CmdID

CmdID / Files

SrvInitConfig.exe

Server Configurations file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real SrvInitConfig.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionServer Configurations

2 known copies

10.0.17763.802 (WinBuild.160101.0800) · C:\Windows\system32\SrvInitConfig.exe · signed by Microsoft Windows

45456cb23d06aa84542419a2792878b2ecedf706e4728fd5ccd15f0a20ef8687

10.0.17763.1432 (WinBuild.160101.0800) · C:\Windows\system32\SrvInitConfig.exe · signed by Microsoft Windows

910dbb5ff276af300c23a7d1c22007837a2d455496dde1d9d23a8ebb05db0c0c

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.