SBAMTray.exe

GFI Business Agent by GFI Software (Florida) Inc. (Signed)

Remove SBAMTray.exe

Version:	6.0.5481
MD5:	163f6f7c001a7530e401666e9e953aaa
SHA1:	d6e74eded944ee2f78ac71d28f3ead873b231a34
SHA256:	d1ed99808b7bc22c4cd99ecba679200ef80fb4c448b52e3709c63ce1e72c5518

Overview

sbamtray.exe executes as a process with the local user's privileges typically within the context of its parent sbamsvc.exe (GFI AntiMalware Common SDK Merge Module by GFI Software (Florida) Inc.). It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). This is typically installed with the program GFI Business Agent published by GFI Software. The file is digitally signed by GFI Software (Florida) Inc. which was issued by the VeriSign certificate authority (CA).

Details

File name:	sbamtray.exe
Publisher:	GFI Software
Product name:	GFI Business Agent
Description:	SBAMTray Application
Typical file path:	C:\Program Files\gfi software\gfiagent\sbamtray.exe
File version:	6.0.5481
Size:	3.08 MB (3,226,504 bytes)
Certificate
Issued to:	GFI Software (Florida) Inc.
Authority (CA):	VeriSign
Effective date:	Wednesday, January 25, 2012
Expiration date:	Sunday, January 25, 2015
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

GFI Business Agent

GFI Software

9% remove

“GFI VIPRE® Antivirus Business is a scalable Endpoint Solution that protects your networked machines from all types of malware and viruses and includes a firewall (Premium only). Its Bad URL Blocking feature under web filtering prevents end users from accidentally opening known bad websites (Premium only). VIPRE Business can be installed at more than one physical location and still be centrally managed. Its policy-based architecture allo...”

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'SBAMTray' → "C:\Program Files\GFI Software\GFIAgent\SBAMTray.exe"

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00057087%	0.028634%
Kernel CPU:	0.00040307%	0.013761%
User CPU:	0.00016779%	0.014873%
Kernel CPU time:	1,120 ms/min	100,923,805ms/min
CPU cycles:	385,007/sec	17,470,203/sec
Context switches:	3/sec	284/sec
Memory
Private memory:	2.57 MB	21.59 MB
Private (maximum):	6.37 MB
Private (minimum):	2.91 MB
Non-paged memory:	2.57 MB	21.59 MB
Virtual memory:	88.38 MB	140.96 MB
Virtual memory (peak):	100.74 MB	169.69 MB
Working set:	4.01 MB	18.61 MB
Working set (peak):	8.22 MB	37.95 MB
Page faults:	36,449/min	2,039/min
I/O
I/O write transfer:	51 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	3 Bytes/sec	448.09 KB/min
I/O other operations:	2/sec	1,671/min
Resource allocations
Threads:	3	12
Handles:	136	600
GUI GDI count:	89	103
GUI GDI peak:	90	142
GUI USER count:	25	49
GUI USER peak:	26	71

Process properties

Integrety level:	Undefined
Platform:	64-bit
Command line:	"C:\Program Files\gfi software\gfiagent\sbamtray.exe"
Owner:	User
Parent process:	sbamsvc.exe (GFI AntiMalware Common SDK Merge Module by GFI Software (Florida) Inc.)

Threads

Averages

SBAMTray.exe (main module)
Total CPU:	0.00493449%	0.272967%
Kernel CPU:	0.00275022%	0.107585%
User CPU:	0.00218428%	0.165382%
CPU cycles:	344,334/sec	5,741,424/sec
Context switches:	3/sec	79/sec
Memory:	3.13 MB	1.16 MB
wow64.dll
Total CPU:	0.00026273%
Kernel CPU:	0.00000000%
User CPU:	0.00026273%
CPU cycles:	1,119/sec
Memory:	276 KB