CmdID

CmdID / Files

tpmvscmgrsvr.exe

TPM Virtual Smart Card Manager COM Server file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real tpmvscmgrsvr.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionTPM Virtual Smart Card Manager COM Server

7 known copies

1.00 (winblue_rtm.130821-1623) · C:\windows\system32\tpmvscmgrsvr.exe · not signed

eac59a86a3b0c97c7b16a0fe6320b1364898a87ee3b3355fc50a71f2c57571ca

1.00 (rs1_release.160715-1616) · C:\Windows\system32\tpmvscmgrsvr.exe · signed by Microsoft Windows

8459844c62db367d69d610cd6d1516aee21d65051e30d49ebe260317071d682a

1.00 (WinBuild.160101.0800) · C:\Windows\system32\tpmvscmgrsvr.exe · signed by Microsoft Windows

1daab7ac618071e392a2ff6de6d8eed170a96e29d064eb67ea9c135e72731b44

1.00 (WinBuild.160101.0800) · C:\Windows\system32\tpmvscmgrsvr.exe · signed by Microsoft Windows

26f532c646277168a3decd7e7d60a33276a1cf6a8dcacc35a9a8498923d50dde

1.00 (WinBuild.160101.0800) · C:\Windows\system32\tpmvscmgrsvr.exe · signed by Microsoft Windows

3fc8800338a6548324d7d35658d265e48f8ea45c5f4de162ff54dd7e35e6310b

1.00 (WinBuild.160101.0800) · C:\WINDOWS\system32\tpmvscmgrsvr.exe · signed by Microsoft Windows

ad9f0c2faf0d12f9fbe55605af2c17695ce0a25df48b8104407c9185f4da1ea8

1.00 (WinBuild.160101.0800) · C:\WINDOWS\system32\tpmvscmgrsvr.exe · signed by Microsoft Windows

c16e9fcfd9726e2b9428a2b1a8378b544e3dbcbf06e2cfbe5d7d8dbd7af5f582

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.