CmdID

CmdID / Files

GenValObj.exe

Microsoft Software Protection Platform Admin Object file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real GenValObj.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft Software Protection Platform Admin Object

6 known copies

10.0.22000.176 (WinBuild.160101.0800) · C:\WINDOWS\system32\GenValObj.exe · signed by Microsoft Windows

f655679df144b838d84e696094c902f50370f0f666d79daf2c51d82e1462cf3e

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\GenValObj.exe · signed by Microsoft Windows

126ab3b346252be7227fbdc67f9fdc5f66d698df771deb1a1fda6f6b1afe810a

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\GenValObj.exe · signed by Microsoft Windows

86985b06d70eaf15c4a153e0c6249585f845f9c99f76dbb8105f34ec502eb6f4

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\GenValObj.exe · signed by Microsoft Windows

c8c6f0629403c87c36d42d5aed07d9602b6ab0d8e48cbf727a2fa3bf22469730

10.0.14393.2273 (rs1_release_1.180427-1811) · C:\Windows\system32\GenValObj.exe · signed by Microsoft Windows

ffc29d1a0b6412ab2519ddcc11b12e2083744178820567d6b2e26ec2122fc0f8

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\GenValObj.exe · signed by Microsoft Windows

a162fbc31868aa71bb6c2f1ddb5e8c3016f2c9de6a9c46a481a4993e6d258bed

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.