Should I block it?
No, this file is 100% safe to run.
Additional versions
(Note, Trend Micro publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
TMBMSRV.exe
Trend Micro AEGIS by Trend Micro (Signed)
| Version: | 2.80.0.1063 |
| MD5: | b365e817e398ff2ac5706eab232ef6c1 |
| SHA1: | f9baf6698ec056cc57a0d749206ff2895e03ce8a |
| SHA256: | 88cd9fcac74758b88edf199d2a11acf1e0f89f43cc22ef7718d5c196f064ad83 |
Overview
tmbmsrv.exe runs as a service under the name TMBMServer (TMBMServer) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Trend Micro which was issued by the VeriSign certificate authority (CA).
Details
| File name: | tmbmsrv.exe |
| Publisher: | Trend Micro Inc. |
| Product name: | Trend Micro AEGIS |
| Description: | Manages the Trend Micro unauthorized change prevention feature |
| Typical file path: | C:\Program Files\trend micro\bm\tmbmsrv.exe |
| File version: | 2.80.0.1063 |
| Product version: | 2.80 |
| Size: | 337.26 KB (345,352 bytes) |
| Certificate |
| Issued to: | Trend Micro |
| Authority (CA): | VeriSign |
| Effective date: | Tuesday, January 15, 2008 |
| Expiration date: | Wednesday, February 16, 2011 |
| Digital DNA |
| PE subsystem: | Windows Console |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- TMBMServer
- 'TMBMServer' (Trend Micro Unauthorized Change Prevention Service)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00216370% | |
| Kernel CPU: | 0.00151439% | |
| User CPU: | 0.00064931% | |
| Kernel CPU time: | 23,859 ms/min | |
| Context switches: | 86/sec | |
| Memory |
| Private memory: | 16.34 MB | |
| Private (maximum): | 23.19 MB | |
| Private (minimum): | 19.16 MB | |
| Non-paged memory: | 16.34 MB | |
| Virtual memory: | 132.78 MB | |
| Virtual memory (peak): | 188.44 MB | |
| Working set: | 19.27 MB | |
| Working set (peak): | 61.35 MB | |
| Page faults: | 89,653/min | |
| I/O |
| I/O read transfer: | 443.36 KB/sec | |
| I/O read operations: | 6/sec | |
| I/O write transfer: | 950 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 30.02 KB/sec | |
| I/O other operations: | 827/sec | |
| Resource allocations |
| Threads: | 39 | |
| Handles: | 303 | |
| GUI GDI count: | 5 | |
| GUI USER count: | 3 | |
Process properties
| Integrety level: | Undefined |
| Platform: | 32-bit |
| Command line: | "C:\Program Files\trend micro\bm\tmbmsrv.exe" /service |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | TMBMServer |
| Display name: | TMBMServer |
| Description: | “Manages the Trend Micro unauthorized change prevention feature” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (by Microsoft) |
Threads
Averages
| tmcomeng.dll (Trend Micro AEGIS by Trend Micro) |
| Total CPU: | 0.10761545% | |
| Kernel CPU: | 0.01558031% | |
| User CPU: | 0.09203513% | |
| Context switches: | 9/sec | |
| Memory: | 1.18 MB | |
| TMBMSRV.exe (main module) |
| Total CPU: | 0.01182948% | |
| Kernel CPU: | 0.00579109% | |
| User CPU: | 0.00603839% | |
| Context switches: | 14/sec | |
| Memory: | 348 KB | |
| ADVAPI32.dll |
| Total CPU: | 0.00358583% | |
| Kernel CPU: | 0.00074190% | |
| User CPU: | 0.00284394% | |
| Memory: | 688 KB | |
| ntdll.dll |
| Total CPU: | 0.00006278% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00006278% | |
| Memory: | 736 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
33.33% |
|
| Microsoft Windows XP |
33.33% |
|
| Windows 7 Starter |
33.33% |
|
Distribution by country
United States installs about 33.33% of Trend Micro AEGIS.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
100.00% |
|
