CmdID

CmdID / Files

HvsiSettingsWorker.exe

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real HvsiSettingsWorker.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows

4 known copies

Version not recorded · C:\WINDOWS\system32\HvsiSettingsWorker.exe · signed by Microsoft Windows

2092706875ea40e1ae2e846faab1c57808ca46bcd4479833f13e4723571503c3

Version not recorded · C:\Windows\system32\HvsiSettingsWorker.exe · signed by Microsoft Windows

a6882faa9dd142e88332aa72d80d8d9c0093e0fac6eefbf874b1a024b00312e8

Version not recorded · C:\Windows\system32\HvsiSettingsWorker.exe · signed by Microsoft Windows

a9a61b8d6cf706aac9c7ceac78988a85ca05572e128e316b41262701fa86267e

Version not recorded · C:\Windows\system32\HvsiSettingsWorker.exe · signed by Microsoft Windows

e9503b7dfaa39e57374cb82ca8faa4e7a6913a2a0fdb347266daf270790014da

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.