How to remove ROBoot64.exe
- File Details
- Overview
- Analysis
ROBoot64.exe
The module ROBoot64.exe has been detected as PUP.Solvusoft
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
4233f5196ad66ed816848843fcd7ea11 |
| Size: |
19 KB |
| First Published: |
2017-05-22 10:19:35 (8 years ago) |
| Latest Published: |
2023-10-10 23:05:30 (2 years ago) |
| Status: |
PUP.Solvusoft (on last analysis) |
|
| Analysis Date: |
2023-10-10 23:05:30 (2 years ago) |
Overview
| %windir%\system32 |
| %sysdrive%\adwcleaner\quarantine\8yfogkjxrr |
| %sysdrive%\adwcleaner\quarantine\jboh8s4kwi |
| %sysdrive%\system recovery\repair\backup |
| %sysdrive%\adwcleaner\quarantine\nisnrmwuln |
| %system% |
| %sysdrive%\adwcleaner\quarantine |
| %desktop%\ago\winthruster\winthruster_2014 |
| %desktop%\ago\winthruster\winthruster_2014\winthruster_2014 |
| %sysdrive%\$windows.~bt\newos\windows |
| roboot64.exe |
| ROBoot64.exe |
| 40F32921C92EC0F4F7587EF828B068E9633A02E9.exe |
| ROBoot64-2017-10-06_15-00-37-548.exe |
| Taiwan |
35.1% |
|
| Turkey |
20.1% |
|
| Russia |
5.7% |
|
| Poland |
5.6% |
|
| Hong Kong |
3.2% |
|
| Czech Republic |
2.9% |
|
| South Korea |
2.9% |
|
| Italy |
2.6% |
|
| Ukraine |
2.1% |
|
| Brazil |
1.8% |
|
| Iran |
1.6% |
|
| Vietnam |
1.3% |
|
| France |
1.3% |
|
| United States |
0.9% |
|
| Greece |
0.9% |
|
| Spain |
0.9% |
|
| Hungary |
0.8% |
|
| Germany |
0.8% |
|
| Japan |
0.8% |
|
| Slovakia |
0.6% |
|
| Zambia |
0.6% |
|
| Thailand |
0.4% |
|
| Portugal |
0.4% |
|
| Australia |
0.4% |
|
| Egypt |
0.4% |
|
| Argentina |
0.4% |
|
| Sweden |
0.4% |
|
| Macau |
0.3% |
|
| Romania |
0.3% |
|
| Azerbaijan |
0.3% |
|
| Netherlands |
0.3% |
|
| Ecuador |
0.3% |
|
| Malaysia |
0.3% |
|
| Indonesia |
0.3% |
|
| Switzerland |
0.3% |
|
| Mexico |
0.3% |
|
| Algeria |
0.3% |
|
| Philippines |
0.1% |
|
| Oman |
0.1% |
|
| Canada |
0.1% |
|
| Belarus |
0.1% |
|
| Uruguay |
0.1% |
|
| Latvia |
0.1% |
|
| Bulgaria |
0.1% |
|
| Palestine |
0.1% |
|
| India |
0.1% |
|
| Kyrgyzstan |
0.1% |
|
| South Africa |
0.1% |
|
| Côte d'Ivoire |
0.1% |
|
| Myanmar |
0.1% |
|
| Tunisia |
0.1% |
|
| China |
0.1% |
|
| Kazakhstan |
0.1% |
|
| Congo |
0.1% |
|
| Israel |
0.1% |
|
| El Salvador |
0.1% |
|
| British Virgin Islands |
0.1% |
|
| Windows 10 |
45.7% |
|
| Windows 7 |
41.8% |
|
| Windows 8.1 |
10.2% |
|
| Windows 8 |
2.1% |
|
| Windows Vista |
0.3% |
|
Analysis
| Subsystem: |
Native |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000100000000 |
| Entry Address: |
0x0000247c |
| Name |
Size of data |
MD5 |
| .text |
9728 |
219fecd3cfda4d8b10045f836868dcf3 |
| .data |
512 |
043c46095689123e1f5be96c109c2f46 |
| .pdata |
512 |
522e7ece45fc23ef8ecf7d65ea5148e5 |
| .rsrc |
1536 |
897db0f45a8e15165a9ee3089b2a5a0e |
| .reloc |
512 |
4c69442f94342f01c9eecc224c99f9b1 |
