How to remove Restoro.exe
- File Details
- Overview
- Analysis
Restoro.exe
The module Restoro.exe has been detected as PUP.Restoro
File Details
Product Name: |
|
Company Name: |
|
MD5: |
5755d55aad262408a116bf77ec8da51d |
Size: |
909 KB |
First Published: |
2020-04-04 11:38:02 (5 years ago) |
Latest Published: |
2025-07-08 23:00:45 (a month ago) |
Status: |
PUP.Restoro (on last analysis) |
|
Analysis Date: |
2025-07-08 23:00:45 (a month ago) |
Overview
%profile% |
%profile% |
%profile% |
%programfiles% |
%profile% |
%programfiles% |
%sysdrive%\internet download manager |
%sysdrive%\$recycle.bin |
%profile%\downloads\garbage |
%temp% |
India |
7.8% |
|
Indonesia |
7.5% |
|
United States |
6.8% |
|
Germany |
4.0% |
|
Egypt |
3.4% |
|
Malaysia |
3.3% |
|
Italy |
2.7% |
|
Vietnam |
2.6% |
|
Pakistan |
2.6% |
|
Philippines |
2.5% |
|
Thailand |
2.3% |
|
United Kingdom |
2.0% |
|
South Africa |
1.9% |
|
Ukraine |
1.8% |
|
Australia |
1.8% |
|
Netherlands |
1.7% |
|
Spain |
1.7% |
|
United Arab Emirates |
1.5% |
|
France |
1.4% |
|
Turkey |
1.4% |
|
Austria |
1.4% |
|
Colombia |
1.3% |
|
Serbia |
1.3% |
|
Iran |
1.3% |
|
Croatia |
1.2% |
|
Kenya |
1.2% |
|
Mexico |
1.2% |
|
Poland |
1.1% |
|
Switzerland |
1.1% |
|
Nepal |
1.1% |
|
Bangladesh |
0.9% |
|
Algeria |
0.9% |
|
Ethiopia |
0.9% |
|
Jordan |
0.9% |
|
Romania |
0.8% |
|
Bulgaria |
0.8% |
|
Saudi Arabia |
0.8% |
|
Canada |
0.7% |
|
Nigeria |
0.7% |
|
Greece |
0.7% |
|
Brazil |
0.7% |
|
Denmark |
0.7% |
|
Iraq |
0.7% |
|
Hungary |
0.7% |
|
Costa Rica |
0.7% |
|
Sweden |
0.7% |
|
Peru |
0.6% |
|
Taiwan |
0.6% |
|
Cambodia |
0.6% |
|
Russia |
0.6% |
|
Lithuania |
0.5% |
|
Czech Republic |
0.5% |
|
Portugal |
0.5% |
|
Bahrain |
0.5% |
|
Yemen |
0.5% |
|
Sri Lanka |
0.5% |
|
South Korea |
0.5% |
|
Bosnia and Herzegovina |
0.4% |
|
Kuwait |
0.4% |
|
Belgium |
0.4% |
|
Argentina |
0.4% |
|
Syria |
0.4% |
|
Venezuela |
0.4% |
|
Tanzania |
0.4% |
|
Hong Kong |
0.4% |
|
Papua New Guinea |
0.4% |
|
Zimbabwe |
0.4% |
|
Israel |
0.4% |
|
Finland |
0.4% |
|
Mongolia |
0.4% |
|
Morocco |
0.2% |
|
Latvia |
0.2% |
|
Monaco |
0.2% |
|
New Zealand |
0.2% |
|
Norway |
0.2% |
|
Panama |
0.2% |
|
Estonia |
0.2% |
|
Uganda |
0.2% |
|
Iceland |
0.2% |
|
Zambia |
0.2% |
|
Kazakhstan |
0.2% |
|
Oman |
0.2% |
|
Slovakia |
0.1% |
|
Former Yugoslav Republic of Macedonia |
0.1% |
|
Puerto Rico |
0.1% |
|
Fiji |
0.1% |
|
Dominican Republic |
0.1% |
|
China |
0.1% |
|
Angola |
0.1% |
|
Lebanon |
0.1% |
|
Chile |
0.1% |
|
Ecuador |
0.1% |
|
Maldives |
0.1% |
|
undefined |
0.1% |
|
Windows 10 |
75.2% |
|
Windows 7 |
17.2% |
|
Windows 8.1 |
3.3% |
|
Windows XP |
2.0% |
|
Windows 8 |
1.2% |
|
Windows Vista |
0.4% |
|
Windows Server 2012 R2 |
0.3% |
|
Windows Server 2008 R2 |
0.2% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000039e3 |
Name |
Size of data |
MD5 |
.text |
28672 |
f569e353af0ed51bf4c216faa9bed4e7 |
.rdata |
11264 |
91eee43954e068e650f7b73a8b0e6915 |
.data |
512 |
db9f7acbf1c3ddfe255077b699955dfa |
.ndata |
0 |
00000000000000000000000000000000 |
.rsrc |
311296 |
e9b531db8df8769fbfb310e9d1f35486 |
.reloc |
4096 |
f4ad22215006a677ade6a73cdeab789f |