TMBMSRV.exe
Trend Micro AEGIS by Trend Micro (Signed)
Overview
tmbmsrv.exe has 2 known versions, the most recent one is 2.80.0.1063. It is started as a Windows Service called 'TMBMServer' with the name 'TMBMServer' and described as “Manages the Trend Micro unauthorized change prevention feature”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 447.26 KB. It is an authenticode code-signed executable issued to Trend Micro by the certification authority VeriSign. During the process's lifecycle, the typical CPU resource utilization is about 0.0022% including both foreground and background operations, the average private memory consumption is about 16.34 MB with the maximum memory reaching around 23.19 MB. Addionally, typically read and write I/O disk operations is about 443.36 KB per minute for reads and 950 Bytes per minute for writes.
Details |
File name: | tmbmsrv.exe |
Publisher: | Trend Micro Inc. |
Product name: | Trend Micro AEGIS |
Description: | Manages the Trend Micro unauthorized change prevention feature |
Typical file path: | C:\Program Files\trend micro\bm\tmbmsrv.exe |
Certificate |
Issued to: | Trend Micro |
Authority (CA): | VeriSign |
Effective date: | Tuesday, January 15, 2008 |
Expiration date: | Wednesday, February 16, 2011 |
Windows Service |
Service name: | TMBMServer |
Display name: | TMBMServer |
Description: | “Manages the Trend Micro unauthorized change prevention feature” |
Type: | Win32OwnProcess |
Behaviors
(Note, the behaviors below are for all versions of tmbmsrv.exe, select a unique version for details.)
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- TMBMServer
- 'TMBMServer' (Trend Micro Unauthorized Change Prevention Service)
All file variations of tmbmsrv.exe