CmdID

CmdID / Files

TlbExp.exe

Microsoft .NET Assembly to Type Library Converter file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real TlbExp.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\
C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\x64\
Signed byMicrosoft Corporation
ProductMicrosoft .NET Framework, Microsoft Corporation
DescriptionMicrosoft .NET Assembly to Type Library Converter

2 known copies

4.8.4084.0 built by: NET48REL1 · C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\x64\TlbExp.exe · signed by Microsoft Corporation

60a2bde6b8eea903dd00660b9f9500bb9664004a13f62c9272b5adb28f008bdd

4.8.4084.0 built by: NET48REL1 · C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\TlbExp.exe · signed by Microsoft Corporation

f1947472576ede7bd8c1cbf2c047bacd0974697dccb8e9fd257670d0c16f1307

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.