Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

1.70.0.0000 44.72%
1.70.0.0000 34.15%
1.65.0.0000 17.89%
1.65.0.0000 0.81%
1.62.0.0001 1.63%
1.61.0.0000 0.81%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
InitializeSecurityDescriptor, CryptAcquireContextW, CryptDeriveKey, CryptCreateHash, CryptDestroyKey, CryptDecrypt, CryptDestroyHash, CryptHashData, IsTextUnicode, RegQueryValueExW, RegQueryInfoKeyW, RegEnumValueW, RegOpenKeyExW, RegCloseKey, SetSecurityDescriptorDacl
comctl32.dll
InitCommonControlsEx
gdi32.dll
DeleteObject, SelectObject, DeleteDC, GetObjectW, GetStockObject, BitBlt, CreateCompatibleDC, CreateFontIndirectW
kernel32.dll
SetNamedPipeHandleState, TransactNamedPipe, WaitNamedPipeW, FindClose, FindFirstFileW, GetFileSizeEx, CreateEventW, ProcessIdToSessionId, ResetEvent, WaitForSingleObject, CreateThread, GetVersion, DeleteCriticalSection, OpenEventW, CreateWaitableTimerW, WaitForMultipleObjects, EnterCriticalSection, GetLastError, LeaveCriticalSection, Sleep, InitializeCriticalSection, GetTickCount, SetWaitableTimer, CreateMutexW, CreateFileW, WriteConsoleW, SetStdHandle, LoadLibraryW, GetFileAttributesExW, CompareFileTime, GetCurrentProcessId, GetConsoleMode, GetConsoleCP, SetFilePointer, CloseHandle, ReleaseMutex, FindNextFileW, SetEvent, GetModuleHandleW, OpenProcess, TerminateProcess, GetProcAddress, Process32FirstW, Process32NextW, CreateToolhelp32Snapshot, ConnectNamedPipe, CreateNamedPipeW, WriteFile, ReadFile, DisconnectNamedPipe, FlushFileBuffers, WideCharToMultiByte, MultiByteToWideChar, ExitProcess, InterlockedIncrement, InterlockedDecrement, InterlockedExchange, GetCommandLineA, HeapSetInformation, GetStartupInfoW, HeapFree, RaiseException, GetCPInfo, RtlUnwind, HeapAlloc, LCMapStringW, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, IsProcessorFeaturePresent, HeapSize, GetStdHandle, GetModuleFileNameW, GetLocaleInfoW, GetModuleFileNameA, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, InitializeCriticalSectionAndSpinCount, GetFileType, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, SetLastError, GetCurrentThreadId, HeapCreate, QueryPerformanceCounter, GetSystemTimeAsFileTime, GetStringTypeW, GetACP, GetOEMCP, IsValidCodePage, GetUserDefaultLCID, GetLocaleInfoA, EnumSystemLocalesA, IsValidLocale, HeapReAlloc, FreeLibrary, GetVersionExW, GetSystemInfo
mbam.dll
_ProtectionToggle@4, _SchedulerInstall@0, _ProtectionInstall@0, _SchedulerUninstall@0, _GetProgramVersion@8, _GetConfigParameter@12, _DatabaseOutdatedBy@0, _MessagesDisplay@8, _UpdateAvailable@0, _GetMBAMSetting@8, _GetDatabaseVersion@8, _LicenseIsValid@0, _ProtectionIsEnabled@4, _SchedulerStop@0, _ProtectionStop@0, _ProtectionUninstall@0, _GetMBAMSettings@4
mbamnet.dll
_IsTrialActive@0, _ValidateTrial@16
shell32.dll
SHGetFolderPathW, Shell_NotifyIconW, ShellExecuteW
user32.dll
PostMessageW, DeleteMenu, TranslateMessage, AppendMenuW, GetCursorPos, CreatePopupMenu, GetMenuItemCount, CheckMenuItem, DispatchMessageW, EndPaint, DestroyWindow, GetSystemMenu, PostQuitMessage, RegisterWindowMessageW, LoadImageW, SetForegroundWindow, CharLowerW, DrawEdge, BeginPaint, RegisterClassExW, LoadIconW, SetRect, SystemParametersInfoW, EnableMenuItem, SetWindowPos, ShowWindow, CreateWindowExW, GetSystemMetrics, SendMessageW, UpdateWindow, SetWindowTextW, DefWindowProcW, CharUpperW, GetMessageW, LoadCursorW, TrackPopupMenu, MessageBoxW
version.dll
VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeW

mbamgui.exe

Malwarebytes Anti-Malware by Malwarebytes Corporation (Signed)

Remove mbamgui.exe
Version:   1.70.0.0000
MD5:   7853d2ab445c10f97610b2b05fa4cf0a
SHA1:   f6e26f6cf507dd9027d150cf3f8d677108c538f5
SHA256:   b62190bb1e478a684448b10ed92f44048bbb2d0eaa31325fed8134b438dceae8

What is mbamgui.exe?

This is the Malwarebytes' user interface. Malwarebytes' Anti-Malware is an application that finds and removes malware. It is available in a free version, which scans for and removes malware when started manually, and a paid version, which provides scheduled scans, real-time protection and a flash memory scanner. Malwarebytes' is intended to find malware that other anti-virus and anti-spyware programs generally miss, including rogue security software, adware, and spyware.

About mbamgui.exe (from Malwarebytes Corporation)

Malware is big and malware is bad. Your computer is constantly at risk from infection by malware including viruses, worms, trojans, rootkits, dialers and spyware. Malwarebytes specializes in fighting

DetailsDetails

File name:mbamgui.exe
Publisher:Malwarebytes Corporation
Product name:Malwarebytes Anti-Malware
Typical file path:C:\Program Files\malwarebytes' anti-malware\mbamgui.exe
File version:1.70.0.0000
Size:500.35 KB (512,360 bytes)
Certificate
Issued to:Malwarebytes Corporation
Authority (CA):VeriSign
Expiration date:Wednesday, June 5, 2013
Digital DNA
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
Malwarebytes Corporation
2% remove
Malwarebytes' Anti-Malware (MBAM) is a computer application that finds and removes malware. MBAM claims to be intended to find malware that other anti-virus and anti-spyware programs generally miss, including rogue security software, adware, and spyware. MBAM scans in batch mode, rather than scanning all files opened, reducing interference if on-demand anti-malware software is also running on the computer.

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00454804%
0.028634%
Kernel CPU:0.00288241%
0.013761%
User CPU:0.00166563%
0.014873%
Kernel CPU time:4,935,451 ms/min
100,923,805ms/min
CPU cycles:515,079/sec
17,470,203/sec
Context switches:2/sec
284/sec
Memory
Private memory:3.66 MB
21.59 MB
Private (maximum):8.32 MB
Private (minimum):4.99 MB
Non-paged memory:3.66 MB
21.59 MB
Virtual memory:121.77 MB
140.96 MB
Virtual memory (peak):148.34 MB
169.69 MB
Working set:6.4 MB
18.61 MB
Working set (peak):9.01 MB
37.95 MB
Page faults:48,275/min
2,039/min
I/O
I/O read transfer:1.98 KB/sec
1.02 MB/min
I/O read operations:10/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:465 Bytes/sec
448.09 KB/min
I/O other operations:229/sec
1,671/min
Resource allocations
Threads:5
12
Handles:97
600
GUI GDI count:25
103
GUI GDI peak:27
142
GUI USER count:18
49
GUI USER peak:18
71

BehaviorsProcess properties

Integrety level:Medium
Platform:64-bit
Command lines:
  • "C:\Program Files\malwarebytes' anti-malware\mbamgui.exe" /starttray
Owner:User
Parent process:mbamservice.exe (Malwarebytes Anti-Malware by Malwarebytes Corporation)

ResourcesThreads

Averages
 
mbamgui.exe (main module)
Total CPU:0.00427676%
0.272967%
Kernel CPU:0.00333296%
0.107585%
User CPU:0.00094380%
0.165382%
CPU cycles:125,673/sec
5,741,424/sec
Memory:516 KB
1.16 MB
wow64.dll
Total CPU:0.00002323%
Kernel CPU:0.00002323%
User CPU:0.00000000%
CPU cycles:27/sec
Memory:276 KB
RPCRT4.dll
Total CPU:0.00001615%
Kernel CPU:0.00000000%
User CPU:0.00001615%
CPU cycles:27/sec
Memory:780 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 37.70%
Windows 7 Ultimate 14.75%
Microsoft Windows XP 11.48%
Windows 7 Professional 10.66%
Windows Vista Home Premium 5.74%
Windows 8 Pro with Media Center 5.74%
Windows 8 4.92%
Windows 8 Pro 4.10%
Windows 8.1 3.28%
Windows Vista Business 0.82%
Windows 7 Enterprise 0.82%

Distribution by countryDistribution by country

United States installs about 64.46% of Malwarebytes Anti-Malware.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 23.00%
Dell 22.00%
ASUS 18.00%
Toshiba 16.00%
Acer 5.00%
GIGABYTE 4.00%
Sony 4.00%
Intel 4.00%
Gateway 2.00%
Lenovo 2.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE