How to remove xfplay.exe
xfplay.exe
The module xfplay.exe has been detected as Hijack.IE
File Details
| Product Name: | xfplay |
| Company Name: | 零与壹软件 |
| MD5: | 5f11983c9fa45c79232d13ac49bdbfcc |
| Size: | 2 MB |
| First Published: | 2017-05-31 12:09:08 (6 years ago) |
| Latest Published: | 2019-07-27 08:12:57 (4 years ago) |
| Status: | Hijack.IE (on last analysis) | |
| Analysis Date: | 2019-07-27 08:12:57 (4 years ago) |
Overview
| Signed By: | 临桂零与壹软件有限公司 |
| Status: | Valid |
Common Places:
| %programfiles%\xfplay |
| %programfiles% |
| %sysdrive%\xfplay |
| %sysdrive%\xfmovie |
| %sysdrive% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
Geography:
| 95.0% | ||
| 5.0% |
OS Version:
| Windows 7 | 62.5% | |
| Windows 8.1 | 22.5% | |
| Windows 10 | 15.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x001a8e7e |
PE Sections:
| Name | Size of data | MD5 |
| .text | 2003968 | 95a4b91292bf49845946290cafa7004a |
| .rdata | 470016 | 4a9f7882c99e48085a8472ba05370307 |
| .data | 24576 | 966602c9a183866d853552a4c79f7a4e |
| .gfids | 512 | 58eb98f0d6b365e23502f0c463f65ce7 |
| .tls | 512 | 1f354d76203061bfdd5a53dae48d5435 |
| .rsrc | 427008 | 953c3da930c371783597949170bedd01 |
| .reloc | 168448 | 3459c34c4f5cbcbdadc30810c346b86e |
More information:
Download GridinSoft
Anti-Malware - Removal tool for xfplay.exe
