Gridinsoft Logo
File Icon

The pw103-free.exe (MiniTool Partition Wizard Free Setup) File Analysis

Updated 1 year ago
Checked by Malware Check
pw103-free.exe

Technical Analysis

File Name pw103-free.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
1572864:PnLGeta/OnHHdCblPBlYVFz9ua5Uk+Hl8fY0sqFJCGjckNw7eVeE+icajq:PnFoOndmlnYPzM0Gl4HDjcOVeEZjq
Scanner Version 1.0.177.174
Database Version 2024-05-23 11:00:17 UTC
⚠

Suspicious File Detected

Detected by 5 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
7%
Detection Rate
83,328,848
File Size (bytes)
5/71
Engines Detected
2024-05-23
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
d7092e6b3548ca0e93bdcc2a0d7c0afc
SHA1
338aed3a1424996137768bebdae4058482a51010
SHA256
a6b9adf9545d7accdc0e8d74154c520157c7ce2d8dfbab31a2a22470384b4e05
SHA512
aaf08a458e7dab599203213dcb7047fcf76533fec590bd48bb705a1d06561ab8dddf71ee762c430ca3693dc599d9ae93f8b97b69bdb575c2dfebf965d3529c9d
ImpHash
20dd26497880c05caed9305b3c8b9109

Security Engines with Detections (5 of 71)

Sangfor
Trojan.Win32.Fusioncore.V3bx Malicious
ESET-NOD32
Win32/FusionCore.AH potentially unwanted Malicious
Rising
[email protected] (RDML:xNZaxFquf7lRZZCITzIA6Q) Malicious
Microsoft
PUABundler:Win32/FusionCore Malicious
GData
Win32.Application.Agent.4HTU8O Malicious
66 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 4546e12c388ff4fa3f210cd95c20417a
Fuzzy: 15d853b5adf358dd5acd07dcd8a05304
dHash: bce0c4d2e6e6d678
Image Base 0x00400000
Entry Point 0x004117dc
Compilation Time 2016-04-06 14:39:04
Checksum 0x04f85dd7 (Actual: 0x04f85dd7)
OS Version 5.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 5 libraries
oleaut32, advapi32, user32, kernel32, comctl32
Exports 0 functions
Resources 20 Resources
Sections 8 Sections

Version Information

▼
Comments This installation was built with Inno Setup.
CompanyName MiniTool Software Limited
FileDescription MiniTool Partition Wizard Free Setup
FileVersion 10
LegalCopyright Copyright © 2018 MiniTool Software Limited, all rights reserved.
ProductName MiniTool Partition Wizard Free
ProductVersion 10
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 62,020 bytes 62,464 bytes 6.38 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ A33E9FF7181115027D121CD377C28C8F
.itext 0x00011000 3,940 bytes 4,096 bytes 5.73 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ CAEC456C18277B579A94C9508DAF36EC
.data 0x00012000 3,208 bytes 3,584 bytes 2.30 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 746954890499546D73DCE0E994642192
.bss 0x00013000 22,204 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x00019000 3,588 bytes 4,096 bytes 4.60 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E9B9C0328FD9628AD4D6AB8283DCB20E
.tls 0x0001a000 8 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x0001b000 24 bytes 512 bytes 0.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3DFFC444CCC131C9DCEE18DB49EE6403
.rsrc 0x0001c000 413,132 bytes 413,184 bytes 5.39 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6CA8A018978DFDA3623E7FAB43E9A53F

Resource Analysis

▼
Total Resources: 20 (411,936 bytes)
Resource Type Count Total Size Percentage
RT_ICON 7 372,408 bytes
90.4%
RT_STRING 6 2,668 bytes
0.6%
RT_RCDATA 4 33,908 bytes
8.2%
RT_GROUP_ICON 1 104 bytes
0%
RT_VERSION 1 1,268 bytes
0.3%
RT_MANIFEST 1 1,580 bytes
0.4%

Certificate Chain Analysis

▼
Certificate Information
Product MiniTool Partition Wizard Free
Description MiniTool Partition Wizard Free Setup
File Version 10
Signing Date 03:38 AM 09/21/2018 (2476 days ago)
Verification Status Signed
Signers MiniTool Software Limited; COMODO RSA Code Signing CA; Sectigo (formerly Comodo CA)
Counter Signers GlobalSign TSA for Advanced - G2; GlobalSign Timestamping CA - SHA256 - G2; GlobalSign Root CA - R3
Copyright Copyright © 2018 MiniTool Software Limited, all rights reserved.
Certificate Chain Summary
MiniTool Software Limited #1 Primary
Validity Period: 2018-02-28 00:00:00 → 2021-02-27 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 5F 9A 4D 59 99 AA 7B AF 8A 51 E3 5D 6F DE A8 AE
COMODO RSA Code Signing CA #2 Chain
Validity Period: 2013-05-09 00:00:00 → 2028-05-08 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 2E 7C 87 CC 0E 93 4A 52 FE 94 FD 1C B7 CD 34 AF
GlobalSign TSA for Advanced - G2 #3 Chain
Validity Period: 2018-02-19 00:00:00 → 2029-03-18 10:00:00
Signature Algorithm: sha256RSA
Serial Number: 0C A7 CF 5D 07 07 24 AC 89 E7 9A 3A
GlobalSign Timestamping CA - SHA256 - G2 #4 Chain
Validity Period: 2011-08-02 10:00:00 → 2029-03-29 10:00:00
Signature Algorithm: sha256RSA
Serial Number: 04 00 00 00 00 01 31 89 C6 50 04

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
5 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware