home

mbamtray.exe

Malwarebytes Tray Application

Malwarebytes Corporation

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Malwarebytes TrayApp’.
Publisher:
Malwarebytes  (signed by Malwarebytes Corporation)

Product:
Malwarebytes Tray Application

Version:
3.0.0.912

MD5:
370bbfca2cb2fce2424acbc0477c7bd5

SHA-1:
d3df543bab260fee821c7ff3353af8f5ae976b32

SHA-256:
cfcf42d2de6a55550f595bf10471b463d8f1ecb08c1658c86decf80f6bef9f9d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 1:46:39 AM UTC  (today)

File size:
2.7 MB (2,858,391 bytes)

Product version:
3.0.0.912

Copyright:
© Malwarebytes. All rights reserved.

Original file name:
mbam.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\malwarebytes\anti-malware\mbamtray.exe

Digital Signature
Signed by:
Malwarebytes Corporation

Authority:
DigiCert Inc

Valid from:
7/21/2016 5:00:00 AM

Valid to:
7/25/2019 5:00:00 PM

Subject:
CN=Malwarebytes Corporation, O=Malwarebytes Corporation, L=Santa Clara, S=CA, C=US

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
044E3BF58976880FFD074448A8F7A058

File PE Metadata
Compilation timestamp:
1/20/2017 1:11:32 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0x68A8B

Entry point:
E9, AB, AD, FE, FF, E9, 00, 00, 00, 00, 6A, 14, 68, D0, 27, 67, 00, E8, 1F, 02, 00, 00, 33, F6, 89, 75, E4, 89, 75, E0, FF, 15, 3C, 71, 47, 00, 0F, B7, D8, 89, 75, FC, 64, A1, 18, 00, 00, 00, 8B, 50, 04, 8B, FE, BE, 14, D9, 67, 00, 8B, CA, 33, C0, F0, 0F, B1, 0E, 85, C0, 74, 0B, 3B, C2, 75, F0, 33, F6, 46, 8B, FE, EB, 03, 33, F6, 46, 39, 35, 18, D9, 67, 00, 75, 0A, 6A, 1F, E8, AE, 03, 00, 00, 59, EB, 3B, 83, 3D, 18, D9, 67, 00, 00, 75, 2C, 89, 35, 18, D9, 67, 00, 68, DC, 7E, 47, 00, 68, CC, 7E, 47, 00, E8...
 
[+]

Entropy:
6.5214

Packer / compiler:
Xtreme-Protector v1.05

Code size:
468.5 KB (479,744 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Malwarebytes TrayApp

Command:
C:\Program Files\malwarebytes\anti-malware\mbamtray.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.