TabTip.exe
Summary
Touch Keyboard and Handwriting Panel - provides the on-screen touch keyboard for tablet and touchscreen input.
TabTip.exe is the 334th most commonly executed Windows program in EchoTrail's dataset, observed 26,698 times across enterprise environments. It typically runs from C:\Program Files\Common Files\microsoft shared\ink and it is most often launched by svchost.exe.
Behavior
Top Paths
- C:\Program Files\Common Files\microsoft shared\ink100%
Top Hashes (SHA256)
- bcfcc64ff4264dc31c4458aed124cd8de21133bd5fc2925f358be61d0ad932d030.19%
- 5a35d437fb06ce8973dbc8a39e38bb8e6548b8be4cb9d2809c16a4ab12bcbb2a22.58%
- bde542193a1b53d78de1492a9b2c9c4a14e6525ee3f5daafc83fa75e9aef791d8.01%
- a2c07fb29c573abdbdce10fe7ecdbbb3c43172f4e0f479bfe096e070216e66d27.77%
- bc5651f5aab9a1317a02248d11416b5d39e084e1e154ff8dd0ab2cf8a05817167.67%
- d5c13d667b20b60ffc198f3b8335f738714a5be8955b5f2249bdcc24e6bde88a5.41%
- e9d5027f6c866fe802336c91db13e4e87fb18865fb571f641f262676bc2c23b24.93%
- 939ab3cf0c128169343db1687848379032c63af62baf1041ca023eb7324ecd023.06%
- 52419ab6bdf747962578cfd84079024c6dfdfc3ba0464d07857da8d5b1d6f3922.91%
- 043ce8d288fbdb1fe2a7ecc96f6e1cec5411ec7147e8fd7e23905d29833ea08e1.7%
Process Ancestry
Top Grandparents
- services.exe98.62%
- explorer.exe1.01%
- userinit.exe0.37%
Top Parents
- svchost.exe90.76%
- chrome.exe0.52%
- explorer.exe0.24%
- firefox.exe0.09%
Top Children
- TabTip32.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about TabTip.exe
Rocky answers questions about TabTip.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.