Gridinsoft Logo
File Icon

The dmde.exe (DMDE 4.2.4.818 - Data Recovery Software) File Analysis

Updated 3 months ago
Checked by Malware Check
dmde.exe

Technical Analysis

File Name dmde.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.226.174
Database Version 2025-10-07 19:00:30 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
5,277,072
File Size (bytes)
2025-10-07
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
2dadb5d5299f9073636ab64e77a267ea
SHA1
4115f6d2293f22accdca5cf934e652a7aaa66e95
SHA256
8a9da84fe435be5d6456166b86b840dc7acad2145f63e81e0f3159e8888960f6
SHA512
0991bf27c854c3bf6a82d60136f4242e506eb894cbc7a6f434ee8f655d6f9d5e6a9293688c68176c188bdb0407d052a671ab42b9616ae16d830353161b67f1f5
ImpHash
79ac6149eb00da74d4d9f8ee65e62779

PE Analysis

Basic Information

▼
Icon
Hash: 379c0cb1c276f197aeb4360d67f2e69d
Fuzzy: cba00df60134766a2f187a5d747436c9
dHash: a45b59acca64258a
Image Base 0x00400000
Entry Point 0x00861350
Compilation Time 2025-02-02 23:02:26
Checksum 0x005102dd (Actual: 0x005102dd)
OS Version 5.2
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature An error occurred while validating the countersignature: The root Certum Trusted Network CA 2 lists its extended key usages, but {'time_stamping'} are not present
Imports 10 libraries
oleaut32, advapi32, user32, kernel32, gdi32, ole32, comctl32, shell32, comdlg32, msvcrt
Exports 3 functions
Resources 50 Resources
Sections 10 Sections

Version Information

▼
CompanyName DMDE Software
FileDescription DMDE 4.2.4.818 - Data Recovery Software
FileVersion 4.2.4.818
InternalName DMDE
LegalCopyright Copyright © Dmitry Sidorov 2005-2025
OriginalFilename dmde.exe
ProductName DMDE (DM Disk Editor and Data Recovery Software)
ProductVersion 4.2.4.818
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 4,588,432 bytes 4,588,544 bytes 6.06 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 6BBD6EAF78C40D75CE4B6B5B918A1D12
.data 0x00462000 279,048 bytes 279,552 bytes 4.83 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 823D1627E2D1903E6C766CAA9FF7C5EE
.bss 0x004a7000 2,297,444 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x006d8000 13,520 bytes 13,824 bytes 4.26 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE B892DD4E0DE7A68FAC40A4C6D4A5B4C8
.didata 0x006dc000 784 bytes 1,024 bytes 2.18 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9A6AA99089114BA11B88492D8B1FABEE
.edata 0x006dd000 150 bytes 512 bytes 1.82 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 68C768B21E6B7C93F1D980D89B392F9F
.tls 0x006de000 440 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x006df000 40 bytes 512 bytes 0.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 82B1F29B5AF45630A4CABAA5A04B1F40
.pdata 0x006e0000 174,348 bytes 174,592 bytes 6.35 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C9550031739BE0A6A8AA75D223EECD36
.rsrc 0x0070b000 196,608 bytes 196,608 bytes 5.60 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C93B9547E1CBC38FCC7D50DB1F5DF4B0

Resource Analysis

▼
Total Resources: 50 (193,837 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 1 308 bytes
0.2%
RT_BITMAP 18 142,796 bytes
73.7%
RT_ICON 13 36,695 bytes
18.9%
RT_STRING 12 8,796 bytes
4.5%
RT_RCDATA 2 2,528 bytes
1.3%
RT_GROUP_CURSOR 1 20 bytes
0%
RT_GROUP_ICON 1 188 bytes
0.1%
RT_VERSION 1 860 bytes
0.4%
RT_MANIFEST 1 1,646 bytes
0.8%

Certificate Chain Analysis

▼
Certificate Information
Product DMDE (DM Disk Editor and Data Recovery Software)
Description DMDE 4.2.4.818 - Data Recovery Software
File Version 4.2.4.818
Original Name dmde.exe
Signing Date 11:02 PM 02/02/2025 (341 days ago)
Verification Status Signed
Signers Dmitry Sidorov; Certum Code Signing 2021 CA; Certum Trusted Network CA 2; Certum Trusted Network CA
Counter Signers Certum Timestamp 2025; Certum Timestamping 2021 CA; Certum Trusted Network CA 2; Certum Trusted Network CA
Internal Name DMDE
Copyright Copyright © Dmitry Sidorov 2005-2025
Certificate Chain Summary
Certum Trusted Network CA 2 #1 Primary
Validity Period: 2021-05-31 06:43:06 → 2029-09-17 06:43:06
Signature Algorithm: sha384RSA
Serial Number: 1B B5 8F 25 2A DF 23 00 49 28 C9 AE 3D 7E ED 27
Certum Timestamp 2025 #2 Chain
Validity Period: 2025-01-09 08:40:43 → 2036-01-07 08:40:43
Signature Algorithm: sha384RSA
Serial Number: 9E 9C 04 F6 55 A8 B4 A7 02 6D 49 8C 6C 78 8D AA
Certum Code Signing 2021 CA #3 Chain
Validity Period: 2021-05-19 05:32:18 → 2036-05-18 05:32:18
Signature Algorithm: sha384RSA
Serial Number: 99 A3 80 0A 26 55 3B 65 AB DC 6E 84 A6 B3 EA 39
Certum Timestamping 2021 CA #4 Chain
Validity Period: 2021-05-19 05:32:07 → 2036-05-18 05:32:07
Signature Algorithm: sha384RSA
Serial Number: E7 FF 69 C7 3B 35 CE 4B 91 26 D8 74 7C 68 A5 87
Dmitry Sidorov #5 Chain
Validity Period: 2024-04-10 11:55:09 → 2027-04-10 11:55:08
Signature Algorithm: sha256RSA
Serial Number: 68 A5 E0 02 C3 8A 13 65 71 9C 76 2D A6 8E 88 D4

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

An error occurred while validating the countersignature: The root Certum Trusted Network CA 2 lists its extended key usages, but {'time_stamping'} are not present

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware