How to remove nircmd.exe
nircmd.exe
The module nircmd.exe has been detected as PUP.Gen
File Details
| Product Name: | NirCmd |
| Company Name: | NirSoft |
| MD5: | 18b02e09f0afabf3459a8bc83868d112 |
| Size: | 44 KB |
| First Published: | 2025-12-30 23:00:47 (3 weeks ago) |
| Latest Published: | 2026-01-19 23:01:02 (a week ago) |
| Status: | PUP.Gen (on last analysis) | |
| Analysis Date: | 2026-01-19 23:01:02 (a week ago) |
Common Places:
| %mydoc%\rainmeter\skins\rainformeraida64\settings\colorpickerplus |
| %mydoc%\rainmeter\skins\rainformeraida64\settings\colorpickerplus |
| %mydoc%\rainmeter\skins\@backup\rainformeraida64\settings\colorpickerplus |
| %mydoc%\rainmeter\skins\@backup\rainformeraida64\settings\colorpickerplus |
| %sysdrive%\rainmeter\skins\gadgets additions\launcher\colorpickerplus |
Geography:
| 80.0% | ||
| 20.0% |
OS Version:
| Windows 10 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00019d40 |
PE Sections:
| Name | Size of data | MD5 |
| UPX0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
| UPX1 | 40960 | 51a7f3580cac075fc111cddf3a7bf028 |
| .rsrc | 3072 | bba7905f7f6a580f6ec575904a5bfc68 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for nircmd.exe
