home

SBAMTray.exe

VIPRE Antivirus

Threattrack Security, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SBAMTray’.
Publisher:
ThreatTrack Security Inc.  (signed by Threattrack Security, Inc.)

Product:
VIPRE Antivirus

Description:
SBAMTray Application

Version:
9.0.0.41

MD5:
30a93e85d5eeb777e164bf574f986bd5

SHA-1:
e03835529e397126ab99b2444610ae2b6c05fcd4

SHA-256:
8236ce8bf255002daf6de42d36d9673418f0ef120037dca91eab4c7a64334e80

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 3:59:41 PM UTC  (today)

File size:
2.9 MB (2,999,424 bytes)

Product version:
9.0.0.41

Copyright:
Copyright © 2015 ThreatTrack Security, Inc.

Original file name:
SBAMTray.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\vipre\sbamtray.exe

Digital Signature
Signed by:
Threattrack Security, Inc.

Authority:
DigiCert Inc

Valid from:
7/6/2015 8:00:00 PM

Valid to:
8/24/2017 8:00:00 AM

Subject:
CN="Threattrack Security, Inc.", O="Threattrack Security, Inc.", L=CLEARWATER, S=FL, C=US

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
083B5283A9B6FE6464743383083AB153

File PE Metadata
Compilation timestamp:
7/18/2015 12:05:35 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
49152:rBaLWp0BKS8H5KGPPZGpPp20KtmflDt6C1YyjGYvWGwfiNsKdjPw/HvRfRa+M2:rzpQKS8H51PApPpRKt83YBYpwfiNQ/HB

Entry address:
0x1A9138

Entry point:
E8, AE, B6, 00, 00, E9, 7F, FE, FF, FF, 3B, 0D, E0, 77, 67, 00, 75, 02, F3, C3, E9, 15, 07, 00, 00, 56, 6A, 04, 6A, 20, E8, 12, BC, 00, 00, 59, 59, 8B, F0, 56, FF, 15, 78, D2, 5E, 00, A3, D0, F0, 68, 00, A3, CC, F0, 68, 00, 85, F6, 75, 05, 6A, 18, 58, 5E, C3, 83, 26, 00, 33, C0, 5E, C3, 6A, 0C, 68, B0, 1B, 67, 00, E8, E4, 89, 00, 00, 83, 65, E4, 00, E8, 33, 88, 00, 00, 83, 65, FC, 00, FF, 75, 08, E8, 23, 00, 00, 00, 59, 8B, F0, 89, 75, E4, C7, 45, FC, FE, FF, FF, FF, E8, 0B, 00, 00, 00, 8B, C6, E8, FB, 89...
 
[+]

Entropy:
6.4208

Code size:
1.9 MB (2,013,184 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SBAMTray

Command:
"C:\Program Files\vipre\sbamtray.exe"


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.