Reply to thread

Message

<blockquote data-quote="struppigel" data-source="post: 916918" data-attributes="member: 86910">This is the full code of the application.[ATTACH=full]250329[/ATTACH]It starts a process, which has to be given as argument, without showing a window. It&#039;s not malware. It&#039;s just something that might be abused to run a program silently, e.g., a setupThis file has not much in common with the official NirCmd. I downloaded the official one here <a href="https://www.nirsoft.net/utils/nircmd.html" target="_blank">NirCmd - Windows command line tool</a>So, well notet by [USER=61892]@TairikuOkami[/USER]There is a debug path inside this file:C:\Users\Alpha\source\repos\nircmdc\nircmdc\obj\Release\nircmdc.pdbIf you search for this string you will find a hybrid-analysis run of uTorrent and one any.run analysis on the file itself.This indicates that it hasn&#039;t been seen in malware yet.I wouldn&#039;t be too worried about it.</blockquote>

[QUOTE="struppigel, post: 916918, member: 86910"] This is the full code of the application. [ATTACH type="full" alt="nircmd.png"]250329[/ATTACH] It starts a process, which has to be given as argument, without showing a window. It's not malware. It's just something that might be abused to run a program silently, e.g., a setup This file has not much in common with the official NirCmd. I downloaded the official one here [URL='https://www.nirsoft.net/utils/nircmd.html']NirCmd - Windows command line tool[/URL] So, well notet by [USER=61892]@TairikuOkami[/USER] There is a debug path inside this file: C:\Users\Alpha\source\repos\nircmdc\nircmdc\obj\Release\nircmdc.pdb If you search for this string you will find a hybrid-analysis run of uTorrent and one any.run analysis on the file itself. This indicates that it hasn't been seen in malware yet. I wouldn't be too worried about it. [/QUOTE]

Verification