FXSUNATD.exe
Microsoft Fax Unattend Setup Program file version info
Program on Windows 5 known copies with hashes
Is it the real FXSUNATD.exe?
C:\Windows\system32\5 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\FXSUNATD.exe · signed by Microsoft Windows
1676b9ce9bc84656e881a35fea8b7588e378be13e0c8a0e49431edb40c32bb1e10.0.19041.804 (WinBuild.160101.0800) · C:\Windows\system32\FXSUNATD.exe · signed by Microsoft Windows
5f6a16efac9c4616d931f60764ec208f26499362e78850b2b39c7b0ed576e11e10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\FXSUNATD.exe · signed by Microsoft Windows
c665e8d130a01fea91b8a38a9deaebd57f0fc71a4e6709225a408d02f47adef410.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\FXSUNATD.exe · signed by Microsoft Windows
8df36e87dab3ec15a9fb96e431657bd19ba61da7e11c232c8a722008e8512c8510.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\FXSUNATD.exe · signed by Microsoft Windows
078cbbbcc628066d667b667436e8defd83609e3f2f424d9862fe7f79c2b5771bFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.