CmdID

CmdID / Files

rmttpmvscmgrsvr.exe

TPM Virtual Smart Card Manager DCOM Server file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real rmttpmvscmgrsvr.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionTPM Virtual Smart Card Manager DCOM Server

7 known copies

1.00 (winblue_r4.141028-1500) · C:\windows\system32\rmttpmvscmgrsvr.exe · not signed

898aef79d3dc23b1127c39b1a95943361a9afbee298b856124c5170aaaf5e18c

1.00 (rs1_release.180427-1804) · C:\Windows\system32\rmttpmvscmgrsvr.exe · signed by Microsoft Windows

de2aa596dbbcc30f21cb8817e40aed2071aa65ed98fee8a60214c885ffed6460

1.00 (WinBuild.160101.0800) · C:\Windows\system32\rmttpmvscmgrsvr.exe · signed by Microsoft Windows

5f5153dd2d8c6b529ccca08ca73bce7d55c10199e4fab32e910b3f4afea9a04e

1.00 (WinBuild.160101.0800) · C:\Windows\system32\rmttpmvscmgrsvr.exe · signed by Microsoft Windows

63c358d7bba1ad1c3d015ef625fdf659ae527595c82366866ab557d1cdc87b06

1.00 (WinBuild.160101.0800) · C:\Windows\system32\rmttpmvscmgrsvr.exe · signed by Microsoft Windows

70e8db1a4173dcef4bb0c6749e0beb9e1049fbfd5eb1715ebfeebdcf921a41b7

1.00 (WinBuild.160101.0800) · C:\WINDOWS\system32\rmttpmvscmgrsvr.exe · signed by Microsoft Windows

af2dab72aa69c3c097f6add69024c0fd0c90f3d8eb01eba99446ce88bfd2fbb6

1.00 (WinBuild.160101.0800) · C:\WINDOWS\system32\rmttpmvscmgrsvr.exe · signed by Microsoft Windows

c20a220428ab9c97d56d20aa784fb5b8159003f08704b06ba649712426dafb09

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.