Overview

overview

10

Static

static

3

2026-08-03...at.exe

windows10-2004-x64

10

2026-08-03...at.exe

windows11-ltsc_2024-x64

10

Analysis

  • max time kernel
    118s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    03/08/2026, 04:45

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-03_c76f80b452e24a34d790050ad68b8c7f_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
  • Size 3.3MB
  • Sample260803-fdvnaayeka
  • SHA256 8b8e935fef8e6969add37d92758c5b3c0669ba0f3830d162418f631f49b2cc5c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationransomwarespywarestealertrojan

Malware Config

Signatures

  • Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs
  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers 1 IoCs
  • Detects binaries and memory artifacts referencing sandbox DLLs typically observed in sandbox evasion 2 IoCs
  • Detects executables built or packed with MPress PE compressor 3 IoCs
  • Detects executables packed with ConfuserEx Mod 2 IoCs
  • Detects executables packed with Goliath 2 IoCs
  • Detects executables packed with Themida 2 IoCs
  • Downloads MZ/PE file 1 IoCs
  • Drops file in Drivers directory 7 IoCs
  • Modifies RDP port number used by Windows 1 TTPs
  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • Sets service image path in registry 3 TTPs 2 IoCs

    This determines the executable launched when a service starts. It can be used to establish persistence.

    persistence
  • Checks BIOS information in registry 2 TTPs 4 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 34 IoCs
  • Impair Defenses: Safe Mode Boot 1 TTPs 2 IoCs
    defense_evasion
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • ConfuserEx .NET packer 2 IoCs

    Detects ConfuserEx .NET packer.

  • Drops file in System32 directory 64 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 8 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 2 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

    persistenceprivilege_escalation
  • Modifies trusted root certificate store through registry 1 TTPs 11 IoCs

    A root certificate was added, modified, or removed in the trusted certificate store registry paths.

    defense_evasion
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 5 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 14 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: LoadsDriver 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 7 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:3264
      • C:\Users\Admin\AppData\Local\Temp\2026-08-03_c76f80b452e24a34d790050ad68b8c7f_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
        "C:\Users\Admin\AppData\Local\Temp\2026-08-03_c76f80b452e24a34d790050ad68b8c7f_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe"
        2⤵
        • Suspicious use of NtCreateUserProcessOtherParentProcess
        • Downloads MZ/PE file
        • Drops file in Drivers directory
        • Drops file in System32 directory
        • Drops file in Program Files directory
        • Drops file in Windows directory
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:1680
      • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe"
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of WriteProcessMemory
        PID:6768
        • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
          "C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe"
          3⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • Checks whether UAC is enabled
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          PID:6944
    • C:\Windows\System32\alg.exe
      C:\Windows\System32\alg.exe
      1⤵
      • Executes dropped EXE
      PID:3772
    • C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
      C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
      1⤵
      • Executes dropped EXE
      • Drops file in System32 directory
      • Drops file in Program Files directory
      • Drops file in Windows directory
      PID:4312
    • C:\Windows\System32\svchost.exe
      C:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv
      1⤵
        PID:4512
      • C:\Windows\system32\fxssvc.exe
        C:\Windows\system32\fxssvc.exe
        1⤵
        • Executes dropped EXE
        • Suspicious use of AdjustPrivilegeToken
        PID:312
      • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
        1⤵
        • Executes dropped EXE
        PID:4000
      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
        1⤵
        • Executes dropped EXE
        PID:836
      • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
        "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
        1⤵
        • Executes dropped EXE
        PID:1812
      • C:\Windows\System32\msdtc.exe
        C:\Windows\System32\msdtc.exe
        1⤵
        • Executes dropped EXE
        • Drops file in Windows directory
        PID:1848
      • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
        "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
        1⤵
        • Executes dropped EXE
        PID:4856
      • C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe
        C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe
        1⤵
        • Executes dropped EXE
        PID:4036
      • C:\Windows\SysWow64\perfhost.exe
        C:\Windows\SysWow64\perfhost.exe
        1⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:868
      • C:\Windows\system32\locator.exe
        C:\Windows\system32\locator.exe
        1⤵
        • Executes dropped EXE
        PID:2716
      • C:\Windows\System32\SensorDataService.exe
        C:\Windows\System32\SensorDataService.exe
        1⤵
        • Executes dropped EXE
        • Checks SCSI registry key(s)
        PID:1208
      • C:\Windows\System32\snmptrap.exe
        C:\Windows\System32\snmptrap.exe
        1⤵
        • Executes dropped EXE
        PID:688
      • C:\Windows\system32\spectrum.exe
        C:\Windows\system32\spectrum.exe
        1⤵
        • Executes dropped EXE
        • Checks SCSI registry key(s)
        PID:3908
      • C:\Windows\System32\OpenSSH\ssh-agent.exe
        C:\Windows\System32\OpenSSH\ssh-agent.exe
        1⤵
        • Executes dropped EXE
        PID:5112
      • C:\Windows\system32\TieringEngineService.exe
        C:\Windows\system32\TieringEngineService.exe
        1⤵
        • Executes dropped EXE
        • Checks processor information in registry
        • Suspicious use of AdjustPrivilegeToken
        PID:1028
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc
        1⤵
          PID:4504
        • C:\Windows\system32\AgentService.exe
          C:\Windows\system32\AgentService.exe
          1⤵
          • Executes dropped EXE
          • Suspicious use of AdjustPrivilegeToken
          PID:3792
        • C:\Windows\System32\vds.exe
          C:\Windows\System32\vds.exe
          1⤵
          • Executes dropped EXE
          PID:3320
        • C:\Windows\system32\vssvc.exe
          C:\Windows\system32\vssvc.exe
          1⤵
          • Executes dropped EXE
          • Suspicious use of AdjustPrivilegeToken
          PID:2312
        • C:\Windows\system32\wbengine.exe
          "C:\Windows\system32\wbengine.exe"
          1⤵
          • Executes dropped EXE
          • Suspicious use of AdjustPrivilegeToken
          PID:2444
        • C:\Windows\system32\wbem\WmiApSrv.exe
          C:\Windows\system32\wbem\WmiApSrv.exe
          1⤵
          • Executes dropped EXE
          PID:2456
        • C:\Windows\system32\SearchIndexer.exe
          C:\Windows\system32\SearchIndexer.exe /Embedding
          1⤵
          • Executes dropped EXE
          • Modifies data under HKEY_USERS
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:1648
          • C:\Windows\system32\SearchProtocolHost.exe
            "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
            2⤵
            • Modifies data under HKEY_USERS
            PID:2888
          • C:\Windows\system32\SearchFilterHost.exe
            "C:\Windows\system32\SearchFilterHost.exe" 0 800 804 812 8192 808 784
            2⤵
            • Modifies data under HKEY_USERS
            PID:3764
        • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
          "C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe"
          1⤵
          • Drops file in Drivers directory
          • Executes dropped EXE
          • Impair Defenses: Safe Mode Boot
          • Loads dropped DLL
          • Enumerates connected drives
          • Drops file in Program Files directory
          • Modifies trusted root certificate store through registry
          • Modifies Internet Explorer settings
          • Modifies data under HKEY_USERS
          • Modifies system certificate store
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:8
          • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
            "C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe" /installmbtun
            2⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Drops file in System32 directory
            • Drops file in Windows directory
            PID:6936
          • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
            "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" /Service /Protected
            2⤵
            • Drops file in Drivers directory
            • Executes dropped EXE
            • Modifies registry class
            PID:4948
        • C:\Windows\system32\svchost.exe
          C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
          1⤵
          • Drops file in Windows directory
          • Checks SCSI registry key(s)
          • Suspicious use of WriteProcessMemory
          PID:3112
          • C:\Windows\system32\DrvInst.exe
            DrvInst.exe "4" "9" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf" "9" "4ba9030c7" "000000000000013C" "Service-0x0-3e7$\Default" "0000000000000158" "208" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun"
            2⤵
            • Drops file in System32 directory
            • Drops file in Windows directory
            • Checks SCSI registry key(s)
            • Modifies data under HKEY_USERS
            PID:5600
        • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
          "C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe"
          1⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Event Triggered Execution: Netsh Helper DLL
          PID:5760
        • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
          "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"
          1⤵
          • Drops file in Drivers directory
          • Sets service image path in registry
          • Checks BIOS information in registry
          • Executes dropped EXE
          • Loads dropped DLL
          • Enumerates connected drives
          • Checks processor information in registry
          • Modifies Internet Explorer settings
          • Modifies data under HKEY_USERS
          • Modifies system certificate store
          • Suspicious use of WriteProcessMemory
          PID:6188
          • C:\ProgramData\Malwarebytes\MBAMService\rmode\mbrescue.exe
            "C:\ProgramData\Malwarebytes\MBAMService\rmode\mbrescue.exe" /rescuemode "C:\Program Files\Malwarebytes\Anti-Malware" "C:\ProgramData\Malwarebytes\MBAMService"
            2⤵
            • Checks BIOS information in registry
            • Executes dropped EXE
            PID:2816
        • C:\Windows\system32\DRIVERS\MbamElam.sys
          C:\Windows\system32\DRIVERS\MbamElam.sys
          1⤵
          • Executes dropped EXE
          PID:6328
        • C:\Windows\system32\DRIVERS\mbamswissarmy.sys
          C:\Windows\system32\DRIVERS\mbamswissarmy.sys
          1⤵
          • Executes dropped EXE
          PID:1760
        • C:\Windows\system32\DRIVERS\MbamChameleon.sys
          C:\Windows\system32\DRIVERS\MbamChameleon.sys
          1⤵
          • Executes dropped EXE
          PID:1812
        • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
          "C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe"
          1⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Event Triggered Execution: Netsh Helper DLL
          PID:6776

        Network

              MITRE ATT&CK Enterprise v16

              Reconnaissance

              Resource Development

              Initial Access

              Execution

              Persistence

              Boot or Logon Autostart Execution

              1
              T1547

              Registry Run Keys / Startup Folder

              1
              T1547.001

              Create or Modify System Process

              1
              T1543

              Windows Service

              1
              T1543.003

              Event Triggered Execution

              2
              T1546

              Component Object Model Hijacking

              1
              T1546.015

              Netsh Helper DLL

              1
              T1546.007

              Privilege Escalation

              Boot or Logon Autostart Execution

              1
              T1547

              Registry Run Keys / Startup Folder

              1
              T1547.001

              Create or Modify System Process

              1
              T1543

              Windows Service

              1
              T1543.003

              Event Triggered Execution

              2
              T1546

              Component Object Model Hijacking

              1
              T1546.015

              Netsh Helper DLL

              1
              T1546.007

              Defense Evasion

              Impair Defenses

              1
              T1562

              Safe Mode Boot

              1
              T1562.009

              Modify Registry

              3
              T1112

              Subvert Trust Controls

              2
              T1553

              Install Root Certificate

              2
              T1553.004

              Credential Access

              Credentials from Password Stores

              1
              T1555

              Credentials from Web Browsers

              1
              T1555.003

              Unsecured Credentials

              1
              T1552

              Credentials In Files

              1
              T1552.001

              Discovery

              Peripheral Device Discovery

              2
              T1120

              Query Registry

              6
              T1012

              System Information Discovery

              7
              T1082

              System Location Discovery

              1
              T1614

              System Language Discovery

              1
              T1614.001

              Lateral Movement

              Remote Services

              1
              T1021

              Remote Desktop Protocol

              1
              T1021.001

              Collection

              Data from Local System

              1
              T1005

              Command and Control

              Exfiltration

              Impact

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              mbtun.cat
              • Path C:\PROGRA~1\MALWAR~1\ANTI-M~1\mbtun\mbtun.cat
              • Size 10KB
              • SHA256 9ceb410494b95397ec1f8fa505d071672bf61f81cc596b8eccd167a77893c658
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              elevation_service.exe
              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
              • Size 2.7MB
              • SHA256 0531db82d698a00335660bae9e3a034502678bd631b517136aa59f79346e2308
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              maintenanceservice.exe
              • Path C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
              • Size 1.5MB
              • SHA256 d234c6955faecd5386b0d7634b36edf9c7f481432c37604c300d3c77ca9f1b96
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              OSE.EXE
              • Path C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE
              • Size 1.5MB
              • SHA256 fa4c361c5668539f18013d14607de9017c05f89465a2cdb3dab6e9771c466372
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              elevation_service.exe
              • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
              • Size 2.8MB
              • SHA256 f5e0f6093cc8cda5d4252524eb7346d16f56589f35e2963f5a2ecbf39d3cfc77
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              LicenseControllerImpl.dll
              • Path C:\Program Files\Malwarebytes\Anti-Malware\LicenseControllerImpl.dll
              • Size 7.1MB
              • SHA256 223dd68b4fc42d3451d7631a56bf261517e400da2b9536969b7eda80b28a0e93
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBAMInstallerService.exe
              • Path C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
              • Size 10.6MB
              • SHA256 d10e04217f81b44667c6237971f1f2843d132220c8712e8a855436e9f1f73baa
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBAMWsc.exe
              • Path C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe
              • Size 4.2MB
              • SHA256 7878a9b10903b8c0def49015deefd48a3ea0e46c0f5ac9ae755336994e020152
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBVpnTunnelService.exe
              • Path C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
              • Size 4.6MB
              • SHA256 00ac5feed0e55113a157b954357f35410c5871e11a99074a99ee25de112afa1b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBVpnTunnelService.exe
              • Path C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
              • Size 4.6MB
              • SHA256 43965a91e107b2784009ea76592027e78ca8ac19b21097ba500a1116631c31fa
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBVpnTunnel_mbtun.dll
              • Path C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnel_mbtun.dll
              • Size 4.2MB
              • SHA256 0b764892f7f32d385684411e647f69f428067180aa28315d71668d3ab25b335e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MbamElam.cat
              • Path C:\Program Files\Malwarebytes\Anti-Malware\MbamElam.cat
              • Size 11KB
              • SHA256 64416d564725416c6869ea951878a2734b1f6940b11f7961a897c45f0d8c6625
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MbamElam.inf
              • Path C:\Program Files\Malwarebytes\Anti-Malware\MbamElam.inf
              • Size 2KB
              • SHA256 e26c2d3347e5f077da92713c9df3cd3eae438fb7e29810bd5c3afe567d2d3125
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              MbamElam.sys
              • Path C:\Program Files\Malwarebytes\Anti-Malware\MbamElam.sys
              • Size 21KB
              • SHA256 ded569e249e590314d095f740c6b8934a5a797e4f3edbe0f78eac9d333f12a2a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ServiceConfig.json
              • Path C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json
              • Size 621B
              • SHA256 10a7070b1212f668ce30e7017170cc4bf9d6711f5c2275cbeaef7f086a4a27c6
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              ServiceConfig.json
              • Path C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json
              • Size 784B
              • SHA256 9f72b34de3028f514aad60210237076afdecc24ad8c88babae02400a331cc6d2
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              UpdateControllerImpl.dll
              • Path C:\Program Files\Malwarebytes\Anti-Malware\UpdateControllerImpl.dll
              • Size 4.5MB
              • SHA256 058befee7a55f5d8510de91f4746053fd49393f2f1843c4f090c3dae60d7d540
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              malwarebytes_assistant.runtimeconfig.json
              • Path C:\Program Files\Malwarebytes\Anti-Malware\malwarebytes_assistant.runtimeconfig.json
              • Size 615B
              • SHA256 61fca252e8e336706f4c153c16100b7b621f9092ed09bb6959e406ab5bb21e85
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              mbtun.dll
              • Path C:\Program Files\Malwarebytes\Anti-Malware\mbtun.dll
              • Size 2.8MB
              • SHA256 f21a980316bd4c57c70e00840ab76d9ad412092d7d2d6a2cff4f1311f7c05364
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbtun.inf
              • Path C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf
              • Size 1KB
              • SHA256 4a350fc20834a579c5a58352b7a3aa02a454abbbd9eecd3cd6d2a14864a49cd8
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              srvversion.dat
              • Path C:\Program Files\Malwarebytes\Anti-Malware\srvversion.dat
              • Size 9B
              • SHA256 af0cac103fb816b5059d8775d63406a2f410a8ed70826978cddc6d88d8ddc668
              • MD5 SHA1 SHA512
              Submit Download

              7z.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\7z.dll
              • Size 1.6MB
              • SHA256 bb01c6fbb29590d6d144a9038c2a7736d6925a6dbd31889538af033e03e4f5fa
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              7z.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\7z.dll
              • Size 1.6MB
              • SHA256 623e628393bc4b8131c1f4302b195429dfa67e890d3325ceaa56940660052b1b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              AEControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\AEControllerImpl.dll
              • Size 4.9MB
              • SHA256 878239e138180492b8e703203db1eeda5da1a88b7897c16e7323bb506ef28dfe
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ActionsShim.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\ActionsShim.dll
              • Size 3.7MB
              • SHA256 6c5047cb77ea843e8386ba2b26a8458e6255e2ab94d493e914620623723c6b32
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ArwControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\ArwControllerImpl.dll
              • Size 5.6MB
              • SHA256 a1904889632fce5fece6dbecda5e237423d571652350f24c8724bdeb3a30228a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ArwLib.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\ArwLib.dll
              • Size 7.2MB
              • SHA256 acc5508787ed40d3fd48c9428d3cbdb23ef9540ba4e9bcafc1e3c25e30fef526
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Assistant.deps.json
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Assistant.deps.json
              • Size 15KB
              • SHA256 6832f2ca93598e09ea6476cfc780c4b8deae9c0c9e540d5f5b252a45fdac0458
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Assistant.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Assistant.dll
              • Size 158KB
              • SHA256 10ab319330bb858dc26fb8286a9b58656171561f01937f4f51b631a195c6efeb
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Assistant.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Assistant.exe
              • Size 301KB
              • SHA256 f29f68a50d89b9cf5590fe19de68065f5da28adaf7a7d1ee377aa42b8f586b47
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              BrowserSDKDLLShim.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\BrowserSDKDLLShim.dll
              • Size 3.7MB
              • SHA256 f6d24605eb688e039e4509d184d974bb14c4c38528edad129d0653eadfea80f9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              CleanControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\CleanControllerImpl.dll
              • Size 8.7MB
              • SHA256 8404395da4f44f39236e8265593f52dcbbdcb7e37e129498d4c18b56dee6902e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              CloudControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\CloudControllerImpl.dll
              • Size 6.9MB
              • SHA256 c1af072bd24fe47e5f2cd71faa900c7a1dd16520d3735f9cc8df40d671b5e9b7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              DryIoc.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\DryIoc.dll
              • Size 597KB
              • SHA256 bea5ba96d0043de5b52d5ce12bb9444d79c85c4b5160ebe19dee405c01aebc0e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Duende.IdentityModel.OidcClient.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Duende.IdentityModel.OidcClient.dll
              • Size 165KB
              • SHA256 db2d3a529c5486ba69d385bedd6e1e5cbea351a4b8213ab83c952092b17cc17c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Duende.IdentityModel.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Duende.IdentityModel.dll
              • Size 250KB
              • SHA256 5a32a96fffa06776adbfa8432105e06aa7cf795ba8647690b9ca272fe07892a3
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBAMCrashHandler.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\MBAMCrashHandler.exe
              • Size 890KB
              • SHA256 164932ea0ead0fc1d660b075913244fe7ca7322c725cdb0903ae4cf217b19a64
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBAMService.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\MBAMService.exe
              • Size 11.0MB
              • SHA256 fd7a1428221fe7de747930cb3d9f2991610e2b1d809a0abc1f26590db5f5986c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBAMShim.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\MBAMShim.dll
              • Size 4.3MB
              • SHA256 dcc714dd199d9768faa0ca212e63efe63caa8aeb4cb11487fa389ff59f6cf98d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBVpnTunnelService.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\MBVpnTunnelService.exe
              • Size 4.1MB
              • SHA256 a67f94a3014d93b9b91f0c8427c81cc18cb13239a114d91c51f993702e60a580
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBVpnTunnel_wireguard.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\MBVpnTunnel_wireguard.dll
              • Size 2.9MB
              • SHA256 998086c9be8d1e7bb8ec63e907c834dd315849cb78de4da8cdb5702e03eb79ad
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MWACControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\MWACControllerImpl.dll
              • Size 7.6MB
              • SHA256 de1f0248c81a86c1498ec703d90c2b7edb7d863b39380ff21c1f19d3edbe7075
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.Interop.Activation.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Malwarebytes.Interop.Activation.dll
              • Size 36KB
              • SHA256 f5a9e3587fcf855046d8b08e86ed61105f2f330a1c9021461446c137ed3b9ac5
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.Protection.Interop.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Malwarebytes.Protection.Interop.dll
              • Size 2.5MB
              • SHA256 1c598177dffdc0588968bcc909642b42607c33f3c0058f9ae2a6f91a996eb111
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.UI.Controls.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Malwarebytes.UI.Controls.dll
              • Size 32KB
              • SHA256 4c3d97304af4e091ee4ed390f2c75deb04de900ab404bc41e529a0c5bbbd04c9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.UI.Style.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Malwarebytes.UI.Style.dll
              • Size 108KB
              • SHA256 ba1e626a9b6a3d7c967d00ae31b7a758edb0ac23d8332939f044710d8e6288a9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.UI.Theme.Dark.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Malwarebytes.UI.Theme.Dark.dll
              • Size 55KB
              • SHA256 e0b84c137d3cef1dd43fc3572d359373b1614ab8aa0f5091f58120bfd3fc1c53
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.UI.Theme.Light.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Malwarebytes.UI.Theme.Light.dll
              • Size 55KB
              • SHA256 d2d177294181c0bc81baef93502e603eb1fdcff51b074a1f068c38003f1c0502
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.UI.Theme.Primitives.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Malwarebytes.UI.Theme.Primitives.dll
              • Size 2.1MB
              • SHA256 7a543d38cb51c1fae0e41297c50247f7558aae0e879f7d6762b2349193ad992f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.deps.json
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Malwarebytes.deps.json
              • Size 53KB
              • SHA256 ec9c8488469f49892da2dd31adf8f6e871d2c6a7a3e734392aec875087af5979
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Malwarebytes.dll
              • Size 10.8MB
              • SHA256 a9eb2c88a612aaeff17fac7a6358095648430b797b532d91119cff1505eedb5b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Malwarebytes.exe
              • Size 304KB
              • SHA256 0671ca7932916aba879752e6b59ed5d87538c57236a64c73eb5ff36deaef03b2
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes.runtimeconfig.json
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Malwarebytes.runtimeconfig.json
              • Size 732B
              • SHA256 3f60cdd7ad6efb453058c7d80dcad1ef76bf5db28fd548fb6f9714b409e4a181
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              Malwarebytes_Assistant.deps.json
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Malwarebytes_Assistant.deps.json
              • Size 15KB
              • SHA256 a7b61740f03ff13d048988b468b9eae31c051b1ee38dfa4dbd4f9b64fc91735c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes_Assistant.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Malwarebytes_Assistant.dll
              • Size 162KB
              • SHA256 7f49055ad3feee2968e609388c493c7288c3825ce506dcd0c8937b163c99ca11
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Malwarebytes_Assistant.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Malwarebytes_Assistant.exe
              • Size 301KB
              • SHA256 401db49dee2f6cd6d7568b4c2fe3aa387d5a4fd500bd8d607dea3dafb481a43b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MbamBgNativeMsg.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\MbamBgNativeMsg.exe
              • Size 4.3MB
              • SHA256 ea97af9bdc388c8b2f43b070b39ff3c30a32bac2b9a5143596a18038f5b027d9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MbamUI.Core.deps.json
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\MbamUI.Core.deps.json
              • Size 7KB
              • SHA256 097af37567e76677bcc9b90d5864db84103a5145131c16bb94aed3e083e91c8b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MbamUI.Core.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\MbamUI.Core.dll
              • Size 178KB
              • SHA256 94e33dfa4430472f21dacd7ae46bd49d90a2f7300f5a76f411f599763ab1cd0b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MbamUI.Data.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\MbamUI.Data.dll
              • Size 1.6MB
              • SHA256 53f6bf1b4a9026b541253bb00972734f3a966e539a9aa4c39be8098b7fae420a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MbamUI.Services.deps.json
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\MbamUI.Services.deps.json
              • Size 14KB
              • SHA256 cdd3624951f7a32c5d211afb9e9800a6f5ffb60d1d4d71272e168649c29c4f29
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MbamUI.Services.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\MbamUI.Services.dll
              • Size 3.5MB
              • SHA256 664bd764f02edc1660516792588ffa7a0ab3fdc36220a2646e3b3c02889869ff
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MbamUI.Tray.deps.json
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\MbamUI.Tray.deps.json
              • Size 14KB
              • SHA256 04838342f08dbec004170b4902da3e4726354b4a04e155c6b914b54c55580acf
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MbamUI.Tray.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\MbamUI.Tray.dll
              • Size 192KB
              • SHA256 f3f10f62a4166b17d7c01274a5f0df5fec7013dae682df6d3a54f03aa144c5a7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MdXaml.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\MdXaml.dll
              • Size 183KB
              • SHA256 0f701984b8efd7bcb9da4a13aeffd698b9a2c3f248e3cc460c4c6ac4b9cfe150
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Data.Sqlite.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Microsoft.Data.Sqlite.dll
              • Size 173KB
              • SHA256 4ffa9156ebb9332bc53196cde2e62997447ad046629216be555e07d5d65f6c19
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.EntityFrameworkCore.Abstractions.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Microsoft.EntityFrameworkCore.Abstractions.dll
              • Size 33KB
              • SHA256 c29df8f2db22e129bb6929130d98aa612b570a5ebab9842a11e809796cf03448
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.EntityFrameworkCore.Relational.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Microsoft.EntityFrameworkCore.Relational.dll
              • Size 2.1MB
              • SHA256 687f84616b0a58de7ba0c20d14b4fe38871d79161f2de5bb3f48d171c292a0db
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.EntityFrameworkCore.Sqlite.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Microsoft.EntityFrameworkCore.Sqlite.dll
              • Size 304KB
              • SHA256 623bc03297fcefc658a9e251d1e75c12d7365b80a3ebcfecd3e31d5a6e7feead
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.EntityFrameworkCore.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Microsoft.EntityFrameworkCore.dll
              • Size 2.7MB
              • SHA256 6750a0c56a1d557d7590728d4d7378f6e1ec65cb96e59489023cdc9fd139f6ca
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.Caching.Abstractions.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Microsoft.Extensions.Caching.Abstractions.dll
              • Size 36KB
              • SHA256 46697030a421c60e4a1eecb295fe14513a562bb2e5d7e0ac878f4934e56bb50b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.Caching.Memory.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Microsoft.Extensions.Caching.Memory.dll
              • Size 46KB
              • SHA256 f108fc79cd1b69eb4d0f8a45d198c5fb99ace430dbec65380854a559a248d6a9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.Configuration.Abstractions.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Microsoft.Extensions.Configuration.Abstractions.dll
              • Size 27KB
              • SHA256 c295e6c3384ed61e4fea0fc43479aadedf81a60c9c97d3dbdb9247f562e0846f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.DependencyInjection.Abstractions.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Microsoft.Extensions.DependencyInjection.Abstractions.dll
              • Size 64KB
              • SHA256 ca708422782fb25819941a16a057ea96d6d18b037e7e5cbfdf340b7a04362b57
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.DependencyInjection.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Microsoft.Extensions.DependencyInjection.dll
              • Size 93KB
              • SHA256 47f8175d34e9087d3858644803c558cb9cf52b29bffda796f65c1c527d1b6a22
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.DependencyModel.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Microsoft.Extensions.DependencyModel.dll
              • Size 82KB
              • SHA256 8dadc004effa669d9caf231019413e469d58632eadb9dacf56aad07d8bac82a3
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.Logging.Abstractions.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Microsoft.Extensions.Logging.Abstractions.dll
              • Size 65KB
              • SHA256 ec244a2db19dffe90cd299fa4b0691456ced342a078b4a93cf3726a9b431e9ac
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.Logging.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Microsoft.Extensions.Logging.dll
              • Size 50KB
              • SHA256 74d8fd2d7997fc638474e2bd79916458a30481e6a6925b50e7e96b4b852031c3
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.Options.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Microsoft.Extensions.Options.dll
              • Size 63KB
              • SHA256 644350f8c2404d4479b97a250edb29585e5fafec1b6ce8486ae600c5015fd7fb
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Extensions.Primitives.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Microsoft.Extensions.Primitives.dll
              • Size 43KB
              • SHA256 a0794c3bab2d7e0c848f0dffb3b9aa4b43ce07dc0abd122ebb7bf6dc79452ec4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Microsoft.Xaml.Behaviors.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Microsoft.Xaml.Behaviors.dll
              • Size 142KB
              • SHA256 0493049febb4be74bdf669ad7fa754941c2754fe33421e230a8f14c8fd06c8c4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MwacLib.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\MwacLib.dll
              • Size 6.4MB
              • SHA256 b7bd08efeb605825a6fbddfb86f467017d015c39b498b1abadce3a1c2b9aec77
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              PoliciesControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\PoliciesControllerImpl.dll
              • Size 6.1MB
              • SHA256 cd1e8f98551fb69d3d47837c09fea35be358dd7c27104afb7f1938a7fadbb2c5
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Prism.Container.Extensions.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Prism.Container.Extensions.dll
              • Size 20KB
              • SHA256 85a55b97f20431fcf6d33634de6a86d7c6d441be413c728e19dda8b0aef72e92
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Prism.DryIoc.Wpf.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Prism.DryIoc.Wpf.dll
              • Size 26KB
              • SHA256 ad1666c83f2554b09396386fcec856f9b3068b9bc2a29f13c08d3ce0c23d7d4f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Prism.Wpf.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Prism.Wpf.dll
              • Size 132KB
              • SHA256 c3b44b118486a5d74d696c14853e5306ec893dadd0be8ea6f404edae8c66f2d3
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Prism.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Prism.dll
              • Size 89KB
              • SHA256 92090c9c3c5195149885be91aa469b85d2cba9a215cb3bfb65e93945f33d852b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              QRCoder.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\QRCoder.dll
              • Size 228KB
              • SHA256 71eabcb0819c02d8f62db7dc8c3b6af2a75e5d37ea65cbcdb2cf37f0f664c847
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              RTPControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\RTPControllerImpl.dll
              • Size 6.4MB
              • SHA256 905e6da13fed3e931eb9180aa50b6f2058da73ec7e8c9735a6e03730de3f317c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SPControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\SPControllerImpl.dll
              • Size 4.5MB
              • SHA256 6563c8273b0285bb2db5df55c8a707b76ed9215739b78ea4e2f954ee1025ef12
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SQLitePCLRaw.batteries_v2.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\SQLitePCLRaw.batteries_v2.dll
              • Size 32KB
              • SHA256 7c10d7bd83a3a3451072d1a80b26a9f55d7eea11097a3c4d9de6daa3d562d50b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SQLitePCLRaw.core.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\SQLitePCLRaw.core.dll
              • Size 77KB
              • SHA256 2e55d659a5693afdf4c6a5b4b0214f6224b7f0ba094ddc1db0871834c66935e7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SQLitePCLRaw.provider.e_sqlcipher.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\SQLitePCLRaw.provider.e_sqlcipher.dll
              • Size 63KB
              • SHA256 7ca281df0718d1d00cb83fc7412b88ad3a10120dfc0dae8fe4efc1a6c478d226
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SQLitePCLRaw.provider.e_sqlite3.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\SQLitePCLRaw.provider.e_sqlite3.dll
              • Size 63KB
              • SHA256 5064528668f29aba1752bbd38669428c0a20bf68d5ce8a64d8f6dccaaefc1834
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ScanControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\ScanControllerImpl.dll
              • Size 6.9MB
              • SHA256 c247fc5913cdd73b37f6619b5e2019831635cac2786997e6e98965690b87d076
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SelfProtectionSdk.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\SelfProtectionSdk.dll
              • Size 4.6MB
              • SHA256 09b8ea52a6950390fa1f96720f0c7b4c527631b24d27466e5f9e5952701dbc0b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SelfProtectionShim.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\SelfProtectionShim.dll
              • Size 4.0MB
              • SHA256 ccb4ce36aa0887ed1017abd15b1019f31a8fe2c1afc55a6a063d94142d7483c2
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Sentry.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Sentry.dll
              • Size 835KB
              • SHA256 a826dd6e254ca80c35769bf2a540260203349d38f645aa34072709285ca30804
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Serilog.Extensions.Logging.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Serilog.Extensions.Logging.dll
              • Size 55KB
              • SHA256 5ae5f9e0308e7043e81d4fd1121057d01449f7022c7a4e5d47f2101e82584594
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Serilog.Sinks.File.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Serilog.Sinks.File.dll
              • Size 63KB
              • SHA256 b4397c50906493343a91ed95505c2091f86cd2a7a8523c139decf6ead7381e14
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Serilog.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Serilog.dll
              • Size 186KB
              • SHA256 f1de8852c92655aeefeb52904daa4e9ccf0abf2e64f44583bfe27088d9aaf050
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Swissarmy.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\Swissarmy.dll
              • Size 5.3MB
              • SHA256 9ad52208d95d536dd1dd77c9bd118c7ab0fffc795a4f0875fa608544d30bb931
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SwissarmyShim.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\SwissarmyShim.dll
              • Size 3.8MB
              • SHA256 7b7bef24ae682aed60edf136ef817d60b7b1a02e3ad3f86c7b820cc502e4edce
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.Diagnostics.EventLog.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\System.Diagnostics.EventLog.dll
              • Size 172KB
              • SHA256 9177c5434d2872741cf7a80e000c52166fed8930d07ab154c6a4d476d01a9aaa
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.DirectoryServices.AccountManagement.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\System.DirectoryServices.AccountManagement.dll
              • Size 297KB
              • SHA256 721a82b65516782f57f7fbf4c9940c016f8c1a209d5fed553b5044c45485b8fd
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.DirectoryServices.Protocols.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\System.DirectoryServices.Protocols.dll
              • Size 178KB
              • SHA256 fc0f22cc109a429b68d3d83fa48067166452942c25a7acb9870bd78a801cd8e8
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.ServiceProcess.ServiceController.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\System.ServiceProcess.ServiceController.dll
              • Size 90KB
              • SHA256 3961824bc760e2e5433c8bec08f85bb4c391ef545a1bed524bcc8cd4217852bc
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              TelemetryControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\TelemetryControllerImpl.dll
              • Size 7.3MB
              • SHA256 d783c0ae649b6d267c330c3c9d613d4c5ab09bf1f594598484da1760f0b16e4b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              VPNControllerImpl.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\VPNControllerImpl.dll
              • Size 3.5MB
              • SHA256 9b2b33a5c58a3e95423f5f3cf4d0c53b27ae4a399c72de90aaebb6b6e000b17a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ddshelper.bin
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\ddshelper.bin
              • Size 1KB
              • SHA256 99198c557b03b24dbf40724c62c12c8c039447afedfd109e20061288963d9454
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              ddshelper.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\ddshelper.exe
              • Size 253KB
              • SHA256 d2257e7643128166f46a88da45ab9c38b7c23d0d727551dbd9f780a43f4abd11
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              e_sqlcipher.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\e_sqlcipher.dll
              • Size 1.8MB
              • SHA256 9b17ebe20a49308652607f422772894f70091bc6178d4f51dedd46344a6fcfef
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              e_sqlite3.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\e_sqlite3.dll
              • Size 1.8MB
              • SHA256 94580f3c8ce445ff700dbec025c29486931c9daa02c0500068c2dcc33883fb60
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mb5uns.deps.json
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\mb5uns.deps.json
              • Size 2KB
              • SHA256 dbbc5441a58be6084057667a83cafc0af9b3377061a9bda4cfd4fca3b651fc01
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              mb5uns.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\mb5uns.dll
              • Size 1.2MB
              • SHA256 6caec27acc9a2b2d5f65a541e56441859fdbd57f4a8dab5382815a626c84994f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mb5uns.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\mb5uns.exe
              • Size 326KB
              • SHA256 f19c8cc084099c92a2c3412047eff41d0657ce88104b0394a03921717e31a505
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mb5uns.runtimeconfig.json
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\mb5uns.runtimeconfig.json
              • Size 567B
              • SHA256 2c24c7ea26dbcf2d50661e42f364e5114c056e9cfbf5e2b82c59cb5b3c6598cb
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              mbae-api-na.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\mbae-api-na.dll
              • Size 723KB
              • SHA256 6aee09c65a2f22658a8a74459df2b9df5c81c5ec7d853e496794ef6f52ed8924
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbae.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\mbae.dll
              • Size 1.4MB
              • SHA256 523a8858117a691eb787348186d038b31cc0e59a9c2defdea11eb0a8fc7f6eec
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbae.sys
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\mbae.sys
              • Size 155KB
              • SHA256 c990dd89b65d35d6c9b34e21c78d96e206ec3bcdd934716ee61ff79da0fa5251
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbae64.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\mbae64.dll
              • Size 1.7MB
              • SHA256 bd25a747e6aaf00678eb705cafa894897241695ddc176b0993904d280a882054
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbampt.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\mbampt.exe
              • Size 33KB
              • SHA256 d232d82e410de12702a67c58acf927304ee42f3e6d81a9d71eca99f9052126db
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbamsisdk.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\mbamsisdk.dll
              • Size 12.7MB
              • SHA256 0778cc030a9e8b7cd66950bf492554842ffb64d8e01b145c2dd9551c9239a78a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbcut.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\mbcut.dll
              • Size 4.2MB
              • SHA256 cc9b2f7379351f5cb246fcab1823962716c3b90dce252292f3c7fabf718a0c23
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbshlext.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\mbshlext.dll
              • Size 3.1MB
              • SHA256 8af36217efcc1b2a677accc77839ed3b67ddbfcabfa16caaa42c7e95796b940a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              offreg.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\offreg.dll
              • Size 140KB
              • SHA256 8e6c155a97666c8e6a3f9ea95bfc6f6e4f87beac53dd72164aba3ef33ff88db1
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              rtp.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\rtp.dll
              • Size 4.7MB
              • SHA256 a5b2dd0672accd7d17e091a07630246b7c865bf1c258172806b5643cdab386b4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              sentrynativesdk.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\sentrynativesdk.dll
              • Size 596KB
              • SHA256 6e6096dabfe6b34c3e6ccba49cef544b7be6158e34168f819f8cac1b3645d4d0
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              version.dat
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\version.dat
              • Size 10B
              • SHA256 c78527d9f17d2749fd433e4ce8f9ec8482f353dea3cf11b458eaf98d8449293f
              • MD5 SHA1 SHA512
              Submit Download

              wireguard.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\ctlrpkg\wireguard.dll
              • Size 1.3MB
              • SHA256 d2ad6ce25634776f5067fd9d5750a5e3d2add1adde98eb1f56a2df194d0e9cbb
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ActionsV5.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dbclspkg\ActionsV5.dll
              • Size 6.1MB
              • SHA256 f2dc3b02c39cc92b945ebffc0be675251e93de87158eaf47bfeb5c3231488173
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              BrowserSDKDLLV5.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dbclspkg\BrowserSDKDLLV5.dll
              • Size 7.0MB
              • SHA256 c72e39709b26ac7577200a76515347ff11c0a9424cf61657762d657e7aecd974
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Global.nm
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dbclspkg\Global.nm
              • Size 349KB
              • SHA256 43d643953f5a497454e1b1f279e7c4a78b722fc1adc0ef3497c7174dad5ac325
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Global.sr
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dbclspkg\Global.sr
              • Size 17.6MB
              • SHA256 759b946b213188fee0b470c545f9055df0671bd5a6d40bf687e022fccf49ce30
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBAMCoreV5.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dbclspkg\MBAMCoreV5.dll
              • Size 8.7MB
              • SHA256 b226e4e93acba45a3e6c0ee06d6fa1c62fac91ae37c86595ab395088ab9edbc4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MBAMCore_b.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dbclspkg\MBAMCore_b.dll
              • Size 8.7MB
              • SHA256 c6d9cb10c3003a1e660e03b4f71c6a89601635f036590ca2f2e5bc23704d4478
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              cfg.bin
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dbclspkg\cfg.bin
              • Size 2KB
              • SHA256 06cee2bf32530582fe8a7f84afd9be786f4986f3b35ad5c3989e61b7fab1e3f2
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              dynconfig.dat
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dbclspkg\dynconfig.dat
              • Size 39KB
              • SHA256 008254ca1f4d6415da89d01a4292911de6135b42833156720a841a22685765dc
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              exclusions.txt
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dbclspkg\exclusions.txt
              • Size 23KB
              • SHA256 9e87e4c9da3337c63b7f0e6ed0eb71696121c74e18a5da577215e18097715e2f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              igV5.exe
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dbclspkg\igV5.exe
              • Size 1.8MB
              • SHA256 f0a1eb806f31c9aaacb91b61816ebbd5e13d93e5653b1bfe2dff71159582bb30
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              prot.mbdb
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dbclspkg\prot.mbdb
              • Size 24B
              • SHA256 6089fbf0c0c1413f62e91dc9497bedc6d8a271e9dc761e20adc0dccf6f4a0c1f
              • MD5 SHA1 SHA512
              Submit Download

              rdefs.mbdb
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dbclspkg\rdefs.mbdb
              • Size 24B
              • SHA256 850a4ea37a0fd6f68bf95422d502b2d1257264eb90cc38c0a3b1b95aa375be55
              • MD5 SHA1 SHA512
              Submit Download

              rules.mbdb
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dbclspkg\rules.mbdb
              • Size 6.2MB
              • SHA256 da004e0fef6840441ad4082c0b109945cf7e882326df5f05102407a12984bf0d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              sampleV5.dll
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dbclspkg\sampleV5.dll
              • Size 524KB
              • SHA256 0f689946ac46566be81be8cee3f6bc29c50b73a52ba2d0c7fabb25baf952146d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              scan.mbdb
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dbclspkg\scan.mbdb
              • Size 407KB
              • SHA256 85c63d6e516ecd1c12b8b02ce86eaea00deaa306769058047b631b16da39056d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              tids.mbdb
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dbclspkg\tids.mbdb
              • Size 131KB
              • SHA256 c8a207d12610671950e2a0b3bcd09900679ea4dd6d506d66b58c14ec87265a74
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              version.dat
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dbclspkg\version.dat
              • Size 48B
              • SHA256 32f0df538a30fefdce8a4d05f8d9d19bea76d7936e735853e0de657d6cbaa3e0
              • MD5 SHA1 SHA512
              Submit Download

              wprot2.mbdb
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dbclspkg\wprot2.mbdb
              • Size 18.0MB
              • SHA256 805a9d5c9e0dbb9cf50bdeb75f0ea881563f6eed0a6692aca6d11e3cb63bb2c2
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              .version
              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_4a037ad18ef611f1857f4a126a0dfdd7\dotnetpkgtmp\shared\Microsoft.NETCore.App\10.0.8\.version
              • Size 50B
              • SHA256 42559a4970a981aa61f3ed59ad44d05214fcc5eb97c35d06a88102a0b747a45f
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              clean.mbdb
              • Path C:\ProgramData\Malwarebytes\MBAMService\clean.mbdb
              • Size 20KB
              • SHA256 eaa097fefc30a80f2109c4c5b352dc102701067b303030f312c9762f06afa5c0
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              AeConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
              • Size 47KB
              • SHA256 2cc43e3bf98b6514bec243524fd22fba882769b103ec66ca94e226a6cc61c19a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              AeConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
              • Size 66KB
              • SHA256 b9b6dc57a18b515491623fdb7c7c1bae0c33bf681e0c4cd8f0cbdf077d22db71
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              AeConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
              • Size 66KB
              • SHA256 c774b403586baf24d33629538c800f834f6ee7809668d2115a03a622ec0314c8
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ArwControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json
              • Size 1KB
              • SHA256 9d80105ba8b8a553c756939b4d81620eba80d10580be21ae21e2c1393c1e10f8
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              CleanControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json
              • Size 949B
              • SHA256 8439305f12e7571b5f7c7c529ad13943f50c4f7611b5686ee52d72169f9a5769
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              CleanControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json
              • Size 948B
              • SHA256 fa346224518fb6ca5d312f07c3f6d95eceafa97dd31578734d8a430533b9af00
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              CloudConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json
              • Size 1KB
              • SHA256 ec501dc92c356590f0d220d6f0199ece42449c6c8db890d08e8f8b9ef06e3474
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              LicenseConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
              • Size 12KB
              • SHA256 106494da5b6492bb371d7eabbbbaef005ec20f48424d900103078fb87dfcb759
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              LicenseConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
              • Size 12KB
              • SHA256 2a9274308b436596b57031a8c86b1cae378141ab01f65214b0f60fcef25d5094
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              LicenseConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
              • Size 12KB
              • SHA256 fbe136fff1706d0bf4729fd8a844037a86e9944b1eb5c5e221f887690adf89bb
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              LicenseConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
              • Size 12KB
              • SHA256 5b0603a7215ceeb963f7b1b27dfbd26241807ecd08f6c77c2e3e8ec3a4cf94d7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              MwacControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json
              • Size 2KB
              • SHA256 a9dccdb848f7251bc75be4eb0d7855ab554b7118f7c673eebc03ecb0f3b36c8e
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              MwacControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json
              • Size 2KB
              • SHA256 beef9b44efaa7b6bd803b6d1e7a8d85ffe1527e8606a6238898dd1cc92b078fd
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              PoliciesConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json
              • Size 814B
              • SHA256 717c8dea9b811dbe5eccdb89f8a426f2fcc475adb71fea50266e7cf2aca54f96
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              PoliciesConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json
              • Size 814B
              • SHA256 e97b64d13ea1439c2a08d57a6d31579aa7328308c46960c2700cc1bb6f76a892
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              PoliciesConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json
              • Size 816B
              • SHA256 1e5082d49c1928b5d29af84bb006b3c91bf9e52c2f8a0f1da0de534241da4efb
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              RtpConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
              • Size 2KB
              • SHA256 364bcb418206ce48c9092349a2d48960feae2a04b23733b53c3bc901a2cc1817
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              RtpConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
              • Size 2KB
              • SHA256 3513ceb74160e30705c85c27d1449018cfca5d075e34fdebdbfa394ca469e4da
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              ScanConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
              • Size 2KB
              • SHA256 5ef63d0bfe76b0183d16c8dd406f161e8632012e46b6f8c0313ee37526a4f64c
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              ScanConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
              • Size 5KB
              • SHA256 845c3a004e535930d309f71deaab6663a879789c16661a2fbdb84edfa2398052
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SpConfigFile.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json
              • Size 12KB
              • SHA256 aa5e594eb1f8da70cc726809a00daedc2a2cf6f9bbea0e889e2fd5d8aaae4666
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              TelemCtrlConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
              • Size 1KB
              • SHA256 7c990a95915ef65530e40945b21b577e0aca5f1947a85f94927383508d3e1464
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              TelemCtrlConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
              • Size 1KB
              • SHA256 94098f3c92015ee891fabc2684d48f3e6b4cd0d1aeba3a97c1285022662da357
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              TelemCtrlConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
              • Size 1KB
              • SHA256 6cbaa2d8ebf9e7b471d15ac3cffc7b584105cfb991a3e278c4d3e7a30c187dd3
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              UpdateControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
              • Size 1KB
              • SHA256 f2ea4ade01eaf82339b23ec9ab687c01a8156b071abf486331cb04ea745ae880
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              UpdateControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
              • Size 1KB
              • SHA256 c1e25cf870ba9e23137701b9be8b4ae78bd5549cd11b60ab5d6724f5bea06202
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              UpdateControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
              • Size 1KB
              • SHA256 046f8ac95d634e19be979672848cd4428250fa3012b0ce4bc2e1474b6473a445
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              UpdateControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
              • Size 1KB
              • SHA256 c044dc1e9cb5ebceb7a671c40923af12fbaa52939b6b03aff7841144fb177c0a
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              UpdateControllerConfig.json.bak
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak
              • Size 1KB
              • SHA256 5432ae56d0147c5fbddce07ffd2be1e61337893c0063a98fb19ed1f3e7426941
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              VPNControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json
              • Size 1KB
              • SHA256 e5aab5eaa557771e2668798366d9831722948cbb78d70edf80aa18b4ebfd44b0
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              VPNControllerConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json
              • Size 1KB
              • SHA256 7e92b68808fd184ea2bf914ef6fbca240c9521c779f0402adf0d037bbb29cb92
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              VPNServerListConfig.json
              • Path C:\ProgramData\Malwarebytes\MBAMService\config\VPNServerListConfig.json
              • Size 125B
              • SHA256 a9d2166361370dc6545382b3ec200b169790af75a6dcbaea6b21e01a0c2c6d80
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              dbmanifest2.dat
              • Path C:\ProgramData\Malwarebytes\MBAMService\dbmanifest2.dat
              • Size 924B
              • SHA256 66bdc37c48da9c7290031445782ee3dd0e94d9084ad2e7c3bd57058c74b438f7
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              mbdigsig2.dat
              • Path C:\ProgramData\Malwarebytes\MBAMService\mbdigsig2.dat
              • Size 514B
              • SHA256 9766597500c96c30ed8be246ac4d356ee726b88c4dcd2cfbc234fa3c46dc3eba
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              pkgvers.dat
              • Path C:\ProgramData\Malwarebytes\MBAMService\pkgvers.dat
              • Size 78B
              • SHA256 d8168f188c6113a86d94f49b082ee9843e99e7c710b7c2b4490f7223d9fed78c
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              mbrescue.exe
              • Path C:\ProgramData\Malwarebytes\MBAMService\rmode\mbrescue.exe
              • Size 7.7MB
              • SHA256 477919ecb586d6ef4a06793417c2ae3126c51a51cf9445d901e90e3627e7143b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              perfhost.exe
              • Path C:\Windows\SysWOW64\perfhost.exe
              • Size 1.2MB
              • SHA256 88f35a534edc501e98200f5461051cf5abf13f2d1855b1db46e427b2b8121f51
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              AgentService.exe
              • Path C:\Windows\System32\AgentService.exe
              • Size 1.7MB
              • SHA256 9a546701d837e1cc52129b0f9632ccea4bda6c7b8f3079edb3a16b706807e5cb
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              dberr.txt
              • Path C:\Windows\System32\CatRoot2\dberr.txt
              • Size 37KB
              • SHA256 5917200e2222d342bbef78db8e54a678da4e8ce58f11127b660260a520ebe08b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              DiagnosticsHub.StandardCollector.Service.exe
              • Path C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
              • Size 1.3MB
              • SHA256 9dcbeeb297ff1eb4ccb9941090f74705f650609d7b3e81190935599aa982e3d1
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbtun.sys
              • Path C:\Windows\System32\DriverStore\Temp\{fb857b5c-82ac-fd4b-9e60-0c3a43497c8f}\mbtun.sys
              • Size 107KB
              • SHA256 6903e60784b9fa5d8b417f93f19665c59946a4de099bd1011ab36271b267261c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              FXSSVC.exe
              • Path C:\Windows\System32\FXSSVC.exe
              • Size 1.2MB
              • SHA256 b26b8f9cacf47257b02b8a2b55a941d28d6254ca71f55950a673e5135df4e199
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Locator.exe
              • Path C:\Windows\System32\Locator.exe
              • Size 1.2MB
              • SHA256 d05060cdd9f2c95525b717b84345eb6f7820ebd0ea64ae86480d67d77c597ae2
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ssh-agent.exe
              • Path C:\Windows\System32\OpenSSH\ssh-agent.exe
              • Size 1.6MB
              • SHA256 007c416719c41b66f4181c205c3b9dbd3e0f81fc126ffcacdf1ffc4cba97c971
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              PerceptionSimulationService.exe
              • Path C:\Windows\System32\PerceptionSimulation\PerceptionSimulationService.exe
              • Size 1.3MB
              • SHA256 b07e7bdbd441e0a4f6a13e4109d1b6d13ff16e852de58ce6da4e95bb284bdad1
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SearchIndexer.exe
              • Path C:\Windows\System32\SearchIndexer.exe
              • Size 1.4MB
              • SHA256 976499feb8a26f4237ba2dd088165662fe1d4bfca056be390571c72f26311651
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SensorDataService.exe
              • Path C:\Windows\System32\SensorDataService.exe
              • Size 1.8MB
              • SHA256 8c6dae91e7cf484e93ae95e7e6f2b4b8a6ae1347e19465b8e34853b29b27cbf7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Spectrum.exe
              • Path C:\Windows\System32\Spectrum.exe
              • Size 1.4MB
              • SHA256 8755908215b21c0e7d2cd6162b520ab2c03a71ad9d54247ecac9452f8875ca0b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              TieringEngineService.exe
              • Path C:\Windows\System32\TieringEngineService.exe
              • Size 1.5MB
              • SHA256 b6a60c040f9c29ded4b968a5f951b93c62ba9259b9d78055c2f47001f8103591
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              VSSVC.exe
              • Path C:\Windows\System32\VSSVC.exe
              • Size 2.0MB
              • SHA256 fe70ca2880c41ebae766b4ff94fe256e100bae2249bc2f301d1074c5fc332e63
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              alg.exe
              • Path C:\Windows\System32\alg.exe
              • Size 1.3MB
              • SHA256 dd21626de9041d4204478e642158b99a8abb56884801066a597eb03f54d111c6
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mbamswissarmy.sys
              • Path C:\Windows\System32\drivers\mbamswissarmy.sys
              • Size 240KB
              • SHA256 6d2c9a01f953d206abbbd8c2ba5a00b78ad8f6bcddba6db810f2d6f562ddbd8a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              msdtc.exe
              • Path C:\Windows\System32\msdtc.exe
              • Size 1.4MB
              • SHA256 c1c6a4605c519a42e69be03e2da323b08875bcad7a93b1cec942340703e09dcf
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              snmptrap.exe
              • Path C:\Windows\System32\snmptrap.exe
              • Size 1.2MB
              • SHA256 a1913304f9a356a81f0952d099000172dad8e475f2a039fa2d889ed480259363
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              vds.exe
              • Path C:\Windows\System32\vds.exe
              • Size 1.3MB
              • SHA256 38e0e5cd735f7cb9334f4da35bc406819bed3850138971e29377457d0428dd0d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              WmiApSrv.exe
              • Path C:\Windows\System32\wbem\WmiApSrv.exe
              • Size 1.4MB
              • SHA256 12f4c69b6bb93f061fff0563a74dba037345cc4eff6ca7c3f51846dd408e590a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              wbengine.exe
              • Path C:\Windows\System32\wbengine.exe
              • Size 2.1MB
              • SHA256 c27bb3628f0b2d58d449115a156799e9014f24a5a017380c0698d2228e826b23
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              memory/312-32-0x0000000140000000-0x0000000140135000-memory.dmp
              Download

              memory/688-122-0x0000000140000000-0x00000001401ED000-memory.dmp
              Download

              memory/688-315-0x0000000140000000-0x00000001401ED000-memory.dmp
              Download

              memory/836-54-0x0000000140000000-0x00000001402D4000-memory.dmp
              Download

              memory/836-146-0x0000000140000000-0x00000001402D4000-memory.dmp
              Download

              memory/836-52-0x0000000000890000-0x00000000008F0000-memory.dmp
              Download

              memory/836-46-0x0000000000890000-0x00000000008F0000-memory.dmp
              Download

              memory/868-112-0x0000000000400000-0x00000000005EE000-memory.dmp
              Download

              memory/868-107-0x00000000007D0000-0x0000000000836000-memory.dmp
              Download

              memory/868-165-0x0000000000400000-0x00000000005EE000-memory.dmp
              Download

              memory/868-102-0x00000000007D0000-0x0000000000836000-memory.dmp
              Download

              memory/1028-150-0x0000000140000000-0x0000000140239000-memory.dmp
              Download

              memory/1028-365-0x0000000140000000-0x0000000140239000-memory.dmp
              Download

              memory/1208-118-0x0000000140000000-0x00000001401D7000-memory.dmp
              Download

              memory/1208-382-0x0000000140000000-0x00000001401D7000-memory.dmp
              Download

              memory/1208-173-0x0000000140000000-0x00000001401D7000-memory.dmp
              Download

              memory/1648-242-0x0000000001A20000-0x0000000001A30000-memory.dmp
              Download

              memory/1648-363-0x000000000CD20000-0x000000000CD28000-memory.dmp
              Download

              memory/1648-226-0x0000000001770000-0x0000000001780000-memory.dmp
              Download

              memory/1648-296-0x0000000009E60000-0x0000000009E68000-memory.dmp
              Download

              memory/1648-174-0x0000000140000000-0x0000000140179000-memory.dmp
              Download

              memory/1648-501-0x0000000140000000-0x0000000140179000-memory.dmp
              Download

              memory/1680-3735-0x0000000000400000-0x0000000000745000-memory.dmp
              Download

              memory/1680-7-0x0000000000400000-0x0000000000745000-memory.dmp
              Download

              memory/1680-0-0x00000000009E0000-0x0000000000A46000-memory.dmp
              Download

              memory/1680-8-0x00000000009E0000-0x0000000000A46000-memory.dmp
              Download

              memory/1680-71-0x0000000000400000-0x0000000000745000-memory.dmp
              Download

              memory/1812-57-0x0000000001A80000-0x0000000001AE0000-memory.dmp
              Download

              memory/1812-72-0x0000000140000000-0x000000014022C000-memory.dmp
              Download

              memory/1812-67-0x0000000140000000-0x000000014022C000-memory.dmp
              Download

              memory/1812-68-0x0000000001A80000-0x0000000001AE0000-memory.dmp
              Download

              memory/1812-63-0x0000000001A80000-0x0000000001AE0000-memory.dmp
              Download

              memory/1848-74-0x0000000140000000-0x0000000140210000-memory.dmp
              Download

              memory/2312-400-0x0000000140000000-0x00000001401FC000-memory.dmp
              Download

              memory/2312-161-0x0000000140000000-0x00000001401FC000-memory.dmp
              Download

              memory/2444-166-0x0000000140000000-0x0000000140216000-memory.dmp
              Download

              memory/2444-465-0x0000000140000000-0x0000000140216000-memory.dmp
              Download

              memory/2456-498-0x0000000140000000-0x000000014021D000-memory.dmp
              Download

              memory/2456-170-0x0000000140000000-0x000000014021D000-memory.dmp
              Download

              memory/2716-115-0x0000000140000000-0x00000001401EC000-memory.dmp
              Download

              memory/2716-169-0x0000000140000000-0x00000001401EC000-memory.dmp
              Download

              memory/3320-158-0x0000000140000000-0x0000000140147000-memory.dmp
              Download

              memory/3320-383-0x0000000140000000-0x0000000140147000-memory.dmp
              Download

              memory/3764-399-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-371-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-366-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-374-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-372-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-388-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-387-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-401-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-389-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-394-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-367-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-385-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-402-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-378-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-398-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-375-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-384-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-397-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-368-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-379-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-380-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-381-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-396-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-369-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-395-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-403-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-404-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-370-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-405-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-393-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-392-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-406-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-377-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-391-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-407-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-376-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-390-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-386-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-408-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-373-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3764-409-0x00000224ABFA0000-0x00000224ABFB0000-memory.dmp
              Download

              memory/3772-110-0x0000000140000000-0x0000000140201000-memory.dmp
              Download

              memory/3772-12-0x0000000140000000-0x0000000140201000-memory.dmp
              Download

              memory/3792-154-0x0000000140000000-0x00000001401C0000-memory.dmp
              Download

              memory/3792-152-0x0000000140000000-0x00000001401C0000-memory.dmp
              Download

              memory/3908-133-0x0000000140000000-0x0000000140169000-memory.dmp
              Download

              memory/3908-334-0x0000000140000000-0x0000000140169000-memory.dmp
              Download

              memory/3908-124-0x00000000005E0000-0x0000000000640000-memory.dmp
              Download

              memory/3908-130-0x00000000005E0000-0x0000000000640000-memory.dmp
              Download

              memory/4000-132-0x0000000140000000-0x00000001402E9000-memory.dmp
              Download

              memory/4000-42-0x0000000000CD0000-0x0000000000D30000-memory.dmp
              Download

              memory/4000-35-0x0000000000CD0000-0x0000000000D30000-memory.dmp
              Download

              memory/4000-41-0x0000000140000000-0x00000001402E9000-memory.dmp
              Download

              memory/4036-94-0x0000000000B40000-0x0000000000BA0000-memory.dmp
              Download

              memory/4036-160-0x0000000140000000-0x0000000140202000-memory.dmp
              Download

              memory/4036-88-0x0000000000B40000-0x0000000000BA0000-memory.dmp
              Download

              memory/4036-97-0x0000000140000000-0x0000000140202000-memory.dmp
              Download

              memory/4312-19-0x00000000004C0000-0x0000000000520000-memory.dmp
              Download

              memory/4312-27-0x0000000140000000-0x0000000140200000-memory.dmp
              Download

              memory/4312-28-0x00000000004C0000-0x0000000000520000-memory.dmp
              Download

              memory/4312-111-0x0000000140000000-0x0000000140200000-memory.dmp
              Download

              memory/4856-157-0x0000000140000000-0x0000000140226000-memory.dmp
              Download

              memory/4856-77-0x00000000007A0000-0x0000000000800000-memory.dmp
              Download

              memory/4856-83-0x00000000007A0000-0x0000000000800000-memory.dmp
              Download

              memory/4856-86-0x0000000140000000-0x0000000140226000-memory.dmp
              Download

              memory/5112-147-0x0000000140000000-0x0000000140259000-memory.dmp
              Download

              memory/5112-137-0x0000000000440000-0x00000000004A0000-memory.dmp
              Download

              memory/5112-143-0x0000000000440000-0x00000000004A0000-memory.dmp
              Download

              memory/5112-361-0x0000000140000000-0x0000000140259000-memory.dmp
              Download

              memory/6776-3750-0x0000000140000000-0x00000001404A0000-memory.dmp
              Download

              memory/6776-3756-0x0000000140000000-0x00000001404A0000-memory.dmp
              Download