home

CleanRAM.exe

WinLube (Version 2.06)

Script Soft eK

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘WinLube RAM Monitor’. This is installed with WinLube 2.
Publisher:
Script Soft - www.scriptsoft.de  (signed by Script Soft eK)

Product:
WinLube (Version 2.06)

Description:
WinLube

Version:
2.00

MD5:
afe3593aa8e2b23214f0e7cfa458335d

SHA-1:
3b6ac62a122b2b4d8f25207113e226ae7f73a4f1

SHA-256:
3d3822fa696f080703298ad192e45c87a5f31b75cddb1639c5e341c9ce73b550

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 11:34:27 PM UTC  (a few moments ago)

File size:
145.1 KB (148,592 bytes)

Product version:
2.06

Copyright:
© 2007-2015 Script Soft

Original file name:
CleanRAM.exe

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\Program Files\winlube\cleanram.exe

Digital Signature
Signed by:
Script Soft eK

Authority:
COMODO CA Limited

Valid from:
2/27/2012 1:00:00 AM

Valid to:
2/28/2016 12:59:59 AM

Subject:
CN=Script Soft eK, O=Script Soft eK, STREET=Moosbergstrasse 97 H, L=Darmstadt, S=Hessen, PostalCode=64285, C=DE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00E1958FD770A48348341813B67F36F00E

File PE Metadata
Compilation timestamp:
11/28/2015 10:27:09 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:lsDPtqvzJNrMWhOMDzXGkMi2tfXeh20YdR+:WtqrHrMJY6i2tfmp

Entry address:
0xE97E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
50.5 KB (51,712 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WinLube RAM Monitor

Command:
C:\Program Files\winlube\cleanram.exe


The file CleanRAM.exe has been discovered within the following program.

WinLube 2  by Script Soft
www.scriptsoft.com
About 2% of users remove it
 
Powered by Should I Remove It?

Scan CleanRAM.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.