resize-move-partition-coach

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The install-epm.cmd script fetches an executable installer from EaseUS official subdomains (d1.easeus.com, d2.easeus.com, and d3.easeus.com). These are legitimate downloads from a well-known software vendor.
  • [COMMAND_EXECUTION]: The installer is executed automatically with silent installation flags (/verysilent /suppressmsgboxes /norestart) via the start /wait command.
  • [COMMAND_EXECUTION]: The epm-shellcmd.cmd script utilizes PowerShell to write user-provided arguments into a temporary file, which is then passed as a parameter to the EPMUI.exe binary.
  • [COMMAND_EXECUTION]: Documentation provides commands using -ExecutionPolicy Bypass and -Verb RunAs to ensure the utility runs with administrative privileges, which is necessary for disk partitioning operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 02:08 AM