How to remove RestoroSafeMode.exe

RestoroSafeMode.exe

The module RestoroSafeMode.exe has been detected as PUP.Restoro

RestoroSafeMode.exe
Product Name:

Restoro Safe Mode

Company Name:

Restoro

MD5: 58a0034a46abfbfbc3c4664293d4a23e
Size: 573 KB
First Published: 2020-06-02 10:55:00 (5 years ago)
Latest Published: 2025-04-06 23:01:28 (3 months ago)
Status: PUP.Restoro (on last analysis)
Analysis Date: 2025-04-06 23:01:28 (3 months ago)
Signed By: Restoro Ltd
Status: Valid
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
United States 8.6%
India 8.3%
Indonesia 8.0%
Egypt 7.0%
Germany 3.2%
Vietnam 2.9%
Pakistan 2.9%
United Kingdom 2.7%
Malaysia 2.7%
Philippines 2.1%
Algeria 2.1%
Romania 1.9%
Brazil 1.9%
Mexico 1.6%
Australia 1.6%
South Africa 1.6%
Spain 1.6%
Iraq 1.6%
Bangladesh 1.3%
Saudi Arabia 1.3%
Nigeria 1.3%
Croatia 1.3%
Canada 1.3%
Austria 1.1%
Denmark 1.1%
Nepal 1.1%
Italy 1.1%
Turkey 1.1%
Hungary 1.1%
Thailand 0.8%
France 0.8%
Argentina 0.8%
Taiwan 0.8%
Kenya 0.8%
Ethiopia 0.8%
Cambodia 0.8%
Serbia 0.8%
Jordan 0.8%
Poland 0.8%
Netherlands 0.8%
Bahrain 0.5%
Costa Rica 0.5%
Israel 0.5%
China 0.5%
United Arab Emirates 0.5%
Sweden 0.5%
Yemen 0.5%
Iran 0.5%
Greece 0.5%
Latvia 0.5%
Switzerland 0.5%
Sri Lanka 0.5%
Maldives 0.5%
Morocco 0.5%
Portugal 0.5%
Bolivia 0.5%
Tanzania 0.3%
Uganda 0.3%
Ukraine 0.3%
Iceland 0.3%
Zambia 0.3%
Syria 0.3%
Angola 0.3%
Belgium 0.3%
Kazakhstan 0.3%
Mongolia 0.3%
Oman 0.3%
Kuwait 0.3%
Papua New Guinea 0.3%
Ecuador 0.3%
South Korea 0.3%
undefined 0.3%
Chile 0.3%
Former Yugoslav Republic of Macedonia 0.3%
Ireland 0.3%
Japan 0.3%
Liberia 0.3%
Puerto Rico 0.3%
Lithuania 0.3%
Bulgaria 0.3%
Peru 0.3%
New Zealand 0.3%
Cuba 0.3%
Windows 10 74.3%
Windows 7 19.0%
Windows 8.1 3.5%
Windows 8 1.2%
Windows XP 0.7%
Windows Vista 0.5%
Windows Server 2012 R2 0.5%
Windows Server 2008 R2 0.2%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000038af

PE Sections:

Name Size of data MD5
.text 29696 419d4e1be1ac35a5db9c47f553b27cea
.rdata 11264 cca1ca3fbf99570f6de9b43ce767f368
.data 512 77f0839f8ebea31040e462523e1c770e
.ndata 0 00000000000000000000000000000000
.rsrc 149504 eb51909b49df372862db7853b6396cc7
.reloc 4096 cd7258217b95b4c71b61774a365e022a

More information:

Download GridinSoft Anti-Malware - Removal tool for RestoroSafeMode.exe
­