CmdID / Files

ContactApis.dll

DLL for ContactsRT file version info

Library on Windows 2 known copies with hashes

Is it the real ContactApis.dll?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionDLL for ContactsRT

2 known copies

10.0.19041.264 (WinBuild.160101.0800) · C:\Windows\system32\ContactApis.dll · signed by Microsoft Windows

SHA-256ca6aaafb1c073876613044dfc88554e953d398b937967ffaecc67ec69fdba5bcSHA-1561248fcff44a38a4d63ca97848eb410c73db836MD5ba968a649031da1613c3f6fd77f7162c

10.0.19041.264 (WinBuild.160101.0800) · C:\Windows\SysWOW64\ContactApis.dll · signed by Microsoft Windows

SHA-256fcde084e257bc3136c26bf38d6f4fc80db023c4b6690af08e37ee898317b31f6SHA-1eb6c922c0549b5d0665cec4706695118f93d5840MD5187e5f751b6d2ec63c21675e74fa4d61

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<hash>".whatis() says which known copy an MD5, SHA-1 or SHA-256 is.