CmdID

CmdID / Files

WsatConfig.exe

MB Version update tool file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real WsatConfig.exe?

file version info and known copies
Installed inC:\Windows\Microsoft.NET\Framework\v4.0.30319\
Signed byMicrosoft Windows
ProductMicrosoft .NET Framework, Microsoft Corporation
DescriptionMB Version update tool

2 known copies

4.8.4161.0 built by: NET48REL1 · C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WsatConfig.exe · signed by Microsoft Windows

d1fc722d5e6994aaeade7b8b7e5b392a4f2bb7d93ca64bd058038a266480b2e6

4.8.4084.0 built by: NET48REL1 · C:\Windows\Microsoft.NET\Framework\v4.0.30319\WsatConfig.exe · signed by Microsoft Windows

1d2e773836cffb7f8529a56b51b7aa385c8109ebc8bfd4d3ebc8818cd6d8c67c

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.