netcfg.exe

File Path: C:\Windows\system32\netcfg.exe
Description: WinPE network installer

Hashes

Type	Hash
MD5	`01504F3B8B252F5619C94FD65DC52842`
SHA1	`864612BAA46728B9605A38262486AB4F4D36E1B0`
SHA256	`EAD06F5F5EB67FDF1CCB25511D6D7CA38DDD307B4499274886E04BEC53F1C76D`
SHA384	`8750352134C9820DC6BBD3E70175513D56BC83904BD80C937BA7134A28D8DBC9A43304DBDC7A91F3EB6EB0691009B2CC`
SHA512	`64CD48923524108C8E490C9EA5E6D629777E2BA3369841676148BF4844B22820311C82C9A0CCAFED3BFEA2921920572FBAD1C003272E20AE611B507E34F62DAE`
SSDEEP	`768:HDxQg9VbHv2PPCHM4OTJ0G/N1oUd8ONn3/UpgyQV2N5DyQzDM0cwft:HDKg/L2OMpZN1ocnPggy/DyyD9Tt`
IMP	`8A37733FD8C84A4AE8E86BE773288EE1`
PESHA1	`E5E884DF0FC5E02CA916A81EC478EF33D2C73A07`
PE256	`5072A33F2C570F9A00E4B1FC46890DE69D7FF4C9108C10EB5311757201AABC14`

Runtime Data

Usage (stdout):

netcfg [-v] [-winpe] [-l <full-path-to-component-INF>] -c <p|s|c> 
       -i <comp-id>
    
    -winpe installs TCP/IP, NetBIOS and Microsoft Client for Windows 
           preinstallation environment
    -l	   provides the location of INF
    -c	   provides the class of the component to be installed (p == Protocol, 
           s == Service, c == Client)
    -i	   provides the component ID

    The arguments must be passed in the order shown.

    Examples:
    
    netcfg -l c:\oemdir\myprot.inf -c p -i myprot
    
        Installs protocol 'myprot' using c:\oemdir\myprot.inf

    netcfg -c s -i MS_Server
     
        Installs service 'MS_Server'
 
OR

netcfg [-v] -winpe

    Example:
    
    netcfg -v -winpe

        Installs TCP/IP, NetBIOS, and Microsoft Client for Windows 
        preinstallation environment

OR

netcfg [-v] -q <comp-id>

    Example:
    
    netcfg -q MS_IPX
    
        Displays if component 'MS_IPX' is installed

OR

netcfg [-v] -u <comp-id>

    Example:

    netcfg -u MS_IPX

        Uninstalls component 'MS_IPX'

OR

netcfg [-v] -s <a|n>

    -s  provides the type of components to show (a == adapters, 
        n == net components)

    Example:
    
    netcfg -s n

        Shows all installed net components

OR

netcfg [-v] -b <comp-id>

    Example:

    netcfg -b ms_tcpip

        Shows binding paths containing 'MS_TCPIP'

OR

netcfg [-v] -m

    Example:

    netcfg -m 

        Outputs the binding map to NetworkBindingMap.txt in the current directory.
        -v will also display the binding map to the console.

OR

netcfg -d

    Example:

    netcfg -d

        Performs a cleanup on all networking devices.
		This will require a reboot.

OR

netcfg -x

    Example:

    netcfg -x

        Performs a cleanup on networking devices, skipping those without physical
        object names.
		This will require a reboot.

General Notes:
  -v	Run in verbose (detailed) mode
  -?	Displays this help information

Loaded Modules:

Path
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\system32\netcfg.exe
C:\Windows\SYSTEM32\ntdll.dll

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: netcfg.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: Language Neutral
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/75
VirusTotal Link: https://www.virustotal.com/gui/file/ead06f5f5eb67fdf1ccb25511d6d7ca38ddd307b4499274886e04bec53f1c76d/detection

Additional Info*

*The information below is copied from MicrosoftDocs, which is maintained by Microsoft. Available under CC BY 4.0 license.

netcfg

Applies to: Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

Installs the Windows Preinstallation Environment (WinPE), a lightweight version of Windows used to deploy workstations.

Syntax

netcfg [/v] [/e] [/winpe] [/l ] /c /i

Parameters

Parameter	Description
/v	Runs in verbose (detailed) mode.
/e	Uses servicing environment variables during install and uninstall.
/winpe	Installs TCP/IP, NetBIOS, and Microsoft Client for Windows preinstallation environment (WinPE).
/l	Provides the location of the INF file.
/c	Provides the class of the component to be installed; protocol, service, or client.
/i	Provides the component ID.
/s	Provides the type of components to show, including \ta for adapters or n for net components.
/b	Displays the binding paths, when followed by a string containing the name of the path.
/?	Displays help at the command prompt.

Examples

To install the protocol example using c:\oemdir\example.inf, type:

netcfg /l c:\oemdir\example.inf /c p /i example

To install the MS_Server service, type:

netcfg /c s /i MS_Server

To install TCP/IP, NetBIOS and Microsoft Client for Windows preinstallation environment, type:

netcfg /v /winpe

To display if component MS_IPX is installed, type:

netcfg /q MS_IPX

To uninstall component MS_IPX, type:

netcfg /u MS_IPX

To show all installed net components, type:

netcfg /s n

To display binding paths containing MS_TCPIP, type:

netcfg /b ms_tcpip

Additional References

Command-Line Syntax Key