How to remove ExtraRAM.exe
- File Details
- Overview
- Analysis
ExtraRAM.exe
The module ExtraRAM.exe has been detected as Trojan.Gen
File Details
| MD5: |
296bb95222cadfcf5c032d78d3f52736 |
| Size: |
541 KB |
| First Published: |
2017-05-21 05:04:38 (7 years ago) |
| Latest Published: |
2018-07-05 23:12:07 (6 years ago) |
| Status: |
Trojan.Gen (on last analysis) |
|
| Analysis Date: |
2018-07-05 23:12:07 (6 years ago) |
| %programfiles%\extra ram |
| %localappdata%\spoon\containers\sandboxes\0a9991bcf4f34aaabea70e0e977ab45e\local\modified\@sysdrive@\extraram |
| %programfiles% |
| extraram.exe |
| ExtraRAM.exe |
| Windows 7 |
81.8% |
|
| Windows 10 |
18.2% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0006fed0 |
| Name |
Size of data |
MD5 |
| CODE |
455168 |
5e64c0c75a08fabab3b481184605174d |
| DATA |
6144 |
c659d8d636cbbb1e592516f7891adb20 |
| BSS |
0 |
00000000000000000000000000000000 |
| .idata |
9216 |
695706ad649a288e3557475ccbfa92db |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
7da92c1fbcf5686036f3cc2c99d558d4 |
| .reloc |
32768 |
f2d1900d48baeae8015a3d4e7734ca1c |
| .rsrc |
49664 |
b2ce06dcd73f1175e44f37da68999f21 |
