TapiUnattend.exe

  • File Path: C:\WINDOWS\SysWOW64\TapiUnattend.exe
  • Description: Microsoft Windows(TM) Telephony Unattend Action

Hashes

Type Hash
MD5 B3666861F375DBA387C374FA7F8D300D
SHA1 A441435DD52168895F11752E5FE43571054EF39D
SHA256 30AA7079A15B4745649B077784DAA1647137D220B7041F6CE633BEE787F04EFD
SHA384 DD8382EE493A11FEB114943D1A7FCA523DA8404EF7C177AEF17C6226919C4683F22F671F5EEC35FBDE3D9CA538C152F8
SHA512 E7B7D34217D00A1B92CF5199FC9F3D73D17DDA2F927A270A7D0991114AA355EECCC0B0D9E6287C3BEDC44402DA1F49874613651DC3FB9EB763F0A187453C2FF9
SSDEEP 192:OaadkYPdilaGPwrnnFzs3sKDtx2kqQ1Xhsabg58QgVGGW/VUWXA:8vPUYWk1sZDtx2kqQ1RsP56GGW/VUW
IMP 38D2F52A7BB6275BB518DEE25030D230
PESHA1 FDCDF04E478FA0A573FBCD92154BFFAD487B135D
PE256 4A121CDC066D2A9F25C935725A97834ADB8E246279D7DD80A59FB03A892F322C

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\wow64.dll
C:\WINDOWS\System32\wow64base.dll
C:\WINDOWS\System32\wow64con.dll
C:\WINDOWS\System32\wow64cpu.dll
C:\WINDOWS\System32\wow64win.dll
C:\WINDOWS\SysWOW64\TapiUnattend.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: TapiUnattend.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/30aa7079a15b4745649b077784daa1647137d220b7041f6ce633bee787f04efd/detection

File Similarity (ssdeep match)

File Score
C:\Windows\SysWOW64\TapiUnattend.exe 47
C:\Windows\SysWOW64\TapiUnattend.exe 47
C:\WINDOWS\SysWOW64\TapiUnattend.exe 47
C:\windows\SysWOW64\TapiUnattend.exe 43
C:\Windows\SysWOW64\TapiUnattend.exe 44

MIT License. Copyright (c) 2020-2021 Strontic.