                    62e918339937879d95cdd333dc4b2a08684ecf92

                    SHA256

                    010cfedb630904df1378b574bb2dc9403e82bc4f33a25a8f740f0871a7678ae3

                    SHA512

                    0c0068e6e7b3b958098229f9ec3637ff012deb8f8875591b8410bbda529a179d59e354b605faa2bdf27fe1e1ed2cb6cd47cc55f15e27bc8bf19069b1936c648e

                    Download Submit

                  • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\Global.sr
                    Filesize

                    18.3MB

                    MD5

                    59a1c76c10385c09ffe56edf96b42f7f

                    SHA1

                    d67fdb95f664f5bbb5c188f9eaac73ac56917ee6

                    SHA256

                    4fb48907fe361b2f459f981c6b0a000148937440792dec9241992e0468adaaf6

                    SHA512

                    b79372a03795e5cef8ea8c7891c811c51edde30e6a11d63c2cf56f1464915374aeea78d6ac4c117ddef34e4c1fd3258433300e9b1c334b672879f3d31e98b0d9

                    Download Submit

                  • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\cfg.bin
                    Filesize

                    1KB

                    MD5

                    69ac80ec518ddfcb3428c91e1064f4ec

                    SHA1

                    0d28ef92f3b27a70dffaa780999dfdfca078de1f

                    SHA256

                    9345fe4378ab8bc156b8e87d59f76f5dbde8f2a554941d5697c1c5d7bab508d9

                    SHA512

                    6e91f24aae10fe9f872a9ac7c62a8ef86f9ceae7ef47d06d38d355f31d874d00a36527c08682b28ff4bd31040bfa5b2738ebc3dd732b74a01a0e764c549134ea

                    Download Submit

                  • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\clean.mbdb
                    Filesize

                    13KB

                    MD5

                    b7d81a6d5d8738e7f6c2253739b59398

                    SHA1

                    fec2cef56b1987f521bcd4e89b555c8119f84f5f

                    SHA256

                    7de661b04c1e8677e04cbc6b758a8cd9e5584fac65ed7ed13265c0c8823d630f

                    SHA512

                    964530ddd3e14726c16f69df7112ea0ed55d53e76c67c2187f5a609a32f1588d838aa3363c0ca10b6ec55f6c9c701daf1139965794678fbc5ef75ce522017f5c

                    Download Submit

                  • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dbmanifest2.dat
                    Filesize

                    924B

                    MD5

                    a5941fac2d8e20eea4c64c6c1b297627

                    SHA1

                    b3e37dd7f16f2c20558d722ed5d2fdc7fb59884b

                    SHA256

                    175dc605488f44725264c6298a5ac762d30a61dc87678459a3c7ff7705ad79a6

                    SHA512

                    e2ac46634736ab2c843c5684d3afc62d9b4cea4aef0e3b1d092d2d064d144783213ce7193f6048d6ba0084c1d3ef27765c9206ae12adce1cc96120d38800fedf

                    Download Submit

                  • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\dynconfig.dat
                    Filesize

                    39KB

                    MD5

                    10f23e7c8c791b91c86cd966d67b7bc7

                    SHA1

                    3f596093b2bc33f7a2554818f8e41adbbd101961

                    SHA256

                    008254ca1f4d6415da89d01a4292911de6135b42833156720a841a22685765dc

                    SHA512

                    2d1b21371ada038323be412945994d030ee8a9007db072484724616c8597c6998a560bc28886ebf89e2c8919fb70d76c98338d88832351823027491c98d48118

                    Download Submit

                  • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\exclusions.txt
                    Filesize

                    23KB

                    MD5

                    aef4eca7ee01bb1a146751c4d0510d2d

                    SHA1

                    5cf2273da41147126e5e1eabd3182f19304eea25

                    SHA256

                    9e87e4c9da3337c63b7f0e6ed0eb71696121c74e18a5da577215e18097715e2f

                    SHA512

                    d31d21e37b0048050b19600f8904354cff3f3ec8291c5a7a54267e14af9fb88dfb6d11e74a037cc0369ade8a8fb9b753861f3b3fb2219563e8ec359f66c042db

                    Download Submit

                  • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\mbdigsig2.dat
                    Filesize

                    514B

                    MD5

                    47c370930a72c98285dbb422b0aeb5bd

                    SHA1

                    f8d4c1cbfcf5a0cd86b1af5e9daa42fd6a3d3698

                    SHA256

                    3927942479886e0f0aff77cfabb11b025acc2643efb7e3ac3b1810376b31e119

                    SHA512

                    e098a44d55b309fd2c4db987c1e161909c684f5ee3433b018d3ad58559d0d067e6b590239971a8b09ea7d337377f44bdd2a763ef1d74b2a50083dafd84f6ec19

                    Download Submit

                  • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\prot.mbdb
                    Filesize

                    24B

                    MD5

                    546d9e30eadad8b22f5b3ffa875144bf

                    SHA1

                    3b323ffef009bfe0662c2bd30bb06af6dfc68e4d

                    SHA256

                    6089fbf0c0c1413f62e91dc9497bedc6d8a271e9dc761e20adc0dccf6f4a0c1f

                    SHA512

                    3478f5dcf7af549dd6fe48ad714604200de84a90120b16a32233b6d44fa7240f5f4e5fe803f54b86bbdfd10fa1bfdd88fb85eb6a78e23e426933f98d0a2565ec

                    Download Submit

                  • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\rdefs.mbdb
                    Filesize

                    24B

                    MD5

                    2f7423ca7c6a0f1339980f3c8c7de9f8

                    SHA1

                    102c77faa28885354cfe6725d987bc23bc7108ba

                    SHA256

                    850a4ea37a0fd6f68bf95422d502b2d1257264eb90cc38c0a3b1b95aa375be55

                    SHA512

                    e922ac8a7a2cde6d387f8698207cf5efbd45b646986a090e3549d97a7d552dd74179bd7ac20b7d246ca49d340c4c168982c65b4749df760857810b2358e7eb69

                    Download Submit

                  • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\rules.mbdb
                    Filesize

                    9.7MB

                    MD5

                    c352637bdedcdee69da818d9940e2d84

                    SHA1

                    16bbf468bacd63ec1609b4dc9e696bf2be54de49

                    SHA256

                    4e4b61106ad9be2d41ae692432409b444dfae5d833210b9b81be5d507f89dd4d

                    SHA512

                    2c6332ac539c0a3c5961bda5943a238d2fd9958cf12c3bc05b0f10d2a8bec690af8b74897404093232e474030c1b813ddd7130db2381e216edf3fe8a7a71e06c

                    Download Submit

                  • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\scan.mbdb
                    Filesize

                    876KB

                    MD5

                    de02044daf400396c2cc7991101d48ed

                    SHA1

                    9a0ebd4f34b45445105789d484e65af23999b9aa

                    SHA256

                    b806cf521fc94809f2b7fa092cd0b94d9ecaa984d038f458415157b18d0a7a2c

                    SHA512

                    4f7970c2a19baad06b0e47a3c09ba6052bd9f341282f7a66432a55ebc439c986123e61a641d644a824fc672d5468a5f621c2f837f8eb11f7f09641ebf00f2ccf

                    Download Submit

                  • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\tids.mbdb
                    Filesize

                    169KB

                    MD5

                    7fa243b51ad5436aaa43154eb1e83e7a

                    SHA1

                    76713b5300609c0b376f9e3324aeee4d57dde4bc

                    SHA256

                    a21ff5af7970d9b9a0aadf13a09d37bca943c6d2b6efe072b56ce6abdd776205

                    SHA512

                    2e6e94c306e36464952b1cc86615cdd0cd51fea19cd08cd92d231e94941031aa52c7b406288939fe95e8c9d694413ec6c3f18cf881b757b3d202f045b86f348b

                    Download Submit

                  • C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\wprot2.mbdb
                    Filesize

                    25.4MB

                    MD5

                    ab85b4ead4a4cf896819ab212560bc7e

                    SHA1

                    9ac27fddcea5458390cb2cabff05364a0643016f

                    SHA256

                    59ceb8c9a0dec242d70ccf31f114cb2639f48be3298e918ae13bde9de6bb9335

                    SHA512

                    3905eb71e97d1323f7cea2853e700b7aa1bcfecd1320cf1e56252be83deb3b2c6983c2c92af0f34b2b1c06953683ad670b0e445c8113fe388cdfcce37d95b37f

                    Download Submit

                  • C:\PROGRA~1\MALWAR~1\ANTI-M~1\mbtun\mbtun.cat
                    Filesize

                    10KB

                    MD5

                    8abff1fbf08d70c1681a9b20384dbbf9

                    SHA1

                    c9762e121e4f8a7ad931eee58ee60c8e9fc3ecb6

                    SHA256

                    9ceb410494b95397ec1f8fa505d071672bf61f81cc596b8eccd167a77893c658

                    SHA512

                    37998e0aee93ff47fe5b1636fce755966debe417a790e1aebd7674c86c1583feef04648a7bc79e4dedaabb731051f4f803932ac49ea0be05776c0f4d218b076f

                    Download Submit

                  • C:\PROGRA~1\MALWAR~1\ANTI-M~1\mbtun\mbtun.sys
                    Filesize

                    107KB

                    MD5

                    83d4fba999eb8b34047c38fabef60243

                    SHA1

                    25731b57e9968282610f337bc6d769aa26af4938

                    SHA256

                    6903e60784b9fa5d8b417f93f19665c59946a4de099bd1011ab36271b267261c

                    SHA512

                    47faab5fff3e3e2d2aea0a425444aa2e215f1d5bf97edee2a3bb773468e1092919036bcd5002357594b62519bf3a8980749d8d0f6402de0e73c2125d26e78f1e

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\ActionsShim.dll
                    Filesize

                    2.2MB

                    MD5

                    13ee270968b2eaf9d45770e831412c0a

                    SHA1

                    6f4bfee0efd52db649a9378298148fd5ae5001e1

                    SHA256

                    81a28988d59a8e75b771456f61aa3029f334f2a492da70f53bd93403122e2951

                    SHA512

                    36f9339f15bd1982fe196eaf23ed879db5fdf1cc1c41683a915d1ee9718053720c9794e77d093a51adf9c20f58b2f5191abeecef41ea87746933c845be48bcde

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
                    Filesize

                    8.6MB

                    MD5

                    8ef5fe48aa57a5c252d9bc09bc21d17a

                    SHA1

                    b1d73d06719c32163427ce69cabfd18630f20386

                    SHA256

                    75348e3dae5d4e878df0655583cc00281d7eab72b0b7a708dbd6fb9206315ffa

                    SHA512

                    7f8eac31a7cb9af960069785360e50686976f8f99ae709b0cfee6ed078dc9eaa80ba93ae1ea6d65998ca668e721162dbab237103c92ea38a76f6c8400e25d291

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
                    Filesize

                    2.9MB

                    MD5

                    46f875f1fe3d6063b390e3a170c90e50

                    SHA1

                    62b901749a6e3964040f9af5ddb9a684936f6c30

                    SHA256

                    1cf9d3512efffaa2290c105ac8b7534026604067c9b533e7b7df2e017569a4ec

                    SHA512

                    fdfb348061158f8133380e9a94215f4bfc0f6ce643a129d623cb8034c49144f1489de56cd076da645478506d9fbddc7590fe3d643622210084b15fdf0d16b557

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
                    Filesize

                    289KB

                    MD5

                    3cad9ed77b1f5f989a4ced18c506b5f4

                    SHA1

                    54b40391f0a390b38bb3cd637a018162d8172f02

                    SHA256

                    57c2751c98f2bc33e305bd1a061fec7043c2ee0899d46dea1acc2dd6b32cf193

                    SHA512

                    eaa4d99241088f417095447ea5c299f83b9638678fbb9e409bba4b444e6ea300541d668f9f6169377b208b2e50c8cbb76383da131366c81c080b944ca3eee0fa

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json
                    Filesize

                    621B

                    MD5

                    e7bc274ef7f3fecd64999c3780350b55

                    SHA1

                    41d9fbb0c5ec104ccf1122bc183b8f0b6b808d74

                    SHA256

                    e8aed2c8900dca4f18af6bc217c7d2f040465b5dd834126002db2adc5d85e71d

                    SHA512

                    b4c1ac5ffe1e2b974f2dc46706dad6357332f940aacfada4aaf152e9c1524ba60812b50c6d5db10a5215bae135b35f972e07a6daa6b4968da8e98de4150bb846

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json
                    Filesize

                    654B

                    MD5

                    bce9314245592b1ece72c203f94fdc1a

                    SHA1

                    cf872eba4392efd6b4c3ab01ccec4975d098691c

                    SHA256

                    5d9b5d9e90039bc67d301faf2f81c475d3e54dc7434573bf5b700f8e9c78458e

                    SHA512

                    1809f2e2e5641c40e50ff0a2f16514ebecdb76d5652e25431607dfd5d5f1d8c86ddcab78fb81c06b8ccae3f113f549813ca35944742cc9a4e7dec3cd1bd76c39

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\ctlrvers.dat
                    Filesize

                    8B

                    MD5

                    122f7cfa0873f645896d88bb90b0a019

                    SHA1

                    f654c66c0f1c9553a63cd4e0c7f6178148ecc9e0

                    SHA256

                    bd76430c4602fc44f068d599825d5a658081ade4fdaf2d8d37f0b7527bea80a8

                    SHA512

                    b5d80698b30560efe5f7f622d76cb542bdf62e176023a45cd2162f144babbd889920fa85339bd4afc5e4c716b8a7d2131baff8177e7e3bacf13d0e50e2bc63db

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\mb5uns.exe
                    Filesize

                    3.8MB

                    MD5

                    fc84388160f87641af2535e9c0a33e7a

                    SHA1

                    3165a98fe463ff0eb013e7e53a87e5a5970ef0f5

                    SHA256

                    6c8a390a7a577600cf6608c911057f577a56cf5a3f98b02e64d6929905ba12de

                    SHA512

                    fa96226fbb8466c89a412f31f1603c21070e3c321bdc5c8e7888bdaf88f5870b7347e2a0ec9ce36b4a7d90389bed46fb93ec922c40f093b8096b34b8e80a7e48

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll
                    Filesize

                    2.9MB

                    MD5

                    3bc4d2bb173c005c678da34697c17d99

                    SHA1

                    2e07b4f3af7dc82d8f7a5fdc920578f6e908a0cf

                    SHA256

                    fbcfade08f8d2617b6e9f2e279f81ce3b5e1fc0cce5bcfd927cde1335114f6da

                    SHA512

                    36864cef0ba96899d1c9ce088ae931b10461f1360a21fe8791b61acbd6ff1b30786a0f6745eac6acbdcfbcd3f05347aa1aa05fdaaf9e36e8fd0da3768ae78a17

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll
                    Filesize

                    2.7MB

                    MD5

                    b7e5071b317550d93258f7e1e13e7b6f

                    SHA1

                    2d08d78a5c29cf724bc523530d1a9014642bbc60

                    SHA256

                    467de01d7cee7ec54166b80658ff22f9feebdb1c24eaf1629cf40e4124508064

                    SHA512

                    9c35293c95c1a9141740ac99315605964aa37c4a42d3a11cae9e5649ff1427a9480d3d5e7f763212cf13db3511c5ea3c84e68f95f0067fe6339a9d3fb7b27c54

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\mbtun.dll
                    Filesize

                    2.8MB

                    MD5

                    2bbf63f1dab335f5caf431dbd4f38494

                    SHA1

                    90f1d818ac8a4881bf770c1ff474f35cdaa4fcd0

                    SHA256

                    f21a980316bd4c57c70e00840ab76d9ad412092d7d2d6a2cff4f1311f7c05364

                    SHA512

                    ebb9834323329dc01ba2c87e5fad1083a4cb86f5ed761cb63299ac5336a9843a1aadd42fbed706797c2295117af1c00f96806422338352653c8e0255fecc2fd5

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf
                    Filesize

                    1KB

                    MD5

                    5d1917024b228efbeab3c696e663873e

                    SHA1

                    cec5e88c2481d323ec366c18024d61a117f01b21

                    SHA256

                    4a350fc20834a579c5a58352b7a3aa02a454abbbd9eecd3cd6d2a14864a49cd8

                    SHA512

                    14b345f03284b8c1d97219e3dd1a3910c1e453f93f51753f417e643f50922e55c0e23aab1d437300e6c196c7017d7b7538de4850df74b3599e90f3941b40ab4a

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\offreg.dll
                    Filesize

                    113KB

                    MD5

                    2ccb84bed084f27ca22bdd1e170a6851

                    SHA1

                    16608b35c136813bb565fe9c916cb7b01f0b20af

                    SHA256

                    a538caf4ac94708ddb4240d38b1b99914ca3e82283f0d8a2290be28fc05eaccb

                    SHA512

                    0fd66d241bdebd0052f4972e85b42639e3c5a40affe23170b84bc4068dff8e84446898a77ebf7cc0bef97454abb788faccce508a68bc5e717980ef26d8436986

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt.cat
                    Filesize

                    11KB

                    MD5

                    cffd7ecf8765733aa7a2c36ca5f1eac0

                    SHA1

                    549b0974cf92676a7589466a3ee29e1dd45afa6d

                    SHA256

                    89c561a58d649d5f29fe1c576ca46245780369845df32045a64739b4056d8bb3

                    SHA512

                    47006f07c3270f358ce67c235739ebaa17b8fbd9a05da9f05a079322a003f8e6d704d3c5353e1a186df74b1bd6438526f6701a0c173563d676846c0f0f230be6

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt.inf
                    Filesize

                    2KB

                    MD5

                    358bb9bf66f2e514310dc22e4e3a4dc5

                    SHA1

                    87bfc1398e6756273eee909a0dfb4ef18b38d17c

                    SHA256

                    ff51780a5a854b2c18f71ae426cb066a13723ef6155e24f4910137c9e8dfdc17

                    SHA512

                    301ec5ec5c0813951843011f2204924240235494999136ea30a557cbf58146fc6043a8866b344fa7deb927d7c83d44e2aaf45adca7d221aba5d36715b9a63e09

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt.sys
                    Filesize

                    196KB

                    MD5

                    9c4bec17ba2add58348045dbc762ab67

                    SHA1

                    b00ed0ca3634a93a23f70e79bda67c945dc915b6

                    SHA256

                    9c3b11ba1d4e462d9470fa0b50a61fde9f00cf4adfafd8e8b19f1e8af369cdd6

                    SHA512

                    6aab0e3d3c189c18ea6540d1736b64a518958c62e1cb0a2874826f6cfd76e3a06fdbd28ae0b81e2fc8fc20601d00d804d86fe9887ab6919dd8090a696fb52b31

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.cat
                    Filesize

                    11KB

                    MD5

                    91822615a1481ff43eeca0b430fe9ca1

                    SHA1

                    5bdef1c6aabafce0177fa1b21b94e2d2b48afc3d

                    SHA256

                    a1afbd8b08c848af6c0962bd44c772bfa007daa0e878c20f81a6552811ad4376

                    SHA512

                    9f3c473c32e1c079a75d183d565991bb3216cd89f78e4ffc0300a079c0d761c6047a472705ea557728368c096bf08912a523d55fa0367f708113cd70951d6aeb

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.inf
                    Filesize

                    3KB

                    MD5

                    5a9717e1385703e8f06b27aa10a69e87

                    SHA1

                    84ee67a9167b5eb6560711b9871de98898ad07a5

                    SHA256

                    47b7c516bb57c612de19f0ca865590af95b6e32bf873a0fef9e011b2c5b483d4

                    SHA512

                    dd3c7278c2c11ad15a55fae6d19b96dadd92f85b7f0c8ce934298258af00bb5c052a84a98499b8867b0f43704fb307c67d03692ca69dda4d814c6c17dd73df44

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.sys
                    Filesize

                    216KB

                    MD5

                    7764c438ad9a4f024d60c77b82f2721f

                    SHA1

                    64e478e83bde2965216a37f283beb2695997b69d

                    SHA256

                    3f51a3149e6a79cd71fcb1451660196b6ba59c3b687736f59b24e5dab425d73c

                    SHA512

                    bbbac97b950d20621ae396a7f8ba8ec990ad056e2180bfa10d11b4eaccf3680e8830d652b7972bae52826535bfc68ae8c1e4ee93071c954ec7f8dbc7a6dcfd84

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\srvversion.dat
                    Filesize

                    9B

                    MD5

                    b302673116414c7c4cc5428d0e50e7e5

                    SHA1

                    14c56a67d0f3e4f6c7e92146ead787d722b1e89e

                    SHA256

                    2bab6e8554a9f52106e43711b3d1c10b6e1125c9900e67cfab642b0e6be9ded3

                    SHA512

                    156db182d8d577eb570b6871b044a067e9f70316d0c5167c3127c6b60c368a26f125771b2411a219de39c2c14d2aaeef5dadc2eaeaa7228a4576fe62b2548a99

                    Download Submit

                  • C:\Program Files\Malwarebytes\Anti-Malware\version.dat
                    Filesize

                    47B

                    MD5

                    4d89316ab5e214d1e445afc94286072d

                    SHA1

                    c52f3103b7ea0e93b7882533258b942d447bcbb1

                    SHA256

                    c054206267a6be1c437ee9f5efc37b9c16ec9d1465ce94aeac21a0ddec0de9fc

                    SHA512

                    ff0f36c2fedf74beef69c72632dc292549763d6ea0ac4edb86b1ce4b60eb68c1563b3bf54540cb8e0665b603f608a6b9474127342a79d1a74102a10b8e2aa793

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\LOGS\mbae-default.log
                    Filesize

                    1KB

                    MD5

                    2323b8170fa31a93989c4de43e882dac

                    SHA1

                    2a2cac3bd9dd9e93e2172902c51642248c62cd31

                    SHA256

                    5bf76df17335c9c8105154b721a8293037622644c63aa4042a81e8f0f2dd80b1

                    SHA512

                    a80c4de37874f3ed2518f5edb679eb3f566feaa12ce88d8e937865a5a4200b83f6ac3dd77754c1c402d17f72d86b0fe1b8cb060ee0be3bfa6feea5916025434d

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
                    Filesize

                    1KB

                    MD5

                    08606fe15cefc938ecca97f80e9b14ad

                    SHA1

                    91e381767196e05ea4c9d5735e52cff01a268992

                    SHA256

                    d8cf67873d8ce09c0b1cb387c9f05d3d33ac5ab5636f00ce7517ce30a528158f

                    SHA512

                    377754cf13070a1a94995260a1b543a1bb1ec764c90a6dc56f60197eee473ba4c91862fd385d6f6fc06ae21582ce9b8eff0125b62c179be439dfdf02a250d464

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
                    Filesize

                    47KB

                    MD5

                    c245fd0241a8cbe7948b0c82aeef9e47

                    SHA1

                    01f7c60d46e864a1f3326392a412e983fa59b1ef

                    SHA256

                    9ec14275cd774b4fead365f874bcce4b16a9747f7217fab002f45fc29c60b1fd

                    SHA512

                    2b0a579258cad209142c28cd9976cfa6339bd37c0ba7bac3671accae5ade127d84512866a3839c17830d9e8d471f147b64847c10f2dedd467b5cca42c930fd9d

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
                    Filesize

                    66KB

                    MD5

                    c9e79e64ba2600eec2e20db2cb2cd19a

                    SHA1

                    b87de1d8716feb9e683762ccd3ff06eaf12f87b4

                    SHA256

                    539d0f8f23bbe30686e255a3ac6218dbcf6b307761df4b03ac1fb8c0d3e56964

                    SHA512

                    0cfebb9cfdebe38f5c0504ecc0cf802e29775dbffd27d2609d5f5c449a238a75b1da4f596b3345e252ff12b8629b677c1f49226e844bc89bee101f36d8d5ccf2

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
                    Filesize

                    66KB

                    MD5

                    f3397361bcdfff262dad184c3c0f9781

                    SHA1

                    d49cff66df22d1504a040595e5dddf0db7e181cd

                    SHA256

                    65ccfd4df7c963edc0f708c117116f4811b286a311ca2acac8f8fe8069eddda0

                    SHA512

                    371bc2f3a3ab4f6b57dbcde459a775538388a538a7f858588f02e45f6cbb869ed24d1cbba776095c4ce2fba9f3d8b39d7314a0a5a936b64ba690ec77ad91e43a

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
                    Filesize

                    89KB

                    MD5

                    b8dadc9f3b9b85a0f3c4db2be2a90389

                    SHA1

                    b8f5ff68b9073cd387081da839d103d8c4dfeb18

                    SHA256

                    273bbd3082a9c8df63db9060cf9bebec21d03a32868708e3c7fc6614d668dcb9

                    SHA512

                    54ece6dbc58887e28a51711fdbca3bd892e46e267ce4216a592e2136caea8df5c4f716144b9c5d08c461eefffe3b79a5ed9e06e51733c068f4c4ba668685503b

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json
                    Filesize

                    607B

                    MD5

                    7e315f3ab82457406c1b7c1e47827643

                    SHA1

                    279bf2d408b030b3a56aeb91b82cf3009f14583a

                    SHA256

                    ff874fb0447a723eb5846671c3927f66c04926fb8430f628e9241e950b411c7e

                    SHA512

                    4ff9092aeb67cc73a266760ba47aa768089222afa2a1e38439d5dcb570f1595b70deb4fe4b9d7956ae419add10b456ff1a3a5ce88e5c384efa23ee82587930c3

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json
                    Filesize

                    608B

                    MD5

                    2317543e70ff078ec99bb291189fd3f5

                    SHA1

                    a4e3ca99ed549d9aa58b43c4f006b6ff31531a2c

                    SHA256

                    c65539930116ebb812f79196a4d360ee0deee58998716105bf4612531c1c78ae

                    SHA512

                    ffcc981744ac060df0f3d3b3028ed31db5485050b3958e1d1c3b0a465711058f98009c6868daee432f88213be0b6be8af78bd49e7b0fe58408affaee10460808

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json
                    Filesize

                    847B

                    MD5

                    e9fa4189395705ecf73e7d62cdebaf2d

                    SHA1

                    e0790799209f96a8217ab0e3defdfc9bdf3bb9c8

                    SHA256

                    d584f341181b7dbd62366e61bc406452f89bdfde060e0e7b3cadb3083346634a

                    SHA512

                    88989dce7c644592ade03ae799e9013d42bfa181adf9d177102e5e84662b913f5ffb0842b149394f7c2d9c8ff75c7dabd4d6a6cc40a5cb07c4920467518ad8bf

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json
                    Filesize

                    846B

                    MD5

                    e59303083db6e579ebd20fa71bb8865c

                    SHA1

                    9fbb451c5d0e5632055544d3c847a1ca8889879f

                    SHA256

                    513579f93dcfcd84970c9ad30740ca9e5558bcc7273b6ceac677db989748ed00

                    SHA512

                    597cf90b0a10a66febd82594c66ca2e9126ff17f7d9619f942a635b553efcb3b46375ac484b018d0f9fd8ddbe57ffd651ac995bceb48f8ee3fd6cab7fc81aab6

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json
                    Filesize

                    827B

                    MD5

                    8038947c8be0dc7a1917afc349abe505

                    SHA1

                    83dd906a40602c4767e6d63b59d9da374f14c71c

                    SHA256

                    0153ea90e5dbb0fbba96ba8a91c2edcb7486a8de1c142842da5e80f7e15924e2

                    SHA512

                    b6c6006b40ad9be26272ae76ce725ae44a5d915fdb4d50b5ee61e90ddc6220f7a2ea43a262448f3b2a005a8e26e86e50ff4b7f0e2b6cf04f1838271dd2933f0d

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json
                    Filesize

                    1KB

                    MD5

                    d41250d4992a068bf8e40bd8fb39818a

                    SHA1

                    e80be3699ccb0ed3ee61384629dbc5f5789f0d36

                    SHA256

                    e2a6f1ba9b01c982c6217de17ee16fbbc6227120cb78989e051194416a158ed7

                    SHA512

                    113678b7fb64b6c471c01592e92f12ac695f9b39c4e20a073e088d065b379a855be9f10aa2e3cf60d1870dce0d75e56df657ad1612351fddf2e16f6d6a9d7d88

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
                    Filesize

                    11KB

                    MD5

                    ba21a0b2c35be36c70b32c0551a73ce4

                    SHA1

                    2d107bdc42e29e97304edb3e87d9cb0b8fe69078

                    SHA256

                    c417a4ff6f1aa4bb7e07d2702a052eed6c65feee3ed2067ddbee119569e266df

                    SHA512

                    73447cef574affbf770c5b6a623a10e70c31c1f18f76aba0493fe77ab9d46838594bbc37d5ede1ad18565f4e2c9a89c8e2ea28efcb147ce0fecea44257e2c293

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
                    Filesize

                    11KB

                    MD5

                    5a938511e6ebef2f5cd44f3dbc27e283

                    SHA1

                    0c609c736ff125b8d56580aec1ad9ce16e183c96

                    SHA256

                    9f1cf7e5ed4c28bcc08e5c7948e903cdd83c7ad6433d53037132af12b98a40eb

                    SHA512

                    ad4b0b3e017bb8de7e1a59e50fba254e326bccde1d5a2c6dac6623ba1bbeec3cef2d601284fea1d11acf35e0194ca0c1d10f266d51dfd100457648e90703d755

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
                    Filesize

                    11KB

                    MD5

                    befbc787b243867309536e04b509f585

                    SHA1

                    e185f81b10095e3d1663357eb5ef64e426ca613d

                    SHA256

                    0c14ddbdce65256614897d26434c1ab521d4d00ea925d3e309c8a28da1b2c6d6

                    SHA512

                    77b0abdf04a0deb85ee4ec4023ad43607a10297be3cd78eb506ebe5adb7c976f35517b47eee72da64938468e43386c8adc83b5d80617d64a945b9ea50d9d30e6

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
                    Filesize

                    11KB

                    MD5

                    07eac1a7dddf9c5f529e5def14d90ce2

                    SHA1

                    27d8e9624ced1b43ad4f8c1c428f989dddd7208d

                    SHA256

                    453d28f13345c05bd74d985440faab2e58c77f45500f4be8a21bf063b07e55a5

                    SHA512

                    a7d26b2a1aa3e65596658f21dc77253d0432ec19a8103cdc513297bc6cc3526b9d56d316b1ce9a25bd190905cba63c69ac0d7bcd9c15463ecb937d682ef49f11

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json
                    Filesize

                    1KB

                    MD5

                    ab951ec6e5d961bd1ee00df03295085b

                    SHA1

                    692bbd2999076a366789c6fe7f452d63c4310b32

                    SHA256

                    22fd2636dcdd525583f83ac64026e9bae2d4a1d5759e0d1fae79b74664126f14

                    SHA512

                    84e06284342bc91b9c8f012141fe57ae4653584cb6173110fd570d188797796618a2e0ee62ecec58ac680653d00a0dd7ab08c796109ea079e9a5e0ce7548448e

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json
                    Filesize

                    2KB

                    MD5

                    3acc3038b7563edb52641c995c64bc36

                    SHA1

                    f6641f2b1b242218006aad91ef3971993e6fa8d7

                    SHA256

                    8013f4489fc2a4c8b0936b76167dfdf194a4b9d710d8276a98ff3b11cbcb3ae7

                    SHA512

                    d41122c849fc12c37923935f308f44bb199be971d349de70bdc3c627762386317a34b612f5b8c05a3d399bfec2c0304f5c8d3d90806922f0a41e7c2daf130a1c

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json
                    Filesize

                    814B

                    MD5

                    794c12c117d19afc947c9a3b5a9bd22b

                    SHA1

                    09047839f056fd901fffe8258dd095194f958812

                    SHA256

                    a50c1c8a924492ae838a25f1f10c1370d1bd9a44eef39bfa488be23931c54863

                    SHA512

                    52d4507f65a4768df864d03a6161b924e087fb89c651c9472804d82aa9dbc192c6e394480c626c8e7fe2cac5141c880e016f75a38d507b5b6c051cb76a2237ae

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json
                    Filesize

                    814B

                    MD5

                    ec2c3521c975811bbe39fd92050cbf65

                    SHA1

                    74402223263c49abd9b5f9c0d78003fbe6192eeb

                    SHA256

                    a3c1beb3566c7d88ed086a922730ae27448030e61dbe4f40bc31f145a080d6a2

                    SHA512

                    73ec3e72ac8ffc82b4d740957db795e8803b57e71ee6978b87c0674ee5ebed7364c0ca7f00d38b3f766dfcf4348e3e8322a2b820deac4b237fe27be07a6b5db7

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json
                    Filesize

                    816B

                    MD5

                    1f9f583207512362b31c3bb4502464ec

                    SHA1

                    3788fc89872a8a6077c643029c18677f14db47b9

                    SHA256

                    d389314de4366fb95a920d973f2890bdf380721727aa338e1326c3e42af76e95

                    SHA512

                    488b3a36fc33346e56ea9613b86146521ae9c5603a544928bd872ee50e174f2b489cda0626ffd61bae6c4bc2a7f5bb71564dd632fd3bf3a40bde4883145ceef7

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
                    Filesize

                    1KB

                    MD5

                    d38f2a3be6ac0d6f73c9cff65afd677c

                    SHA1

                    fb6e9591a17033c0ff0d2f389e5d4fb2509988b3

                    SHA256

                    217c95e58ec1252c29a59192775a4691636c7116de4fb39a2e34e37778dfc66b

                    SHA512

                    1f062fe82f0dfce7b1c77f7cef5d96647e8720fdffe9e65ee292d49dc785cda938625d8b9d7e1ba94e1a873de9ea3c4f2d158eb2cdb129c0f3d03da0ae27235e

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
                    Filesize

                    1KB

                    MD5

                    0a9c33805da62eb28b4a2edc31ae198a

                    SHA1

                    371ad74da47c406a34580c387e710aceb2897873

                    SHA256

                    4cbc57ad8e8d48bed4d82bb81f7196beafdfc40bb86bb36fb836840eedd4e9db

                    SHA512

                    1b1e2a1439afc6ad3abfa60c46871ea7d633c37a6ca4609bb6af024fbaebbd36bcf3ba907cbd7bcbf6791202469b68aac28b8ea41a0072cfe58281c0e837b833

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
                    Filesize

                    1KB

                    MD5

                    543135ba1042eccfa7d884f9301edc23

                    SHA1

                    4ca6d7852a6e48e4b64eb23f3d41c288f64d4ba2

                    SHA256

                    7d1a14f456bac7cd0e1090e9b081da627ca6b5d3d767029ae89fe1ed670b43d5

                    SHA512

                    c13b9b5c95fea0d0ea170838756a43e886b0ca951a9bfa7f9026a0b1d5fbd66555449d5a8251614f9b4c77dd3a823d095c5ea70f1b48239f21b15cfe7ae70026

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
                    Filesize

                    1KB

                    MD5

                    0f5de11ec893671d18e91520d427c949

                    SHA1

                    42917a0840379e3debe7fa67aa46790053d6bfbc

                    SHA256

                    84de1a6a37a985975969c5372081d48f354c6de0c54b662a09e8540a2811f1af

                    SHA512

                    8b20fc525248736d0c3618b6334eb891927bbfd8f09b718185ad13e0a696af1155eaddc51ca60175404aefecc748f32d42b0952549db7a9c10e6b4d669d17331

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
                    Filesize

                    2KB

                    MD5

                    ce65d258d378c0428eb5eedbb9fa7ca0

                    SHA1

                    0f0546a2ccf708afc4b514bd49c529eccde115a4

                    SHA256

                    cd37f75b9c7ee3ed928161612ccab479ea39b02d98154aef18be4c279221ea2f

                    SHA512

                    d1810e1ff0c0df5d0a829fcca233d444259d15d1ae582995bdf5e7afd0ea04171702e140f750b0ec734513bc1138b5d6a9fdbebe30fe19627152f573443557a2

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
                    Filesize

                    4KB

                    MD5

                    fea415d0c67fc3e444ef8b7e695528c0

                    SHA1

                    33cd89776d6964f487c2895bf8ab0837b9194724

                    SHA256

                    38b5e3ef829f7e5375a88e151065d2fc853a458b8aeb8ea4df63214647f8f791

                    SHA512

                    27dd9319a2568710ef32103efe5a4ce12428579acacfa778118ad5660531a8f1615f516aad7cf0570c5355772094086f3521f8214d2a1b358806266f6c0b44fb

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
                    Filesize

                    7KB

                    MD5

                    831304fde0de3ea21fff40d93d6467f8

                    SHA1

                    d2830f63a8faec999c1b839d646229773d7c36f2

                    SHA256

                    7e21b320ea5aa38e69e409a124badaf3beab051a69c188265d481c572c4d0108

                    SHA512

                    1c4439ffd63d39083d325c6d6b29a71e90051415873dff3176da454ee61bdcdf1fde89568da9957146f12605f53e68ad0fafe70942853bf214c9c4331de59d4f

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
                    Filesize

                    7KB

                    MD5

                    456f223f81b657398cd5c9ffa5712dda

                    SHA1

                    8d1aaf55881bcd470dfe46a53d9d23b27276f3d9

                    SHA256

                    dcefacaf64b39d0af93642fd53d55a3ebc83ed00e95030e1bb8490e33a63fc03

                    SHA512

                    670dc0049ad33b19477d123698d013194393e1b300f28902b246c3394fefcc436c4f7e5f9a51819590ba9e0175075a17d5a794e9ac13a5027c0bc5af72e93512

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
                    Filesize

                    7KB

                    MD5

                    4d3fd76d3eeb9fb4c1999967f9ca6039

                    SHA1

                    998322199fce7930846a71ecc4d279cac0340b1c

                    SHA256

                    f565b5e7a1b793d2124700467e572b202f74d2e0b5677ba134ed72c829cf7f6f

                    SHA512

                    e7d22bcee262d7d947976527afd19704fa1943736d4f936cadb12982de82e0a6fedffbe33a27d58dd4dd1222f4bfd2dfa05e5b7ef8626ed67f12c2a289ecedbd

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
                    Filesize

                    7KB

                    MD5

                    f3a43a44e78bf39f170489ad9de84a18

                    SHA1

                    df5ff6a80141dde89bd05fb43741f008d6ecb4b7

                    SHA256

                    726aea021c5f4f5b76f42f688ccb0c0f23cbaa596e6175da47736efbc172d626

                    SHA512

                    ab86365117c1cac01c9fac5fbd3eb70decf46f74e195657a7dba917a8646091c6afaf631d8ff59addadee7d7b5e8ef5f471a4fd40cbd0bcda36a9d2290c8a66a

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
                    Filesize

                    7KB

                    MD5

                    3e31ed08108a35224a3cc28eaec261bf

                    SHA1

                    c03976f54dc1953caeefd03bdc9a41393b8b667e

                    SHA256

                    125cc1f290bd1ffdca7e3f479b04b7d52444cbeffdfddcc2c7a7467d3784ea0e

                    SHA512

                    31b4dc8ab51cebc7364862241f1dcbb9a24ca84bc69e0abed0db45f726c028d63a6dd7db0cf12f79c6e3aecc838de39af801b0b75ce89c0701606bdfd5ea37f9

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json
                    Filesize

                    11KB

                    MD5

                    c5c3c61200d26ce6b911b44dd0055c6c

                    SHA1

                    584202a36a2c3ab2559cbf99a8ad35b50c4eab55

                    SHA256

                    bbf0d73f16869f08d16c02ced635041674956169357db774b958fbe64e752c7f

                    SHA512

                    3f819923692cf58fcb08a013a612ea600b355506bf61c6218df2597bfa120c456cd73cc44280f063b0ca2d1291c76dcc2bbeab6538ac6c217f32d586468bb372

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json
                    Filesize

                    11KB

                    MD5

                    da5de56efe6e39cccf4e8aa5d22b2700

                    SHA1

                    9425987be5a034929888d7d1041fb7e3207ae8cd

                    SHA256

                    1778cba8f6228b2f9f97e8085ebd40d620a9eea65aae2fb6b64b5f388ff72c52

                    SHA512

                    2c4aea5ed1de5a277351908ba41501d5a83c547100130e95d90d1ea5e5e0f46a7971897296d4bcb22078b55c1bd5a88f7c1bb4d882ce6e5d9aabb0dc761f50d2

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
                    Filesize

                    1KB

                    MD5

                    256adb76820de226a8951f60e88ea110

                    SHA1

                    77d79762e5776cbcf0cf272dc9a2b8ffa8f6b24c

                    SHA256

                    88a7751ec4dc76572b94619014e761b6d9d49db948da699c0c9fb27938a390fd

                    SHA512

                    a9fa187c4c92c7c66d6a3e152621f918ab9f21ddd73a0efee84ab78cd43091b6aca155a02ab2a867f4add8d53313fbb93e65f3df77c963705e4778ef476e22a8

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
                    Filesize

                    1KB

                    MD5

                    39b1b590d817cec644add5ebfe1e6eb5

                    SHA1

                    42b3ae07e7aff25ef09ec0598a43b3953d42e14a

                    SHA256

                    db15e3ce852f85443e484ad5623ee29fe9ff1b4bbcd0b693c4378a928634f835

                    SHA512

                    73a1bfe97b50872719d5a111419626d415369ed1238b3d9f9afd277850f397737a1f62296709ba9b0c43df67092a909cc2913b54a50ea2d9e4bf22f9acbf43e3

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
                    Filesize

                    1KB

                    MD5

                    f200ac5cf7da4368abf86da5a2ac1063

                    SHA1

                    a138b4e50151eb718c935ea7570e289182d76a19

                    SHA256

                    5f0dc28ac5cda3a09ebc77d86fd58f93e666a32b5803a58b139240de6a6d6a1e

                    SHA512

                    7555a690e86505863a122dec8c9ef57758d5eeaeb97bf5559bb4f5d93e2ecdc69892336e78b95491c6f05316d93e6460270c6423d26b04ef4f6822157827d9f7

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
                    Filesize

                    1KB

                    MD5

                    fa9833af9bba1c8436a9258e5d2d1af7

                    SHA1

                    98415c77532c337d0f5fa686f64e83947d651bff

                    SHA256

                    41a70355f111c264b572af13eac395274b71a545af0759a86cc1cf1a5cc5aa17

                    SHA512

                    e724f7c60062fa4657871ab23a0c6a5c206382d8953f4cdcb1497a463d571becd90f50d223a8ae18c31cbbcd5c0b980859ea87f3fc62bbe23362596fc0983ba9

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
                    Filesize

                    1KB

                    MD5

                    7c6ef8a3fe315c638e54b5cde7866f41

                    SHA1

                    87a635101c284ae386e89ac4bcbf7c0023b41772

                    SHA256

                    26c5a9e8405d62feb2e70c95838da0e2dcc97c1c78a71f08f9f90e7ae7f4722d

                    SHA512

                    d2e1ab68ef7363d0b47e983ef6359fed7e06d25626a72ce7ce4e3c5761b1c0152fca5d4c965d85a9ffc76d5c4271820596f2b1e4c9753fa296f62d8dfc081eb0

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
                    Filesize

                    1KB

                    MD5

                    85bd1441788bf1da5472cff0dd2a3141

                    SHA1

                    816d14fdb493dd837c43c6607fe527d96a8d4668

                    SHA256

                    350b110fe05a394f53ca71d7623962e7e49c87d49f767f9dbb07fa1d052a965f

                    SHA512

                    a8f797ef75fc5e4013c3be3f04156f45c48c4a37d58bde6de709a78aa700f892a46d553eb332326374ed5e620d5a0543aee386cbd86126fba3148130833f1693

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
                    Filesize

                    1KB

                    MD5

                    9364fc44b334bad7333fa2e331533e4a

                    SHA1

                    be9f0fd03f1d508c70f694eb1c39f9175fe82eef

                    SHA256

                    19d043f3861221f6e8644a8edf6c3d882a0e71be8193a9b77ac1b70c22f34402

                    SHA512

                    ef807ac2f838278e7a91c24e2764097e9e5628200e3c02037c006be30104dfe531d6cddfbe9a7fc55e46f22829248932dd2b6c1e5ab3c3a3b5887fdbec4be515

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
                    Filesize

                    1KB

                    MD5

                    67d56123ba5d8f74c1a009c1fcdd2a33

                    SHA1

                    4c4693c98e290208d293a640186faf7809c64fcd

                    SHA256

                    fec0b2ab457e630e0f44f711017b4d436bd049a0d95acdec16e0b1ef2bf4da79

                    SHA512

                    91fcf25a2f87d8d0089f2c148a7c910b7975f37c922a93bb4695d51fe064f8404ae17799abdd0d8bb815b9bb4e6e7266ae2345be4387970aad1e0e1b32b16976

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
                    Filesize

                    1KB

                    MD5

                    390a97b2ad82dae6eb83babd74deddc8

                    SHA1

                    45789c52b15d53122cf772a447b88b419b17f4d0

                    SHA256

                    f846a3c616c75ee95fcf973bafbee6cc5bc2327630f16f2c4ce2a491e694c534

                    SHA512

                    8786ba10fe08ade5f825ffe09d3f385c9be124d5d0a2acf83894fdd7a62b2500c00ab405427c330dc2ef91b47c50d0d40936fe678e92bbed58e0204a1201e524

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
                    Filesize

                    1KB

                    MD5

                    b41ba86419b8b6c3caf7a18bfd020873

                    SHA1

                    c98e553542ac65db75ce8e3c0bf05d911d3c5342

                    SHA256

                    616cb9f91a0d95d52d17471101106b645824d931fb090828d8c91bec758befb5

                    SHA512

                    169daaafba9c690a336c49ea3de9ea55e6fe71ccfb24e047727fb73cf6bd24f51f28074a4d0b92cc20a5bc60de1a258ce3261a6888f906f27fc4643c67429f24

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
                    Filesize

                    1KB

                    MD5

                    053cf761466cc05dbcffec4c7c5b1865

                    SHA1

                    f7b756a64bc8ad4304256f98de5fa32a46708eac

                    SHA256

                    9855ffda3d086b4fdeb0d20ae27df4c4e85ad1e7b000d2093459568ef99eff08

                    SHA512

                    fefac1ea450fe8475d25120f029d3e94e1e8e6078bea4661af5ee1eaf58f4f30dd15a1cac9a7daf00ca7ef55eef06c53458d8077ae870837d126abbd287f4d00

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
                    Filesize

                    1KB

                    MD5

                    b8cef05712aa2ccafc299183bded04b3

                    SHA1

                    e34fcfabd276088ce9d5bc254f567a504b820c3b

                    SHA256

                    36e15f3545420b5f7bfcca2c62e41d2f8ab358e316e00714d6100635797a7b9d

                    SHA512

                    46e9d31f4f5183999bac7b40e792324c3ec912ed9ea0c49e139eae2659f55afd4eb4a087bbaf9602dfca7b876150597e910cf73b3aba2d3c66d9162467f60a86

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
                    Filesize

                    1KB

                    MD5

                    2c2b3a721840955bfc21a15d687451aa

                    SHA1

                    853aeb0392506650fd887acd77db2f320bd8f52b

                    SHA256

                    b5f1ff5755cd6a65ce97ef05923e86eb82ceecf9f0f716b78de34a723afd7eb9

                    SHA512

                    03f5dcc8fb4a597b81093172850fcadb2481d6e98d9f5f31cb509f2e5b6cb7ca78a3aa77acf34cc9e3bd91a43d2a8a8933ed9223536ca3ceefc458f7c98d7c94

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
                    Filesize

                    1KB

                    MD5

                    2b4fa1fdd54a2be61cec6663df141eed

                    SHA1

                    9aa717eb982fdfa8457d9fee564904b25dd1603f

                    SHA256

                    891b7ae06f5c325eba18d82783b19920bab8b5f0cd67fae6e70006c994c4e7e5

                    SHA512

                    663a8495222c3b4914e7216b336882c9f3c612ee90d0e3f5944a0e72350a9ceeec1108793f0a255c47eddc966bb610142033259b072d65b14de3b91c8b7f84ef

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
                    Filesize

                    1KB

                    MD5

                    2b9ccbc00909c9d6d5df95824997cc67

                    SHA1

                    bc061ce0e2c8d91a70f26aada502275c9e2b5d21

                    SHA256

                    40f704f9a1fbb4c2b879db634d02d4355e36474fd4310e4212d3a576372efb34

                    SHA512

                    0bde25edfa9f9bc7c36f5bc24112747d821337aae1b2fe06d8e3913c1a93c1d0c28240e1a32501f2ca3ef510fc165fc3cd274a1e6904dd732b24540f6511ff20

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
                    Filesize

                    1KB

                    MD5

                    9a074584937a73b318981b9542ab752c

                    SHA1

                    2803b32958e5e994fe53a4e689c88fbf20c5cb05

                    SHA256

                    de3988a353ec9b168ff39a0e4143d28f3291d358d1dceb0574666e1855e79e1d

                    SHA512

                    1de1ec7904e2ffae5e060be7b8036e9a2948daa11fb8a9fc7a679386468c9f3d47c0030b358043c8abf06addcfdcbe2f5ba89cd36939cc3d570fd5d8d20b94b1

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
                    Filesize

                    1KB

                    MD5

                    817ab098f00aa953203f093adffc4ed3

                    SHA1

                    c7aea866fdd0e60cee8f2f2ebade185149e44355

                    SHA256

                    dfa6781820ce3897e18e17cb0139564e3b6b0ce983c318f7067fec2cebc4d8ab

                    SHA512

                    8981e62258f602882a929f7581d1e0bfec4402c60c75a43870f5f40895a4352105adbd51e3c7dd8613bbb60048011cbae77fa03d42fe9000954c6302efa59758

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json
                    Filesize

                    1KB

                    MD5

                    f340b20b9f62aa08137444b63c3ea3e9

                    SHA1

                    295148e3b6922bd66d4ff4f89c35fef9528004e4

                    SHA256

                    804cd68fef97cd4d35c9e95cce27dca9bf061717f7f9d395a13228377d53b784

                    SHA512

                    596206fa9af0e91b5f8ff519e4e6ce069cd5d433d467f1f1304fbfeabaa570c63d7dfa593ae047ec351975f7194fe4a7a3d6fa11386e0f835ac76055f82eb18d

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json
                    Filesize

                    1KB

                    MD5

                    0f585ec33d0f596aa94ef6caf90202ce

                    SHA1

                    6d61fa187a5f57bf8145f0a023d5d39982045b17

                    SHA256

                    92ca0601d5295790138d434607bc3f956144cd4723f9bb55fd6a4372b05c8d16

                    SHA512

                    4f6057437e3dcb1061b7280f25744426a6a0909cf855bb987923e7350e673adfa5b067d661ef3d482a7f9d28ba2a89a3012e2d5c6c0579b0f732a088f07fc999

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\config\VPNServerListConfig.json
                    Filesize

                    125B

                    MD5

                    f32bfc942cf02ea56df0d9323f70a85a

                    SHA1

                    82b643a743763cd15f98a9541b105d071ba27cfb

                    SHA256

                    9a8a2380e659da5b7739fcb8fc4dc39595c0ed800336080f2f6ea55114d427c7

                    SHA512

                    6fc6f9ee292b0b6b254f4a13183dfee14a5acef737c41df7cd68e641fa9d813c71a72336d4df7791b3af2c2736d292ab3086486fcbd0eaf7d72496e0502534bf

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\dds_tmp\D1B.tmp
                    Filesize

                    1.1MB

                    MD5

                    3b337c2d41069b0a1e43e30f891c3813

                    SHA1

                    ebee2827b5cb153cbbb51c9718da1549fa80fc5c

                    SHA256

                    c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7

                    SHA512

                    fdb3012a71221447b35757ed2bdca6ed1f8833b2f81d03aabebd2cd7780a33a9c3d816535d03c5c3edd5aaf11d91156842b380e2a63135e3c7f87193ad211499

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\dds_tmp\D1D.tmp
                    Filesize

                    116KB

                    MD5

                    699dd61122d91e80abdfcc396ce0ec10

                    SHA1

                    7b23a6562e78e1d4be2a16fc7044bdcea724855e

                    SHA256

                    f843cd00d9aff9a902dd7c98d6137639a10bd84904d81a085c28a3b29f8223c1

                    SHA512

                    2517e52f7f03580afd8f928c767d264033a191e831a78eed454ea35c9514c0f0df127f49a306088d766908af7880f713f5009c31ce6b0b1e4d0b67e49447bfff

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\dds_tmp\D26.tmp
                    Filesize

                    504KB

                    MD5

                    b5d0f85e7c820db76ef2f4535552f03c

                    SHA1

                    91eff42f542175a41549bc966e9b249b65743951

                    SHA256

                    3d6d6e7a6f4729a7a416165beabda8a281afff082ebb538df29e8f03e1a4741c

                    SHA512

                    5246ebeaf84a0486ff5adb2083f60465fc68393d50af05d17f704d08229ce948860018cbe880c40d5700154c3e61fc735c451044f85e03d78568d60de80752f7

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\dds_tmp\D29.tmp
                    Filesize

                    4.7MB

                    MD5

                    a7b7470c347f84365ffe1b2072b4f95c

                    SHA1

                    57a96f6fb326ba65b7f7016242132b3f9464c7a3

                    SHA256

                    af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a

                    SHA512

                    83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\dds_tmp\D30.tmp
                    Filesize

                    1.8MB

                    MD5

                    804b9539f7be4ece92993dc95c8486f5

                    SHA1

                    ec3ca8f8d3cd2f68f676ad831f3f736d9c64895c

                    SHA256

                    76d0da51c2ed6ce4de34f0f703af564cbefd54766572a36b5a45494a88479e0b

                    SHA512

                    146c3b2a0416ac19b29a281e3fc3a9c4c5d6bdfc45444c2619f8f91beb0bdd615b26d5bd73f0537a4158f81b5eb3b9b4605b3e2000425f38eeeb94aa8b1a49f2

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\dds_tmp\D43.tmp
                    Filesize

                    1.2MB

                    MD5

                    607039b9e741f29a5996d255ae7ea39f

                    SHA1

                    9ea6ef007bee59e05dd9dd994da2a56a8675a021

                    SHA256

                    be81804da3077e93880b506e3f3061403ce6bf9ce50b9c0fcc63bb50b4352369

                    SHA512

                    0766c98228f6ccc907674e3b9cebe64eee234138b8d3f00848433388ad609fa38d17a961227e683e92241b163aa30cf06708a458f2bc4d3704d5aa7a7182ca50

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\BrowserSDKDLL.dll
                    Filesize

                    5.4MB

                    MD5

                    956b145931bec84ebc422b5d1d333c49

                    SHA1

                    9264cc2ae8c856f84f1d0888f67aea01cdc3e056

                    SHA256

                    c726b443321a75311e22b53417556d60aa479bbd11deb2308f38b5ad6542d8d3

                    SHA512

                    fb9632e708cdae81f4b8c0e39fed2309ef810ca3e7e1045cf51e358d7fdb5f77d4888e95bdd627bfa525a8014f4bd6e1fbc74a7d50e6a91a970021bf1491c57c

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\sample.dll
                    Filesize

                    528KB

                    MD5

                    ad5afe7fe3eac12a647f73aeb3b578bf

                    SHA1

                    29c482e6b9dd129309224b51297bff65c8914119

                    SHA256

                    7d2c7bc745e07d54f1c26c06d7438eb40ec6f5d17dfa15928b67d447f4c63747

                    SHA512

                    5be9f8384cc22bb7d69d8e532e7025675db16777b2d01ca1819a6e3d8c7daaaaa23d842d338d55d74eb9973e230a8f9a11ce7524667fee09b18fbdcb5a49289f

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\lkg_db\version.dat
                    Filesize

                    26B

                    MD5

                    312ef18c47b330bd79f07e6c031477fa

                    SHA1

                    49bb8774cd238399f55bf1484e31512e5eda09fe

                    SHA256

                    d076829b3c5b542fc965710186343d7b714dec6e1adfd4d1a453ecb8572fde2a

                    SHA512

                    9719583b759298a0f7d09d439b33f2af193845913f44bd79a299f0bf68d69accfe4e7a68185a9d06b2bb066d9016abc1477f9b814dd47a51a8298484a40f2a9d

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\SdkDbUpdatrV5.dll
                    Filesize

                    2.6MB

                    MD5

                    52c4aa7e428e86445b8e529ef93e8549

                    SHA1

                    72508ba29ff3becbbe9668e95efa8748ce69aa3f

                    SHA256

                    6050d13b465417dd38cc6e533f391781054d6d04533baed631c4ef4cea9c7f63

                    SHA512

                    f30c6902de6128afbaaed58b7d07e1a0a674f0650d02a1b98138892abcab0da36a08baa8ca0aba53f801f91323916e4076bda54d6c2dc44fdad8ab571b4575f7

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\expapply64.dll
                    Filesize

                    473KB

                    MD5

                    76a6c5124f8e0472dd9d78e5b554715b

                    SHA1

                    88ab77c04430441874354508fd79636bb94d8719

                    SHA256

                    d23706f8f1c3fa18e909fe028d612d56df7cd4f9ad0c3a2b521cb58e49f3925d

                    SHA512

                    35189cc2bf342e9c6e33fd036f19667398ac53c5583c9614db77fb54aadf9ac0d4b96a3e5f41ec7e8e7f3fe745ae71490bdcf0638d7410b12121e7a4312fae9e

                    Download Submit

                  • C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\mbupdatrV5.exe
                    Filesize

                    5.9MB

                    MD5

                    e23e61a546103001426c847d66597c47

                    SHA1

                    86e64fe9e604b4abf95330c6a498c6f6ed0331de

                    SHA256

                    a603dde8953bf95ed32da8ff8392b436a09fca3c47856478a79be874e11c9142

                    SHA512

                    9acb31bd41250cc6b5748f144af2f59c2bb9c09ff18d5452e2fe8e9dce8e8c2f10bd3bbbcb148cb8996ac991641492b7722c386fb64c1d193d89a46bda0ec75c

                    Download Submit

                  • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\rcjasbej.default-release\activity-stream.discovery_stream.json.tmp
                    Filesize

                    22KB

                    MD5

                    c64b3cddbeeceda94a124c7526fab341

                    SHA1

                    3a39f94990c54fd768fa6c25272278a96b687310

                    SHA256

                    a47630cfbfe017f62d8e9e986001b128115190c165e374feaced9ba7ce142d9a

                    SHA512

                    5a222b6271d1686bc81e65b76f70d1cdbe88b6043d3bf203e843e6f01c4fdf69d7b244cd41a750356dc899b56ee06cd2d896245563110bf9bb4488e00ab8b856

                    Download Submit

                  • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\rcjasbej.default-release\activity-stream.discovery_stream.json.tmp
                    Filesize

                    22KB

                    MD5

                    b977cd157e1f5f933faa3a0153dc7084

                    SHA1

                    63e02f416c2d1ec5c544d310e574ac37eb0b113b

                    SHA256

                    c48a3c917cb99fb903bda8407df46e16de5eeddb9c9aefca1f6b5f7ef338f141

                    SHA512

                    fc9d5058bc8621ce99c9e843fbe9f69a751d9bf588b5e99f27bfefde09e2f490d331545333e88c6f63ea4a45415753e1ba985d622f6c046db182d174a34a267a

                    Download Submit

                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rcjasbej.default-release\prefs.js
                    Filesize

                    6KB

                    MD5

                    b89bc2a11e289743aa92d07fabcbfb19

                    SHA1

                    e6205e96146de9c11414bd44a01e266ebeea45e8

                    SHA256

                    9ee87de9eeb463cb6b8370978c8f5da1d77157637980d1b2bb02acffc7e70601

                    SHA512

                    268780d0a9b1d397aa4cc16545e4d34d184c52833702cf5d9587649a9274453b02fbb98a7e72965517b7e2f6ca4fe2b79a1b5295dcc1ca1389e212bc2369e882

                    Download Submit

                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rcjasbej.default-release\prefs.js
                    Filesize

                    6KB

                    MD5

                    0228968aef2e79ae7f877ee03e63059d

                    SHA1

                    3b68d11f0a7073148ebdba88ffddbc3fc30c0830

                    SHA256

                    34b6b40128d0b3efce8fe82f29f22305fc5b907a07902bacb12d051a39e2b76d

                    SHA512

                    e30a3e530c7b66e545499ef30ef2b1db6b01944b9ca7b3f2ed020059d4882d3a074c68df337848020d414d8682d9c24828dfef321e0bfe663b452a2eb08b60d9

                    Download Submit

                  • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rcjasbej.default-release\sessionstore-backups\recovery.jsonlz4
                    Filesize

                    1014B

                    MD5

                    6484908425be73ddf2342616250ca373

                    SHA1

                    b8c3c2b04e180d0160385e3e74549dad55a0c520

                    SHA256

                    35f22ebf272f8c80f4ed3d3300f3c2d41627819344da4a3d3997fd30d04c4dba

                    SHA512

                    3ef2f4768b7ebd5b114b9fa4481a882e4268419ebd9c71048deda0478d2f61e0b4e3960533f2b921f716841cff50b104984a77c291ea2982d9b841b03ec3d7d1

                    Download Submit

                  • C:\Windows\System32\CatRoot2\dberr.txt
                    Filesize

                    16KB

                    MD5

                    86c54b6b928004140952d9f58ee5818c

                    SHA1

                    c7004c52d73862a7c88566ac1a63391cc8703e4d

                    SHA256

                    3854de520455ab5690d1f15d9d9719358421e63fb9e6e54b3bee6c7a1d651a53

                    SHA512

                    80f72c8fa00699beebd035a122feac364d1ad8ae4100b0f4035ff751c4bb7a3db190153c0f31d99032aa83688f28b380823c635e1b1f63089b032525d794d8ee

                    Download Submit

                  • C:\Windows\System32\catroot2\dberr.txt
                    Filesize

                    17KB

                    MD5

                    39acb6a731f4a5ec5165700200d212f5

                    SHA1

                    def0a48b32598e98f724bcd4395db18b05778f78

                    SHA256

                    eb4f6b42a4009d9311abc60b88a47feb4feac38d3f77c51fbb5d17ca4ba96dca

                    SHA512

                    cc312f4825c4060a628c28ebe1f7d1e1152948e266507b8f8f7ee19542697f724252c0e6edff6e06ed2503ece20e70a7713ce2b31710cc766803e92ce88c5a85

                    Download Submit

                  • C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9EC3B71635F8BA3FC68DE181A104A0EF_10CFC0D4C45D2E76B7EA49C8C22BEDFE
                    Filesize

                    5B

                    MD5

                    5bfa51f3a417b98e7443eca90fc94703

                    SHA1

                    8c015d80b8a23f780bdd215dc842b0f5551f63bd

                    SHA256

                    bebe2853a3485d1c2e5c5be4249183e0ddaff9f87de71652371700a89d937128

                    SHA512

                    4cd03686254bb28754cbaa635ae1264723e2be80ce1dd0f78d1ab7aee72232f5b285f79e488e9c5c49ff343015bd07bb8433d6cee08ae3cea8c317303e3ac399

                    Download Submit

                  • C:\Windows\System32\drivers\mbam.sys
                    Filesize

                    76KB

                    MD5

                    113e213914c40631aedef185984c5629

                    SHA1

                    57bf886bfe1e4d765ea43e4c91709a5c4a9a024a

                    SHA256

                    d314cea3ba19c49342763fca6b64a33f12d730a8fa531ed9f7e75675035ba004

                    SHA512

                    76d7286963f28430d8a9bc3b59adf209b5fceb6a5248b7be54c60fff0b931ba2cf46a779f7e66008baa0853ad6ce55a4b9dd56e33574230d1e2588f7679630b8

                    Download Submit

                  • C:\Windows\System32\drivers\mbamswissarmy.sys
                    Filesize

                    233KB

                    MD5

                    4b2cc2d3ebf42659ea5e6e63584e1b76

                    SHA1

                    0042da8151f2e10a31ecceb60795eb428316e820

                    SHA256

                    3db4366ccb9d94062388000926c060e2524c7d3ee4b6b7c7cf06f909f747fc6c

                    SHA512

                    804d64d346b3dbb1ce3095a5d0fa7acc5da0bf832c458e557dac486559fe53144f15f08c444fea84a01471fd5981e68801a809b143c56b5b63e3e16de9db0d98

                    Download Submit

                  • C:\Windows\Temp\MBInstallTemp1b2d265a3a4811ef890c66f2a351d5b9\7z.dll
                    Filesize

                    1.6MB

                    MD5

                    4da585f081e096a43a574f4f4167947e

                    SHA1

                    38c81c6deae0e6d35c64c060b26271413a176a49

                    SHA256

                    623e628393bc4b8131c1f4302b195429dfa67e890d3325ceaa56940660052b1b

                    SHA512

                    0fe168bf1661691dbaa103e478dd7e46b476db094bf1938bf1ad12ddb8a8f371bf611ff504d2eb3ac319862444cc64a27ebee8735aa3752aa32a399b09427243

                    Download Submit

                  • C:\Windows\Temp\MBInstallTemp1b2d265a3a4811ef890c66f2a351d5b9\ctlrpkg\Malwarebytes_Assistant.runtimeconfig.json
                    Filesize

                    372B

                    MD5

                    d94cf983fba9ab1bb8a6cb3ad4a48f50

                    SHA1

                    04855d8b7a76b7ec74633043ef9986d4500ca63c

                    SHA256

                    1eca0f0c70070aa83bb609e4b749b26dcb4409784326032726394722224a098a

                    SHA512

                    09a9667d4f4622817116c8bc27d3d481d5d160380a2e19b8944bdd1271a83f718415ce5e6d66e82e36819e575ec1b55f19c45213e0013b877b8d61e6feb9d998

                    Download Submit

                  • C:\Windows\Temp\MBInstallTemp1b2d265a3a4811ef890c66f2a351d5b9\ctlrpkg\mbae64.sys
                    Filesize

                    154KB

                    MD5

                    95515708f41a7e283d6725506f56f6f2

                    SHA1

                    9afc20a19db3d2a75b6915d8d9af602c5218735e

                    SHA256

                    321058a27d7462e55e39d253ad5d8b19a9acf754666400f82fe0542f33e733c6

                    SHA512

                    d9230901adeecb13b1f92287abe9317cdac458348885b96ef6500960793a7586c76ae374df053be948a35b44abe934aa853975a6ccd3788f93909903cc718c08

                    Download Submit

                  • C:\Windows\Temp\MBInstallTemp1b2d265a3a4811ef890c66f2a351d5b9\dbclspkg\MBAMCoreV5.dll
                    Filesize

                    6.3MB

                    MD5

                    0ccbda151fcaab529e1eeb788d353311

                    SHA1

                    0b33fbce5034670fbd1e3a4aeac452f2a2ae16eb

                    SHA256

                    2a6ac5a8677bd1b410420183169b9ca9ec87dbb78ce0f11ebac2bfa022df7c70

                    SHA512

                    1bf9b8849b27491ecadfb4caf4e61926f9a0a8479c247a2281ba2d7c1ae0587251330ee29cc053630047e279ef6b52d3a125e21144b9688f1328f101bfc3c2e9

                    Download Submit

                  • C:\Windows\Temp\MBInstallTemp1b2d265a3a4811ef890c66f2a351d5b9\dotnetpkgtmp\shared\Microsoft.NETCore.App\6.0.28\mscordaccore.dll
                    Filesize

                    1.3MB

                    MD5

                    3143ffcfcc9818e0cd47cb9a980d2169

                    SHA1

                    72f1932fda377d3d71cb10f314fd946fab2ea77a

                    SHA256

                    b7fb9547e4359f6c116bd0dbe36a8ed05b7a490720f5a0d9013284be36b590b7

                    SHA512

                    904800d157eb010e7d17210f5797409fea005eed46fbf209bca454768b28f74ff3ff468eaad2cfd3642155d4978326274331a0a4e2c701dd7017e56ddfe5424b

                    Download Submit

                  • C:\Windows\Temp\MBInstallTemp1b2d265a3a4811ef890c66f2a351d5b9\servicepkg\MBAMService.exe
                    Filesize

                    8.5MB

                    MD5

                    c02dea5bcab50ce7b075c8db8739dbe1

                    SHA1

                    d1d08a208e00567e62233a631176a5f9912a5368

                    SHA256

                    c264dd072a5c7954667804611bcc8a0708125ed907b1cf2f8f86434df1a125dd

                    SHA512

                    74bb2b82d0d2bad4e26138304d4e4ad6379acf19f8aa13aacc749901e7381281d59720d7bfc3c6df0c835d805f134ed08fcde47a79c4c5384a92abeaa4c89f4c

                    Download Submit

                  • C:\Windows\Temp\MBInstallTemp1b2d265a3a4811ef890c66f2a351d5b9\servicepkg\mbamelam.cat
                    Filesize

                    10KB

                    MD5

                    60608328775d6acf03eaab38407e5b7c

                    SHA1

                    9f63644893517286753f63ad6d01bc8bfacf79b1

                    SHA256

                    3ed5a1668713ef80c2b5599b599f1434ad6648999f335cf69757ea3183c70c59

                    SHA512

                    9f65212121b8a5d1a0625c3baa14ef04a33b091d26f543324333e38dcdb903e02ccc4d009e22c2e85d2f61d954e0b994c2896e52f685003a6ef34758f8a650c7

                    Download Submit

                  • C:\Windows\Temp\MBInstallTemp1b2d265a3a4811ef890c66f2a351d5b9\servicepkg\mbamelam.inf
                    Filesize

                    2KB

                    MD5

                    c481ad4dd1d91860335787aa61177932

                    SHA1

                    81633414c5bf5832a8584fb0740bc09596b9b66d

                    SHA256

                    793626d240fd8eefc81b78a57c8dfe12ea247889b6f07918e9fd32a7411aa1c3

                    SHA512

                    d292e028936412f07264837d4a321ecfa2f5754d4048c8bcf774a0e076e535b361c411301558609d64c71c1ce9b19e6041efa44d201237a7010c553751e1e830

                    Download Submit

                  • C:\Windows\Temp\MBInstallTemp1b2d265a3a4811ef890c66f2a351d5b9\servicepkg\mbamelam.sys
                    Filesize

                    20KB

                    MD5

                    9e77c51e14fa9a323ee1635dc74ecc07

                    SHA1

                    a78bde0bd73260ce7af9cdc441af9db54d1637c2

                    SHA256

                    b5619d758ae6a65c1663f065e53e6b68a00511e7d7accb3e07ed94bfd0b1ede0

                    SHA512

                    a12ccf92bead694f5d3cba7ff7e731a2f862198efc338efc7f33a882fe0eb7499fb3fb533538d0a823e80631a7ca162962fbdfd78e401e3255672910b7140186

                    Download Submit

                  • memory/1724-4354-0x0000023A10E10000-0x0000023A1114F000-memory.dmp

                    Filesize

                    3.2MB

                    Download

                  • memory/1724-4638-0x0000023A10E10000-0x0000023A1114F000-memory.dmp

                    Filesize

                    3.2MB

                    Download

                  • memory/1724-3884-0x0000023A10E10000-0x0000023A1114F000-memory.dmp

                    Filesize

                    3.2MB

                    Download

                  • memory/1724-4426-0x0000023A10E10000-0x0000023A1114F000-memory.dmp

                    Filesize

                    3.2MB

                    Download

                  • memory/1724-4247-0x0000023A10E10000-0x0000023A1114F000-memory.dmp

                    Filesize

                    3.2MB

                    Download