CmdID

CmdID / Files

tcmsetup.exe

Microsoft Windows(TM) Telephony Administration Setup file version info

Program on Windows 12 known copies with hashes Command tcmsetup

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real tcmsetup.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft Windows(TM) Telephony Administration Setup

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\tcmsetup.exe · signed by Microsoft Windows

b192c79cb20ac634178f1ee45bb89b851f936601a4fc0b30241693e7135b73dc

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\tcmsetup.exe · signed by Microsoft Windows

d51c0d3d0e8384f7e04b50a9cfc2d1bd649b6a4a3b2d75651b870d4dc917e817

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\tcmsetup.exe · signed by Microsoft Windows

d8827fd646b673e259c97417a17abf6f1015b07384801933782337036f18fb25

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\tcmsetup.exe · signed by Microsoft Windows

e243501ba2ef7a6f04f51410bb916faffe0ec23450a4d030ce6bfe747e544b39

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\tcmsetup.exe · signed by Microsoft Windows

19c6583a788aa663ceefde0a177b5192a7965ecae7fee23a600d7c344ebe5386

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\tcmsetup.exe · signed by Microsoft Windows

b0ea88481d83f5e3123ff00fb624f014e0656e62d0b237a81db6e44077f2a22e

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\tcmsetup.exe · signed by Microsoft Windows

7c159cdd1fb7c5359439da809b5beb15e1ffdf769d2249054c36f99c7b9bf609

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\tcmsetup.exe · signed by Microsoft Windows

92d0df82f636dbdf23926615682cb6183de5e7504732aa8543e4d122e316a48e

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\tcmsetup.exe · signed by Microsoft Windows

1445308b23f4b6c5172985e954d9df024c817ea7e8f2f3d9a59b8d311fe843dc

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\tcmsetup.exe · signed by Microsoft Windows

cf56599db317f6e0b50ea224885b835fa972a20b55f44215becb058cefec1866

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\tcmsetup.exe · not signed

69420a6f5a963337087eb774bb3bc4e3ac18ce8a443792591cfca6811e094584

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\tcmsetup.exe · not signed

c1455b1e8c9f3d41b7d131b296215ba912a312907049ca36844d1cf472da2857

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.