Should I block it?

No, this file is 100% safe to run.

Additional versions

6.2.9200.16384 (win8_rtm.120725-1247)	20.00%
5.1.2600.5512 (xpsp.080413-0852)	80.00%

Relationships

Parent process

cmd.exe (Windows Command Processor by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegCloseKey, RegOpenKeyExA, RegQueryValueExA

api-ms-win-core-console-l1-1-0.dll

GetConsoleMode, SetConsoleCtrlHandler

api-ms-win-core-errorhandling-l1-1-1.dll

UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetLastError

api-ms-win-core-file-l1-2-0.dll

GetFileType

api-ms-win-core-heap-l1-2-0.dll

HeapSetInformation

api-ms-win-core-heap-obsolete-l1-1-0.dll

LocalFree, LocalAlloc

api-ms-win-core-interlocked-l1-2-0.dll

InterlockedExchange, InterlockedCompareExchange

api-ms-win-core-libraryloader-l1-1-1.dll

GetModuleHandleA

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW, SetThreadUILanguage

api-ms-win-core-processenvironment-l1-2-0.dll

GetEnvironmentVariableW

api-ms-win-core-processthreads-l1-1-1.dll

GetCurrentProcessId, TerminateProcess, GetCurrentThreadId, GetCurrentProcess

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey, RegQueryValueExW, RegOpenKeyExW

api-ms-win-core-string-l1-1-0.dll

WideCharToMultiByte

api-ms-win-core-synch-l1-2-0.dll

Sleep

api-ms-win-core-sysinfo-l1-2-0.dll

GetSystemTimeAsFileTime, GetTickCount

iphlpapi.dll

IcmpCreateFile, Icmp6CreateFile, IcmpSendEcho2, Icmp6SendEcho2, IcmpCloseHandle, IcmpSendEcho2Ex, GetIpForwardTable, GetIpErrorString

kernel32.dll

GetLastError, LocalAlloc, QueryPerformanceCounter, Sleep, FormatMessageA, LocalFree, GetCurrentThreadId, GetCurrentProcessId, SetConsoleCtrlHandler, GetTickCount, SetThreadUILanguage, GetModuleHandleA, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime

msvcrt.dll

DllMain

ntdll.dll

RtlIpv4StringToAddressW

user32.dll

CharToOemBuffA

ws2_32.dll

getnameinfo, getaddrinfo, freeaddrinfo, WSAIoctl, GetNameInfoW, InetNtopW, FreeAddrInfoW, GetAddrInfoW

ping.exe

TCP/IP Ping Command by Microsoft

Remove ping.exe

Version:	5.1.2600.5512 (xpsp.080413-0852)
MD5:	66cdf02d86c9f0b4300ee981a614d296
SHA1:	a9609395542a1f903e5d71621c3042769a77f270
SHA256:	3c5a09238c49fb9e0a402e1a611982b4825ee80bc6ebddbb8733dd4f049d6df0

Overview

ping.exe executes as a process with the local user's privileges typically within the context of its parent cmd.exe (Windows Command Processor by Microsoft). This version is installed on Windows XP and is compiled as a 32 bit program.

Details

File name:	ping.exe
Publisher:	Microsoft Corporation
Product name:	TCP/IP Ping Command
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\ping.exe
File version:	5.1.2600.5512 (xpsp.080413-0852)
Product version:	5.1.2600.5512
Size:	17.5 KB (17,920 bytes)
Digital DNA
PE subsystem:	Windows Console
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00302273%	0.028634%
Kernel CPU:	0.00190135%	0.013761%
User CPU:	0.00112137%	0.014873%
Kernel CPU time:	230 ms/min	100,923,805ms/min
Context switches:	6/sec	284/sec
Memory
Private memory:	1.95 MB	21.59 MB
Private (maximum):	12.41 MB
Private (minimum):	443 KB
Non-paged memory:	1.95 MB	21.59 MB
Virtual memory:	35.48 MB	140.96 MB
Virtual memory (peak):	43.95 MB	169.69 MB
Working set:	1.69 MB	18.61 MB
Working set (peak):	13.07 MB	37.95 MB
Page faults:	26,775/min	2,039/min
I/O
I/O read transfer:	171 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O other transfer:	576 Bytes/sec	448.09 KB/min
I/O other operations:	10/sec	1,671/min
Resource allocations
Threads:	2	12
Handles:	65	600
GUI GDI count:	4	103
GUI USER count:	1	49

Process properties

Integrety level:	Undefined
Platform:	32-bit
Command lines:	ping www.yahoo.com -t "C:\Windows\System32\ping.exe" google.com -t "C:\Windows\System32\ping.exe" 192.168.1.37 -t "C:\Windows\System32\ping.exe" google.com -t
Owner:	User
Parent processes:	Explorer.EXE (Windows Explorer by Microsoft) cmd.exe (Windows Command Processor by Microsoft)

Threads