How to remove NIRCMD.EXE
NIRCMD.EXE
The module NIRCMD.EXE has been detected as General Threat
File Details
| Product Name: | NirCmd |
| Company Name: | NirSoft |
| MD5: | 2c2c06dedc3a3b089d6e8813b2d49b04 |
| Size: | 26 KB |
| First Published: | 2017-09-25 22:13:27 (7 years ago) |
| Latest Published: | 2020-10-14 16:35:58 (4 years ago) |
| Status: | General Threat (on last analysis) | |
| Analysis Date: | 2020-10-14 16:35:58 (4 years ago) |
Common Places:
| %profile%\downloads\sgc5103bd_12_pcs_nld\ambx v1.4.4 |
| %mydoc%\ambx\ambx v1.4.4 |
| %sysdrive% |
| %sysdrive%\downloads\uber_1337_portable_pack_2012\uber_1337_portable_pack_2012 |
| %sysdrive%\1 ntfs\программы\бут сиди |
| %sysdrive%\解毒 |
| %profile%\epp |
| %profile%\epp |
| %sysdrive%\pendrive |
| %sysdrive%\_os\accessori & prog vari\apre chiude cddrive\nircmd apre chiude cd |
File Names:
| nircmd.exe |
| NIRCMD.EXE |
Geography:
| 40.0% | ||
| 13.3% | ||
| 13.3% | ||
| 6.7% | ||
| 6.7% | ||
| 6.7% | ||
| 6.7% | ||
| 6.7% |
OS Version:
| Windows 10 | 60.0% | |
| Windows 7 | 20.0% | |
| Windows Server 2003 | 13.3% | |
| Windows XP | 6.7% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00010c50 |
PE Sections:
| Name | Size of data | MD5 |
| UPX0 | 0 | 00000000000000000000000000000000 |
| UPX1 | 24064 | 4a5c39c3f564d3288ab64f527de1f173 |
| .rsrc | 2048 | ceab1a6bc192cca07b82693eef7cd71e |
More information:
Download GridinSoft
Anti-Malware - Removal tool for NIRCMD.EXE
