NirCmd
NirCmd is a product name observed in ThreatInfo file telemetry. This page groups the latest 20 files that reference this product name, including their detection status and direct file reports.
Review the listed files before removing anything: legitimate software can share product names with unwanted or repacked installers, while malicious files often reuse familiar product metadata to appear trustworthy.
Scan files associated with NirCmd:
n.exe
859b2cc01fc2bfb09d791ec72990494f
Virtool.AI
temp.exe
b417238213efb0d2a23562674406cdf9
Possible Threat
nircmd.exe
db5b7d8edc5ad192cc0a8729669bfc06
Risk.Presenoker
nircmd.exe
1d56c98258b6d70f56baa32380dea992
General Threat
nircmd.exe
ea0489f93444a9c78dfa47a3ddd9ac3a
General Threat
A0129322.exe
65dad2d20e660c212a5f2a421a819847
General Threat
nircmdc.exe
d035e14953d4d0b7ca5facc0aa2c5728
General Threat
nircmd.exe
65693293c01489eca0c6964802d31707
Ransom.Gen
nircmd.exe
a1cd6a64e8f8ad5d4b6c07dc4113c7ec
Trojan.Agent
nircmdc.exe
0e69b6bd18e064c83a11b48495c1b01e
General Threat
nircmdc.exe
a89a436cd742f2aed183ae3aac6f575f
Trojan.Agent
nircmd.exe
9cc3c07ac4b98cfaa826d10a48888bf6
PUP.Gen
nircmd.exe
fa9ebf6c448367165a4b73e8cd4c211b
General Threat
nircmdc.exe
212a6b63d29b8157c78754a2f5e1a069
Ransom.Sabsik
nircmd.exe
18b02e09f0afabf3459a8bc83868d112
PUP.Gen