UevTemplateBaselineGenerator.exe

  • File Path: C:\Windows\system32\UevTemplateBaselineGenerator.exe
  • Description:

Screenshot

UevTemplateBaselineGenerator.exe

Hashes

Type Hash
MD5 D748880CFCC6FC33A14BD6A9CF7CCF25
SHA1 453C43A0E55AE3CD1A9AE65E566C52B40236AEAE
SHA256 B188598D844F927A8B361622A6E16E004D7D1BC6D86D0DF17B2E1A66995D0EA3
SHA384 56B759F7D03254D80A36464642D5B0D9AB36FA29A13067A256CD91F171996A2272082EB8063BBFAFA688FE9770BBEBFD
SHA512 1F03F6AE73CB4B85F3CD3F630C4BE814D70F01A3838B2439EF200620532876BBAC5F9CF22D1CF695344D1EE4B39D495E5732B8E093EB0E5BC13944602B4D3A8F
SSDEEP 384:/aL8CUA6oNTSAkBcYKPdIQX6GIp0t6PMSK+NWIJWGZ:y4CbTSviBqAIp
IMP F34D5F2D4577ED6D9CEEC516C1F5A744
PESHA1 158986A1551EDE77D3E0A2C0CE181E5E8297CE7C
PE256 260F8A82194BED50D0669A6388BBFC8C97C8183255CF6F3A786E6F6B92A3853A

Runtime Data

Child Processes:

conhost.exe

Window Title:

UevTemplateBaselineGenerator.exe - This application could not be started.

Open Handles:

Path Type
(R-D) C:\Windows\Fonts\StaticCache.dat File
(R-D) C:\Windows\SysWOW64\en-US\user32.dll.mui File
(RW-) C:\Users\user File
(RW-) C:\Windows File
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17763.1518_none_b4b635d36e735c2c File
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000004.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000004.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\2\Windows\Theme2131664586 Section
\Windows\Theme966197582 Section

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\UevTemplateBaselineGenerator.exe
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: UevTemplateBaselineGenerator.exe
  • Product Name: Microsoft (R) Windows (R) Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1
  • Product Version: 10.0.17763.1
  • Language: Language Neutral
  • Legal Copyright: Copyright (c) Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/b188598d844f927a8b361622a6e16e004d7d1bc6d86d0df17b2e1a66995d0ea3/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\UevTemplateBaselineGenerator.exe 86
C:\Windows\system32\UevTemplateBaselineGenerator.exe 68
C:\WINDOWS\system32\UevTemplateBaselineGenerator.exe 86

MIT License. Copyright (c) 2020-2021 Strontic.