How to remove WinExpandSetup_downrealm.exe

WinExpandSetup_downrealm.exe

The module WinExpandSetup_downrealm.exe has been detected as Adware.Kraddare

WinExpandSetup_downrealm.exe
Product Name:

WinExpandSetup_downrealm

Company Name:

CJMooter

MD5: 940e75fa7d2fdf6de4a0ae120fb89fed
Size: 536 KB
First Published: 2017-06-01 07:05:35 (7 years ago)
Latest Published: 2018-11-06 14:13:46 (6 years ago)
Status: Adware.Kraddare (on last analysis)
Analysis Date: 2018-11-06 14:13:46 (6 years ago)
Signed By: CJ Mooter Inc.
Status: Valid
%sysdrive%\windows
%windir%
87.5%
6.3%
6.3%
Windows 7 56.3%
Windows 10 37.5%
Windows 8.1 6.3%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00033511

PE Sections:

Name Size of data MD5
.text 314880 7154b1df105de4ab51282fd50782b80a
.rdata 69120 90318b6757303708ca6ee70720c77e61
.data 16896 f06b6cf882428adb2b59c5e68d99d6f8
.rsrc 100352 4e0d28e8e59daf75e55b73389c41e8b8
.reloc 39424 042c0c20b2e318fe60bdb6cd50e7a92b

More information:

Download GridinSoft Anti-Malware - Removal tool for WinExpandSetup_downrealm.exe