Overview

overview

9

Static

static

3

2026-05-22...at.exe

windows10-2004-x64

9

2026-05-22...at.exe

windows11-21h2-x64

9

Analysis

  • max time kernel
    148s
  • max time network
    147s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    22/05/2026, 12:36

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-05-22_fdb9eecfff6b1dd4a34bfbc4d5a22238_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
  • Size 3.2MB
  • Sample260522-psv22abs5k
  • SHA256 7ea1559ba4fa6f649ab800c8d1ed71a111f550be5aae07649a82e44571d88428
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationransomwarespywarestealertrojan

Malware Config

Signatures

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers 1 IoCs
  • Detects binaries and memory artifacts referencing sandbox DLLs typically observed in sandbox evasion 2 IoCs
  • Detects executables built or packed with MPress PE compressor 2 IoCs
  • Detects executables packed with ConfuserEx Mod 1 IoCs
  • Detects executables packed with Goliath 1 IoCs
  • Detects executables packed with Themida 1 IoCs
  • Downloads MZ/PE file 1 IoCs
  • Drops file in Drivers directory 7 IoCs
  • Modifies RDP port number used by Windows 1 TTPs
  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • Sets service image path in registry 3 TTPs 2 IoCs

    This determines the executable launched when a service starts. It can be used to establish persistence.

    persistence
  • Checks BIOS information in registry 2 TTPs 6 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 34 IoCs
  • Impair Defenses: Safe Mode Boot 1 TTPs 2 IoCs
    defense_evasion
  • Loads dropped DLL 35 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 64 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • ConfuserEx .NET packer 1 IoCs

    Detects ConfuserEx .NET packer.

  • Drops file in System32 directory 64 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 8 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 2 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

    persistenceprivilege_escalation
  • Modifies trusted root certificate store through registry 1 TTPs 14 IoCs

    A root certificate was added, modified, or removed in the trusted certificate store registry paths.

    defense_evasion
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 5 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 13 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: LoadsDriver 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-05-22_fdb9eecfff6b1dd4a34bfbc4d5a22238_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-05-22_fdb9eecfff6b1dd4a34bfbc4d5a22238_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe"
    1⤵
    • Downloads MZ/PE file
    • Drops file in Drivers directory
    • Checks BIOS information in registry
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:3368
  • C:\Windows\System32\alg.exe
    C:\Windows\System32\alg.exe
    1⤵
    • Executes dropped EXE
    PID:4828
  • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    PID:1844
  • C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv
    1⤵
      PID:920
    • C:\Windows\system32\fxssvc.exe
      C:\Windows\system32\fxssvc.exe
      1⤵
      • Executes dropped EXE
      • Modifies data under HKEY_USERS
      • Suspicious use of AdjustPrivilegeToken
      PID:1448
    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
      1⤵
      • Executes dropped EXE
      PID:4952
    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
      1⤵
      • Executes dropped EXE
      PID:4200
    • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
      "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
      1⤵
      • Executes dropped EXE
      PID:108
    • C:\Windows\System32\msdtc.exe
      C:\Windows\System32\msdtc.exe
      1⤵
      • Executes dropped EXE
      • Drops file in System32 directory
      • Drops file in Windows directory
      PID:1696
    • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
      "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
      1⤵
      • Executes dropped EXE
      PID:2172
    • C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe
      C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe
      1⤵
      • Executes dropped EXE
      PID:1184
    • C:\Windows\SysWow64\perfhost.exe
      C:\Windows\SysWow64\perfhost.exe
      1⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:1536
    • C:\Windows\system32\locator.exe
      C:\Windows\system32\locator.exe
      1⤵
      • Executes dropped EXE
      PID:4980
    • C:\Windows\System32\SensorDataService.exe
      C:\Windows\System32\SensorDataService.exe
      1⤵
      • Executes dropped EXE
      • Checks SCSI registry key(s)
      PID:4608
    • C:\Windows\System32\snmptrap.exe
      C:\Windows\System32\snmptrap.exe
      1⤵
      • Executes dropped EXE
      PID:2996
    • C:\Windows\system32\spectrum.exe
      C:\Windows\system32\spectrum.exe
      1⤵
      • Executes dropped EXE
      • Drops file in System32 directory
      • Checks SCSI registry key(s)
      PID:2400
    • C:\Windows\System32\OpenSSH\ssh-agent.exe
      C:\Windows\System32\OpenSSH\ssh-agent.exe
      1⤵
      • Executes dropped EXE
      PID:2964
    • C:\Windows\system32\TieringEngineService.exe
      C:\Windows\system32\TieringEngineService.exe
      1⤵
      • Executes dropped EXE
      • Checks processor information in registry
      • Suspicious use of AdjustPrivilegeToken
      PID:3080
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc
      1⤵
        PID:3248
      • C:\Windows\system32\AgentService.exe
        C:\Windows\system32\AgentService.exe
        1⤵
        • Executes dropped EXE
        • Suspicious use of AdjustPrivilegeToken
        PID:4660
      • C:\Windows\System32\vds.exe
        C:\Windows\System32\vds.exe
        1⤵
        • Executes dropped EXE
        PID:4584
      • C:\Windows\system32\vssvc.exe
        C:\Windows\system32\vssvc.exe
        1⤵
        • Executes dropped EXE
        • Suspicious use of AdjustPrivilegeToken
        PID:4480
      • C:\Windows\system32\wbengine.exe
        "C:\Windows\system32\wbengine.exe"
        1⤵
        • Executes dropped EXE
        • Suspicious use of AdjustPrivilegeToken
        PID:4224
      • C:\Windows\system32\wbem\WmiApSrv.exe
        C:\Windows\system32\wbem\WmiApSrv.exe
        1⤵
        • Executes dropped EXE
        PID:2796
      • C:\Windows\system32\SearchIndexer.exe
        C:\Windows\system32\SearchIndexer.exe /Embedding
        1⤵
        • Executes dropped EXE
        • Enumerates connected drives
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:3628
        • C:\Windows\System32\SearchProtocolHost.exe
          "C:\Windows\System32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
          2⤵
          • Modifies data under HKEY_USERS
          PID:4632
        • C:\Windows\system32\SearchFilterHost.exe
          "C:\Windows\system32\SearchFilterHost.exe" 940 2804 2648 924 {0E5DCEC5-7795-4E38-9621-94DFD9F9A421}
          2⤵
          • Modifies data under HKEY_USERS
          PID:2604
        • C:\Windows\system32\SearchFilterHost.exe
          "C:\Windows\system32\SearchFilterHost.exe" 940 2828 2836 924 {85EE815A-7738-4808-A14A-3AD87E32A3BF}
          2⤵
          • Modifies data under HKEY_USERS
          PID:4152
      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe"
        1⤵
        • Drops file in Drivers directory
        • Executes dropped EXE
        • Impair Defenses: Safe Mode Boot
        • Loads dropped DLL
        • Enumerates connected drives
        • Drops file in Program Files directory
        • Modifies trusted root certificate store through registry
        • Modifies Internet Explorer settings
        • Modifies data under HKEY_USERS
        • Modifies system certificate store
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:1960
        • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
          "C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe" /installmbtun
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Drops file in System32 directory
          • Drops file in Windows directory
          PID:6620
        • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
          "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" /Service /Protected
          2⤵
          • Drops file in Drivers directory
          • Executes dropped EXE
          • Modifies registry class
          PID:5720
      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe"
        1⤵
        • Executes dropped EXE
        PID:4708
      • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe"
        1⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Event Triggered Execution: Netsh Helper DLL
        PID:7148
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
        1⤵
        • Drops file in Windows directory
        • Checks SCSI registry key(s)
        • Suspicious use of WriteProcessMemory
        PID:5228
        • C:\Windows\system32\DrvInst.exe
          DrvInst.exe "4" "9" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf" "9" "4ba9030c7" "0000000000000150" "Service-0x0-3e7$\Default" "0000000000000160" "208" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun"
          2⤵
          • Drops file in System32 directory
          • Drops file in Windows directory
          • Checks SCSI registry key(s)
          • Modifies data under HKEY_USERS
          PID:5292
      • C:\Windows\system32\DRIVERS\MbamElam.sys
        C:\Windows\system32\DRIVERS\MbamElam.sys
        1⤵
        • Executes dropped EXE
        PID:6108
      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"
        1⤵
        • Executes dropped EXE
        PID:6128
      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"
        1⤵
        • Drops file in Drivers directory
        • Sets service image path in registry
        • Checks BIOS information in registry
        • Executes dropped EXE
        • Loads dropped DLL
        • Enumerates connected drives
        • Drops file in System32 directory
        • Modifies trusted root certificate store through registry
        • Checks processor information in registry
        • Modifies Internet Explorer settings
        • Modifies registry class
        • Modifies system certificate store
        • Suspicious use of WriteProcessMemory
        PID:124
        • C:\ProgramData\Malwarebytes\MBAMService\rmode\mbrescue.exe
          "C:\ProgramData\Malwarebytes\MBAMService\rmode\mbrescue.exe" /rescuemode "C:\Program Files\Malwarebytes\Anti-Malware" "C:\ProgramData\Malwarebytes\MBAMService"
          2⤵
          • Checks BIOS information in registry
          • Executes dropped EXE
          PID:5652
      • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe"
        1⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Event Triggered Execution: Netsh Helper DLL
        PID:6448
      • C:\Windows\System32\svchost.exe
        C:\Windows\System32\svchost.exe -k AppReadiness -p -s AppReadiness
        1⤵
          PID:6828
        • C:\Windows\system32\DRIVERS\mbamswissarmy.sys
          C:\Windows\system32\DRIVERS\mbamswissarmy.sys
          1⤵
          • Executes dropped EXE
          PID:2124
        • C:\Windows\system32\DRIVERS\MbamChameleon.sys
          C:\Windows\system32\DRIVERS\MbamChameleon.sys
          1⤵
          • Executes dropped EXE
          PID:5388

        Network

              MITRE ATT&CK Enterprise v16

              Reconnaissance

              Resource Development

              Initial Access

              Execution

              Persistence

              Boot or Logon Autostart Execution

              1
              T1547

              Registry Run Keys / Startup Folder

              1
              T1547.001

              Create or Modify System Process

              1
              T1543

              Windows Service

              1
              T1543.003

              Event Triggered Execution

              2
              T1546

              Component Object Model Hijacking

              1
              T1546.015

              Netsh Helper DLL

              1
              T1546.007

              Privilege Escalation

              Boot or Logon Autostart Execution

              1
              T1547

              Registry Run Keys / Startup Folder

              1
              T1547.001

              Create or Modify System Process

              1
              T1543

              Windows Service

              1
              T1543.003

              Event Triggered Execution

              2
              T1546

              Component Object Model Hijacking

              1
              T1546.015

              Netsh Helper DLL

              1
              T1546.007

              Defense Evasion

              Impair Defenses

              1
              T1562

              Safe Mode Boot

              1
              T1562.009

              Modify Registry

              3
              T1112

              Subvert Trust Controls

              2
              T1553

              Install Root Certificate

              2
              T1553.004

              Credential Access

              Credentials from Password Stores

              1
              T1555

              Credentials from Web Browsers

              1
              T1555.003

              Unsecured Credentials

              1
              T1552

              Credentials In Files

              1
              T1552.001

              Discovery

              Peripheral Device Discovery

              2
              T1120

              Query Registry

              5
              T1012

              System Information Discovery

              5
              T1082

              System Location Discovery

              1
              T1614

              System Language Discovery

              1
              T1614.001

              Lateral Movement

              Remote Services

              1
              T1021

              Remote Desktop Protocol

              1
              T1021.001

              Collection

              Data from Local System

              1
              T1005

              Command and Control

              Exfiltration

              Impact

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              elevation_service.exe
              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
              • Size 2.7MB
              • SHA256 96a2135e5f2b6faadeb5f863c20fe398dd9cd8308204b55a107b4e3d1015f59a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              maintenanceservice.exe
              • Path C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
              • Size 826KB
              • SHA256 fd3acbb4d85062471a972acc7502ff2730664650ead0001056c15f25aa4c842e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              OSE.EXE
              • Path C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE
              • Size 805KB
              • SHA256 ef3cab1c82713bd5905b1874cb9c0489a2b9574afa6d94871c66bb9174491e49
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              elevation_service.exe
              • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
              • Size 2.8MB
              • SHA256 ff6d3cea545e511318285d627335a4bf34d510ab8ea8c16bb160e9d8c6f8309e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBAMCore.dll
              • Path C:\Program Files\Malwarebytes\Anti-Malware\MBAMCore.dll
              • Size 8.6MB
              • SHA256 4072fea1c8284e71f9a4123ec9bbde7dc35f1d1b2a1745f9f33c728bfa8856a7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBAMInstallerService.exe
              • Path C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
              • Size 10.6MB
              • SHA256 f1814ac13924bf83d863388f733b5b5c9c309563ad678c0acd16f9c5611a7e07
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBAMWsc.exe
              • Path C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe
              • Size 4.2MB
              • SHA256 7878a9b10903b8c0def49015deefd48a3ea0e46c0f5ac9ae755336994e020152
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBVpnTunnelService.exe
              • Path C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
              • Size 2.7MB
              • SHA256 05d4d87f43646f7ca2e50520d8850e8808748a508c2761838d5fb92d66d6ce35
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBVpnTunnel_mbtun.dll
              • Path C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnel_mbtun.dll
              • Size 4.2MB
              • SHA256 ed2a9ae7540aee752bc3e676bc01bbe1d87a857b8348ed114724956fc431908a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ServiceConfig.json
              • Path C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json
              • Size 621B
              • SHA256 4cfe19c37f46198f376c77b01437e6c06e7622a4a0d3d684702f305d9e4ed61b
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              ServiceConfig.json
              • Path C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json
              • Size 784B
              • SHA256 a81e2a9ea9d8aea48ed52845ba61c3750f0bf60db1a34a0947464c3e0d332bb1
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              malwarebytes_assistant.runtimeconfig.json
              • Path C:\Program Files\Malwarebytes\Anti-Malware\malwarebytes_assistant.runtimeconfig.json
              • Size 372B
              • SHA256 1eca0f0c70070aa83bb609e4b749b26dcb4409784326032726394722224a098a
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              mbtun.inf
              • Path C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf
              • Size 1KB
              • SHA256 4a350fc20834a579c5a58352b7a3aa02a454abbbd9eecd3cd6d2a14864a49cd8
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              MBAMSwissArmy.cat
              • Path C:\Program Files\Malwarebytes\Anti-Malware\sdk\MBAMSwissArmy.cat
              • Size 11KB
              • SHA256 a96e70795bb1f68016ae0b18d77f88aaf146d5f642974d26112bc89bcd496414
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBAMSwissArmy.inf
              • Path C:\Program Files\Malwarebytes\Anti-Malware\sdk\MBAMSwissArmy.inf
              • Size 2KB
              • SHA256 ff93773f55bf4a6a0242adf82276a8c95c0b244b9bc05e515c4e810c81a960e8
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              MBAMSwissArmy.sys
              • Path C:\Program Files\Malwarebytes\Anti-Malware\sdk\MBAMSwissArmy.sys
              • Size 240KB
              • SHA256 0cd62ce0cf56289cb0aa1e5330683704dc8e34c08a15407c9fdbc1948f5e12a3
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              srvversion.dat
              • Path C:\Program Files\Malwarebytes\Anti-Malware\srvversion.dat
              • Size 9B
              • SHA256 9fc2703e411bfd8338906e962293e9e4d4aa52ecd400dfbc00cb4fb7bb33ce32
              • MD5 SHA1 SHA512
              Submit Download

              7z.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\7z.dll
              • Size 1.6MB
              • SHA256 bb01c6fbb29590d6d144a9038c2a7736d6925a6dbd31889538af033e03e4f5fa
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              7z.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\7z.dll
              • Size 1.6MB
              • SHA256 623e628393bc4b8131c1f4302b195429dfa67e890d3325ceaa56940660052b1b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              AEControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\AEControllerImpl.dll
              • Size 4.9MB
              • SHA256 0f90b29d240f6d34b0df3d79b2f6629edee855cc5fec7701377e4543327633d2
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ActionsShim.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\ActionsShim.dll
              • Size 3.7MB
              • SHA256 6c5047cb77ea843e8386ba2b26a8458e6255e2ab94d493e914620623723c6b32
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ArwControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\ArwControllerImpl.dll
              • Size 5.5MB
              • SHA256 ca1f915b6ebf65a1fbaf7b8f917424d9436aec03826830d8ef7867e01d2e9e03
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ArwLib.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\ArwLib.dll
              • Size 7.2MB
              • SHA256 9a607b1ac95b121d6b672099459b19e5016c2dd1e8a4a24071bf9464c567c657
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Assistant.deps.json
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Assistant.deps.json
              • Size 28KB
              • SHA256 d4be9e364bad18eeb3bbc0845627345a38d7a96857a7f49ac07c5179fe970077
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Assistant.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Assistant.dll
              • Size 156KB
              • SHA256 b639443f349dd110b2252b07f2fa8db5a6b5689f91bbe13a9db76ddb94ec708d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Assistant.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Assistant.exe
              • Size 288KB
              • SHA256 aa399241663b0d9e6636d20f7ac52ab74932904dffc50ab625a0b6a73eae70c1
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              BrowserSDKDLLShim.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\BrowserSDKDLLShim.dll
              • Size 3.7MB
              • SHA256 f6d24605eb688e039e4509d184d974bb14c4c38528edad129d0653eadfea80f9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              CleanControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\CleanControllerImpl.dll
              • Size 8.7MB
              • SHA256 66052dfedb06314a53d8623c028ccfc8a73246e93af71ff1c05e94390e2b9160
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              CloudControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\CloudControllerImpl.dll
              • Size 6.9MB
              • SHA256 71b6312c8f6bd8e62c7f766ed56dea99f9daca0963039128ba11e4b6842b0922
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              DryIoc.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\DryIoc.dll
              • Size 597KB
              • SHA256 07f5c78ad2c3bdaf6860e49f8fa2ba62533df2656aa2879585458bb2d0857502
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              IdentityModel.OidcClient.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\IdentityModel.OidcClient.dll
              • Size 191KB
              • SHA256 84edd7b103e4f3da43e93afced2bdd4ccb6b65ef7ad1915b81b5eb6315537131
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              IdentityModel.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\IdentityModel.dll
              • Size 215KB
              • SHA256 922c1745564bd47001df14373c836c60072615bdfbad59e0895e981e4542a78d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              LicenseControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\LicenseControllerImpl.dll
              • Size 7.1MB
              • SHA256 9d50b1da54a81cfccf1947a3448e4520b8165d1f8bbb970afca2ad87078235bf
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBAMCrashHandler.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\MBAMCrashHandler.exe
              • Size 890KB
              • SHA256 164932ea0ead0fc1d660b075913244fe7ca7322c725cdb0903ae4cf217b19a64
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBAMService.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\MBAMService.exe
              • Size 10.9MB
              • SHA256 8615c75b2e4e48cd7e1c0a44267969d5d14a0af9b265f9dc0ffa6c8ab77da3e9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBAMShim.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\MBAMShim.dll
              • Size 4.3MB
              • SHA256 116a8d0f27c2dfbfcea03f29e63fd3b993f468593dd794e64bf58f4873d1cd17
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBVpnTunnel_wireguard.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\MBVpnTunnel_wireguard.dll
              • Size 2.9MB
              • SHA256 ec1a86d8aac7c43f95b33cc4e1b27d1590bd5cadb46438bbee03990c95da653d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MWACControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\MWACControllerImpl.dll
              • Size 7.5MB
              • SHA256 de2dae4a12a73667b42dc5eaeb3789e03481d8797c0257e32eb86ed5e83c5e3c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.Interop.Activation.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Malwarebytes.Interop.Activation.dll
              • Size 36KB
              • SHA256 f5a9e3587fcf855046d8b08e86ed61105f2f330a1c9021461446c137ed3b9ac5
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.Protection.Interop.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Malwarebytes.Protection.Interop.dll
              • Size 2.5MB
              • SHA256 79dd4b1f0df86422b83a694994db2dace5c2b14a3e7f224a46196a4f1232e1b4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.UI.Controls.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Malwarebytes.UI.Controls.dll
              • Size 32KB
              • SHA256 4c3d97304af4e091ee4ed390f2c75deb04de900ab404bc41e529a0c5bbbd04c9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.UI.Style.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Malwarebytes.UI.Style.dll
              • Size 108KB
              • SHA256 ba1e626a9b6a3d7c967d00ae31b7a758edb0ac23d8332939f044710d8e6288a9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.UI.Theme.Dark.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Malwarebytes.UI.Theme.Dark.dll
              • Size 55KB
              • SHA256 e0b84c137d3cef1dd43fc3572d359373b1614ab8aa0f5091f58120bfd3fc1c53
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.UI.Theme.Light.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Malwarebytes.UI.Theme.Light.dll
              • Size 55KB
              • SHA256 d2d177294181c0bc81baef93502e603eb1fdcff51b074a1f068c38003f1c0502
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.UI.Theme.Primitives.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Malwarebytes.UI.Theme.Primitives.dll
              • Size 2.1MB
              • SHA256 7a543d38cb51c1fae0e41297c50247f7558aae0e879f7d6762b2349193ad992f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.UI.TrayNotification.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Malwarebytes.UI.TrayNotification.dll
              • Size 49KB
              • SHA256 bbe5081e5e170dfd8827b2bf3e07babe1bcac633230062a2cf9288adc451fc7f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.deps.json
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Malwarebytes.deps.json
              • Size 51KB
              • SHA256 1bbd3f0c4e83b6bc09a3d585b6c394a01cce4c1e9a7ef3cf47ef93ef86883203
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Malwarebytes.dll
              • Size 10.1MB
              • SHA256 a939b4cc6c6fb20fbcbb92daa916382cc2a72dc81e19d4d0d5913fdd2540bfa9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Malwarebytes.exe
              • Size 291KB
              • SHA256 a98e7e53ec0e545d52df593ccc44b726fc6f12247782c0b88e434012d106419d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.runtimeconfig.json
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Malwarebytes.runtimeconfig.json
              • Size 489B
              • SHA256 28d737bcc7e791e223784d6210a13cf1a46474a49c8bebcf60c89f991eca09f5
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              Malwarebytes_Assistant.deps.json
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Malwarebytes_Assistant.deps.json
              • Size 28KB
              • SHA256 ea2f83bb7c48df846fd2c8d7a78ca277f9ecf1390b5b952bb35faa96da67c478
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes_Assistant.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Malwarebytes_Assistant.dll
              • Size 160KB
              • SHA256 8e723ab7f2d70bc707b84c6cbf4019373e145388bc64ea1d31e72dd744422e64
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes_Assistant.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Malwarebytes_Assistant.exe
              • Size 288KB
              • SHA256 a3fd92dd4b7edaed8137d731d2bdd35af1d4d3bfe440cfcbf31e0181c68a7e6a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MbamBgNativeMsg.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\MbamBgNativeMsg.exe
              • Size 4.3MB
              • SHA256 ea97af9bdc388c8b2f43b070b39ff3c30a32bac2b9a5143596a18038f5b027d9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MbamUI.Core.deps.json
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\MbamUI.Core.deps.json
              • Size 12KB
              • SHA256 0a6aa712caee3bd6ec47d861d101d864313fd5879cfcfcf1219c4f64b2742ddd
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MbamUI.Core.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\MbamUI.Core.dll
              • Size 160KB
              • SHA256 ab185b1b0e4e6bfb908fd0e2d14261e58856e3026ab78eba90c7bfd51c1c145b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MbamUI.Data.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\MbamUI.Data.dll
              • Size 1.5MB
              • SHA256 173540983a9e00062514642b2568228647c407b54c5703bd116be8e6457cb8ff
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MbamUI.Services.deps.json
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\MbamUI.Services.deps.json
              • Size 27KB
              • SHA256 44b9575dd55d28a1467f5a0c2ae3b5ed6ccff514c0a5dc27aeea04aee1e59b83
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MbamUI.Services.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\MbamUI.Services.dll
              • Size 3.4MB
              • SHA256 440ddf274aa475aee0b0794f2582aa0aaad1693957c07d27473687d8ad8c2d1a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MbamUI.Tray.deps.json
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\MbamUI.Tray.deps.json
              • Size 29KB
              • SHA256 256f61cdb2cc148458746a52a63de9c2a8e2efe7f3c3c2ca0e3e0d848c1c9d57
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MbamUI.Tray.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\MbamUI.Tray.dll
              • Size 178KB
              • SHA256 cd00591fa67d0140c7cf031053a31764603e435e48134346ad9bb20bc3c791be
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MdXaml.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\MdXaml.dll
              • Size 183KB
              • SHA256 2b3c517c7b40c80b5af6d37ab52ce768acb6654d2b444a926073f44e4637f51f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Data.Sqlite.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Microsoft.Data.Sqlite.dll
              • Size 166KB
              • SHA256 f103967a60922cd73af5773568359024b72e5251a7efce80f92d07866b44cd5e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.EntityFrameworkCore.Abstractions.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Microsoft.EntityFrameworkCore.Abstractions.dll
              • Size 33KB
              • SHA256 a777e065bcd584c87ab03720a3632065f28d634a5faeae4a72e888843a98dda9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.EntityFrameworkCore.Relational.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Microsoft.EntityFrameworkCore.Relational.dll
              • Size 1.8MB
              • SHA256 f84e9bb2a4e56e421c7e8ff872efd59e726310cbe62895f5d1bf55aaa597fced
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.EntityFrameworkCore.Sqlite.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Microsoft.EntityFrameworkCore.Sqlite.dll
              • Size 199KB
              • SHA256 ae5b7c95ead6afec11d44b51ac9ea67d2616726d0dd5870b214c1e53ba96976c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.EntityFrameworkCore.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Microsoft.EntityFrameworkCore.dll
              • Size 2.0MB
              • SHA256 5f9599e42e226c8e48ea2c49322f02f9953314efa7c15467c6038312ab729609
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.Caching.Abstractions.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Microsoft.Extensions.Caching.Abstractions.dll
              • Size 31KB
              • SHA256 c004f78d9f8378c5f79ac3a88e90625a117b9700a75f5f02266289dd4d28e451
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.Caching.Memory.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Microsoft.Extensions.Caching.Memory.dll
              • Size 42KB
              • SHA256 9ef11f0b594d5be76341ca65a53bf3930aa807c312a278ae22043dcf4db9ce25
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.Configuration.Abstractions.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Microsoft.Extensions.Configuration.Abstractions.dll
              • Size 28KB
              • SHA256 893f042b8bea61e3e56091ee6167af61bc38a39d35cb1d0f9b222aae4493146a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.DependencyInjection.Abstractions.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Microsoft.Extensions.DependencyInjection.Abstractions.dll
              • Size 61KB
              • SHA256 ac9cd953b7eeb03cf48e343c5ace6fc9b48ac968b68d1cb30ad1d6111178bf4d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.DependencyInjection.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Microsoft.Extensions.DependencyInjection.dll
              • Size 92KB
              • SHA256 df0ae00b1599acae93d9f4df2bcc6d0ba109221ccc44d2d1486183f84a5fec78
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.DependencyModel.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Microsoft.Extensions.DependencyModel.dll
              • Size 79KB
              • SHA256 8913b56a0f6e209ebaadaba532865b1ea8d10d73fec86a1b8f93fe0ed8e0d2b8
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.Logging.Abstractions.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Microsoft.Extensions.Logging.Abstractions.dll
              • Size 64KB
              • SHA256 ab36e8201d41dd751cbb712704dbe8492bdd0ab1bff6fb35371cf59bcd982181
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.Logging.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Microsoft.Extensions.Logging.dll
              • Size 51KB
              • SHA256 37b87b16ac688d5619168554a22cca2677e1115f21c2d5ebe2f39c024fee2b7f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.Options.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Microsoft.Extensions.Options.dll
              • Size 64KB
              • SHA256 fbb309a36bc91d90ec2984397bff4f75f35ac92909e0acd952c5264c5ac0a753
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.Primitives.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Microsoft.Extensions.Primitives.dll
              • Size 44KB
              • SHA256 f9f47907a041067d9bc1b9a9f516009b6ca0a9c6325ce83527883cc0d053dfa5
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Xaml.Behaviors.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Microsoft.Xaml.Behaviors.dll
              • Size 142KB
              • SHA256 0493049febb4be74bdf669ad7fa754941c2754fe33421e230a8f14c8fd06c8c4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MwacLib.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\MwacLib.dll
              • Size 6.4MB
              • SHA256 a61d5bc48277514b50c53b59d6b9fd759461be710a9d94a0bcbdd4c97f4dc376
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              PoliciesControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\PoliciesControllerImpl.dll
              • Size 6.1MB
              • SHA256 cd1e8f98551fb69d3d47837c09fea35be358dd7c27104afb7f1938a7fadbb2c5
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Prism.Container.Extensions.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Prism.Container.Extensions.dll
              • Size 20KB
              • SHA256 85a55b97f20431fcf6d33634de6a86d7c6d441be413c728e19dda8b0aef72e92
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Prism.DryIoc.Wpf.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Prism.DryIoc.Wpf.dll
              • Size 26KB
              • SHA256 ad1666c83f2554b09396386fcec856f9b3068b9bc2a29f13c08d3ce0c23d7d4f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Prism.Wpf.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Prism.Wpf.dll
              • Size 132KB
              • SHA256 c3b44b118486a5d74d696c14853e5306ec893dadd0be8ea6f404edae8c66f2d3
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Prism.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Prism.dll
              • Size 89KB
              • SHA256 92090c9c3c5195149885be91aa469b85d2cba9a215cb3bfb65e93945f33d852b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              QRCoder.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\QRCoder.dll
              • Size 169KB
              • SHA256 4cca9817dc66b99653653f570a5d22e31fbd4b8d3f8c526c9e3b2594d9116620
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              RTPControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\RTPControllerImpl.dll
              • Size 6.4MB
              • SHA256 129c0263a93d2faab793f0dd3cfe592ddd8c92b43ab29679f9bf6d07e6839a1f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SPControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\SPControllerImpl.dll
              • Size 4.5MB
              • SHA256 fe1dc49340095d3b8c30a1be99d9c95f06565f456d90771942db725b7d078f2e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SQLitePCLRaw.batteries_v2.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\SQLitePCLRaw.batteries_v2.dll
              • Size 32KB
              • SHA256 ed1475cd55b4b28768efedffe41c84708f005dc3d15784504cf357d29bbe8981
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SQLitePCLRaw.core.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\SQLitePCLRaw.core.dll
              • Size 77KB
              • SHA256 c84ea9a36dba4c8001adbcc7152526411a258c5b9436a116eef3701de7e140dd
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SQLitePCLRaw.provider.e_sqlcipher.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\SQLitePCLRaw.provider.e_sqlcipher.dll
              • Size 63KB
              • SHA256 3041e695aae69c5a8b4372c1e48719b29f235c0dc6dad0e9db78ed9ef631b4c1
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SQLitePCLRaw.provider.e_sqlite3.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\SQLitePCLRaw.provider.e_sqlite3.dll
              • Size 62KB
              • SHA256 f19a2bdc8b4a635fe1eafd92054468f8a7858969f164d114dcffb783dbe0d2e7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ScanControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\ScanControllerImpl.dll
              • Size 6.9MB
              • SHA256 f41c5a9754861fd06b05470a267fa9d6f801a0dce1834ad36aeec3212458841c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SelfProtectionSdk.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\SelfProtectionSdk.dll
              • Size 4.6MB
              • SHA256 0adb57549c241007b2b96194405d96de91b5f227d689823b8ca680b0a50ab1d8
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SelfProtectionShim.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\SelfProtectionShim.dll
              • Size 4.0MB
              • SHA256 b87147bde9ab9fbebbcb5ff00986e0cfc76b3f66582ab67195f3ce5bff8106ba
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Sentry.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Sentry.dll
              • Size 754KB
              • SHA256 8de41a631a741c44381ce8705c9093ef0e95f8b3bcba0988013ac7d9e9bc2315
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Serilog.Extensions.Logging.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Serilog.Extensions.Logging.dll
              • Size 44KB
              • SHA256 2b1fe300101924c8a64e34865215a7f94af49a900379a2eb10017bd186178421
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Serilog.Sinks.File.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Serilog.Sinks.File.dll
              • Size 57KB
              • SHA256 26c3e4f919cd605846f3bc97f3af951faa3e5eee18c23e4620069be574e14cab
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Serilog.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Serilog.dll
              • Size 153KB
              • SHA256 dcf73068f5fcf3e6d6770d18f8bdc80a260dbd7431f9eb32f1fd3d05692308f9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Swissarmy.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\Swissarmy.dll
              • Size 3.7MB
              • SHA256 d6b7da0f184b933f54dae4ec18df8cdcefe6b4b0850cbfea03c794c6a64a9de6
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SwissarmyShim.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\SwissarmyShim.dll
              • Size 2.4MB
              • SHA256 540f989efbf6f865b88cdce5277737a1947aaa006543bcd6b2a72440b85fb8dd
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.Diagnostics.DiagnosticSource.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\System.Diagnostics.DiagnosticSource.dll
              • Size 160KB
              • SHA256 d6935e993b69f8abd934f01b0d7dd8ca9616a7ea94c7af59ed07b2fd3cf93a97
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.Diagnostics.EventLog.Messages.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\System.Diagnostics.EventLog.Messages.dll
              • Size 781KB
              • SHA256 6444dfa03609248effd398e8562af484ad0163a6c47cee6d3a287ffdef809ad2
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.DirectoryServices.AccountManagement.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\System.DirectoryServices.AccountManagement.dll
              • Size 268KB
              • SHA256 64e3c9c8474582853ba151287439a60c9dec916dcf3db096c4fe07a10d1eda3c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.DirectoryServices.Protocols.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\System.DirectoryServices.Protocols.dll
              • Size 136KB
              • SHA256 7a4bc24de93fbb7ff0f3bd8f10a74e68ea345b29b5c370fa1e31d3b36b9eb187
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.ServiceProcess.ServiceController.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\System.ServiceProcess.ServiceController.dll
              • Size 60KB
              • SHA256 b5c339cc240e490a996ca5ee526e885aa6ef214614761de7b7704a4a0d9aaabb
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.Text.Encodings.Web.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\System.Text.Encodings.Web.dll
              • Size 69KB
              • SHA256 d2af18fa9cec4f826b75649b1ad7fc88a07138adfdad986481f11db11817754e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.Text.Json.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\System.Text.Json.dll
              • Size 530KB
              • SHA256 a6cb476d20369516d882fdd0f318a7fe9eb694c166dc9f2089e99b4c27f17ac7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              TelemetryControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\TelemetryControllerImpl.dll
              • Size 7.3MB
              • SHA256 72a27362209a865cb90315f99c7f7bcc34cfdf39e48bd8d1dc4edb961edfb01e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              UpdateControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\UpdateControllerImpl.dll
              • Size 4.5MB
              • SHA256 17d3d9cafc933fc96e1456491e6c589f00d02c0f901e20240ed8b81d74d2baf7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              VPNControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\VPNControllerImpl.dll
              • Size 3.5MB
              • SHA256 0ab61876b204c8eb1abba90cdf7fda5f5278cf33f8adf9476de2008c4879c0c6
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ddshelper.bin
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\ddshelper.bin
              • Size 1KB
              • SHA256 99198c557b03b24dbf40724c62c12c8c039447afedfd109e20061288963d9454
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              ddshelper.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\ddshelper.exe
              • Size 253KB
              • SHA256 d2257e7643128166f46a88da45ab9c38b7c23d0d727551dbd9f780a43f4abd11
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              e_sqlcipher.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\e_sqlcipher.dll
              • Size 1.8MB
              • SHA256 5151e6e3c9c715c5f5dbea8a2e463817798745756b51eb0fa22d161b754a5ca0
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              e_sqlite3.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\e_sqlite3.dll
              • Size 1.6MB
              • SHA256 8c98b2d4f8d8de9c796f97ad6fbfdee981446bf6bd59235d2875e03e62fe4646
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mb5uns.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\mb5uns.exe
              • Size 2.2MB
              • SHA256 2557968c8571a3e8147656ccc537866ec1644ec12ff4dd5d2aed0593c6000fba
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbae-api-na.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\mbae-api-na.dll
              • Size 723KB
              • SHA256 9da91636ba3d7792a2a5bc6d0824e9da21b1998bae8381c5bac3bfaf065a0398
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbae.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\mbae.dll
              • Size 1.4MB
              • SHA256 c9abc12119ebf2eba9f723ae5e5d9d2bc763e49ff0c2100b672a25bd6bc39943
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbae.sys
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\mbae.sys
              • Size 156KB
              • SHA256 713c4c1b31c414d227e47f842f17504af8cebf12f366d64272d9754ce2b7f291
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbae64.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\mbae64.dll
              • Size 1.7MB
              • SHA256 1daa2d7e00dc951d48ba9335126a353c8a6bb6ec9114fb6022f9655327b9e0c4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbamelam.cat
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\mbamelam.cat
              • Size 11KB
              • SHA256 64416d564725416c6869ea951878a2734b1f6940b11f7961a897c45f0d8c6625
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbamelam.inf
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\mbamelam.inf
              • Size 2KB
              • SHA256 e26c2d3347e5f077da92713c9df3cd3eae438fb7e29810bd5c3afe567d2d3125
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              mbamelam.sys
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\mbamelam.sys
              • Size 21KB
              • SHA256 ded569e249e590314d095f740c6b8934a5a797e4f3edbe0f78eac9d333f12a2a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbampt.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\mbampt.exe
              • Size 33KB
              • SHA256 0eba9572e3667ca5043be61302f8fc89ff0eeec11f61a53b16f62d64efe83abe
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbamsisdk.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\mbamsisdk.dll
              • Size 12.7MB
              • SHA256 0778cc030a9e8b7cd66950bf492554842ffb64d8e01b145c2dd9551c9239a78a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbcut.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\mbcut.dll
              • Size 4.1MB
              • SHA256 c7b5882996f126fe957bf12e32a6d3dafeb3677f1e88a972e600d03abcd36270
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbshlext.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\mbshlext.dll
              • Size 3.1MB
              • SHA256 8af36217efcc1b2a677accc77839ed3b67ddbfcabfa16caaa42c7e95796b940a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbtun.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\mbtun.dll
              • Size 2.8MB
              • SHA256 f21a980316bd4c57c70e00840ab76d9ad412092d7d2d6a2cff4f1311f7c05364
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              offreg.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\offreg.dll
              • Size 140KB
              • SHA256 8e6c155a97666c8e6a3f9ea95bfc6f6e4f87beac53dd72164aba3ef33ff88db1
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              rtp.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\rtp.dll
              • Size 4.5MB
              • SHA256 0509d1438fe044da9d37a34710ddda2f8dfae5a3f240131968281b6bd16ee6e7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              sentrynativesdk.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\sentrynativesdk.dll
              • Size 596KB
              • SHA256 6e6096dabfe6b34c3e6ccba49cef544b7be6158e34168f819f8cac1b3645d4d0
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              version.dat
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\version.dat
              • Size 10B
              • SHA256 92108f60c42e942fbef31c35973fc0f340ae27b9fcdc0c30034260c5c8eaa055
              • MD5 SHA1 SHA512
              Submit Download

              wireguard.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\ctlrpkg\wireguard.dll
              • Size 1.3MB
              • SHA256 d2ad6ce25634776f5067fd9d5750a5e3d2add1adde98eb1f56a2df194d0e9cbb
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ActionsV5.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\ActionsV5.dll
              • Size 6.1MB
              • SHA256 d513f3a50ec070bbd74f78d27d79b6cb60aff48310283c74ebeb204aacf375a4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              BrowserSDKDLLV5.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\BrowserSDKDLLV5.dll
              • Size 7.0MB
              • SHA256 c72e39709b26ac7577200a76515347ff11c0a9424cf61657762d657e7aecd974
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Global.nm
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\Global.nm
              • Size 341KB
              • SHA256 afb78bd0613f72aa10df54c1344972b551d40ba5d9827e0c8a1170fec77c2c22
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Global.sr
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\Global.sr
              • Size 24.0MB
              • SHA256 64340346806ec59bd105b66d4273766642cc289580d0a69c54323a0d8c79bc7c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              cfg.bin
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\cfg.bin
              • Size 2KB
              • SHA256 06cee2bf32530582fe8a7f84afd9be786f4986f3b35ad5c3989e61b7fab1e3f2
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              clean.mbdb
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\clean.mbdb
              • Size 25KB
              • SHA256 c6ca1c2610dd39b16cbe9795ce1670b8776ac92f6650f5376b0183951fc2eaf5
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              dbmanifest2.dat
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\dbmanifest2.dat
              • Size 924B
              • SHA256 95c4504ce1b6f65c600507c944b43018b042c3e42f09daa2fd42228ff4f0f1ca
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              dynconfig.dat
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\dynconfig.dat
              • Size 39KB
              • SHA256 008254ca1f4d6415da89d01a4292911de6135b42833156720a841a22685765dc
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              exclusions.txt
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\exclusions.txt
              • Size 23KB
              • SHA256 9e87e4c9da3337c63b7f0e6ed0eb71696121c74e18a5da577215e18097715e2f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              igV5.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\igV5.exe
              • Size 1.8MB
              • SHA256 18730539538c30c3c298ccd999220be0e9a91ed8666a8b1da2c6d136e6335855
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbdigsig2.dat
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\mbdigsig2.dat
              • Size 514B
              • SHA256 a44059975b657ed87ddc7cefa2bd5bd8577e214b6e0d2f1c6f4678dfaf2238f3
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              prot.mbdb
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\prot.mbdb
              • Size 24B
              • SHA256 6089fbf0c0c1413f62e91dc9497bedc6d8a271e9dc761e20adc0dccf6f4a0c1f
              • MD5 SHA1 SHA512
              Submit Download

              rdefs.mbdb
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\rdefs.mbdb
              • Size 24B
              • SHA256 850a4ea37a0fd6f68bf95422d502b2d1257264eb90cc38c0a3b1b95aa375be55
              • MD5 SHA1 SHA512
              Submit Download

              rules.mbdb
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\rules.mbdb
              • Size 14.5MB
              • SHA256 74ff97a3fa1f5874c284a3e453133d7126846fed02d55366e36dd0f09508b6cc
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              sampleV5.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\sampleV5.dll
              • Size 524KB
              • SHA256 06c1a019a4cdbc1d48327f33baa7cbdc95b71f6fd87245ea78610ecb20141dbb
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              scan.mbdb
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\scan.mbdb
              • Size 419KB
              • SHA256 4a044809695f16ad66fd00def8297cdc3a3fa3b9b5e0e2128a0c11700243c4ef
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              tids.mbdb
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\tids.mbdb
              • Size 159KB
              • SHA256 35e31534bda459f663fcd10575bdbc9b140310e74c9a7053da2c96ad2898c738
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              version.dat
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\version.dat
              • Size 48B
              • SHA256 2732bf6e994183e0c5087f86fe62c55c99dae6cf6f735afde4eba490a00804a1
              • MD5 SHA1 SHA512
              Submit Download

              wprot2.mbdb
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_dccd6a7555da11f1b74e5e773227dc97\dbclspkg\wprot2.mbdb
              • Size 15.8MB
              • SHA256 4a075dcc8691230d30966e5c6fdfa220c81603a9816bf5a98df145626cab5749
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              AeConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
              • Size 1KB
              • SHA256 b9e5034f4394383ece9651317a470bf609fe500418a46bd3a1c4802172e56d3e
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              AeConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
              • Size 47KB
              • SHA256 cd68de57ed414cf457899aaced211a02365fea47e9cee906580de2ad2a4c048c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              AeConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
              • Size 66KB
              • SHA256 740f1b8fed7d74a2dff201fdb51b514bab7de4d2168904a7e0e7f19cf1a9cbf1
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              AeConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
              • Size 66KB
              • SHA256 3c196c49161492ed1c4ea8c0586fd756f34f24280b760ab95a8271243bcadd19
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ArwControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json
              • Size 1KB
              • SHA256 621610b4c46b197293259b22d732f664ccfc79e0c58c9ce9547714158ace81f5
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              CleanControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json
              • Size 949B
              • SHA256 6e51d203b28f044e03bd7fc9f9501aad3b875a012867e048e43c0ed8431f5b60
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              CloudConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json
              • Size 1KB
              • SHA256 f7838bb2efbacc76cdce7f55ef7ab768dc9f2918089db2fb368826a8e4d351df
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              LicenseConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
              • Size 12KB
              • SHA256 467a422ea1cd6fc089a59c73d4ad5414f57b8e8f44ab705273c254cdb7fd3c48
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              LicenseConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
              • Size 12KB
              • SHA256 3fe110944a550bca278708be6e6d328c0a7728f2e5a3ff67d95abd243769f436
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              LicenseConfig.json.bak
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json.bak
              • Size 12KB
              • SHA256 b9450a1a9405bfe093d6c0d2773e34877e59b864f26d72a7381a9d11b1c401df
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MwacControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json
              • Size 2KB
              • SHA256 0ef662c0fa5e24ce3be5db2f2bbedd81cd97b1ec671d8af4ebbb3a9bec4cb801
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              PoliciesConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json
              • Size 814B
              • SHA256 98cec1d070a040f1f562323640e7fbb8b5892eb7c127e345be3b07c3986f1f86
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              RtpConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
              • Size 2KB
              • SHA256 c73f69e1379ab03196a41856d5709c876b4d59de0a9f69ce670e82a1f464eda2
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              ScanConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
              • Size 2KB
              • SHA256 7a8b591107dd69010d7b0b1d084fdf82a40a7a622944237b7e9b75fb710f8e1b
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              ScanConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
              • Size 5KB
              • SHA256 b9378d08a680495bc7b980b8a351245ab4d6d0cb9d3685c5020d8bb8f211d77e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SpConfigFile.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json
              • Size 11KB
              • SHA256 4c2dac347c02d96e8860d2c7a0abdc7b21c11461f358df5f13f3a5af61506e60
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              TelemCtrlConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
              • Size 1KB
              • SHA256 b156ada08f8b2ed2e87ec1409fc926843e87b8129a4440100e5d44479d802f45
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              TelemCtrlConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
              • Size 1KB
              • SHA256 50b277c894e1704d1441560a4fd919ed5d7c74abf738e81c7f8302ae3f0ae036
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              TelemCtrlConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
              • Size 1KB
              • SHA256 bc2afeec254e569d73a1b217c4f2f2b3a57065e83ee74831d32fc5f82ee54399
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              TelemCtrlConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
              • Size 1KB
              • SHA256 3944898eb00f0b9425e634502642306f0624c4b86eae55b2553f9558b83d6658
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              UpdateControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
              • Size 1KB
              • SHA256 a2e79a135d698badf2ec89b85e959571d193c4b783a63f36ccb9f3495d30d428
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              UpdateControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
              • Size 1KB
              • SHA256 ae5c6d0eb83c2ed617b562ed73b63d7498238fa587ce5c09fa54a11275ba74ce
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              UpdateControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
              • Size 1KB
              • SHA256 b746086d30a0b665160ea0eb125c36903eecc32ca9e1835b62fa8815e4b85995
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              UpdateControllerConfig.json.bak
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak
              • Size 1KB
              • SHA256 c2ce95e941fac87a94a79fca705febc7ae5cf80f8d8c11540b2056aef39ae71e
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              UpdateControllerConfig.json.bak
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak
              • Size 1KB
              • SHA256 067a70156f095d004fddcbce4a2187bae737d6859943371905e8eab6a0df1d46
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              UpdateControllerConfig.json.bak
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak
              • Size 1KB
              • SHA256 351dfcb2c2fdac11ead6aea1f3aef553a106c5a8fdde3e8bfe72f273d8ed2194
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              UpdateControllerConfig.json.bak
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak
              • Size 1KB
              • SHA256 dd34d44ed8218f3f4b80cbefc90f1e91091b23ee4663fe99adc196303629de50
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              UpdateControllerConfig.json.bak
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak
              • Size 1KB
              • SHA256 d8b6eb80b5c7ffeef26b699537413a54d19c991a200751db83f377cce532c740
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              VPNControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json
              • Size 1KB
              • SHA256 7a8d9bbc3b0f60a120c722af9f97511f687fb5c5e3b4ff9046131bc7f449c10c
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              VPNControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json
              • Size 1KB
              • SHA256 38644586999262c0565ec2aacc862b8cfd3565d3003ea9ec9a035730af65be7b
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              VPNServerListConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\VPNServerListConfig.json
              • Size 125B
              • SHA256 19c0aaab59f8cb48dc3ce611c39aa1827ef6b55378354bafe2131aee1b15ae70
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              pkgvers.dat
              • Path C:\ProgramData\Malwarebytes\MBAMService\pkgvers.dat
              • Size 78B
              • SHA256 6a02747fafab442c1a95f45965e1e3ec02f48a366472ddc3ce6b3cbe03fde589
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              mbrescue.exe
              • Path C:\ProgramData\Malwarebytes\MBAMService\rmode\mbrescue.exe
              • Size 7.7MB
              • SHA256 477919ecb586d6ef4a06793417c2ae3126c51a51cf9445d901e90e3627e7143b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              perfhost.exe
              • Path C:\Windows\SysWOW64\perfhost.exe
              • Size 588KB
              • SHA256 e048d2c9864ba5ea431801e4e5434de95319cdb4675493ffea2ac667c7270b06
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              AgentService.exe
              • Path C:\Windows\System32\AgentService.exe
              • Size 1.7MB
              • SHA256 af79a31da5f6f04ef2c3f7df8a93b6eff3947158ddb486c2574ea69edc27de9f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              dberr.txt
              • Path C:\Windows\System32\CatRoot2\dberr.txt
              • Size 104KB
              • SHA256 3c5c7818118f030361dc3fbd2d3e4140c0cfc061991a17416fa0fb13ee771843
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              DiagnosticsHub.StandardCollector.Service.exe
              • Path C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
              • Size 676KB
              • SHA256 00902b52d4b27ab32c54ced1d5c3ddcf42a97318e8c81e7ba07eea9cdd77332b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbtun.cat
              • Path C:\Windows\System32\DriverStore\Temp\{d644c202-6fa0-ab42-a2d6-e780b453d442}\mbtun.cat
              • Size 10KB
              • SHA256 9ceb410494b95397ec1f8fa505d071672bf61f81cc596b8eccd167a77893c658
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbtun.sys
              • Path C:\Windows\System32\DriverStore\Temp\{d644c202-6fa0-ab42-a2d6-e780b453d442}\mbtun.sys
              • Size 107KB
              • SHA256 6903e60784b9fa5d8b417f93f19665c59946a4de099bd1011ab36271b267261c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              FXSSVC.exe
              • Path C:\Windows\System32\FXSSVC.exe
              • Size 1.2MB
              • SHA256 1a247c0d2d03b358ee7492438d9a05616cf1b80d03be06e9a2ffc32ff8128e8a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Locator.exe
              • Path C:\Windows\System32\Locator.exe
              • Size 596KB
              • SHA256 b73ad87e1f12a60570a02058672292f9752cbf7579c53010d0692c45c00bf299
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ssh-agent.exe
              • Path C:\Windows\System32\OpenSSH\ssh-agent.exe
              • Size 940KB
              • SHA256 1b92997dd9a3429d48a0e41d19e0a9d4fb7c075d90cef2435b68eec966e4137c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              PerceptionSimulationService.exe
              • Path C:\Windows\System32\PerceptionSimulation\PerceptionSimulationService.exe
              • Size 800KB
              • SHA256 9b83b2794baa88d501d111828a5fd2bdc43bf819203aa1512398b6fb4e8b19d4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SearchIndexer.exe
              • Path C:\Windows\System32\SearchIndexer.exe
              • Size 1.4MB
              • SHA256 c95c62e7923e4750ac88971b19fb62c0519c956ba992771b59136346b6d94b4a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SensorDataService.exe
              • Path C:\Windows\System32\SensorDataService.exe
              • Size 1.7MB
              • SHA256 3bae0112a1cc280f8567e99c1fb1dd97b395bb36d23e1f4c28dbbd5acfe57117
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Spectrum.exe
              • Path C:\Windows\System32\Spectrum.exe
              • Size 1.3MB
              • SHA256 9e7abf043687f9ff0b0e702e6ba2492d3422e7bc06af69f7e66b0059f510f1fe
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              TieringEngineService.exe
              • Path C:\Windows\System32\TieringEngineService.exe
              • Size 904KB
              • SHA256 4596865e4a400885bdb4ff5b03effacfa6a763ad4ec13ae966597546c9f9cc18
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              VSSVC.exe
              • Path C:\Windows\System32\VSSVC.exe
              • Size 2.0MB
              • SHA256 6fc10cdbe6145317c8ef09cdc010b9bb0decf76bdd6c64c2a8d61ed4bd5953d8
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              alg.exe
              • Path C:\Windows\System32\alg.exe
              • Size 676KB
              • SHA256 f451b151ac20fa750699a9562a24bbd3a2c5586329361c3ef0dcefbc4eecf117
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              dberr.txt
              • Path C:\Windows\System32\catroot2\dberr.txt
              • Size 104KB
              • SHA256 123d57dfbf69c5ed76ed779fca3ba64aefbef2accf4f0ecbb2dec168e9c408c7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              msdtc.exe
              • Path C:\Windows\System32\msdtc.exe
              • Size 732KB
              • SHA256 a97e01e425ba103b024d8082962a347915c0d15826365c9757a788283cd18a56
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              snmptrap.exe
              • Path C:\Windows\System32\snmptrap.exe
              • Size 604KB
              • SHA256 983de061b1450708f64cd4060985c6c54c8523335580a8c40a7ed6efd7a8a107
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              vds.exe
              • Path C:\Windows\System32\vds.exe
              • Size 1.3MB
              • SHA256 92d99d96a79e1d79da311c1fc8504787912a025c6f5c5d3bb2663c546fb006bf
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              WmiApSrv.exe
              • Path C:\Windows\System32\wbem\WmiApSrv.exe
              • Size 768KB
              • SHA256 831df00a3be4646c105c8c0a358d6580e69321ceda500e048cdd94bc02e5adf4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              wbengine.exe
              • Path C:\Windows\System32\wbengine.exe
              • Size 2.1MB
              • SHA256 f1a676ad41e9a8a67de35da2aa78448af121db6a8245f79e79d1f3d88272a08b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mb_7209.tmp
              • Path C:\Windows\Temp\mb_7209.tmp
              • Size 107KB
              • SHA256 ad820dd54edb13e255d34eafacd71f278d6514e2f7e4c2970401f922a774ceb0
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              AppVClient.exe
              • Path C:\Windows\system32\AppVClient.exe
              • Size 1.3MB
              • SHA256 c3b55ad99800d2abdbb1bc984468c907234a6f56aa08fe503a81fcdaebdf8e0c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SgrmBroker.exe
              • Path C:\Windows\system32\SgrmBroker.exe
              • Size 956KB
              • SHA256 e3e796b1b256fead2ca815fc30253d45c2c33a1ab1f5fa2c52f50802ee19b1ee
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              StructuredQuerySchema.bin
              • Path C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\1033\StructuredQuerySchema.bin
              • Size 414KB
              • SHA256 e67e330837a6b2f6d5f76815e7235a512b54b1c90f2ad62a3e9d142ae6939c8d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              msiexec.exe
              • Path C:\Windows\system32\msiexec.exe
              • Size 744KB
              • SHA256 a899734cffeeb80259a50613fae27858eec6112b0b8a012f1dc86fb8284a2e31
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              memory/108-68-0x0000000140000000-0x00000001400D5000-memory.dmp
              Download

              memory/108-55-0x0000000000D50000-0x0000000000DB0000-memory.dmp
              Download

              memory/108-66-0x0000000000D50000-0x0000000000DB0000-memory.dmp
              Download

              memory/108-61-0x0000000000D50000-0x0000000000DB0000-memory.dmp
              Download

              memory/108-63-0x0000000140000000-0x00000001400D5000-memory.dmp
              Download

              memory/1184-95-0x0000000140000000-0x00000001400CA000-memory.dmp
              Download

              memory/1184-86-0x0000000000760000-0x00000000007C0000-memory.dmp
              Download

              memory/1184-92-0x0000000000760000-0x00000000007C0000-memory.dmp
              Download

              memory/1184-164-0x0000000140000000-0x00000001400CA000-memory.dmp
              Download

              memory/1448-29-0x0000000140000000-0x0000000140136000-memory.dmp
              Download

              memory/1448-52-0x0000000140000000-0x0000000140136000-memory.dmp
              Download

              memory/1536-105-0x0000000000860000-0x00000000008C7000-memory.dmp
              Download

              memory/1536-108-0x0000000000400000-0x0000000000497000-memory.dmp
              Download

              memory/1536-100-0x0000000000860000-0x00000000008C7000-memory.dmp
              Download

              memory/1536-167-0x0000000000400000-0x0000000000497000-memory.dmp
              Download

              memory/1696-71-0x0000000140000000-0x00000001400BA000-memory.dmp
              Download

              memory/1844-16-0x0000000140000000-0x00000001400AA000-memory.dmp
              Download

              memory/1844-17-0x0000000000730000-0x0000000000790000-memory.dmp
              Download

              memory/1844-25-0x0000000000730000-0x0000000000790000-memory.dmp
              Download

              memory/1844-111-0x0000000140000000-0x00000001400AA000-memory.dmp
              Download

              memory/2172-75-0x0000000000570000-0x00000000005D0000-memory.dmp
              Download

              memory/2172-158-0x0000000140000000-0x00000001400CF000-memory.dmp
              Download

              memory/2172-81-0x0000000000570000-0x00000000005D0000-memory.dmp
              Download

              memory/2172-83-0x0000000140000000-0x00000001400CF000-memory.dmp
              Download

              memory/2400-240-0x0000000140000000-0x0000000140149000-memory.dmp
              Download

              memory/2400-134-0x0000000140000000-0x0000000140149000-memory.dmp
              Download

              memory/2400-131-0x0000000000760000-0x00000000007C0000-memory.dmp
              Download

              memory/2604-567-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-728-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-853-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-852-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-804-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-792-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-737-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-734-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-736-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-735-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-730-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-731-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-733-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-732-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-854-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-721-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-383-0x0000020408B80000-0x000002040AA9A000-memory.dmp
              Download

              memory/2604-705-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-566-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-568-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-569-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-571-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-570-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-579-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-580-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-581-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-578-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-577-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-576-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-575-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-574-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-573-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-572-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-610-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-635-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-698-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-702-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2604-703-0x0000020408390000-0x00000204083A0000-memory.dmp
              Download

              memory/2796-379-0x0000000140000000-0x00000001400C2000-memory.dmp
              Download

              memory/2796-174-0x0000000140000000-0x00000001400C2000-memory.dmp
              Download

              memory/2964-147-0x0000000000950000-0x00000000009B0000-memory.dmp
              Download

              memory/2964-140-0x0000000140000000-0x0000000140102000-memory.dmp
              Download

              memory/2964-330-0x0000000140000000-0x0000000140102000-memory.dmp
              Download

              memory/2964-141-0x0000000000950000-0x00000000009B0000-memory.dmp
              Download

              memory/2996-228-0x0000000140000000-0x0000000140098000-memory.dmp
              Download

              memory/2996-119-0x0000000140000000-0x0000000140098000-memory.dmp
              Download

              memory/3080-360-0x0000000140000000-0x00000001400E3000-memory.dmp
              Download

              memory/3080-152-0x0000000140000000-0x00000001400E3000-memory.dmp
              Download

              memory/3368-8-0x0000000002560000-0x00000000025C7000-memory.dmp
              Download

              memory/3368-70-0x0000000000400000-0x000000000073D000-memory.dmp
              Download

              memory/3368-3966-0x0000000000400000-0x000000000073D000-memory.dmp
              Download

              memory/3368-1-0x0000000002560000-0x00000000025C7000-memory.dmp
              Download

              memory/3368-7-0x0000000000400000-0x000000000073D000-memory.dmp
              Download

              memory/3628-194-0x0000000001C30000-0x0000000001C40000-memory.dmp
              Download

              memory/3628-185-0x0000000140000000-0x0000000140172000-memory.dmp
              Download

              memory/3628-465-0x000000000AC10000-0x000000000AC18000-memory.dmp
              Download

              memory/3628-461-0x000000000AC10000-0x000000000AC11000-memory.dmp
              Download

              memory/3628-460-0x000000000AC20000-0x000000000AC28000-memory.dmp
              Download

              memory/3628-176-0x0000000000910000-0x0000000000970000-memory.dmp
              Download

              memory/3628-182-0x0000000000910000-0x0000000000970000-memory.dmp
              Download

              memory/3628-226-0x000000000A520000-0x000000000A528000-memory.dmp
              Download

              memory/3628-380-0x0000000140000000-0x0000000140172000-memory.dmp
              Download

              memory/3628-210-0x0000000001EE0000-0x0000000001EF0000-memory.dmp
              Download

              memory/4200-51-0x0000000140000000-0x00000001402D4000-memory.dmp
              Download

              memory/4200-139-0x0000000140000000-0x00000001402D4000-memory.dmp
              Download

              memory/4200-43-0x00000000008F0000-0x0000000000950000-memory.dmp
              Download

              memory/4200-49-0x00000000008F0000-0x0000000000950000-memory.dmp
              Download

              memory/4224-169-0x0000000140000000-0x0000000140216000-memory.dmp
              Download

              memory/4224-378-0x0000000140000000-0x0000000140216000-memory.dmp
              Download

              memory/4480-377-0x0000000140000000-0x00000001401F6000-memory.dmp
              Download

              memory/4480-165-0x0000000140000000-0x00000001401F6000-memory.dmp
              Download

              memory/4584-160-0x0000000140000000-0x0000000140147000-memory.dmp
              Download

              memory/4584-375-0x0000000140000000-0x0000000140147000-memory.dmp
              Download

              memory/4608-184-0x0000000140000000-0x00000001401C1000-memory.dmp
              Download

              memory/4608-115-0x0000000140000000-0x00000001401C1000-memory.dmp
              Download

              memory/4608-376-0x0000000140000000-0x00000001401C1000-memory.dmp
              Download

              memory/4660-156-0x0000000140000000-0x00000001401AD000-memory.dmp
              Download

              memory/4660-155-0x0000000140000000-0x00000001401AD000-memory.dmp
              Download

              memory/4828-12-0x0000000140000000-0x00000001400AA000-memory.dmp
              Download

              memory/4828-107-0x0000000140000000-0x00000001400AA000-memory.dmp
              Download

              memory/4952-133-0x0000000140000000-0x00000001402E9000-memory.dmp
              Download

              memory/4952-41-0x0000000140000000-0x00000001402E9000-memory.dmp
              Download

              memory/4952-32-0x0000000000770000-0x00000000007D0000-memory.dmp
              Download

              memory/4952-38-0x0000000000770000-0x00000000007D0000-memory.dmp
              Download

              memory/4980-173-0x0000000140000000-0x0000000140096000-memory.dmp
              Download

              memory/4980-112-0x0000000140000000-0x0000000140096000-memory.dmp
              Download

              memory/6448-3533-0x0000000140000000-0x0000000140335000-memory.dmp
              Download

              memory/6448-3514-0x0000000140000000-0x0000000140335000-memory.dmp
              Download