How to remove RAMExpert.exe
- File Details
- Overview
- Analysis
RAMExpert.exe
The module RAMExpert.exe has been detected as SUSP.XORed_MSDOS
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
a25c3e8ec548102ea7783a4b4f171b17 |
| Size: |
1 MB |
| First Published: |
2023-09-02 23:29:51 (2 years ago) |
| Latest Published: |
2023-09-02 23:29:51 (2 years ago) |
| Status: |
SUSP.XORed_MSDOS (on last analysis) |
|
| Analysis Date: |
2023-09-02 23:29:51 (2 years ago) |
| %sysdrive%\dx diplex backup data 0345-5222303\uninstal\ghost run\hiren_s_bootcd_winpe10_premium_edition\hiren_s_bootcd_winpe10_premium_edition\hbcd_pe_x64_build-190103\boot |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00011def |
| Name |
Size of data |
MD5 |
| .text |
70656 |
aaa1d461af54f8f216b4c9094ec84bc2 |
| .rdata |
12800 |
1359639b02bcb8f0a8743e6ead1c0030 |
| .data |
2048 |
9415c9c8dea3245d6d73c23393e27d8e |
| .rsrc |
176128 |
b83564b88aa81235f5a41ba7971eeb80 |
