CmdID

CmdID / Files

UevTemplateConfigItemGenerator.exe

Program on Windows 5 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real UevTemplateConfigItemGenerator.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft (R) Windows (R) Operating System, Microsoft Corporation

5 known copies

10.0.19041.1 · C:\Windows\system32\UevTemplateConfigItemGenerator.exe · signed by Microsoft Windows

ed370e58e64e68c3dbde73cfad811d35048452688a7001a202c1c1cd630a5b29

10.0.18362.449 · C:\WINDOWS\system32\UevTemplateConfigItemGenerator.exe · signed by Microsoft Windows

1b54e90fd38a7f2d48e30c90bc9d12fc460bbcbe40f7c76eb2f7d6f7ce8c14d5

10.0.17763.1 · C:\Windows\system32\UevTemplateConfigItemGenerator.exe · signed by Microsoft Windows

dec77615d3a9750ac4dad68bda96c4794033cdff2c3e52e99ee0934326943663

10.0.14393.0 · C:\Windows\system32\UevTemplateConfigItemGenerator.exe · signed by Microsoft Windows

89dc8f516eae2f9d56da7e0fa795c1b8434c0206b0c32c7e391e5c0b41368c60

0.0.0.0 · C:\WINDOWS\system32\UevTemplateConfigItemGenerator.exe · signed by Microsoft Windows

ce1126e2f236846b632defb5cac7fc4c58f41ccf04bbf59bab795881e3ff2739

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.