Gridinsoft Logo
File Icon

The Pecmd.exe (WinPE Commander (Modified By DSystem mdyblog.blog.163.com)) File Analysis

Updated 2 months ago
Checked by Malware Check
Pecmd.exe

Technical Analysis

File Name Pecmd.exe
File Type
MS-DOS executable PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Scanner Version 1.0.228.174
Database Version 2025-11-08 07:00:24 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
432,640
File Size (bytes)
2025-11-08
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
d723624db4fb00b6997170b6c6fce11b
SHA1
8485e52fea0d91201bfbb15abd865aa8961594b8
SHA256
397af00cc0a3be9f1211d9c2b6f209994bca67fb1b21b278c289a3b3cf7d8c9c
SHA512
f393a5e3edf5f85b7c3865d9c598fa190c93b30cf972b399481bc42cda3839d9349e4694d846aa2888cebb9c3b6fc8143523da6abc1c88377238804369b92127
ImpHash
78f5d2496c6ca00e24073872a5c8c786

PE Analysis

Basic Information

▼
Icon
Hash: 3ec46ea24d64f828e2adfb112be4f93e
Fuzzy: 5ab8e62a8f2ca120a4bb31d14017e614
dHash: e8f0e865333392cc
Image Base 0x140000000
Entry Point 0x14013144d
Compilation Time 2013-03-25 13:08:48
Checksum 0x00000000 (Actual: 0x0006c683)
OS Version 5.2
PEiD Signatures MS-DOS executable PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Digital Signature No valid SignedData structure was found.
Imports 14 libraries
Exports 7 functions
Resources 32 Resources
Sections 3 Sections

Version Information

▼
FileVersion 2012.1.75.3 X86U
FileDescription WinPE Commander (Modified By DSystem mdyblog.blog.163.com)
ProductName PECMD
ProductVersion 2012.1.75.3
CompanyName DSystem
LegalCopyright CopyLeft (L) 2012-2012 DSystem All rights reserved.
Comments Modified By DSystem mdyblog.blog.163.com 茂名市第二中学 老九
OriginalFilename PECMD.EXE
Translation 0x0400 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.MPRESS1 0x00001000 1,245,184 bytes 375,296 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E2006290EC145DD5456471F0ADCE2F3A
.MPRESS2 0x00131000 3,911 bytes 4,096 bytes 5.86 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 2EED2537498A46F64D12810B8E8BB70C
.rsrc 0x00132000 53,248 bytes 52,736 bytes 7.14 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE B01ED3D9D64135B25E73F67F748F94EC
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 32 (50,692 bytes)
Resource Type Count Total Size Percentage
INDATA 2 28,001 bytes
55.2%
SCRIPT 1 1 bytes
0%
RT_ICON 6 14,896 bytes
29.4%
RT_MENU 1 2,536 bytes
5%
RT_DIALOG 10 2,198 bytes
4.3%
RT_STRING 4 1,384 bytes
2.7%
RT_GROUP_ICON 5 114 bytes
0.2%
RT_VERSION 1 932 bytes
1.8%
RT_MANIFEST 2 630 bytes
1.2%

Certificate Chain Analysis

▼
Certificate Information
Product PECMD
Description WinPE Commander (Modified By DSystem mdyblog.blog.163.com)
File Version 2012.1.75.3 X86U
Original Name PECMD.EXE
Copyright CopyLeft (L) 2012-2012 DSystem All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware