Files named cmd.exe

astr0baby.online · cmd.exe

/cmd/

Germany · Choopa, LLC

Yara ReactOS_cmd_valid From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: a00225eeca77d456010fd9bdc4aa2d98b6a954ed
SHA256: 52da89695eb9eff88b9d7f39461a701ca9f2754f6eede53f8de8eb662abdbeb5
application/x-msdos-program
1.20MB
2021-08-16 07:24:52 +0000 UTC
astr0baby.online · cmd.exe

/cmd/

Germany · Choopa, LLC

Yara ReactOS_cmd_valid From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: a00225eeca77d456010fd9bdc4aa2d98b6a954ed
SHA256: 52da89695eb9eff88b9d7f39461a701ca9f2754f6eede53f8de8eb662abdbeb5
application/x-msdos-program
1.20MB
2021-08-16 07:24:52 +0000 UTC
46.227.19.7 · cmd.exe

/sauve/19/disk/dts-samba_20180416/win/DemenagementP3/SYSTEM32/

·

SHA1: bbedcaa3c0bb318999bd2f303a4028ba5389d05e
SHA256: 88b4c837458940f238c0502372e249fefc9349619d439da927cfbb6cfb5e9437
application/octet-stream
392.00KB
2008-04-14 03:33:58 +0000 UTC
139.59.55.202 · cmd.exe

/Citrix/

·

SHA1: e2ead0993b917e1828a658ada0b87e01d5b8424f
SHA256: 2edb180274a51c83ddf8414d99e90315a9047b18c51dfd070326214d4da59651
application/x-msdos-program
230.50KB
2020-03-13 18:09:14 +0000 UTC
node2.swift-byte.de · cmd.exe

/6625a0fd-b528-45de-b619-75b844ec72e3/Steam/steamapps/compatdata/2278520/pfx/drive_c/windows/syswow64/

·

SHA1: 8526d7e31f9535f38f0ac1d57e9d9414f554366f
SHA256: 8113ac567ebfde4879400d980b20e3777066bcc88368ba91aa7f90de56cf1a48
application/octet-stream
1.10MB
2026-01-05 01:22:16 +0000 UTC
node2.swift-byte.de · cmd.exe

/6625a0fd-b528-45de-b619-75b844ec72e3/Steam/steamapps/compatdata/2278520/pfx/drive_c/windows/system32/

·

SHA1: 28aa94f607112b10b555e53a4b522de13a4340b1
SHA256: 5b7f7478fdddf0bdf7c9fc5b0531f9c8c5556b49fcf53438ac6c362f7964856b
application/octet-stream
1.11MB
2026-01-05 01:22:16 +0000 UTC
node2.swift-byte.de · cmd.exe

/6625a0fd-b528-45de-b619-75b844ec72e3/Steam/steamapps/compatdata/2278520/pfx/dosdevices/c:/windows/syswow64/

·

SHA1: 8526d7e31f9535f38f0ac1d57e9d9414f554366f
SHA256: 8113ac567ebfde4879400d980b20e3777066bcc88368ba91aa7f90de56cf1a48
application/octet-stream
1.10MB
2026-01-05 01:22:16 +0000 UTC
node2.swift-byte.de · cmd.exe

/6625a0fd-b528-45de-b619-75b844ec72e3/Steam/steamapps/compatdata/2278520/pfx/dosdevices/c:/windows/system32/

·

SHA1: 28aa94f607112b10b555e53a4b522de13a4340b1
SHA256: 5b7f7478fdddf0bdf7c9fc5b0531f9c8c5556b49fcf53438ac6c362f7964856b
application/octet-stream
1.11MB
2026-01-05 01:22:16 +0000 UTC
mmmma.nz.waw.pl · cmd.exe

/c/$Root/WINDOWS/system32/dllcache/

·

SHA1: 811a005cf787c6ccbe0d9f1c36c1d49a9cb71fd1
SHA256: 62abed7d45040381bbced97ea7b6c697b418448fd3322fd4bfb2bbfdb6155eb4
application/x-msdos-program
380.00KB
2013-08-21 18:02:28 +0000 UTC
mmmma.nz.waw.pl · cmd.exe

/c/$Root/WINDOWS/system32/

·

SHA1: 811a005cf787c6ccbe0d9f1c36c1d49a9cb71fd1
SHA256: 62abed7d45040381bbced97ea7b6c697b418448fd3322fd4bfb2bbfdb6155eb4
application/x-msdos-program
380.00KB
2013-08-21 18:02:28 +0000 UTC
army.envisagezm.com · cmd.exe

/

·

SHA1: 583bac245f14e4e07e7508692c5d8b97f9eb9e6d
SHA256: 64afc6db3aad1289533662e2d79e27dd55c7dcdb8cd918b08e145ad82ad5acb4
application/x-msdownload
332.00KB
2026-01-02 09:58:13 +0000 UTC
www.army.envisagezm.com · cmd.exe

/

·

SHA1: 583bac245f14e4e07e7508692c5d8b97f9eb9e6d
SHA256: 64afc6db3aad1289533662e2d79e27dd55c7dcdb8cd918b08e145ad82ad5acb4
application/x-msdownload
332.00KB
2026-01-02 09:58:13 +0000 UTC
43.248.133.246 · cmd.exe

/updata/AION2/version/plugins/

China · AS Number for CHINANET jiangsu province backbone

SHA1: 13007032ea73e122e8c351dbdcef3c20cb8598fd
SHA256: c6aefb9a17bd3f9e5e2b887fe8de223b1c17d4a7e13f06f78e401b0e8c1bf9f3
application/octet-stream
13.52MB
2025-12-08 07:22:51 +0000 UTC
123.130.87.73 · cmd.exe

/

China · CHINA UNICOM China169 Backbone

SHA1: 98a9ac93fe31f38f47f38db78bf12fa0c6214f9a
SHA256: 48985b22a895154cc44f9eb77489cfdf54fa54506e8ecaef492fe30f40d27e90
application/octet-stream
308.00KB
1970-01-01 00:00:00 +0000 UTC
159.65.158.187 · cmd.exe

/Citrix/

India · DIGITALOCEAN-ASN

SHA1: e2ead0993b917e1828a658ada0b87e01d5b8424f
SHA256: 2edb180274a51c83ddf8414d99e90315a9047b18c51dfd070326214d4da59651
application/x-msdos-program
230.50KB
2020-03-13 18:09:14 +0000 UTC
220.170.90.84 · cmd.exe

/

China · Chinanet

SHA1: f5cfd4070ea7d2b40a29f21f9e29af23341c59ec
SHA256: e1a080e61fb1baf0da629d34baee6f0f9d0e0337bf6ced9f4b3ab9b1c23d91ba
application/octet-stream
305.50KB
1970-01-01 00:00:00 +0000 UTC
45.76.81.249 · cmd.exe

/cmd/

Germany · AS-VULTR

Yara ReactOS_cmd_valid From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: a00225eeca77d456010fd9bdc4aa2d98b6a954ed
SHA256: 52da89695eb9eff88b9d7f39461a701ca9f2754f6eede53f8de8eb662abdbeb5
application/x-msdos-program
1.20MB
2021-08-16 07:24:52 +0000 UTC
139.59.55.202 · cmd.exe

/Citrix/

India · DIGITALOCEAN-ASN

SHA1: e2ead0993b917e1828a658ada0b87e01d5b8424f
SHA256: 2edb180274a51c83ddf8414d99e90315a9047b18c51dfd070326214d4da59651
application/x-msdos-program
230.50KB
2020-03-13 18:09:14 +0000 UTC
118.190.202.64 · cmd.exe

/

China · Hangzhou Alibaba Advertising Co.,Ltd.

SHA1: 1a38f3bfebe1ee823dc7893e673fa5a53c1af02c
SHA256: ba870753f89ba5b88dfcd1576d5e1e848d3ccdb0a2ae4bb24a5dc79a3a31fe1e
application/octet-stream
295.50KB
1970-01-01 00:00:00 +0000 UTC
astr0baby.online · cmd.exe

/cmd/

Germany · AS-VULTR

Yara ReactOS_cmd_valid From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: a00225eeca77d456010fd9bdc4aa2d98b6a954ed
SHA256: 52da89695eb9eff88b9d7f39461a701ca9f2754f6eede53f8de8eb662abdbeb5
application/x-msdos-program
1.20MB
2021-08-16 07:24:52 +0000 UTC