CmdID

CmdID / Files

drvcfg.exe

Driver Configuration Module file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real drvcfg.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionDriver Configuration Module

4 known copies

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\drvcfg.exe · signed by Microsoft Windows

8a452979033516b9e292af1472934290d19dab4c716d6a9dfcba80c8bf4b1ddf

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\drvcfg.exe · signed by Microsoft Windows

20475a39e2c44fee59e1c7d68d99866dc65ca45740b5212db9e83da2b7d1f575

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\drvcfg.exe · signed by Microsoft Windows

265931e2682bb0ff454c539034261941a4da854677b2ffc96efec6916fe616eb

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\drvcfg.exe · not signed

5bf579687281524933e8ab09e59ae90f02d91fce7fe65796f25fd036b0cd6622

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.