Gridinsoft Logo
File Icon

The pcinternals.exe (System & Hardware Monitor) File Analysis

Updated 1 month ago
Checked by Malaware Check
pcinternals.exe

Technical Analysis

File Name pcinternals.exe
File Type
Win32 EXE
Magic Bytes MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
SSDEEP Hash
98304:GDDdZKNTrv6qIYE219HkTXWwFvplXWlXalXBlXglX1lXS:G3PKNkz7WWaW3wTS
Scanner Version 1.0.214.174
Database Version 2025-04-16 21:00:19 UTC
⚠

Suspicious File Detected

Detected by 33 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
46%
Detection Rate
6,851,072
File Size (bytes)
33/72
Engines Detected
2025-04-16
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
038b96653be55376b67988c31c3911a3
SHA1
7610ea9561625d7e1c0ccda00e06aa9f1f947ac1
SHA256
c902005e54e20e756da9befc09a70526f510a87578ad718375a004b55ab4dfcd
SHA512
2a9534aa1eb9bd31e19350b6bb5e8d27c84aff9304cce400b30fc92c20045856d4553657b00b84c7ec3e2c861f97c7d288dbe81687aabe791b0618a2bd357ddd
ImpHash
ffa1604ab33d8592fba7d731b65e83ea

Security Engines with Detections (33 of 72)

Lionic
Trojan.Win32.Generic.4!c Malicious
AVG
Win32:Malware-gen Malicious
MicroWorld-eScan
Gen:Heur.FKP.19 Malicious
CAT-QuickHeal
Trojan.Ghanarava.17446226713911a3 Malicious
Cylance
Unsafe Malicious
VIPRE
Gen:Heur.FKP.19 Malicious
Sangfor
Trojan.Win32.Agent.V9br Malicious
CrowdStrike
win/malicious_confidence_60% (W) Malicious
Symantec
ML.Attribute.HighConfidence Malicious
Cynet
Malicious (score: 99) Malicious
Paloalto
generic.ml Malicious
BitDefender
Gen:Heur.FKP.19 Malicious
Avast
Win32:Malware-gen Malicious
Emsisoft
Gen:Heur.FKP.19 (B) Malicious
McAfeeD
ti!C902005E54E2 Malicious
CTX
exe.trojan.generic Malicious
Ikarus
Win32.Outbreak Malicious
GData
Gen:Heur.FKP.19 Malicious
Varist
W32/ABApplication.PBII-0755 Malicious
Avira
TR/Agent.kyxip Malicious
Antiy-AVL
GrayWare/Win32.Wacapew Malicious
Arcabit
Trojan.FKP.19 Malicious
Microsoft
Trojan:Win32/Wacatac.B!ml Malicious
Google
Detected Malicious
AhnLab-V3
Malware/Win.Generic.C5752594 Malicious
McAfee
Artemis!038B96653BE5 Malicious
Malwarebytes
Malware.Heuristic.2126 Malicious
Panda
Trj/Chgt.AD Malicious
TrendMicro-HouseCall
TROJ_GEN.R002H09DC25 Malicious
MaxSecure
Trojan.Malware.338151687.susgen Malicious
Fortinet
W32/PossibleThreat Malicious
DeepInstinct
MALICIOUS Malicious
alibabacloud
Trojan:MSDOS/FKP.Gen Malicious
39 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 112d6344d0299c57dee457ed65b7ab3e
Fuzzy: faff3509ae7ba3d79450f5d110dc0e95
dHash: 29e8f054338ecc29
Image Base 0x00400000
Entry Point 0x00ed8799
Compilation Time 2025-04-09 19:33:02
Checksum 0x00698684 (Actual: 0x00698684)
OS Version 5.0
PEiD Signatures MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Digital Signature No valid SignedData structure was found.
Imports 23 libraries
Exports 1 functions
Resources 271 Resources
Sections 3 Sections

Version Information

▼
CompanyName ASCOMP Software GmbH
FileDescription System & Hardware Monitor
FileVersion 1.0.0.0
InternalName PC Internals
LegalCopyright © ASCOMP Software GmbH
LegalTrademarks
OriginalFilename pcinternals.exe
ProductName PC Internals
ProductVersion 1.0.0.0
Comments
Translation 0x0407 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.MPRESS1 0x00001000 11,366,400 bytes 1,663,488 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE B381016278B7413E77E80A2BB68C11FD
.MPRESS2 0x00ad8000 5,500 bytes 5,632 bytes 5.17 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 4FD7A2DE516D932632ABE70F6E98C348
.rsrc 0x00ada000 5,181,400 bytes 5,181,440 bytes 7.55 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C9CBCA6AF5DBEC5E96F769DEA022571A
Entropy Analysis Alert

2 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 271 (5,162,356 bytes)
Resource Type Count Total Size Percentage
MAD 2 269,408 bytes
5.2%
RT_CURSOR 11 3,388 bytes
0.1%
RT_BITMAP 175 153,608 bytes
3%
RT_ICON 5 287,848 bytes
5.6%
RT_DIALOG 2 164 bytes
0%
RT_STRING 41 47,908 bytes
0.9%
RT_RCDATA 21 4,397,955 bytes
85.2%
RT_GROUP_CURSOR 11 220 bytes
0%
RT_GROUP_ICON 1 76 bytes
0%
RT_VERSION 1 836 bytes
0%
RT_MANIFEST 1 945 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Product PC Internals
Description System & Hardware Monitor
File Version 1.0.0.0
Original Name pcinternals.exe
Internal Name PC Internals
Copyright © ASCOMP Software GmbH

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
33 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware