How to remove RestoroSafeMode.exe
- File Details
- Overview
- Analysis
RestoroSafeMode.exe
The module RestoroSafeMode.exe has been detected as PUP.Restoro
File Details
Product Name: |
|
Company Name: |
|
MD5: |
58a0034a46abfbfbc3c4664293d4a23e |
Size: |
573 KB |
First Published: |
2020-06-02 10:55:00 (5 years ago) |
Latest Published: |
2025-04-06 23:01:28 (3 months ago) |
Status: |
PUP.Restoro (on last analysis) |
|
Analysis Date: |
2025-04-06 23:01:28 (3 months ago) |
Overview
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
United States |
8.6% |
|
India |
8.3% |
|
Indonesia |
8.0% |
|
Egypt |
7.0% |
|
Germany |
3.2% |
|
Vietnam |
2.9% |
|
Pakistan |
2.9% |
|
United Kingdom |
2.7% |
|
Malaysia |
2.7% |
|
Philippines |
2.1% |
|
Algeria |
2.1% |
|
Romania |
1.9% |
|
Brazil |
1.9% |
|
Mexico |
1.6% |
|
Australia |
1.6% |
|
South Africa |
1.6% |
|
Spain |
1.6% |
|
Iraq |
1.6% |
|
Bangladesh |
1.3% |
|
Saudi Arabia |
1.3% |
|
Nigeria |
1.3% |
|
Croatia |
1.3% |
|
Canada |
1.3% |
|
Austria |
1.1% |
|
Denmark |
1.1% |
|
Nepal |
1.1% |
|
Italy |
1.1% |
|
Turkey |
1.1% |
|
Hungary |
1.1% |
|
Thailand |
0.8% |
|
France |
0.8% |
|
Argentina |
0.8% |
|
Taiwan |
0.8% |
|
Kenya |
0.8% |
|
Ethiopia |
0.8% |
|
Cambodia |
0.8% |
|
Serbia |
0.8% |
|
Jordan |
0.8% |
|
Poland |
0.8% |
|
Netherlands |
0.8% |
|
Bahrain |
0.5% |
|
Costa Rica |
0.5% |
|
Israel |
0.5% |
|
China |
0.5% |
|
United Arab Emirates |
0.5% |
|
Sweden |
0.5% |
|
Yemen |
0.5% |
|
Iran |
0.5% |
|
Greece |
0.5% |
|
Latvia |
0.5% |
|
Switzerland |
0.5% |
|
Sri Lanka |
0.5% |
|
Maldives |
0.5% |
|
Morocco |
0.5% |
|
Portugal |
0.5% |
|
Bolivia |
0.5% |
|
Tanzania |
0.3% |
|
Uganda |
0.3% |
|
Ukraine |
0.3% |
|
Iceland |
0.3% |
|
Zambia |
0.3% |
|
Syria |
0.3% |
|
Angola |
0.3% |
|
Belgium |
0.3% |
|
Kazakhstan |
0.3% |
|
Mongolia |
0.3% |
|
Oman |
0.3% |
|
Kuwait |
0.3% |
|
Papua New Guinea |
0.3% |
|
Ecuador |
0.3% |
|
South Korea |
0.3% |
|
undefined |
0.3% |
|
Chile |
0.3% |
|
Former Yugoslav Republic of Macedonia |
0.3% |
|
Ireland |
0.3% |
|
Japan |
0.3% |
|
Liberia |
0.3% |
|
Puerto Rico |
0.3% |
|
Lithuania |
0.3% |
|
Bulgaria |
0.3% |
|
Peru |
0.3% |
|
New Zealand |
0.3% |
|
Cuba |
0.3% |
|
Windows 10 |
74.3% |
|
Windows 7 |
19.0% |
|
Windows 8.1 |
3.5% |
|
Windows 8 |
1.2% |
|
Windows XP |
0.7% |
|
Windows Vista |
0.5% |
|
Windows Server 2012 R2 |
0.5% |
|
Windows Server 2008 R2 |
0.2% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000038af |
Name |
Size of data |
MD5 |
.text |
29696 |
419d4e1be1ac35a5db9c47f553b27cea |
.rdata |
11264 |
cca1ca3fbf99570f6de9b43ce767f368 |
.data |
512 |
77f0839f8ebea31040e462523e1c770e |
.ndata |
0 |
00000000000000000000000000000000 |
.rsrc |
149504 |
eb51909b49df372862db7853b6396cc7 |
.reloc |
4096 |
cd7258217b95b4c71b61774a365e022a |