home

mbamsrv.dll

Malwarebytes Anti-Malware

Entrust.net

Publisher:
Malwarebytes Corporation  (signed by Entrust.net)

Product:
Malwarebytes Anti-Malware

Version:
2.1.2.0

MD5:
7957a3222ffc3cc124f25daf846a7fc5

SHA-1:
5bf63c3642d674408226a7389ab9572c972d17bc

SHA-256:
1de096a7f51ed41af8e5d7341fe5e76d7c5d7680c07b5e55d2440be5a9581182

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/27/2024 4:18:20 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Pioneer-C
160118-1

File size:
3.7 MB (3,919,615 bytes)

Product version:
2.1.2.0

Copyright:
© Malwarebytes Corporation. All rights reserved.

Original file name:
mbamsrv.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\malwarebytes anti-malware\mbamsrv.dll

Digital Signature
Signed by:
Entrust.net

Authority:
Entrust.net

Valid from:
5/26/1999 12:09:40 AM

Valid to:
5/26/2019 12:39:40 AM

Subject:
CN=Entrust.net Secure Server Certification Authority, OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), O=Entrust.net, C=US

Issuer:
CN=Entrust.net Secure Server Certification Authority, OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), O=Entrust.net, C=US

Serial number:
374AD243

File PE Metadata
Compilation timestamp:
5/16/2015 2:41:19 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
49152:HX8LHYmnI/R9amqFKoQPkiBo0jcSuRb/zX6TXlMsYz+qvdzQH2ynTTrp/we2ucHh:M1mqrQxBFjVwbbXM1i+qvuH2swe2uFVe

Entry address:
0x1F262B

Entry point:
E9, E4, 8F, F4, FF, 83, 7D, 0C, 01, 75, 05, E8, 29, 09, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, CC, FE, FF, FF, 59, 5D, C2, 0C, 00, 6A, 10, 68, 40, C5, 31, 10, E8, F6, 06, 00, 00, 33, C0, 89, 45, E0, 89, 45, FC, 89, 45, E4, 8B, 45, E4, 3B, 45, 10, 7D, 13, 8B, 75, 08, 8B, CE, FF, 55, 14, 03, 75, 0C, 89, 75, 08, FF, 45, E4, EB, E5, C7, 45, E0, 01, 00, 00, 00, C7, 45, FC, FE, FF, FF, FF, E8, 08, 00, 00, 00, E8, FD, 06, 00, 00, C2, 14, 00, 83, 7D, E0, 00, 75, 11, FF, 75, 18, FF, 75, E4, FF, 75, 0C, FF...
 
[+]

Entropy:
6.6106

Packer / compiler:
Xtreme-Protector v1.05

Code size:
2.5 MB (2,667,520 bytes)

Scan mbamsrv.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.