CmdID

CmdID / Files

Microsoft.Uev.CscUnpinTool.exe

Microsoft.Uev.CscUnpinTool EXE file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real Microsoft.Uev.CscUnpinTool.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft.Uev.CscUnpinTool EXE

7 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\Microsoft.Uev.CscUnpinTool.exe · signed by Microsoft Windows

c801b78c7eff204796b0c646827db88995c7c3aae016872dc04b64d4888e6f6e

10.0.19041.488 (WinBuild.160101.0800) · C:\Windows\system32\Microsoft.Uev.CscUnpinTool.exe · signed by Microsoft Windows

a5efb6ab80c76d5ec238bb952a8ee241ed13077f27fbecbf43f9780125034abf

10.0.19041.1052 (WinBuild.160101.0800) · C:\Windows\system32\Microsoft.Uev.CscUnpinTool.exe · signed by Microsoft Windows

414f768086f16d4572ccb3da7ca05d8a54b69fdf96369eefe7b088280589f605

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\Microsoft.Uev.CscUnpinTool.exe · signed by Microsoft Windows

219d68704cb78653b3c6ccd323b3c4e92655f3a27cd770886720515998aeb9ca

10.0.18362.449 (WinBuild.160101.0800) · C:\WINDOWS\system32\Microsoft.Uev.CscUnpinTool.exe · signed by Microsoft Windows

dee96b3eb164f41b4494058293e823640e8bbd4061628f10df5669b63194e8a7

10.0.17763.719 (WinBuild.160101.0800) · C:\Windows\system32\Microsoft.Uev.CscUnpinTool.exe · signed by Microsoft Windows

0aa862a9d84abf0ee2e69aece938b93f45587d3fa133086a21b7cc3120602f6f

10.0.14393.1737 (rs1_release_inmarket.170914-1249) · C:\Windows\system32\Microsoft.Uev.CscUnpinTool.exe · signed by Microsoft Windows

f6e9cf309867a8bdc0fbe9dbc609d7edadf2b998379e85be07e7a863c622b133

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.