How to remove sf-helper-default-installer.exe

sf-helper-default-installer.exe

The module sf-helper-default-installer.exe has been detected as PUP.SaveFrom

sf-helper-default-installer.exe
Product Name:

SaveFrom.net Helper Installer

Company Name:

32/05 team

MD5: e1ddeaf698ac59708ae26d21a87b32a8
Size: 268 KB
First Published: 2023-10-02 23:33:58 (a year ago)
Latest Published: 2024-12-06 23:01:33 (3 months ago)
Status: PUP.SaveFrom (on last analysis)
Analysis Date: 2024-12-06 23:01:33 (3 months ago)
Signed By: IT PRODUCT DEVELOPMENT LLC
Status: Valid
%localappdata%\programs\apphelper\tools
%localappdata%\programs\apphelper\tools
%profile%
%sysdrive%\windows.old\users\zeyne\appdata\local\programs\apphelper\tools
%desktop%\data
%localappdata%\programs\apphelper\tools
%localappdata%\programs\apphelper\tools
%localappdata%\programs\apphelper\tools
%localappdata%\programs\apphelper\tools
%sysdrive%\$recycle.bin
45.5%
9.1%
9.1%
9.1%
9.1%
9.1%
9.1%
Windows 10 63.6%
Windows 7 36.4%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000034c5

PE Sections:

Name Size of data MD5
.text 26624 c25464d6f87775ef687d2492f92ddf9a
.rdata 5632 e36c6ad0568cd039e0c7810069438d6d
.data 1536 33b1d611a00420c98fa82231feaa907b
.ndata 0 d41d8cd98f00b204e9800998ecf8427e
.rsrc 119808 bd5fe40ddb94be3ee09fd6c71c81a871

More information:

Download GridinSoft Anti-Malware - Removal tool for sf-helper-default-installer.exe