home

SBAMTray.exe

VIPRE Antivirus

Sunbelt Software, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SBAMTray’.
Publisher:
Sunbelt Software  (signed by Sunbelt Software, Inc.)

Product:
VIPRE Antivirus

Description:
SBAMTray Application

Version:
4.0.3282

MD5:
49d5af3ac693f61f977ec330860ed3d3

SHA-1:
7e934e39f73d9afc26bf238d13733dfa447c3907

SHA-256:
961e62f6c3e9cb1671f0aaf8a211b8bd627ac2c67553024376918dadccf5f6d1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 7:04:04 AM UTC  (today)

File size:
1.2 MB (1,291,600 bytes)

Product version:
4.0.3282

Copyright:
Copyright (C) 2008

Original file name:
SBAMTray.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\sunbelt software\vipre\sbamtray.exe

Digital Signature
Signed by:
Sunbelt Software, Inc.

Authority:
VeriSign, Inc.

Valid from:
10/21/2009 2:00:00 AM

Valid to:
10/28/2012 1:59:59 AM

Subject:
CN="Sunbelt Software, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Sunbelt Software, Inc.", L=Clearwater, S=Florida, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3E39AA5744B96351475CBA9CBC223E33

File PE Metadata
Compilation timestamp:
4/30/2010 5:39:21 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:AVNYSUWVN916RmUF4VKCxuiiH9H4bhKTwz0Cy:q/1RSOKwuBH9YbhUw4Cy

Entry address:
0xA545E

Entry point:
E8, 2F, 88, 00, 00, E9, 17, FE, FF, FF, 51, C7, 01, D4, A4, 4E, 00, E8, B2, 88, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, EB, D6, FD, FF, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, FD, 88, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 8B, C1, 83, 60, 04, 00, 83, 60, 08, 00, C7, 00, DC, A4, 4E, 00, C3, 53, 8B, 5C, 24, 08, 56, 57, 8B, F9, C7, 07, DC, A4, 4E, 00, 8B, 03, 85, C0, 74, 26, 50, E8, 27, 69, 00, 00, 8B, F0, 46, 56, E8...
 
[+]

Code size:
908 KB (929,792 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SBAMTray

Command:
"C:\Program Files\sunbelt software\vipre\sbamtray.exe"


Scan SBAMTray.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.