The recent Microsoft signed rootkit has specific requests for collecting CPU-ID. That says something about the state of device fingerprinting, but I'm not sure exactly what that is.

https://www.bleepingcomputer.com/news/security/microsoft-adm...