CmdID

CmdID / Files

nvspinfo.exe

"nvspinfo.PROGRAM" file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real nvspinfo.exe?

file version info and known copies
Original name"nvspinfo.PROGRAM" in the file’s header: a renamed copy still carries it
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
Description"nvspinfo.PROGRAM"

2 known copies

10.0.18362.815 (WinBuild.160101.0800) · C:\WINDOWS\system32\nvspinfo.exe · signed by Microsoft Windows

ba42c97e7c8f7f63c3559505054813e5cf6bab8dda5e525b134d345d54995bec

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\nvspinfo.exe · signed by Microsoft Windows

461bed0c59b3c815e8d0cbf8728d86d977520381bec611a3792967847f67515a

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.