mbae-svc.exe
Malwarebytes Anti-Exploit by Malwarebytes Corporation (Signed)
| Version: | 1.03.1.1220 |
| MD5: | 4bc55ed4e547ad01f692853ae208461a |
| SHA1: | 3c34f44ba3697fe1d0b71dfcb808d50ebb297875 |
Overview
mbae-svc.exe runs as a service under the name Malwarebytes Anti-Exploit Service (MbaeSvc) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Malwarebytes Corporation which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 7 Home Premium (6.1.7601.65536).
Details
| File name: | mbae-svc.exe |
| Publisher: | Malwarebytes Corporation |
| Product name: | Malwarebytes Anti-Exploit |
| Description: | Malwarebytes Anti-Exploit Service |
| Typical file path: | C:\Program Files\malwarebytes anti-exploit\mbae-svc.exe |
| File version: | 1.03.1.1220 |
| Size: | 352.14 KB (360,592 bytes) |
| Build date: | 6/4/2014 8:46 AM |
| Certificate |
| Issued to: | Malwarebytes Corporation |
| Authority (CA): | VeriSign |
| Effective date: | Tuesday, April 30, 2013 |
| Expiration date: | Monday, June 20, 2016 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'MbaeSvc' (Malwarebytes Anti-Exploit Service)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00006962% | |
| Kernel CPU: | 0.00002916% | |
| User CPU: | 0.00004046% | |
| Kernel CPU time: | 499 ms/min | |
| CPU cycles: | 436,687/sec | |
| Memory |
| Private memory: | 5.16 MB | |
| Private (maximum): | 10.23 MB | |
| Private (minimum): | 10.02 MB | |
| Non-paged memory: | 5.16 MB | |
| Virtual memory: | 65.45 MB | |
| Virtual memory (peak): | 70.77 MB | |
| Working set: | 10.22 MB | |
| Working set (peak): | 10.38 MB | |
| Page faults: | 433,824/min | |
| I/O |
| I/O read transfer: | 9.05 KB/sec | |
| I/O read operations: | 2/sec | |
| I/O write transfer: | 46 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 4 Bytes/sec | |
| I/O other operations: | 1/sec | |
| Resource allocations |
| Threads: | 10 | |
| Handles: | 130 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\malwarebytes anti-exploit\mbae-svc.exe" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | MbaeSvc |
| Display name: | Malwarebytes Anti-Exploit Service |
| Description: | “Malwarebytes Anti-Exploit Service” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| mbae-svc.exe (main module) |
| Total CPU: | 0.00017008% | |
| Kernel CPU: | 0.00006963% | |
| User CPU: | 0.00010046% | |
| CPU cycles: | 140,658/sec | |
| Memory: | 372 KB | |
| wow64.dll |
| Total CPU: | 0.00002260% | |
| Kernel CPU: | 0.00000753% | |
| User CPU: | 0.00001507% | |
| CPU cycles: | 51,012/sec | |
| Context switches: | 1/sec | |
| Memory: | 252 KB | |
| ntdll.dll |
| Total CPU: | 0.00000753% | |
| Kernel CPU: | 0.00000753% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 9/sec | |
| Memory: | 1.66 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
100.00% |
|
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
100.00% |
|
