Malwarebytes endpoint agent exclusions

For the cloud platform, there are some recommended exclusions to put in place if you are using other protection software. These can range from network firewalls to anti-virus software. To ensure our product can work side by side with those other vendors, please enter in the exclusions below:

Connectivity

• https://cloud.malwarebytes.com
• https://sirius.mwbsys.com
• https://socket.malwarebytes.com
• https://data-cdn.mbamupdates.com
• https://data-cdn-static.mbamupdates.com
• https://keystone.mwbsys.com
• https://hubble.mb-cosmos.com
• https://blitz.mb-cosmos.com
• https://telemetry.malwarebytes.com
• https://data.service.malwarebytes.com
• https://meps.mwbsys.com

(All on Port 443, Outbound)

Components

Endpoint Agent Files

• %ProgramFiles%\Malwarebytes Endpoint Agent
• %ProgramData%\Malwarebytes Endpoint Agent
• /Library/Application Support/Malwarebytes/NebulaAgent/ (Mac)
• /Library/LaunchDaemons/com.malwarebytes.NebulaAgent.plist (Mac)

IR/EPP Files

• %ProgramData%\Malwarebytes\MBAMService
• %ProgramData%\Malwarebytes Endpoint Agent\Plugins\Incident Response\Logs

Registry Keys

• HKLM\Software\Microsoft\Windows\CurrentVersion\Setup\SysprepExternal\Generalize\E85C5BD4-F8FA-4D8C-94F7-DDBDB00F974B
• HKLM\Software\Microsoft\Windows\CurrentVersion\Setup\SysprepExternal\Generalize\2947892B-C390-476F-90AB-CD0D5F421614
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall