How to remove xigua.exe
xigua.exe
The module xigua.exe has been detected as Hijack.IE
File Details
Product Name: | 西瓜 |
MD5: | dcf9801b9789e80b6f25e0285d814932 |
Size: | 479 KB |
First Published: | 2018-11-19 13:09:41 (6 years ago) |
Latest Published: | 2019-07-05 05:35:38 (5 years ago) |
Status: | Hijack.IE (on last analysis) | |
Analysis Date: | 2019-07-05 05:35:38 (5 years ago) |
Overview
Signed By: | 成都德甘洛信息技术有限公司 |
Status: | Valid |
Common Places:
%programfiles%\xigua |
%programfiles%\xigua |
%programfiles%\xigua |
%programfiles%\xigua |
Geography:
50.0% | ||
25.0% | ||
25.0% |
OS Version:
Windows 10 | 50.0% | |
Windows 7 | 50.0% |
Analysis
Subsystem: | Windows GUI |
PE Type: | pe |
OS Bitness: | 32 |
Image Base: | 0x30000000 |
Entry Address: | 0x00008b15 |
PE Sections:
Name | Size of data | MD5 |
.text | 60928 | f6937b7e36b3505d5e1c322ffb7cf5ee |
.rdata | 23040 | bc2b0208c627b388825530d1918db3f3 |
.data | 5120 | 1370b976cb76740cf74efc7ead6a2056 |
.rsrc | 374784 | 9a66443c01d40655ed69bc12d578f78a |
.reloc | 9728 | 8b23727157acc770601827275bd0b160 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for xigua.exe