How to remove PECMD.exe
PECMD.exe
The module PECMD.exe has been detected as General Threat

File Details
Product Name: | PECMD |
Company Name: | DSystem |
MD5: | c7b6ef1ec6d397433962f1d1a5586f0f |
Size: | 579 KB |
First Published: | 2018-04-19 04:06:26 (7 years ago) |
Latest Published: | 2021-01-02 10:18:38 (4 years ago) |
Status: | General Threat (on last analysis) | |
Analysis Date: | 2021-01-02 10:18:38 (4 years ago) |
Common Places:
%sysdrive%\布袋高跟鞋\xiaobai_work\tools |
%temp% |
%sysdrive%\$recycle.bin\s-1-5-21-2155467504-285596113-3141711055-500\$r2inuhm\tools |
%sysdrive%\文档\xiaoxiong_work\tools |
%sysdrive%\xiaobai_work\tools |
%sysdrive%\$recycle.bin\s-1-5-21-814492549-1993845869-3405770272-500\$r8m21w8\tools |
%sysdrive%\heisha_work\tools |
%sysdrive%\微pe工具箱v1.2+v2.1集成经典工具合盘_3\微pe工具箱v1.2+v2.1集成经典工具合盘\data |
%sysdrive%\heisha\work\tools |
%sysdrive%\yunqishiusbdrive\work\tools |
File Names:
PECmd.exe |
PECMD.exe |
Geography:
81.8% | ||
9.1% | ||
9.1% |
OS Version:
Windows 7 | 54.5% | |
Windows 10 | 45.5% |
Analysis
Subsystem: | Windows GUI |
PE Type: | pe |
OS Bitness: | 32 |
Image Base: | 0x00400000 |
Entry Address: | 0x000e72db |
PE Sections:
Name | Size of data | MD5 |
.MPRESS1 | 296960 | aabfde77c119383dd6b6e8212902b503 |
.MPRESS2 | 4096 | 863d6b2d42b17dbab422d2d500961eb5 |
.rsrc | 291840 | 79b84859dd7ce5f7b5e75976c9ffb210 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for PECMD.exe
