CmdID

CmdID / Files

difx64.exe

64 bit driver installer file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real difx64.exe?

file version info and known copies
Original nameDrv64.exe in the file’s header: a renamed copy still carries it
Installed inC:\WINDOWS\system32\
C:\WINDOWS\system32\DriverStore\FileRepository\igdlh64.inf_amd64_69885addc92dcf91\
Signed byMicrosoft Windows Hardware Compatibility Publisher
ProductIntel(R) Installation Framework, Intel Corporation
Description64 bit driver installer

2 known copies

1, 4, 3, 0 · C:\WINDOWS\system32\DriverStore\FileRepository\igdlh64.inf_amd64_69885addc92dcf91\difx64.exe · signed by Microsoft Windows Hardware Compatibility Publisher

85426eefbf5d742602ca4c4e4e75e6a80f89ef985d34675b57e577e494e42ad7

1, 4, 3, 0 · C:\WINDOWS\system32\difx64.exe · signed by Microsoft Windows Hardware Compatibility Publisher

ac7b45ae8dc109b727b525d6f19f729ba4ebbb76b40a1e72a555aee5df7ee070

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.