How to remove RestoroScanner.exe
- File Details
- Overview
- Analysis
RestoroScanner.exe
The module RestoroScanner.exe has been detected as PUP.Restoro
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
2910c02afd1a159971f0904efe9dad94 |
| Size: |
6 MB |
| First Published: |
2020-04-07 12:16:55 (5 years ago) |
| Latest Published: |
2021-01-02 05:10:42 (4 years ago) |
| Status: |
PUP.Restoro (on last analysis) |
|
| Analysis Date: |
2021-01-02 05:10:42 (4 years ago) |
Overview
| %programfiles%\restoro |
| %sysdrive%\system volume information\_restore{e7e06b49-db90-458c-bb83-2cd6f524cd3b} |
| %programfiles%\restoro |
| %programfiles%\restoro |
| %programfiles%\restoro |
| %programfiles%\restoro |
| %programfiles%\restoro |
| %programfiles%\restoro |
| %programfiles%\restoro |
| %programfiles%\restoro |
| Egypt |
15.4% |
|
| Indonesia |
15.4% |
|
| Pakistan |
7.7% |
|
| Tanzania |
7.7% |
|
| Switzerland |
7.7% |
|
| South Africa |
7.7% |
|
| Sri Lanka |
7.7% |
|
| France |
3.8% |
|
| Spain |
3.8% |
|
| Bangladesh |
3.8% |
|
| Russia |
3.8% |
|
| Algeria |
3.8% |
|
| Saudi Arabia |
3.8% |
|
| Italy |
3.8% |
|
| Yemen |
3.8% |
|
| Windows 7 |
54.8% |
|
| Windows XP |
12.9% |
|
| Windows 8 |
12.9% |
|
| Windows 10 |
9.7% |
|
| Windows 8.1 |
9.7% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x003f47f5 |
| Name |
Size of data |
MD5 |
| .text |
4669952 |
c4b7c00a8b8134767cdfbbeda087a994 |
| .rdata |
1753600 |
ed3b6fb0109bc92b5919d0f00f815e15 |
| .data |
354816 |
231f1c64c87d7bdaffe2c1fa6d1c181b |
| .rsrc |
51200 |
18b37e9a98e152fc06c1f8f36232c0f1 |
| .reloc |
274944 |
f2d3e44f709c201f81fa6d0634b0eeeb |
