CmdID

CmdID / Files

netcfg.exe

WinPE network installer file version info

Program on Windows 6 known copies with hashes Command netcfg

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real netcfg.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWinPE network installer

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\netcfg.exe · signed by Microsoft Windows

f0fdecf9b716a96078a4db4de5a1b7deea3b40b84d492a7aee320e9eaa60991a

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\netcfg.exe · signed by Microsoft Windows

ead06f5f5eb67fdf1ccb25511d6d7ca38ddd307b4499274886e04bec53f1c76d

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\netcfg.exe · signed by Microsoft Windows

cf6e6b447304b3cac8e24962d2ed9ee025b2218eb147f4c64fc6bb1837b3ee78

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\netcfg.exe · signed by Microsoft Windows

6820988b6804a05c7fc2f674961275861163395c2d73f6ad4a450f49282cc735

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\netcfg.exe · signed by Microsoft Windows

86ae098bde1d1b9541fc66d8e066327b73bd220218e75dd2c26fa1d50a585c34

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\netcfg.exe · not signed

f4e138c85c5c50306cfd36457edd549ca295ba3b2b60064a485116dcba17f8b6

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.