How to remove roboot64.exe
- File Details
- Overview
- Analysis
roboot64.exe
The module roboot64.exe has been detected as PUP.Systweak
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
f6f916abec34343ac7902b248cdddb78 |
| Size: |
20 KB |
| First Published: |
2017-05-21 05:04:12 (8 years ago) |
| Latest Published: |
2024-06-16 23:02:47 (a year ago) |
| Status: |
PUP.Systweak (on last analysis) |
|
| Analysis Date: |
2024-06-16 23:02:47 (a year ago) |
Overview
| %windir%\system32 |
| %sysdrive%\windows.old\windows\system32 |
| %system% |
| %sysdrive%\adwcleaner\quarantine |
| %sysdrive%\vtroot\harddiskvolume4\windows |
| %system% |
| %system% |
| %system% |
| %system% |
| %system% |
| Russia |
15.7% |
|
| Brazil |
13.4% |
|
| Taiwan |
7.1% |
|
| South Korea |
5.5% |
|
| Spain |
5.5% |
|
| Thailand |
3.9% |
|
| Indonesia |
3.1% |
|
| Czech Republic |
3.1% |
|
| Vietnam |
3.1% |
|
| Netherlands |
2.4% |
|
| Argentina |
2.4% |
|
| Turkey |
2.4% |
|
| Poland |
2.4% |
|
| Mexico |
2.4% |
|
| Egypt |
2.4% |
|
| China |
1.6% |
|
| Iran |
1.6% |
|
| Chile |
1.6% |
|
| United States |
1.6% |
|
| France |
1.6% |
|
| Ukraine |
1.6% |
|
| Colombia |
1.6% |
|
| Paraguay |
1.6% |
|
| Hong Kong |
0.8% |
|
| Peru |
0.8% |
|
| Kazakhstan |
0.8% |
|
| Malaysia |
0.8% |
|
| Uruguay |
0.8% |
|
| Germany |
0.8% |
|
| Panama |
0.8% |
|
| Dominican Republic |
0.8% |
|
| New Zealand |
0.8% |
|
| United Arab Emirates |
0.8% |
|
| Uzbekistan |
0.8% |
|
| Philippines |
0.8% |
|
| Sri Lanka |
0.8% |
|
| Nicaragua |
0.8% |
|
| Bulgaria |
0.8% |
|
| Pakistan |
0.8% |
|
| Windows 10 |
48.5% |
|
| Windows 7 |
38.5% |
|
| Windows 8.1 |
12.3% |
|
| Windows 8 |
0.8% |
|
Analysis
| Subsystem: |
Native |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000100000000 |
| Entry Address: |
0x0000248c |
| Name |
Size of data |
MD5 |
| .text |
9728 |
5def1768acea89ef70e7c94ca0c5874e |
| .data |
512 |
043c46095689123e1f5be96c109c2f46 |
| .pdata |
512 |
a60e39cc74cc770e1c837e65975a7189 |
| .rsrc |
1024 |
656104283fe08c1ce0b847b19b0187bc |
| .reloc |
512 |
4c69442f94342f01c9eecc224c99f9b1 |
