CmdID

CmdID / Files

accevent.exe

Accessible Event Watcher (32-bit UNICODE Release) file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real accevent.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\
Signed byMicrosoft Windows Kits Publisher
ProductMicrosoft Active Accessibility, Microsoft Corporation
DescriptionAccessible Event Watcher (32-bit UNICODE Release)

4 known copies

7.2.0.0 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\accevent.exe · signed by Microsoft Windows Kits Publisher

0a5c6c4127c9c55420089fe465dab810f068768c0ab278410bbe4f633664bc00

7.2.0.0 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\accevent.exe · signed by Microsoft Corporation

1369e8f96e54732f45ffac11c713892f2cdf7ab688bed4b70209dc964928314b

7.2.0.0 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\accevent.exe · signed by Microsoft Corporation

6917fb723925188a1c1b9a88ba279fd9fc9ef374b8895aac7bce00e0d1f05e7b

7.2.0.0 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\accevent.exe · signed by Microsoft Windows Kits Publisher

939f3b8f2ae50d2a619c4ea6beeec3e41cb002c3fc83d97ce189f764930f2c91

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.