CmdID

CmdID / Files

UIMgrBroker.exe

Microsoft UIManager Broker file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real UIMgrBroker.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft UIManager Broker

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\UIMgrBroker.exe · signed by Microsoft Windows

56fcf2a1bd0c695e41a6fa38208c40509ccb01f6f86a694a68075995d0d24595

10.0.19041.388 (WinBuild.160101.0800) · C:\Windows\system32\UIMgrBroker.exe · signed by Microsoft Windows

b8d7a7f2e5a27af2b36c3e7db27ac39c378b197feb2afd590bc1fd2088bcc241

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\UIMgrBroker.exe · signed by Microsoft Windows

e2ad25f8fb5e60b3faa4aba360cf86afc4acf9aaf4749d6f7788ab54b740140d

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\UIMgrBroker.exe · signed by Microsoft Windows

6ad5d5fb380224f38878695ef666663b438c038e1b03d9632ca5fcd9cd1540ac

10.0.17763.1339 (WinBuild.160101.0800) · C:\Windows\system32\UIMgrBroker.exe · signed by Microsoft Windows

b09dcfedbb4a4f39a0f0d854d20842123de9d75163821ddbddc9ac4e149a2fdb

10.0.17763.1 (WinBuild.160101.0800) · C:\windows\system32\UIMgrBroker.exe · signed by Microsoft Windows

6fe8c19cbeeb97935af77512b176a25a9cd92e20a1ab98f1d357b9971bc04cc8

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.