mbidgenerator.exe
Program on Windows 4 known copies with hashes
Is it the real mbidgenerator.exe?
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\4 known copies
10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\mbidgenerator.exe · signed by Microsoft Corporation
2a28657c9a3a8b2be40fcc13a3ba6e016763890d9a27449e8529fe9c9880d7cf10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\mbidgenerator.exe · signed by Microsoft Corporation
6101a9b82a79dc9c3293e6423a87740e4ac6907ba9aa7adef0ed954cdabde4ae10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\mbidgenerator.exe · signed by Microsoft Windows Kits Publisher
a08077560537b358e48200067298d5fb026c835ceb40a44e2e3e827fbf2a484c10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\mbidgenerator.exe · signed by Microsoft Windows Kits Publisher
a173370bec1d46272313e1815f7858ad7ec4a71200c29e1aeb8001148dc97f67From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.