mbae.sys

ZeroVulnerabilityLabs, Inc.

It runs as a Windows 64-bit kernel mode device driver named “Malwarebytes Anti-Exploit”.
Publisher:
ZeroVulnerabilityLabs, Inc.  (signed and verified)

MD5:
dc69fa361c2ad1f354bd9f36846488bf

SHA-1:
020c586ecffd8724e80e9be26745b11c4403b8eb

SHA-256:
0f3abab469d1910e8ea7ab33ee9ecf7a95c3bc54008ac38a0e648f91dbb03a30

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/13/2025 1:29:25 AM UTC  (today)

File size:
62.4 KB (63,896 bytes)

File type:
Driver (Win64 SYS)

Common path:
C:\Program Files\malwarebytes anti-exploit\mbae.sys

Digital Signature
Authority:
DigiCert Inc

Valid from:
6/4/2013 2:00:00 AM

Valid to:
6/11/2014 2:00:00 AM

Subject:
CN="ZeroVulnerabilityLabs, Inc.", O="ZeroVulnerabilityLabs, Inc.", L=San Jose, S=California, C=US

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
08E6EB0CCBCDBAE6E302B6ABAD27CB88

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
1536:SGxJgtAoi6pcq4L1zmsl3Y2D7+AtDokLAfEXcpJR05fB5:SGwtIFDiA0fEXcpJR05z

Driver
Display name:
Malwarebytes Anti-Exploit

Service name:
ESProtectionDriver

Type:
Kernel device driver (KernelDriver)


Scan mbae.sys - Powered by Reason Core Security