CmdID

CmdID / Files

ApplySettingsTemplateCatalog.exe

ApplySettingsTemplateCatalog EXE file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real ApplySettingsTemplateCatalog.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionApplySettingsTemplateCatalog EXE

7 known copies

10.0.22000.41 (WinBuild.160101.0800) · C:\WINDOWS\system32\ApplySettingsTemplateCatalog.exe · signed by Microsoft Windows

398e8a5a0b996272b288040d8eedfe2f6747560d56d54c87b09d4d9bfd3a28ef

10.0.19041.488 (WinBuild.160101.0800) · C:\Windows\system32\ApplySettingsTemplateCatalog.exe · signed by Microsoft Windows

76002759efe9430ff557d6a6ad309336e2be8cb650dd05ef71fec80f26fb135c

10.0.19041.1320 (WinBuild.160101.0800) · C:\Windows\system32\ApplySettingsTemplateCatalog.exe · signed by Microsoft Windows

18fb4e476f670b532d5227fc8ff9d7d55c151102875d64e80f2dc0cbd569861c

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\ApplySettingsTemplateCatalog.exe · signed by Microsoft Windows

9ac9a088e62a1b7591f2c33d64d7684da6533e8eb716eb9eb85384c1dd522530

10.0.18362.449 (WinBuild.160101.0800) · C:\WINDOWS\system32\ApplySettingsTemplateCatalog.exe · signed by Microsoft Windows

32de6868035a1230d6fa69715eadd35c5e8a02fb2459eef50acf40d15854ab7e

10.0.17763.1007 (WinBuild.160101.0800) · C:\Windows\system32\ApplySettingsTemplateCatalog.exe · signed by Microsoft Windows

54062bd49c1120990100ab837d08f976d0159ff4208a279b6bf81a607c27b989

10.0.14393.3471 (rs1_release_1.191218-1729) · C:\Windows\system32\ApplySettingsTemplateCatalog.exe · signed by Microsoft Windows

a6b2bc0de4fa4db587fe4fa0b9ba368904ba14508d61802988f5933ce4678671

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.