home

mbamtray.exe

Malwarebytes Tray Application

Malwarebytes Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Malwarebytes TrayApp’.
Publisher:
Malwarebytes  (signed by Malwarebytes Corporation)

Product:
Malwarebytes Tray Application

Version:
3.0.0.912

MD5:
5f60bcddffdbb01c216bff28012f5598

SHA-1:
46502a706e3e5c3ce29b0a42d06a7c576d643e7d

SHA-256:
a5e56604c9ad028a0edba58e49825966482373082192d2b227ddc8013c557142

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 2:24:17 AM UTC  (today)

File size:
2.7 MB (2,780,112 bytes)

Product version:
3.0.0.912

Copyright:
© Malwarebytes. All rights reserved.

Original file name:
mbam.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\malwarebytes\anti-malware\mbamtray.exe

Digital Signature
Signed by:
Malwarebytes Corporation

Authority:
DigiCert Inc

Valid from:
7/21/2016 7:00:00 AM

Valid to:
7/25/2019 7:00:00 PM

Subject:
CN=Malwarebytes Corporation, O=Malwarebytes Corporation, L=Santa Clara, S=CA, C=US

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
044E3BF58976880FFD074448A8F7A058

File PE Metadata
Compilation timestamp:
1/20/2017 3:11:32 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0x68A8B

Entry point:
E8, 7E, 05, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, D0, 27, 67, 00, E8, 1F, 02, 00, 00, 33, F6, 89, 75, E4, 89, 75, E0, FF, 15, 3C, 71, 47, 00, 0F, B7, D8, 89, 75, FC, 64, A1, 18, 00, 00, 00, 8B, 50, 04, 8B, FE, BE, 14, D9, 67, 00, 8B, CA, 33, C0, F0, 0F, B1, 0E, 85, C0, 74, 0B, 3B, C2, 75, F0, 33, F6, 46, 8B, FE, EB, 03, 33, F6, 46, 39, 35, 18, D9, 67, 00, 75, 0A, 6A, 1F, E8, AE, 03, 00, 00, 59, EB, 3B, 83, 3D, 18, D9, 67, 00, 00, 75, 2C, 89, 35, 18, D9, 67, 00, 68, DC, 7E, 47, 00, 68, CC, 7E, 47, 00, E8...
 
[+]

Entropy:
6.4508

Code size:
468.5 KB (479,744 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Malwarebytes TrayApp

Command:
C:\Program Files\malwarebytes\anti-malware\mbamtray.exe


Scan mbamtray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.