CmdID

CmdID / Files

TapiUnattend.exe

Microsoft Windows(TM) Telephony Unattend Action file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real TapiUnattend.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft Windows(TM) Telephony Unattend Action

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\TapiUnattend.exe · signed by Microsoft Windows

30aa7079a15b4745649b077784daa1647137d220b7041f6ce633bee787f04efd

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\TapiUnattend.exe · signed by Microsoft Windows

b9f93c3cd67ab56dcfbc7394cdc974c9c92a231a2b12f2763c0d59174b906689

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\TapiUnattend.exe · signed by Microsoft Windows

6a960edad235f685e741e0f1a74d1162fd3cf410862192236f962ae289f0886e

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\TapiUnattend.exe · signed by Microsoft Windows

9ffa72ead7927f09d7106c62d5fde25e27f7bff27099101e15e5f7e903cd00f4

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\TapiUnattend.exe · signed by Microsoft Windows

30ef683c4a226931686aec61717066e35c41b6b3e9ff04d698718487369a826f

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\TapiUnattend.exe · signed by Microsoft Windows

7fddaa6adc4963be7a1b54679b4055c35c5fe66cae3cf2202a14244c107e9cf8

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\TapiUnattend.exe · signed by Microsoft Windows

137892cc79f32bf5a94a86d86ff107df006e77fd3f0215137da978c6552cb73a

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\TapiUnattend.exe · signed by Microsoft Windows

c1496333e673bba7d4fe460e3aa9fd59f79b1a62cce060875dd7a4e71d8ea388

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\TapiUnattend.exe · signed by Microsoft Windows

befe104e8cd9d6393bcaa9b3ad3fcbef4f29886975dcb6abbb617de06fe9b8f0

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\TapiUnattend.exe · signed by Microsoft Windows

fb23c57b1fe146f95a9dd404c1644dd0eb1fa11d480ebc48e6692b40dd966749

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\system32\TapiUnattend.exe · not signed

9620e4a67beb6adbe25b48b954dafbc2d366e75423c1a855cae18472eab88d8d

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\SysWOW64\TapiUnattend.exe · not signed

e661aca2f9fcb9b3ee9403c2233606993bb45c6fc28cd29e4ec6b280f9a888eb

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.