CmdID

CmdID / Files

phoneactivate.exe

Phone Activation UI file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real phoneactivate.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionPhone Activation UI

7 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\phoneactivate.exe · signed by Microsoft Windows

7eb805ff4278bdcb9000521e5255a4b19c1b372e9279c6bfcc83dd6ff2098f8e

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\phoneactivate.exe · signed by Microsoft Windows

4325652e762c5ba53c48752373aa2eca1ca0f91c19e826160fc9b195e1d5e70a

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\phoneactivate.exe · signed by Microsoft Windows

cea83eb34233fed5ebeef8745c7c581a8adbefbcfc0e30e2d30a81000c821017

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\phoneactivate.exe · signed by Microsoft Windows

fbecbd9f4e2bb637cee4542a794a769bf2f5a7c431fd529a9b9e9a1e6e5daf87

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\phoneactivate.exe · signed by Microsoft Windows

a2f5af6e07f164bfa44bec802a877bee157f0dc830c8d33fc341411249a1b99b

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\phoneactivate.exe · signed by Microsoft Windows

9310f80d49fc67c792dcfaadbabd84f026619198e7bac4fd5798548f72a6af5d

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\phoneactivate.exe · signed by Microsoft Windows

411ea79b87fb9b44746c2a711333b45e369f5583f4bb3286653fc1a15e457a9d

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.