home

mbam.exe

Malwarebytes Anti-Malware

DigiCert Inc

Publisher:
Malwarebytes Corporation  (signed by DigiCert Inc)

Product:
Malwarebytes Anti-Malware

Version:
1.0.2.929

MD5:
8a5c49a1ecff89d5a27e6dc1aa3d0834

SHA-1:
bc7a97cfc420b594607c0ae1597c36e18d083592

SHA-256:
4ffd7f16ddf61c92ca21046385e1256d69f3dec3b7529e881e6f32d76162fc35

Scanner detections:
31 / 68

Status:
Clean  (31 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/26/2024 7:51:02 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Win32.Expiro.Gen.4
374

Agnitum Outpost
Trojan.DownLoader
7.1.1

AhnLab V3 Security
Win32/Expiro5.Gen
2015.10.09

Avira AntiVirus
TR/Patched.Ren.Gen
8.3.2.2

avast!
Win32:Expiro-FN [Trj]
2014.9-160126

Bitdefender
Win32.Expiro.Gen.4
1.0.20.130

Comodo Security
Virus.Win32.Expiro.NS
23382

Dr.Web
Win32.Expiro.100
9.0.1.026

Emsisoft Anti-Malware
Win32.Expiro.Gen
8.16.01.26.03

ESET NOD32
Win32/Expiro.CG virus
10.7.0.302.0

Fortinet FortiGate
W32/Expiro.CG
1/26/2016

F-Secure
Win32.Expiro.Gen.4
11.2016-26-01_3

G Data
Win32.Expiro.Gen
16.1.25

IKARUS anti.virus
Virus.Win32.Expiro
t3scan.1.9.5.0

K7 AntiVirus
Virus
13.210.17482

Kaspersky
Virus.Win32.Expiro
14.0.0.757

McAfee
Virus.W32/Expiro.gen.ra
5600.6508

Microsoft Security Essentials
Threat.Undefined
1.207.2059.0

MicroWorld eScan
Win32.Expiro.Gen.4
17.0.0.78

NANO AntiVirus
Virus.Win32.Expiro.dtodst
0.30.26.3947

Norman
Win32.Expiro.Gen.4
11.20160126

nProtect
Win32.Expiro.Gen.4
15.10.08.01

Panda Antivirus
W32/Expiro.Y
16.01.26.03

Quick Heal
W32.Expiro.CO
1.16.14.00

Rising Antivirus
PE:Virus.Expiro/AllInOne!1.A140[F1]
23.00.65.16124

Sophos
Virus 'W32/Expiro-AC'
5.15

Trend Micro House Call
PE_EXPIRO.A7
7.2.26

Trend Micro
PE_EXPIRO.A7
10.465.26

Vba32 AntiVirus
Backdoor.DarkKomet
3.12.26.3

VIPRE Antivirus
Threat.5066537
43798

Zillya! Antivirus
Virus.Expiro.Win32.111
2.0.0.2435

File size:
6.5 MB (6,779,904 bytes)

Product version:
1.0.2.929

Copyright:
© Malwarebytes Corporation. All rights reserved.

Original file name:
mbam.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\malwarebytes anti-malware\mbam.exe

Digital Signature
Signed by:
DigiCert Inc

Authority:
DigiCert Inc

Valid from:
11/9/2006 6:00:00 PM

Valid to:
11/9/2031 6:00:00 PM

Subject:
CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Issuer:
CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
02AC5C266A0B409B8F0B79F2AE462577

File PE Metadata
Compilation timestamp:
4/14/2015 11:22:24 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:n+8jKtzHs4TWzrBUl3kuzj9S1Pe2uxWaLP7c/b9Hik:+8jKV6buv9Cn6

Entry address:
0x2FCB98

Entry point:
42, 42, 50, 41, 51, 4A, 4A, 52, 41, 53, 41, 54, 41, 55, 56, 89, F8, 50, 89, C8, 40, 55, 89, E5, 81, EC, 8C, 00, 00, 00, 53, 56, 57, C7, 45, F0, 0E, 00, 00, 00, B8, 9A, 00, 00, 00, B9, 0E, 00, 00, 00, BA, 93, 24, 49, 92, 51, 89, C1, F7, EA, 01, CA, C1, FA, 03, C1, F9, 1F, 29, CA, 89, D0, 59, 89, 45, EC, B8, 37, 00, 00, 00, 8B, 4D, EC, 99, F7, F9, 89, 45, D8, B8, 70, 00, 00, 00, B9, 0E, 00, 00, 00, BA, 93, 24, 49, 92, 51, 89, C1, F7, EA, 01, CA, C1, FA, 03, C1, F9, 1F, 29, CA, 89, D0, 59, 89, 45, B4, 8B, 45...
 
[+]

Entropy:
6.7585

Code size:
3.8 MB (3,943,936 bytes)

Scan mbam.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.