mbamservice.exe
Malwarebytes Anti-Malware by Malwarebytes Corporation (Signed)
Version: | 1.70.0.0000 |
MD5: | 916b8954ac3e06dc9e898affb41f3fb6 |
SHA1: | 34298a7732eafde9a12c59b497130eac550ecf37 |
SHA256: | 8ad3d605f1681d743c7acdb7ca4a1299f86b96959a7609a803a5823b30a21e82 |
What is mbamservice.exe?
This is the Malwarebytes' main Windows Service. Malwarebytes' Anti-Malware is an application that finds and removes malware. It is available in a free version, which scans for and removes malware when started manually, and a paid version, which provides scheduled scans, real-time protection and a flash memory scanner. Malwarebytes' is intended to find malware that other anti-virus and anti-spyware programs generally miss, including rogue security software, adware, and spyware.
About mbamservice.exe (from Malwarebytes Corporation)
“Malware is big and malware is bad. Your computer is constantly at risk from infection by malware including viruses, worms, trojans, rootkits, dialers and spyware. Malwarebytes specializes in fighting ”
Details
File name: | mbamservice.exe |
Publisher: | Malwarebytes Corporation |
Product name: | Malwarebytes Anti-Malware |
Typical file path: | C:\Program Files\malwarebytes' anti-malware\mbamservice.exe |
File version: | 1.70.0.0000 |
Size: | 666.35 KB (682,344 bytes) |
Certificate |
Issued to: | Malwarebytes Corporation |
Authority (CA): | VeriSign |
Expiration date: | Wednesday, June 5, 2013 |
Digital DNA |
File packed: | No |
.NET CLR: | No |
More details
Programs
The following program will install this file
Malwarebytes' Anti-Malware (MBAM) is a computer application that finds and removes malware. MBAM claims to be intended to find malware that other anti-virus and anti-spyware programs generally miss, including rogue security software, adware, and spyware. MBAM scans in batch mode, rather than scanning all files opened, reducing interference if on-demand anti-malware software is also running on the computer.
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00440092% | |
Kernel CPU: | 0.00194959% | |
User CPU: | 0.00245134% | |
Kernel CPU time: | 123,135,931 ms/min | |
CPU cycles: | 5,576,910/sec | |
Context switches: | 20/sec | |
Memory |
Private memory: | 116.5 MB | |
Private (maximum): | 86.06 MB | |
Private (minimum): | 37.48 MB | |
Non-paged memory: | 116.5 MB | |
Virtual memory: | 239.74 MB | |
Virtual memory (peak): | 437.49 MB | |
Working set: | 62.29 MB | |
Working set (peak): | 186.88 MB | |
Page faults: | 3,295,331/min | |
I/O |
I/O read transfer: | 8.57 MB/sec | |
I/O read operations: | 25/sec | |
I/O write transfer: | 1.43 KB/sec | |
I/O write operations: | 1/sec | |
I/O other transfer: | 395.5 KB/sec | |
I/O other operations: | 13,771/sec | |
Resource allocations |
Threads: | 6 | |
Handles: | 146 | |
GUI GDI count: | 4 | |
GUI USER count: | 1 | |
Process properties
Integrety level: | System |
Platform: | 64-bit |
Command lines: |
- "C:\Program Files\malwarebytes' anti-malware\mbamservice.exe"
|
Owner: | SYSTEM |
Windows Service |
Service name: | MBAMService |
Description: | “Malwarebytes Anti-Malware service” |
Type: | Win32OwnProcess |
Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
ADVAPI32.dll |
Total CPU: | 0.39018976% | |
Kernel CPU: | 0.07576965% | |
User CPU: | 0.31442012% | |
Context switches: | 5/sec | |
Memory: | 620 KB | |
mbamservice.exe (main module) |
Total CPU: | 0.13858099% | |
Kernel CPU: | 0.11439709% | |
User CPU: | 0.02418390% | |
CPU cycles: | 2,208,165/sec | |
Context switches: | 3/sec | |
Memory: | 684 KB | |
wow64.dll |
Total CPU: | 0.06912993% | |
Kernel CPU: | 0.00806404% | |
User CPU: | 0.06106589% | |
CPU cycles: | 1,253,767/sec | |
Context switches: | 6/sec | |
Memory: | 252 KB | |
sechost.dll |
Total CPU: | 0.06637249% | |
Kernel CPU: | 0.01125098% | |
User CPU: | 0.05512151% | |
CPU cycles: | 1,712,281/sec | |
Context switches: | 10/sec | |
Memory: | 100 KB | |
wow64cpu.dll |
Total CPU: | 0.00725193% | |
Kernel CPU: | 0.00244369% | |
User CPU: | 0.00480825% | |
CPU cycles: | 137,345/sec | |
Memory: | 32 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
OS version | distribution |
Windows 7 Home Premium |
38.26% |
|
Windows 7 Ultimate |
15.44% |
|
Microsoft Windows XP |
12.75% |
|
Windows 7 Professional |
10.07% |
|
Windows 8 |
4.70% |
|
Windows Vista Home Premium |
4.70% |
|
Windows 8 Pro with Media Center |
4.70% |
|
Windows 8 Pro |
4.03% |
|
Windows 8.1 |
3.36% |
|
Windows 8.1 Pro |
0.67% |
|
Windows Vista Business |
0.67% |
|
Windows 7 Enterprise |
0.67% |
|
Distribution by country
United States installs about 61.49% of Malwarebytes Anti-Malware.
Distribution by PC manufacturer
PC Manufacturer | distribution |
ASUS |
21.37% |
|
Hewlett-Packard |
21.37% |
|
Dell |
16.79% |
|
Toshiba |
15.27% |
|
Acer |
6.11% |
|
Lenovo |
4.58% |
|
GIGABYTE |
3.05% |
|
Sony |
3.05% |
|
Intel |
3.05% |
|
Samsung |
1.53% |
|
Gateway |
1.53% |
|
MSI |
1.53% |
|
American Megatrends |
0.76% |
|