How to remove XP.sys
XP.sys
The module XP.sys has been detected as PUP.Tencent
File Details
| Product Name: | QQKeyboard |
| Company Name: | tenpay.com |
| MD5: | 72bb0cbd494bc64e809622720bb1d6a1 |
| Size: | 23 KB |
| First Published: | 2017-10-03 04:01:12 (7 years ago) |
| Latest Published: | 2017-10-03 04:01:12 (7 years ago) |
| Status: | PUP.Tencent (on last analysis) | |
| Analysis Date: | 2017-10-03 04:01:12 (7 years ago) |
Overview
| Signed By: | Tencent Technology(Shenzhen) Company Limited |
| Status: | Valid |
Common Places:
| %commondir%\tencent\paycenter |
Geography:
| 100.0% |
OS Version:
| Windows 7 | 100.0% |
Analysis
| Subsystem: | Native |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00010000 |
| Entry Address: | 0x00003a46 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 8064 | 10b7ca2597476a0f834047b1a0d94052 |
| .rdata | 384 | aa5f8d133d4d583f1fa335d51b0d9267 |
| .data | 3584 | 7e6a93fda50cd99b683ac2e6d639bb40 |
| PAGE | 1408 | 5cdfd7fbcbe04490c1f2f37e05089540 |
| INIT | 1024 | 439fdb0a051392bc054b1603d31fbe2e |
| .rsrc | 896 | a76c2124e6241b80d2894d761e5d73a2 |
| .reloc | 384 | f303035dda7dbc844e2ae6fcc4afff68 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for XP.sys
