UevTemplateBaselineGenerator.exe

  • File Path: C:\Windows\system32\UevTemplateBaselineGenerator.exe
  • Description:

Screenshot

UevTemplateBaselineGenerator.exe

Hashes

Type Hash
MD5 C85A5D2C00FF444E9E7D3E31977234AE
SHA1 A773267945FB049F756A0133335C454FCE18C380
SHA256 303BE386109BD9CF507B72F467AE9DDB22AE1B85FD05423DAFC9385624EB1053
SHA384 B9A381BC32DF7DAEC1C2CB0855D282774100F8052D4D8D8CA937323098D8A75CCE0412B0D482959B911B8D3FF626C4C0
SHA512 38CCE8A3702C87A99FF21D3176089A642DCC037889AC2C754666AF3BBE3FDA83CB06C4BD4741466D1D4574DF09D9464328D7390E85F42E71345706E578DD53BB
SSDEEP 384:OwL8CUA6oNTSAkBcYKPdIQX6GIp056PMSK++WTJW9Z:Z4CbTSviBqYe+
IMP F34D5F2D4577ED6D9CEEC516C1F5A744
PESHA1 66EA67C2A5A1AA5A2B48243BE26906B575E5D3E2
PE256 215D588F8C290FCE2BB56F2C5980B0D97A2E3C3DEDD35CAB88C910EAAC960F57

Runtime Data

Child Processes:

conhost.exe

Window Title:

UevTemplateBaselineGenerator.exe - This application could not be started.

Open Handles:

Path Type
(R-D) C:\Windows\Fonts\StaticCache.dat File
(R-D) C:\Windows\SysWOW64\en-US\user32.dll.mui File
(RW-) C:\Users\user File
(RW-) C:\Windows File
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.19041.488_none_89e6152f0b32762e File
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\1\Windows\Theme1175649999 Section
\Windows\Theme601709542 Section

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\UevTemplateBaselineGenerator.exe
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: UevTemplateBaselineGenerator.exe
  • Product Name: Microsoft (R) Windows (R) Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1
  • Product Version: 10.0.19041.1
  • Language: Language Neutral
  • Legal Copyright: Copyright (c) Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/303be386109bd9cf507b72f467ae9ddb22ae1b85fd05423dafc9385624eb1053/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\UevTemplateBaselineGenerator.exe 68
C:\Windows\system32\UevTemplateBaselineGenerator.exe 86
C:\WINDOWS\system32\UevTemplateBaselineGenerator.exe 93

MIT License. Copyright (c) 2020-2021 Strontic.