Analysis

  • max time kernel
    123s
  • max time network
    153s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    06/10/2026, 16:10

General

  • Target
    2026-10-05_bb64a0caddf1be79707b5bb950a6034e_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
  • Size 3.3MB
  • Sample261006-tmlnma1yev
  • SHA256 e2760255374e4de30916a4e133b90e83d383f93137bec86f9130ddca8edb1f07
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Suspicious use of NtCreateUserProcessOtherParentProcess 1 TTPs 1 IoCs
  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers 1 IoCs
  • Detects binaries and memory artifacts referencing sandbox DLLs typically observed in sandbox evasion 2 IoCs
  • Detects executables built or packed with MPress PE compressor 2 IoCs
  • Detects executables packed with ConfuserEx Mod 1 IoCs
  • Detects executables packed with Goliath 1 IoCs
  • Detects executables packed with Themida 1 IoCs
  • Downloads MZ/PE file 1 IoCs
  • Drops file in Drivers directory 9 IoCs
  • Modifies RDP port number used by Windows 1 TTPs
  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • Sets service image path in registry 3 TTPs 4 IoCs

    This determines the executable launched when a service starts. It can be used to establish persistence.

  • Checks BIOS information in registry 2 TTPs 6 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 24 IoCs
  • Impair Defenses: Safe Mode Boot 1 TTPs 2 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 64 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • ConfuserEx .NET packer 1 IoCs

    Detects ConfuserEx .NET packer.

  • Drops file in System32 directory 64 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 7 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 2 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

  • Modifies trusted root certificate store through registry 1 TTPs 14 IoCs

    A root certificate was added, modified, or removed in the trusted certificate store registry paths.

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 12 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 52 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 5 IoCs
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 13 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: LoadsDriver 13 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Windows\explorer.exe
    explorer.exe /LOADSAVEDWINDOWS
    1⤵
      PID:2700
      • C:\Users\Admin\AppData\Local\Temp\2026-10-05_bb64a0caddf1be79707b5bb950a6034e_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
        "C:\Users\Admin\AppData\Local\Temp\2026-10-05_bb64a0caddf1be79707b5bb950a6034e_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe"
        2⤵
        • Suspicious use of NtCreateUserProcessOtherParentProcess
        • Downloads MZ/PE file
        • Drops file in Drivers directory
        • Checks BIOS information in registry
        • Enumerates connected drives
        • Drops file in System32 directory
        • Drops file in Program Files directory
        • Drops file in Windows directory
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:4156
      • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe"
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of WriteProcessMemory
        PID:3392
        • C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
          "C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe"
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Reads the TCP/IP host and domain name from the registry
          PID:1884
    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
      1⤵
      • Executes dropped EXE
      • Drops file in System32 directory
      • Drops file in Program Files directory
      • Drops file in Windows directory
      • Reads the TCP/IP host and domain name from the registry
      PID:5776
    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
      1⤵
      • Executes dropped EXE
      PID:1876
    • C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
      "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
      1⤵
      • Executes dropped EXE
      PID:4372
    • \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
      "c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
      1⤵
      • Executes dropped EXE
      PID:2936
    • C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe
      C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe
      1⤵
      • Executes dropped EXE
      PID:5284
    • C:\Windows\SysWow64\perfhost.exe
      C:\Windows\SysWow64\perfhost.exe
      1⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:2768
    • C:\Windows\System32\ReFsDedupSvc.exe
      C:\Windows\System32\ReFsDedupSvc.exe
      1⤵
      • Executes dropped EXE
      • Checks processor information in registry
      • Suspicious use of AdjustPrivilegeToken
      PID:5260
    • C:\Windows\System32\SensorDataService.exe
      C:\Windows\System32\SensorDataService.exe
      1⤵
      • Executes dropped EXE
      • Drops file in System32 directory
      • Checks SCSI registry key(s)
      PID:3416
    • C:\Windows\System32\OpenSSH\ssh-agent.exe
      C:\Windows\System32\OpenSSH\ssh-agent.exe
      1⤵
      • Executes dropped EXE
      PID:2996
    • C:\Windows\system32\AgentService.exe
      C:\Windows\system32\AgentService.exe
      1⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      PID:1560
    • C:\Windows\system32\SearchIndexer.exe
      C:\Windows\system32\SearchIndexer.exe /Embedding
      1⤵
      • Executes dropped EXE
      • Enumerates connected drives
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:5404
      • C:\Windows\System32\SearchProtocolHost.exe
        "C:\Windows\System32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
        2⤵
        • Modifies data under HKEY_USERS
        PID:4956
      • C:\Windows\System32\SearchProtocolHost.exe
        "C:\Windows\System32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-4154726816-2055034831-2297277433-10002_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-4154726816-2055034831-2297277433-10002 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
        2⤵
          PID:2396
        • C:\Windows\System32\SearchFilterHost.exe
          "C:\Windows\System32\SearchFilterHost.exe" 952 3060 3064 928 {7FC3863B-7471-4B10-84E3-A5C2E0330618}
          2⤵
          • Modifies data under HKEY_USERS
          PID:3488
        • C:\Windows\System32\SearchFilterHost.exe
          "C:\Windows\System32\SearchFilterHost.exe" 952 3024 3056 928 {06DC0F6A-A3E7-4365-A8E8-F674FE2E6361}
          2⤵
          • Modifies data under HKEY_USERS
          PID:936
      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe"
        1⤵
        • Drops file in Drivers directory
        • Executes dropped EXE
        • Impair Defenses: Safe Mode Boot
        • Loads dropped DLL
        • Enumerates connected drives
        • Drops file in Program Files directory
        • Modifies trusted root certificate store through registry
        • Reads the TCP/IP host and domain name from the registry
        • Modifies Internet Explorer settings
        • Modifies data under HKEY_USERS
        • Modifies system certificate store
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:4760
        • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
          "C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe" /installmbtun
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Drops file in System32 directory
          • Drops file in Windows directory
          PID:4536
        • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
          "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" /Service /Protected
          2⤵
          • Drops file in Drivers directory
          • Executes dropped EXE
          • Drops file in System32 directory
          • Drops file in Windows directory
          • Modifies registry class
          PID:1968
      • C:\Windows\system32\DrvInst.exe
        DrvInst.exe "4" "9" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf" "9" "4ba9030c7" "000000000000016C" "Service-0x0-3e7$\Default" "000000000000017C" "208" "C:\Program Files\Malwarebytes\Anti-Malware\mbtun"
        1⤵
        • Drops file in System32 directory
        • Drops file in Windows directory
        • Checks SCSI registry key(s)
        • Modifies data under HKEY_USERS
        PID:4412
      • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe"
        1⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Event Triggered Execution: Netsh Helper DLL
        PID:4440
      • C:\Windows\system32\DRIVERS\MbamElam.sys
        C:\Windows\system32\DRIVERS\MbamElam.sys
        1⤵
        • Executes dropped EXE
        PID:1812
      • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
        "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe"
        1⤵
        • Drops file in Drivers directory
        • Sets service image path in registry
        • Checks BIOS information in registry
        • Executes dropped EXE
        • Loads dropped DLL
        • Enumerates connected drives
        • Drops file in System32 directory
        • Modifies trusted root certificate store through registry
        • Reads the TCP/IP host and domain name from the registry
        • Checks processor information in registry
        • Modifies Internet Explorer settings
        • Modifies data under HKEY_USERS
        • Modifies system certificate store
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:4468
        • C:\ProgramData\Malwarebytes\MBAMService\rmode\mbrescue.exe
          "C:\ProgramData\Malwarebytes\MBAMService\rmode\mbrescue.exe" /rescuemode "C:\Program Files\Malwarebytes\Anti-Malware" "C:\ProgramData\Malwarebytes\MBAMService"
          2⤵
          • Checks BIOS information in registry
          • Executes dropped EXE
          • Reads the TCP/IP host and domain name from the registry
          PID:5100
      • C:\Windows\System32\svchost.exe
        C:\Windows\System32\svchost.exe -k AppReadiness -p -s AppReadiness
        1⤵
          PID:5660
        • C:\Windows\system32\DRIVERS\mbamswissarmy.sys
          C:\Windows\system32\DRIVERS\mbamswissarmy.sys
          1⤵
          • Executes dropped EXE
          PID:3052
        • C:\Windows\system32\DRIVERS\MbamChameleon.sys
          C:\Windows\system32\DRIVERS\MbamChameleon.sys
          1⤵
          • Executes dropped EXE
          PID:4232
        • C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
          "C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe"
          1⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Event Triggered Execution: Netsh Helper DLL
          PID:1356
        • C:\Windows\system32\DRIVERS\mbam.sys
          C:\Windows\system32\DRIVERS\mbam.sys
          1⤵
          • Executes dropped EXE
          PID:5076

        Network

              MITRE ATT&CK Enterprise v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              mbtun.cat

              • Path C:\PROGRA~1\MALWAR~1\ANTI-M~1\mbtun\mbtun.cat
              • Size 10KB
              • SHA256 9ceb410494b95397ec1f8fa505d071672bf61f81cc596b8eccd167a77893c658
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mbtun.sys

              • Path C:\PROGRA~1\MALWAR~1\ANTI-M~1\mbtun\mbtun.sys
              • Size 107KB
              • SHA256 6903e60784b9fa5d8b417f93f19665c59946a4de099bd1011ab36271b267261c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              elevation_service.exe

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
              • Size 2.7MB
              • SHA256 5d1e1b47a63eb0499abba3967403f91a7cb9e3d85cb01f2707a6a1c65bc9d94b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              maintenanceservice.exe

              • Path C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
              • Size 1.5MB
              • SHA256 0056fb52d8aa7a1a7c50179692fe4bd39f011f1735de958074b91970c5fe531f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              OSE.EXE

              • Path C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE
              • Size 1.5MB
              • SHA256 2c07bb8c459d466951e3f9af682f46b437b4f9157afb2988211524d5b9f0654e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              elevation_service.exe

              • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
              • Size 2.8MB
              • SHA256 37ec281bb8d3e092788cdd9a58810735a32594aa3a945b36d280d4b0c4337dcd
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MBAMInstallerService.exe

              • Path C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe
              • Size 9.3MB
              • SHA256 09dddf618d0e0ef31552efe2276bb18944f796f8bd7332fd140b0c28f81e8cea
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MBVpnTunnelService.exe

              • Path C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe
              • Size 4.1MB
              • SHA256 a67f94a3014d93b9b91f0c8427c81cc18cb13239a114d91c51f993702e60a580
              • MD5 SHA1 SHA512 SSDEEP TLSH

              PoliciesControllerImpl.dll

              • Path C:\Program Files\Malwarebytes\Anti-Malware\PoliciesControllerImpl.dll
              • Size 6.1MB
              • SHA256 cd1e8f98551fb69d3d47837c09fea35be358dd7c27104afb7f1938a7fadbb2c5
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ServiceConfig.json

              • Path C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json
              • Size 621B
              • SHA256 61391736db1e0c4ea5327340141296b985418709ea97ef76a20c9da792182966
              • MD5 SHA1 SHA512 TLSH

              ServiceConfig.json

              • Path C:\Program Files\Malwarebytes\Anti-Malware\ServiceConfig.json
              • Size 784B
              • SHA256 3356042182153bd9038318279588c22da1ff09c342825c0f77ec86c352a36565
              • MD5 SHA1 SHA512 TLSH

              mbtun.dll

              • Path C:\Program Files\Malwarebytes\Anti-Malware\mbtun.dll
              • Size 2.8MB
              • SHA256 f21a980316bd4c57c70e00840ab76d9ad412092d7d2d6a2cff4f1311f7c05364
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mbtun.inf

              • Path C:\Program Files\Malwarebytes\Anti-Malware\mbtun\mbtun.inf
              • Size 1KB
              • SHA256 4a350fc20834a579c5a58352b7a3aa02a454abbbd9eecd3cd6d2a14864a49cd8
              • MD5 SHA1 SHA512 TLSH

              offreg.dll

              • Path C:\Program Files\Malwarebytes\Anti-Malware\offreg.dll
              • Size 140KB
              • SHA256 8e6c155a97666c8e6a3f9ea95bfc6f6e4f87beac53dd72164aba3ef33ff88db1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pkgvers.dat

              • Path C:\Program Files\Malwarebytes\Anti-Malware\pkgvers.dat
              • Size 78B
              • SHA256 d66a0aae0576552d0cef8b9466a2337aa0efbc2dc23dece0e9f764f81f95f5f3
              • MD5 SHA1 SHA512 TLSH

              farflt11.cat

              • Path C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt11.cat
              • Size 10KB
              • SHA256 352af60dc4b0133f608e051d909f783dc491eeb7b7ede0e9567b78f589d51ef5
              • MD5 SHA1 SHA512 SSDEEP TLSH

              farflt11.inf

              • Path C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt11.inf
              • Size 3KB
              • SHA256 142f7bef5d7c91cc29537e423e4c10fc409b085adc66b75552252bb5c7b38697
              • MD5 SHA1 SHA512 TLSH

              farflt11.sys

              • Path C:\Program Files\Malwarebytes\Anti-Malware\sdk\farflt11.sys
              • Size 212KB
              • SHA256 e5cc373a31f28f908c34cfb9afd5136989186437e5a5e594c4c5904365acc745
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mbamchameleon.cat

              • Path C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.cat
              • Size 11KB
              • SHA256 45bfd887f1969f364ecca95f32a46354bb463864a697d631a14082eb213aa04a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mbamchameleon.inf

              • Path C:\Program Files\Malwarebytes\Anti-Malware\sdk\mbamchameleon.inf
              • Size 3KB
              • SHA256 47b7c516bb57c612de19f0ca865590af95b6e32bf873a0fef9e011b2c5b483d4
              • MD5 SHA1 SHA512 TLSH

              mwac.inf

              • Path C:\Program Files\Malwarebytes\Anti-Malware\sdk\mwac.inf
              • Size 1KB
              • SHA256 2a64969c4a410028974fe7adbf456735eab205eda44bab5d3a347d2929f44fc4
              • MD5 SHA1 SHA512 TLSH

              MsSense.exe

              • Path C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe
              • Size 1.7MB
              • SHA256 26ce9c174fb54d9385c9282004d2fb1449790d24493b75caf9117d8197a656f7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              7z.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\7z.dll
              • Size 1.6MB
              • SHA256 37fa780bc230081691a105a3c1aed525ceec10ac1e64c1d1867137ce75e1b668
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AEControllerImpl.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\AEControllerImpl.dll
              • Size 4.9MB
              • SHA256 878239e138180492b8e703203db1eeda5da1a88b7897c16e7323bb506ef28dfe
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ActionsShim.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\ActionsShim.dll
              • Size 3.7MB
              • SHA256 6c5047cb77ea843e8386ba2b26a8458e6255e2ab94d493e914620623723c6b32
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ArwControllerImpl.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\ArwControllerImpl.dll
              • Size 5.6MB
              • SHA256 a1904889632fce5fece6dbecda5e237423d571652350f24c8724bdeb3a30228a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ArwLib.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\ArwLib.dll
              • Size 7.2MB
              • SHA256 1019ac61854dd7f45f1bd047ffb26f3602598148f1785b0eb77a825302fdfa2a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Assistant.deps.json

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Assistant.deps.json
              • Size 15KB
              • SHA256 383c4e0f3bffb2a4ae6819ccff2b8559da2c28683af8ce1f99d7f707655a3539
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Assistant.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Assistant.dll
              • Size 159KB
              • SHA256 33719b228ada42bd50c0e91119d3bf078faa612ab1585a5ae1c44650b864dacc
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Assistant.exe

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Assistant.exe
              • Size 301KB
              • SHA256 23f4cd1510b7dc2e3cc5cc846b6159c737e63a97f72352e8db6a34cf6182c71c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              BrowserSDKDLLShim.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\BrowserSDKDLLShim.dll
              • Size 3.7MB
              • SHA256 f6d24605eb688e039e4509d184d974bb14c4c38528edad129d0653eadfea80f9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              CleanControllerImpl.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\CleanControllerImpl.dll
              • Size 8.8MB
              • SHA256 0f8c7572972f1bfbdc523da81fd9b20a0f25a080eb563149529ebdbd0cb5a315
              • MD5 SHA1 SHA512 SSDEEP TLSH

              CloudControllerImpl.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\CloudControllerImpl.dll
              • Size 6.9MB
              • SHA256 f4924e03eeb91f5c6be468c96696d9b9605b177b1fda7ec8881fdd20ee856f81
              • MD5 SHA1 SHA512 SSDEEP TLSH

              DryIoc.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\DryIoc.dll
              • Size 597KB
              • SHA256 8d6b6dcb41784873db85dcc28b99639829a44eaed62e51fc1693c8ff1df356a1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Duende.IdentityModel.OidcClient.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Duende.IdentityModel.OidcClient.dll
              • Size 165KB
              • SHA256 eecde68a50fb9feb26917f809b1f3602fd9481ee03a8165d4177ad889eb0a265
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Duende.IdentityModel.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Duende.IdentityModel.dll
              • Size 250KB
              • SHA256 146ece96af20c6fcdfb9efc25b988124f9fb5cbdf5b10fa7ff3c644bc0d1f541
              • MD5 SHA1 SHA512 SSDEEP TLSH

              LicenseControllerImpl.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\LicenseControllerImpl.dll
              • Size 7.1MB
              • SHA256 34cdfc6dd326c373ca3297ca377d1416b2aa6493eb73deae0e35fc0935c5eddc
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MBAMCrashHandler.exe

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\MBAMCrashHandler.exe
              • Size 890KB
              • SHA256 164932ea0ead0fc1d660b075913244fe7ca7322c725cdb0903ae4cf217b19a64
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MBAMService.exe

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\MBAMService.exe
              • Size 11.1MB
              • SHA256 ed4f4ea1e7df9c13bc1068fea72efb50b483e40794100d07924d395d04cb6b6e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MBAMShim.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\MBAMShim.dll
              • Size 4.3MB
              • SHA256 dcc714dd199d9768faa0ca212e63efe63caa8aeb4cb11487fa389ff59f6cf98d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MBAMWsc.exe

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\MBAMWsc.exe
              • Size 4.2MB
              • SHA256 7878a9b10903b8c0def49015deefd48a3ea0e46c0f5ac9ae755336994e020152
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MBVpnTunnel_mbtun.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\MBVpnTunnel_mbtun.dll
              • Size 4.2MB
              • SHA256 0b764892f7f32d385684411e647f69f428067180aa28315d71668d3ab25b335e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MBVpnTunnel_wireguard.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\MBVpnTunnel_wireguard.dll
              • Size 2.9MB
              • SHA256 998086c9be8d1e7bb8ec63e907c834dd315849cb78de4da8cdb5702e03eb79ad
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MWACControllerImpl.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\MWACControllerImpl.dll
              • Size 7.8MB
              • SHA256 fdd969a68f96e9a4db90892bbe9f00e546e4f59272ae67fa782f529148728b54
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Malwarebytes.Interop.Activation.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Malwarebytes.Interop.Activation.dll
              • Size 36KB
              • SHA256 f5a9e3587fcf855046d8b08e86ed61105f2f330a1c9021461446c137ed3b9ac5
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Malwarebytes.Protection.Interop.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Malwarebytes.Protection.Interop.dll
              • Size 2.6MB
              • SHA256 201337eadd3efce2c0cd64503e048c94b14c052c76d6ff998cf45921ab5a64cc
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Malwarebytes.UI.Controls.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Malwarebytes.UI.Controls.dll
              • Size 32KB
              • SHA256 4c3d97304af4e091ee4ed390f2c75deb04de900ab404bc41e529a0c5bbbd04c9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Malwarebytes.UI.Style.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Malwarebytes.UI.Style.dll
              • Size 108KB
              • SHA256 ba1e626a9b6a3d7c967d00ae31b7a758edb0ac23d8332939f044710d8e6288a9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Malwarebytes.UI.Theme.Dark.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Malwarebytes.UI.Theme.Dark.dll
              • Size 55KB
              • SHA256 e0b84c137d3cef1dd43fc3572d359373b1614ab8aa0f5091f58120bfd3fc1c53
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Malwarebytes.UI.Theme.Light.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Malwarebytes.UI.Theme.Light.dll
              • Size 55KB
              • SHA256 d2d177294181c0bc81baef93502e603eb1fdcff51b074a1f068c38003f1c0502
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Malwarebytes.UI.Theme.Primitives.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Malwarebytes.UI.Theme.Primitives.dll
              • Size 2.1MB
              • SHA256 7a543d38cb51c1fae0e41297c50247f7558aae0e879f7d6762b2349193ad992f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Malwarebytes.deps.json

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Malwarebytes.deps.json
              • Size 53KB
              • SHA256 c6b4bc62a0002a7e0fe48bc53259d77e0f6d50916f236b4eca98625220038b7f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Malwarebytes.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Malwarebytes.dll
              • Size 7.9MB
              • SHA256 e4282a1c1e5d9b5b146044a1a5e471fc4e29ad4359034138a6472539f49ee493
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Malwarebytes.exe

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Malwarebytes.exe
              • Size 304KB
              • SHA256 54c5255b0ded5687029a70648eec59663db5b0a2051e728827a1a6eb2ce7f840
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Malwarebytes.runtimeconfig.json

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Malwarebytes.runtimeconfig.json
              • Size 732B
              • SHA256 3f60cdd7ad6efb453058c7d80dcad1ef76bf5db28fd548fb6f9714b409e4a181
              • MD5 SHA1 SHA512 TLSH

              Malwarebytes_Assistant.deps.json

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Malwarebytes_Assistant.deps.json
              • Size 15KB
              • SHA256 ec66f1c4c94bd64eff9bc523835cc02f3d5329a36fe4342746f656ba7cbb374e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Malwarebytes_Assistant.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Malwarebytes_Assistant.dll
              • Size 164KB
              • SHA256 bf7b2b4b6f7bfbad00d897c6dc4bfbd5f2598eb91c3c7e61ed519b9e58192f38
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Malwarebytes_Assistant.exe

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Malwarebytes_Assistant.exe
              • Size 301KB
              • SHA256 ad845b01d6f5b93e002c0247ad26d552e296a6ab1315613e6d8ee2246c8ef22e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Malwarebytes_Assistant.runtimeconfig.json

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Malwarebytes_Assistant.runtimeconfig.json
              • Size 615B
              • SHA256 61fca252e8e336706f4c153c16100b7b621f9092ed09bb6959e406ab5bb21e85
              • MD5 SHA1 SHA512 TLSH

              MbamBgNativeMsg.exe

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\MbamBgNativeMsg.exe
              • Size 4.3MB
              • SHA256 470a0254bc323f229dfba24e3ab3eb0c23a3491f5acc4e90e45d8095cfdca639
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MbamUI.Core.deps.json

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\MbamUI.Core.deps.json
              • Size 7KB
              • SHA256 794b599d0cdf356a486ca39362dc74821f28c7b55d51d8cb2050c32813f2606f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MbamUI.Core.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\MbamUI.Core.dll
              • Size 183KB
              • SHA256 9055cc925319368d70afc76ac5163bc1dba72fa9a765a9ca35af1de0184f31d9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MbamUI.Data.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\MbamUI.Data.dll
              • Size 1.9MB
              • SHA256 e963c710452371fc88a5fb29e6d3a63d13e5740168842d74be72ea134dd706b4
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MbamUI.Services.deps.json

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\MbamUI.Services.deps.json
              • Size 14KB
              • SHA256 72f59e1f726eaec2a193c1acf455ca6bc41ad8846b4334d9473a3e8d452ebb18
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MbamUI.Services.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\MbamUI.Services.dll
              • Size 4.0MB
              • SHA256 eba8133ae7775d691fcf2abaaa3406463d7c40f61389f55e822b1ebea444ae6d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MbamUI.Tray.deps.json

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\MbamUI.Tray.deps.json
              • Size 14KB
              • SHA256 53b36a5c74f11ade2f09f1e9639e9e4fa0d2a8853a1ee8aa29ab70cbfa76814e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MbamUI.Tray.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\MbamUI.Tray.dll
              • Size 191KB
              • SHA256 709e5ee46191cd492cdf44814807e80560865c0c199e7db90d966cdf1b3973d7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MdXaml.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\MdXaml.dll
              • Size 183KB
              • SHA256 c9566bbc0053b617676b93335870647e4d4cbe22ec142098caf81a66e6590d74
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Microsoft.Data.Sqlite.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Microsoft.Data.Sqlite.dll
              • Size 173KB
              • SHA256 4ffa9156ebb9332bc53196cde2e62997447ad046629216be555e07d5d65f6c19
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Microsoft.EntityFrameworkCore.Abstractions.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Microsoft.EntityFrameworkCore.Abstractions.dll
              • Size 33KB
              • SHA256 c29df8f2db22e129bb6929130d98aa612b570a5ebab9842a11e809796cf03448
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Microsoft.EntityFrameworkCore.Relational.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Microsoft.EntityFrameworkCore.Relational.dll
              • Size 2.1MB
              • SHA256 687f84616b0a58de7ba0c20d14b4fe38871d79161f2de5bb3f48d171c292a0db
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Microsoft.EntityFrameworkCore.Sqlite.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Microsoft.EntityFrameworkCore.Sqlite.dll
              • Size 304KB
              • SHA256 623bc03297fcefc658a9e251d1e75c12d7365b80a3ebcfecd3e31d5a6e7feead
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Microsoft.EntityFrameworkCore.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Microsoft.EntityFrameworkCore.dll
              • Size 2.7MB
              • SHA256 6750a0c56a1d557d7590728d4d7378f6e1ec65cb96e59489023cdc9fd139f6ca
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Microsoft.Extensions.Caching.Abstractions.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Microsoft.Extensions.Caching.Abstractions.dll
              • Size 36KB
              • SHA256 46697030a421c60e4a1eecb295fe14513a562bb2e5d7e0ac878f4934e56bb50b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Microsoft.Extensions.Caching.Memory.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Microsoft.Extensions.Caching.Memory.dll
              • Size 46KB
              • SHA256 f108fc79cd1b69eb4d0f8a45d198c5fb99ace430dbec65380854a559a248d6a9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Microsoft.Extensions.Configuration.Abstractions.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Microsoft.Extensions.Configuration.Abstractions.dll
              • Size 27KB
              • SHA256 c295e6c3384ed61e4fea0fc43479aadedf81a60c9c97d3dbdb9247f562e0846f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Microsoft.Extensions.DependencyInjection.Abstractions.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Microsoft.Extensions.DependencyInjection.Abstractions.dll
              • Size 64KB
              • SHA256 ca708422782fb25819941a16a057ea96d6d18b037e7e5cbfdf340b7a04362b57
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Microsoft.Extensions.DependencyInjection.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Microsoft.Extensions.DependencyInjection.dll
              • Size 93KB
              • SHA256 47f8175d34e9087d3858644803c558cb9cf52b29bffda796f65c1c527d1b6a22
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Microsoft.Extensions.DependencyModel.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Microsoft.Extensions.DependencyModel.dll
              • Size 82KB
              • SHA256 8dadc004effa669d9caf231019413e469d58632eadb9dacf56aad07d8bac82a3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Microsoft.Extensions.Logging.Abstractions.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Microsoft.Extensions.Logging.Abstractions.dll
              • Size 65KB
              • SHA256 ec244a2db19dffe90cd299fa4b0691456ced342a078b4a93cf3726a9b431e9ac
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Microsoft.Extensions.Logging.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Microsoft.Extensions.Logging.dll
              • Size 50KB
              • SHA256 74d8fd2d7997fc638474e2bd79916458a30481e6a6925b50e7e96b4b852031c3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Microsoft.Extensions.Options.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Microsoft.Extensions.Options.dll
              • Size 63KB
              • SHA256 644350f8c2404d4479b97a250edb29585e5fafec1b6ce8486ae600c5015fd7fb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Microsoft.Extensions.Primitives.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Microsoft.Extensions.Primitives.dll
              • Size 43KB
              • SHA256 a0794c3bab2d7e0c848f0dffb3b9aa4b43ce07dc0abd122ebb7bf6dc79452ec4
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Microsoft.Xaml.Behaviors.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Microsoft.Xaml.Behaviors.dll
              • Size 142KB
              • SHA256 0493049febb4be74bdf669ad7fa754941c2754fe33421e230a8f14c8fd06c8c4
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MwacLib.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\MwacLib.dll
              • Size 6.6MB
              • SHA256 3652577e9d5d5fec4f63aa6fc4e49d42f7c17ebebad51c54e7c32373ab29c73b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Prism.Container.Extensions.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Prism.Container.Extensions.dll
              • Size 20KB
              • SHA256 85a55b97f20431fcf6d33634de6a86d7c6d441be413c728e19dda8b0aef72e92
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Prism.DryIoc.Wpf.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Prism.DryIoc.Wpf.dll
              • Size 26KB
              • SHA256 ad1666c83f2554b09396386fcec856f9b3068b9bc2a29f13c08d3ce0c23d7d4f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Prism.Wpf.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Prism.Wpf.dll
              • Size 132KB
              • SHA256 c3b44b118486a5d74d696c14853e5306ec893dadd0be8ea6f404edae8c66f2d3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Prism.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Prism.dll
              • Size 89KB
              • SHA256 92090c9c3c5195149885be91aa469b85d2cba9a215cb3bfb65e93945f33d852b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              QRCoder.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\QRCoder.dll
              • Size 228KB
              • SHA256 5c06f128b66ea50ecb92ba0c7173c47b8f58eff8328bf1973794d5117604b650
              • MD5 SHA1 SHA512 SSDEEP TLSH

              RTPControllerImpl.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\RTPControllerImpl.dll
              • Size 6.5MB
              • SHA256 e9768a3b26d32210a3effbb5dc19e21ed210a0e961a9d5f1688415e0cd8fa25f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              SPControllerImpl.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\SPControllerImpl.dll
              • Size 4.5MB
              • SHA256 6563c8273b0285bb2db5df55c8a707b76ed9215739b78ea4e2f954ee1025ef12
              • MD5 SHA1 SHA512 SSDEEP TLSH

              SQLitePCLRaw.batteries_v2.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\SQLitePCLRaw.batteries_v2.dll
              • Size 32KB
              • SHA256 a3ab8eb17f24daa3e06676850fb3e635ab0d11e9c03bf8d0ff4d79c85f65ce76
              • MD5 SHA1 SHA512 SSDEEP TLSH

              SQLitePCLRaw.core.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\SQLitePCLRaw.core.dll
              • Size 77KB
              • SHA256 f87073b9bceb6270cb71cb7edee808736f284152b9332d6dab9821464657192e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              SQLitePCLRaw.provider.e_sqlcipher.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\SQLitePCLRaw.provider.e_sqlcipher.dll
              • Size 63KB
              • SHA256 4caa977c084e3025a4386e388f6879da32946136b3cebe31c48f6d988dfdb3b1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              SQLitePCLRaw.provider.e_sqlite3.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\SQLitePCLRaw.provider.e_sqlite3.dll
              • Size 63KB
              • SHA256 a2494f2ab97ccb867ccc48205120c370cc56654c7b712222b51fe88e5f797a41
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ScanControllerImpl.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\ScanControllerImpl.dll
              • Size 7.0MB
              • SHA256 070388b46ac8e1bb5e09fd3afb99a3d9b7ba786efa5072c1d65d1bdf9b62ab9f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              SelfProtectionSdk.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\SelfProtectionSdk.dll
              • Size 4.6MB
              • SHA256 09b8ea52a6950390fa1f96720f0c7b4c527631b24d27466e5f9e5952701dbc0b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              SelfProtectionShim.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\SelfProtectionShim.dll
              • Size 4.0MB
              • SHA256 ccb4ce36aa0887ed1017abd15b1019f31a8fe2c1afc55a6a063d94142d7483c2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Sentry.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Sentry.dll
              • Size 835KB
              • SHA256 3c1e22c93602a9807771c1fa1416916776671c56e68fc18376eae7d7e4366ece
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Serilog.Extensions.Logging.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Serilog.Extensions.Logging.dll
              • Size 55KB
              • SHA256 2ed97c6c9d069560e5e3f2fb7971ef13694fbb72d3d0606805cce7144ef0811e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Serilog.Sinks.File.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Serilog.Sinks.File.dll
              • Size 63KB
              • SHA256 6a4cf1c06f76e10daa10ada8ade23b2f0cb74ad78e95232f3dc62b6775279ab1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Serilog.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Serilog.dll
              • Size 186KB
              • SHA256 7a60b92c5ec7db4c7037c70243531f1c34552d318d5a29c5a7e84141e752978a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Swissarmy.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\Swissarmy.dll
              • Size 5.3MB
              • SHA256 a24d72190300454137e6d64c87eeb5f27f9cf12830120bb0f1ba5e9e5b410221
              • MD5 SHA1 SHA512 SSDEEP TLSH

              SwissarmyShim.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\SwissarmyShim.dll
              • Size 3.8MB
              • SHA256 732966ed236d085e61eeb95901c76a7cc2701cb85c94f420f03e1236ebbf7512
              • MD5 SHA1 SHA512 SSDEEP TLSH

              System.Diagnostics.EventLog.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\System.Diagnostics.EventLog.dll
              • Size 172KB
              • SHA256 9177c5434d2872741cf7a80e000c52166fed8930d07ab154c6a4d476d01a9aaa
              • MD5 SHA1 SHA512 SSDEEP TLSH

              System.DirectoryServices.AccountManagement.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\System.DirectoryServices.AccountManagement.dll
              • Size 297KB
              • SHA256 721a82b65516782f57f7fbf4c9940c016f8c1a209d5fed553b5044c45485b8fd
              • MD5 SHA1 SHA512 SSDEEP TLSH

              System.DirectoryServices.Protocols.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\System.DirectoryServices.Protocols.dll
              • Size 178KB
              • SHA256 fc0f22cc109a429b68d3d83fa48067166452942c25a7acb9870bd78a801cd8e8
              • MD5 SHA1 SHA512 SSDEEP TLSH

              System.ServiceProcess.ServiceController.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\System.ServiceProcess.ServiceController.dll
              • Size 90KB
              • SHA256 3961824bc760e2e5433c8bec08f85bb4c391ef545a1bed524bcc8cd4217852bc
              • MD5 SHA1 SHA512 SSDEEP TLSH

              TelemetryControllerImpl.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\TelemetryControllerImpl.dll
              • Size 7.4MB
              • SHA256 1e13bd4f75569d9f70c0a1bf77d5393c72caf502b2c38b1b8e01018734d56455
              • MD5 SHA1 SHA512 SSDEEP TLSH

              UpdateControllerImpl.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\UpdateControllerImpl.dll
              • Size 6.3MB
              • SHA256 ff70350b82c6bbe4f2611d3b45617c34967280b86236c2a4a2e6a0a55dec5a6a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              VPNControllerImpl.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\VPNControllerImpl.dll
              • Size 4.9MB
              • SHA256 19b062a4afe6ad8e4691d48192a7f103d5f6e78370c3238141e5c18ed80c6702
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ddshelper.bin

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\ddshelper.bin
              • Size 1KB
              • SHA256 99198c557b03b24dbf40724c62c12c8c039447afedfd109e20061288963d9454
              • MD5 SHA1 SHA512 TLSH

              ddshelper.exe

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\ddshelper.exe
              • Size 253KB
              • SHA256 d2257e7643128166f46a88da45ab9c38b7c23d0d727551dbd9f780a43f4abd11
              • MD5 SHA1 SHA512 SSDEEP TLSH

              e_sqlcipher.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\e_sqlcipher.dll
              • Size 1.8MB
              • SHA256 8ae79522c885057fcbd2435bceb0bb1281b30fcb00b43c5a8e42f0a0677fef26
              • MD5 SHA1 SHA512 SSDEEP TLSH

              e_sqlite3.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\e_sqlite3.dll
              • Size 1.8MB
              • SHA256 e0a736e91481d5914d8a073ca8fa64f770e9c7992b3f3473c06dcfda50cc89d1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mb5uns.deps.json

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\mb5uns.deps.json
              • Size 2KB
              • SHA256 dbbc5441a58be6084057667a83cafc0af9b3377061a9bda4cfd4fca3b651fc01
              • MD5 SHA1 SHA512 TLSH

              mb5uns.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\mb5uns.dll
              • Size 1.3MB
              • SHA256 08ac8a8cc8b991ebc256b595dd2ff7a8935f09d6512209a25febbe08ee3b33f1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mb5uns.exe

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\mb5uns.exe
              • Size 326KB
              • SHA256 7e75457de02a91b5e8000c6bc17efb5784ce6a3d0c90e861b49a9c62461db242
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mb5uns.runtimeconfig.json

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\mb5uns.runtimeconfig.json
              • Size 623B
              • SHA256 4afc3f604abeed8ce727030cbd0445cf645e9d4990b7913156e80db61e468146
              • MD5 SHA1 SHA512 TLSH

              mbae-api-na.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\mbae-api-na.dll
              • Size 723KB
              • SHA256 6aee09c65a2f22658a8a74459df2b9df5c81c5ec7d853e496794ef6f52ed8924
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mbae.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\mbae.dll
              • Size 1.4MB
              • SHA256 523a8858117a691eb787348186d038b31cc0e59a9c2defdea11eb0a8fc7f6eec
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mbae.sys

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\mbae.sys
              • Size 155KB
              • SHA256 c990dd89b65d35d6c9b34e21c78d96e206ec3bcdd934716ee61ff79da0fa5251
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mbae64.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\mbae64.dll
              • Size 1.7MB
              • SHA256 bd25a747e6aaf00678eb705cafa894897241695ddc176b0993904d280a882054
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mbamelam.cat

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\mbamelam.cat
              • Size 11KB
              • SHA256 64416d564725416c6869ea951878a2734b1f6940b11f7961a897c45f0d8c6625
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mbamelam.inf

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\mbamelam.inf
              • Size 2KB
              • SHA256 e26c2d3347e5f077da92713c9df3cd3eae438fb7e29810bd5c3afe567d2d3125
              • MD5 SHA1 SHA512 TLSH

              mbampt.exe

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\mbampt.exe
              • Size 33KB
              • SHA256 52d7c66a6dd46eb8f0674ea42bf600b8fb0cca1c1788057b2d375b8281a98583
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mbamsisdk.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\mbamsisdk.dll
              • Size 12.7MB
              • SHA256 35ec2acc44f082c4ba3f9cb689ba89d8d6d320f27d8b106ee1b80564150702fc
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mbcut.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\mbcut.dll
              • Size 4.2MB
              • SHA256 cc9b2f7379351f5cb246fcab1823962716c3b90dce252292f3c7fabf718a0c23
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mbshlext.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\mbshlext.dll
              • Size 3.1MB
              • SHA256 8af36217efcc1b2a677accc77839ed3b67ddbfcabfa16caaa42c7e95796b940a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              rtp.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\rtp.dll
              • Size 4.4MB
              • SHA256 db4dbf65f6da762d70bdf5932ea8529d3d5e90b968637bc504a39db04f87a48e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sentrynativesdk.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\sentrynativesdk.dll
              • Size 596KB
              • SHA256 6e6096dabfe6b34c3e6ccba49cef544b7be6158e34168f819f8cac1b3645d4d0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              srvversion.dat

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\srvversion.dat
              • Size 9B
              • SHA256 0edffbd0e4c895acbe7bbd411b84845336082fd5ffa0a5af7d6441fbc997cf84
              • MD5 SHA1 SHA512

              version.dat

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\version.dat
              • Size 10B
              • SHA256 deccf9159ecb0cd93713dbc8f4117d8f0192b80c073ab2f0fc725d83e2a99ded
              • MD5 SHA1 SHA512

              wireguard.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\ctlrpkg\wireguard.dll
              • Size 1.3MB
              • SHA256 d2ad6ce25634776f5067fd9d5750a5e3d2add1adde98eb1f56a2df194d0e9cbb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ActionsV5.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\ActionsV5.dll
              • Size 6.1MB
              • SHA256 f2dc3b02c39cc92b945ebffc0be675251e93de87158eaf47bfeb5c3231488173
              • MD5 SHA1 SHA512 SSDEEP TLSH

              BrowserSDKDLLV5.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\BrowserSDKDLLV5.dll
              • Size 7.0MB
              • SHA256 c72e39709b26ac7577200a76515347ff11c0a9424cf61657762d657e7aecd974
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Global.nm

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\Global.nm
              • Size 349KB
              • SHA256 314b03fd2b01e1a1f9a4883d3379fb3da1bdb358750b6e9cfd7fb3e03ae307ac
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Global.sr

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\Global.sr
              • Size 23.0MB
              • SHA256 e68be3dc860396f2d2f157c1568e2382c8a3e3a053a5ae2a87d520aaa6399ada
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MBAMCoreV5.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\MBAMCoreV5.dll
              • Size 8.7MB
              • SHA256 3b38dece370c841f7a3fdd4b5e3eb7991d9a61fa93c69b1376195ae17c99201c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              cfg.bin

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\cfg.bin
              • Size 2KB
              • SHA256 a4d54bff6782b5e7cc3d59ce8ac7f1d9a80fd5eb045d0fe8ff3ffa110f609e73
              • MD5 SHA1 SHA512 TLSH

              clean.mbdb

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\clean.mbdb
              • Size 21KB
              • SHA256 72cae0054d620772f1b33e26dd4c16b187892c0c96e90d1e45291d3df3a64489
              • MD5 SHA1 SHA512 SSDEEP TLSH

              dbmanifest2.dat

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\dbmanifest2.dat
              • Size 924B
              • SHA256 bc670d68c456cd8cb17a537428ff27eacc09a711acc87659b24f6691cf212e96
              • MD5 SHA1 SHA512 TLSH

              dynconfig.dat

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\dynconfig.dat
              • Size 39KB
              • SHA256 008254ca1f4d6415da89d01a4292911de6135b42833156720a841a22685765dc
              • MD5 SHA1 SHA512 SSDEEP TLSH

              exclusions.txt

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\exclusions.txt
              • Size 23KB
              • SHA256 9e87e4c9da3337c63b7f0e6ed0eb71696121c74e18a5da577215e18097715e2f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              igV5.exe

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\igV5.exe
              • Size 1.8MB
              • SHA256 21600e8542230081e34d2da49d174f577d47e6f5d4088b3be4508c10d642f4fb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mbdigsig2.dat

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\mbdigsig2.dat
              • Size 514B
              • SHA256 15cae80f6d39dfc522d230814385f8c6a87a2a60a8945066d99621de7672c15c
              • MD5 SHA1 SHA512 TLSH

              prot.mbdb

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\prot.mbdb
              • Size 24B
              • SHA256 6089fbf0c0c1413f62e91dc9497bedc6d8a271e9dc761e20adc0dccf6f4a0c1f
              • MD5 SHA1 SHA512

              rdefs.mbdb

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\rdefs.mbdb
              • Size 24B
              • SHA256 850a4ea37a0fd6f68bf95422d502b2d1257264eb90cc38c0a3b1b95aa375be55
              • MD5 SHA1 SHA512

              rules.mbdb

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\rules.mbdb
              • Size 6.9MB
              • SHA256 883599a367a22a4baf51bcc5d377ca60be951d1dfd4a56d7854c365d064bad43
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sampleV5.dll

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\sampleV5.dll
              • Size 524KB
              • SHA256 030a55e24a44c983de03eaf02e8b733860b7dece1f6a1a910fa05f73d1f45759
              • MD5 SHA1 SHA512 SSDEEP TLSH

              scan.mbdb

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\scan.mbdb
              • Size 415KB
              • SHA256 1b10ab6c4defe9d5df777f102f275e20d6848feb9cab0df8d7d8a5992aa80f51
              • MD5 SHA1 SHA512 SSDEEP TLSH

              tids.mbdb

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\tids.mbdb
              • Size 138KB
              • SHA256 2e20ef923ad2fe6a56974aa3f8b536847ce7ff9536a25991aa5129268f901570
              • MD5 SHA1 SHA512 SSDEEP TLSH

              version.dat

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\version.dat
              • Size 48B
              • SHA256 1a42cb245120146ed08824b9bd51c557df7269ca90302f2e153bfb0d64bf7d5c
              • MD5 SHA1 SHA512

              wprot2.mbdb

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dbclspkg\wprot2.mbdb
              • Size 21.1MB
              • SHA256 c3f627881abec607f8d1f36bf1c15fc5841680ea9ed29068930cc5ceddba102a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              .version

              • Path C:\ProgramData\MalwarebytesTemp\MBInstallTemp_85c57666c1a011f1af86f6d780bea338\dotnetpkgtmp\shared\Microsoft.NETCore.App\10.0.8\.version
              • Size 50B
              • SHA256 42559a4970a981aa61f3ed59ad44d05214fcc5eb97c35d06a88102a0b747a45f
              • MD5 SHA1 SHA512 TLSH

              MBVpnTunnelService.log

              • Path C:\ProgramData\Malwarebytes\MBAMService\LOGS\MBVpnTunnelService.log
              • Size 4KB
              • SHA256 c0340c2cc00de7a00d4887f36c0ecd42cf01e4c826ea3092aa5e6e2daf04d96d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mbae-default.log

              • Path C:\ProgramData\Malwarebytes\MBAMService\LOGS\mbae-default.log
              • Size 1KB
              • SHA256 6dc00ee217f4642168ef877913ead9800deed25ec01ecae0d0db00ef94b7127b
              • MD5 SHA1 SHA512 TLSH

              AeConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
              • Size 47KB
              • SHA256 606ccb78b589abaea4fd51ab6deaca4f9bb158510d25144b153e6d887d69da85
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AeConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
              • Size 66KB
              • SHA256 ede57f808e3c4b461dfb203183f1d64b421f4b1b2b5653201c09589af248940a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AeConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
              • Size 66KB
              • SHA256 ce34f474489374ca3ae63da5f21018c7971cd206ae21216123a3e3081a706ab4
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AeConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json
              • Size 90KB
              • SHA256 c6c2def30b866e6fd4154289d9368a85c81222d4d281a73bc91309f092cf228d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ArwControllerConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json
              • Size 1KB
              • SHA256 ac72b63f53e2cd767dd0ec849f210164b29db3bca7794ec8f3d81b38f25641e5
              • MD5 SHA1 SHA512 TLSH

              ArwControllerConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json
              • Size 1KB
              • SHA256 c6221a04717565de480203ed6e1595ff4b4a5d020dbadbf015d896b5502ca782
              • MD5 SHA1 SHA512 TLSH

              CleanControllerConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json
              • Size 949B
              • SHA256 b5fb8bc34cebb7fb9d54d2f162ab94d879f2a89dc0b7f00538c3ebd1b60d15e8
              • MD5 SHA1 SHA512 TLSH

              CloudConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json
              • Size 1KB
              • SHA256 e343a82a5f5a7789dd0e546973b312f061cecb1d813cdc115d986ada56e6a6d6
              • MD5 SHA1 SHA512 TLSH

              LicenseConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
              • Size 12KB
              • SHA256 2c159d6827c610e244fca73ad9d2d8d2b84ce81a36666e3ffea5a5d010708e44
              • MD5 SHA1 SHA512 SSDEEP TLSH

              LicenseConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
              • Size 12KB
              • SHA256 5f416f2546dce0c979304b28b0632f14a3c861a9b882b954c708f59873d14e90
              • MD5 SHA1 SHA512 SSDEEP TLSH

              LicenseConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
              • Size 12KB
              • SHA256 c380bfb70e7bf22dc561c4fbd0441c85e35bfd8adbb46e28a2599592f950ef38
              • MD5 SHA1 SHA512 SSDEEP TLSH

              LicenseConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\LicenseConfig.json
              • Size 12KB
              • SHA256 afb8bdb2f0e7449b11a066007c224a33590bf6c886b39ea6326e5d25d19b571c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MwacControllerConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json
              • Size 2KB
              • SHA256 ae48142e4cb33edaac9fea8c67bdae919dfcddac4690c10d171bc8a73de560be
              • MD5 SHA1 SHA512 TLSH

              MwacControllerConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json
              • Size 2KB
              • SHA256 f97721ceb57905c1ad6d03b7639f07d656778af3e111821233c92f43a64f15d0
              • MD5 SHA1 SHA512 TLSH

              MwacControllerConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json
              • Size 2KB
              • SHA256 cd348ec8cfc5cad56dc271b0087c1e406798ed2d7914c62bac2e01db260d2be7
              • MD5 SHA1 SHA512 TLSH

              PoliciesConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json
              • Size 814B
              • SHA256 2d4942e328712b17fefda07bf03948034764a31681fa8ffdcda94ff23aaa57ce
              • MD5 SHA1 SHA512 TLSH

              RtpConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
              • Size 3KB
              • SHA256 527604d5e0f0b1a0aa4dcf18f6c9bfa9bf553ec3c2c27b45c1aa7a67ce6faddd
              • MD5 SHA1 SHA512 TLSH

              RtpConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json
              • Size 3KB
              • SHA256 221288a7c590419ef20c8d89e94097f630d8f4b7d051366599743fa061cafa51
              • MD5 SHA1 SHA512 TLSH

              ScanConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
              • Size 3KB
              • SHA256 ae581ab9534c8e61cfdd82b755e8d0b7612b7e4a11f0179a2a5743c7edb9c488
              • MD5 SHA1 SHA512 TLSH

              ScanConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
              • Size 5KB
              • SHA256 2cce9fdf392f974a0d0ff48128eb4622e05f4d401ed05218740028f95018401d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ScanConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
              • Size 8KB
              • SHA256 53d5624c418b975ac864c6804d6d328d52bffb59170d0f5e6af5fbce1eb67b51
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ScanConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json
              • Size 5KB
              • SHA256 4f45a8f13e6f24a6c5531f8ab821e1f613ea6cad5c3be464faac7e9e27652cfd
              • MD5 SHA1 SHA512 SSDEEP TLSH

              SpConfigFile.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json
              • Size 12KB
              • SHA256 c9a5a60e8d85461e29420ad10a32c4db2d012ebd865d624dab76702e2f7fff0a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              SpConfigFile.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json
              • Size 12KB
              • SHA256 296f519236edc18578d69fb58fa2737d7d3c70b5addd7777bd22661ed2ed759b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              TelemCtrlConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
              • Size 1KB
              • SHA256 3e31a5e392d717416f333f463bcd34de787ded5c2764424e73ae8bdae24bdf61
              • MD5 SHA1 SHA512 TLSH

              TelemCtrlConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
              • Size 1KB
              • SHA256 ca49e4276f1c30244553f3014a49ba1b9fe9065d609d0f98253a40785d32d319
              • MD5 SHA1 SHA512 TLSH

              TelemCtrlConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
              • Size 1KB
              • SHA256 f98cdf1addc3d190de44e5df1caabfc22b2c3e87276a6d30db70887c77e346ea
              • MD5 SHA1 SHA512 TLSH

              TelemCtrlConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
              • Size 1KB
              • SHA256 95e33db59eeaa3802c79ed71141f02ef7bd7b2ae70038f1f4d49f4394c5dc84b
              • MD5 SHA1 SHA512 TLSH

              TelemCtrlConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
              • Size 1KB
              • SHA256 a1007cf14cd159c9db7b5e766c3e2318efc82659cc533fe9a552ae75db6dd1af
              • MD5 SHA1 SHA512 TLSH

              TelemCtrlConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
              • Size 1KB
              • SHA256 ed5b370f9212e5839a17b3f67ed00aaeb8f7a6714705420267d2550063a35ecb
              • MD5 SHA1 SHA512 TLSH

              TelemCtrlConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json
              • Size 1KB
              • SHA256 ba0e7b6364fc1345f1f8003cec807d7ca3a26389deb9b93cdae5d6aa4fae51c4
              • MD5 SHA1 SHA512 TLSH

              UpdateControllerConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
              • Size 1KB
              • SHA256 c79a09965a02847788744722138fcaaae30f0769fc2a107037f648dd7e537ce2
              • MD5 SHA1 SHA512 TLSH

              UpdateControllerConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
              • Size 1KB
              • SHA256 7061e7841b1e7cf9f4a944af59aa0644805e6229c9857bb9de59b754c0ab2844
              • MD5 SHA1 SHA512 TLSH

              UpdateControllerConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
              • Size 1KB
              • SHA256 faa630363921ab01a26ca3689500315d3bbbf0c5be2d5e20cd36988ec4973f10
              • MD5 SHA1 SHA512 TLSH

              UpdateControllerConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
              • Size 1KB
              • SHA256 de307602f166827f33ab78ce19910a248ef84ed3373e209a1b8f32aff6af9619
              • MD5 SHA1 SHA512 TLSH

              UpdateControllerConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json
              • Size 1KB
              • SHA256 91597cbd0f0aec07549fbe3b7c7031a0e9a5295f86193232d75cc3639e66a13b
              • MD5 SHA1 SHA512 TLSH

              VPNControllerConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json
              • Size 1KB
              • SHA256 89199443847420a351f1c750fa17f93ce55e11ea96742039b3a0dd4911a2c3ea
              • MD5 SHA1 SHA512 TLSH

              VPNControllerConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json
              • Size 1KB
              • SHA256 9cba8a32bdf11b0e15abcf1ac6e160ebe322cc09d2a5b4bfd666ab4afa8d19cb
              • MD5 SHA1 SHA512 TLSH

              VPNServerListConfig.json

              • Path C:\ProgramData\Malwarebytes\MBAMService\config\VPNServerListConfig.json
              • Size 125B
              • SHA256 3d08d70b0feda92e53e24e0023688caaca38e3b6c18b111426298ea6cdad48f7
              • MD5 SHA1 SHA512 TLSH

              mbrescue.exe

              • Path C:\ProgramData\Malwarebytes\MBAMService\rmode\mbrescue.exe
              • Size 7.7MB
              • SHA256 477919ecb586d6ef4a06793417c2ae3126c51a51cf9445d901e90e3627e7143b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Windows.db

              • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db
              • Size 1.1MB
              • SHA256 57033093e33793d755726a02fdc2a589e0a842faeabf96fca0c30aa3b4c97ded
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Windows.db-wal

              • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db-wal
              • Size 422KB
              • SHA256 b44e6b0b816177387c7d6fb8da0429515d6ab935a401b9f2eed1888cc3d2b674
              • MD5 SHA1 SHA512 SSDEEP TLSH

              perfhost.exe

              • Path C:\Windows\SysWOW64\perfhost.exe
              • Size 1.2MB
              • SHA256 bbc0ddd541ab13b9def17543ab5b2d9ece7e386578ca4a47943973d466b45ba5
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AgentService.exe

              • Path C:\Windows\System32\AgentService.exe
              • Size 1.4MB
              • SHA256 fd017d6769153ca84f101049f849cb970fae55a1174b130d501744caca22820c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              dberr.txt

              • Path C:\Windows\System32\CatRoot2\dberr.txt
              • Size 70KB
              • SHA256 5a3634a0082f90efabe57649b935ab553d7f4a3312cfa2ec52db3367d7b9aa02
              • MD5 SHA1 SHA512 SSDEEP TLSH

              dberr.txt

              • Path C:\Windows\System32\CatRoot2\dberr.txt
              • Size 70KB
              • SHA256 247fe1b8ec290dbc58410cbe0b52be1af8dd74f03b427432894e0efb9d7786f4
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mbtun.inf_amd64_add82795013a7c3b.ini

              • Path C:\Windows\System32\DriverStore\FileRepository\mbtun.inf_amd64_add82795013a7c3b.ini
              • Size 409B
              • SHA256 6064b86819b739a261dc5f1f5197b5bcc778797b1a95e59a1584a07e5787a507
              • MD5 SHA1 SHA512 TLSH

              ssh-agent.exe

              • Path C:\Windows\System32\OpenSSH\ssh-agent.exe
              • Size 1.8MB
              • SHA256 606c2a1b4d9df8970dc119503d48963f95ceb7032bb10c11a3b6a4097d102d8d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ReFsDedupSvc.exe

              • Path C:\Windows\System32\ReFsDedupSvc.exe
              • Size 2.6MB
              • SHA256 cc56c387a8b20e4facfb97d3af5fb8e9ba1e03c7b2d909c597862b3f6b4179b0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              SearchIndexer.exe

              • Path C:\Windows\System32\SearchIndexer.exe
              • Size 1.4MB
              • SHA256 f1d209885e3e3915da57bee7dac6a116cd1889aaefda59b73d6eba06b61719e5
              • MD5 SHA1 SHA512 SSDEEP TLSH

              SensorDataService.exe

              • Path C:\Windows\System32\SensorDataService.exe
              • Size 1.7MB
              • SHA256 d00b7f1576c92b31c070ef286614f151026a432fd493422733344bfc44adafcd
              • MD5 SHA1 SHA512 SSDEEP TLSH

              dberr.txt

              • Path C:\Windows\System32\catroot2\dberr.txt
              • Size 71KB
              • SHA256 6efe6add2003bdcae4cd4056a4bb97b15b0f5c271e94c859e5910613c7cc45b0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MbamChameleon.sys

              • Path C:\Windows\System32\drivers\MbamChameleon.sys
              • Size 230KB
              • SHA256 a2f19edac47313a8d282ec88ff6da531d49ada37829328278be4b8d395819f0f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MbamElam.sys

              • Path C:\Windows\System32\drivers\MbamElam.sys
              • Size 21KB
              • SHA256 ded569e249e590314d095f740c6b8934a5a797e4f3edbe0f78eac9d333f12a2a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mbamswissarmy.sys

              • Path C:\Windows\System32\drivers\mbamswissarmy.sys
              • Size 240KB
              • SHA256 1da576165e8736412c0961b0d66d17d37218f5ef1f972acba91c208f59718536
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mb_49AD.tmp

              • Path C:\Windows\Temp\mb_49AD.tmp
              • Size 107KB
              • SHA256 ad820dd54edb13e255d34eafacd71f278d6514e2f7e4c2970401f922a774ceb0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              AppVClient.exe

              • Path C:\Windows\system32\AppVClient.exe
              • Size 1.3MB
              • SHA256 c4379cbade0a65c5d4c2ac8da81c1edf0f3de71146201ae3a975000e648dc1a6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              PerceptionSimulationService.exe

              • Path C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe
              • Size 1.5MB
              • SHA256 e8584441603943548f91fb630ad115695019af731367ca008f0678e81e5127b0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              SgrmBroker.exe

              • Path C:\Windows\system32\Sgrm\SgrmBroker.exe
              • Size 1.6MB
              • SHA256 8311e518c0e08cdbf998a711324ec856074189f7ba90b7e1a27e9f8bf07675db
              • MD5 SHA1 SHA512 SSDEEP TLSH

              memory/936-331-0x000002A7332B0000-0x000002A73353B000-memory.dmp

              memory/1356-2754-0x0000000140000000-0x00000001404A0000-memory.dmp

              memory/1356-2752-0x0000000000D30000-0x0000000000D90000-memory.dmp

              memory/1356-2758-0x0000000140000000-0x00000001404A0000-memory.dmp

              memory/1356-2746-0x0000000000D30000-0x0000000000D90000-memory.dmp

              memory/1356-2756-0x0000000000D30000-0x0000000000D90000-memory.dmp

              memory/1560-127-0x0000000000CB0000-0x0000000000D10000-memory.dmp

              memory/1560-131-0x0000000000CB0000-0x0000000000D10000-memory.dmp

              memory/1560-139-0x0000000140000000-0x0000000140168000-memory.dmp

              memory/1560-137-0x0000000000CB0000-0x0000000000D10000-memory.dmp

              memory/1560-124-0x0000000140000000-0x0000000140168000-memory.dmp

              memory/1876-34-0x00000000006E0000-0x0000000000740000-memory.dmp

              memory/1876-33-0x00000000006E0000-0x0000000000740000-memory.dmp

              memory/1876-26-0x0000000140000000-0x00000001402D4000-memory.dmp

              memory/1876-27-0x00000000006E0000-0x0000000000740000-memory.dmp

              memory/1876-144-0x0000000140000000-0x00000001402D4000-memory.dmp

              memory/1884-3141-0x0000000140000000-0x000000014022F000-memory.dmp

              memory/1884-3109-0x0000000002290000-0x00000000022F0000-memory.dmp

              memory/1884-3108-0x0000000140000000-0x000000014022F000-memory.dmp

              memory/1884-3102-0x0000000002290000-0x00000000022F0000-memory.dmp

              memory/2768-293-0x0000000000400000-0x00000000005EE000-memory.dmp

              memory/2768-82-0x0000000000AB0000-0x0000000000B16000-memory.dmp

              memory/2768-76-0x0000000000400000-0x00000000005EE000-memory.dmp

              memory/2768-77-0x0000000000AB0000-0x0000000000B16000-memory.dmp

              memory/2936-53-0x0000000140000000-0x0000000140226000-memory.dmp

              memory/2936-242-0x0000000140000000-0x0000000140226000-memory.dmp

              memory/2936-54-0x00000000008A0000-0x0000000000900000-memory.dmp

              memory/2936-60-0x00000000008A0000-0x0000000000900000-memory.dmp

              memory/2996-114-0x0000000000D70000-0x0000000000DD0000-memory.dmp

              memory/2996-314-0x0000000140000000-0x0000000140295000-memory.dmp

              memory/2996-120-0x0000000000D70000-0x0000000000DD0000-memory.dmp

              memory/2996-113-0x0000000140000000-0x0000000140295000-memory.dmp

              memory/3392-3067-0x0000000140000000-0x000000014022F000-memory.dmp

              memory/3392-3074-0x0000000002050000-0x00000000020B0000-memory.dmp

              memory/3392-3111-0x0000000002050000-0x00000000020B0000-memory.dmp

              memory/3392-3068-0x0000000002050000-0x00000000020B0000-memory.dmp

              memory/3392-3113-0x0000000140000000-0x000000014022F000-memory.dmp

              memory/3416-100-0x0000000000770000-0x00000000007D0000-memory.dmp

              memory/3416-317-0x0000000140000000-0x00000001401BA000-memory.dmp

              memory/3416-106-0x0000000000770000-0x00000000007D0000-memory.dmp

              memory/3416-99-0x0000000140000000-0x00000001401BA000-memory.dmp

              memory/3416-313-0x0000000140000000-0x00000001401BA000-memory.dmp

              memory/3416-315-0x0000000000770000-0x00000000007D0000-memory.dmp

              memory/4156-6-0x0000000002690000-0x00000000026F6000-memory.dmp

              memory/4156-3140-0x0000000000400000-0x0000000000746000-memory.dmp

              memory/4156-7-0x0000000002690000-0x00000000026F6000-memory.dmp

              memory/4156-86-0x0000000000400000-0x0000000000746000-memory.dmp

              memory/4156-0-0x0000000000400000-0x0000000000746000-memory.dmp

              memory/4156-1-0x0000000002690000-0x00000000026F6000-memory.dmp

              memory/4372-38-0x0000000140000000-0x000000014022C000-memory.dmp

              memory/4372-45-0x0000000000CE0000-0x0000000000D40000-memory.dmp

              memory/4372-49-0x0000000000CE0000-0x0000000000D40000-memory.dmp

              memory/4372-51-0x0000000140000000-0x000000014022C000-memory.dmp

              memory/4372-39-0x0000000000CE0000-0x0000000000D40000-memory.dmp

              memory/5260-312-0x0000000140000000-0x00000001402C9000-memory.dmp

              memory/5260-334-0x0000000000720000-0x0000000000780000-memory.dmp

              memory/5260-94-0x0000000000720000-0x0000000000780000-memory.dmp

              memory/5260-87-0x0000000000720000-0x0000000000780000-memory.dmp

              memory/5260-335-0x0000000140000000-0x00000001402C9000-memory.dmp

              memory/5260-93-0x0000000140000000-0x00000001402C9000-memory.dmp

              memory/5284-72-0x0000000000C80000-0x0000000000CE0000-memory.dmp

              memory/5284-66-0x0000000000C80000-0x0000000000CE0000-memory.dmp

              memory/5284-278-0x0000000140000000-0x0000000140222000-memory.dmp

              memory/5284-64-0x0000000140000000-0x0000000140222000-memory.dmp

              memory/5404-318-0x0000000140000000-0x0000000140172000-memory.dmp

              memory/5404-146-0x00000000006A0000-0x0000000000700000-memory.dmp

              memory/5404-145-0x0000000140000000-0x0000000140172000-memory.dmp

              memory/5404-152-0x00000000006A0000-0x0000000000700000-memory.dmp

              memory/5776-13-0x0000000140000000-0x00000001402E9000-memory.dmp

              memory/5776-111-0x0000000140000000-0x00000001402E9000-memory.dmp

              memory/5776-22-0x0000000000E10000-0x0000000000E70000-memory.dmp

              memory/5776-14-0x0000000000E10000-0x0000000000E70000-memory.dmp

              memory/5776-20-0x0000000000E10000-0x0000000000E70000-memory.dmp