SrvInitConfig.exe
Server Configurations file version info
Program on Windows 2 known copies with hashes
Is it the real SrvInitConfig.exe?
Installed in
C:\Windows\system32\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionServer Configurations
2 known copies
10.0.17763.802 (WinBuild.160101.0800) · C:\Windows\system32\SrvInitConfig.exe · signed by Microsoft Windows
45456cb23d06aa84542419a2792878b2ecedf706e4728fd5ccd15f0a20ef868710.0.17763.1432 (WinBuild.160101.0800) · C:\Windows\system32\SrvInitConfig.exe · signed by Microsoft Windows
910dbb5ff276af300c23a7d1c22007837a2d455496dde1d9d23a8ebb05db0c0cFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.