Gridinsoft Logo
File Icon

The PfsLoader_exe(Malware2 (PfsLoader MFC Application) File Analysis

Updated 2 months ago
Checked by Malaware Check
PfsLoader_exe(Malware2

Technical Analysis

File Name PfsLoader_exe(Malware2
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.211.174
Database Version 2025-03-23 01:00:46 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
245,760
File Size (bytes)
2025-03-23
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
c9185e96c81f8d2337e71f8352bca191
SHA1
2abb81c7da059c49aa10048d04f3520adafb374b
SHA256
14ae1cd755718626ac69fc912ea2b703343f2076a43f93f377103fa0706a0299
SHA512
6f32c09e8ecdf11c9c41dd9da401d43f73141e5ee2afdb8067714ba76d63a384a11110eeaf9382df007744d9fa1ede7b1c95ee7a9d446c1cffa5810c8f58d97e
ImpHash
8dff0054aaa9acc2b56b405805c56018

PE Analysis

Basic Information

▼
Icon
Hash: 974e32fba7f25097c9b943ede7c4d7c2
Fuzzy: 566a5e42d5917fb87b49f3ed98fa4d40
dHash: d4f0f0d4d4f0f0d4
Image Base 0x00400000
Entry Point 0x0040d17f
Compilation Time 2009-09-21 04:51:46
Checksum 0x00000000 (Actual: 0x00044ca0)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 13 libraries
Exports 0 functions
Resources 30 Resources
Sections 4 Sections

Version Information

▼
Comments
CompanyName
FileDescription PfsLoader MFC Application
FileVersion 1, 0, 1, 2
InternalName PfsLoader
LegalCopyright Copyright (C) 2002
LegalTrademarks
OriginalFilename PfsLoader.EXE
PrivateBuild
ProductName PfsLoader Application
ProductVersion 1, 0, 1, 2
SpecialBuild
Translation 0x0404 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 156,791 bytes 159,744 bytes 6.54 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 60B4F4D8C5884622D3808BBD2DCFBE86
.rdata 0x00028000 37,440 bytes 40,960 bytes 4.49 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C4F69A50A6A5C4C8C931350439C713D1
.data 0x00032000 36,328 bytes 20,480 bytes 2.96 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 14D12314B2179FF90B214CD9FB095A9E
.rsrc 0x0003b000 17,888 bytes 20,480 bytes 4.73 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ CFFDF184439069C6186B9A2C9DE9380F
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 30 (16,172 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 2 488 bytes
3%
RT_BITMAP 7 7,108 bytes
44%
RT_ICON 3 4,792 bytes
29.6%
RT_DIALOG 3 532 bytes
3.3%
RT_STRING 12 2,310 bytes
14.3%
RT_GROUP_CURSOR 1 34 bytes
0.2%
RT_GROUP_ICON 1 48 bytes
0.3%
RT_VERSION 1 860 bytes
5.3%

Certificate Chain Analysis

▼
Certificate Information
Product PfsLoader Application
Description PfsLoader MFC Application
File Version 1, 0, 1, 2
Original Name PfsLoader.EXE
Internal Name PfsLoader
Copyright Copyright (C) 2002

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware