CmdID

CmdID / Files

TpmInit.exe

TPM Initialization Wizard file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real TpmInit.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionTPM Initialization Wizard

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\TpmInit.exe · signed by Microsoft Windows

a646c2a9e7246e05738cd5570ed8fadb49b7f9822833ab8c1107aec540ab3d96

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\TpmInit.exe · signed by Microsoft Windows

e7cd2f695718f635328bd990ffa4160da0c2600b989bdc601192c66ac24db38d

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\TpmInit.exe · signed by Microsoft Windows

06210a3296cfad3af92253bf998536ba1786a8799bb4cab80ccdf3dde30f0e66

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\TpmInit.exe · signed by Microsoft Windows

ea80b5fc2cc98eea5376f3ef1b1de3c447550ae5ee3c7cc8dfbbe9310c288880

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\TpmInit.exe · signed by Microsoft Windows

437d306c8d29634383cdabc0e91d3790e957d86de3bdd79413d7217190c5a04c

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\TpmInit.exe · signed by Microsoft Windows

6d456fa1d2df8096263c145961eac5f03076dbfdce5cd827987a47a9727834af

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\TpmInit.exe · signed by Microsoft Windows

2a7081195acf53b272040bd4f232691b626b522123d3fe402fca91b3fd64f158

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\TpmInit.exe · signed by Microsoft Windows

452cd44f2920387ad9d25e5285a5c70e2d404f96f61afd48caf3f0dc04645cee

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\TpmInit.exe · signed by Microsoft Windows

33a4096e7bb753373b1499993dc186d705c99debb3d9c13b0af9baefa7575108

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\TpmInit.exe · signed by Microsoft Windows

751ebcf4d4f5ee9e8b0708595037adf6a7e4900763456716d30ce50c2415f2e3

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\TpmInit.exe · not signed

3af0c080f7eabc7da8a65a695dfb01621cb68cd0a905dd3a33a6af70e4a09b50

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\TpmInit.exe · not signed

521a8013c45d99a20f341e1ae9910de797696e79bc6719bb5aa92be967203f3c

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.