home

mbam.exe

Malwarebytes Anti-Malware

DigiCert Inc

Publisher:
Malwarebytes Corporation  (signed by DigiCert Inc)

Product:
Malwarebytes Anti-Malware

Version:
2.3.55.0

MD5:
95a9dc948f0d518f9bcedf850dab458a

SHA-1:
5c59812ddb6135b7102de520eec653ca8e22eced

SHA-256:
f0e6962b60d82b807fade8e2ab93961d2c00d1bd486af823775422f27f1aa043

Scanner detections:
31 / 68

Status:
Clean  (31 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/18/2024 8:03:05 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Win32.Expiro.Gen.4
356

Agnitum Outpost
Trojan.DownLoader
7.1.1

AhnLab V3 Security
Win32/Expiro5.Gen
2015.10.09

Avira AntiVirus
TR/Patched.Ren.Gen
8.3.2.2

avast!
Win32:Expiro-FN [Trj]
2014.9-160213

Bitdefender
Win32.Expiro.Gen.4
1.0.20.220

Comodo Security
Virus.Win32.Expiro.NS
23382

Dr.Web
Win32.Expiro.100
9.0.1.044

Emsisoft Anti-Malware
Win32.Expiro.Gen
8.16.02.13.09

ESET NOD32
Win32/Expiro.CG virus
10.7.0.302.0

Fortinet FortiGate
W32/Expiro.CG
2/13/2016

F-Secure
Win32.Expiro.Gen.4
11.2016-13-02_7

G Data
Win32.Expiro.Gen
16.2.25

IKARUS anti.virus
Virus.Win32.Expiro
t3scan.1.9.5.0

K7 AntiVirus
Virus
13.210.17482

Kaspersky
Virus.Win32.Expiro
14.0.0.665

McAfee
Virus.W32/Expiro.gen.ra
5600.6490

Microsoft Security Essentials
Threat.Undefined
1.207.2059.0

MicroWorld eScan
Win32.Expiro.Gen.4
17.0.0.132

NANO AntiVirus
Virus.Win32.Expiro.dtodst
0.30.26.3947

Norman
Win32.Expiro.Gen.4
11.20160213

nProtect
Win32.Expiro.Gen.4
15.10.08.01

Panda Antivirus
W32/Expiro.Y
16.02.13.09

Quick Heal
W32.Expiro.CO
2.16.14.00

Rising Antivirus
PE:Virus.Expiro/AllInOne!1.A140[F1]
23.00.65.16211

Sophos
Virus 'W32/Expiro-AC'
5.15

Trend Micro House Call
PE_EXPIRO.A7
7.2.44

Trend Micro
PE_EXPIRO.A7
10.465.13

Vba32 AntiVirus
Backdoor.DarkKomet
3.12.26.3

VIPRE Antivirus
Threat.5066537
43798

Zillya! Antivirus
Virus.Expiro.Win32.111
2.0.0.2435

File size:
6.4 MB (6,710,951 bytes)

Product version:
2.3.55.0

Copyright:
© Malwarebytes Corporation. All rights reserved.

Original file name:
mbam.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
DigiCert Inc

Authority:
DigiCert Inc

Valid from:
11/10/2006 1:00:00 AM

Valid to:
11/10/2031 1:00:00 AM

Subject:
CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Issuer:
CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
02AC5C266A0B409B8F0B79F2AE462577

File PE Metadata
Compilation timestamp:
6/12/2015 2:38:26 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:wOnd1GIPbyot51+J9ncALTqq89ZM0e2utF3uIYo:3ndMEbpixTqq8bMUIYo

Entry address:
0x32CDC8

Entry point:
BB, 8F, C9, 07, 5C, 93, E9, 20, 01, 00, 00, 86, 2C, 8F, 8B, 37, BB, 8F, 8B, 47, 12, 73, 0F, 0F, 8F, 0F, 0F, D7, 0F, 0F, 0F, 6E, 40, 45, 40, 3F, 40, 48, 46, 45, 0F, 0F, 0F, 83, 70, 89, 74, 71, 70, 7C, 70, 3D, 73, 7B, 7B, 0F, 0F, 0F, 0F, 6B, 0F, 0F, 0F, 55, 81, 74, 74, 5B, 78, 71, 81, 70, 81, 88, 0F, 52, 81, 74, 70, 83, 74, 53, 78, 81, 74, 72, 83, 7E, 81, 88, 50, 0F, 0F, 0F, 0F, 56, 74, 83, 66, 78, 7D, 73, 7E, 86, 82, 53, 78, 81, 74, 72, 83, 7E, 81, 88, 50, 0F, 0F, 0F, 0F, 56, 74, 83, 5C, 7E, 73, 84, 7B, 74...
 
[+]

Code size:
4 MB (4,156,928 bytes)

Scan mbam.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.