UevTemplateConfigItemGenerator.exe
- File Path:
C:\Windows\system32\UevTemplateConfigItemGenerator.exe
- Description:
Screenshot
Hashes
Type | Hash |
---|---|
MD5 | 45FB133A09574504B7548E74E3A27992 |
SHA1 | BFD0D23624371D54FAD847C4EB76009F0E435352 |
SHA256 | DEC77615D3A9750AC4DAD68BDA96C4794033CDFF2C3E52E99EE0934326943663 |
SHA384 | F67B941F01E6B08A375920CECE50A381D1C8E3CB245682DBCE7540A88771F6EDF6E376963CAAB88ACDD985CBA2F53AF5 |
SHA512 | 8F81597DE061EDFD5B619B1A18C5C54F884E0F53B922FB946C6F8AAB4FEC00DD0F40FE5C776B35B5B1E6F0EAFCDBC08D885EBD18E5FC5C6A8121D6BAC84C1B0F |
SSDEEP | 192:xq0JHU41GGkZ1ElGTubagmrCdsa/2pk0rqWp8eMPOHnGW8FW4zv:c0pU4G1MCIbmOdsa/2psWp8esW8FW4L |
IMP | F34D5F2D4577ED6D9CEEC516C1F5A744 |
PESHA1 | 71591D9CC9EF214CD7E7558473F97B6CC308C482 |
PE256 | C93645E0DB9C59CA1B3CBE33F738A4AF220464644683AD08F26D9325ECDECD7A |
Runtime Data
Child Processes:
conhost.exe
Window Title:
UevTemplateConfigItemGenerator.exe - This application could not be started.
Open Handles:
Path | Type |
---|---|
(R-D) C:\Windows\Fonts\StaticCache.dat | File |
(R-D) C:\Windows\SysWOW64\en-US\user32.dll.mui | File |
(RW-) C:\Users\user | File |
(RW-) C:\Windows | File |
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.17763.1518_none_b4b635d36e735c2c | File |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000004.db | Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000004.db | Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro | Section |
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 | Section |
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 | Section |
\Sessions\2\Windows\Theme2131664586 | Section |
\Windows\Theme966197582 | Section |
Loaded Modules:
Path |
---|
C:\Windows\SYSTEM32\ntdll.dll |
C:\Windows\system32\UevTemplateConfigItemGenerator.exe |
C:\Windows\System32\wow64.dll |
C:\Windows\System32\wow64cpu.dll |
C:\Windows\System32\wow64win.dll |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: UevTemplateConfigItemGenerator.exe
- Product Name: Microsoft (R) Windows (R) Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.17763.1
- Product Version: 10.0.17763.1
- Language: Language Neutral
- Legal Copyright: Copyright (c) Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/71
- VirusTotal Link: https://www.virustotal.com/gui/file/dec77615d3a9750ac4dad68bda96c4794033cdff2c3e52e99ee0934326943663/detection/
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.