home

mbamtray.exe

Malwarebytes Tray Application

Malwarebytes Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Malwarebytes TrayApp’.
Publisher:
Malwarebytes  (signed by Malwarebytes Corporation)

Product:
Malwarebytes Tray Application

Version:
3.0.0.865

MD5:
666fea598d1776c7f8edd7746f0f7f59

SHA-1:
5745f8d876d8d042f20386d43d78f684852e419b

SHA-256:
54e330bcdbab646b555dacc15f9cfb0ad6a05bf4e273f73c5133259eee976c21

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:52:44 AM UTC  (today)

File size:
2.6 MB (2,776,528 bytes)

Product version:
3.0.0.865

Copyright:
© Malwarebytes. All rights reserved.

Original file name:
mbam.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\malwarebytes\anti-malware\mbamtray.exe

Digital Signature
Signed by:
Malwarebytes Corporation

Authority:
DigiCert Inc

Valid from:
7/20/2016 8:00:00 PM

Valid to:
7/25/2019 8:00:00 AM

Subject:
CN=Malwarebytes Corporation, O=Malwarebytes Corporation, L=Santa Clara, S=CA, C=US

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
044E3BF58976880FFD074448A8F7A058

File PE Metadata
Compilation timestamp:
12/12/2016 1:07:56 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0x6826B

Entry point:
E8, 7E, 05, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, E0, 13, 67, 00, E8, 1F, 02, 00, 00, 33, F6, 89, 75, E4, 89, 75, E0, FF, 15, 2C, 61, 47, 00, 0F, B7, D8, 89, 75, FC, 64, A1, 18, 00, 00, 00, 8B, 50, 04, 8B, FE, BE, 14, C9, 67, 00, 8B, CA, 33, C0, F0, 0F, B1, 0E, 85, C0, 74, 0B, 3B, C2, 75, F0, 33, F6, 46, 8B, FE, EB, 03, 33, F6, 46, 39, 35, 18, C9, 67, 00, 75, 0A, 6A, 1F, E8, AE, 03, 00, 00, 59, EB, 3B, 83, 3D, 18, C9, 67, 00, 00, 75, 2C, 89, 35, 18, C9, 67, 00, 68, C4, 6E, 47, 00, 68, B4, 6E, 47, 00, E8...
 
[+]

Entropy:
6.4444

Code size:
466 KB (477,184 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Malwarebytes TrayApp

Command:
C:\Program Files\malwarebytes\anti-malware\mbamtray.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.