How to remove RestoroAM.exe
- File Details
- Overview
- Analysis
RestoroAM.exe
The module RestoroAM.exe has been detected as PUP.Restoro
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
d7a1f97b9332467bd7bfd6f972913ec9 |
| Size: |
1 MB |
| First Published: |
2020-05-07 04:32:28 (5 years ago) |
| Latest Published: |
2021-02-20 04:18:33 (4 years ago) |
| Status: |
PUP.Restoro (on last analysis) |
|
| Analysis Date: |
2021-02-20 04:18:33 (4 years ago) |
Overview
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| Australia |
16.7% |
|
| United States |
16.7% |
|
| France |
16.7% |
|
| Germany |
8.3% |
|
| United Kingdom |
8.3% |
|
| Malaysia |
4.2% |
|
| Thailand |
4.2% |
|
| Kenya |
4.2% |
|
| Greece |
4.2% |
|
| Austria |
4.2% |
|
| Philippines |
4.2% |
|
| India |
4.2% |
|
| Argentina |
4.2% |
|
| Windows 10 |
87.5% |
|
| Windows 7 |
8.3% |
|
| Windows 8.1 |
4.2% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x001373db |
| Name |
Size of data |
MD5 |
| .text |
1460224 |
5b24c0c973b475f97cc44ee63a42e482 |
| .rdata |
314880 |
d7bdc64d011b35b39c9ad68c9663dcf0 |
| .data |
20992 |
a3b996b445230e1015c9805c20539b92 |
| .rsrc |
1536 |
aa60b9c98306db25ba80ce365cbb4aff |
| .reloc |
132608 |
e04cd936d4201d930ebb0f1840899baf |
