CmdID

CmdID / Files

UI0Detect.exe

Interactive services detection file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real UI0Detect.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionInteractive services detection

2 known copies

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\UI0Detect.exe · signed by Microsoft Windows

049a16ac87f93e761150c8286633ffca62ee85f5645dde77d36bd0eb6481ff83

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\UI0Detect.exe · not signed

2686be85f963d0d0bb275e92e5b543280d8742cf10772303e3189d0719b6a277

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.