CmdID

CmdID / Files

TpmTool.exe

Program on Windows 6 known copies with hashes Command tpmtool

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real TpmTool.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows

6 known copies

Version not recorded · C:\Windows\system32\TpmTool.exe · signed by Microsoft Windows

490a3e109c39ea9410341da55995d4bfcea89f7194a2728d40d4d06c6a7d38bc

Version not recorded · C:\Windows\SysWOW64\TpmTool.exe · signed by Microsoft Windows

600078577f9773e15eb4148ab54e9b2e56fb9aef08901110648c69d7a7e43d4a

Version not recorded · C:\Windows\SysWOW64\TpmTool.exe · signed by Microsoft Windows

807fd9899f1c852b5350dd975b9a9614c5c7ca6bd1ffa71559a8b840bb0cd9ae

Version not recorded · C:\Windows\system32\TpmTool.exe · signed by Microsoft Windows

8b4c6fc6cf8e6f0fdf56bdebd7601a67336dbbc085d2d8a09893a6dd78de05ce

Version not recorded · C:\WINDOWS\SysWOW64\TpmTool.exe · signed by Microsoft Windows

d638503d61513ee4fa85bb15d8f1ca2f4b6a17a7ee765522128de13c43ecc520

Version not recorded · C:\WINDOWS\system32\TpmTool.exe · signed by Microsoft Windows

e64ab63240d7c36511bf8eea449c9136dba5d67737547b5a476d14f4c721ba11

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.