Yes, most likely decrypted virus signatures in MBAM’s memory.