spacer spacer spacer
 
 
  arrow Description
  arrow Key Facts
  arrow File System and OS
  arrow Security Validation
  arrow Requires
  arrow Additional Analysis
  arrow Instructions on Use
  arrow Resources
  arrow Vendor Summary
  arrow Research this File
  help File Detail Help
 
 
box_image
PC Mover
Move applications, files and settings from one PC to another. Handles Windows upgrades too, even XP 32-bit to Windows 7 64-bit!
 
  Fix-It Utilities
Make your PC run like new! Includes Anti-Virus, Anti-Spyware, hardware diagnostics, registry fixer, and more!
box_image  
 
 
box_image
Partition Commander
Now it's easy for anyone to safely partition their hard drive! You can reclaim waste disk space, organize files, even add new OSes.
     
 
 
File Details
 

Cmd.exe

Windows Command Processor

 
     
  Description  
     
 
icon   Cmd.exe opens a box to enter text commands, such as older DOS commands and newer Windows command line utilities.

Cmd.exe is a 32-bit executable for a command line application that has no GUI.
Return to the
File Analysis Report
 
     
   
  Key Facts from within File  
     
 
key facts   These are the direct values are extracted from the file. These are defined by the original developer. Some items may be unspecified, mistyped or out of date.
     
File description
  Windows Command Processor
 
File Version
  5.1.2600.0 (xpclient.010817-1148)
 
Application
  Microsoft Windows Operating System
 
App version
  5.1.2600.0
 
Type
  32-bit
 
Publisher
  Microsoft Corporation
 
Copyright
  (c) Microsoft Corporation. All rights reserved.
   
  File System and OS Information  
     
 
File system  
  C:\Windows\System32

This directory holds the core operating system files and libraries.

     
Date Modified
  23-Aug-2001 5:00 am
 
Date Created
  23-Aug-2001 5:00 am
 
Size
  367 KB  (375,808 Bytes)
 
Captured from
  Core without updates
 
OS at capture
  Windows XP (RTM, SP1), Build 2600, 32-bit edition
 
 
   
  Security Validation  
     
 
security   The two security hashes for Cmd.exe were created from the original file. The security hash is created by scanning all bytes within the file. Identical files should have the same hashes. SHA1 is considered the more secure than the older MD5 hash.
     
MD5
  84DDF54DB542B2EB9EF08144FB6E3645
 
SHA1
  43C3EEADFD2C3AADD32F9A7C750E4B1465D3BC9A
     
  Requires  
     
 
required   The following files are required when running this program. These may call other files, and there can be additional required files not in this list.

           
  import Kernel32.dll   import User32.dll
  import Msvcrt.dll  
 
Click on filename for more details.
 
   
  Additional Analysis  
     
 
notes  
  • Cmd.exe requires a C++ library, and was likely written in Micorsoft Visual C++. It was likely built using Visual Studio 2003.
  • Cmd.exe is a PE style file.
  • This program does not appear to be internally referenced by any other file.
   
  Instructions on Use  
     
 
notes   Command-line help instructions for this application.

 
Starts a new instance of the Windows XP command interpreter

CMD [/A | /U] [/Q] [/D] [/E:ON | /E:OFF] [/F:ON | /F:OFF] [/V:ON | /V:OFF]
    [[/S] [/C | /K] string]

/C      Carries out the command specified by string and then terminates
/K      Carries out the command specified by string but remains
/S      Modifies the treatment of string after /C or /K (see below)
/Q      Turns echo off
/D      Disable execution of AutoRun commands from registry (see below)
/A      Causes the output of internal commands to a pipe or file to be ANSI
/U      Causes the output of internal commands to a pipe or file to be
        Unicode
/T:fg   Sets the foreground/background colors (see COLOR /? for more info)
/E:ON   Enable command extensions (see below)
/E:OFF  Disable command extensions (see below)
/F:ON   Enable file and directory name completion characters (see below)
/F:OFF  Disable file and directory name completion characters (see below)
/V:ON   Enable delayed environment variable expansion using ! as the
        delimiter. For example, /V:ON would allow !var! to expand the
        variable var at execution time.  The var syntax expands variables
        at input time, which is quite a different thing when inside of a FOR
        loop.
/V:OFF  Disable delayed environment expansion.

Note that multiple commands separated by the command separator '&&'
are accepted for string if surrounded by quotes.  Also, for compatibility
reasons, /X is the same as /E:ON, /Y is the same as /E:OFF and /R is the
same as /C.  Any other switches are ignored.

If /C or /K is specified, then the remainder of the command line after
the switch is processed as a command line, where the following logic is
used to process quote (") characters:

    1.  If all of the following conditions are met, then quote characters
        on the command line are preserved:

        - no /S switch
        - exactly two quote characters
        - no special characters between the two quote characters,
          where special is one of: &()@^|
        - there are one or more whitespace characters between the
          the two quote characters
        - the string between the two quote characters is the name
          of an executable file.

    2.  Otherwise, old behavior is to see if the first character is
        a quote character and if so, strip the leading character and
        remove the last quote character on the command line, preserving
        any text after the last quote character.

If /D was NOT specified on the command line, then when CMD.EXE starts, it
looks for the following REG_SZ/REG_EXPAND_SZ registry variables, and if
either or both are present, they are executed first.

    HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\AutoRun

        and/or

    HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun

Command Extensions are enabled by default.  You may also disable
extensions for a particular invocation by using the /E:OFF switch.  You
can enable or disable extensions for all invocations of CMD.EXE on a
machine and/or user logon session by setting either or both of the
following REG_DWORD values in the registry using REGEDT32.EXE:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\EnableExtensions

        and/or

    HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions

to either 0x1 or 0x0.  The user specific setting takes precedence over
the machine setting.  The command line switches take precedence over the
registry settings.

The command extensions involve changes and/or additions to the following
commands:

    DEL or ERASE
    COLOR
    CD or CHDIR
    MD or MKDIR
    PROMPT
    PUSHD
    POPD
    SET
    SETLOCAL
    ENDLOCAL
    IF
    FOR
    CALL
    SHIFT
    GOTO
    START (also includes changes to external command invocation)
    ASSOC
    FTYPE

To get specific details, type commandname /? to view the specifics.

Delayed environment variable expansion is NOT enabled by default.  You
can enable or disable delayed environment variable expansion for a
particular invocation of CMD.EXE with the /V:ON or /V:OFF switch.  You
can enable or disable completion for all invocations of CMD.EXE on a
machine and/or user logon session by setting either or both of the
following REG_DWORD values in the registry using REGEDT32.EXE:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\DelayedExpansion

        and/or

    HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion

to either 0x1 or 0x0.  The user specific setting takes precedence over
the machine setting.  The command line switches take precedence over the
registry settings.

If delayed environment variable expansion is enabled, then the exclamation
character can be used to substitute the value of an environment variable
at execution time.

File and Directory name completion is NOT enabled by default.  You can
enable or disable file name completion for a particular invocation of
CMD.EXE with the /F:ON or /F:OFF switch.  You can enable or disable
completion for all invocations of CMD.EXE on a machine and/or user logon
session by setting either or both of the following REG_DWORD values in
the registry using REGEDT32.EXE:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\CompletionChar
    HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\PathCompletionChar

        and/or

    HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar
    HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar

with the hex value of a control character to use for a particular
function (e.g.  0x4 is Ctrl-D and 0x6 is Ctrl-F).  The user specific
settings take precedence over the machine settings.  The command line
switches take precedence over the registry settings.

If completion is enabled with the /F:ON switch, the two control
characters used are Ctrl-D for directory name completion and Ctrl-F for
file name completion.  To disable a particular completion character in
the registry, use the value for space (0x20) as it is not a valid
control character.

Completion is invoked when you type either of the two control
characters.  The completion function takes the path string to the left
of the cursor appends a wild card character to it if none is already
present and builds up a list of paths that match.  It then displays the
first matching path.  If no paths match, it just beeps and leaves the
display alone.  Thereafter, repeated pressing of the same control
character will cycle through the list of matching paths.  Pressing the
Shift key with the control character will move through the list
backwards.  If you edit the line in any way and press the control
character again, the saved list of matching paths is discarded and a new
one generated.  The same occurs if you switch between file and directory
name completion.  The only difference between the two control characters
is the file completion character matches both file and directory names,
while the directory completion character only matches directory names.
If file completion is used on any of the built in directory commands
(CD, MD or RD) then directory completion is assumed.

The completion code deals correctly with file names that contain spaces
or other special characters by placing quotes around the matching path.
Also, if you back up, then invoke completion from within a line, the
text to the right of the cursor at the point completion was invoked is
discarded.

The special characters that require quotes are:
     
     &()[]{}^=;!'+,`~
 
   
  Internal Resource Counts  
     
 
notes   Resources are read-only content stored within the file. It is mostly used to hold graphics, strings, menus and dialog templates, although other types are occasionally used. See our section on Resources Help for more details.

  Strings and Messages0   Icons (Single)8  
  Dialog Templates0   Icons (Grouped)1  
  Menus0   Icons (Animated)0  
  HTML Documents0   Cursors (Single)0  
  Accelerators0   Cursors (Grouped)0  
  Manifests0   Cursors (Animated)0  
  Fonts0   Bitmaps0  
 
   
  Vendor Summary  
     
 
Vendor
  Microsoft Corporation

Microsoft Corporation Logo
Phone
1-425-882-8080
1-800-642-7676

Web
Global
USA

Assistance
Support

 
   
  Research this File  
     
 
Getting search results...
 
     
  Notes  
     
  While we believe this information up to date and accurate, FAQware is not responsible for any inaccuracies. If you find something that is out of date or inaccurate, please let us know at so we can correct it.