Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    02/06/2026, 09:26

General

  • Target
    MBSetup.exe
  • Size 2.7MB
  • Sample260602-lee7wahz21
  • SHA256 7e373eec574cc081b3864ae49ba0c8022d8c94fd88cd634458d41f1086d4f586
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Drops file in Drivers directory 10 IoCs
  • Modifies RDP port number used by Windows 1 TTPs
  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • Sets service image path in registry 3 TTPs 4 IoCs

    This determines the executable launched when a service starts. It can be used to establish persistence.

  • Checks BIOS information in registry 2 TTPs 6 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Impair Defenses: Safe Mode Boot 1 TTPs 2 IoCs
  • Downloads MZ/PE file 1 IoCs
  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • ConfuserEx .NET packer 2 IoCs

    Detects ConfuserEx .NET packer.

  • Drops file in System32 directory 64 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 5 IoCs
  • Executes dropped EXE 38 IoCs
  • Loads dropped DLL 40 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 1 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

  • Modifies trusted root certificate store through registry 1 TTPs 14 IoCs

    A root certificate was added, modified, or removed in the trusted certificate store registry paths.

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 26 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 5 IoCs
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 18 IoCs
  • Suspicious behavior: EnumeratesProcesses 36 IoCs
  • Suspicious behavior: LoadsDriver 12 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 31 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MBSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\MBSetup.exe"
    1⤵
    • Drops file in Drivers directory
    • Checks BIOS information in registry
    • Downloads MZ/PE file
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    PID:3940
  • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
    "C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe"
    1⤵
    • Drops file in Drivers directory
    • Impair Defenses: Safe Mode Boot
    • Enumerates connected drives
    • Drops file in Program Files directory
    • Executes dropped EXE
    • Loads dropped DLL
    • Modifies trusted root certificate store through registry
    • Modifies Internet Explorer settings
    • Modifies data under HKEY_USERS
    • Modifies system certificate store
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4232
    • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
      "C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe" /installmbtun
      2⤵
      • Drops file in System32 directory
      • Drops file in Windows directory
      • Executes dropped EXE
      • Loads dropped DLL
      PID:4880
    • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
      "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" /Service /Protected
      2⤵
      • Drops file in Drivers directory
      • Drops file in System32 directory
      • Executes dropped EXE
      • Modifies registry class
      PID:2324
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
    1⤵
    • Drops file in Windows directory
    • Checks SCSI registry key(s)
    • Suspicious use of WriteProcessMemory
    PID:1548
    • C:\Windows\system32\DrvInst.exe
      DrvInst.exe "4" "9" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf" "9" "4ba9030c7" "0000000000000150" "Service-0x0-3e7$\Default" "0000000000000160" "208" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun"
      2⤵
      • Drops file in System32 directory
      • Drops file in Windows directory
      • Checks SCSI registry key(s)
      • Modifies data under HKEY_USERS
      PID:1856
  • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
    "C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Event Triggered Execution: Netsh Helper DLL
    PID:1696
  • C:\Windows\system32\DRIVERS\MbamElam.sys
    C:\Windows\system32\DRIVERS\MbamElam.sys
    1⤵
    • Executes dropped EXE
    PID:4692
  • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
    "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"
    1⤵
    • Executes dropped EXE
    PID:3660
  • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
    "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"
    1⤵
    • Drops file in Drivers directory
    • Sets service image path in registry
    • Checks BIOS information in registry
    • Enumerates connected drives
    • Drops file in System32 directory
    • Executes dropped EXE
    • Loads dropped DLL
    • Modifies trusted root certificate store through registry
    • Checks processor information in registry
    • Modifies Internet Explorer settings
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Modifies system certificate store
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:3376
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:4060
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:2736
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:1040
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:4624
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:3936
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:4652
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:1168
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:1448
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:1700
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:4772
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:5024
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:756
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:1800
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:3772
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:4948
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:428
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:1492
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:1380
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:1284
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:1176
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:2948
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:4312
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:2272
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:4568
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:2560
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:5096
    • C:\Program Files\Malwarebytes\Anti-Malware\ig.exe
      ig.exe reseed
      2⤵
      • Executes dropped EXE
      PID:3352
    • C:\ProgramData\Malwarebytes\MBAMService\rmode\mbrescue.exe
      "C:\ProgramData\Malwarebytes\MBAMService\rmode\mbrescue.exe" /rescuemode "C:\Program Files\Malwarebytes\Anti-Malware" "C:\ProgramData\Malwarebytes\MBAMService"
      2⤵
      • Checks BIOS information in registry
      • Executes dropped EXE
      PID:1664
  • C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe -k AppReadiness -p -s AppReadiness
    1⤵
      PID:3988
    • C:\Windows\system32\DRIVERS\mbamswissarmy.sys
      C:\Windows\system32\DRIVERS\mbamswissarmy.sys
      1⤵
      • Executes dropped EXE
      PID:4672
    • C:\Windows\system32\DRIVERS\MbamChameleon.sys
      C:\Windows\system32\DRIVERS\MbamChameleon.sys
      1⤵
      • Executes dropped EXE
      PID:4876
    • C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      1⤵
        PID:2324
      • C:\Windows\system32\DRIVERS\mbam.sys
        C:\Windows\system32\DRIVERS\mbam.sys
        1⤵
        • Executes dropped EXE
        PID:2032

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            mbtun.sys

            • Path C:\PROGRA~1\MALWAR~1\ANTI-M~1\mbtun\mbtun.sys
            • Size 107KB
            • SHA256 6903e60784b9fa5d8b417f93f19665c59946a4de099bd1011ab36271b267261c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MBAMInstallerService.exe

            • Path C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
            • Size 10.6MB
            • SHA256 f1814ac13924bf83d863388f733b5b5c9c309563ad678c0acd16f9c5611a7e07
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MBAMWsc.exe

            • Path C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe
            • Size 4.2MB
            • SHA256 7878a9b10903b8c0def49015deefd48a3ea0e46c0f5ac9ae755336994e020152
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ServiceConfig.json

            • Path C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json
            • Size 621B
            • SHA256 438f2a63467305cbdc6c640a9c7992721394cc0dcbe35a35c531c8d7bb300136
            • MD5 SHA1 SHA512 TLSH

            ServiceConfig.json

            • Path C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json
            • Size 784B
            • SHA256 14f7bdb17873a192d6b4cacbd55e1e41a97f3cf2be3b7ae2f44027665601b485
            • MD5 SHA1 SHA512 TLSH

            malwarebytes_assistant.runtimeconfig.json

            • Path C:\Program Files\Malwarebytes\Anti-Malware\malwarebytes_assistant.runtimeconfig.json
            • Size 372B
            • SHA256 1eca0f0c70070aa83bb609e4b749b26dcb4409784326032726394722224a098a
            • MD5 SHA1 SHA512 TLSH

            mbtun.inf

            • Path C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf
            • Size 1KB
            • SHA256 4a350fc20834a579c5a58352b7a3aa02a454abbbd9eecd3cd6d2a14864a49cd8
            • MD5 SHA1 SHA512 TLSH

            pkgvers.dat

            • Path C:\Program Files\Malwarebytes\Anti-Malware\pkgvers.dat
            • Size 78B
            • SHA256 07ba9609eb996ccd408e52e4f6165dfe6090610a4f284f126167e2c749c42d23
            • MD5 SHA1 SHA512 TLSH

            farflt11.cat

            • Path C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt11.cat
            • Size 10KB
            • SHA256 86499aa2ab7e93c909ae773113d8be598c52c49a7de29579c94514a316480d1e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            farflt11.inf

            • Path C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt11.inf
            • Size 3KB
            • SHA256 142f7bef5d7c91cc29537e423e4c10fc409b085adc66b75552252bb5c7b38697
            • MD5 SHA1 SHA512 TLSH

            farflt11.sys

            • Path C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt11.sys
            • Size 211KB
            • SHA256 81d6050d158eeb98807a58ea17c27a5e786ba7760a3a35a2ea6e317f3fe13261
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mbamchameleon.cat

            • Path C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.cat
            • Size 10KB
            • SHA256 0f8be2806219f2bef067be7f6e110053f44df28916ddd54c5c0aa28bb8535682
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mbamchameleon.inf

            • Path C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.inf
            • Size 3KB
            • SHA256 47b7c516bb57c612de19f0ca865590af95b6e32bf873a0fef9e011b2c5b483d4
            • MD5 SHA1 SHA512 TLSH

            mbamchameleon.sys

            • Path C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.sys
            • Size 230KB
            • SHA256 44aed351c604e5289e3e03849106480e7080354696f700403560d242319d3b3f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            srvversion.dat

            • Path C:\Program Files\Malwarebytes\Anti-Malware\srvversion.dat
            • Size 9B
            • SHA256 9fc2703e411bfd8338906e962293e9e4d4aa52ecd400dfbc00cb4fb7bb33ce32
            • MD5 SHA1 SHA512

            7z.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\7z.dll
            • Size 1.6MB
            • SHA256 bb01c6fbb29590d6d144a9038c2a7736d6925a6dbd31889538af033e03e4f5fa
            • MD5 SHA1 SHA512 SSDEEP TLSH

            7z.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\7z.dll
            • Size 1.6MB
            • SHA256 623e628393bc4b8131c1f4302b195429dfa67e890d3325ceaa56940660052b1b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AEControllerImpl.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\AEControllerImpl.dll
            • Size 4.9MB
            • SHA256 f15b0afd904825c8e653fb305bf5248571566a9d59aac9d3202aad549d746e1a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ActionsShim.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\ActionsShim.dll
            • Size 3.7MB
            • SHA256 6c5047cb77ea843e8386ba2b26a8458e6255e2ab94d493e914620623723c6b32
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ArwControllerImpl.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\ArwControllerImpl.dll
            • Size 5.5MB
            • SHA256 ca1f915b6ebf65a1fbaf7b8f917424d9436aec03826830d8ef7867e01d2e9e03
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ArwLib.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\ArwLib.dll
            • Size 7.2MB
            • SHA256 9a607b1ac95b121d6b672099459b19e5016c2dd1e8a4a24071bf9464c567c657
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Assistant.deps.json

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Assistant.deps.json
            • Size 28KB
            • SHA256 d4be9e364bad18eeb3bbc0845627345a38d7a96857a7f49ac07c5179fe970077
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Assistant.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Assistant.dll
            • Size 156KB
            • SHA256 b639443f349dd110b2252b07f2fa8db5a6b5689f91bbe13a9db76ddb94ec708d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Assistant.exe

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Assistant.exe
            • Size 288KB
            • SHA256 aa399241663b0d9e6636d20f7ac52ab74932904dffc50ab625a0b6a73eae70c1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BrowserSDKDLLShim.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\BrowserSDKDLLShim.dll
            • Size 3.7MB
            • SHA256 f6d24605eb688e039e4509d184d974bb14c4c38528edad129d0653eadfea80f9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            CleanControllerImpl.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\CleanControllerImpl.dll
            • Size 8.7MB
            • SHA256 66052dfedb06314a53d8623c028ccfc8a73246e93af71ff1c05e94390e2b9160
            • MD5 SHA1 SHA512 SSDEEP TLSH

            CloudControllerImpl.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\CloudControllerImpl.dll
            • Size 6.9MB
            • SHA256 71b6312c8f6bd8e62c7f766ed56dea99f9daca0963039128ba11e4b6842b0922
            • MD5 SHA1 SHA512 SSDEEP TLSH

            DryIoc.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\DryIoc.dll
            • Size 597KB
            • SHA256 07f5c78ad2c3bdaf6860e49f8fa2ba62533df2656aa2879585458bb2d0857502
            • MD5 SHA1 SHA512 SSDEEP TLSH

            IdentityModel.OidcClient.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\IdentityModel.OidcClient.dll
            • Size 191KB
            • SHA256 84edd7b103e4f3da43e93afced2bdd4ccb6b65ef7ad1915b81b5eb6315537131
            • MD5 SHA1 SHA512 SSDEEP TLSH

            IdentityModel.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\IdentityModel.dll
            • Size 215KB
            • SHA256 922c1745564bd47001df14373c836c60072615bdfbad59e0895e981e4542a78d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LicenseControllerImpl.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\LicenseControllerImpl.dll
            • Size 7.1MB
            • SHA256 9d50b1da54a81cfccf1947a3448e4520b8165d1f8bbb970afca2ad87078235bf
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MBAMCrashHandler.exe

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\MBAMCrashHandler.exe
            • Size 890KB
            • SHA256 164932ea0ead0fc1d660b075913244fe7ca7322c725cdb0903ae4cf217b19a64
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MBAMService.exe

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\MBAMService.exe
            • Size 10.9MB
            • SHA256 8615c75b2e4e48cd7e1c0a44267969d5d14a0af9b265f9dc0ffa6c8ab77da3e9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MBAMShim.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\MBAMShim.dll
            • Size 4.3MB
            • SHA256 116a8d0f27c2dfbfcea03f29e63fd3b993f468593dd794e64bf58f4873d1cd17
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MBVpnTunnelService.exe

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\MBVpnTunnelService.exe
            • Size 2.7MB
            • SHA256 05d4d87f43646f7ca2e50520d8850e8808748a508c2761838d5fb92d66d6ce35
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MBVpnTunnel_mbtun.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\MBVpnTunnel_mbtun.dll
            • Size 4.2MB
            • SHA256 ed2a9ae7540aee752bc3e676bc01bbe1d87a857b8348ed114724956fc431908a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MBVpnTunnel_wireguard.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\MBVpnTunnel_wireguard.dll
            • Size 2.9MB
            • SHA256 ec1a86d8aac7c43f95b33cc4e1b27d1590bd5cadb46438bbee03990c95da653d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MWACControllerImpl.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\MWACControllerImpl.dll
            • Size 7.5MB
            • SHA256 de2dae4a12a73667b42dc5eaeb3789e03481d8797c0257e32eb86ed5e83c5e3c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Malwarebytes.Interop.Activation.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Malwarebytes.Interop.Activation.dll
            • Size 36KB
            • SHA256 f5a9e3587fcf855046d8b08e86ed61105f2f330a1c9021461446c137ed3b9ac5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Malwarebytes.Protection.Interop.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Malwarebytes.Protection.Interop.dll
            • Size 2.5MB
            • SHA256 79dd4b1f0df86422b83a694994db2dace5c2b14a3e7f224a46196a4f1232e1b4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Malwarebytes.UI.Controls.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Malwarebytes.UI.Controls.dll
            • Size 32KB
            • SHA256 4c3d97304af4e091ee4ed390f2c75deb04de900ab404bc41e529a0c5bbbd04c9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Malwarebytes.UI.Style.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Malwarebytes.UI.Style.dll
            • Size 108KB
            • SHA256 ba1e626a9b6a3d7c967d00ae31b7a758edb0ac23d8332939f044710d8e6288a9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Malwarebytes.UI.Theme.Dark.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Malwarebytes.UI.Theme.Dark.dll
            • Size 55KB
            • SHA256 e0b84c137d3cef1dd43fc3572d359373b1614ab8aa0f5091f58120bfd3fc1c53
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Malwarebytes.UI.Theme.Light.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Malwarebytes.UI.Theme.Light.dll
            • Size 55KB
            • SHA256 d2d177294181c0bc81baef93502e603eb1fdcff51b074a1f068c38003f1c0502
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Malwarebytes.UI.Theme.Primitives.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Malwarebytes.UI.Theme.Primitives.dll
            • Size 2.1MB
            • SHA256 7a543d38cb51c1fae0e41297c50247f7558aae0e879f7d6762b2349193ad992f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Malwarebytes.UI.TrayNotification.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Malwarebytes.UI.TrayNotification.dll
            • Size 49KB
            • SHA256 bbe5081e5e170dfd8827b2bf3e07babe1bcac633230062a2cf9288adc451fc7f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Malwarebytes.deps.json

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Malwarebytes.deps.json
            • Size 51KB
            • SHA256 1bbd3f0c4e83b6bc09a3d585b6c394a01cce4c1e9a7ef3cf47ef93ef86883203
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Malwarebytes.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Malwarebytes.dll
            • Size 10.1MB
            • SHA256 a939b4cc6c6fb20fbcbb92daa916382cc2a72dc81e19d4d0d5913fdd2540bfa9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Malwarebytes.exe

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Malwarebytes.exe
            • Size 291KB
            • SHA256 a98e7e53ec0e545d52df593ccc44b726fc6f12247782c0b88e434012d106419d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Malwarebytes.runtimeconfig.json

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Malwarebytes.runtimeconfig.json
            • Size 489B
            • SHA256 28d737bcc7e791e223784d6210a13cf1a46474a49c8bebcf60c89f991eca09f5
            • MD5 SHA1 SHA512 TLSH

            Malwarebytes_Assistant.deps.json

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Malwarebytes_Assistant.deps.json
            • Size 28KB
            • SHA256 ea2f83bb7c48df846fd2c8d7a78ca277f9ecf1390b5b952bb35faa96da67c478
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Malwarebytes_Assistant.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Malwarebytes_Assistant.dll
            • Size 160KB
            • SHA256 8e723ab7f2d70bc707b84c6cbf4019373e145388bc64ea1d31e72dd744422e64
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Malwarebytes_Assistant.exe

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Malwarebytes_Assistant.exe
            • Size 288KB
            • SHA256 a3fd92dd4b7edaed8137d731d2bdd35af1d4d3bfe440cfcbf31e0181c68a7e6a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MbamBgNativeMsg.exe

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\MbamBgNativeMsg.exe
            • Size 4.3MB
            • SHA256 ea97af9bdc388c8b2f43b070b39ff3c30a32bac2b9a5143596a18038f5b027d9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MbamUI.Core.deps.json

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\MbamUI.Core.deps.json
            • Size 12KB
            • SHA256 0a6aa712caee3bd6ec47d861d101d864313fd5879cfcfcf1219c4f64b2742ddd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MbamUI.Core.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\MbamUI.Core.dll
            • Size 160KB
            • SHA256 ab185b1b0e4e6bfb908fd0e2d14261e58856e3026ab78eba90c7bfd51c1c145b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MbamUI.Data.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\MbamUI.Data.dll
            • Size 1.5MB
            • SHA256 173540983a9e00062514642b2568228647c407b54c5703bd116be8e6457cb8ff
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MbamUI.Services.deps.json

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\MbamUI.Services.deps.json
            • Size 27KB
            • SHA256 44b9575dd55d28a1467f5a0c2ae3b5ed6ccff514c0a5dc27aeea04aee1e59b83
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MbamUI.Services.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\MbamUI.Services.dll
            • Size 3.4MB
            • SHA256 440ddf274aa475aee0b0794f2582aa0aaad1693957c07d27473687d8ad8c2d1a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MbamUI.Tray.deps.json

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\MbamUI.Tray.deps.json
            • Size 29KB
            • SHA256 256f61cdb2cc148458746a52a63de9c2a8e2efe7f3c3c2ca0e3e0d848c1c9d57
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MbamUI.Tray.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\MbamUI.Tray.dll
            • Size 178KB
            • SHA256 cd00591fa67d0140c7cf031053a31764603e435e48134346ad9bb20bc3c791be
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MdXaml.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\MdXaml.dll
            • Size 183KB
            • SHA256 2b3c517c7b40c80b5af6d37ab52ce768acb6654d2b444a926073f44e4637f51f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.Data.Sqlite.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Microsoft.Data.Sqlite.dll
            • Size 166KB
            • SHA256 f103967a60922cd73af5773568359024b72e5251a7efce80f92d07866b44cd5e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.EntityFrameworkCore.Abstractions.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Microsoft.EntityFrameworkCore.Abstractions.dll
            • Size 33KB
            • SHA256 a777e065bcd584c87ab03720a3632065f28d634a5faeae4a72e888843a98dda9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.EntityFrameworkCore.Relational.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Microsoft.EntityFrameworkCore.Relational.dll
            • Size 1.8MB
            • SHA256 f84e9bb2a4e56e421c7e8ff872efd59e726310cbe62895f5d1bf55aaa597fced
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.EntityFrameworkCore.Sqlite.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Microsoft.EntityFrameworkCore.Sqlite.dll
            • Size 199KB
            • SHA256 ae5b7c95ead6afec11d44b51ac9ea67d2616726d0dd5870b214c1e53ba96976c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.EntityFrameworkCore.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Microsoft.EntityFrameworkCore.dll
            • Size 2.0MB
            • SHA256 5f9599e42e226c8e48ea2c49322f02f9953314efa7c15467c6038312ab729609
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.Extensions.Caching.Abstractions.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Microsoft.Extensions.Caching.Abstractions.dll
            • Size 31KB
            • SHA256 c004f78d9f8378c5f79ac3a88e90625a117b9700a75f5f02266289dd4d28e451
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.Extensions.Caching.Memory.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Microsoft.Extensions.Caching.Memory.dll
            • Size 42KB
            • SHA256 9ef11f0b594d5be76341ca65a53bf3930aa807c312a278ae22043dcf4db9ce25
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.Extensions.Configuration.Abstractions.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Microsoft.Extensions.Configuration.Abstractions.dll
            • Size 28KB
            • SHA256 893f042b8bea61e3e56091ee6167af61bc38a39d35cb1d0f9b222aae4493146a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.Extensions.DependencyInjection.Abstractions.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Microsoft.Extensions.DependencyInjection.Abstractions.dll
            • Size 61KB
            • SHA256 ac9cd953b7eeb03cf48e343c5ace6fc9b48ac968b68d1cb30ad1d6111178bf4d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.Extensions.DependencyInjection.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Microsoft.Extensions.DependencyInjection.dll
            • Size 92KB
            • SHA256 df0ae00b1599acae93d9f4df2bcc6d0ba109221ccc44d2d1486183f84a5fec78
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.Extensions.DependencyModel.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Microsoft.Extensions.DependencyModel.dll
            • Size 79KB
            • SHA256 8913b56a0f6e209ebaadaba532865b1ea8d10d73fec86a1b8f93fe0ed8e0d2b8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.Extensions.Logging.Abstractions.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Microsoft.Extensions.Logging.Abstractions.dll
            • Size 64KB
            • SHA256 ab36e8201d41dd751cbb712704dbe8492bdd0ab1bff6fb35371cf59bcd982181
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.Extensions.Logging.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Microsoft.Extensions.Logging.dll
            • Size 51KB
            • SHA256 37b87b16ac688d5619168554a22cca2677e1115f21c2d5ebe2f39c024fee2b7f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.Extensions.Options.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Microsoft.Extensions.Options.dll
            • Size 64KB
            • SHA256 fbb309a36bc91d90ec2984397bff4f75f35ac92909e0acd952c5264c5ac0a753
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.Extensions.Primitives.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Microsoft.Extensions.Primitives.dll
            • Size 44KB
            • SHA256 f9f47907a041067d9bc1b9a9f516009b6ca0a9c6325ce83527883cc0d053dfa5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft.Xaml.Behaviors.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Microsoft.Xaml.Behaviors.dll
            • Size 142KB
            • SHA256 0493049febb4be74bdf669ad7fa754941c2754fe33421e230a8f14c8fd06c8c4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MwacLib.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\MwacLib.dll
            • Size 6.4MB
            • SHA256 a61d5bc48277514b50c53b59d6b9fd759461be710a9d94a0bcbdd4c97f4dc376
            • MD5 SHA1 SHA512 SSDEEP TLSH

            PoliciesControllerImpl.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\PoliciesControllerImpl.dll
            • Size 6.1MB
            • SHA256 cd1e8f98551fb69d3d47837c09fea35be358dd7c27104afb7f1938a7fadbb2c5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Prism.Container.Extensions.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Prism.Container.Extensions.dll
            • Size 20KB
            • SHA256 85a55b97f20431fcf6d33634de6a86d7c6d441be413c728e19dda8b0aef72e92
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Prism.DryIoc.Wpf.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Prism.DryIoc.Wpf.dll
            • Size 26KB
            • SHA256 ad1666c83f2554b09396386fcec856f9b3068b9bc2a29f13c08d3ce0c23d7d4f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Prism.Wpf.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Prism.Wpf.dll
            • Size 132KB
            • SHA256 c3b44b118486a5d74d696c14853e5306ec893dadd0be8ea6f404edae8c66f2d3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Prism.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Prism.dll
            • Size 89KB
            • SHA256 92090c9c3c5195149885be91aa469b85d2cba9a215cb3bfb65e93945f33d852b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            QRCoder.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\QRCoder.dll
            • Size 169KB
            • SHA256 4cca9817dc66b99653653f570a5d22e31fbd4b8d3f8c526c9e3b2594d9116620
            • MD5 SHA1 SHA512 SSDEEP TLSH

            RTPControllerImpl.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\RTPControllerImpl.dll
            • Size 6.4MB
            • SHA256 129c0263a93d2faab793f0dd3cfe592ddd8c92b43ab29679f9bf6d07e6839a1f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SPControllerImpl.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\SPControllerImpl.dll
            • Size 4.5MB
            • SHA256 fe1dc49340095d3b8c30a1be99d9c95f06565f456d90771942db725b7d078f2e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SQLitePCLRaw.batteries_v2.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\SQLitePCLRaw.batteries_v2.dll
            • Size 32KB
            • SHA256 ed1475cd55b4b28768efedffe41c84708f005dc3d15784504cf357d29bbe8981
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SQLitePCLRaw.core.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\SQLitePCLRaw.core.dll
            • Size 77KB
            • SHA256 c84ea9a36dba4c8001adbcc7152526411a258c5b9436a116eef3701de7e140dd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SQLitePCLRaw.provider.e_sqlcipher.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\SQLitePCLRaw.provider.e_sqlcipher.dll
            • Size 63KB
            • SHA256 3041e695aae69c5a8b4372c1e48719b29f235c0dc6dad0e9db78ed9ef631b4c1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SQLitePCLRaw.provider.e_sqlite3.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\SQLitePCLRaw.provider.e_sqlite3.dll
            • Size 62KB
            • SHA256 f19a2bdc8b4a635fe1eafd92054468f8a7858969f164d114dcffb783dbe0d2e7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ScanControllerImpl.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\ScanControllerImpl.dll
            • Size 6.9MB
            • SHA256 f41c5a9754861fd06b05470a267fa9d6f801a0dce1834ad36aeec3212458841c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SelfProtectionSdk.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\SelfProtectionSdk.dll
            • Size 4.6MB
            • SHA256 0adb57549c241007b2b96194405d96de91b5f227d689823b8ca680b0a50ab1d8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SelfProtectionShim.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\SelfProtectionShim.dll
            • Size 4.0MB
            • SHA256 b87147bde9ab9fbebbcb5ff00986e0cfc76b3f66582ab67195f3ce5bff8106ba
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Sentry.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Sentry.dll
            • Size 754KB
            • SHA256 8de41a631a741c44381ce8705c9093ef0e95f8b3bcba0988013ac7d9e9bc2315
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Serilog.Extensions.Logging.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Serilog.Extensions.Logging.dll
            • Size 44KB
            • SHA256 2b1fe300101924c8a64e34865215a7f94af49a900379a2eb10017bd186178421
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Serilog.Sinks.File.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Serilog.Sinks.File.dll
            • Size 57KB
            • SHA256 26c3e4f919cd605846f3bc97f3af951faa3e5eee18c23e4620069be574e14cab
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Serilog.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Serilog.dll
            • Size 153KB
            • SHA256 dcf73068f5fcf3e6d6770d18f8bdc80a260dbd7431f9eb32f1fd3d05692308f9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Swissarmy.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\Swissarmy.dll
            • Size 3.7MB
            • SHA256 d6b7da0f184b933f54dae4ec18df8cdcefe6b4b0850cbfea03c794c6a64a9de6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SwissarmyShim.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\SwissarmyShim.dll
            • Size 2.4MB
            • SHA256 540f989efbf6f865b88cdce5277737a1947aaa006543bcd6b2a72440b85fb8dd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            System.Diagnostics.DiagnosticSource.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\System.Diagnostics.DiagnosticSource.dll
            • Size 160KB
            • SHA256 d6935e993b69f8abd934f01b0d7dd8ca9616a7ea94c7af59ed07b2fd3cf93a97
            • MD5 SHA1 SHA512 SSDEEP TLSH

            System.Diagnostics.EventLog.Messages.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\System.Diagnostics.EventLog.Messages.dll
            • Size 781KB
            • SHA256 6444dfa03609248effd398e8562af484ad0163a6c47cee6d3a287ffdef809ad2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            System.DirectoryServices.AccountManagement.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\System.DirectoryServices.AccountManagement.dll
            • Size 268KB
            • SHA256 64e3c9c8474582853ba151287439a60c9dec916dcf3db096c4fe07a10d1eda3c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            System.DirectoryServices.Protocols.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\System.DirectoryServices.Protocols.dll
            • Size 136KB
            • SHA256 7a4bc24de93fbb7ff0f3bd8f10a74e68ea345b29b5c370fa1e31d3b36b9eb187
            • MD5 SHA1 SHA512 SSDEEP TLSH

            System.ServiceProcess.ServiceController.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\System.ServiceProcess.ServiceController.dll
            • Size 60KB
            • SHA256 b5c339cc240e490a996ca5ee526e885aa6ef214614761de7b7704a4a0d9aaabb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            System.Text.Encodings.Web.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\System.Text.Encodings.Web.dll
            • Size 69KB
            • SHA256 d2af18fa9cec4f826b75649b1ad7fc88a07138adfdad986481f11db11817754e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            System.Text.Json.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\System.Text.Json.dll
            • Size 530KB
            • SHA256 a6cb476d20369516d882fdd0f318a7fe9eb694c166dc9f2089e99b4c27f17ac7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            TelemetryControllerImpl.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\TelemetryControllerImpl.dll
            • Size 7.3MB
            • SHA256 72a27362209a865cb90315f99c7f7bcc34cfdf39e48bd8d1dc4edb961edfb01e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UpdateControllerImpl.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\UpdateControllerImpl.dll
            • Size 4.5MB
            • SHA256 058befee7a55f5d8510de91f4746053fd49393f2f1843c4f090c3dae60d7d540
            • MD5 SHA1 SHA512 SSDEEP TLSH

            VPNControllerImpl.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\VPNControllerImpl.dll
            • Size 3.5MB
            • SHA256 0ab61876b204c8eb1abba90cdf7fda5f5278cf33f8adf9476de2008c4879c0c6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ddshelper.bin

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\ddshelper.bin
            • Size 1KB
            • SHA256 99198c557b03b24dbf40724c62c12c8c039447afedfd109e20061288963d9454
            • MD5 SHA1 SHA512 TLSH

            ddshelper.exe

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\ddshelper.exe
            • Size 253KB
            • SHA256 d2257e7643128166f46a88da45ab9c38b7c23d0d727551dbd9f780a43f4abd11
            • MD5 SHA1 SHA512 SSDEEP TLSH

            e_sqlcipher.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\e_sqlcipher.dll
            • Size 1.8MB
            • SHA256 5151e6e3c9c715c5f5dbea8a2e463817798745756b51eb0fa22d161b754a5ca0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            e_sqlite3.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\e_sqlite3.dll
            • Size 1.6MB
            • SHA256 8c98b2d4f8d8de9c796f97ad6fbfdee981446bf6bd59235d2875e03e62fe4646
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mb5uns.exe

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\mb5uns.exe
            • Size 2.2MB
            • SHA256 2557968c8571a3e8147656ccc537866ec1644ec12ff4dd5d2aed0593c6000fba
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mbae-api-na.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\mbae-api-na.dll
            • Size 723KB
            • SHA256 6aee09c65a2f22658a8a74459df2b9df5c81c5ec7d853e496794ef6f52ed8924
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mbae.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\mbae.dll
            • Size 1.4MB
            • SHA256 523a8858117a691eb787348186d038b31cc0e59a9c2defdea11eb0a8fc7f6eec
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mbae.sys

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\mbae.sys
            • Size 155KB
            • SHA256 c990dd89b65d35d6c9b34e21c78d96e206ec3bcdd934716ee61ff79da0fa5251
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mbae64.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\mbae64.dll
            • Size 1.7MB
            • SHA256 bd25a747e6aaf00678eb705cafa894897241695ddc176b0993904d280a882054
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mbamelam.cat

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\mbamelam.cat
            • Size 11KB
            • SHA256 64416d564725416c6869ea951878a2734b1f6940b11f7961a897c45f0d8c6625
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mbamelam.inf

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\mbamelam.inf
            • Size 2KB
            • SHA256 e26c2d3347e5f077da92713c9df3cd3eae438fb7e29810bd5c3afe567d2d3125
            • MD5 SHA1 SHA512 TLSH

            mbamelam.sys

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\mbamelam.sys
            • Size 21KB
            • SHA256 ded569e249e590314d095f740c6b8934a5a797e4f3edbe0f78eac9d333f12a2a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mbampt.exe

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\mbampt.exe
            • Size 33KB
            • SHA256 0eba9572e3667ca5043be61302f8fc89ff0eeec11f61a53b16f62d64efe83abe
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mbamsisdk.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\mbamsisdk.dll
            • Size 12.7MB
            • SHA256 0778cc030a9e8b7cd66950bf492554842ffb64d8e01b145c2dd9551c9239a78a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mbcut.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\mbcut.dll
            • Size 4.1MB
            • SHA256 c7b5882996f126fe957bf12e32a6d3dafeb3677f1e88a972e600d03abcd36270
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mbshlext.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\mbshlext.dll
            • Size 3.1MB
            • SHA256 8af36217efcc1b2a677accc77839ed3b67ddbfcabfa16caaa42c7e95796b940a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mbtun.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\mbtun.dll
            • Size 2.8MB
            • SHA256 f21a980316bd4c57c70e00840ab76d9ad412092d7d2d6a2cff4f1311f7c05364
            • MD5 SHA1 SHA512 SSDEEP TLSH

            offreg.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\offreg.dll
            • Size 140KB
            • SHA256 8e6c155a97666c8e6a3f9ea95bfc6f6e4f87beac53dd72164aba3ef33ff88db1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            rtp.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\rtp.dll
            • Size 4.5MB
            • SHA256 0509d1438fe044da9d37a34710ddda2f8dfae5a3f240131968281b6bd16ee6e7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sentrynativesdk.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\sentrynativesdk.dll
            • Size 596KB
            • SHA256 6e6096dabfe6b34c3e6ccba49cef544b7be6158e34168f819f8cac1b3645d4d0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            version.dat

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\version.dat
            • Size 10B
            • SHA256 105321494db8582b566517d2aaf04845e697beebc5ef884823ccd34430327b74
            • MD5 SHA1 SHA512

            wireguard.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\ctlrpkg\wireguard.dll
            • Size 1.3MB
            • SHA256 d2ad6ce25634776f5067fd9d5750a5e3d2add1adde98eb1f56a2df194d0e9cbb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ActionsV5.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\ActionsV5.dll
            • Size 6.1MB
            • SHA256 d513f3a50ec070bbd74f78d27d79b6cb60aff48310283c74ebeb204aacf375a4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            BrowserSDKDLLV5.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\BrowserSDKDLLV5.dll
            • Size 7.0MB
            • SHA256 c72e39709b26ac7577200a76515347ff11c0a9424cf61657762d657e7aecd974
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Global.nm

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\Global.nm
            • Size 348KB
            • SHA256 43f9fb9fb08f4dea6cb7be19fe273f85f2ab0ef0c7debc547af475caf7080d5c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Global.sr

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\Global.sr
            • Size 24.7MB
            • SHA256 7615ec7c9e71a458f2766774286b812cf1206bc0e741b7a1fa300471e8d51c0b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MBAMCoreV5.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\MBAMCoreV5.dll
            • Size 8.6MB
            • SHA256 4072fea1c8284e71f9a4123ec9bbde7dc35f1d1b2a1745f9f33c728bfa8856a7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MBAMCore_b.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\MBAMCore_b.dll
            • Size 8.6MB
            • SHA256 af114bfa64062698fbc41629bc5dd1318bb4ac44eca3bbc663c9ebc0f4c41bac
            • MD5 SHA1 SHA512 SSDEEP TLSH

            cfg.bin

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\cfg.bin
            • Size 2KB
            • SHA256 06cee2bf32530582fe8a7f84afd9be786f4986f3b35ad5c3989e61b7fab1e3f2
            • MD5 SHA1 SHA512 TLSH

            clean.mbdb

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\clean.mbdb
            • Size 25KB
            • SHA256 13313d63bc9826272339830468d4b1de1ada0a216bc861dc80f842f2c72812ab
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dbmanifest2.dat

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\dbmanifest2.dat
            • Size 924B
            • SHA256 21f679529140584c2132f53c8d02f6a4a535b138dc3ae7d8a2dc7f191eef295d
            • MD5 SHA1 SHA512 TLSH

            dynconfig.dat

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\dynconfig.dat
            • Size 39KB
            • SHA256 008254ca1f4d6415da89d01a4292911de6135b42833156720a841a22685765dc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            exclusions.txt

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\exclusions.txt
            • Size 23KB
            • SHA256 9e87e4c9da3337c63b7f0e6ed0eb71696121c74e18a5da577215e18097715e2f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            igV5.exe

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\igV5.exe
            • Size 1.8MB
            • SHA256 18730539538c30c3c298ccd999220be0e9a91ed8666a8b1da2c6d136e6335855
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mbdigsig2.dat

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\mbdigsig2.dat
            • Size 514B
            • SHA256 ee4208735fbb69c5f436b9d9ba73efed2032393c6d79d6ac8eba7731a85c6ac4
            • MD5 SHA1 SHA512 TLSH

            prot.mbdb

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\prot.mbdb
            • Size 24B
            • SHA256 6089fbf0c0c1413f62e91dc9497bedc6d8a271e9dc761e20adc0dccf6f4a0c1f
            • MD5 SHA1 SHA512

            rdefs.mbdb

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\rdefs.mbdb
            • Size 24B
            • SHA256 850a4ea37a0fd6f68bf95422d502b2d1257264eb90cc38c0a3b1b95aa375be55
            • MD5 SHA1 SHA512

            rules.mbdb

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\rules.mbdb
            • Size 14.6MB
            • SHA256 fa99ffd10c6cc34629ae2220d28aad05e57c6618a17699fe503d508c7f64aad4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sampleV5.dll

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\sampleV5.dll
            • Size 524KB
            • SHA256 06c1a019a4cdbc1d48327f33baa7cbdc95b71f6fd87245ea78610ecb20141dbb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            scan.mbdb

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\scan.mbdb
            • Size 420KB
            • SHA256 efe6d221bd906f4b8e098486f868a7d14cf82adb2053526e837c39f5e296e123
            • MD5 SHA1 SHA512 SSDEEP TLSH

            tids.mbdb

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\tids.mbdb
            • Size 160KB
            • SHA256 d563aceb33a5d800fb150a16fcb61b18d52503d19cb02373454c22f6b631a057
            • MD5 SHA1 SHA512 SSDEEP TLSH

            version.dat

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\version.dat
            • Size 48B
            • SHA256 da5eef2060f86dcb5f50398b9d4a5b08601fed544a75e0d8fb97dc91b696594a
            • MD5 SHA1 SHA512

            wprot2.mbdb

            • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_41dec7af5e6511f1af3a5298bf2c53c6\dbclspkg\wprot2.mbdb
            • Size 14.9MB
            • SHA256 f94af00f07a35ed3952d8e405d42034a4ef5f5d5cb29d6751e137eea0af8b847
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AeConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
            • Size 47KB
            • SHA256 b8923817b8336489ee4bdc192ee6a80d3831101cedec056e3ef947609b391ac6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AeConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
            • Size 66KB
            • SHA256 d6af68e6bf92ec71b0f5b5f6a8b7ef98029f1ecabce9029ba845bb144f1223d7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AeConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
            • Size 66KB
            • SHA256 393cf4c5f34c649d049c2ee5525ed2dce5007d74c565e9ba055f40de324525dd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AeConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
            • Size 90KB
            • SHA256 5173fe2d8a790dddf63300279de3621275f4b83b911a365f880630972130c08d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ArwControllerConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json
            • Size 1KB
            • SHA256 beb2f1354c4d72a273c357c13db92f781c80a0e35d34b6ba1dc25d8860b3aba9
            • MD5 SHA1 SHA512 TLSH

            ArwControllerConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json
            • Size 1KB
            • SHA256 7ff7bf562543d3d4e1dfbf35d6880ad2a6eedaf9d35cee1756ce5dcafd2628c4
            • MD5 SHA1 SHA512 TLSH

            CleanControllerConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json
            • Size 949B
            • SHA256 557fa977e202b6d80638f47c947b97010aa6feb545c224cf9af844dbf0f928e7
            • MD5 SHA1 SHA512 TLSH

            CloudConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json
            • Size 1KB
            • SHA256 2f159766157d2f711d08256d4836543f5dc77ec93c58801642a1292b56e12cd5
            • MD5 SHA1 SHA512 TLSH

            LicenseConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
            • Size 12KB
            • SHA256 ba06c9f6c808fd92e0cb7ac9fa2abd1ea7f313cce6bb1c98ec477e0125948e46
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LicenseConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
            • Size 12KB
            • SHA256 0b344ba908e8cf494d79009048e37e13b1bd8a1be9ad0719b5e518440d857071
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LicenseConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
            • Size 12KB
            • SHA256 99350033a3bf0d47a44bea8e6b0168834a75382852d98bf95106f87a75a2a3b9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LicenseConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
            • Size 12KB
            • SHA256 e2e01fd0d6317f667cc3d8a7f5b4d19e4a5448ec613668d2c3d0546f80bece1d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LicenseConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
            • Size 12KB
            • SHA256 55d516fba1f74716dda82a8c9f0c10944408fc91e26cb82ec27ca0e771798e6c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LicenseConfig.json.bak

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json.bak
            • Size 12KB
            • SHA256 838448830cdbfcc33735a4b6e830c402524de91a8082e39d52827ecff732d834
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MwacControllerConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json
            • Size 2KB
            • SHA256 fbf2baf5a3a721e7c0bcc4a518242af8788ffc02ec6023f9bcb05c556e06d9e3
            • MD5 SHA1 SHA512 TLSH

            MwacControllerConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json
            • Size 2KB
            • SHA256 c96ceb0018acfd4e2614ae5c2fd1145ed65ca68c61463342c8fd115a8081c8ea
            • MD5 SHA1 SHA512 TLSH

            PoliciesConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json
            • Size 814B
            • SHA256 ac1a6c4739bad061f2ffb250707320eff403d0d6a12e57341a7c36ad8ca4f877
            • MD5 SHA1 SHA512 TLSH

            RtpConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
            • Size 2KB
            • SHA256 f774ff2df8114b0a0c222ec91ca5a2e82ce4fa79666309e510428fac58a3bc33
            • MD5 SHA1 SHA512 TLSH

            RtpConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
            • Size 2KB
            • SHA256 208ed839c28512665a6b198541a49402692b43bea8043dc61ce8973b68058ad6
            • MD5 SHA1 SHA512 TLSH

            ScanConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
            • Size 2KB
            • SHA256 c7089b0a3238dffc5e5941a77562175f1f52ab53db37016812194738275e18a5
            • MD5 SHA1 SHA512 TLSH

            ScanConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
            • Size 5KB
            • SHA256 87a9bb6c906e60c6715a21281688a1c37c7e71fee63fc30923e962f0b65f1439
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ScanConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
            • Size 8KB
            • SHA256 e06ce8355f9f413268cab65bfeec219f46d8bab0feb47b545bbe79537e5bde0f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SpConfigFile.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json
            • Size 11KB
            • SHA256 f7f77a76116451716c18aaa6408e94c09a9e752b4b75b4b7a41cab2acb727f1a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SpConfigFile.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json
            • Size 11KB
            • SHA256 6d8b8027db8c0bf3aa873218258b2006eefee28e1c003225c9bd39d41b3cfe1a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            TelemCtrlConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
            • Size 1KB
            • SHA256 53685147f4b182b5e905821d33dec6bc7f9a5eaf98c34ced8ffad17093379b62
            • MD5 SHA1 SHA512 TLSH

            TelemCtrlConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
            • Size 1KB
            • SHA256 7828030f0ed969c7214c98e94870b0cb1fc2f36190c8f9825cca9540de22b76b
            • MD5 SHA1 SHA512 TLSH

            TelemCtrlConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
            • Size 1KB
            • SHA256 5a43dd34d6b97f3ee69e84d8eb820f6c07c3a3ae634ff2487d9d4387ec61402e
            • MD5 SHA1 SHA512 TLSH

            TelemCtrlConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
            • Size 1KB
            • SHA256 0e07f403a3d8128b277b9166ef12c34000b966ac1dd32760636522f13f8b33ea
            • MD5 SHA1 SHA512 TLSH

            TelemCtrlConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
            • Size 1KB
            • SHA256 6308cec581398bd37f7b14cb236b4b24792f1c74012c8e6bebc15e3fe34f1839
            • MD5 SHA1 SHA512 TLSH

            UpdateControllerConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
            • Size 1KB
            • SHA256 5d03349919da14419530d419f22cad382bd394459ff5ee514f3fc289f2843cc4
            • MD5 SHA1 SHA512 TLSH

            UpdateControllerConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
            • Size 1KB
            • SHA256 a68e8805f070a068217180430b8b431c6b6cf74427ac88d42f1041489640b16e
            • MD5 SHA1 SHA512 TLSH

            UpdateControllerConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
            • Size 1KB
            • SHA256 55f4ae259358206b1f79659872453a326eee4ca9af4ca198464145839332340a
            • MD5 SHA1 SHA512 TLSH

            UpdateControllerConfig.json.bak

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak
            • Size 1KB
            • SHA256 9186efd04df9d10ce5997e86171f0767240955be1f377467516d9e1c8eb4eef6
            • MD5 SHA1 SHA512 TLSH

            UpdateControllerConfig.json.bak

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak
            • Size 1KB
            • SHA256 885ee62c9d1f57db905b7762758df39b98ae0546df24784b9b9ba23bee0693e2
            • MD5 SHA1 SHA512 TLSH

            UpdateControllerConfig.json.bak

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak
            • Size 1KB
            • SHA256 65684ed5d0f54483f1390daf073ad3c6e674c53bbe112b80c0992d8671cf3700
            • MD5 SHA1 SHA512 TLSH

            UpdateControllerConfig.json.bak

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak
            • Size 1KB
            • SHA256 fb860ca4f993e2f1f05e8c012a6d1f7e08b8ec54170449645a20af87f9479b2d
            • MD5 SHA1 SHA512 TLSH

            UpdateControllerConfig.json.bak

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak
            • Size 1KB
            • SHA256 44882d69a3cf2c309ea5b9470a6c2359ae5be412e3be64f3d05ef50a61ed5497
            • MD5 SHA1 SHA512 TLSH

            VPNControllerConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json
            • Size 1KB
            • SHA256 4a0720765cf22260099e1230e9086f032f1e82da93d6fa28e1b385d3b02c80fa
            • MD5 SHA1 SHA512 TLSH

            VPNControllerConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json
            • Size 1KB
            • SHA256 9d471e6d2bc7a0a25458038c0308f2738b53c1bdc4de33d833a1f85f1a5b03f2
            • MD5 SHA1 SHA512 TLSH

            VPNServerListConfig.json

            • Path C:\ProgramData\Malwarebytes\MBAMService\config\VPNServerListConfig.json
            • Size 125B
            • SHA256 986132adbadf39215dcb93a44364c77d7257a69a5fb5ef9b196db33bc1527c86
            • MD5 SHA1 SHA512 TLSH

            mbrescue.exe

            • Path C:\ProgramData\Malwarebytes\MBAMService\rmode\mbrescue.exe
            • Size 7.7MB
            • SHA256 477919ecb586d6ef4a06793417c2ae3126c51a51cf9445d901e90e3627e7143b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dberr.txt

            • Path C:\Windows\System32\CatRoot2\dberr.txt
            • Size 104KB
            • SHA256 5fc0b7d06a1486d52568f074c0f012637f1d002e6e44f5d81b602da11f556d2e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mbtun.cat

            • Path C:\Windows\System32\DriverStore\Temp\{3d332e19-8320-4742-afe8-28b20d7e0236}\mbtun.cat
            • Size 10KB
            • SHA256 9ceb410494b95397ec1f8fa505d071672bf61f81cc596b8eccd167a77893c658
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dberr.txt

            • Path C:\Windows\System32\catroot2\dberr.txt
            • Size 104KB
            • SHA256 9ffc851e2bf8c543abeee2cd0befffb50c0814f36769930ccb7705d576a1cfdc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mbamswissarmy.sys

            • Path C:\Windows\System32\drivers\mbamswissarmy.sys
            • Size 240KB
            • SHA256 0cd62ce0cf56289cb0aa1e5330683704dc8e34c08a15407c9fdbc1948f5e12a3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mb_9958.tmp

            • Path C:\Windows\Temp\mb_9958.tmp
            • Size 107KB
            • SHA256 ad820dd54edb13e255d34eafacd71f278d6514e2f7e4c2970401f922a774ceb0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            memory/3376-3513-0x0000020AD24D0000-0x0000020AD2BB0000-memory.dmp

            memory/3376-3603-0x0000020AD24D0000-0x0000020AD2BB0000-memory.dmp