How to remove volume2.exe
- File Details
- Overview
- Analysis
volume2.exe
The module volume2.exe has been detected as Possible Threat
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
5035bab50eed887f6638db36a48ed95a |
| Size: |
4 MB |
| First Published: |
2017-07-18 11:13:54 (7 years ago) |
| Latest Published: |
2018-10-11 18:05:57 (6 years ago) |
| Status: |
Possible Threat (on last analysis) |
|
| Analysis Date: |
2018-10-11 18:05:57 (6 years ago) |
| %sysdrive%\tools\volume2 |
| %mydoc%\volume2 |
| %profile%\downloads\volume2_1_1_4_347 (1) |
| %profile%\downloads |
| %sysdrive% |
|
53.8% |
|
|
15.4% |
|
|
15.4% |
|
|
7.7% |
|
|
7.7% |
|
| Windows 7 |
69.2% |
|
| Windows 10 |
15.4% |
|
| Windows 8.1 |
15.4% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0030ef74 |
| Name |
Size of data |
MD5 |
| .text |
3191296 |
790bc613e83f6d70d36fe36c7aa2443c |
| .itext |
9728 |
21d5ea9802aad4290dade0b56635c9a4 |
| .data |
72704 |
9b9334161c4e87f5bd8bc6b47ff2190c |
| .bss |
0 |
00000000000000000000000000000000 |
| .idata |
38400 |
68d7c935f6c1508d66300d6086d8658d |
| .didata |
1536 |
5e5b1e4e1c1e3d171d82d84811aca33a |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
4938f15632cf6691689a558388a44b97 |
| .reloc |
260608 |
de0bce40a31715925dbfc73adcd89d77 |
| .rsrc |
1205248 |
ce3e82061a7a95cd496ec57c6a123a96 |
