Files named cmd.exe

43.248.133.246 · cmd.exe

/updata/AION2/version/plugins/

China · AS Number for CHINANET jiangsu province backbone

SHA1: 13007032ea73e122e8c351dbdcef3c20cb8598fd
SHA256: c6aefb9a17bd3f9e5e2b887fe8de223b1c17d4a7e13f06f78e401b0e8c1bf9f3
application/octet-stream
13.52MB
2025-12-08 07:22:51 +0000 UTC
123.130.87.73 · cmd.exe

/

China · CHINA UNICOM China169 Backbone

SHA1: 98a9ac93fe31f38f47f38db78bf12fa0c6214f9a
SHA256: 48985b22a895154cc44f9eb77489cfdf54fa54506e8ecaef492fe30f40d27e90
application/octet-stream
308.00KB
1970-01-01 00:00:00 +0000 UTC
159.65.158.187 · cmd.exe

/Citrix/

India · DIGITALOCEAN-ASN

SHA1: e2ead0993b917e1828a658ada0b87e01d5b8424f
SHA256: 2edb180274a51c83ddf8414d99e90315a9047b18c51dfd070326214d4da59651
application/x-msdos-program
230.50KB
2020-03-13 18:09:14 +0000 UTC
220.170.90.84 · cmd.exe

/

China · Chinanet

SHA1: f5cfd4070ea7d2b40a29f21f9e29af23341c59ec
SHA256: e1a080e61fb1baf0da629d34baee6f0f9d0e0337bf6ced9f4b3ab9b1c23d91ba
application/octet-stream
305.50KB
1970-01-01 00:00:00 +0000 UTC
45.76.81.249 · cmd.exe

/cmd/

Germany · AS-VULTR

Yara ReactOS_cmd_valid From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: a00225eeca77d456010fd9bdc4aa2d98b6a954ed
SHA256: 52da89695eb9eff88b9d7f39461a701ca9f2754f6eede53f8de8eb662abdbeb5
application/x-msdos-program
1.20MB
2021-08-16 07:24:52 +0000 UTC
139.59.55.202 · cmd.exe

/Citrix/

India · DIGITALOCEAN-ASN

SHA1: e2ead0993b917e1828a658ada0b87e01d5b8424f
SHA256: 2edb180274a51c83ddf8414d99e90315a9047b18c51dfd070326214d4da59651
application/x-msdos-program
230.50KB
2020-03-13 18:09:14 +0000 UTC
118.190.202.64 · cmd.exe

/

China · Hangzhou Alibaba Advertising Co.,Ltd.

SHA1: 1a38f3bfebe1ee823dc7893e673fa5a53c1af02c
SHA256: ba870753f89ba5b88dfcd1576d5e1e848d3ccdb0a2ae4bb24a5dc79a3a31fe1e
application/octet-stream
295.50KB
1970-01-01 00:00:00 +0000 UTC
astr0baby.online · cmd.exe

/cmd/

Germany · AS-VULTR

Yara ReactOS_cmd_valid From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: a00225eeca77d456010fd9bdc4aa2d98b6a954ed
SHA256: 52da89695eb9eff88b9d7f39461a701ca9f2754f6eede53f8de8eb662abdbeb5
application/x-msdos-program
1.20MB
2021-08-16 07:24:52 +0000 UTC
node2.swift-byte.de · cmd.exe

/6625a0fd-b528-45de-b619-75b844ec72e3/Steam/steamapps/compatdata/2278520/pfx/drive_c/windows/syswow64/

Germany · Hetzner Online GmbH

SHA1: 4ffe835dcf7e1cbe896b9a373eda862c142a0402
SHA256: 505bbd38b836991f147cad5f46d44890d8977a96fcd12d58e52492f5e74f391d
application/octet-stream
1.14MB
2025-11-03 20:34:17 +0000 UTC
node2.swift-byte.de · cmd.exe

/6625a0fd-b528-45de-b619-75b844ec72e3/Steam/steamapps/compatdata/2278520/pfx/drive_c/windows/system32/

Germany · Hetzner Online GmbH

SHA1: a499be376f5ca122413eba3619e6366c8e868386
SHA256: d896aa6345e4a38fe3545ef1cb06447ef4bd347676dfd3d1eef1d04ba36464e8
application/octet-stream
1.15MB
2025-11-03 20:34:16 +0000 UTC
node2.swift-byte.de · cmd.exe

/6625a0fd-b528-45de-b619-75b844ec72e3/Steam/steamapps/compatdata/2278520/pfx/dosdevices/c:/windows/syswow64/

Germany · Hetzner Online GmbH

SHA1: 4ffe835dcf7e1cbe896b9a373eda862c142a0402
SHA256: 505bbd38b836991f147cad5f46d44890d8977a96fcd12d58e52492f5e74f391d
application/octet-stream
1.14MB
2025-11-03 20:34:17 +0000 UTC
node2.swift-byte.de · cmd.exe

/6625a0fd-b528-45de-b619-75b844ec72e3/Steam/steamapps/compatdata/2278520/pfx/dosdevices/c:/windows/system32/

Germany · Hetzner Online GmbH

SHA1: a499be376f5ca122413eba3619e6366c8e868386
SHA256: d896aa6345e4a38fe3545ef1cb06447ef4bd347676dfd3d1eef1d04ba36464e8
application/octet-stream
1.15MB
2025-11-03 20:34:16 +0000 UTC
dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · cmd.exe

/PC Seed/RedDeadRedemption_Linux/wine/lib/wine/x86_64-windows/

France · Scaleway S.a.s.

SHA1: 76fb00a049ff4aed06db94baf301fcd648bb1489
SHA256: 204d475dd0a075367937c4e6db89e08a152fb2aa0a60dbdc0afb81b29951dc39
application/octet-stream
1.06MB
2025-10-28 15:33:08 +0000 UTC
dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · cmd.exe

/PC Seed/GTA_Trilogy_Definitive_Linux/GTAVC_DE/wine/lib/wine/x86_64-windows/

France · Scaleway S.a.s.

SHA1: c690318101fb2363a3998338cbd5d9ff963a8d77
SHA256: a90fa5a43f9a1b2476531639c98e008c94deeac1976cc4c5eb1312b5dfc72f17
application/octet-stream
1.06MB
2025-10-28 16:37:29 +0000 UTC
dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · cmd.exe

/PC Seed/GTA_Trilogy_Definitive_Linux/GTASA_DE/wine/lib/wine/x86_64-windows/

France · Scaleway S.a.s.

SHA1: c690318101fb2363a3998338cbd5d9ff963a8d77
SHA256: a90fa5a43f9a1b2476531639c98e008c94deeac1976cc4c5eb1312b5dfc72f17
application/octet-stream
1.06MB
2025-10-28 16:24:06 +0000 UTC
dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · cmd.exe

/PC Seed/GTA_Trilogy_Definitive_Linux/GTA3_DE/wine/lib/wine/x86_64-windows/

France · Scaleway S.a.s.

SHA1: c690318101fb2363a3998338cbd5d9ff963a8d77
SHA256: a90fa5a43f9a1b2476531639c98e008c94deeac1976cc4c5eb1312b5dfc72f17
application/octet-stream
1.06MB
2025-10-28 13:52:32 +0000 UTC
dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · cmd.exe

/PC Seed/CrashBandicoot4_Linux/wine/lib/wine/x86_64-windows/

France · Scaleway S.a.s.

SHA1: e2fa541d33178014dc0bd526e1b10d67fdbe418f
SHA256: 2987e79c9cac64b82e330a6bdbe1c13e34c9db337a9eec845340d365a0ba048b
application/octet-stream
1.02MB
2025-10-28 16:04:53 +0000 UTC
121.18.80.70 · cmd.exe

/

China · CHINA UNICOM China169 Backbone

SHA1: a4d7b99eb716919bb47448e135d489a1100ba70c
SHA256: 614ca7b627533e22aa3e5c3594605dc6fe6f000b0cc2b845ece47ca60673ec7f
application/octet-stream
198.00KB
1970-01-01 00:00:00 +0000 UTC
mmmma.nz.waw.pl · cmd.exe

/c/$Root/WINDOWS/system32/dllcache/

Poland · Play

SHA1: 811a005cf787c6ccbe0d9f1c36c1d49a9cb71fd1
SHA256: 62abed7d45040381bbced97ea7b6c697b418448fd3322fd4bfb2bbfdb6155eb4
application/x-msdos-program
380.00KB
2013-08-21 18:02:28 +0000 UTC
mmmma.nz.waw.pl · cmd.exe

/c/$Root/WINDOWS/system32/

Poland · Play

SHA1: 811a005cf787c6ccbe0d9f1c36c1d49a9cb71fd1
SHA256: 62abed7d45040381bbced97ea7b6c697b418448fd3322fd4bfb2bbfdb6155eb4
application/x-msdos-program
380.00KB
2013-08-21 18:02:28 +0000 UTC