immersivetpmvscmgrsvr.exe
Immersive TPM Virtual Smart Card Manager COM Server file version info
Program on Windows 7 known copies with hashes
Is it the real immersivetpmvscmgrsvr.exe?
C:\Windows\system32\7 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\immersivetpmvscmgrsvr.exe · signed by Microsoft Windows
1fa6361f3b21745a257ab6c8229cdd97d9710cd883622536b2b3e9d1417ea33f10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\immersivetpmvscmgrsvr.exe · signed by Microsoft Windows
b1395245e76be0edb9b0c9c7d59660314893ab5c6609e794131789ea79e7284110.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\immersivetpmvscmgrsvr.exe · signed by Microsoft Windows
b73b34b529d5c3efb989c89d05055f365a4526e0d6b4e55c4ac7b9c56435cf5810.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\immersivetpmvscmgrsvr.exe · signed by Microsoft Windows
dfe159777e9dc8d1977dea21acf9e4241f816d73777f7ad73bfa2a1f53737e2d10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\immersivetpmvscmgrsvr.exe · signed by Microsoft Windows
0e930949fad2bcd206d0b1129f21defbb5eae4b21df5a7099e8b17814ea90f3010.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\immersivetpmvscmgrsvr.exe · signed by Microsoft Windows
703a98a8ac4b66063ba7c899b56625dd91a41aaa9c332ead121030f18ec3ca656.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\immersivetpmvscmgrsvr.exe · not signed
1f83f9d9201ed34b18d1452e439d6d2fb51b52a2fa627ccae3b2976d78af83b2From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.