Should I block it?

No, this file is 100% safe to run.

Relationships

PE file structure

Show functions

Import table

advapi32.dll

CryptAcquireContextW, CryptCreateHash, CryptDecrypt, CryptDeriveKey, CryptDestroyHash, CryptDestroyKey, CryptGetHashParam, CryptHashData, CryptReleaseContext, GetUserNameW, ImpersonateLoggedOnUser, InitializeSecurityDescriptor, RegCloseKey, RegOpenCurrentUser, RegOpenKeyExW, RegQueryValueExW, RegisterServiceCtrlHandlerW, RevertToSelf, SetSecurityDescriptorDacl, SetServiceStatus, StartServiceCtrlDispatcherW

kernel32.dll

AddAtomA, CloseHandle, CreateEventW, CreateFileW, CreateSemaphoreA, CreateThread, DeviceIoControl, EnterCriticalSection, ExitProcess, FindAtomA, FindClose, FindFirstFileW, FindNextFileW, FreeLibrary, GetAtomNameA, GetFileSizeEx, GetLastError, GetLongPathNameW, GetProcAddress, GetSystemDirectoryW, GetVersionExW, GetWindowsDirectoryW, InitializeCriticalSection, InterlockedDecrement, InterlockedIncrement, LeaveCriticalSection, LoadLibraryW, MultiByteToWideChar, OpenEventW, OutputDebugStringW, QueryDosDeviceW, ReadFile, ReleaseSemaphore, ResetEvent, SetEvent, SetLastError, SetNamedPipeHandleState, SetUnhandledExceptionFilter, Sleep, TlsAlloc, TlsFree, TlsGetValue, TlsSetValue, TransactNamedPipe, WaitForSingleObject, WaitNamedPipeW, lstrcatW, lstrcmpW

msvcrt.dll

DllMain

shell32.dll

SHGetFolderPathW

shlwapi.dll

SHGetValueA, SHRegGetPathA

user32.dll

CharUpperW

userenv.dll

ExpandEnvironmentStringsForUserW, GetProfilesDirectoryW

version.dll

GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW

MBAMService.exe

Malwarebytes' Anti-Malware by Malwarebytes (Signed)

Remove MBAMService.exe

Version:	1.00
MD5:	7082d00e4dea045672e3998dc8a6066a
SHA1:	219d05dd9dfb9035956b08bd886d4e8b1a61a6a2
SHA256:	7d013d7ef786a82c1f56bbc394f482204e7ea838506b70cbc915dc695bdc4dc2

Overview

mbamservice.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges). The file is digitally signed by Malwarebytes which was issued by the The USERTRUST Network certificate authority (CA). This particular version is usually found on Microsoft Windows XP (5.1.2600.196608).

Details

File name:	mbamservice.exe
Publisher:	Malwarebytes Corporation
Product name:	Malwarebytes' Anti-Malware
Typical file path:	C:\Program Files\malwarebytes' anti-malware\mbamservice.exe
File version:	1.00
Size:	166.64 KB (170,640 bytes)
Certificate
Issued to:	Malwarebytes
Authority (CA):	The USERTRUST Network
Effective date:	Monday, September 22, 2008
Expiration date:	Wednesday, September 23, 2009
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.04732508%	0.028634%
Kernel CPU:	0.01136109%	0.013761%
User CPU:	0.03596399%	0.014873%
Kernel CPU time:	3,359 ms/min	100,923,805ms/min
Context switches:	16/sec	284/sec
Memory
Private memory:	17.22 MB	21.59 MB
Private (maximum):	19.13 MB
Private (minimum):	16.3 MB
Non-paged memory:	17.22 MB	21.59 MB
Virtual memory:	56.25 MB	140.96 MB
Virtual memory (peak):	81.89 MB	169.69 MB
Working set:	19.21 MB	18.61 MB
Working set (peak):	25.54 MB	37.95 MB
Page faults:	69,338/min	2,039/min
I/O
I/O read transfer:	243.07 KB/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	7.79 KB/sec	448.09 KB/min
I/O other operations:	250/sec	1,671/min
Resource allocations
Threads:	3	12
Handles:	128	600
GUI GDI count:	4	103
GUI USER count:	1	49

Process properties

Integrety level:	Undefined
Platform:	32-bit
Command line:	"C:\Program Files\malwarebytes' anti-malware\mbamservice.exe"
Owner:	SYSTEM
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads