CmdID

CmdID / Files

MuiUnattend.exe

MUI unattend action file version info

Program on Windows 18 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real MuiUnattend.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMUI unattend action

18 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\MuiUnattend.exe · signed by Microsoft Windows

3d4322bb4c9f76c3a4e5c5d25432fecb4f4ae543ff94886f766d922efbf9f250

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\MuiUnattend.exe · signed by Microsoft Windows

c4bebea9fb7006d0b5c6b085ca4dfda7e0580003ebd3cf76dc3175f9ff148c18

10.0.19041.906 (WinBuild.160101.0800) · C:\Windows\system32\MuiUnattend.exe · signed by Microsoft Windows

5ea7389ce3f85fac577e848b4d47c70b1a169520e466b5b41c2c5c1763c75311

10.0.19041.906 (WinBuild.160101.0800) · C:\Windows\SysWOW64\MuiUnattend.exe · signed by Microsoft Windows

fb289939bf28259c630e0b9ff3fe3166607aa9458c76b22f8c87718c266bceae

10.0.19041.662 (WinBuild.160101.0800) · C:\Windows\system32\MuiUnattend.exe · signed by Microsoft Windows

4d27f41ffda9fbcc4347568cf184ef2065c77cb091cb14eedcdddcb575eae343

10.0.19041.662 (WinBuild.160101.0800) · C:\Windows\SysWOW64\MuiUnattend.exe · signed by Microsoft Windows

ac644ff7c0d30e0c0bea00255ca65cfdcb5972799ace79fca41c50bf496e44e9

10.0.19041.572 (WinBuild.160101.0800) · C:\Windows\system32\MuiUnattend.exe · signed by Microsoft Windows

3fe9fa358a03426ba327b4c70fe581303500ba5791844715acf7911fec5d2def

10.0.19041.572 (WinBuild.160101.0800) · C:\Windows\SysWOW64\MuiUnattend.exe · signed by Microsoft Windows

bb438514a62ca5de5b43736574666efd241a7b56b258531b26be89d6d32f4a72

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\MuiUnattend.exe · signed by Microsoft Windows

b04374adbbf567c91bce26190cb607ca8df397221d3519a850aac6e468a279a7

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\MuiUnattend.exe · signed by Microsoft Windows

bde390d7b5da519e4fe4337ee122585cb58aa5d2050b0065a83c3c19a5011c27

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\MuiUnattend.exe · signed by Microsoft Windows

62c9e67e5447015796fc85f62d7d8fd5f5b892099741ac1ccd7da0d39308337a

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\MuiUnattend.exe · signed by Microsoft Windows

b8c475862dbf8c1bcada24d17e17f91f368fd8809851e5899516ab3fd149ed39

10.0.17763.1075 (WinBuild.160101.0800) · C:\Windows\SysWOW64\MuiUnattend.exe · signed by Microsoft Windows

43408cd5855c5adf95258df630279f32bbf92396a1508984c412e8b54e865192

10.0.17763.1075 (WinBuild.160101.0800) · C:\Windows\system32\MuiUnattend.exe · signed by Microsoft Windows

6f2f265d4c5df2ff2bd63d7af2d6bbffbf95cc76b3d92e396cc3abd6ddaa4a63

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\MuiUnattend.exe · signed by Microsoft Windows

a01fc2915aefb115aed8ad4d3b257ce410072164721d257c533c5a60d8416807

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\MuiUnattend.exe · signed by Microsoft Windows

cd673d3c8fda0735c894e0c0e8a92d9c52537d25321537ec105399026b316fb4

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\SysWOW64\MuiUnattend.exe · not signed

a4ad03c8b96059ac25cc470965653bc1ea2a0c88926337c62dee94a303087ce3

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\system32\MuiUnattend.exe · not signed

f62985495ec318327c40ff98276da4bd390f844300dd1adba0397e544596cb75

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.