How to remove xfplay.exe.quarantined
- File Details
- Overview
- Analysis
xfplay.exe.quarantined
The module xfplay.exe.quarantined has been detected as PUP.XFPlay
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
f94ca263336199cb1c831997a393ff04 |
| Size: |
3 MB |
| First Published: |
2018-06-20 18:11:57 (5 years ago) |
| Latest Published: |
2020-08-16 09:04:22 (3 years ago) |
| Status: |
PUP.XFPlay (on last analysis) |
|
| Analysis Date: |
2020-08-16 09:04:22 (3 years ago) |
Overview
| %programfiles% |
| %sysdrive% |
| %sysdrive%\xfmovie |
| %sysdrive%\4. 影片區\xfmovie |
| %desktop%\新增資料夾 |
| %sysdrive%\kubo99_xflv |
| %sysdrive%\安裝用 |
| %sysdrive%\xfplayer |
| %sysdrive%\新增資料夾 (2) |
| %sysdrive%\joanne\backup set 2018-07-15 190004\backup files 2018-07-15 190004\backup files 37.zip\c\program files (x86) |
| xfplay.exe |
| xfplay.exe.quarantined |
|
89.6% |
|
|
8.9% |
|
|
1.0% |
|
|
0.3% |
|
|
0.3% |
|
| Windows 10 |
57.6% |
|
| Windows 7 |
39.3% |
|
| Windows 8.1 |
2.6% |
|
| Windows 8 |
0.5% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x001c6934 |
| Name |
Size of data |
MD5 |
| .text |
2134016 |
8e4aa64d0b7afb4138f6abedb37ea671 |
| .rdata |
476160 |
18ed460c044ee5a2d812f1221f5407a5 |
| .data |
24576 |
ec93d7c66579665a8290f1bd03caf96a |
| .gfids |
110080 |
858813375126ad036ebd241842c7847f |
| .giats |
512 |
56d2c60960487500ae0934573514ade1 |
| .tls |
512 |
1f354d76203061bfdd5a53dae48d5435 |
| .rsrc |
742912 |
9e85e805806dd001f25f22ea22e06bf7 |
| .reloc |
171520 |
ef08191d477800079dc113e1f85edaf1 |
